CN101888284B - Method and device used for one-way transmission of data - Google Patents

Method and device used for one-way transmission of data Download PDF

Info

Publication number
CN101888284B
CN101888284B CN 201010220260 CN201010220260A CN101888284B CN 101888284 B CN101888284 B CN 101888284B CN 201010220260 CN201010220260 CN 201010220260 CN 201010220260 A CN201010220260 A CN 201010220260A CN 101888284 B CN101888284 B CN 101888284B
Authority
CN
China
Prior art keywords
network
data
equipment
netting twine
transmitting apparatus
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CN 201010220260
Other languages
Chinese (zh)
Other versions
CN101888284A (en
Inventor
刘宝旭
谢渤
齐阿芳
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Institute of High Energy Physics of CAS
Original Assignee
Institute of High Energy Physics of CAS
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Institute of High Energy Physics of CAS filed Critical Institute of High Energy Physics of CAS
Priority to CN 201010220260 priority Critical patent/CN101888284B/en
Publication of CN101888284A publication Critical patent/CN101888284A/en
Application granted granted Critical
Publication of CN101888284B publication Critical patent/CN101888284B/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Landscapes

  • Data Exchanges In Wide-Area Networks (AREA)
  • Communication Control (AREA)

Abstract

The invention discloses a device used for one-way transmission of data. The device comprises a first network adapter, a second network adapter, a first transmission network cable, a network device and a monitoring device, wherein the first network adapter is arranged on transmitting equipment; the second network adapter is arranged on receiving equipment; the first transmission network cable is used for connecting the first network adapter and the second network adapter; the network device is used for informing the transmitting equipment of the network connection state and/or the working state of the receiving equipment to ensure that the transmitting equipment can decide whether to stop sending data or retransmit the data; the monitoring device is used for monitoring the network connection state and/or the working state of the receiving equipment in real time, and controlling a network device to inform the transmitting equipment according to the acquired working state signals; and the first transmission network cable only transmits the data sent from the transmitting equipment to the receiving equipment. The device realizes the reliable one-way transmission of the data between different classification networks, ensures that the transmitted data cannot be repeated and lost, and meats the requirements on data transmission and only one data transmission.

