[1] Chen Youping, Yin Yong, Li Fangmin, Zhou Zude, et al. Design and realization of security physical isolation system [J]. Journal of Southeast University (English Edition), 2005, 21 (1): 11-15. [doi:10.3969/j.issn.1003-7985.2005.01.003]

Copy

Design and realization of security physical isolation system()

Share：

Journal of Southeast University (English Edition)[ISSN:1003-7985/CN:32-1325/N]

Volumn:

21

Issue:

2005 1

Page:

11-15

Research Field:

Computer Science and Engineering

Publishing date:

2005-03-30

Info

Title:

Design and realization of security physical isolation system

Author(s):

Chen Youping¹;  Yin Yong¹;  Li Fangmin²;  Zhou Zude²

¹School of Mechanical Science and Engineering, Huazhong University of Science and Technology, Wuhan 430074, China
²School of Information Science and Engineering, Wuhan University of Science and Technology, Wuhan 430070, China

Keywords:

physical isolation;  internal and external networks;  PCI(peripheral component interconnect)bus;  system management software;  driver

PACS:

TP393.4

DOI:

10.3969/j.issn.1003-7985.2005.01.003

Abstract:

A physical isolation system based on PCI(peripheral component interconnect), embedded with intelligence card technology, strong identity authentication technology and security audit, etc., is introduced.The system can physically isolate the internal and external networks.The hardware of the system, including PCI interface control circuits, network interface circuits and logic control circuits, is designed to automatically adapt its operation speed and mode to the network and securely isolate the internal and external networks;the software of the system, including the security strategy management module, the security audit module, the database record exchanging module, the file exchanging module and the mail exchanging module, is designed to efficiently exchange and manage the data transference between the internal and external networks.Also the driver of the system is implemented with Windows driver development kits(DDK)based on Network Driver Interface Specification(NDIS).The prototype of the system developed has been employed in the Police Fire Protection Bureau of Hubei Province, which performs consistently and efficiently.The technological cruxes discussed have practical values for related subjects.

References:

[1] Wei Si Company.Several key points in deploying physical isolation technology in confidential network [J].Secrecy Works, 2002, 7(5):34-35.(in Chinese)
[2] Zhao Zheliang, Huang Qingfang.Several understandings about network physical isolation [J].Technology and Application of Network Security, 2002, 4(2):14-16.(in Chinese)
[3] Wu Gan.The current status and development of physical isolation technology [EB/OL].Http://www.ccw.ccw.com.cn/htm/net/seminar/01-8-31-2.asp.2003/2004-04.(in Chinese)
[4] Wei Wei.The development trend of network security [EB/OL].Http://www.ict.ac.cn/inf/safety.htm.2003/2004-03.(in Chinese)
[5] Li Haiming, Li Zhipeng.Analysis on physical isolation technology of Chinese [J].Network World, 2002(3):30.(in Chinese)
[6] Northcutt S, Zeltzer L, Winters S, et al.Inside network perimeter security [M].New Riders, 2003.4.
[7] Carlisle A, Steve L.Understanding public key infrastructure: concepts, standards, and deployment considerations [M].Indiana:Macmillan Technical Publishing, 1999.
[8] Yi Fasheng, Peng Mei.The structure of Windows and the design of network driver [J].Computer Application, 1999, 11(10):61-63.(in Chinese)
[9] Cant C.Introduction to design of WDM device driver [M].Translated by Ma Li.Beijing:China Machine Press, 2000.(in Chinese)

Memo

Memo:

Biography: Chen Youping(1957—), male, doctor, professor, ypchen@hust.edu.cn.

Common functions