Device and method for isolating internal and external networks and exchanging data based on unidirectional transmission physical media

Abstract

The invention discloses an internal and external network boundary isolation and data exchange technology based on a one-way transmission physical medium, and relates to the field of information security. The present invention uses a one-way transmission physical medium to set up a two-way isolation and protection channel for data, realizes the physical network link isolation and logical link connection of the internal and external networks, and realizes the real-time data exchange between the external network and the internal network within a controllable range. Inside the device, The uplink and downlink isolation protection channels are respectively responsible for the uplink and downlink data exchange on both sides of the device, ensuring that only authorized data can reach the other end through the device, and the isolation layer cannot interact with the networks on both sides of the device, ensuring that the isolation layer will not be affected by external intrusion or collapse due to internal damage. The invention provides the duplex one-way transmission supported by the TCP / UDP full protocol, and solves the defects that the access control module cannot directly interact with both ends when the access control module is placed in the isolated area, and the firewall is easily invaded by the outside or destroyed by the inside.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a method for isolating internal and external networks and exchanging data. Background technique [0002] With the rapid development of computer technology, network information security has become an important guarantee for social development, which stores a lot of sensitive information, even state secrets, which will inevitably attract various human attacks from all over the world (such as information leakage, information theft, data tampering, data deletion, computer virus, etc.). During network data exchange, service systems usually have the following two security requirements: [0003] 1. For services on the Internet, it is necessary to solve and prevent security issues from the Internet, and prevent intrusion from the Internet to the service intranet. [0004] 2. The two service systems need to exchange data with each other, and they also need to prevent securi...

AI Technical Summary

Problems solved by technology

[0006] However, the above-mentioned network isolation technology adopts the traditional optical gate isolation implementation scheme and cannot provide real-time transmission services. The access control module directly interacts with both ends of the internal and external networks, and the firewall is vulnerable to external intrusion or internal damage.

Images