Disclosure of Invention
The invention aims to provide an intelligent intrusion detection device for various types of data, and solves the problem that no device integrating a CAN interface, an AD interface, a digital IO interface and encryption and decryption functions exists in the prior art.
To solve the above technical problem, an embodiment of the present invention provides an intrusion detection intelligent device for multiple types of data, including: the back board, a mainboard module, a CAN & AD card, a digital IO card, an encryption and decryption card, a rear input and output interface board and a power module which are connected with the back board; wherein the backplane supports the compact PCI protocol;
the rear input/output interface board is configured to provide multiple types of input/output interfaces, where the multiple types of input/output interfaces include: the system comprises an encryption and decryption card interface, a network interface, an RS232 serial interface, a USB interface, a CAN interface, an AD interface and a digital IO interface, wherein each type of input and output interface is used for acquiring data of a corresponding type in real time;
the CAN & AD card is used for communicating with the CAN interface and the AD interface through the backboard;
the digital IO card is used for communicating with the digital IO interface through the backboard;
the mainboard module is used for carrying out intrusion detection on the acquired data according to a preset intrusion detection rule;
the encryption and decryption card is used for carrying out encryption and decryption and digital authentication processing on data which is not invaded;
the power module is used for supplying power to the back plate.
Furthermore, the mainboard module, the CAN & AD card, the digital IO card, the encryption and decryption card, the rear input and output interface board and the power supply module are in plug-in connection with the back plate through the pinhole type connector;
the main board module, the CAN & AD card, the digital IO card, the encryption and decryption card and the power supply module are positioned on the front side of the back board, and the rear input and output interface board is positioned on the rear side of the back board.
Further, the input and output interfaces of the plurality of types include: 1-path security card interface, 2-path network interface, 2-path RS232 serial interface, 6-path USB interface, 2-path CAN interface, 10-path AD interface and 24-path digital IO interface.
Further, the CAN & AD card includes: the device comprises a first conversion module and a first interface expansion module;
the first conversion module is used for converting the PCI bus into a local bus, wherein the local bus is connected with the first interface expansion module;
the first interface extension module is used for extending a plurality of paths of CAN signals and a plurality of paths of AD signals, wherein the plurality of paths of CAN signals and the plurality of paths of AD signals are connected to the rear input and output interface board through the backboard, and the rear input and output interface board provides a plurality of paths of CAN interfaces and a plurality of paths of AD interfaces.
Further, the digital IO card includes: the second conversion module and the second interface expansion module;
the second conversion module is configured to convert the PCI bus into a local bus, where the local bus is connected to the second interface expansion module;
the second interface expansion module is configured to expand multiple paths of IO signals, where the multiple paths of IO signals are connected to the rear input/output interface board through the backplane, and the rear input/output interface board provides multiple paths of digital IO interfaces;
each path of digital IO interface in the multiple paths of digital IO interfaces can be independently configured to be an output interface or an input interface.
The equipment further comprises a first network port expansion module connected with the back plate and a network port transformer connected with the first network port expansion module;
the first network port expansion module and the network port transformer connected with the first network port expansion module are used for expanding a first path of network port;
and the first network port is used for inputting and outputting network data.
Further, the apparatus further comprises: the second network port expansion module is connected with the back plate;
the second network port expansion module is used for expanding a second network port;
and the second router port is used for inputting and outputting network data.
Further, the apparatus further comprises: an AC filter connected to the back plate;
the alternating current filter is used for filtering 220V alternating current.
Further, the input/output interfaces of the plurality of types further include: a display port;
and the display port is used for accessing the liquid crystal display.
Further, the apparatus further comprises: the standby board card is connected with the back plate; wherein,
the spare board card comprises: one or more of RS232 serial interface card, video and audio synthesis card, 1553B bus card, 3U card based on compact PCI bus and 6U card based on compact PCI bus.
The technical scheme of the invention has the following beneficial effects:
in the above scheme, based on the network port, the RS232 serial interface, the USB interface, the CAN interface, the AD interface, and the digital IO interface provided by the rear input/output interface board, various types of data such as AD, CAN, and digital quantity CAN be acquired in real time, and intrusion detection is performed on the acquired various types of data in real time by using the motherboard module according to a preset intrusion detection rule; and the encryption and decryption card is used for carrying out encryption and decryption and digital authentication processing on the data which is not invaded, thereby realizing the diversity of the data and ensuring the safety and the reliability of the data.
