A data forwarding control method and system based on hardware control logic

Abstract

The invention discloses a data forwarding control method based on hardware control logic and a corresponding data forwarding control system. The method includes: connecting a terminal protection device externally to a protected host, and taking over all data interfaces of the protected host; When an external device exchanges data with the protected host through the terminal protection device, the hardware control logic inside the terminal protection device controls the connection and / or disconnection of the physical line corresponding to the data forwarding, so as to control the transfer of data between the external device and the protected host interact. The present invention can achieve the functions of controlling and protecting various types of data without installing data monitoring and safety protection software on the protected host, realizes the isolation of physical lines through hardware control logic, and better realizes the safety control of data forwarding Effect, and then comprehensively solve the security risks such as virus Trojan implantation and malicious code injection that may be generated by each interface.

Description

technical field [0001] The invention belongs to the technical field of computer security, and in particular relates to a data forwarding control method based on hardware control logic and a corresponding data forwarding control system. Background technique [0002] In recent years, the rapid development of computer and network technology has greatly promoted the popularization of the network. While people are increasingly enjoying the convenience brought by the network, it has also brought new challenges to the data security in the computers used by people in production / life. New threats, such as common malicious code intrusion, virus / trojan horse infection, traffic attack, hacker theft, unauthorized access, posing as a legitimate user, destroying data integrity, interfering with the normal operation of the system, using the network to spread viruses and man-in-the-middle eavesdropping, etc. . [0003] There are many technical means to solve the problem of computer network ...

AI Technical Summary

Problems solved by technology

According to statistics, 70% of computer crimes are caused by the illegal use of key resources such as hosts by insiders, and only 30% of the real threats come from outside. The external equipment is not standardized, and it is implanted with virus or Trojan horse back door, which will lead to data leakage, virus infection, system crash and even network paralysis. impact or even major loss

[0004] At the same time, for some special equipment, such as the host equipped with special software control, the equipment of the engineer station / worker station in some industrial fields, these hosts / equipment are often not suitable for such systems on the market due to the particularity of the system. Data control software and security protection software, or due to data control software or security software, it is easy to cause compatibility problems with the original software of the host, and even performance is affected

In addition, the hosts of these engineer stations / worker stations will basically not upgrade the operating system after they go online. Even after installing traffic monitoring and security software, they often do not update the anti-malicious code software version and malicious code library in time, which cannot achieve comprehensive protection. Data flow control and security protection

Images