1bit response data transmission isolation device

Abstract

The invention provides a 1bit response data transmission isolation device, which is characterized in that a data transmitting end is connected with first safety zone equipment and a data receiving end, and is used for transmitting a message to the data receiving end, and the message comprises a state request domain, a state request type and data information; a 1bit response signal sent by the data receiving end is received; subsequent message processing is determined according to the state request domain and the 1bit response signal in the sent message; and the data receiving end is connected with second safety zone equipment and is used for determining the 1bit response signal and whether to send the received message to the second safety zone equipment or not according to the state request domain and the state request type in the received message, and sending the 1bit response signal to the data transmitting end. According to the invention, after a data receiving end is broken through, when a data transmitting end is attacked, the security of a safety zone connected with the data transmitting end is prevented from being damaged; and the sensitive data of the data receiving end can be effectively prevented from being leaked to the data transmitting end.

Description

technical field [0001] This article relates to the field of information security technology, in particular to a 1-bit response data transmission isolation device. Background technique [0002] The Internet has become an indispensable part of people's study, life and work. Due to the flexibility, openness and remote communication characteristics of the Internet, it is very vulnerable to attacks. Once a network security incident occurs, it will cause huge losses to the country, enterprises, and individuals. For some special departments such as government, bank, electric power and so on, the issue of network security is particularly important. It is of great practical significance to find a way to not only ensure the security of the internal network information of these special units, but also exchange data with the external network as much as possible to meet certain business needs. [0003] In the prior art, for devices in two security zones with different security levels, ...

AI Technical Summary

Problems solved by technology

[0005] This article is used to solve the problem of isolating both ends in the prior art by sending Ethernet response messages to realize the response of the data sender and the data receiver. After the data receiver is compromised, an attack on the data sender will be launched through the reverse transmission channel. There are hidden dangers of undermining the security of the security zone connected to the data sender, and the problem that sensitive data at the data receiver will be sent to the data sender

Images