A Method for Cross-Network Service Forwarding Based on Unidirectional Network Isolation Devices
With the increasing severity of network security threats, physical isolation has become an important means of protecting high-security networks. However, traditional network isolation devices only support unidirectional file transfer, which cannot meet modern organizations’ urgent needs for real-time service calls across networks. This paper proposes a service forwarding method based on the unidirectional transmission characteristics of network isolation devices, achieving crossnetwork service calls in isolated network environments through innovative architectural design. The method adopts a collaborative working mode between External Proxy Service (EPS) and Internal Proxy Service (IPS), combining asymmetric encryption technology with the physical isolation characteristics of network isolation devices to build a secure and reliable crossnetwork service call mechanism. Through carefully designed protocol conversion and data encapsulation schemes, the method achieves API-level cross-network service access while maintaining network physical isolation. Experimental results show that the method has excellent reliability and security. This research provides an innovative solution to the challenge of service calls in physically isolated network environments, balancing security and business efficiency. The method’s design concepts and implementation approaches have important reference value for cross-network service calls in similar scenarios, providing a new technical path for building more secure and efficient cross-domain service systems.
Authors
- Rocky K. C. Chang (ORCID: https://orcid.org/0000-0002-2648-5814)
- Fanfan Wang (ORCID: https://orcid.org/0000-0002-1824-9213)
- Fei Meng (ORCID: https://orcid.org/0009-0005-7016-913X)
Institutions
- China Foreign Affairs University (CN)
- China University of Petroleum, Beijing (CN)
- Beijing Transportation Research Center (CN)
Publication Details
- Published
- 2024-12-27
- DOI
- https://doi.org/10.1109/icctit64404.2024.10928394
- Primary Topic
- Network Security and Intrusion Detection
- Type
- article
- Field-Weighted Citation Impact
- 0.00