面向网络隔离架构的业务流行为控制高可信交互框架

Highly Trusted Interaction Framework for Business Behavior Control Based on Network Isolation Architecture

本文提出一种面向网络隔离架构的业务流行为控制的高可信交互框架,解决了企业互联网移动应用难以访问复杂安全架构下的高安全区业务数据的问题,确保了业务系统关键数据的安全.在网络安全防护要求下,引入移动接入网关,分解业务数据跨安全区交互过程,通过特殊的访问转换与通信方法,实现了业务数据通过各型隔离装置的安全、可信传输和业务流行为控制.该框架目前已在员工报销、考勤打卡、电力系统配网抢修、移动巡检等多个业务领域得到广泛应用.

This study proposes a highly trusted interaction framework for business behavior control based on network isolation architecture. This framework not only makes the access of business data in the high security zone under the complex security architecture for enterprise internet mobile applications possible but also ensures the security of key data of the business system. Under the requirements of network security protection, the mobile access gateway is introduced to decompose the interaction process of business data across the security zone. Then, it designs an access conversion and communication method, which realizes the safe and reliable transmission of business data through various isolation devices and business flow control. The framework has been widely used in many business areas such as employee reimbursement, attendance punching, power system distribution repair and mobile inspection.