基于光闸的单向传输特性的系统可靠性研究  

Research on System Reliability Based on Unidirectional Transmission Characteristics of Shutter

作　　者：程鑫 付懿姝 王鑫 席晟哲 Cheng Xin;Fu Yi-shu;Wang Xin;Xi Sheng-zhe

机构地区：[1]国网河南省电力公司安阳供电公司,河南安阳455000

出　　处：《今日自动化》2022年第6期80-82,共3页Automation Today

摘　　要：许多涉密单位都采取物理隔离的方法,以达到对办公环境和涉密资料的保护。这种物理隔离指的是彻底断开,对涉密网络环境下的商业信息系统进行数据交换和其他业务需求产生了一定的影响,同时,能够进行信息交流的载体也有可能成为泄密的手段,因此涉密网络的安全问题依然存在。针对上述问题,文章利用光媒体和光传输装置的单向性特性,采用了光纤网络、分光机等器件,通过单向纤维作为传输媒介,在硬件水平上确保单向隔离,并在一定程度上建立了一个逻辑传输信道,从而避免了在传输过程中的泄漏。文章针对涉密网络的特点,提出一种专用的传送协议来实现信息的传递。私有传送协议能够管理和控制整个传送过程,中断所有的TCP连接,并使用此协议对文件进行封装、分析。所有的网络资料都要以千兆光纤网卡为基础,通过单向光闸传输控制系统,将Libpcap技术和PF_RING技术相结合,实现高速数据包捕捉,从而完成系统的文件同步和数据库同步性能。Many secret related units adopt the method of physical isolation to protect the office environment and secret related materials.This physical isolation refers to the complete disconnection,which has a certain impact on the data exchange and other business requirements of the business information system under the classified network environment.At the same time,the carrier that can exchange information may also become a means of disclosure.Therefore,the security problem of the classified network still exists.In view of the above problems,this paper uses the unidirectional characteristics of optical media and optical transmission devices,adopts optical fiber networks,optical splitters and other devices,uses unidirectional fibers as transmission media,ensures unidirectional isolation at the hardware level,and establishes a logical transmission channel to a certain extent,so as to avoid leakage in the transmission process.According to the characteristics of secret related networks,this paper proposes a special transmission protocol to realize the transmission of information.Private transfer protocol can manage and control the whole transfer process,interrupt all TCP connections,and use this protocol to encapsulate and analyze files.All network data shall be based on gigabit optical fiber network card and transmitted through one-way shutter control system,combining Libpcap technology and PF_Ring technology is combined to realize high-speed packet capture,so as to complete the file synchronization and database synchronization performance of the system.

关 键 词：涉密网络 私有传输协议 LIBPCAP PF_RING技术 单向光闸 

分 类 号：TN929.1[电子电信—通信与信息系统] TP309[电子电信—信息与通信工程]