CN106209871B - The Wired Security access control apparatus and cut-in method of financial circles network - Google Patents
The Wired Security access control apparatus and cut-in method of financial circles network Download PDFInfo
- Publication number
- CN106209871B CN106209871B CN201610565919.4A CN201610565919A CN106209871B CN 106209871 B CN106209871 B CN 106209871B CN 201610565919 A CN201610565919 A CN 201610565919A CN 106209871 B CN106209871 B CN 106209871B
- Authority
- CN
- China
- Prior art keywords
- unit
- signal
- interface
- control apparatus
- access control
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0853—Network architectures or network communication protocols for network security for authentication of entities using an additional device, e.g. smartcard, SIM or a different communication terminal
Abstract
The invention discloses a kind of Wired Security access control apparatus of financial circles network, it includes casing, UKey and internal circuit, USB interface, power supply indicator, equipment interface, network interface and status indicator lamp are provided on the front panel of casing, the two sides of the front panel of casing are additionally provided with mounting lug；Internal circuit includes central processing unit, serial ports reforming unit, certification request receiving unit, position units, determination unit, screening unit, signal input/output unit and memory；Serial ports reforming unit realizes communication data conversion, certification request unit is used to receive the certification request of user terminal transmission, position units are used to calculate the position of user, confirm that the coverage area of local area network, determination unit are used to determine one or more nodes that local area network coverage area includes user location.The apparatus structure is simple, can effectively limit accessing user and equipment, ensures financial network safe, cut-in method is simple, and access speed is fast.
Description
Technical field
The present invention relates to a kind of Wired Security access control apparatus of financial circles network and cut-in methods.
Background technique
Access control apparatus is a kind of device for reinforcing allowing or refusing customer access network resource, is typically based on user
Account or user belonging to some group, access controller can effectively control access device, user, improve in local area network net
Safety.In financial industry, net in safety be it is vital, need to carry out security protection, take precautions against and eliminate from internal or
The information security hidden danger and risk of external network.
Summary of the invention
It is an object of the invention to overcome the deficiencies of the prior art and provide a kind of accesses of the Wired Security of financial circles network to control
Device and cut-in method processed, the apparatus structure is simple, can effectively limit accessing user and equipment, ensures financial network safe,
Cut-in method is simple, and access speed is fast.
The purpose of the present invention is achieved through the following technical solutions: the Wired Security access control dress of financial circles network
It sets, it includes casing, UKey and internal circuit, and USB interface is provided on the front panel of the casing, power supply indicator, is set
Standby interface, network interface and status indicator lamp, the two sides of the front panel of the casing are additionally provided with mounting lug；The inside
Circuit include central processing unit, serial ports reforming unit, certification request receiving unit, position units, determination unit, screening unit,
Signal input/output unit and memory；The serial ports reforming unit realizes communication data conversion, the certification request list
Member is used to calculate the position of user, confirms local area network for receiving the certification request of user terminal transmission, the position units
Coverage area, the determination unit are used to determine one or more nodes that local area network coverage area includes user location, institute
For the screening unit stated for filtering out the node that user detects peak signal from determining node, the signal input is defeated
Device realizes the input and output of signal out.
The signal input/output unit includes signal input interface, signal output interface and photoisolator, the letter
The signal output end of number input interface is connect with the signal input part of the central processing unit, the signal output end of central processing unit
It is connect with the signal input part of photoisolator, the signal output end of photoisolator and the signal input part of signal output interface
Connection.
The serial ports conversion equipment include first serial conversion circuit, second serial conversion circuit, the first communication interface and
Second communication interface, the signal input part and usb hub of the first serial conversion circuit and second serial conversion circuit
Signal output end connection, the signal input part of usb hub and the signal output end of central processing unit connect, the first serial
The signal output end of conversion circuit is connect with the signal input part of the first communication interface, the signal of the second serial conversion circuit
Output end is connect with the signal input part of the second communication interface.
The memory includes random access memory, program storage, SATA hard disc and SD card, central processing unit with deposit at random
Reservoir communication connection, the signal output end of the central processing unit letter with the signal input part of program storage, SATA hard disc respectively
Number input terminal is connected with the signal input part of SD card.
The screening unit includes:
Signal strength unit, the signal strength provided for determining each node respectively；
Metrics calculation unit, the distance for calculating user to determining each node；
Intensity screening unit, for according to the node of the signal strength of determining node offer and user to determination away from
From filtering out the node that user is able to detect that maximum signal.
