Cross-network segment data security transmission device
By encrypting the URL address and checking the receiver in the cross-network data transmission device, the risk of network errors and leakage during data transmission is solved, and higher data security is achieved.
Patent Information
- Application Number
- CN202420808868.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Utility models(China)
- Current Assignee / Owner
- Filing Date
- 2024-04-18
- Publication Date
- 2025-02-18
- Estimated Expiration
- 2034-04-18
AI Technical Summary
During the data transmission process across network segments, there is a risk of network transmission errors and data leakage, and the prior art is difficult to effectively solve these problems.
A cross-network data security transmission device is designed, including a secure transmission unit and a cross-network unit. By encrypting the URL address of the information transmission and performing URL verification on the receiving end, ensuring that only the correct URL address can decrypt the information data.
It improves the security of cross-network information transmission, prevents data from being intercepted and leaked, and ensures that information is only decrypted and used on legal transmission paths through encryption and verification mechanisms.
Smart Images
Figure CN222509339U_ABST
Abstract
Description
Technical Field
[0001] The utility model relates to the technical field of cross-network data transmission, in particular to a cross-network segment data security transmission device. Background Art
[0002] With the construction of information systems in various places, different business departments have established their own business systems. At present, in order to facilitate the rapid exchange of information, data from different departments and industries will also be exchanged across network segments. In the process of cross-segment transmission of network data, network transmission errors may occur, causing part of the transmitted information to be intercepted by other devices during the transmission path, thus increasing the risk of information data leakage. In order to improve the security of data transmission, a secret key will be set before data transmission. However, when the data is intercepted, there is still the possibility of data leakage. In order to improve the security of data transmission, this case proposes a cross-segment data security transmission device. Summary of the invention
[0003] The purpose of the utility model is to provide a device for securely transmitting data across network segments to solve the problems raised in the above-mentioned background technology.
[0004] To achieve the above-mentioned purpose, the utility model provides a cross-segment data secure transmission device, including a secure transmission unit and a cross-segment unit, the secure transmission unit and the cross-segment unit are electrically connected to each other, the data in the secure transmission unit is transmitted to the cross-segment unit, the cross-segment unit processes the data according to the information data transmitted by the secure transmission unit, the secure transmission unit includes a transmission end and a receiving end, the transmission end and the receiving end are not in the same network node, there is no electrical connection between the transmission end and the receiving end, and at the same time, the transmission end and the receiving end are both electrically connected to the cross-segment unit, the transmission end transmits information to the cross-segment unit, the cross-segment unit encrypts the website address of the information, the receiving end receives the information transmitted by the cross-segment unit, and verifies the information after receiving it.
[0005] The delivery end transmits initial data to the cross-segment unit, so that the cross-segment unit receives the data transmission information. The cross-segment unit encrypts the URL address according to the information transmitted by the delivery end, and transmits the information transmitted by the delivery end back to the delivery end after the encryption is completed. The delivery end performs overall key encryption, and the encryption is completed. The cross-segment unit transmits it. The receiving end receives the information data transmitted by the cross-segment unit and verifies the information after receiving it.
[0006] As a further improvement of the present technical solution, the delivery end includes a delivery controller and a key encryptor. There is no electrical connection between the delivery controller and the key encryptor. The delivery controller identifies information data that needs to be transmitted across network segments and transmits the identified information data to the cross-network segment unit. The key encryptor performs key encrypting on the information data across network segments.
[0007] As a further improvement of the present technical solution, the cross-segment unit includes a network point determiner, a network address designator and a transmission channel setter. The network point determiner is electrically connected to the network address designator and the transmission channel setter respectively. The network address designator and the transmission channel setter are electrically connected to each other. The network point determiner determines the network point of the cross-network data of the information data, the network address designator specifies the network address of the network point determined by the network point determiner, and the transmission channel setter sets the cross-network transmission channel according to the network point information and the network address determined by the network point determiner and the transmission channel setter.
[0008] As a further improvement of the present technical solution, the transport controller and the network point determiner are electrically connected, the key encryptor and the transmission channel setter are electrically connected, the transport controller transmits the information data identified to be transmitted across network segments to the network point determiner, the key encryptor receives the information data of the transmission channel set by the transmission channel setter, and performs key encryption on the received information data.
[0009] As a further improvement of the present technical solution, the cross-segment unit also includes a data transmitter, which is electrically connected to a key encryptor. The key encryptor transmits the information data encrypted by the key to the data transmitter, and the data transmitter transmits the information data to a receiving end.
[0010] As a further improvement of the present technical solution, the receiving end includes a URL verifier and a decompressor, the URL verifier and the decompressor are electrically connected, the URL verifier and the data transmitter are electrically connected, the URL verifier receives the information data transmitted by the data transmitter, the URL verifier verifies the URL address of the information data, and after the verification is completed, the decompressor decompresses the information data.
