Abstract: Nowadays, methods of network attack change significantly from one year to the next. In this situation, there comes a new technology called secure network GAP, which cuts off the direct connection in datalink layer, exchanges data in its own control, and therefore it resolves the conflict between secure isolation and data exchange effectively. This paper describes a method of implementing network secure isolation and data exchange system based on USB, which has been promoted in the network construction of Shanghai E-government network

Key words: Information security; Secure isolation; Data exchange; GAP; USB

摘要： 在当前网络攻击方式不断变化的背景下，新出现的安全隔离技术直接阻断网络在链路层上的连接，并进行受控的数据交换，有效地解决了不同信任域间既要安全隔离又要信息交换的矛盾。该文讨论了一种基于USB 实现安全隔离与数据交换的方法，并已经在上海市电子政务中得到了应用。

关键词: 信息安全；安全隔离；数据交换；GAP；USB