Description

A kind of method and device thereof for the data one-way transmission
Technical field
The present invention relates to network data transmission, relate in particular to a kind of method and device thereof of data one-way transmission.
Background technology
Along with networks development, at present the most of company and government departments of China all are provided with own internal network, these internal networks or relate to trade secret, or relate to government information, thereby major part all belongs to the concerning security matters network of different security level, externally connection.Because these companies the part while also are connected outside public information network with government, obtain required data and file, and do not have effective safe and secret safeguard procedures between many internal networks and the outside public information network, this can cause assault and invasion internal network wherein, thereby causes divulging a secret of confidential information.
In order to guarantee the safe operation of concerning security matters network, implementing physical isolation between concerning security matters network and public information network is an effective safe and secret measure.Present physical isolation technology has multiple, as terminal isolation technology and the Network Isolation technology of taking abroad, and safety is isolated and switching technology (also being safe gateway technology), take isolation computer at home, isolate physical isolation technology such as hub and telesecurity transmission means, below analyze with regard to external and domestic safe isolation technology respectively.
1. external isolation technology analysis
Countries such as the U.S., Israel, Russia all carry out the physical isolation of in-house network and public network, technology aspect physical isolation and product be comparative maturities all also, from technology and the product of a lot of aspects, the physical isolation of this several network technology developed country roughly can be divided into isolation technology and safety is isolated and switching technology (i.e. " safe gateway " technology).
(1) isolation technology
Isolation technology can be divided into terminating stage and two levels of network in theory: terminating stage is that the isolation by memory realizes, divide place of safety, non-place of safety and exchange area at single hard disk, by using special isolation card, place of safety and non-place of safety can not be used simultaneously, to reach the effect that information is isolated; The isolation of network level is by using special network security separate card in terminal, match with safe hub, select corresponding network to connect by the height of network security separate card power on signal, accomplish to connect safety and unsecured network simultaneously the effect that the information that reaches that matches with the isolation of terminal memory is isolated.
(2) safety is isolated and switching technology
Safety isolate with the cardinal principle of switching technology be by two covers separately independently system be connected safe and non-safe network respectively, be the device of similar " gateway " between two cover systems, guarantee that disconnection is connected with unsecured network when safe network-in-dialing; When unsecured network was communicated with, disconnection was connected with secure network, and timesharing ground uses the data path in two cover systems to carry out exchanges data, isolated and the purpose that exchanges to reach.In data exchange process, to carry out information filterings such as anti-virus, anti-malicious code, with the safety of guarantee information.
2. domestic development status
Scheme one: build two independently networks, one is internal network, is used for storage, handles, transmits classified information; One is external network, links to each other with Internet.If between two networks the exchanges data needs are arranged, then adopt the manual operation mode of (as by floppy disk, tape etc.).
Scheme two: adopt safe isolation computer (terminating stage solution), the user uses internal network and external network on the client device.Main type can be divided into: two mainboards, two hard disk types: the equipment of two cover computers is set in a cabinet, is equivalent to display of two computer utilities, select two cover computer systems respectively by the client switch.Single mainboard, two hard disk types: client is transferred to mainboard with hard-disk interface by the isolation card of adding by increasing an isolation card, a hard disk, and network interface card is also drawn two network interfaces by this card.By this card control client stores equipment, select corresponding network interface simultaneously, reach physically-isolated effect; Another scheme be mainboard BIOS etc. more the technical elements of bottom design, accomplish that different networks selects different hard disks, reach physically-isolated purpose.Single mainboard, the single hard disk type: client need increase an isolation card, but does not need additionally to increase hard disk, and memory is connected to mainboard by isolation card, and network interface card is also drawn two network interfaces by isolation card.Divide place of safety, non-place of safety at original hard disk, use place of safety and non-place of safety by this card control client stores equipment timesharing, select corresponding network interface simultaneously, reach physically-isolated effect.
Scheme three: adopt safety to isolate hub (hub solution), mainly solve the problem of room and floor list screen cloth line.This hub needs and special-purpose safe isolation computer matches, and only adopts a network interface, by netting twine different network seletion signals is delivered to network selector, according to different selection signals, selects different network connections.
Scheme four: belong to physically-isolated telesecurity transmission means, comprise independent laying-out and the switching equipment mode used; Under the prerequisite that possesses corresponding authentication and link encryption measure, use connection-oriented circuit exchange mode (as PSTN, ISDN, ADSL etc.); Use PVC (PVC) exchanged form (as DDN, X.25, the special line that uses PVC to make up among frame relay and the ATM).
