E-mail Secure Exchang Under The GAP Entironment

Along with the progress of the informationization construction, the demand of Internet in human social life is increasing. Network security becomes a key issue in the development of Internet and each network service and application. Ensuring the security of information as the key point of informationization construction, has been a question that must been figured out.In order to protect the high class of network security, National Secret Bureau issued the requirement of physical isolation in network involved secret on Dec 27th, 1999, then published the security administration of computer information system and internet that computer information system on Jan 1st, 2000. In the second chapter-secret institution, the sixth item specify that computer information system referred to national secret mustn't connect to internet or other public information network directly or indirectly, only physical isolation is performed.This essay facing the requirement of e-mail secure exchange on intranet and extranet under the circumstance of physical isolation, on the basis of aggregate analysis of the developing situation and technological mechanism of physical isolation and e-mail, integrated certificate digita, message queue middleware, mail server software, and long-distance file speediness synchronization, designed a data exchange system based on monomial transmitting and file exchange physical isolation device which supporting secure exchange of e-mail,. and with the functions of supporting file synchronization, database synchronization, and LDAP synchronization between intranet and extranet. Besides, we analyzed, experimented and discussed some key technologies such as message queue middleware, file speediness synchronization, database synchronization and so on, trying to satisfy the requirements of the function and security of mail exchange system.This article has mainly introduced the safe practice of physical isolating system and E-mail, the operation principle physical isolating has been analysed , studied too in isolating the systematic module, to the core among them - -detailed research and analysis that data-switching system has been made. Use the E-mail in the system that physical isolated on this basis, realize the communication of the E-mail in two isolated networks. At the same time in order to isolate the mail communication on the system on the net, has joined the synchronous algorithms of the application and Rsync of one the middle, at the same time in order to protect the security of the high ranking network, apply to the digital authentication certificate in the system, carry on the authentication of the identity to users' information, in order to ensure the safety of network.