Back-End Design And Implementation Of All-Optical One-Way Transmission Information Security System

The development of information technology brings convenience to life and work,but also brings a lot of network information security problems,information leakage,data theft incidents occur from time to time,in order to strengthen the protection of data security,to solve the traditional isolation of data two-way transmission may cause information leakage problems,the development of all-optical one-way transmission information security system,this paper carried out the design and implementation of the back-end software system of all-optical one-way transmission information security system,the main work content is as follows:1.The overall structure of the all-optical unidirectional transmission information security system is studied,the specific process of one-way data transmission is expounded,and the functional requirements and user use cases of the back-end subsystem and the connection between each use case are analyzed.The system architecture is designed according to the structure of the back-end subsystem and the specific functional requirements,and the dynamic cooperation,trigger mechanism and events between the objects of each functional module are described in chronological order.2.Use the combination of IP address and MAC address to restrict system access,and use three-layer architecture to complete customized network transmission policies and log audit functions.The system uses FTP protocol to connect to FTP server to complete data collection,POP3 protocol to connect to mail server to complete data collection,meet the general database connection,and use debezium to realize incremental data capture of the database to complete data collection;Generate data files and save them to the corresponding cache space,and record logs to monitor system usage in real time.3.According to the characteristics of this system,the data content review of the files to be transmitted,the file type check is completed by using the file stream reading mode,the keyword check is completed by using the infinite automata algorithm combined with word segmentation technology,and the security of file transmission is improved,and RS(Reed-Solomon codes,RS codes)coding is used at the software level to achieve automatic error correction of data to ensure the integrity of data transmission to the greatest extent.Solve the problem that the correctness and integrity of the received files cannot be confirmed through interactive sessions due to the one-way transmission of the system;Customize the private protocol to transfer files to ensure the security of data,set server identification marks,combine socket communication to achieve one-way data transmission,and the receiving end creates an independent space to save the file according to the user number,use the Message-Digest Algorithm 5(MD5)algorithm to verify the integrity and correctness of the received file.By building an overall all-optical unidirectional transmission information security system,configuring the system,and actually running the system,the functional realization of the back-end subsystem of the all-optical unidirectional transmission system is verified according to the designed test cases,and the unidirectional transmission of data is realized by combining gigabit unidirectional network cards and isolators.