Data transmission system and method in physical network separation environment

A data transmission system in a physical network separation environment, the system comprising:

• a drive device physically moving a predetermined storage medium for first to third storage medium drives writing or reading a data file on or from the predetermined storage medium;
• a source-side server executing writing the data file on the storage medium loaded in the first storage medium drive, after switching to a physical connection to the first storage medium drive by the drive device, the source-side server connected to an external network;
• a clean PC conducting hash value verification and a test for infection of malicious code with respect to the data file that has been written on the storage medium loaded in the second storage medium drive, after switching to a physical connection to the second storage medium drive from the source-side server by the drive device when the writing by the source-side server is completed, the clean PC having no network connection;
• and
• a destination-side server executing reading the tested data file from the storage medium loaded in the third storage medium drive and sending a signal to the drive device so that the predetermined storage medium is unloaded from the drive device when the reading is completed, after switching to a physical connection to the third storage medium drive from the clean PC by the drive device and only when the hash value is verified and the data file passes the test, the destination-side server connected to a critical information infrastructure network,
• wherein the source-side server and the destination-side server have different security levels from each other.

A data transmission method in a physical network separation environment, the method comprising:

• switching, by a drive device, to a physical connection between a source-side server and a storage medium drive while loading a storage medium in the storage medium drive, the source-side server connected to an external network;
• switching, by the drive device, to a physical connection between a clean PC and the storage medium drive from the source-side server after the source-side server completes writing a data file on the storage medium, the clean PC having no network connection;
• switching, by the drive device, to a physical connection between a destination-side server and the storage medium drive from the clean PC by the drive device after the clean PC conducts hash value verification and a test for infection of malicious code with respect to the data file on the storage medium when the writing by the source-side server is completed and only when the hash value is verified and the data file passes the test, the destination-side server connected to a critical information infrastructure network;
• and
• unloading, by the drive device, the storage medium from the storage medium drive after sending a signal to the drive device so that the storage medium is unloaded from the drive device when the destination-side server completes reading the data file from the storage medium,
• wherein the source-side server and the destination-side server have different security levels from each other.

A data transmission method in a physical network separation environment, the method comprising:

• loading, by a drive device, a storage medium in a first storage medium drive directly and physically connected to a source-side server, the source-side server connected to an external network;
• physically moving, by the drive device, the storage medium to a second storage medium drive directly and physically connected to a clean PC from the source-side server after the source-side server completes writing a data file on the storage medium, the clean PC having no network connection;
• physically moving, by the drive device, the storage medium to a third storage medium drive directly and physically connected to a destination-side server from the clean PC by the drive device after the clean PC conducts hash value verification and a test for infection of malicious code with respect to the data file on the storage medium when the writing by the source-side server is completed and only when the hash value is verified and the data file passes the test, the destination-side server connected to a critical information infrastructure network;
• and
• unloading, by the drive device, the storage medium from the third storage medium drive after sending a signal to the drive device so that the storage medium is unloaded from the drive device when the destination-side server completes reading the data file from the storage medium,
• wherein the source-side server and the destination-side server have different security levels from each other.