Scheme five: enterprise-level physical isolation system.Enterprise-level physical isolation system comprises Intranet processing unit, outer net processing unit and special-purpose three parts of hardware card of isolating.Special use in the system is isolated hardware card and is connected Intranet processing unit and outer net processing unit respectively, this unique design has guaranteed that the data working area in the special-purpose isolation hardware card only is communicated with Intranet or outer net at any time, both realize the physical isolation of intranet and extranet, realized online, the dynamically and quasi real time exchange of data again.
Above-mentioned these " physical isolation " are though solved safe isolating problem, but during the transmitted data on network between different security level, for example: the High Security Level network user wishes to obtain various own needed information datas from the Low Security Level network, and the reliability of file one-way transmission truly is difficult to be protected.This is because the equipment that Low Security Level or internal network are used for receiving data in the data transmission procedure between the different security level network is not allow to send any information by network to the transmitting apparatus of High Security Level or external network, if interrupt so network appears in receiving equipment, or the program that the is used for reception information situations such as reception that occur abending, and sending ending equipment can't know that the situation that receiving equipment takes place is still continuing to send data, thereby cause losing of information data, cause the difficulty of information exchange between the network of different security level.
Solution at loss of data is by the transmission redundant data at present, and namely the mode of same piece of data transmission several times ensures information integrity.This solution also is difficult to guarantee information and is sent to destination device accurately and effectively when increasing system load.Therefore, the one-way transmission of how to carry out information under the prerequisite of safety has become the problem that promotes that informatization institute must solution.
Summary of the invention
An object of the present invention is to provide a kind of device for the data one-way transmission, in network, during one-way transmission, can't set up normal communication by network so that solve data, thereby may cause packet to retransmit or leak the problem that passes.
To achieve these goals, a kind of device for the data one-way transmission of the present invention comprises: place first network adapter on the transmitting apparatus, place second network adapter on the receiving equipment, connect the first transmission netting twine of described first and second network adapter, described device also comprises:
The network equipment is used for the operating state to described transmitting apparatus informing network connection status and/or receiving equipment, so that described transmitting apparatus determines whether stop to send data or resending data;
Watch-dog is used for the operating state of real-time monitor network connection status and/or receiving equipment, and controls the network equipment according to the acquisition working state signal and notify described transmitting apparatus;
The wherein said first transmission netting twine only transmits the data that described transmitting apparatus sends to described receiving equipment.
Described second network adapter is the unilateral network adapter that receives only data.
According to one embodiment of present invention, the described network equipment can by himself startup or interrupt working properly to described transmitting apparatus informing network connection status and/or receiving equipment, thereby described transmitting apparatus is when the network equipment interrupts, stop to send data to receiving equipment, and when the network equipment restarts, send data to receiving equipment again.
According to one embodiment of present invention, described watch-dog can be controlled startup or the interruption of the network equipment by the mode of electric control signal.
Further, described watch-dog comprises:
The order receiver module is used for receiving the order that stops described watch-dog that described receiving equipment sends when network connection state and/or receiving equipment operating state are unusual, and described watch-dog is quit work;
Watchdog module is used for restarting watch-dog after described watch-dog quits work; And
Power supply module is used for to described network equipment power supply, and cuts off the power supply supply of the network equipment when described watch-dog work stops, and continues when described watch-dog starts to network equipment supply power supply.
According to one embodiment of present invention, described device also comprises the second transmission netting twine that connects the network equipment and transmitting apparatus.
According to another embodiment of the invention, described device also comprises: be connected the second transmission netting twine between the network equipment and the first transmission netting twine;
Wherein said first the transmission netting twine an end connect first network adapter, this end by output data+, output data-, the input data+and the input data-the netting twine pin insert first network adapter;
Wherein said first the transmission netting twine the other end connect second network adapter, this other end by the input data+and the input data-the netting twine pin insert second network adapter;
The wherein said first transmission netting twine is cut off between therefrom, with the input data of the described first transmission netting twine mid portion+netting twine pin and the second transmission netting twine the input data+, the output data+the netting twine pin link together, with the input data of mid portion-netting twine pin and second transmit the input data of netting twine-, export data-link together.
Another object of the present invention provides a kind of method of data one-way transmission, and this method adopts above-mentioned data one-way transmission apparatus, carries out the one-way transmission of data by following steps:
S1: receiving equipment receives the data that transmitting apparatus sends by the one-way transmission netting twine, and wherein said one-way transmission netting twine can only transmit the data that transmitting apparatus sends to receiving equipment;
