网络信息安全无反馈单向传输系统的设计与实现  

Design and Implementation of Network Information Security One-way Transmission without Feedback

作　　者：刘永富[1] 焦斌亮[1] 靳国庆[2] 欧阳哲[3] 

机构地区：[1]燕山大学信息科学与工程学院,河北秦皇岛066004 [2]中国科学院计算技术研究所前瞻实验室,北京100018 [3]西安电子科技大学软件学院,陕西西安710071

出　　处：《计算机安全》2010年第11期38-41,共4页Network & Computer Security

摘　　要：在网络不同的安全域之间传输文件时,要求数据只能由低密级网络向高密级网络传输。介绍了位于不同安全域的两台计算机之间实现单向传输的原理和技术。系统地阐述了如何利用Atmel公司的ARM9芯片AT91SAM3U4E控制USB设备和SPI接口,结合光耦芯片6N137,从硬件和软件两个方面来实现无反馈数据单向传输。通过实验验证该系统利用USB2.0接口技术、SPI的DMA传输方式以及光耦隔离技术实现了快速、单向、可靠的数据传输。When transferring files between the different security domain, files are required to be only transferred from low security domain to high security domain. This article describes the technology and principles of how to realize one-way transmission between two computers in different security domains. It systematically illustrate how to use Atmel＇s ARM9 chip AT91SAM3U4E to control USB devices and SPI interfaces,combining with optocoupler chip 6N137,and to implement one-way data transmission without feedback from both hardware and software. Experiment results verify that the system based on USB2.0 Interface technology, SPI＇s DMA transmission , and coupler isolation technology achieves high-speed, one-way, reliable data transmission.

关 键 词：单向传输 网络隔离 光耦隔离器 USB2.0 串行外设接口 直接内存访问 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]