Method and system for isolating network transparent service access based on double one-way switching equipment

Abstract

The invention provides a method and a system for isolating network transparent service access based on dual and one-way switching equipment. A service request end sends data to a preposed agent program. A preposition agent program receives the data and marks the identification recombination data of the request end and transmits data to a rear agent program through forward positive one-way transmission equipment; a rear agent program analyzes the request and requests data from the business service; a business service responds and returns data; the rear agent receives the response data for recombination; data is transmitted to a pre-proxy program through reverse one-way transmission equipment; and the front proxy program analyzes the data to obtain the identifier of the request end and returns the data to the service request end. According to the invention, between two physical isolation networks, request data is securely accessed to one-way transmission from the preposed proxy programthrough one-way transmission link, and response data is returned to a service request end from a postposed proxy program through the other reverse one-way link, so that cross-network transparent access of services is completed.

Description

technical field [0001] The invention belongs to the field of information security isolation transmission, specifically a method and system for transparent service access of an isolated network based on double-unidirectional switching equipment, which is suitable for using two one-way non-feedback chains between two physically isolated networks road to realize transparent access to services. Background technique [0002] Industries that require confidentiality, such as the party, government and military to protect state secrets, and enterprises and institutions to protect commercial secrets or customer privacy, a common security method is to physically isolate different networks. The internal network is physically isolated from the Internet, and the hierarchical protection implemented by the Ministry of Public Security also has clear requirements for network isolation. [0003] Recently, technologies such as big data, cloud computing, and artificial intelligence are booming,...

AI Technical Summary

Problems solved by technology

[0005] Aiming at the business transparent access requirements between isolated networks, it is necessary to solve the problem of realizing cross-network transparent access to services while maintaining network isolation. This invention proposes a two-way non-feedback link based on two Encoding, decoding method or optical fiber unidirectional transmission method to solve the problem of inability to access cross-network business resources safely and reliably under the condition of network isolation

Images