S2: watch-dog is monitored operating state and the network state of described receiving equipment in real time, according to acquisition status signal control network equipment notice transmitting apparatus;
S3: described transmitting apparatus determines to stop or resending data according to notification signal after receiving the notification signal of the network equipment.
The method of the watch-dog control network equipment is specially for notify the switch of described transmitting apparatus by the signal of telecommunication control network equipment among the wherein said step S2:
When receiving equipment and network were unusual, described watch-dog cut off the power supply supply of the described network equipment by the mode that changes current potential;
When unusual the eliminating, the power supply supply that described watch-dog recovers the network equipment by the mode of recovering current potential.
Wherein said step S3 is specially:
After described network equipment outage quit work, the network connection state of described transmitting apparatus and the described network equipment became disconnection, and described transmitting apparatus stops to send data;
When the network equipment restored electricity, the network recovery of described transmitting apparatus and the described network equipment was to connected state, and described transmitting apparatus sends data to receiving equipment again.
The present invention is owing to adopt the one-way transmission netting twine to carry out transfer of data, thereby can ensure that the physical connection between transmitting apparatus and the receiving equipment is unidirectional completely, and namely receiving device can not return any data to transmitting terminal by netting twine; And the present invention is the cooperation by watch-dog and the network equipment also, when network state or receiving equipment broke down, transmitting apparatus stopped to send data, after fault is got rid of, transmitting apparatus resends data again, thereby has guaranteed that packet sends to receiving terminal reliably.The present invention has realized the reliable folk prescription of data between the different security level network to transmission, and the situation that the data of assurance transmission can not duplicate and lose realizes that the transmission data pass and only biography requirement once.
With reference to the accompanying drawing description of a preferred embodiment, above-mentioned and other purpose of the present invention, feature and advantage will be more obvious by following.
Description of drawings
Fig. 1 is the structured flowchart of a kind of embodiment of data one-way transmission apparatus of the present invention;
Fig. 2 is the structured flowchart of the another kind of embodiment of data one-way transmission apparatus of the present invention;
Fig. 3 is the netting twine line order of EIA/TIA 568 standards;
Fig. 4 is transmission netting twine connection diagram of the present invention.
Embodiment
To describe specific embodiments of the invention in detail below.Should be noted that the embodiments described herein only is used for illustrating, be not limited to the present invention.
Design of the present invention is the receiving equipment of giving the Low Security Level network by the equipment one-way transmission data that can receive the High Security Level network data, and the operating state of monitor network connection state and receiving equipment simultaneously, give receiving equipment thereby decide the equipment of transmission data terminal whether to stop and/or resending data according to the operating state of network connection situation and/or receiving equipment.
In order to realize the foregoing invention design, data one-way transmission apparatus of the present invention, as illustrated in fig. 1 and 2, comprising: link monitoring survive equipment (being designated hereinafter simply as watch-dog), the network equipment, the network adapter that is connected with receiving equipment with transmitting apparatus respectively and the transmission netting twine that is connected described network adapter.
Wherein said transmitting apparatus is with respect to external network, it is the network data receiving terminal, receive the data that High Security Level or outside public information network transmit, and then described data are sent to the Low Security Level of the described data of needs or the receiving equipment of internal network again.
Wherein said watch-dog is used for network-in-dialing situation between monitoring transmission equipment and the receiving equipment and the operating state of receiving equipment, and according to the operating state control network equipment of network-in-dialing situation and/or receiving equipment.
The wherein said network equipment, be connected with transmitting apparatus with watch-dog respectively, be used for the operating state by network signal notice transmitting apparatus network connection state and/or receiving equipment, so that transmitting apparatus determines that according to the operating state of network state and/or receiving equipment whether needs stop or resending data to receiving equipment.
Wherein said transmission netting twine C is the one-way transmission netting twine, make transmitting apparatus send data to receiving equipment, and receiving equipment can not send data to transmitting apparatus.
Wherein said network adapter has two: a network adapter A who places transmitting apparatus is the network adapter of standard; Another places the network adapter B of receiving equipment, further, this network adapter B is the unilateral network adapter, can only receive the function of data, and can not outwards send any data, cooperate one-way transmission netting twine C to ensure the one-way transmission data more reliably.
The following examples further specify the structure function of each part of data one-way transmission apparatus of the present invention, but this embodiment does not limit the present invention, it will be appreciated by those skilled in the art that, can realize that the various structures of identical function may be used to the present invention.
Watch-dog:
