Menu

Classified network cabling and the classified network cabling relationship

In the 1990 s, began to promote informatization construction in our country, all walks of life according to their own business characteristics to implement information construction and application. The concept of integrated wiring construction synchronously with building construction, has been widely accepted by people at the beginning of this century and into practice. As the foundation platform of network construction, how to make it meets the demands of the development of the network, and can guarantee the security of the network information, ensure that state secrets do not leak, become an important topic in the current informatization construction. For China's procuratorial organs, in to promote the development of informatization construction in the process of long, how to grasp the information security problem in network infrastructure, do not walk or little detours, is the main task of our procuratorial organs information technology personnel.

A, the relationship between information security and information technology application

Refers to the computer network information security platform based on computer information is stolen, not lost, leaks, and ensure the safety of the state secret. Information security is an important part of national secrecy work, is an important approach to ensure the safety of state secrets, it and network security are two different concepts, refers to the network system security, network security is not make foreign a hacker or virus attack, and cause crashes, the system. Tell from the division of management, information security management by confidential department, network security management by network technology department.

With the development of information technology and the popularization of networked applications, procuratorial organs to carry out the network office, handle a case, the government departments to carry out all kinds of management business informatization. General secretary hu jintao in the work report of the 17th national congress put forward the "industrialization, informationization, urbanization, marketization and internationalization", the information on the work report of the national party congress put forward for the first time, fully illustrates the current status and importance in the development of informatization in our country. With the extensive application of information technology, information security is concerned with the industry growing, field, personnel, almost all the state organs of computer network involves the information security problem, part of the enterprises and institutions, research institutes also has the problem of network information security. Even if there is no network office, there is also a unit using the personal computer office the information security problem.

Information security is an important way for the guarding of state secrets, is related to whether the correct leadership of the party and the state in the information era of building socialism with Chinese characteristics to the national people's big issues, the big problem is to maintain the party's ruling status, national security, economic development is the big problem. Must therefore be cause of the party and state organs, attaches great importance to take effective measures to ensure information security involves state secrets.

Technically, on the one hand, the emphasis on promoting informatization, improve the work efficiency and quality, realize the human cannot achieve. On the other hand, with the development of the application, the network information security problem is becoming more and more information security means not achieve confidentiality regulations, does not guarantee information security, restrict the application of information technology, formed the contradiction between informatization and information security. In previous years in the construction of network, as a result of management, technical and financial problems, most did not consider information security system construction. A small unit with a consideration but not meet the requirements of secrecy rules. Formed a network in the construction of informationization construction is not perfect, later network system construction of information security system construction.

The application of information technology and information security, the relationship between the two is both opposite and unified. On the one hand, the construction of information security is in order to ensure the normal development of information technology application and to ensure the safety of application of classified information, plays an escort role for information technology applications. , on the other hand, when the informationization application without build perfect means of secrecy, it limits and restricts the informationization application scope, but the goal is the unified. The network platform to establish perfect information security measures, make the network application in a safe, reliable and smooth traffic environment, under the condition of ensure the safety of state secrets, give full play to the role of the network should be.

For the procuratorial organs and other state organs, late in the network system of information security construction problems of the construction of the more common. Current the construction of information security as a priority. To solve this problem is not good, direct limit the application of information technology, especially the influence the implementation of the online courses' work. State secrecy department requirements of state organs in the information system construction of the construction of information security system synchronously, but exists many problems and contradictions in the practical work. Procuratorial private network construction of the country is a chess game, carried out in accordance with the unified planning and deployment of the supreme people's procuratorate. For each level of procuratorial organ, shall be the full implementation of the informatization construction of classified technology protection rules, among them, the implementation of the network infrastructure safety requirements - part of the information network physical isolation, integrated wiring, ground wire, cabinets, shielding room is an important part of.

Second, classified information system network wiring project characteristics

Classified information network system refers to the transmission, processing, storage, computer network system containing involving state secrets. Classified network cabling is to provide link to classified information network system, set up the comprehensive wiring system channel. In some office buildings in the construction of multiple network system, including classified, the classified network, public information network, public voice communication network, such as multiple systems, these systems are typically synchronous construction in building construction. Therefore classified is certain to be referred to in the building of the integrated wiring network cabling and other classified the relationship between the network cabling, involving the relationship between the building and equipment installation system. How to deal with the relationship between these systems, the first thing to understand the characteristics of the classified network cabling engineering and its main difference with other wiring systems.

2.1 classified information network wiring type

Classified information network wiring, into the kinds of fiber optic cabling is shielded twisted-pair cable STP, SFTP, FTP, unshielded twisted pair UTP. They each have their own characteristics.

