# US 2021/0344646 A1 · Method, device and system for data communication control

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2021/0344646 A1
- Document ID: US20210344646A1
- Status: Published application
- Kind: A1
- Application number: 17/002,876
- Filed: 2020-08-26
- Published: 2021-11-04
- Earliest claimed: 2020-04-29
- Assignees: Ankang Hongtian Science & Technology Incorporated Company
- Applicants: Ankang Hongtian Science&Technology Incorporated Company
- Inventors: Lihong HAO
- Web page: https://patentgrep.com/patent/US20210344646A1

## CPC

- H04L 63/0236: {Filtering by address, protocol, port number or service, e.g. IP-address or URL}
- H04L 12/40032: {Details regarding a bus interface enhancer}
- H04L 12/40189: {by using a plurality of bus systems}
- H04L 63/0209: {Architectural arrangements, e.g. perimeter networks or demilitarized zones}
- H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)}
- H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)}
- H04L 65/1016: IP multimedia subsystem [IMS]
- H04L 65/1104: Session initiation protocol [SIP]
- H04L 63/0263: {Rule management}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Disclosed are a method, a device and a system for data communication control. In the method for data communication control, data sent from a first communication device is received by a data forwarding device, where the data is transmitted through at least two types of physical interfaces in sequence. The data is then forwarded by the data forwarding device to a second communication device that is preconfigured. During the process of sending the data by the first communication device, the data is physically isolated by at least two types of physical interfaces, and then forwarded to the second communication device that is preconfigured. Even if the first communication device is illegally invaded by outsiders, the outsiders only know the IP address of the first communication device but fail to know the IP address of the destination of the physically isolated data.

## Claims

### Claim 1

A method for data communication control, comprising:
receiving, by a data forwarding device, data sent from a first communication device, wherein the data is transmitted through at least two types of physical interfaces in sequence; and
forwarding, by the data forwarding device, the data to a second communication device that is preconfigured.

### Claim 2 (depends on 1)

The method of claim 1, wherein the data is transmitted through an IP network port and then a universal serial bus (USB) port.

### Claim 3 (depends on 1)

The method of claim 1, wherein the method further comprises:
determining whether the data conforms to a preset communication rule; and
if yes, forwarding the data to the second communication device that is preconfigured; and if no, intercepting the data.

### Claim 4 (depends on 3)

The method of claim 3, wherein the preset communication rule is a Session Initiation Protocol (SIP).

### Claim 5

A data communication control device, comprising:
a receiving module configured to receive data sent from a first communication device; wherein the data is transmitted through at least two types of physical interfaces in sequence; and
a forwarding module configured to forward the data to a second communication device that is pre-configured.

### Claim 6 (depends on 5)

The data communication control device of claim 5, wherein the data is transmitted through an IP network port and then a universal serial bus (USB) port.

### Claim 7 (depends on 5)

The data communication control device of claim 5, further comprising:
a judgment module configured to determine whether the data conforms to a preset communication rule, and if yes, the data is forwarded to the second communication device that is preconfigured; if no, the data is not forwarded.

### Claim 8 (depends on 7)

The data communication control device of claim 7, wherein the preset communication rule is a session initiation protocol (SIP).

### Claim 9

A data communication system, comprising a first IMS subsystem, a data forwarding device and a second IMS subsystem;
wherein the first IMS subsystem comprises a first security isolation module; the first security isolation module comprises a first physical interface, a second physical interface and a first bridge submodule that bridges the first physical interface and the second physical interface;
the first physical interface is configured to receive data sent from a first communication device and transmit the data to the second physical interface through the first bridge submodule; the second physical interface is configured to transmit the data to the data forwarding device; wherein the first physical interface and the second physical interface differ in type;
wherein the data forwarding device is configured to forward the data to the second IMS subsystem that is preconfigured; and
wherein the second IMS subsystem comprises a second security isolation module; the second security isolation module comprises a third physical interface, a fourth physical interface and a second bridge submodule that bridges the third physical interface and the fourth physical interface;
the third physical interface is configured to receive the data forwarded by the data forwarding device and transmit the data to the fourth physical interface through the second bridge submodule; the fourth physical interface is configured to transmit the data to a corresponding second communication device, wherein the third physical interface and the second physical interface are of the same type; and the fourth physical interface and the first physical interface are of the same type.

### Claim 10 (depends on 9)

The data communication system of claim 9, wherein the first physical interface and the fourth physical interface are both IP network ports; and the second physical interface and the third physical interface are both USB ports.

### Claim 11 (depends on 9)

The data communication system of claim 9, wherein the data forwarding device is configured to determine whether the data conforms to a preset communication rule, and if yes, the data is forwarded to the second communication device that is preconfigured; and if no, the data is not forwarded.

### Claim 12 (depends on 11)

The data communication system of claim 11, wherein the preset communication rule is a session initiation protocol.