Because the effect of watch-dog is network-in-dialing situation between monitoring transmission equipment and the receiving equipment and the operating state of receiving equipment, and the control network equipment is given notice to transmitting apparatus, therefore, watch-dog can place receiving equipment, also can integrate with the network equipment, its layout type can have multiple, and as shown in Figure 2, watch-dog places receiving equipment exactly.Here be preferably, watch-dog is controlled startup and the disconnection of the network equipment by electric control signal.Take place unusual and/or transmission network unusual the time when receiving equipment receives data, watch-dog can receive unusual status signal, send electric control signal to the network equipment then, the network equipment is quit work, unusually whether monitoring disappear in real time simultaneously, under unusual situation about disappearing, send electric control signal again and give the network equipment, make it operate as normal;
It is here a kind of that to monitor unusual execution mode be to be provided with order receiver module and watchdog module in watch-dog.Like this, receiving equipment is found transmission network and/or receives data program work have when unusual, receiving equipment can send out-of-work order to watch-dog, and the order receiver module of watch-dog can quit work after receiving this order, because watch-dog quits work, the network equipment does not receive electric control signal, thereby quits work yet, and then transmitting apparatus judges transmission and breaks down, and can stop immediately sending data to receiving equipment.Simultaneously, the watchdog module in the watch-dog finds that watch-dog quits work, and then restarts watch-dog.Above-mentioned execution mode also can obviously be modified to, watch-dog also can be provided with monitoring module, directly whether monitoring receiving equipment and transmission network exist unusually, therefore, watch-dog any execution mode of cooperating receiving equipment can monitor the operating state of receiving equipment and transmission network may be used to the present invention;
Here a kind of execution mode of controlling the network equipment is, watch-dog also comprises the power-supply unit of promising network equipment power supply, if monitor the receiving equipment operation irregularity in the watch-dog and/or find that transmission network is unusual, watch-dog will be controlled power-supply unit and stop to power to the network equipment, and the network equipment can quit work owing to there is not work about electric power; When treating to disappear unusually, watch-dog can continue to network equipment power supply, and the network equipment restarts work.The execution mode of the another kind of control network equipment also can for, unusual working state signal directly takes place to network equipment sending and receiving devices and/or transmission network in watch-dog, the network equipment sends abnormal signal again to transmitting apparatus, take place unusually so that transmitting apparatus is known receiving equipment and/or transmission network, thereby take appropriate measures.
The network equipment:
The effect of the network equipment is to be subjected to the control of watch-dog that the notice transmitting apparatus takes place when unusual at receiving equipment and transmission network.Therefore, as a kind of embodiment, the network equipment can be the device that is equivalent to switch function, when the network equipment quits work, the network adapter of transmitting apparatus does not receive the network signal that the network equipment sends, and can stop immediately to receiving equipment sending data, receive again up to transmitting apparatus and just can transmit the network signal of the network equipment data again and give receiving equipment.What be appreciated that is that the network equipment can be multiple structure, can judge anomalous signals as long as the abnormal signal that receives from watch-dog can be changed into transmitting apparatus.
The transmission netting twine:
EIA/TIA 568 standards are stipulated line order and the dependent interaction of 100,000,000 netting twines, the line order of regulation 568A is in the standard: green white, green, orange is white, blue, blue white, orange, the white palm fibre of palm fibre, the line order of 568B is: orange is white, orange, green white, blue, blue white, green, palm fibre is white, brown.As shown in Figure 3, adopt the line order of 568A, the effect of corresponding label 1-8 is respectively: 1 output data (+); 2 output data (-); 3 input data (+); 4 are left phone uses 5 to be left the phone use; 6 input data (-); 7 are left phone uses; 8 are left phone uses.This shows that really uses has only four netting twines in 100,000,000 networks, namely 1,2,3,6;
The standard of stating more than the transmission netting twine of the present invention redesigns netting twine for the basis.Transmission netting twine C between transmitting apparatus and receiving equipment, its netting twine and crystal head that connects transmitting apparatus partly is that the connecting line order is 1,2,3,6 netting twine pin, all the other four netting twine pins are cut off.Namely only connect 1 output data (+), 2 output data (-), 3 input data (+), 6 input data (-); The part that the other end of netting twine C is used for the receiving equipment of connection single line transmission only is connected with 3,6 netting twine pins of this netting twine, the netting twine that is receiving equipment has only input data (+) and input data (-), by this netting twine, receiving equipment can only receive data and can not import data;
At the network equipment by network signal notice transmitting apparatus during about the operating state of the network connection state between transmitting apparatus and receiving equipment and/or receiving equipment, transmission netting twine of the present invention also comprises transmission netting twine D, therefore, the effect of transmission netting twine of the present invention has two: the one, and transmitting apparatus sends data on the network adapter of receiving equipment by this transmission netting twine; Another is that transmitting apparatus passes through the network signal between this netting twine reception and the network equipment, thereby judges whether to continue to send data to receiving equipment according to network signal;
