CN103186743B - Apparatus and method for conducting a multi-system data network - Google Patents

Apparatus and method for conducting a multi-system data network Download PDF

Info

Publication number
CN103186743B
CN103186743B CN201210341514.4A CN201210341514A CN103186743B CN 103186743 B CN103186743 B CN 103186743B CN 201210341514 A CN201210341514 A CN 201210341514A CN 103186743 B CN103186743 B CN 103186743B
Authority
CN
China
Prior art keywords
host
serial
data
hot
memory
Prior art date
Application number
CN201210341514.4A
Other languages
Chinese (zh)
Other versions
CN103186743A (en
Inventor
曾崛
张威
邓未玲
Original Assignee
曾崛
张威
邓未玲
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 曾崛, 张威, 邓未玲 filed Critical 曾崛
Priority to CN201210341514.4A priority Critical patent/CN103186743B/en
Publication of CN103186743A publication Critical patent/CN103186743A/en
Application granted granted Critical
Publication of CN103186743B publication Critical patent/CN103186743B/en

Links

Abstract

本发明适用于数据安全交换领域,提供了一种多网络系统数据传导装置及方法;多网络系统数据传导装置包括多个物理隔离的主机、串行设备热插拔控制单元以及串行存储器;每个主机内置一个数据桥接处理单元,一个主机只与一个网络系统连接,不同的主机连接不同的网络系统。 The present invention is applicable to the field of secure exchange of data, there is provided an apparatus and method for conducting multiple data network system; multi-network system comprising a plurality of data conductive means physically isolated host, hot-swappable serial device control unit and serial memory; Per host bridge contains a data processing unit, a host system connected to only one network, different host systems connected to different networks. 该装置在保持网络系统物理隔离的情况下实现了数据安全传导,支持一个网络系统向一个或多个网络系统传导数据;传导的原始裸数据和串行存储器不具危害性;串行存储器在每完成一次数据传导任务后会格式化并切回连接至起初的主机;安全性高。 The device implements a network system while maintaining physical isolation of the conductive data security, network support system conducting a data network to one or more systems; bare conductive raw data and non-hazardous serial memory; serial memory for each complete after conducting a data format and task switch back to the first host connection; safe. 串行设备热插拔控制单元是通过高低电平组合来控制串行存储器的物理热插拔和自动切换,切换速度快。 Hot-swappable serial device control unit is a hot-swap physical memory controlled by the serial combination of high and low and automatic switching, fast switching speed.

Description

一种多网络系统数据传导装置及方法 Apparatus and method for conducting a multi-system data network

技术领域 FIELD

[0001] 本发明属于数据安全交换领域,尤其涉及一种多网络系统数据传导装置及方法。 [0001] The present invention belongs to the exchange of data security, and in particular relates to a multi-network system and method for data transfer device.

背景技术 Background technique

[0002]多网络系统数据安全传导最早出现在军方,用以解决涉密网络系统与公共网络系统连接时的安全问题。 [0002] multi-network data security conduction system first appeared in the military, in order to solve the security problems of the secret network system connected to a public network system. 随着计算机网络系统和电子信息化的发展,各种环境下的高安全网络系统和其它低安全网络系统之间进行数据交换的需求日益明显,如何实现在不同安全级别的网络系统之间进行数据的安全传导一直是信息安全领域的重要问题。 With the demand for the development of computer network systems and electronic information technology, data exchange between the high-security network system under a variety of environmental and other low-security network system has become increasingly evident, how to achieve data between different levels of network security system conducting security has been an important issue in the field of information security.

[0003] 在最为严格的环境中,需要交换数据的网络系统环境应是完全物理隔离的。 [0003] In the most demanding environments, environmental data required switching network system should be completely physically separated. 为了达到上述目的,传统的方式是:通过人工在隔离的网络系统环境中使用移动数据存储器或存储介质转移数据。 To achieve the above object, the conventional way: a mobile data memory or data storage medium is transferred manually in an isolated network system environment. 但是人工的方式效率低下,操作也很不方便。 But artificial means inefficient operation is also very convenient. 而且人为的方式不可控制,比如有意或者无意的操作失误和其它因素都会导致涉密数据的泄密。 And artificially uncontrollable, such as intentional or not, operational errors, and other factors can lead to leakage of confidential data. 而基于各种公有或者私有协议的网闸设备普遍存在的安全问题是数据传输由程序的设计来决定的,安全性和可靠性验证得不到保障。 And based on various public or private agreement gatekeeper equipment common security problems is the data transmission from the design process to determine the safety and reliability verification can not be guaranteed.

发明内容 SUMMARY

[0004] 本发明实施例的目的在于提供一种多网络系统数据传导装置,旨在解决现在技术通过人工的方式效率低下,操作不方便且安全性、可靠性低的问题。 [0004] The object of embodiments of the present invention to provide a multi-network data transfer device systems, inconvenient and intended to address security, low reliability problem now art by artificial means low efficiency of operation.

[0005] 本发明实施例是这样实现的,一种多网络系统数据传导装置,包括多个物理隔离的主机、与多个主机均连接的串行设备热插拔控制单兀,以及与所述串行设备热插拔控制单元连接的串行存储器;每个主机内置一个数据桥接处理单元,每个主机只与一个网络系统连接,不同的主机连接不同的网络系统;工作时,当一个网络系统需要向另外一个或多个网络系统传导数据,该网络系统则通过与其连接的主机的数据桥接处理单元将需要传导的数据进行处理且写入所述串行存储器后,通过主机的GP1输出的高低电平来触发所述串行设备热插拔控制单元来控制所述串行存储器与当前主机在物理电路上断开且连接至另外一个主机,另外一个主机的数据桥接处理单元从串行存储器中读取数据且写入到相连接的网络系统中,写入工作完成后则格式化所述串行存储器 [0005] Embodiments of the invention are achieved in a multi-network data transfer device system, comprising a plurality of physical isolation of the host, the serial device and a plurality of hot-swap Wu control unit are connected to the host, and the serial hot plug serial memory device connected to the control unit; each host bridge contains a data processing unit, each host connected to only one network system, different host systems connected to different networks; operation, when a network system after conducting need further data to one or more network system, the network system of the host bridge connected thereto data processing unit requires the data conducted by treatment of said serial memory and the writing, by the host of the output level of GP1 level to trigger the hot plug serial device control unit controls the serial memory is disconnected and connected to another host on a physical circuits and current host, a host of additional bridging data processing unit from serial memory read and write data to a network connected system, the write is completed after formatting the serial memory 并切回连接至起初的主机;如果本次任务还需将本次写入到所述串行存储器的数据传导至其它网络系统则不需格式化所述串行存储器和切回连接至起初的主机,而再通过主机的GP1输出的高低电平来触发所述串行设备热插拔控制单元来控制所述串行存储器与当前主机在物理电路上断开且连接至再另外一个主机相连和传导数据,依此类推,直到完成当次需要传导的所有任务后,再格式化所述串行存储器并切回连接至起初的主机。 And switch back to the first host connection; if this task needs the serial data is written to this memory is transferred to the other network systems without reformatting the serial memory connection and switch back to the initial host, and then hot-swappable serial device to trigger the control unit GP1 output high and low level host to control the serial memory is physically disconnected and connected in circuit with the current host to another host connected and then conducting data, and so on, until all tasks required when the second conductive after reformatting the serial memory connection and switch back to the first host.

