Secure computer architecture based on dual-hard-disk cold switching operation

Abstract

The invention provides a secure computer architecture based on double-hard-disk cold switching operation, which realizes security isolation of two operation environments of a common hard disk softwaresystem and a security hard disk software system based on a double-hard-disk cold switching mechanism. Secure exchange of encrypted files between two systems is realized by adopting a data block encrypted hash tag protection mechanism, secure transmission of sensitive files in internet is ensured by adopting random file segmentation and encryption, and a USB HID interface implements strict limitation of a single device function so as to defend attacks from a USB interface. The secure computer architecture capable of accessing an internet application can be realized, the storage security, the processing security and the copying security of sensitive files can be guaranteed by a dual-system running environment isolation mechanism, and the transmission security of the sensitive files in the internet can be guaranteed based on a file encryption and data block encrypted hash tag mechanism.

Description

technical field [0001] The invention relates to the technical field of network security transmission, in particular to a secure computer architecture and method based on cold switching operation of dual hard disks. Background technique [0002] In the existing computer architecture, the adversary may invade the computer system and steal important sensitive information by using the security loopholes in any link of the Internet protocol, file transfer and copy, and USB interface. Various unknown network security threats emerge in endlessly, and network security incidents occur frequently, forcing computers that process sensitive information to never be allowed to access the public Internet. The transmission of sensitive files is greatly restricted, or must rely on VPN encryption machines However, the protection is either carried by reliable personnel or passed in confidential ways, and cannot make full use of the convenience of data communication brought by the public Interne...

AI Technical Summary

Problems solved by technology

Various unknown network security threats emerge in endlessly, and network security incidents occur frequently, forcing computers that process sensitive information to never be allowed to access the public Internet. The transmission of sensitive files is greatly restricted, or must rely on VPN encryption machines The protection of these files is either carried by reliable personnel or passed in confidential ways, and cannot make full use of the convenience of data communication brought by the public Internet that is available everywhere, objectively forming the status quo of protecting sensitive files at the cost of inefficient work.

Images