In this case, preferred a kind of structure of transmitting netting twine is: the end of transmission netting twine C connects first network adapter, this end by the output data+, the output data-, input data+and input data-netting twine pin access network adapter A; The other end of described transmission netting twine C connects network adapter B, this other end by input data+and input data-netting twine pin access network adapter B; To transmit netting twine C then cuts off from middle certain position, with the input data of this position+netting twine pin and transmission netting twine D the input data+, the output data+the netting twine pin link together, with the input data of this position-netting twine pin and transmission netting twine D the input data-, output data-link together;
Particularly, be used for other and be a netting twine D who is used for connecting the network equipment, standard according to EIA/TIA 568B, the line order of transmission netting twine D is: orange is white, orange, green white, blue, blue white, green, palm fibre is white, brown, (orange is white) input that an other end only keeps 1+, 2 (oranges) input-, 3 (green white) output+, totally four netting twine pins of 6 (green) output-, all cut for all the other four, with 1 input+, 3 outputs+connect, 2 inputs-, 6 outputs-connect.Will be for the netting twine C of two equipment that connect one-way transmission from mid-sectional, cut off 4 (indigo plants), 5 (blue white), 7 (palm fibre is white), four netting twines of 8 (palm fibres), to transmit netting twine D inserts wherein, concrete connection is, 1 (orange is white) input+, 3 (green white) output+joint line be connected with the 3 input+netting twine pins that transmit netting twine; 2 (oranges) inputs-, 6 (green) output-connecting line and 6 import-being connected of transmitting netting twine C;
As shown in Figure 4, transmission netting twine C and transmission netting twine D are connected the effect that the back forms: transmitting apparatus by 1 (green white) output+, 2 (green) output-import with 3 (green in vain) of receiving equipment+, 6 (green) import-are connected, the netting twine pin 3 (orange is white) of transmission netting twine C links to each other with the connecting line of 1 (orange is white), 3 (green white) of transmission netting twine D, be responsible for to receive input+information, the netting twine pin 6 (orange) of transmission netting twine C links to each other with 2 (oranges) of transmission netting twine D, the connecting line of 6 (green), be responsible for reception input-information.Thereby be implemented in the connection of the unilateral network between transmitting apparatus and the receiving equipment, also realize the connection of network between the network equipment and the transmitting apparatus simultaneously.
Network adapter:
Owing to relate to transmitting apparatus and receiving equipment, so network adapter is two, network adapter A and B, and these two network adapter all are standard configuration.Further, also can be configured at the network adapter B of receiving equipment and can only be used for unidirectional reception data, and can not send any data to transmitting apparatus, need carry out physical damage to the pin that is used on the network adapter of receiving equipment being connected with netting twine like this and handle.According to the design principle of above-mentioned netting twine as can be known the effect of eight pins of the network adapter of EIA/TIA 568 definition be respectively: 1 output+, 2 outputs-, 3 inputs+, 4 be left phone use, 5 be left phone use 6 inputs-, 7 be left phone and use, 8 be left phone and use.The pin of the network adapter interface that one-way transmission be used for to receive only keep 3 inputs+, 6 inputs-, all the other all carry out physical damage, make it can only receive data, can not send data.
The present invention adopts the one-way data transmitting device to carry out the one-way transmission of data, and wherein the transmitting apparatus data that will need to send are given the corresponding network adapter B of data receiver equipment by coupled network adapter A via transmission netting twine C one-way transmission.Receiving equipment passes through watch-dog, whether this receiving equipment of monitoring and transmission network be working properly in real time, and watch-dog control is used for the switch of the network equipment of circular document one-way transmission transmitting apparatus, according to acquisition status signal control network equipment notice transmitting apparatus, transmitting apparatus determines to stop or resending data according to notification signal after receiving the notification signal of the network equipment.
Preferably, described watch-dog is by the switch of the signal of telecommunication control network equipment, thus the break-make between the control network equipment and the transmitting apparatus.When receiving equipment or network take place when unusual, watch-dog can stop by the mode that changes current potential network equipment power supply, and when unusual eliminatings, the method recovery by recovering current potential is to the power supply of the network equipment.When network equipment outage quits work, the network connection state of this network equipment and one-way transmission transmitting apparatus becomes disconnection, transmitting apparatus stops to send data to receiving equipment, when the network equipment powers up, when recovering normal operating conditions, the network recovery of this network equipment and transmitting apparatus is to connected state, and transmitting apparatus continues to send file to receiving equipment.
The present invention when carrying out the physics one-way transmission by this invention, can guarantee that the data of transmission do not retransmit and leak the phenomenon of biography from physically having realized the unidirectional reliable transmission of file.Adopt system and method for the present invention, realized absolute file one-way transmission from the physics macroscopic view, the one-way transmission receiving equipment can not transmit any information to the one-way transmission transmitting apparatus by network adapter.
Though described the present invention with reference to exemplary embodiments, should be appreciated that used term is explanation and exemplary and nonrestrictive term.The spirit or the essence that do not break away from invention because the present invention can specifically implement in a variety of forms, so be to be understood that, above-described embodiment is not limited to any aforesaid details, and should be in the spirit and scope that the claim of enclosing limits explain widely, therefore fall into whole variations in claim or its equivalent scope and remodeling and all should be the claim of enclosing and contain.

