| 摘要 |
The invention relates to a method for communication between secured computer systems (Zone1, Zone2) in a computer network infrastructure. Data packets are transmitted between a plurality from a group of processing computer systems (10, 11), such transmission being performed by means of at least one switching computer system (1, 2). The data packets are advantageously routed via at least one relay system (5, 6, 7) that is connected upstream or downstream of the switching computer system (1, 2) in a transmission path for the data packets. All from the group of processing computer systems (10, 11) keep predetermined network ports at least temporarily closed, so that access to a respective processing computer system (10, 11) via a network by means of these network ports is prevented. The relay system (5, 6, 7) keeps predetermined network ports closed at least to the switching computer system (1, 2) that has the relay system (5, 6, 7) connected downstream, so that access to the relay system (5, 6, 7) via a network by means of these network ports is prevented. In addition, a computer network infrastructure and a computer program product for carrying out a corresponding method are described. |