[0006] 更进一步地,所述串行设备热插拔控制单元与多个主机之间、所述串行设备热插拔控制单元与串行存储器之间均通过串行数据线连接。 [0006] Further, between the hot-swappable serial device control unit and a plurality of hosts, the hot-plug serial between the control unit and the memory are serially connected by the serial data line.

[0007] 更进一步地,所述串行设备热插拔控制单元与多个主机之间通过GP1 (GeneralPurpose Input/Output,通用输入输出)电平信号线连接。 [0007] Further, the serial connection through GP1 (GeneralPurpose Input / Output, GPIO) level of the signal line between the control unit and a plurality of hot-plug hosts.

[0008] 更进一步地,所述串行设备热插拔控制单元可以为:SATA (SerialAdvancedTechnology Attachment,串行高级技术附件)设备热插拔控制单元、USB(Universal Serial Bus,通用串行总线)设备热插拔控制单元或IEEE1394设备热插拔控制单元。 [0008] Furthermore, the hot-swappable serial device control unit may be: SATA (SerialAdvancedTechnology Attachment, Serial Advanced Technology Attachment) hot-plug control unit, USB (Universal Serial Bus, Universal Serial Bus) device Hot Swap hot plug control unit or the control unit IEEE1394 devices.

[0009] 更进一步地,所述串行设备热插拔控制单元包括支持串行设备的多路选择器芯片及其外围电路。 [0009] Furthermore, the control unit comprises a hot-swappable serial device supports serial multiplexer device chip and peripheral circuits.

[0010] 更进一步地,所述串行存储器包括:串行接口的光盘刻录机、串行接口的硬盘、串行接口的闪存盘、串行接口的SD卡(Secure Digital Memory Card,安全数码卡)读写器或接口的串行CF卡(Compact Flash Card,紧凑式闪存卡)读写器。 [0010] Furthermore, the serial access memory comprising: a disc recorder serial interface, the serial interface of the hard disk, flash disk serial interface, the serial interface, SD card (Secure Digital Memory Card, Secure Digital Cards ) CF card reader or a serial interface (compact Flash card, compact Flash card) reader.

[0011] 更进一步地,所述的多个主机、串行设备热插拔控制单元、串行存储器都置于一个机箱内。 [0011] Still further, according to a plurality of hosts, hot-swappable serial device control unit, a serial access memory are placed in the chassis.

[0012] 本发明还提供一种采用上述的装置实现的多网络系统数据传导方法,包括下述步骤: [0012] The present invention also provides a multi-network system of the above-described data transfer was implemented apparatus, comprising the steps of:

[0013] S1:第一主机中的数据桥接处理单元从其连接的第一网络系统中获取需要传导的数据,再将需要传导的数据进行去格式化(Clear All Formats)和压缩(Compress)处理后变为原始裸数据块(Raw Data Blocks); [0013] S1: the first host bridge in a data processing unit needs to acquire data from a first conductive connection in the network system, then the need for conducting data deformatter (Clear All Formats) and compression (Compress) Processing after the data block returns to its original bare (raw data blocks);

[0014] S2:将所述原始裸数据块写入到所述串行存储器中; [0014] S2: the bare original data block is written to the serial memory;

[0015] S3:通过主机的GP1输出的高低电平来触发所述串行设备热插拔控制单元来控制所述串行存储器与第一主机在物理电路上断开且连接至第二主机; [0015] S3: high-low output by the host GP1 to trigger the hot-swappable serial device control unit controls the serial memory with the first host physically disconnected circuit and connected to the second host;

[0016] S4:第二主机中的数据桥接处理单元读取所述串行存储器中的原始裸数据块且进行还原处理,之后再写入至与第二主机相连接的第二网络系统中; [0016] S4: Bridging the second host data processing unit reads said serial memory bare original data blocks, and reduction treatment, after the re-writing to a second network connected to the host system and the second in;

[0017] S5:第二主机中的数据桥接处理单元格式化(Formatting)所述串行存储器,之后通过主机的GP1输出的高低电平来触发所述串行设备热插拔控制单元来控制所述串行存储器与第二主机在物理电路上断开并切回连接至第一主机; [0017] S5: the data processing unit format bridge (Formatting) said serial memory, after the serial device to trigger the high and low level control unit via hot plug GP1 output from the host to the second host control of the said serial access memory and the second host physically disconnected and the switch-back circuit connected to the first host;

[0018] S6:如果本次任务还需将本次写入到所述串行存储器的原始裸数据块传导至其它网络系统则不需执行步骤S5,而再通过主机的GP1输出的高低电平来触发所述串行设备热插拔控制单元来控制所述串行存储器与第二主机在物理电路上断开并连接至第三主机, [0018] S6: If the current task needs to be written this time to the serial memory block of raw data transmitted to the naked other network system without performing the step S5, and then outputs the host GP1 through high and low hot-swappable serial device to trigger the control unit controls the serial memory and the second host is disconnected and connected to the third host physically circuit,

[0019] S7:第三主机中的数据桥接处理单元读取所述串行存储器中的原始裸数据块且进行还原处理,之后再写入至与第三主机相连接的第三网络系统中; [0019] S7: Bridging the third host data processing unit reads said serial memory bare original data blocks, and reduction treatment, after the re-writing to a third network connected to the host system in the third;

[0020] S8:依此类推,直到完成将本次写入到所述串行存储器的原始裸数据块传导至事先预定的网络系统N后再格式化所述串行存储器,之后再通过主机的GP1输出的高低电平来触发所述串行设备热插拔控制单元来控制所述串行存储器与第η主机在物理电路上断开并切回连接至第一主机。 [0020] S8: and so on, until the present time is written to the original data block of said serial memory bare conducted to advance a predetermined format to the network system after the N serial memory, then through the host GP1 output from low to high triggers the hot plug serial device control unit controls the serial memory and the second host η disconnected and switch back to the first host connector physically circuit.