Claims (5)

1. device that is used for the data one-way transmission, described device comprises: place first network adapter on the transmitting apparatus, place second network adapter on the receiving equipment, connect the first transmission netting twine of described first and second network adapter, it is characterized in that described device also comprises:
The network equipment is used for the operating state to described transmitting apparatus informing network connection status and/or receiving equipment, so that described transmitting apparatus determines whether stop to send data or resending data;
Watch-dog is used for the operating state of real-time monitor network connection status and/or receiving equipment, and controls the network equipment according to the acquisition working state signal and notify described transmitting apparatus;
The wherein said first transmission netting twine only transmits the data that described transmitting apparatus sends to described receiving equipment;
The wherein said network equipment is by himself startup or the next operating state to described transmitting apparatus informing network connection status and/or receiving equipment of interruption, when the described network equipment interrupts, described transmitting apparatus does not receive the network signal of the described network equipment and stops to described receiving equipment sending data, when the described network equipment started, described transmitting apparatus was received the network signal of the described network equipment and is resend data to described receiving equipment;
Described watch-dog is controlled startup or the interruption of the network equipment by the mode of electric control signal, and described watch-dog comprises:
The order receiver module is used for receiving the order that stops described watch-dog that described receiving equipment sends when network connection state and/or receiving equipment operating state are unusual, and described watch-dog is quit work;
Watchdog module is used for restarting watch-dog after described watch-dog quits work; And
Power supply module is used for to described network equipment power supply, and cuts off the power supply supply of the network equipment when described watch-dog work stops, and continues when described watch-dog starts to network equipment supply power supply.
2. device according to claim 1 is characterized in that, described second network adapter is the unilateral network adapter that receives only data.
3. device according to claim 1 and 2 is characterized in that, described device also comprises the second transmission netting twine that connects the network equipment and transmitting apparatus.
4. device according to claim 1 and 2 is characterized in that, described device also comprises: be connected the second transmission netting twine between the network equipment and the first transmission netting twine;
Wherein said first the transmission netting twine an end connect first network adapter, this end by output data+, output data-, the input data+and the input data-the netting twine pin insert first network adapter;
Wherein said first the transmission netting twine the other end connect second network adapter, this other end by the input data+and the input data-the netting twine pin insert second network adapter;
The wherein said first transmission netting twine is cut off between therefrom, with the mid portion of the described first transmission netting twine be positioned at the input data of first that end of network adapter+netting twine pin and the second transmission netting twine the input data+, the output data+the netting twine pin link together, with the mid portion of the described first transmission netting twine be positioned at the input data of first that end of network adapter-netting twine pin and second transmit the input data of netting twine-, export data-link together.
5. the method for a data one-way transmission is characterized in that, said method comprising the steps of:
S1: receiving equipment receives the data that transmitting apparatus sends by the one-way transmission netting twine, and wherein said one-way transmission netting twine can only transmit the data that transmitting apparatus sends to receiving equipment;
S2: watch-dog is monitored operating state and the network state of described receiving equipment in real time, according to acquisition status signal control network equipment notice transmitting apparatus;
S3: described transmitting apparatus determines to stop or resending data according to notification signal after receiving the notification signal of the network equipment;
The method of the watch-dog control network equipment is for notifying the switch of described transmitting apparatus among the wherein said step S2 by the signal of telecommunication control network equipment, be specially: when receiving equipment and network were unusual, described watch-dog cut off the power supply supply of the described network equipment by the mode that changes current potential; When unusual the eliminating, the power supply supply that described watch-dog recovers the network equipment by the mode of recovering current potential;
Wherein said step S3 is specially: after described network equipment outage quit work, the network connection state of described transmitting apparatus and the described network equipment became disconnection, and described transmitting apparatus stops to send data; When the network equipment restored electricity, the network recovery of described transmitting apparatus and the described network equipment was to connected state, and described transmitting apparatus sends data to receiving equipment again.
CN 201010220260 2010-07-08 2010-07-08 Method and device used for one-way transmission of data Expired - Fee Related CN101888284B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN 201010220260 CN101888284B (en) 2010-07-08 2010-07-08 Method and device used for one-way transmission of data