The status indicator lamp includes a red status indicator light and a green state indicator light.
The cut-in method of the Wired Security access control apparatus of financial circles network, it includes the following steps:
S01: access control apparatus power switch is opened, equipment red status indicator light and green state indicator light are equal at this time
It is bright, and green power supply indicator light is bright；
S02: after red status indicator lamp extinguishes, by the USB port of UKey insertion access control apparatus；
S03: after the extinguishing of green state indicator light, equipment is unlocked and is finished；
S04: configuration will be connected to the IP attribute that access control apparatus corresponds to the headend equipment of equipment interface；
S05: the IP attribute of configuration debugging computer；
S06: each equipment interface parameter for entering control device by debugging computer docking is configured；
S07: identifying and locking device, and access is completed.
When the debugging computer accesses access control apparatus, UKey must be inserted on access control apparatus.
The identification and locking device includes following sub-step:
S071: the network interface of access control apparatus is accessed into network；
S072: configured headend equipment is connected to access control apparatus by equipment interface according to the sequence of configuration
On；
S073: extracting UKey, and green state indicator light flashes at this time, indicates access control apparatus to all accesses
Headend equipment is authenticated and is locked.
The beneficial effects of the present invention are: the present invention provides a kind of Wired Security access control apparatus of financial circles network and
Cut-in method, the apparatus structure is simple, can effectively limit accessing user and equipment, ensures financial network safe, cut-in method
Simply, access speed is fast.It is mainly used for embedded device access security protection network scenarios, enhances the network security to embedded device
And managerial ability, information security hidden danger and risk from interiorly or exteriorly network are taken precautions against and eliminate, in enhancing network security
Potential security risk is eliminated simultaneously.
Detailed description of the invention
Fig. 1 is apparatus structure schematic diagram；
Fig. 2 is device internal circuit block diagram；
Fig. 3 is method schematic diagram；
In figure, 1- casing, 2-USB interface, 3- power supply indicator, 4- equipment interface, 5- network interface, 6- state instruction
Lamp, 7- lug.
Specific embodiment
Technical solution of the present invention is described in further detail with reference to the accompanying drawing, but protection scope of the present invention is not limited to
It is as described below.
As shown in Figure 1, the Wired Security access control apparatus of financial circles network, it includes casing 1, UKey and inside electricity
Road is provided with USB interface 2, power supply indicator 3, equipment interface 4, network interface 5 and state on the front panel of the casing 1
The two sides of indicator light 6, the front panel of the casing 1 are additionally provided with mounting lug 7；The internal circuit includes central processing
Device, serial ports reforming unit, certification request receiving unit, position units, determination unit, screening unit, signal input/output unit
And memory；The serial ports reforming unit realizes communication data conversion, and the certification request unit is for receiving user terminal
The certification request of transmission, the position units are used to calculate the position of user, confirm the coverage area of local area network, it is described really
Order member be used for determine local area network coverage area include user location one or more nodes, the screening unit be used for from
The node that user detects peak signal is filtered out in determining node, the signal input/output unit realizes the defeated of signal
Enter output.
The signal input/output unit includes signal input interface, signal output interface and photoisolator, the letter
The signal output end of number input interface is connect with the signal input part of the central processing unit, the signal output end of central processing unit
It is connect with the signal input part of photoisolator, the signal output end of photoisolator and the signal input part of signal output interface
Connection.
The serial ports conversion equipment include first serial conversion circuit, second serial conversion circuit, the first communication interface and
Second communication interface, the signal input part and usb hub of the first serial conversion circuit and second serial conversion circuit
Signal output end connection, the signal input part of usb hub and the signal output end of central processing unit connect, the first serial
The signal output end of conversion circuit is connect with the signal input part of the first communication interface, the signal of the second serial conversion circuit
Output end is connect with the signal input part of the second communication interface.
The memory includes random access memory, program storage, SATA hard disc and SD card, central processing unit with deposit at random
Reservoir communication connection, the signal output end of the central processing unit letter with the signal input part of program storage, SATA hard disc respectively
Number input terminal is connected with the signal input part of SD card.
The screening unit includes:
Signal strength unit, the signal strength provided for determining each node respectively；
Metrics calculation unit, the distance for calculating user to determining each node；
Intensity screening unit, for according to the node of the signal strength of determining node offer and user to determination away from
From filtering out the node that user is able to detect that maximum signal.
