终端设备物理隔离技术策略研究

Study on Technology and Strategy of Terminal Equipment Physical Isolation

为防范来自网络和本地针对计算机信息的侵害,本文对现有的物理隔离技术进行较为详尽的分析,强调处理涉密信息的终端设备硬盘必须与连接网络的硬盘物理隔离。根据计算机信息安全对身份鉴别的要求,借鉴门禁与汽车防盗技术,提出使用身份卡、汽车防盗遥控器作为身份鉴别的凭证,将其系统模块与物理隔离部件集成为一个产品的新技术策略,同步实现防范来自远程和本地的侵害。新策略是对现有成熟技术的整合,完全可行并值得推广。

Aiming to prevent the damage of information in computer from Internet and local network, the existing physical isola- tion technology is analyzed, specially for the situation, that the hard drive of the terminal equipment carried privileged information has to connect with Internet. Based on computer information security to identification, referenced of the lesson on access control and automotive anti-theft technology, a new technical strategy is proposed, which combines system modules with physical isolated parts as one production by using identity cards, car alarm remote control as the certificate of authentication, to avoid remote and local aggression. The new strategy is the integration of existing mature technology, therefore it＇ s entirely feasible and worthy of promotion.