[0021] 在本发明实施例中,多网络系统数据传导装置在保持网络系统物理隔离的情况下能够实现数据传导;传导的原始裸数据和串行存储器不具危害性,传导的数据经去格式化和压缩处理后变为原始裸数据块、不具有自动执行指令的可能,串行存储器为物理静态设备不存在计算机程序与指令的运行。 [0021] In an embodiment of the present invention, the multi-network system in the case where the data transfer device maintaining physical isolation of the network system to achieve data conduction; data conductive raw data and serial memory bare non-hazardous, conducting de-formatted and converted into the original compressed data block bare, having no possibility to run serial memory device is a static computer program and a physical instruction absent automatically executing instructions. 另外,串行存储器在每一次完成数据传导任务后会格式化并再切回连接至起初的主机;在授信环境与非授信环境之间传导数据过程中保证非授信网络系统中病毒和恶意代码永远没有可能进入授信环境,安全性高。 Further, formats the serial memory connection and switch back to the first host after the completion of each task data conductive; non-guaranteed credit network viruses and malicious code system is always between credit credit environment and non-conductive environment during data They have no access to credit environment, safe. 串行设备热插拔控制单元是通过主机的GP1输出的高低电平组合来控制串行存储器的物理热插拔和自动切换,切换速度快。 Hot-swappable serial device control unit is controlled by a combination of high and low level output GP1 host physical memory and hot-swappable serial automatic switching, fast switching speed.

附图说明 BRIEF DESCRIPTION

[0022]图1是本发明实施例提供的多网络系统数据传导装置的模块结构示意图; [0022] FIG. 1 is a schematic block configuration of the apparatus conducting multi data network system according to an embodiment of the present invention;

[0023]图2是本发明实施例提供的多网络系统数据传导装置中串行设备热插拔控制单元的多路选择器芯片及其外围电路的原理图。 [0023] FIG. 2 is a multi-network system, a data transfer device provided in the schematic multiplexer hot-swap circuit chip and its peripheral control unit of the present embodiment of the invention serial devices.

具体实施方式 Detailed ways

[0024] 为了使本发明的目的、技术方案及优点更加清楚明白,以下结合附图及实施例,对本发明进行进一步详细说明。 [0024] To make the objectives, technical solutions and advantages of the present invention will become more apparent hereinafter in conjunction with the accompanying drawings and embodiments of the present invention will be further described in detail. 应当理解,此处所描述的具体实施例仅仅用以解释本发明,并不用于限定本发明。 It should be understood that the specific embodiments described herein are only intended to illustrate the present invention and are not intended to limit the present invention.

[0025] 本发明实施例提供的多网络系统数据传导装置主要应用于网络系统隔离环境下信息的安全传导。 Embodiment [0025] multi-network system of the present invention provides a data transfer device mainly used in network security system isolation conductive environment information. 图1示出了该多网络系统数据传导装置的模块结构,为了便于说明,仅示出了与本发明实施例相关的部分,详述如下: FIG 1 illustrates the module structure of the multi-network system, data transfer units, for convenience of explanation, only a part related to the embodiment of the present invention, described in detail below:

[0026] 多网络系统数据传导装置包括多个互相物理隔离的第一主机Z1、第二主机 [0026] The multi-network system comprises a physical data transfer device of a first plurality of mutually isolated host Z1, the second host

Z2、......第η主机Zn,与多个主机均连接的串行设备热插拔控制单兀4,以及与串行设备热插拔控制单元4连接的串行存储器5 ;每个主机内置一个数据桥接处理单元,每个主机与一个网络系统连接,不同的主机连接不同的网络系统;工作时,当一个网络系统需要向另外一个或多个网络系统传导数据,该网络系统则通过与其连接的主机的数据桥接处理单元将需要传导的数据进行去格式化和压缩处理后变为原始裸数据块,再写入串行存储器5,之后通过主机的GP1输出的高低电平来触发串行设备热插拔控制单元4来控制串行存储器5与当前主机在物理电路上断开且连接至另外一个主机,另外一个主机的数据桥接处理单元从串行存储器5中读取数据进行还原处理后且写入到相连接的网络系统中,写入工作完成后则格式化串行存储器5并切回连接至起初的主机;如果本次 Z2 of, ...... η host of Zn, hot-swappable serial device control unit with a plurality of hosts Wu 4 are connected, and a serial access memory connected to the hot-swappable serial device control unit 45; Per host bridge contains a data processing unit, with each host system connected to a network, different host systems connected to different networks; operation, when a conductive network system needs additional data to one or more of the network system, the network system is de-formatting and converted into the original compressed data block bare, and then written in the serial memory 5 connected thereto through the host data processing unit will need a conductive bridging data, after triggered by the high and low output GP1 host hot-swappable serial device control unit 4 controls serial memory 5 by reduction with disconnected and connected to the current host to another host on the physical circuit, a host of additional bridging data processing unit reads data from the serial memory 5 and post-processing system connected to the network is written, the write operation is completed after the memory 5 and the formatter serial switch back to the first host connection; if this 任务还需将本次写入到串行存储器5的数据传导至其它网络系统则不需格式化串行存储器5和切回连接至起初的主机,而再通过主机的GP1输出的高低电平来触发串行设备热插拔控制单元4来控制串行存储器5与当前主机在物理电路上断开且连接至再另外一个主机相连和传导数据,依此类推,直到完成当次需要传导的所有任务后,再格式化串行存储器5并切回连接至起初的主机。 This task needs to be written to a serial data memory 5 is transmitted to another network system without a serial format and a memory 5 connected to the first switch back to the host, and then to a low level by a high output GP1 host serial trigger hot-plug control unit 4 controls serial memory 5 connected to the host and then further conducting a current host data physically disconnected and connected to the circuit, and so on, until the time when all the tasks required of the conductive after reformatting the serial memory 5 and switch back to the first host connection.

