| 摘要 |
A manifest transfer engine for a one-way file transfer system is disclosed. The manifest transfer engine comprises a send side 301, a receive side 303, and a one-way data link 302 enforcing unidirectional data flow from the send side to the receive side. The send side receives and stores a file manifest table 304 from an administrator server. The send side also receives a file 305 from a user and compares it with the file manifest table. Transfer of the file to the receive side via the one-way data link is allowed only when there is a match between the file and the file manifest table (i.e. there is a corresponding entry for the file in the file manifestation table). In an alternative embodiment (Figure 3B), the receive side instead receives and stores the file manifest table from the administrator server and compares it with the file received from the send side via the one-way data link to determine whether to allow transfer of the file. The uni-directional link may be an optical link. The file manifestation table may contain hashes of files that are allowed to be sent/received across the one-way link. The arrangement may provide for secure patching of a system connected to an external network via a one-way link from the external system. |