Fiber optic cabling main features a high information transmission rate and bandwidth, within the prescribed range support 1 gbase - 10 gbase - T, T and six kind of twisted pair is 4-40 times. Line no electromagnetic radiation, won't produce leakage signal, security and confidentiality. Vertical building cabling system with multimode fiber, horizontal wiring system, construction of multimode optical fiber optical fiber is used to the desktop system, usually is a large amount of information transmission, the required bandwidth and high speed, requires builders will adopt information confidential. Investing, although the price of the fiber, a big drop in 20 to 30 yuan per meter, but its form a complete set of optical connector, distribution frame price is higher, from the overall investment of the construction of the network, cost is to use six kind of twisted pair do twice the links of the network. So builders how to choose, is determined according to the condition of job requirements and capital, and not the pursuit of excessive investment waste generated in advance.

Shielded twisted-pair STP, SFTP, FTP, and unshielded twisted pair UTP, six standard bandwidth can reach 200 MZH, rate of 250 MPBS. Both has the effect of preventing electromagnetic radiation and anti-interference, is now mainly choose the wiring products. Shielding wire is the feature of the anti-interference ability is not shielded wire effect is good, low error rate. Both comparative parameters as follows:

UTP cables (not shield) 40 db;

FTP cables (85 db is applied to longitudinally wrap aluminum foil);

SFTP cable "(the longitudinally wrap aluminum foil, copper network) 90 db;

STP cable (each pair of wire and cable winding and the aluminum foil, copper establishment network) 98 db.

In classified network integrated wiring projects use FTP cable (longitudinally wrap aluminum foil) is more, the cost is about 50% higher than the shielded wire.

2.2 the characteristics of the classified network wiring project

Classified the main characteristic of network cabling engineering, as a link of network wiring, the transport information, ensure no electromagnetic radiation, or electromagnetic radiation are present but are not classified wiring on the induction signal is less than the specified value of confidentiality regulations, to ensure not leak classified information, so as to prevent the spreading of classified information to the outside. In practice, no matter how electrical signal processing, will produce electromagnetic fields, in the process of long distance transmission signal is induced in the electromagnetic field in the cable, and magnetic field intensity, the radiation source and its intensity are induction line distance, induction is directly related to the length of the line. The stronger the source signal, the higher the frequency, the electromagnetic field, the more nearer the cable from the source, the longer the cable, induction signal is stronger. Radiation and the induction line biggest induction degree, parallel layout with two lines cross Angle increases, induction degree is reduced, induction degree when two vertical line is zero. In order to reduce the line between the crosstalk and interference, in the production of integrated wiring technically using two wire twisted physical structure, part of the electromagnetic field offset current causes, play a role in isolated, reduce the mutual interference, the same cable for different lines of crosstalk, some products also adopted a change the manufacturing process of lay, increase the crosstalk signal attenuation. Take four block to the line a whole production process, and will improve the four pairs of cables between the whole and other cable mutual isolation effect. The application of these techniques to reduce crosstalk interference and have produced a good effect, but the crosstalk interference and still exists, to ensure that the cable is not induced signal on another cable, also in the engineering must take comprehensive measures to solve them. Classified network construction, in addition to the strict requirements with the classified network physical isolation, ask its wiring prescribed spacing and the classified network cabling, independent ground, cabinets, etc.

The main characteristic is classified network cabling engineering, requirements and other prescribed spacing network cabling and telephone lines; With lines to security monitoring, building automation, network, fire alarm, GuangBoXian, cable, prescribed spacing; With the power cord, hvac duct, fire control pipe also requires to keep a certain distance.

Third, classified network cabling engineering design and construction

Our guiding ideology of the construction of intelligent building system, "infrastructure based on long-term, application system can meet the needs of the recent". All that is associated with building decoration, equipment installation system is infrastructure. Such as bridge building integrated wiring and cabling, piping etc are infrastructure, these systems are built is very difficult to change, so to do a long-term investment profit. As the foundation construction should not only meet the needs of the now, also consider the needs of the development in the future. Should not only consider the needs of the classified network but also need to consider classified network. This is what we call "infrastructure based on long term". For application system, due to the rapid development of network technology, the market price changes is big, to advance the system function if the investment of construction cannot work at that time, to be able to use this part of the advanced features, it has been greatly reduced, the automatic depreciation, so not too pursuit of super money for application system, to meet the needs of five years or so.

In order to guarantee the safety of state secrets, building owners and engineering construction company shall, in accordance with the specific technical requirements and implementation of the national secrecy laws and regulations should be paid attention to in the practical implementation of the following questions.

3.1 network design must be classified with the classified network independently, each other is not allowed by any device and circuit connection. Found that some companies in the process of tender evaluation design of procuratorial private network plan, through a firewall, vulnerability scanning and intrusion detection equipment will be classified with the classified network connection together, this kind of practice is extreme wrong.

