Security gateway with two stage data transfer requests via gateway interim data store and monitoring to identify requests not initiated by a human

摘要

A secure gateway is 200 connected to corporate 210 and public 205 networks. Preferably the interface to each network 215/220 and an associated user interface 240/255 exist in isolated computing environments 245/250. These environments may be physically isolated or may be separate virtual machines. In order to transfer data from a source 230 on the public network to a recipient 235 on the corporate network, a request for transfer from the source to the gateway intermediate data store 225 must be submitted via network/user interface 1. A separate request for transfer from the gateway data store to the recipient device must then be submitted via user network/interface 2. Supervisory module 270 monitors the request characteristics to determine if they originate from a person or an automated system (eg. bot). In the latter case a further check (eg. CAPTCHA) may be required before allowing data transfer to the recipient device.