Dual physical isolation data one-way transmission system and method

Abstract

The embodiment of the invention provides a dual physical isolation data one-way transmission system and a dual physical isolation data one-way transmission method. The system comprises a sending end,an arbitration end, a receiving end, a first isolation device, a second isolation device and a sensor. The method comprises the steps that a sending end controls a first isolation door to be opened; the arbitration end controls the second isolation door to be opened according to the first isolation door opening signal; the sending end transmits the data to the arbitration end; the sending end controls the first isolation door to be closed after data transmission is completed; the arbitration end controls the second isolation door to be closed according to the first isolation door closing signal; the arbitration end controls a third isolation door to open; the arbitration end transmits the data to the receiving end; after data transmission is finished, the arbitration end controls the thirdisolation door to be closed; and the receiving end sends the received data to the second network device. Double physical isolation of an internal network and an external network can be achieved, safety of high-safety industry internal network information is guaranteed, all components are automatically operated, manual intervention is not needed, and manpower is saved.

Description

technical field [0001] Embodiments of the present invention generally relate to the technical field of information transmission, and more specifically, relate to a system and method for one-way transmission of double physically isolated data. Background technique [0002] The rapid development of information communication technology and Internet technology has changed our life and work style and improved our work efficiency, but it has also brought many security problems, such as network information leakage, viruses and so on. These problems seriously threaten the information security of various enterprises and institutions. However, traditional information security protection technology only detects and controls data transmission at the software level, which cannot meet the requirements for physical isolation between classified networks and external unsafe networks. [0003] Physical isolation means that the internal network must not be directly or indirectly connected to ...

AI Technical Summary

Problems solved by technology

[0004] In actual work, there are many data output requirements between network information systems. One-way shutters have the following risks in this scenario: the risk of covert channels for active transmission. In order to maintain a ready transmission channel, the sending end of the shutter must actively send The underlying synchronous frame and the upper-layer heartbeat packet become the carrier for constructing a time-based covert channel to encode and transmit sensitive information; the information leakage risk of passive escape cannot be trusted. The internal end of the optical gate can logically identify and filter all covert transmissions based on security policies data packets (otherwise the one-way shutter itself does not need to exist)

And these passively escaped data packets themselves can be highly sensitive information; the security bypass risk of structural defects, the internal terminal of the one-way optical gate is accessible to the internal network, and the attacker may destroy the security policy of the internal terminal, resulting in a security protection mechanism. bypassed

Images