Security interaction system and method, electronic equipment and storage medium

Abstract

The invention provides a security interaction system and method, electronic equipment and a storage medium, and relates to the technical field of data security, and the system comprises a terminal module which is used for encrypting user input information and then transmitting the encrypted user input information to an intranet terminal in a one-way manner; the intranet terminal is used for transmitting the captured encrypted user input information to decryption equipment for decryption; the decryption equipment is used for decrypting the encrypted user input information and then transmitting the decrypted user input information to an external network host; and the extranet host is used for responding to the information input by the user, generating display information and transmitting the display information to the intranet terminal for displaying.

Description

Technical Field

[0001] The present invention relates to the field of data security technology, and in particular to a secure interaction system, method, electronic device and storage medium. Background Art

[0002] For cross-network access scenarios of information systems, most current solutions are to use remote desktop software or thin clients on intranet terminal computers to access hosts on another network, and to access external networks from the intranet through hosts on another network.

[0003] Although cross-network access technology can meet the needs of cross-network access, there are many security risks. Therefore, how to better ensure the security of interaction has become an urgent problem to be solved in the industry. Summary of the invention

[0004] The present invention provides a secure interaction system, method, electronic device and storage medium, which are used to solve the problem of how to better ensure the security of interaction in the prior art.

[0005] The present invention provides a secure interactive system, comprising: A terminal module, wherein the terminal module is used to encrypt the user input information and then transmit the encrypted user input information to the intranet terminal in a one-way manner; An intranet terminal, the intranet terminal is used to transmit the captured encrypted user input information to a decryption device for decryption; A decryption device, which decrypts the encrypted user input information and transmits the decrypted user input information to an external network host; The external network host is used to respond to the user input information and generate display information, and transmit the display information to the internal network terminal for display.

[0006] According to a secure interactive system provided by the present invention, the terminal module comprises: a data transceiver interface, an encryption unit, and a one-way transmission unit; Wherein, the data transceiver interface is used to receive user input information; Wherein, the encryption unit encrypts the user input information by using a preset encryption algorithm to obtain encrypted user input information; The one-way transmission unit transmits the encrypted user input information to the decryption device in one direction.

[0007] According to a secure interactive system provided by the present invention, the one-way transmission unit comprises: a photoelectric signal conversion module and an optical one-way component; The photoelectric signal conversion module is used to convert the user input information into a photoelectric signal corresponding to the user input information; The optical unidirectional component transmits the photoelectric signal to the intranet terminal via infrared light.

[0008] According to a secure interactive system provided by the present invention, the intranet terminal comprises: a data receiving module, a data sending module, and a display rendering module; The data receiving module is used to receive the encrypted user input information, and send the encrypted user input information to the decryption device through the data sending module; The display rendering module is used to receive display information transmitted by the external network host and render it on the internal network terminal.

[0009] According to a secure interactive system provided by the present invention, the external network host comprises: an external network port, a processing device and a display information sending module; Wherein, the processing device is used to obtain external network data through the external network port to process the user input information to generate display information; Wherein, the display information sending module is used to transmit the display information to the intranet terminal for display.

[0010] According to a secure interactive system provided by the present invention, the decryption device is further used for: When decryption of the encrypted user input information fails, the encrypted user input information is discarded, and an alarm message is generated and fed back to the intranet terminal.

[0011] The present invention also provides a secure interaction method based on any of the secure interaction systems described above, comprising: When the terminal device receives the user input information, the terminal device encrypts the user input information and transmits the encrypted user input information unidirectionally to the intranet terminal; The intranet terminal transmits the captured encrypted user input information to the decryption device for decryption. After the decryption device decrypts the encrypted user input information, the decrypted user input information is transmitted to the external network host. The external network host responds to the user input information and generates display information, and transmits the display information to the internal network terminal for display.

[0012] According to the secure interaction method provided by the present invention, after the step of transmitting the captured encrypted user input information to the decryption device for decryption, the method further comprises: In the case where the decryption device fails to decrypt the encrypted user input information, the encrypted user input information is discarded, and an alarm message is generated and fed back to the intranet terminal.

[0013] The present invention also provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, any of the above-described secure interaction methods is implemented.

[0014] The present invention also provides a non-transitory computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the secure interaction method described in any one of the above methods is implemented.

