CN108600274A - Safe communication system and its application method between a kind of realization computer inner-external network - Google Patents

Abstract

The invention discloses a system for realizing secure communication between the internal and external networks of a computer and its application method. The structure includes an internal network computer, and both the internal network computer and the external network computer include a communication tool and a network card driver module. The internal network computer is connected to the internal network. , the external network computer is connected to the external network, the internal network computer and the external network computer are connected through a one-way transmission line, the remote monitoring computer is connected to the internal network computer and the external network computer, the communication security monitoring module is connected to the remote monitoring computer, communication security monitoring The module includes a data collection module and an automatic detection module. The communication safety monitoring module collects the communication data between the internal network computer and the external network computer through the data collection module, and detects through the automatic detection module. The invention realizes the one-way transmission of information, can effectively block the erosion of the internal network and the damage to the system by external network viruses, and solves the security problem existing in the internal network management for a long time, and the method and system are simple and easy.

Description

A system for realizing secure communication between computer internal and external networks and its application method

technical field

The invention relates to the technical field of computer network security, in particular to a system for realizing secure communication between internal and external networks of a computer and a method for using the same.

Background technique

With the rapid development of computer technology and network, computer has become an indispensable tool in people's work, study and life. However, the development of computer networks, while bringing convenience to people, has also brought hidden dangers to the security of users' computer information. Information attacks, virus transmission, and information theft are happening all the time, and they have also brought great harm to computer users. Security risks.

Computer networks are widely used in many fields such as college teaching, e-commerce or automatic control. With the development of the Internet, more and more computers are connected to the Internet. Viruses and Trojan horse programs that mainly rely on the network to spread are becoming more and more worrying today when network communications are becoming more and more popular. Connections without security guarantees will expose users' computers to intrusions, attacks by criminals, and other threats on the Internet. serious threat. Some key departments often adopt the form of internal and external networks, in which the computer local area network is referred to as the internal network, and the wide area network is referred to as the external network.

In order to ensure the security of important information systems in the intranet, various schemes have been proposed, the most important of which is firewall technology. However, firewalls are not omnipotent, and no network product can be said to be absolutely safe. Therefore, for absolute security, people have adopted the method of physically separating the internal and external networks. Strict physical isolation between the computer LAN (referred to as the internal network) and the WAN (referred to as the external network) between the two networks, effectively preventing hackers and viruses on the WAN from invading the internal network through the network, that is, the two networks of the LAN and the WAN are in an isolated state down to work.

Due to the strict physical isolation between the traditional internal and external networks, real-time performance and security cannot meet the requirements, and there is a problem of inconvenient use, which seriously affects information transmission and system security.

Contents of the invention

In order to overcome the above technical problems, the object of the present invention is to provide a system for realizing secure communication between the computer's internal and external networks and its usage method.

According to an object of the present invention, the present invention provides following technical scheme:

A system for realizing secure communication between computers inside and outside the network, including an internal network computer, an external network computer, a remote monitoring computer and a communication security monitoring module,

Described intranet computer and described extranet computer all comprise communication tool and network card driver module, and described intranet computer is connected with intranet, and described extranet computer is connected with extranet, and described intranet computer and described extranet The computers are connected by a one-way transmission line,

The remote monitoring computer is connected with the internal network computer and the external network computer, the communication security monitoring module is connected with the remote monitoring computer, the communication security monitoring module includes a data acquisition module and an automatic detection module, the The communication safety monitoring module collects communication data between the internal network computer and the external network computer through the data collection module, and detects through the automatic detection module.

Further, the remote monitoring computer includes a monitoring database, a processing terminal and a man-machine interface, and the remote monitoring computer effectively intercepts dangerous data according to the monitoring database and the processing terminal.

Further, the monitoring database includes a memory, the monitoring database adopts a full-featured database management system based on SQL, uses SQL compatible with the ISO/ANSI standard, provides SQL operation mode, and ensures the concurrency and reference of the monitoring database Consistency, providing online performance monitoring tools, user interfaces and development tools, suitable for distributed database environments.

Further, the remote monitoring computer is provided with two interface ports, and the remote monitoring computer is respectively connected to the internal network computer and the external network computer through the connection ports.

Further, the one-way transmission line is a signal transmission line with diodes connected in series, and the one-way transmission line is connected to the connection port.

Further, the connection port is a USB communication interface or an RS232 communication interface.