The status indicator lamp 6 includes a red status indicator light and a green state indicator light, the finger of status indicator lamp
Show and is described as follows shown in table.
The cut-in method of the Wired Security access control apparatus of financial circles network, it includes the following steps:
S01: access control apparatus power switch is opened, equipment red status indicator light and green state indicator light are equal at this time
It is bright, and green power supply indicator light is bright, and equipment starting needs about 45 seconds；
S02: after red status indicator lamp extinguishes, by the USB port of UKey insertion access control apparatus；
S03: after the extinguishing of green state indicator light, equipment is unlocked and is finished；
S04: configuration will be connected to headend equipment (such as alarm controller, door that access control apparatus corresponds to equipment interface
Prohibit controller, DVR host, IP talk-back host etc.) IP attribute, i.e., the IP attribute that present headend equipment uses is replaced with as follows
Table institute Column Properties；
S05: the IP attribute of configuration debugging computer；
S06: each equipment interface parameter for entering control device by debugging computer docking is configured；
S07: identifying and locking device, and access is completed.
When the debugging computer accesses access control apparatus, UKey must be inserted on access control apparatus.
The identification and locking device includes following sub-step:
S071: the network interface of access control apparatus is accessed into network；
S072: configured headend equipment is connected to access control apparatus by equipment interface according to the sequence of configuration
On；
S073: extracting UKey, and green state indicator light flashes at this time, indicates access control apparatus to all accesses
Headend equipment is authenticated and is locked.
Claims (4)
1. the Wired Security access control apparatus of financial circles network, it is characterised in that: it includes: including casing (1), UKey and interior
Portion's circuit is provided with USB interface (2), power supply indicator (3), equipment interface (4), network on the front panel of the casing (1)
The two sides of interface (5) and status indicator lamp (6), the front panel of the casing (1) are additionally provided with mounting lug (7)；Described is interior
Portion's circuit includes central processing unit, serial ports reforming unit, certification request receiving unit, position units, determination unit, screening list
Member, signal input/output unit and memory；The serial ports reforming unit realizes communication data conversion, the certification request
Unit is used to receive the certification request of user terminal transmission, and the position units are used to calculate the position of user, confirms local area network
Coverage area, the determination unit be used for determine local area network coverage area include user location one or more nodes,
The screening unit from determining node for filtering out the node that user detects peak signal, the signal input
The input and output of output device realization signal；
The serial ports conversion equipment includes first serial conversion circuit, second serial conversion circuit, the first communication interface and second
Communication interface, the signal of the signal input part and usb hub of the first serial conversion circuit and second serial conversion circuit
Output end connection, the signal input part of usb hub and the signal output end of central processing unit connect, the first serial conversion
The signal output end of circuit is connect with the signal input part of the first communication interface, the signal output of the second serial conversion circuit
End is connect with the signal input part of the second communication interface；
The memory includes random access memory, program storage, SATA hard disc and SD card, central processing unit and random access memory
Communication connection, the signal output end of central processing unit are defeated with the signal of the signal input part of program storage, SATA hard disc respectively
Enter end to connect with the signal input part of SD card；
The control device for access method the following steps are included:
S01: opening access control apparatus power switch, and equipment red status indicator light and green state indicator light are bright at this time,
And green power supply indicator light is bright；
S02: after red status indicator lamp extinguishes, by the USB port of UKey insertion access control apparatus；
S03: after the extinguishing of green state indicator light, equipment is unlocked and is finished；
S04: configuration will be connected to the IP attribute that access control apparatus corresponds to the headend equipment of equipment interface；
S05: the IP attribute of configuration debugging computer；
S06: each equipment interface parameter for entering control device by debugging computer docking is configured, debugging computer access access
When control device, UKey must be inserted on access control apparatus；
S07: identifying and locking device, and access is completed；
The identification and locking device includes following sub-step:
S071: the network interface of access control apparatus is accessed into network；
S072: configured headend equipment is connected on access control apparatus according to the sequence of configuration by equipment interface；
S073: extracting UKey, and green state indicator light flashes at this time, indicates access control apparatus to the front end of all accesses
Equipment is authenticated and is locked.
2. the Wired Security access control apparatus of financial circles network according to claim 1, it is characterised in that: the signal
Input/output unit includes signal input interface, signal output interface and photoisolator, the signal of the signal input interface
Output end is connect with the signal input part of the central processing unit, the signal output end of central processing unit and the letter of photoisolator
The connection of number input terminal, the signal output end of photoisolator and the signal input part of signal output interface connect.