3.2 type choice according to the classified network cabling work demand, economic power, the overall layout of lines, pipes, inside the building, the relations between the spacing and wiring material type. Classified network wiring is made of fiber, and other wiring between don't need to span; Classified network cabling used shielded wire, the classified network (including telephone) use the shielded wire, requires the regulation of small spacing; Classified with the classified network adopt unshielded cabling, requirements both in the regulation of large spacing. From the point of engineering practice, both use unshielded cabling, although the cost is low, but in the corridor of the building installation to meet the specified distance. Classified network USES the shielded wire, the classified network use the shielded wire, its space is easy to implement, the investment will not increase too much. Engineering practice using this solution than real benefit, is conducive to promoting construction.

3.3 engineering design and construction problems should be paid attention to

3.3.1 bridge, pipeline is the foundation construction, once completed, it and supporting the installation system of hvac air pipe, water pipe, fire hose, relative power line pipe installation location is certain, change the position of any system all want to change other position, quantity is very large. So to change the wiring of the specifications of the bridge and the position is almost impossible, unless the whole building. So the construction of the bridge must carry out the construction thought of "based on long term", do an investment benefit in the long run. In concrete construction design should pay attention to the following questions: one is the bridge of the specification. According to integrated wiring construction standard, the utilization rate of 50% of the space, because wiring bend and cross overlap, 50% of the amount of wiring, occupancy of space can reach 70%, only 30% of actual allowance. So in the practical application of allowance to larger, ensure future development needs; Second, the installation position of bridge. Bridge can only be classified network cabling laying classified network cabling, setting up a bridge for laying the classified network cabling and other professional cabling. Was two line hybrid laid in the same bridge. The distance between the bridge is classified with the classified wiring spacing; Into the corridor between the three is bridge from weak current, from the rack guide tube to go short information outlet, keep spacing.

3.3.2 rainfall distribution on 10-12 length of the wiring from the length of the wiring to the information point between the distance. In practice, some only calculate the length of the cables on the bridge, not calculate into the line length of the room, this is wrong. Reason is very simple, every two lines parallel laid, can produce mutual induction, parallel to the longer induction signal is stronger.

3.3.3 bridge surface treatment, select the galvanized plastic and spray paint. Because the wiring bridge is composed of straight groove, elbow, four-way, tee use even plate connection installed into a complete product, surface treatment using plastic and spray paint products, it is of the insulation joint connection, only by jumper do electrical connections; Bridge insulation plate of coming into contact with the tub existence, thus shielding effect and ground effect is poorer. Use galvanized surface treatment of the bridge, is a good conductive material on the surface, rust prevention effect is good, installation into a complete product form a totally enclosed shielding groove, shielding effect on the whole, grounding resistance is small. Two kinds of product cost no big difference. So should choose galvanized surface treatment of the bridge.

Should also be noted that the bridge despite shielding effect, but the shielding is uncertain that decide a dot, no block indexes specified in the product itself in the national standard. So in practice, is not to identify it as shield, as confidentiality rules and regulations of shielding material, can only be as strengthening shielding and isolation effect of a specification technology auxiliary means, improve the effect of shielding. That is to say, can't replace shielding wiring with bridge.

3.3.4 bridge earthing requirements to ensure bridge of shielding and isolation work. But do not use the bridge as a grounding wire.

3.3.5 wiring duct should use metal pipe, cannot use the plastic tubing. According to the requirements of the construction specification, bare and condole top installation line pipe tube must be used. Into dangling on the indoor pipeline generally USES condole installation and vertical wall embedded method of combining the construction, from construction specifications for metal pipe should be chosen as a result, from raising should choose metal shielding isolation effect, too. Using metal tube as when threading pipe, joint wiring must do breaks down, make it across the grounding, shielding effect.

3.3.6 information point and the selection of embedded box should be. By using fiber optic cabling and shielding wiring, usually a 86 x 86 panel can design two spots. Because of the shielding wire line and a little older than shielding wire hardness, engineering construction requires 5-10 cm allowance, and shielding module tail longer, take up more space, so the embedded box has enough space. Generally follow a panel to install two information point more appropriate. Embedded box require the use of 86 x 86 x 60 metal box. If enough depth, increased the difficulty of construction, but also difficult to guarantee the cable has enough slack, for the maintenance of the future.

3.3.7 classified network using shielding wiring to ensure the good independent grounding. Classified network itself requires the ground, so the integrated wiring shielding grounding must be with the other network set up. That you are independent from the joint earthing body to floors as classified network independent grounding line between weak current. Shield grounding into grounded at one end and both ends. End grounding one end only in the weak current, grounding on both ends, the other end users in information box of grounding, the two ends of the same location, and successive shielding layer. If there are two earthing body, the ground potential difference should not be greater than 1 vr. Margaret spellings. (RMS). This is shielding system comprehensive requirements, otherwise the grounding line form a closed loop, not only can't shielding signal, makes shielding sheathed into the radiator, weakened the shielding effect. Shielding grounding resistance requirements, independent grounding resistance less than 1 Ω body, joint grounding resistance less than 4 Ω.

3.3.8 classified network wiring and power cable construction to keep enough distance.