新型城市轨道交通网络间安全单向传输技术

One-way Transmission Technology for New Urban Rail Transit Network Safety

安全单向传输技术指不同安全级别网络之间单一数据流向的传输。为了应对城市轨道交通业务系统中各个子系统之间的复杂接入带来的潜在威胁,中国城市轨道交通协会提出安全生产网和外部服务网间应实施物理安全隔离。上海轨道交通目前所使用的通用单向传输技术无法满足业务传输的要求,且存在较大的安全隐患。提出了一种新型单向安全传输技术,介绍了该传输技术所采用的核心技术、所需的私有协议和传输模块工作机制。试验验证表明,在性能和可靠性方面,该传输技术比传统安全隔离网闸表现优异,且对其他子系统和网络具有普适性。

Secure one-way transmission technology refers to the transmission of single data flow between networks with different security levels.To cope with the potential threats caused by complex access between various subsystems in urban rail transit business system,China Association of Metros has proposed that physical security isolation shall be implemented between safety production network and external service network.Since the one-way transmission technology currently used by Shanghai rail transit cannot meet the requirements for service transmission and has significant potential security risks,a new one-way secure transmission technology is proposed.In this paper,the core technology,the required private protocol and working mechanism of the transmission module are introduced.Experimental verification shows that the one-way transmission technology outperforms the traditional secure isolated gates in terms of performance and reliability,and is universally applicable to other subsystems and networks.