[0027] 在本发明实施例中,串行设备热插拔控制单元4与多个主机之间、串行设备热插拔控制单元4与串行存储器5之间均通过串行数据线连接,多个主机与串行设备热插拔控制单元4之间还通过GP1电平信号线连接。 [0027] In an embodiment of the present invention, between the host 4 and the plurality of hot-swappable serial device control unit, the control unit 4 serial devices hot swap between the serial access memory 5 are connected through a serial data line, GP1 is also connected via the signal line level of between 4 and a plurality of host units serial devices hot plug control. 多网络系统数据传导装置采用了串行设备物理热插拔的原理:通过串行设备热插拔控制单元来控制串行存储器的物理热插拔且切换到不同的、相互物理隔离的主机上;通过数据桥接处理单元往串行存储器安全输入输出数据;串行存储器装载着数据在不同的、相互物理隔离的主机之间进行自动切换,实现数据在多个互相物理隔离的主机之间安全传导。 Multi-network system data transfer device uses the principle of hot-pluggable physical serial device: controls the serial memory of the control unit through a serial hot-plug and hot-swap switch to physically different, physically separated from each other hosts; to secure the serial memory input and output data through the data processing unit bridge; serial memory is loaded with data to automatically switch between different, physically separated from each other hosts, data security between a plurality of conductive physically isolated from each other hosts.

[0028] 作为本发明的一个实施例,串行设备热插拔控制单元4可以为SATA设备热插拔控制单元、USB设备热插拔控制单元或IEEE1394设备热插拔控制单元。 [0028] As one embodiment of the present invention, hot-swappable serial device control unit 4 may be a hot-plug control unit SATA, USB or IEEE1394, hot-plug control unit, hot-plug embodiment of the control unit.

[0029] 作为本发明的一个实施例,串行存储器5可以为串行接口的光盘刻录机、串行接口的硬盘、串行接口的闪存盘、串行接口的SD卡读写器或串行接口的CF卡读写器。 [0029] As one embodiment of the present invention, the serial access memory 5 may be a serial interface disc recorder, a hard disk, flash disk serial interface, SD card reader serial interface or serial interface serial embodiment CF card reader interface.

[0030] 在本发明实施例中,多个主机、串行设备热插拔控制单元4、串行存储器5可以都置于一个机箱内,即在一个机箱内有多个独立主机系统,例如第一主机Z1、第二主机Z2、……第η主机Zn,且各个主机之间完全物理隔离。 [0030] In an embodiment of the present invention, a plurality of hosts, hot-swappable serial device control unit 4, a serial access memory 5 may all placed in an enclosure, i.e., a plurality of host systems in a separate chassis, for example of a host Z1, the second host Z2, ...... η host of Zn, and the complete physical isolation between the various hosts. 串行存储器5与主机之间的连接是通过主机的GP1输出的高低电平来触发串行设备热插拔控制单元4来控制串行存储器5与一个主机在物理电路上断开并连接至另外一个主机。 The connection between the host 5 and the serial access memory is triggered by the control unit, hot-plug serial high-low output GP1 master memory 4 to control the serial 5 physically disconnecting and connecting the circuit to another with a host a host. 当串行设备热插拔控制单元4切换到某一主机时将串行存储器5自动热加载到该主机,并与之前连接的主机在物理电路上彻底断开。 4 when switched to a hot-swappable serial device master serial memory control unit 5 is automatically loaded into the heat host, and is connected to the previous circuit is disconnected physically. 同时,各个主机通过网线与不同的网络系统相连。 Meanwhile, each host system connected to a different network via the network cable. 例如:第一主机Zl与第一网络系统Wl相连、第二主机Ζ2第二网络系统W2相连、第η主机与第η网络系统Wn相连。 For example: The first Zl and the host system Wl is connected to a first network, a second network Ζ2 second host system connected to W2, the first and the second host η η Wn connected to the network system. 每个主机分别内置数据桥接处理单元,第一主机Zl从第一网络系统Wl中获取需要传导的数据,内置数据桥接处理单元将需要传导的数据进行去格式化和压缩处理后变为原始裸数据块,然后将原始裸数据块写入串行存储器5中;完成数据写入工作后,串行设备热插拔控制单元4将串行存储器与当前第一主机Zl在物理电路上断开,并自动切换串行存储器加载到第二主机Ζ2 ;第二主机Ζ2系统内置数据桥接处理单元读取串行存储器5中的数据,并将数据进行还原处理,然后将数据写入第二网络系统W2 ;完成数据写入工作后再格式化串行存储器5。 Each host bridge were built-in data processing unit, the first host Zl obtain the required data from the first conductive Wl network system, the built-in data processing unit will need to bridge the conduction of the data to format and converted into the original compressed data naked block, and then writes the data blocks to the original bare serial memory 5; data write operation is completed, the control unit 4 hot-swappable serial device to a first serial access memory with the current host Zl physically disconnected circuit, and serial memory load automatically switch to a second host Ζ2; Ζ2 second host bridge system built-in data processing unit reads data from the serial memory 5, and the data reduction process, and the write data W2 of the second network system; formatting the data write operation is completed before the serial memory 5. 串行设备热插拔控制单元4再次断开串行存储器与第二主机Ζ2在物理电路上的连接,并将串行存储器切换回连接至第一主机Ζ1。 Hot-swappable serial device control unit 4 is disconnected and connected to the second serial access memory in the physical host Ζ2 circuit again, and the serial access memory is connected to the switch back to the first host Ζ1. 如果还需继续将本次写入到串行存储器5的数据传导至第η网络系统Wn则不需格式化串行存储器5和切回连接至第一主机Ζ1,串行设备热插拔控制单元4再次断开串行存储器5与第二主机Ζ2在物理电路上的连接且连接至第η主机Zn ;第11主机Zn内置数据桥接处理单元读取串行存储器5中的数据,并将数据进行还原处理,然后将数据写入第η网络系统Wn ;完成数据写入工作后再格式化串行存储器5 ;串行设备热插拔控制单元4再次断开串行存储器5与第η主机Zn在物理电路上的连接并将串行存储器5切换回连接至第一主机Ζ1,完成本次需要传导的所有任务。 If you need to continue the serial data of the present write-once memory 5 is transferred to the first network system η Wn is formatted serial memory 5 without switching back and connected to the first host Ζ1, hot-swappable serial device control unit 4 5 is opened again and a second serial access memory connected to the host Ζ2 physical circuitry and connected to the first host η Zn; 11 Zn host bridge built-in data processing unit reads data from the serial memory 5, and the data reduction process, then writes data into the η Wn of the network system; data write operation is completed after formatting serial memory 5; hot-swappable serial device control unit 4 is turned off and the second serial access memory 5 again η Zn in the host and the serial memory connection on the physical circuit 5 is connected to the switch back to the first host Ζ1, all tasks required for this conduction. 在数据传导的过程中,第一主机Ζ1、第二主机Ζ2、第η主机Zn永远物理隔离且串行存储器5永远只跟某一主机相连。 In conducting the process data, the first host Ζ1, the second host Ζ2, the first host η Zn never physically isolated and serial memory 5 is always connected only with a host. 数据传导方向受硬件控制,串行存储器5在每完成一次数据传导任务后,会格式化并切回连接至起初的主机。 Data conduction direction controlled by hardware, the serial memory 5 after every time data conductive task, the connection format and switch back to the first host. 在授信环境与非授信环境之间传导数据过程中保证非授信网络系统中病毒和恶意代码永远没有可能进入授信环境。 Between credit and non-credit environment environmental conduction process to ensure that non-credit data network system for viruses and malicious code never likely to enter the credit environment.

