With the development of the Internet, the company network architecture is also undergoing profound changes, and the boundaries between the original internal network and external network are becoming increasingly blurred with the emergence of cloud services. More and more company businesses are deployed on the cloud server, which increases the risk of data exchange between the cloud server and the intranet. An implementation method of zero-trust architecture is proposed in this paper to apply to this scenario. The method can ensure safe and reliable data exchange when the external application server accesses the internal network, effectively protect network communication and business access while not affecting the original internal network protection measures, and make the company network safer and controllable.