[0011] Compared with the prior art, the utility model has the following beneficial effects:
[0012] In the cross-segment data security transmission device, the website address of the information transmission is determined by the cross-segment unit, and the website address is encrypted when the key encryptor encrypts the information data. After the encrypted data is transmitted to the receiving end, the website information is verified by the website verifier, and the information data can be decrypted only after the verification is correct. When the information data is intercepted and the website address cannot be matched, the encrypted information data cannot be decompressed, thereby improving the security of cross-segment information transmission. BRIEF DESCRIPTION OF THE DRAWINGS
[0013] Figure 1 It is a schematic diagram of the overall structure of the utility model;
[0014] Figure 2 It is a schematic diagram of the structure of the safety transmission unit of the utility model;
[0015] Figure 3 It is a schematic diagram of the structure of the cross-segment unit of the utility model.
[0016] The meaning of each number in the figure is:
[0017] 1. Secure transmission unit; 11. Transmission controller; 12. Key encryptor; 13. URL checker; 14. Decompressor;
[0018] 2. Cross-segment unit; 21. Network point determiner; 22. Network address designator; 23. Transmission channel setter; 24. Data transmitter. DETAILED DESCRIPTION
[0019] The following will be combined with the drawings in the embodiments of the utility model to clearly and completely describe the technical solutions in the embodiments of the utility model. Obviously, the described embodiments are only part of the embodiments of the utility model, not all of the embodiments. Based on the embodiments in the utility model, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the utility model.
[0020] In the description of the present invention, it should be understood that the terms "center", "longitudinal", "lateral", "length", "width", "thickness", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside", "clockwise", "counterclockwise" and the like indicate orientations or positional relationships based on the orientations or positional relationships shown in the accompanying drawings, and are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the referred device or element must have a specific orientation, be constructed and operated in a specific orientation, and therefore should not be understood as a limitation on the present invention. Example
[0021] To improve the security of data transmission across networks, please refer to Figure 1-Figure 3 As shown, this embodiment provides a cross-segment data secure transmission device, including a secure transmission unit 1 and a cross-segment unit 2, the secure transmission unit 1 and the cross-segment unit 2 are electrically connected to each other, the data in the secure transmission unit 1 is transmitted to the cross-segment unit 2, and the cross-segment unit 2 processes the data according to the information data transmitted by the secure transmission unit 1, wherein the improvement of this case is that: the secure transmission unit 1 includes a transmission end and a receiving end, the transmission end and the receiving end are not in the same network node, that is, the transmission end and the receiving end are in two areas where cross-network is required, and there is no electrical connection between the transmission end and the receiving end, and at the same time, the transmission end and the receiving end are both electrically connected to the cross-segment unit 2, the transmission end transmits information to the cross-segment unit 2, the cross-segment unit 2 encrypts the URL address of the information, the receiving end receives the information transmitted by the cross-segment unit 2, and verifies the information after receiving it.
[0022] The delivery end transmits initial data to the cross-segment unit 2, so that the cross-segment unit 2 receives the data transmission information. The cross-segment unit 2 encrypts the URL address according to the information transmitted by the delivery end, and transmits the information transmitted by the delivery end back to the delivery end after the encryption is completed. The delivery end performs overall key encryption, and the encryption is completed. The cross-segment unit 2 transmits it. The receiving end receives the information data transmitted by the cross-segment unit 2 and verifies the information after receiving it.
[0023] The URL address of the information transmission is determined by the cross-segment unit 2, and the URL address is encrypted when the secure transmission unit 1 encrypts the information data. After the encrypted data is transmitted to the receiving end, the secure transmission unit 1 verifies the URL information and decrypts the information data only after the verification is correct. When the information data is intercepted and the URL address cannot be matched, the encrypted information data cannot be decompressed, thereby improving the security of cross-segment information transmission.
[0024] In order to achieve the effects described above, the structures of the secure transmission unit 1 and the cross-segment unit 2 are refined as follows. The transmission end includes a transmission controller 11 and a key encryptor 12. There is no electrical connection between the transmission controller 11 and the key encryptor 12. The transmission controller 11 identifies the information data that needs to be transmitted across network segments, and transmits the identified information data to the cross-segment unit 2. The cross-segment unit 2 includes a network point determiner 21, a network address designator 22 and a transmission channel setter 23. The network point determiner 21 is electrically connected to the network address designator 22 and the transmission channel setter 23 respectively. The network address designator 22 and the transmission channel setter 23 are electrically connected. The network point determiner 21 determines the network point of the cross-network data of the information data, the network address designator 22 specifies the network address of the network point determined by the network point determiner 21, and the transmission channel setter 23 sets the cross-network transmission channel according to the network point information and the network address determined by the network point determiner 21 and the transmission channel setter 23, and determines the website address of the information transmission.
[0025] Among them, the delivery controller 11 and the network point determiner 21 are electrically connected, the key encryptor 12 encrypts the information data across network segments with a key, the key encryptor 12 and the transmission channel setter 23 are electrically connected, the delivery controller 11 transmits the information data identified to be transmitted across network segments to the network point determiner 21, the key encryptor 12 receives the information data of the transmission channel set by the transmission channel setter 23, and encrypts the received information data with a key, and encrypts the website address with a key, thereby increasing the identification step in the subsequent decoding process of the information data, and further increasing the security of data transmission.
[0026] The cross-segment unit 2 also includes a data transmitter 24, which is electrically connected to the key encryptor 12. The key encryptor 12 transmits the information data encrypted by the key to the data transmitter 24, and the data transmitter 24 transmits the information data to the receiving end. The receiving end includes a website verifier 13 and a decompressor 14, which are electrically connected to the decompressor 14. The website verifier 13 and the data transmitter 24 are electrically connected. The website verifier 13 receives the information data transmitted by the data transmitter 24, and the website verifier 13 verifies the website address of the information data, and after the verification is completed, the decompressor 14 decompresses the information data, wherein it is determined whether the website address in the received information data is the same as the website address of the receiving end. When the website addresses of the two are the same, the decompressor 14 can decompress the information data. Because the key encryptor 12 adds a password for the website address when encrypting, when the website information of the two is different, the decompressor 14 cannot decrypt the information data.
[0027] The website address of the information transmission is determined by the cross-segment unit 2, and the website address is encrypted during the process of the key encryptor 12 encrypting the information data. After the encrypted data is transmitted to the receiving end, the website information is verified by the website verifier 13, and the information data can be decrypted only after the verification is correct. When the information data is intercepted and the website address cannot be matched, the encrypted information data cannot be decompressed, thereby improving the security of cross-segment information transmission.
[0028] The above shows and describes the basic principle, main features and advantages of the utility model. Those skilled in the art should understand that the utility model is not limited by the above embodiments. The above embodiments and descriptions are only preferred examples of the utility model and are not used to limit the utility model. Without departing from the spirit and scope of the utility model, the utility model may have various changes and improvements, which fall within the scope of the utility model to be protected. The scope of protection of the utility model is defined by the attached claims and their equivalents.
Claims
1. A cross-segment data secure transmission device, comprising a secure transmission unit (1) and a cross-segment unit (2), wherein the secure transmission unit (1) and the cross-segment unit (2) are electrically connected to each other, data in the secure transmission unit (1) is transmitted to the cross-segment unit (2), and the cross-segment unit (2) processes data according to information data transmitted by the secure transmission unit (1), characterized in that: The secure transmission unit (1) comprises a transmission end and a receiving end, wherein the transmission end and the receiving end are not in the same network node, and are not electrically connected to each other. At the same time, the transmission end and the receiving end are both electrically connected to a cross-segment unit (2). The transmission end transmits information to the cross-segment unit (2), and the cross-segment unit (2) encrypts the URL address of the information. The receiving end receives the information transmitted by the cross-segment unit (2) and verifies the information after receiving it.
2. The cross-segment data secure transmission device according to claim 1, characterized in that: The transmission end comprises a transmission controller (11) and a key encryptor (12), wherein the transmission controller (11) and the key encryptor (12) are not electrically connected to each other, the transmission controller (11) identifies information data that needs to be transmitted across network segments, and transmits the identified information data to the cross-network segment unit (2), and the key encryptor (12) performs key encryption on the cross-network segment information data.
3. The cross-segment data secure transmission device according to claim 2, characterized in that: The cross-network segment unit (2) comprises a network point determiner (21), a network address designator (22) and a transmission channel setter (23); the network point determiner (21) is electrically connected to the network address designator (22) and the transmission channel setter (23) respectively; the network address designator (22) and the transmission channel setter (23) are electrically connected to each other; the network point determiner (21) determines the network point of cross-network data of information data; the network address designator (22) specifies the network address of the network point determined by the network point determiner (21); and the transmission channel setter (23) sets the cross-network transmission channel according to the network point information and the network address determined by the network point determiner (21) and the transmission channel setter (23).
4. The cross-segment data secure transmission device according to claim 3, characterized in that: The transport controller (11) is electrically connected to the network point determiner (21), and the key encryptor (12) is electrically connected to the transmission channel setter (23). The transport controller (11) transmits information data that needs to be transmitted across network segments to the network point determiner (21), and the key encryptor (12) receives information data of the transmission channel set by the transmission channel setter (23), and performs key encryption on the received information data.
5. The cross-segment data secure transmission device according to claim 3, characterized in that: The cross-segment unit (2) further comprises a data transmitter (24), wherein the data transmitter (24) is electrically connected to the key encryptor (12), wherein the key encryptor (12) transmits information data encrypted by the key to the data transmitter (24), and the data transmitter (24) transmits the information data to a receiving end.
6. The cross-segment data secure transmission device according to claim 5, characterized in that: The receiving end comprises a website address checker (13) and a decompressor (14), the website address checker (13) and the decompressor (14) are electrically connected, the website address checker (13) and the data transmitter (24) are electrically connected, the website address checker (13) receives information data transmitted by the data transmitter (24), the website address checker (13) checks the website address of the information data, and after the check is completed, the decompressor (14) decompresses the information data.