[0031] 本发明实施例提供的多网络系统数据传到装置在保持网络系统物理隔离的情况下能够实现数据传导;数据传导方式不具有可编程性,硬件上存在可编程器件;传导的原始裸数据和串行存储器不具危害性,传导的数据经去格式化和压缩处理后变为原始裸数据块、不具有自动执行指令的可能,串行存储器为物理静态设备不存在计算机程序与指令的运行。 [0031] Multi-data network system according to an embodiment of the apparatus of the present invention is transmitted in the network system while maintaining physical isolation can be achieved conducting data; data conductive as not programmable, is present on the hardware programmable devices; original bare conductive data and non-hazardous serial memory, conducting the de-formatting and converted into the original compressed data block bare, having no possibility to run serial memory device is a static physical computer program instructions and the absence of automatic execution instruction .

[0032] 在本发明实施例中,串行设备热插拔控制单元4包括支持串行设备的多路选择器芯片及其外围电路;图2示出了多路选择器芯片的具体电路,3 =ISATAEquipment DeMuxChip即3选I的SATA设备多路选择器芯片,HOST SATAP0RT即连接主机的SATA端口,STORAGE SATA PORT即连接存储器的SATA端口; HOST I SATA PORT连接第一主机Zl,H0ST2SATA PORT 连接第二主机Z2,H0ST3SATA PORT 连接第三主机Z3,STORAGE SATA PORT接串行存储器5。 [0032] In an embodiment of the present invention, hot-swappable serial device control unit 4 comprises a multiplexer circuit chip and its peripheral support serial device; FIG. 2 shows a specific circuit multiplexer chip 3 = ISATAEquipment DeMuxChip i.e. a SATA device I is selected from 3 multiplexer chip, hOST SATAP0RT i.e. a SATA host port, sTORAGE SATA pORT i.e. a SATA port memory; hOST I SATA pORT connected to the first host Zl, H0ST2SATA pORT second connector host Z2, H0ST3SATA PORT third host connection Z3, sTORAGE SATA PORT serial access memory 5. 具体地详见图2,在此不再赘述。 See Figure 2 in particular, are not repeated here.

[0033] 在本发明实施例中,串行设备热插拔控制单元4可以为SATA设备热插拔控制单元,它通过主机的GP1输出的高低电平组合来控制串行存储器5的物理热插拔和自动切换,切换速度快;串行存储器5可以为SATA接口的光盘刻录机、SATA接口的硬盘、SATA接口的闪存盘、SATA接口的SD卡读写器或SATA接口的CF卡读写器。 [0033] In an embodiment of the present invention, hot-swappable serial device control unit 4 may be a SATA hot-plug control unit, which controls the serial memory through a combination of high and low output of the host physical GP1 hot plug 5 pulling and automatic switching, switching speed; serial memory 5 may be an optical disc recorder SATA interface, CF card reader hard disk, flash disk SATA interface, SD card reader or SATA interface SATA interface SATA interface .

[0034] 为了更进一步的说明本发明实施例提供的多网络系统数据传导方法,串行设备热插拔控制单元以SATA设备热插拔控制单元为例,串行存储器以SATA接口的光盘刻录机为例,多网络系统数据传导方法具体包括: [0034] To further illustrate the multi-network system provided in the data transfer was, hot-swappable serial device control unit to the control unit SATA hot-plug, for example, a serial memory for the optical disk recorder of the embodiment of the present invention SATA interface for example, the method for conducting a multi-network system data comprises:

[0035] S1:第一主机Zl中的数据桥接处理单元从其连接的第一网络系统Wl中获取需要传导的数据,再将需要传导的数据进行去格式化和压缩处理后变为原始裸数据块; [0035] S1: Zl first host bridge in the data processing unit needs to acquire data from a first conductive network system in connection Wl, then conducting data required to format and converted into the original compressed data naked Piece;

[0036] S2:将原始裸数据块写入到SATA接口的光盘刻录机的光盘中; [0036] S2: the original data blocks are written to the disc bare disc recorder SATA interface; and

[0037] S3:第一主机Zl通过主机的GP1输出的高低电平来触发SATA设备热插拔控制单元来控制SATA接口的光盘刻录机与第一主机Zl在物理电路上断开且连接至第二主机Z2 ; [0037] S3: Zl first host to trigger the device SATA hot plug GP1 high and low level control unit controls the output of host interface SATA disc recorder and the first host Zl physically disconnected and connected to the second circuit Z2 of two host;

