Secure Transmission Solution

Background

The video transmission equipment installed by the original ATM of a bank in India all adopts single-line wired network. Because the wired access provided by the operator is not very stable, it often drops, resulting in the bank often missing the video information of the ATM during the period of network dropping. The bank belongs to the information sensitive industry, and attaches great importance to the security and reliability of data transmission. The unstable and insecure network transmission system may lead to the information leakage of the bank customer, causing irreparable serious consequences.

Through the analysis of the bank's existing video transmission network, it is found that the bank's video transmission network has the following problems:
1)The redundancy scheme is not considered at the network exit, and the whole service will be interrupted if the line fails
2)The network equipment lacks a unified management mechanism, and the administrator cannot effectively manage the equipment in the operation center, which greatly increases the maintenance cost of the equipment
3)Network equipment cannot support the start without configuration. When installing equipment, engineers with certain technical level are required to go to the site for installation and commissioning, and the installation cost is high

Solution

After analyzing the existing network, it is necessary to upgrade the existing network and replace the original network transmission equipment. The 4G router is adopted, and the 4G wireless line is used as the backup line of the wired line. When there is a problem with the wired line, the production flow is automatically switched to the 4G line for forwarding, to ensure the reliable transmission of data. In addition, 4G dialing supports the backup function of dual SIM cards. When the primary SIM card fails to dial or is in arrears, it will automatically detect and switch to the standby SIM card for dialing. After the primary SIM card is restored, it will switch to the primary SIM card. The design of dual redundancy ensures the reliability of data transmission and minimizes the production and business problems caused by line failures. Use IPSec VPN to establish an IPSec VPN tunnel with the boundary equipment of the management center. All production services are transmitted in the IPSec VPN tunnel. All services will be encrypted when forwarding in the VPN tunnel. Even if the data message is intercepted during the forwarding process, because of the lack of encryption and decryption password, the interceptor still cannot decrypt the data to obtain the relevant data of the production business, which greatly guarantees the security of the user's production business data forwarding. The equipment adopts a unified management mode, and the data center in the administrator can effectively manage the network transmission equipment of all nodes.

System extension diagram

Related products