3. the Wired Security access control apparatus of financial circles network according to claim 1, it is characterised in that: the screening
Unit includes:
Signal strength unit, the signal strength provided for determining each node respectively；
Metrics calculation unit, the distance for calculating user to determining each node；
Intensity screening unit, for the distance according to the signal strength and user of determining node offer to determining node, sieve
Select the node that user is able to detect that maximum signal.
4. the Wired Security access control apparatus of financial circles network according to claim 1, it is characterised in that: the state
Indicator light (6) includes a red status indicator light and a green state indicator light.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610565919.4A CN106209871B (en) | 2016-07-18 | 2016-07-18 | The Wired Security access control apparatus and cut-in method of financial circles network |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610565919.4A CN106209871B (en) | 2016-07-18 | 2016-07-18 | The Wired Security access control apparatus and cut-in method of financial circles network |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN106209871A CN106209871A (en) | 2016-12-07 |
| CN106209871B true CN106209871B (en) | 2019-10-01 |
Family
ID=57493022
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201610565919.4A Active CN106209871B (en) | 2016-07-18 | 2016-07-18 | The Wired Security access control apparatus and cut-in method of financial circles network |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106209871B (en) |
Family Cites Families (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1152331C (en) * | 1999-06-02 | 2004-06-02 | 余鲲 | System and method for ensuring information security of computer network |
| CN100449561C (en) * | 2007-03-05 | 2009-01-07 | 北京邮电大学 | Divulging secrets prevention system of USB storage device date based on certificate and transparent encryption technology |
| US8988984B2 (en) * | 2011-02-04 | 2015-03-24 | Cisco Technology, Inc. | Designated forwarder election for VPLS with BGP-based MAC learning |
| CN103295341B (en) * | 2013-05-16 | 2015-12-30 | 中国工商银行股份有限公司 | POS safety certification device, system and POS equipment safety authentication method |
| CN103916816B (en) * | 2014-03-25 | 2017-07-28 | 深圳市宏电技术股份有限公司 | A kind of radio switch-in method and access controller |
| CN205051880U (en) * | 2015-09-30 | 2016-02-24 | 北京军地联合网络技术中心 | Circumscribed USB wireless LAN safety management and control device |
-
2016
- 2016-07-18 CN CN201610565919.4A patent/CN106209871B/en active Active
Also Published As
| Publication number | Publication date |
|---|---|
| CN106209871A (en) | 2016-12-07 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103559435B (en) | The debugging port controlling method and apparatus of terminal device | |
| US9183383B1 (en) | System and method of limiting the operation of trusted applications in presence of suspicious programs | |
| CN105141614B (en) | A kind of access right control method and device of movable storage device | |
| CN206162540U (en) | Intelligent computer network safety isolation device | |
| CN106027520A (en) | Method and device for detecting and processing stealing of website accounts | |
| CN105389497A (en) | Security verification method and system for operation interface of fingerprint recognition | |
| CN107135201A (en) | A kind of webserver login authentication method and device | |
| CN103164789A (en) | Debug circuit structure provided with safety verification and achieving method of debug circuit structure provided with safety verification | |
| CN205451071U (en) | Machine case data destructors that uncaps | |
| CN106209871B (en) | The Wired Security access control apparatus and cut-in method of financial circles network | |
| CN106778160A (en) | Data item display methods and device | |
| CN205983479U (en) | Computer security control system | |
| CN106937282B (en) | VPN access method and system based on mobile terminal | |
| CN102957706A (en) | Safe anti-cracking method of data server | |
| CN116032581A (en) | Network equipment security management method and electronic equipment | |
| CN105391720A (en) | User terminal login method and device | |
| CN103795708A (en) | Terminal access method and system | |
| CN103488925B (en) | Fingerprint verification method and device | |
| CN106850987A (en) | The guard method of terminal device and SIM | |
| CN106941475A (en) | A kind of authentication method and device based on trusting relationship | |
| CN112637849A (en) | Terminal equipment access control method and device and multimedia broadcast control equipment | |
| CN207926638U (en) | A kind of home security network system based on cloud platform | |
| CN206224516U (en) | Vena metacarpea recognizes authentication device and system | |
| CN202918335U (en) | Fusion type identity authentication device based on cloud computing | |
| CN103516724A (en) | Firewall device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |