Internal Network Of The High-security Operating System - The Design And Realization Of The Data Transfer Mechanism Between The Subsystems

With the development of Internet, network security situation has continued to tend toward grimness. Network intrusion such as Trojan and viruse poses a serious threat to network security. sCPU-dBUS(single CPU and dual BUSes) is a high-security computer architecture, which decreases some vulnerable defects in traditional computer architecture, and the network terminal based on it has the characteristics of low-cost and avoid-intrusion. In order to manage resourses of this new kind of computer effectively and develop application based on this computer expediently, netOS-I (network Operating System I) is designed and implemented, which is a new high-security operating system with internal networking structure based on sCPU-dBUS.This paper gives an inter-subsystem data transfer interface and an inter-subsystem data transfer protocol based on sCPU-dBUS and netOS-I. The inter-subsystem data transfer interface is a specialized daemon which is used for transferring data between subsystems. Every subsystem has only one this daemon. Two daemons in different subsystems communicate with each other via inter-subsystem data transfer protocol.The inter-subsystem data transfer interface is the only way to transfer data between subsystems. Any process in any subsystem must use this interface if it wants to transfer data to another subsystem. In netOS-I, the subsystem is defined as sub-network, the routing process (the daemon used to transfer data) is defined as Router which is used to connect sub-networks, and all the processes except routing process are defined as network users..The inter-subsystem data transfer protocol proposed in this paper is a private protocol. There are many security mechanisms such as authentication, message digest and encryption in the protocol to ensure the security of data transfer. Because this protocol is connection-oriented, the data transfer has three phases:create connection, transfer data, release connection. And it has the function of data retransfer to ensure the integrity of data.In the end, this paper presents a functional test of transfering data between subsystems with the inter-subsystem data transfer interface and protocol to verify the feasibility.