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN 201010220260 CN101888284B (en) 2010-07-08 2010-07-08 Method and device used for one-way transmission of data

Publications (2)

Publication Number Publication Date
CN101888284A CN101888284A (en) 2010-11-17
CN101888284B true CN101888284B (en) 2013-08-28

Family

ID=43074022

Family Applications (1)

Application Number Title Priority Date Filing Date
CN 201010220260 Expired - Fee Related CN101888284B (en) 2010-07-08 2010-07-08 Method and device used for one-way transmission of data

Country Status (1)

Country Link
CN (1) CN101888284B (en)

Families Citing this family (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105592131A (en) * 2015-06-27 2016-05-18 刘晓建 Device for unidirectional file transmission among different networks
CN106488552B (en) * 2015-08-31 2020-02-21 展讯通信(上海)有限公司 Registration process control method and system and mobile terminal
CN105392209A (en) * 2015-09-29 2016-03-09 努比亚技术有限公司 Data exchange method of terminal device, terminal device and system
EP3595267B1 (en) * 2018-07-11 2020-06-17 Siemens Aktiengesellschaft Method, devices and system for exchanging data between a distributed database system and devices
CN114257433A (en) * 2019-07-05 2022-03-29 郭爱波 Ethernet channel gate
EP3772206A1 (en) * 2019-07-31 2021-02-03 Siemens Aktiengesellschaft Network adapter for the unidirectional transmission of data
CN114257418A (en) * 2021-11-26 2022-03-29 国家电投集团科学技术研究院有限公司 Raspberry pie-based load prediction method and device and electronic equipment

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN2703366Y (en) * 2004-05-08 2005-06-01 青岛金弘测控技术发展有限公司 Single direction transmission gateway for computer network
CN201398200Y (en) * 2009-04-30 2010-02-03 成都美年科威信息技术有限公司 Distributed one-way transmission system for network information security
CN101764768A (en) * 2010-01-19 2010-06-30 北京锐安科技有限公司 Data security transmission system

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP4337056B2 (en) * 2005-09-12 2009-09-30 ソニー株式会社 COMMUNICATION DEVICE, COMMUNICATION STATUS DETECTION METHOD, AND COMMUNICATION STATUS DETECTION PROGRAM

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN2703366Y (en) * 2004-05-08 2005-06-01 青岛金弘测控技术发展有限公司 Single direction transmission gateway for computer network
CN201398200Y (en) * 2009-04-30 2010-02-03 成都美年科威信息技术有限公司 Distributed one-way transmission system for network information security
CN101764768A (en) * 2010-01-19 2010-06-30 北京锐安科技有限公司 Data security transmission system

Also Published As

Publication number Publication date
CN101888284A (en) 2010-11-17

Similar Documents

Publication Publication Date Title
CN101888284B (en) Method and device used for one-way transmission of data
CN108537347A (en) Information technoloy equipment monitoring system and method
CN105656902A (en) One-way reliable transmission and control system based on light transmission
CN102331751A (en) Real-time industrial control system monitoring method and system
CN104113428A (en) Apparatus management device and method
CN103152210A (en) Method for repairing spanning tree protocol (STP) forwarding state abnormalities and stacking equipment
CN102752289A (en) Master station for power utilization information collecting system
CN104503947B (en) Multipath server and its signal processing method
CN102668502B (en) Method and system for impostor detector
CN105049238A (en) Redundancy backup method and equipment for LTE (Long Term Evolution) gateway equipment exchange subsystem
CN116186744B (en) Computer data transmission system and method
CN106850264B (en) A kind of network equipment
CN102355367B (en) A kind of distributed LACP user equipments deadlock prevention technique and device
CN102045600A (en) Link protection method and device of Ethernet accessed to SDH (Synchronous Digital Hierarchy) optical network
CN111082999B (en) Self-inductance self-rescue PDU of network equipment and self-inductance self-rescue method thereof
CN202940836U (en) Network switching device
CN101483527B (en) Dual engine switch device and engine switching method
CN201887561U (en) Safety communication system for power grid monitoring system
CN102624567A (en) Hardware type network safety control server thermal backup device
CN106713286A (en) Electric power data transmission system based on multilevel authentication and suspected attack isolation
CN106230789A (en) A kind of data transmission method and equipment
CN111818051A (en) Distribution network encryption system and method based on low energy consumption
CN105915375B (en) The activestandby state management method of Dual-Computer Hot-Standby System
Kitamura Configuration of a Power-saving High-availability Server System Incorporating a Hybrid Operation Method
CN106603318B (en) Feedback-free security isolation and information unidirectional transmission system and dual-computer backup method

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20130828

Termination date: 20210708

CF01 Termination of patent right due to non-payment of annual fee