Research And Realization On Physical Isolation Data Exchange System

As the computer communication technology develops rapidly, network is now facing various kinds of security threats, such as the invasion of the hackers, the damage made by net virus and etc. This became a huge challenge to our network security on national top secrets. Although we obtained many complex methods to protect our net security such as firewall, sniffer, channel controller system and etc. all theses methods are a kind of logical system protection. However, the logical entity itself could be controlled. Meanwhile, the formed on-line analytical technology could not fulfill the need of high speed information exchange due to the extreme complexity and limitation of the logical system. In order to insure the net security, we adopted a totally new way of physical isolation. That is to design and install a physical isolation data exchange system on the data collection system and transmission passage between core networks. This system became a real limitation as far as network security is concerned.The design of Network Physical Isolation and Switching System is consisted of intranet main computer module, extranet main computer module and network physical isolation controller-data exchange module. Extranet main computer module is used to deal with the data from unreliable network(extranet), exam them and separate the "original" data and transmit them to data exchange module. Connected with reliable network (intranet) intranet main computer module is used to exam and deal with data exchange module transmission based on security policy. Network physical isolation controller is responsible for data exchange and serves as a on-off button.This article includes the design of software and hardware structure used for system construction, the network safety protection, and application framework. The analysis of advantages and disadvantages of this system and ways of improvement are offered here.