Network safety isolating and information exchanging system and method based on proxy mapping

Abstract

The invention relates to network security isolation based on agent mapping and information exchanging system and its method. It uses in information exchanging field and network data exchanging field. The in-out net processing units are each connected to the inner net and the outer net in the system. Isolation exchanging unit includes isolation switching controller and isolation storage. The in-out net processing units are connected to the isolation switching controller through high speed data transmission line. The isolation switching controller is connected to the isolation storage. Only one of the in-out net processing units can assess the isolation storage. The in-out net processing units exchange the information through the isolation exchanging unit. The inner net processing unit includes an agent stub and the outer net processing unit includes an agent engine. The method of the invention is that the inner defined transmission interface is called by the agent stub and the agent engine, and the date is exchanged between the in-out net processing units by isolation exchanging unit. So this can construct an information exchanging channel between the inner net client end and the outer net server in the form of agent mapping.

Description

technical field [0001] The invention relates to a system and method for network security isolation and information exchange, in particular to a system and method for network security isolation and information exchange based on proxy mapping. It is used in the fields of information security and network data exchange. Background technique [0002] The currently widely used network border security protection mechanism is implemented through firewalls. The implementation technologies of firewall include mainly packet filtering, application proxy and state inspection. Since the hardware architecture of the firewall adopts a single bastion host, once it is captured by hackers, the firewall will completely lose its effectiveness. Therefore, ordinary network firewall products can no longer meet the security requirements of important networks and data. For users with high-level requirements for network security, such as finance, government and scientific research institutions, the...

AI Technical Summary

Problems solved by technology

The disadvantage of this method is that the user needs to go through two complete caches and forwards to receive or send data, which is equivalent to two proxy servers on the internal and external networks mirroring and synchronizing data through security isolation and information exchange systems. The real-time performance and scalability are poor.

In addition, in addition to the security isolation and information exchange system, users also need to configure additional internal and external network servers, which increases user costs and management complexity

Images