[0038] S4:第二主机Z2中的数据桥接处理单元读取SATA接口的光盘刻录机的光盘中的原始裸数据块且进行还原处理,之后再写入至与第二主机Z2相连接的第二网络系统W2中; Bare original data block and the data reduction process bridging Z2 in the second host processing unit reads the SATA interface disc in the optical disc recorder, and then re-writing the second host to the first connecting Z2: [0038] S4 W2 of the second network system;

[0039] S5:第二主机Z2中的数据桥接处理单元格式化SATA接口的光盘刻录机的光盘,之后第二主机Z2通过主机的GP1输出的高低电平来触发SATA设备热插拔控制单元来控制SATA接口的光盘刻录机与第二主机Z2在物理电路上断开并切回连接至第一主机Zl ; [0039] S5: Z2 in the second host CD burner SATA interface format disc bridging data processing unit, after the second host Z2 SATA device to trigger the control unit via hot plug GP1 high and low output of the host SATA interface control disc recorder and the second host Z2 physically disconnected and the switch-back circuit connected to the first host Zl;

[0040] S6:如果还需将本次写入到SATA接口的光盘刻录机的光盘中的原始裸数据块传导至其它网络系统则不需执行步骤S5,而再通过主机的GP1输出的高低电平来触发SATA设备热插拔控制单元来控制SATA接口的光盘刻录机与第二主机Z2在物理电路上断开并连接第三主机Z3 ; [0040] S6: the original data blocks to the bare SATA interface disc CD burner if need be present writing is transmitted to the other network system without performing step S5, and then by GP1 output power level of the host Hot Swap SATA device to trigger level control unit controls the disc recorder and the second host interface SATA Z2 of disconnecting and connecting the third host Z3 physically circuit;

[0041] S7:第三主机Z3中的数据桥接处理单元读取SATA接口的光盘刻录机的光盘中的原始裸数据块且进行还原处理,之后再写入至与第三主机Z3相连接的第三网络系统W3中; Bare original data block and the data reduction process Z3 third host bridge processing unit reads the SATA interface disc in the optical disc recorder, and then re-written to the first to third host connected Z3: [0041] S7 W3, three network system;

[0042] S8:依此类推,直到完成将本次写入到SATA接口的光盘刻录机的光盘中的原始裸数据块传导至事先预定的网络系统N后再格式化SATA接口的光盘刻录机的光盘,之后再通过主机的GP1输出的高低电平来触发所述SATA设备热插拔控制单元来控制SATA接口的光盘刻录机与第N主机ZN在物理电路上断开并切回连接至第一主机Zl。 [0042] S8: and so on, until the present time is written to the original data block of the bare SATA optical disc recorder interface is transmitted to the disc recorder in advance after the predetermined network system N of the SATA interface format optical disc, and then after the SATA device to trigger the hot plug GP1 high and low level control unit controls the output of host interface SATA disc recorder and the N host ZN switchback disconnected and physically connected to the first circuit host Zl.

[0043] 在本发明实施例中,多网络系统数据传导装置在保持网络系统物理隔离的情况下能够实现数据传导;传导的原始裸数据、SATA接口的光盘刻录机和光盘都不具危害性,传导的数据经去格式化和压缩处理后变为原始裸数据块、不具有自动执行指令的可能,SATA接口的光盘刻录机和光盘为物理静态设备不存在计算机程序与指令的运行。 [0043] In an embodiment of the present invention, the multi-network system in the case where the data transfer device maintaining physical isolation of the network system to achieve data conduction; bare conductive raw data, and an optical disc recorder with SATA interface is not hazardous, conduction and de-formatted data is converted into the original compressed data block bare, having no instruction may be automatically executed, the optical disk recorder and an optical disk interface SATA physical static device with a computer program operating instruction absent. 另外,SATA接口的光盘刻录机在每传导一次数据后,会格式化其中光盘并再切换回连接至起初的主机;在授信环境与非授信环境之间传导数据过程中保证非授信网络系统中病毒和恶意代码永远没有可能进入授信环境,安全性高。 Further, the optical disc recorder SATA interface after each conduction time data, wherein the optical disk format and will then switch back to the first host connection; non-conducting credit data during a network system to ensure that the virus from the environment and non-trust environment credit and malicious code never likely to enter the credit environment, safe. SATA设备热插拔控制单元是通过主机的GP1输出的高低电平组合来控制SATA接口的光盘刻录机的物理热插拔和自动切换,切换速度快。 Physical hot-plug SATA hot-plug control unit is controlled by high and low SATA interface host GP1 output combination CD burner and automatic switching, fast switching speed. 同时还支持多个网络系统环境之间相互数据安全传导。 Also supports mutual data transfer between the plurality of network security system environments.

[0044] 以上所述仅为本发明的较佳实施例而已,并不用以限制本发明,凡在本发明的精神和原则之内所作的任何修改、等同替换和改进等,均应包含在本发明的保护范围之内。 [0044] The foregoing is only preferred embodiments of the present invention but are not intended to limit the present invention, any modifications within the spirit and principle of the present invention, equivalent substitutions and improvements should be included in the present within the scope of the invention.

Claims (9)