Further, the automatic detection module includes a NESS detection module, a Strobe detection module, a SATAN detection module and an ISS detection module, and the detection content of the automatic detection module includes configuration file detection, protection mechanism detection and differential testing.

Further, the man-machine interface includes a display module, a mouse module and a keyboard module, and the display module is an LED display module.

According to another object of the present invention, there is provided a method for realizing a secure communication system between a computer's internal and external networks, comprising the steps of:

S1. The remote monitoring computer is connected to the internal network computer and the external network computer through a one-way transmission line;

S2. Intranet computer and external network computer send data information through communication tools;

S3, the communication safety monitoring module collects the communication data between the internal network computer and the external network computer through the data acquisition module;

S4. Detect the communication data collected by the data acquisition module through the automatic detection module;

S5. The remote monitoring computer analyzes the communication data and makes decisions based on the monitoring database and processing terminal, effectively intercepts dangerous communication data, and stores the data in the monitoring database; does not make decisions on safe communication data, and allows intranet computers Communication data with computers on the external network, and store the data in the monitoring database.

Further, the information transmitted from the internal gate computer to the external gate computer is encrypted and converted into an encrypted information packet, which is then transmitted to the external gate computer through a one-way transmission line.

Compared with the prior art, the beneficial effects of the present invention are as follows:

1. The present invention realizes a secure communication system between the internal and external networks of the computer, realizes the one-way transmission of information, can effectively block the erosion of the internal network and the damage to the system by external network viruses, and solves the problem of internal network management for a long time. The existing security problems, and the method and system are simple and easy to implement.

2. The present invention realizes a secure communication system between the internal and external networks of the computer. The internal network computer and the external network computer send data information through the communication tool, and the communication safety monitoring module collects the communication between the internal network computer and the external network computer through the data acquisition module. Data, and through the automatic detection module to detect the communication data collected by the data acquisition module, the remote monitoring computer analyzes the communication data and makes decisions according to the database and processing terminal, effectively intercepts the dangerous communication data, and stores the data in the monitoring In the database, no decision is made on the safe communication data, and the communication data between the internal network computer and the external network computer is allowed, and the data is stored in the monitoring database, which effectively guarantees the security of computer network communication.

Description of drawings

Fig. 1 is a kind of structural representation that realizes the secure communication system between computer intranet and intranet of the present invention;

Fig. 2 is a working flow chart of the present invention to realize the secure communication system between the internal and external networks of the computer.

Detailed ways

The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

As shown in Fig. 1 and Fig. 2, a system for realizing secure communication between a computer's internal and external networks includes an internal network computer, an external network computer, a remote monitoring computer and a communication security monitoring module,

Both the internal network computer and the external network computer include a communication tool and a network card driver module, the internal network computer is connected to the internal network, the external network computer is connected to the external network, and the internal network computer and the external network computer are connected through a one-way transmission line.

The remote monitoring computer is connected with the internal network computer and the external network computer, and the communication security monitoring module is connected with the remote monitoring computer. The communication security monitoring module includes a data acquisition module and an automatic detection module. The communication data between network computers is detected by the automatic detection module.

The remote monitoring computer includes a monitoring database, a processing terminal and a man-machine interface, and the remote monitoring computer effectively intercepts dangerous data according to the monitoring database and the processing terminal. The monitoring database includes storage, and the monitoring database adopts a full-featured database management system based on SQL, using SQL compatible with ISO/ANSI standards, providing SQL operation methods, ensuring the concurrency and reference consistency of the monitoring database, and providing online performance monitoring tools, User interface and development tools for distributed database environments. The automatic detection module includes a NESS detection module, a Strobe detection module, a SATAN detection module and an ISS detection module, and the detection content of the automatic detection module includes configuration file detection, protection mechanism detection and differential testing. The man-machine interface includes a display module, a mouse module and a keyboard module, and the display module is an LED display module.

The remote monitoring computer is provided with two interface ports, and the remote monitoring computer is respectively connected with an internal network computer and an external network computer through the wiring ports. The one-way transmission line is a signal transmission line with diodes connected in series, and the one-way transmission line is connected with the wiring port. The wiring port is a USB communication interface or an RS232 communication interface.