[0015] The present invention also provides a computer program product, comprising a computer program, wherein when the computer program is executed by a processor, the computer program implements any of the above-mentioned secure interaction methods.

[0016] The secure interactive system, method, electronic device and storage medium provided by the present invention complete the encryption process in the terminal module, ensuring that the encrypted information has been encrypted before being transmitted to the intranet terminal. Even if the intranet terminal is attacked, the attacker cannot obtain the encryption key because the key is stored in the terminal module, and the data can only be transmitted from the terminal module to the intranet terminal to prevent the formation of an attack loop. The encrypted information is isolated during the one-way transmission process to ensure that the data is not tampered with or eavesdropped. In the present invention, the encryption process is completed in the terminal module before the intranet terminal. Even if the intranet terminal is attacked, the attacker cannot obtain the encryption key, thereby failing to form a complete attack link, thereby ensuring the security of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the technical solutions in the present invention or the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0018] Figure 1 It is a schematic diagram of the structure of the security interaction system provided by the present invention; Figure 2 A schematic diagram of the flow of the secure interaction method provided by the present invention; Figure 3 It is a structural schematic diagram of the electronic device provided by the present invention. DETAILED DESCRIPTION

[0019] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be clearly and completely described below in conjunction with the drawings of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0020] Figure 1 is a schematic diagram of the structure of the security interaction system provided by the present invention, such as Figure 1 As shown, including: The terminal module 11 is used to encrypt the user input information and then transmit the encrypted user input information to the intranet terminal in one direction; In the present invention, the terminal module is responsible for receiving the user's input information, mainly including keyboard and mouse data. The keyboard and mouse data can be data input by the user through the mouse and keyboard, which can be the user's remote operation data for the external network device.

[0021] In the present invention, the terminal module encrypts the user input information to ensure that the data is not eavesdropped or tampered with during the transmission process.

[0022] The encrypted user input information is sent to the intranet terminal through a one-way transmission channel, ensuring that the data can only be transmitted from the terminal module to the intranet terminal, but not in the reverse direction. The terminal device can use optical one-way isolation technology to ensure that the data can only be transmitted from the terminal module to the intranet terminal. The data transmission controller manages the sending and transmission rate of the data to ensure stable data transmission.

[0023] In the present invention, the terminal module plays a key role in ensuring the secure transmission of data. In particular, the encryption process is completed before the intranet terminal. Even if the intranet terminal is attacked, the attacker cannot obtain the encryption key, thereby failing to form a complete attack link, thus ensuring the security of the system.

[0024] Intranet terminal 12, the intranet terminal is used to transmit the captured encrypted user input information to the decryption device for decryption; In the present invention, the intranet terminal receives encrypted user input information from the terminal module through the network interface. The received encrypted data is stored in the receiving buffer to ensure that the data is not lost during the processing. The format and integrity of the received encrypted data are verified to ensure that the data is valid.

[0025] Then, the intranet terminal transmits the captured encrypted user input information to the decryption device for decryption.

[0026] In the present invention, the intranet terminal plays a key role in ensuring the secure transmission of data. In particular, the encryption process is completed before the intranet terminal. Even if the intranet terminal is attacked, the attacker cannot obtain the encryption key, thereby failing to form a complete attack link, thus ensuring the security of the system.

[0027] A decryption device 13, which decrypts the encrypted user input information and transmits the decrypted user input information to an external network host; In the present invention, the decryption device receives encrypted user input information from an intranet terminal, decrypts the encrypted user input information, verifies the legitimacy of the source of the data, and transmits the decrypted user input information to an external network host.

[0028] In an optional embodiment, the terminal module and the decryption device use the same symmetric encryption algorithm, such as SM4 (block cipher algorithm). The decryption device implements the same decryption algorithm as the terminal module and can correctly parse and decrypt the data encrypted by the terminal module.

[0029] During the system initialization phase, the terminal module and the decryption device use an asymmetric algorithm (such as SM2, elliptic curve public key cryptography) to negotiate and generate a pair of encryption / decryption keys. The generated key is passed to the decryption device through a secure communication protocol, and the decryption device stores the key in a secure hardware module to ensure the security and non-tamperability of the key.

[0030] The terminal module and the decryption device need to follow the same protocol and data format to ensure that the data can be transmitted and parsed correctly. The decryption device can correctly decrypt the encrypted information of the terminal module to ensure the secure transmission and processing of data.

[0031] The external network host 14 is used to respond to the user input information and generate display information, and transmit the display information to the internal network terminal for display.

[0032] In the present invention, the external network host performs corresponding operations according to the received user input information, generates display information for the internal network terminal to render and display, and transmits the generated display information to the internal network terminal.

[0033] In the present invention, the encryption process is completed in the terminal module, ensuring that the encrypted information has been encrypted before being transmitted to the intranet terminal. Even if the intranet terminal is attacked, the attacker cannot obtain the encryption key because the key is stored in the terminal module, and the data can only be transmitted from the terminal module to the intranet terminal to prevent the formation of an attack loop. The encrypted information is isolated during the one-way transmission process to ensure that the data is not tampered with or eavesdropped. In the present invention, the encryption process is completed in the terminal module before the intranet terminal. Even if the intranet terminal is attacked, the attacker cannot obtain the encryption key, thereby failing to form a complete attack link, thereby ensuring the security of the system.

[0034] Optionally, the terminal module includes: a data transceiver interface, an encryption unit, and a one-way transmission unit; Wherein, the data transceiver interface is used to receive user input information; Wherein, the encryption unit encrypts the user input information by using a preset encryption algorithm to obtain encrypted user input information; The one-way transmission unit transmits the encrypted user input information to the decryption device in one direction.

[0035] In the present invention, the data transceiver interface receives the user's mouse and keyboard input data, which can be connected to the user's mouse and keyboard using a USB interface or other standard interfaces.

[0036] In the present invention, the encryption unit encrypts the captured mouse input data. Specifically, the input data can be encrypted using the Advanced Encryption Standard (AES) or other high-intensity encryption algorithms. The key is stored in a secure hardware module to ensure the security and non-tamperability of the key.

[0037] In the present invention, the unidirectional transmission unit sends the encrypted data to the intranet terminal through another data transceiver interface. Specifically, optical unidirectional isolation technology can be used to ensure the unidirectionality of data transmission. It is responsible for controlling the sending and transmission rate of data to ensure stable data transmission.

[0038] In the present invention, optical unidirectional isolation technology is used to ensure that data can only be transmitted from the terminal module to the intranet terminal to prevent the formation of an attack loop. Specifically, it can be transmitted unidirectionally through a unidirectional transmission unit and then transmitted to the unidirectional transmission unit through another data transceiver interface. The encryption process is completed in the terminal module to ensure that the encrypted information has been encrypted before being transmitted to the intranet terminal. Even if the intranet terminal is attacked, the attacker cannot obtain the encryption key because the key is stored in the terminal module. Therefore, the attacker cannot form a complete attack link, thereby ensuring the security of the data.

[0039] Optionally, the unidirectional transmission unit comprises: an optoelectronic signal conversion module and an optical unidirectional component; The photoelectric signal conversion module is used to convert the user input information into a photoelectric signal corresponding to the user input information; The optical unidirectional component transmits the photoelectric signal to the intranet terminal via infrared light.

[0040] In the present invention, the photoelectric signal conversion module is used to convert the user input information into a photoelectric signal corresponding to the user input information.

[0041] It may specifically include: an input interface for receiving encrypted user input information generated by an encryption unit; The signal modulator modulates the received electrical signal into an optical signal; the signal amplifier amplifies the optical signal to ensure the strength of the signal during transmission.

[0042] The optical unidirectional unit can transmit the photoelectric signal to the intranet terminal through the single-mode optical fiber.

[0043] In the present invention, single-mode optical fiber can efficiently transmit optical signals, ensuring that data loss during transmission is minimal. This allows encrypted user input information to maintain high quality during long-distance transmission. In addition, single-mode optical fiber is combined with an optoelectronic signal conversion module and an optical unidirectional unit to ensure that data can only be transmitted from the terminal module to the intranet terminal, but not in the reverse direction. This effectively prevents attackers from forming an attack loop through reverse data flow. The physical properties of single-mode optical fiber isolate data during transmission, ensuring that data is not eavesdropped or tampered with.