1.一种多网络系统数据传导装置,其特征在于,包括多个物理隔离的主机、与多个主机均连接的串行设备热插拔控制单元,以及与所述串行设备热插拔控制单元连接的串行存储器;每个主机内置一个数据桥接处理单元,每个主机只与一个网络系统连接,不同的主机连接不同的网络系统; 工作时,当一个网络系统需要向另外一个或多个网络系统传导数据,该网络系统则通过与其连接的主机的数据桥接处理单元将需要传导的数据进行去格式化和压缩处理且写入所述串行存储器后,通过主机的GP1输出的高低电平来触发所述串行设备热插拔控制单元来控制所述串行存储器与当前主机在物理电路上断开且连接至另外一个主机,另外一个主机的数据桥接处理单元从串行存储器中读取数据且写入到相连接的网络系统中,写入工作完成后则格式化所述串行存储器并 A multi-network system data transfer device, wherein the host comprises a plurality of physically separated, hot-swappable serial device control unit with a plurality of hosts are connected to the serial device and a hot-swap controller serial memory cells connected; each host bridge contains a data processing unit, each host connected to only one network system, different host systems connected to different networks; operation, when the system requires a network to one or more additional conducting a data network system, the network system of the host bridge connected thereto data processing unit will need to be conducted through the de-formatting the data and writes the compressed and processed said serial memory, high-low GP1 output by the host hot-swappable serial device to trigger the control unit controls the serial memory is disconnected and connected to another host on a physical circuits and current host, a host of additional bridging data processing unit reads from the serial memory and writing the data to a network connected system, the completion of the write operation after formatting the serial memory and 回连接至起初的主机;如果本次任务还需将本次写入到所述串行存储器的数据传导至其它网络系统则不需格式化所述串行存储器和切回连接至起初的主机,而再通过主机的GP1输出的高低电平来触发所述串行设备热插拔控制单元来控制所述串行存储器与当前主机在物理电路上断开且连接至再另外一个主机相连和传导数据,依此类推,直到完成当次需要传导的所有任务后,再格式化所述串行存储器并切回连接至起初的主机。 Back to the first host connection; if this task needs the serial data is written to this memory is transferred to the other network systems without reformatting the serial memory connection and switch back to the first host, and then hot-swappable serial device to trigger the control unit GP1 output high and low level host to control the serial memory is physically disconnected and connected in circuit with the current host to another host connected and then conducting data and so on, until all tasks required when the second conductive after reformatting the serial memory connection and switch back to the first host.
2.如权利要求1所述的装置,其特征在于,所述串行设备热插拔控制单元与多个主机之间、所述串行设备热插拔控制单元与串行存储器之间均通过串行数据线连接。 2. The apparatus according to claim 1, characterized in that the hot-plug between the control unit and said serial plurality of hosts, each hot-plug apparatus through said serial between the control unit and the serial access memory connected to the serial data line.
3.如权利要求1所述的装置,其特征在于,所述串行设备热插拔控制单元与多个主机之间通过GP1电平信号线连接。 The apparatus as claimed in claim 1, wherein, via said serial signal line GP1 level between the control unit and a plurality of hot-plug hosts.
4.如权利要求1所述的装置,其特征在于,所述串行设备热插拔控制单元为:SATA设备热插拔控制单元、USB设备热插拔控制单元或IEEE1394设备热插拔控制单元。 4. The apparatus according to claim 1, wherein said control unit is a hot-swappable serial device: SATA hot-plug control unit, USB or IEEE1394, hot-plug control unit, hot-plug control unit .
5.如权利要求1所述的装置,其特征在于,所述串行设备热插拔控制单元包括支持串行设备的多路选择器芯片及其外围电路。 5. The apparatus according to claim 1, wherein said control unit comprises a hot-plug serial multiplexer circuit chip and its peripheral support serial devices.
6.如权利要求1所述的装置,其特征在于,所述串行存储器包括:串行接口的光盘刻录机、串行接口的硬盘、串行接口的闪存盘、串行接口的SD卡读写器或串行接口的CF卡读写器。 6. The apparatus according to claim 1, wherein said serial access memory comprising: a disc recorder serial interface, the serial interface of the hard disk, flash disk serial interface, the serial interface card read SD write CF card reader or serial interface.
7.如权利要求1所述的装置,其特征在于,所述的多个主机、串行设备热插拔控制单元、串行存储器均置于一个机箱内。 7. The apparatus according to claim 1, wherein said plurality of hosts, hot-swappable serial device control unit, a serial access memory are placed in the chassis.
8.一种采用权利要求1-7任一项所述的装置实现的多网络系统数据传导方法,其特征在于,包括下述步骤: 51:第一主机中的数据桥接处理单元从其连接的第一网络系统中获取需要传导的数据,再将需要传导的数据进行去格式化和压缩处理后变为原始裸数据块; 52:将所述原始裸数据块写入到所述串行存储器中; 53:通过主机的GP1输出的高低电平来触发所述串行设备热插拔控制单元来控制所述串行存储器与第一主机在物理电路上断开且连接至第二主机; 54:第二主机中的数据桥接处理单元读取所述串行存储器中的原始裸数据块且进行还原处理,之后再写入至与第二主机相连接的第二网络系统中; 55:第二主机中的数据桥接处理单元格式化所述串行存储器,之后通过主机的GP1输出的高低电平来触发所述串行设备热插拔控制单元来控制所述串行存储器与第二主机 A claim using the multi-network system data transfer was implemented apparatus of any one of claims 1-7, characterized by comprising the steps: 51: a first host data processing unit from connecting bridge a first conductive network system needs to acquire data, then conducting data needs to be converted into the compressed format and the original data block bare; 52: bare the original data block is written to the serial memory ; 53: serial device to trigger the high and low level control unit via hot plug GP1 output from the host to control the first host serial memory physically disconnected circuit and connected to a second host computer; 54: bridging the second data processing unit reads an original host of the serial memory of bare blocks and reduction treatment, after the re-writing to a second network connected to the host system and the second in; 55: second host the data processing unit bridge formatting said serial memory, after the serial device to trigger the high and low level control unit via hot plug GP1 output from the host to control the serial memory and a second host 物理电路上断开并切回连接至第一主机。 Physical circuit breaking switch back on and connected to the first host.
9.一种采用权利要求1-7任一项所述的装置实现的多网络系统数据传导方法,其特征在于,包括下述步骤: 511:第一主机中的数据桥接处理单元从其连接的第一网络系统中获取需要传导的数据,再将需要传导的数据进行去格式化和压缩处理后变为原始裸数据块; 512:将所述原始裸数据块写入到所述串行存储器中; 513:通过主机的GP1输出的高低电平来触发所述串行设备热插拔控制单元来控制所述串行存储器与第一主机在物理电路上断开且连接至第二主机; S14:第二主机中的数据桥接处理单元读取所述串行存储器中的原始裸数据块且进行还原处理,之后再写入至与第二主机相连接的第二网络系统中; 515:如果还需将本次写入到所述串行存储器的原始裸数据块传导至其它网络系统,则再通过主机的GP1输出的高低电平来触发所述串行设备热插拔控制单元来控制所述 A use as claimed in claim multi-network system data transfer was achieved device according to any one of 1-7, wherein, comprising the steps of: 511: a first data processing unit in the host bridge connected therefrom a first conductive network system needs to acquire data, then conducting data needs to be converted into the compressed format and the original data block bare; 512: bare the original data block is written to the serial memory ; 513: serial device to trigger the high and low level control unit via hot plug GP1 output from the host to control the first host serial memory physically disconnected circuit and connected to the second host; S14: bridging the second data processing unit reads an original host of the serial memory of bare blocks and reduction treatment, after the re-writing to a second network connected to the host system and the second in; 515: If needed the present writing said serial memory to the original data blocks transmitted to the naked other network systems, the serial device and then to trigger the hot plug control means controlled by GP1 output high and low level of the host 串行存储器与第二主机在物理电路上断开并连接第三主机; 516:第三主机中的数据桥接处理单元读取所述串行存储器中的原始裸数据块且进行还原处理,之后再写入至与第三主机相连接的第三网络系统中; 517:依此类推,直到完成将本次写入到所述串行存储器的原始裸数据块传导至事先预定的网络系统N后再格式化所述串行存储器,之后再通过主机的GP1输出的高低电平来触发所述串行设备热插拔控制单元来控制所述串行存储器与第N主机在物理电路上断开并切回连接至第一主机。 A second serial access memory and a host physically disconnected circuit and connected to the third host; 516: third host bridge in the data processing unit reads said serial memory bare original data blocks, and reduction treatment, after then is written to the third network system is connected to the third host; 517: and so on, until the present time is written to the serial memory is transferred to the original data block N bare in advance and then a predetermined network system formatting said serial memory, and then after hot-swappable serial device to trigger said control means is controlled by GP1 high and low level output of the serial access memory of the host and the N host and cut physically disconnect circuit back connected to the first host.
CN201210341514.4A 2012-09-14 2012-09-14 Apparatus and method for conducting a multi-system data network CN103186743B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201210341514.4A CN103186743B (en) 2012-09-14 2012-09-14 Apparatus and method for conducting a multi-system data network

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201210341514.4A CN103186743B (en) 2012-09-14 2012-09-14 Apparatus and method for conducting a multi-system data network

Publications (2)

Publication Number Publication Date
CN103186743A CN103186743A (en) 2013-07-03
CN103186743B true CN103186743B (en) 2015-10-28

Family

ID=48677906

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201210341514.4A CN103186743B (en) 2012-09-14 2012-09-14 Apparatus and method for conducting a multi-system data network

Country Status (1)

Country Link
CN (1) CN103186743B (en)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104731741B (en) * 2013-12-23 2019-03-19 研祥智能科技股份有限公司 The method and system of hot plug
CN104219175B (en) * 2014-08-20 2018-09-28 深圳太极云软技术股份有限公司 Data exchange with the service call system and method
CN106971112A (en) * 2017-03-09 2017-07-21 北京奇虎科技有限公司 File reading and writing method and device

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN200941631Y (en) * 2006-08-16 2007-08-29 北京城市学院 Net one-way protocal separator
CN101127761A (en) * 2006-08-16 2008-02-20 北京城市学院 Unidirectional protocol isolation method and device in network
CN101836422A (en) * 2007-10-23 2010-09-15 萨基姆国防安全公司 Bidirectional gateway with enhanced security level
CN201733329U (en) * 2010-07-16 2011-02-02 江西省电力公司信息通信中心 Network one-way isolator of electric power system
CN101986638A (en) * 2010-09-16 2011-03-16 珠海市鸿瑞软件技术有限公司 Gigabit one-way network isolation device

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN200941631Y (en) * 2006-08-16 2007-08-29 北京城市学院 Net one-way protocal separator
CN101127761A (en) * 2006-08-16 2008-02-20 北京城市学院 Unidirectional protocol isolation method and device in network
CN101836422A (en) * 2007-10-23 2010-09-15 萨基姆国防安全公司 Bidirectional gateway with enhanced security level
CN201733329U (en) * 2010-07-16 2011-02-02 江西省电力公司信息通信中心 Network one-way isolator of electric power system
CN101986638A (en) * 2010-09-16 2011-03-16 珠海市鸿瑞软件技术有限公司 Gigabit one-way network isolation device

Also Published As

Publication number Publication date
CN103186743A (en) 2013-07-03

Similar Documents

Publication Publication Date Title
US7093033B2 (en) Integrated circuit capable of communicating using different communication protocols
US7206875B2 (en) Expander device capable of persistent reservations and persistent affiliations
US8150452B2 (en) Providing a connection between a memory medium of a mobile device and an external device
CN102160044A (en) Sata mass storage device emulation on pcie interface
US7007127B2 (en) Method and related apparatus for controlling transmission interface between an external device and a computer system
US20070094472A1 (en) Method for persistent mapping of disk drive identifiers to server connection slots
US7188235B2 (en) Method for booting computer system with memory card
JP4799417B2 (en) Host controller
CN1813249A (en) Intermediate station
JP5362767B2 (en) Method and apparatus for inspecting the security of the data storage device from a remote server
CN102902650A (en) Data sharing and transfer systems and methods
JP5889904B2 (en) Device for utilization of Usb resources, system, method, and computer-readable storage medium
CN102439573A (en) Inter operating system memory hotswap to support memory growth in a non-virtualized system
US7802043B2 (en) Methods and apparatus for adding an autonomous controller to an existing architecture
CN101454746B (en) Method for communication with a multi-function memory card
EP1728168A1 (en) Simulation circuit of pci express endpoint and downstream port for a pci express switch
US7506078B2 (en) Integrated circuit capable of assigning a unique identity to ATA/ATAPI devices
CN101963929B (en) Save / Restore methods work site
CN101320356B (en) Data storage method and device
JP2009070255A (en) Card type peripheral device
US7694029B2 (en) Detecting miscabling in a storage area network
US7725608B2 (en) Enabling and disabling device images on a platform without disrupting BIOS or OS
CN100568211C (en) Method and device for realizing accessing of multiple I2C slave device by programmable device
US20090024779A1 (en) Method of Connecting Mass Storage Device
CN1851681A (en) Device and method for operating USB interface device

Legal Events

Date Code Title Description
C06 Publication
C10 Entry into substantive examination
C14 Grant of patent or utility model
TR01