The above-mentioned method for realizing a secure communication system between the internal and external networks of a computer comprises the following steps:

S1. The remote monitoring computer is connected to the internal network computer and the external network computer through a one-way transmission line;

S2. The internal network computer and the external network computer send data information through communication tools; the information transmitted from the internal gate computer to the external gate computer is encrypted and converted into encrypted information packets, and transmitted to the external gate computer through a one-way transmission line;

S3, the communication safety monitoring module collects the communication data between the internal network computer and the external network computer through the data acquisition module;

S4. Detect the communication data collected by the data acquisition module through the automatic detection module;

S5. The remote monitoring computer analyzes the communication data and makes decisions based on the monitoring database and processing terminal, effectively intercepts dangerous communication data, and stores the data in the monitoring database; does not make decisions on safe communication data, and allows intranet computers Communication data with computers on the external network, and store the data in the monitoring database.

Although the embodiments of the present invention have been shown and described, those skilled in the art can understand that various changes, modifications and substitutions can be made to these embodiments without departing from the principle and spirit of the present invention. and modifications, the scope of the invention is defined by the appended claims and their equivalents.

Claims (10)

1. safe communication system between a kind of realization computer inner-external network, it is characterised in that：Including including inner net computer, outer net Computer, remote monitoring computer and communication security monitoring modular,

The inner net computer and the outer net computer include communication tool and trawl performance module, the inner net computer It is connect with Intranet, the outer net computer is connect with outer net, passes through list between the inner net computer and the outer net computer It is connected to transmission line,

The remote monitoring computer is connect with the inner net computer and the outer net computer, and the communication security monitors mould Block is connect with the remote monitoring computer, and the communication security monitoring modular includes data acquisition module and automatic detection mould Block, the communication security monitoring modular pass through between inner net computer described in data collecting module collected and the outer net computer Communication data, and be detected by the automatic detection module.

2. safe communication system between a kind of realization computer inner-external network according to claim 1, it is characterised in that：It is described Remote monitoring computer includes monitoring data library, processing terminal and man-machine interface, and the remote monitoring computer is according to the prison Control database and the processing terminal effectively intercept risk data.

3. safe communication system between a kind of realization computer inner-external network according to claim 2, it is characterised in that：It is described Monitoring data library includes memory, and the monitoring data library uses the full function database based on SQL to manage system, is used The SQL of ISO/ANSI standards compatibility, provides SQL modes of operation, ensures the concurrency and reference consistency in the monitoring data library, On-line performance monitoring tool, user interface and developing instrument are provided, distributed database environment is suitble to.

4. safe communication system between a kind of realization computer inner-external network according to claim 2, it is characterised in that：It is described Set on remote monitoring computer there are two interface port, the remote monitoring computer by the Wiring port respectively with it is described Inner net computer is connected with the outer net computer.

5. safe communication system between a kind of realization computer inner-external network according to claim 2, it is characterised in that：It is described Unidirectional transmission line is the signal transmssion line for being serially connected with diode, and the unidirectional transmission line is connect with the Wiring port.

6. safe communication system between a kind of realization computer inner-external network according to claim 2, it is characterised in that：It is described Wiring port is USB communication interfaces or RS232 communication interfaces.

7. safe communication system between a kind of realization computer inner-external network according to claim 2, it is characterised in that：It is described Automatic detection module includes NESS detection modules, Strobe detection modules, SATAN detection modules and ISS detection modules, it is described from The detection content of dynamic detection module includes configuration file detection, protection mechanism detection and difference test.

8. safe communication system between a kind of realization computer inner-external network according to claim 2, it is characterised in that：It is described Man-machine interface includes display apparatus module, mouse module and Keysheet module, and the display apparatus module is light-emitting diode display module.

9. a kind of according to claim 2-8 realizing the application method of safe communication system between computer inner-external network, It is characterized in that：Include the following steps：

S1, remote monitoring computer are connect by unidirectional transmission line with inner net computer and outer net computer；

S2, inner net computer and outer net computer pass through communication tool transmission data information；

S3, communication security monitoring modular pass through the communication number between data collecting module collected inner net computer and outer net computer According to；

S4, the collected communication data of data acquisition module is detected by automatic detection module；

S5, remote monitoring computer are analyzed and are made decisions to communication data according to monitoring data library and processing terminal, right Dangerous communication data is effectively intercepted, and is stored data in monitoring data library；The communication data of safety is not made certainly Plan allows the communication data between inner net computer and outer net computer, and stores data in monitoring data library.

10. a kind of application method for realizing safe communication system between computer inner-external network according to claim 1, special Sign is：The information that interior pass computer closes computer transmission outward is encrypted, and becomes encrypted message packet, and by unidirectional Transmission line is sent on outer pass computer.