[0044] Optionally, the intranet terminal includes: a data receiving module, a data sending module, and a display rendering module; The data receiving module is used to receive the encrypted user input information, and send the encrypted user input information to the decryption device through the data sending module; The display rendering module is used to receive display information transmitted by the external network host and render it in the intranet terminal. In the present invention, the data receiving module is used to receive encrypted user input information sent by the terminal device. The module passively receives data through a one-way transmission channel to ensure that data can only flow from the terminal device to the intranet terminal.

[0045] The data transmission module is responsible for sending the received encrypted user input information to the decryption device. The module and the decryption device perform one-way data transmission through an internal channel to ensure that data will not be transmitted back from the decryption device to the intranet terminal.

[0046] The display rendering module is used to receive the display information transmitted by the external network host and render it on the internal network terminal. This module receives the display information from the external network host through a one-way transmission channel, decodes, parses and converts it into a format that can be displayed by the internal network terminal, and finally displays it to the user on the screen.

[0047] Optionally, the external network host includes: an external network port, a processing device and a display information sending module; Wherein, the processing device is used to obtain external network data through the external network port to process the user input information to generate display information; Wherein, the display information sending module is used to transmit the display information to the intranet terminal for display.

[0048] In the present invention, the external network port is the data transmission interface between the external network host and the internal network terminal, which is responsible for receiving user input information sent by the internal network terminal and feeding back display information to the internal network terminal. It needs to be compatible with specific network protocols and data formats to ensure efficient communication with the internal network terminal.

[0049] In the present invention, the display information sending module is responsible for transmitting the display information generated by the processing device to the intranet terminal for display. The key lies in ensuring the data integrity and sequence during the transmission process, and adjusting the transmission rate according to the network conditions to reduce delays and ensure that user operations receive timely feedback.

[0050] The external network host independently processes user input and display information generation, and is separated from the internal network terminal to prevent the internal network from being directly attacked from the outside. Combined with the encryption and one-way transmission technology of the terminal module, the external network host only processes data transmitted from the internal network terminal in cross-network interaction, and all information is encrypted, effectively blocking the cross-network attack loop. Focusing on display information generation and transmission, ensure that users can view the external network operation results in a timely and accurate manner on the internal network terminal, and improve the user experience of cross-network access.

[0051] Optionally, the decryption device is further used for: When decryption of the encrypted user input information fails, the encrypted user input information is discarded, and an alarm message is generated and fed back to the intranet terminal.

[0052] In the present invention, the decryption device receives the encrypted user input information from the intranet terminal, decrypts the encrypted user input information, verifies the legitimacy of the source of the data, transmits the decrypted user input information to the external network host, and if the decryption fails, discards the encrypted user input information and generates an alarm message to feed back to the intranet terminal.

[0053] Figure 2 A schematic diagram of the flow of the secure interaction method provided by the present invention is shown in FIG. Figure 2 As shown, including: Step 210, when the terminal device receives the user input information, the terminal device encrypts the user input information and transmits the encrypted user input information unidirectionally to the intranet terminal; In the present invention, when a user operates an input device such as a mouse and a keyboard on a terminal device, the input information generated will be captured by the terminal module. These original input data will be encrypted using a specific encryption algorithm before transmission. The purpose of encryption is to ensure the confidentiality and integrity of the data during transmission and to prevent attackers from stealing or tampering with the data during transmission. The encryption algorithm can be various symmetric encryption algorithms, such as AES, or asymmetric encryption algorithms, such as RSA. The specific selection depends on the design and security requirements of the system.

[0054] The encrypted user input information is sent to the intranet terminal through a one-way transmission channel. One-way transmission here means that data can only flow from the terminal device to the intranet terminal, but not in the opposite direction. This one-way nature is the key to blocking cross-network attack loops, which breaks the two-way communication mechanism that attackers may exploit. Even if attackers are able to intercept or tamper with the data in transit, since data can only flow in one direction, they cannot send malicious requests to the terminal device through this channel or establish a reverse communication connection.

[0055] Step 220, the intranet terminal transmits the captured encrypted user input information to a decryption device for decryption, and the decryption device decrypts the encrypted user input information and transmits the decrypted user input information to an external network host; In the present invention, the receiving program of the intranet terminal passively receives the encrypted user input information from the terminal device. The information is sent through a one-way transmission channel to ensure that the data can only flow from the terminal device to the intranet terminal.

[0056] The intranet terminal transmits the received encrypted data to the decryption device through the internal channel. This process is one-way, ensuring that the data will not be transmitted back from the decryption device to the intranet terminal.

[0057] The intranet terminal transmits the captured encrypted user input information to the decryption device. The decryption device is usually a specially designed hardware module, such as a field programmable gate array (FPGA), which is responsible for decrypting the encrypted data.

[0058] The decryption device uses a preset key or algorithm to decrypt the encrypted data. The decryption device is usually highly secure and can prevent the data from being stolen or tampered with during the decryption process.

[0059] If the decryption is successful, the decryption device will send the decrypted data to the external host. If the decryption fails, the decryption device will discard the data and record an alarm.

[0060] Step 230: the external network host responds to the user input information and generates display information, and transmits the display information to the internal network terminal for display.

[0061] In the present invention, after receiving the decrypted user input information transmitted from the intranet terminal, the external network host will perform corresponding operations according to the information. For example, the command input by the user through the keyboard will be executed by the external network host, and the mouse operation will be responded to by the external network host.

[0062] After executing the commands entered by the user or responding to the mouse operation, the external network host will generate corresponding display information, which can be images, texts or other visual contents on the screen.

[0063] The external network host sends the generated display information back to the internal network terminal through a one-way transmission channel. After receiving the display information, the internal network terminal will render it so that the user can see the operation results.

[0064] In the present invention, the encryption process is completed in the terminal module, ensuring that the encrypted information has been encrypted before being transmitted to the intranet terminal. Even if the intranet terminal is attacked, the attacker cannot obtain the encryption key because the key is stored in the terminal module, and the data can only be transmitted from the terminal module to the intranet terminal to prevent the formation of an attack loop. The encrypted information is isolated during the one-way transmission process to ensure that the data is not tampered with or eavesdropped. In the present invention, the encryption process is completed in the terminal module before the intranet terminal. Even if the intranet terminal is attacked, the attacker cannot obtain the encryption key, thereby failing to form a complete attack link, thereby ensuring the security of the system.

[0065] Optionally, after the step of transmitting the captured encrypted user input information to a decryption device for decryption, the method further comprises: In the case where the decryption device fails to decrypt the encrypted user input information, the encrypted user input information is discarded, and an alarm message is generated and fed back to the intranet terminal.

[0066] In the present invention, when the decryption device decrypts the received encrypted user input information, it will use a preset key or algorithm to operate. If any of the following situations occurs during the decryption process, it will be judged as a decryption failure: key mismatch, the key used by the decryption device is inconsistent with the key used during encryption; data corruption, the encrypted data is tampered with or damaged during transmission, resulting in inability to correctly decrypt; illegal data format, the format of the encrypted data does not meet expectations and cannot be correctly parsed.

[0067] Once the decryption device determines that the encrypted user input information has failed to be decrypted, it will immediately discard the information. The discard operation ensures that illegal or damaged data will not be further processed, thereby preventing potential security threats from entering the system.

[0068] Figure 3 is a schematic diagram of the structure of the electronic device provided by the present invention, such as Figure 3 As shown, the electronic device may include: a processor 310, a communications interface 320, a memory 330 and a communication bus 340, wherein the processor 310, the communications interface 320 and the memory 330 communicate with each other through the communication bus 340. The processor 310 may call the logic instructions in the memory 330 to execute the security interaction method, which includes: when the terminal device receives user input information, the terminal device encrypts the user input information and then unidirectionally transmits the encrypted user input information to the intranet terminal; The intranet terminal transmits the captured encrypted user input information to the decryption device for decryption. After the decryption device decrypts the encrypted user input information, the decrypted user input information is transmitted to the external network host. The external network host responds to the user input information and generates display information, and transmits the display information to the internal network terminal for display.

[0069] In addition, the logic instructions in the above-mentioned memory 330 can be implemented in the form of a software functional unit and can be stored in a computer-readable storage medium when it is sold or used as an independent product. Based on such an understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc. Various media that can store program codes.

[0070] On the other hand, the present invention further provides a computer program product, the computer program product includes a computer program, the computer program can be stored on a non-transitory computer-readable storage medium, and when the computer program is executed by a processor, the computer can execute the secure interaction method provided by the above methods, the method comprising: when a terminal device receives user input information, the terminal device encrypts the user input information, and then unidirectionally transmits the encrypted user input information to an intranet terminal; The intranet terminal transmits the captured encrypted user input information to the decryption device for decryption. After the decryption device decrypts the encrypted user input information, the decrypted user input information is transmitted to the external network host. The external network host responds to the user input information and generates display information, and transmits the display information to the internal network terminal for display.

[0071] In another aspect, the present invention further provides a non-transitory computer-readable storage medium having a computer program stored thereon, which is implemented when the computer program is executed by a processor to execute the secure interaction method provided by the above methods, the method comprising: when a terminal device receives user input information, the terminal device encrypts the user input information and then unidirectionally transmits the encrypted user input information to an intranet terminal; The intranet terminal transmits the captured encrypted user input information to the decryption device for decryption. After the decryption device decrypts the encrypted user input information, the decrypted user input information is transmitted to the external network host. The external network host responds to the user input information and generates display information, and transmits the display information to the internal network terminal for display.

[0072] The device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative labor.

[0073] Through the description of the above implementation methods, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a necessary general hardware platform, and of course, can also be implemented by hardware. Based on this understanding, the above technical solution is essentially or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or some parts of the embodiments.

[0074] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A secure interactive system, characterized in that: include: A terminal module, wherein the terminal module is used to encrypt the user input information and then transmit the encrypted user input information to the intranet terminal in a one-way manner; An intranet terminal, the intranet terminal is used to transmit the captured encrypted user input information to a decryption device for decryption; A decryption device, which decrypts the encrypted user input information and transmits the decrypted user input information to an external network host; The external network host is used to respond to the user input information and generate display information, and transmit the display information to the internal network terminal for display.

2. The security interaction system according to claim 1, characterized in that: The terminal module includes: a data transceiver interface, an encryption unit, and a one-way transmission unit; The data transceiver interface is used to receive user input information; The encryption unit encrypts the user input information by using a preset encryption algorithm to obtain encrypted user input information; The one-way transmission unit unidirectionally transmits the encrypted user input information to the decryption device.

3. The security interaction system according to claim 2, characterized in that: The one-way transmission unit comprises: an optoelectronic signal conversion module and an optical one-way component; The photoelectric signal conversion module is used to convert the user input information into a photoelectric signal corresponding to the user input information; The optical unidirectional component transmits the photoelectric signal to the intranet terminal via infrared light.

4. The security interaction system according to claim 3, characterized in that: The intranet terminal comprises: a data receiving module, a data sending module, and a display rendering module; The data receiving module is used to receive the encrypted user input information, and send the encrypted user input information to the decryption device through the data sending module; The display rendering module is used to receive display information transmitted by the external network host and render it on the internal network terminal.

5. The security interaction system according to claim 1, characterized in that: The external network host includes: an external network port, a processing device and a display information sending module; The processing device is used to obtain external network data through the external network port to process the user input information to generate display information; The display information sending module is used to transmit the display information to the intranet terminal for display.

6. The security interaction system according to claim 1, characterized in that: The decryption device is further used for: When decryption of the encrypted user input information fails, the encrypted user input information is discarded, and an alarm message is generated and fed back to the intranet terminal.

7. A secure interaction method based on the secure interaction system according to any one of claims 1 to 6, characterized in that: include: When the terminal device receives the user input information, the terminal device encrypts the user input information and transmits the encrypted user input information unidirectionally to the intranet terminal; The intranet terminal transmits the captured encrypted user input information to the decryption device for decryption. After the decryption device decrypts the encrypted user input information, the decrypted user input information is transmitted to the external network host. The external network host responds to the user input information and generates display information, and transmits the display information to the internal network terminal for display.

8. The secure interaction method according to claim 7, characterized in that: After the intranet terminal transmits the captured encrypted user input information to the decryption device for decryption, the method further includes: In the case where the decryption device fails to decrypt the encrypted user input information, the encrypted user input information is discarded, and an alarm message is generated and fed back to the intranet terminal.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein: When the processor executes the computer program, the secure interaction method according to any one of claims 7 to 8 is implemented.

10. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the secure interaction method according to any one of claims 7 to 8 is implemented.

Images