Detailed Description
In order to make the technical problems, technical solutions and advantages of the present invention more apparent, the following detailed description is given with reference to the accompanying drawings and specific embodiments.
The invention provides intrusion detection intelligent equipment for various types of data, aiming at the problem that no equipment integrating a CAN interface, an AD interface, a digital IO interface and an encryption and decryption function exists at present.
As shown in fig. 1, an intrusion detection intelligent device for multiple types of data according to an embodiment of the present invention includes: the back board, a mainboard module, a CAN & AD card, a digital IO card, an encryption and decryption card, a rear input and output interface board and a power module which are connected with the back board; wherein the backplane supports the compact PCI protocol;
the rear input/output interface board is configured to provide multiple types of input/output interfaces, where the multiple types of input/output interfaces include: the system comprises an encryption and decryption card interface, a network interface, an RS232 serial interface, a USB interface, a CAN interface, an AD interface and a digital IO interface, wherein each type of input and output interface is used for acquiring data of a corresponding type in real time;
the CAN & AD card is used for communicating with the CAN interface and the AD interface through the backboard;
the digital IO card is used for communicating with the digital IO interface through the backboard;
the mainboard module is used for carrying out intrusion detection on the acquired data according to a preset intrusion detection rule;
the encryption and decryption card is used for carrying out encryption and decryption and digital authentication processing on data which is not invaded;
the power module is used for supplying power to the back plate.
The intrusion detection intelligent equipment for various types of data, provided by the embodiment of the invention, CAN acquire various types of data such as AD, CAN, digital quantity and the like in real time based on the network port, the RS232 serial interface, the USB interface, the CAN interface, the AD interface and the digital IO interface which are provided by the rear input and output interface board, and carry out intrusion detection on the acquired various types of data in real time by utilizing the mainboard module according to the preset intrusion detection rule; and the encryption and decryption card is used for carrying out encryption and decryption and digital authentication processing on the data which is not invaded, thereby realizing the diversity of the data and ensuring the safety and the reliability of the data.
In this embodiment, the back board, the motherboard module, the CAN & AD card, the digital IO card, the encryption/decryption card, and the rear input/output interface board all support and use the compact PCI protocol, where the CAN & AD card may be an industrial-grade CAN & AD card. In this embodiment, as shown in fig. 1 and fig. 2, the intrusion detection smart device provides a plurality of card slots, where the card slots include: the system comprises a system groove, an equipment groove and a power supply groove, wherein the system groove is used for inserting the mainboard module, the equipment groove is used for inserting the CAN and AD card, the digital IO card and the encryption and decryption card, and the power supply groove is used for inserting the power supply module.
In this embodiment, the motherboard module may be a COM-E (COM express) core board, on which a customized kylin Linux system may be run, and the customized kylin Linux system is configured to reasonably tailor an original kylin Linux kernel system according to intrusion detection rules of various types of data, so that stability, reliability, and low hardware power consumption of the tailored kylin Linux system are ensured, and various types of transmission communication protocols such as CAN, USB, AD, and IO are provided, thereby realizing reliable and efficient transmission of data, and supporting conversion of various communication protocols; wherein, the CPU of the COM-E core board isThe (Intel) i7-4650U processor has the highest operation main frequency of 3.3GHz and the operation temperature range of-40 to +95 ℃, and meets the requirement of an environment with larger temperature difference in industrial field storage under special conditions; the CPU of the COM-E core board is provided with a 16GB DDR3 internal memory; the butting connector of the upper board of the main board module uses a 440pin patch mode; the mainboard module and the CAN&The AD card, the digital IO card, the encryption and decryption card, the rear input and output interface board and the power supply module are peripheral expansion interface boards for realizing the COM-E core board.
In this embodiment, the intrusion detection intelligent device CAN support multiple communication modes such as RS232, RS485, CAN, AD, digital IO, USB, and the like, and CAN simultaneously communicate EtherCAT, UDP, NetBEUI protocols and RS232, RS485, CAN, AD, and digital IO signals; the rear input/output interface board comprises input/output interfaces of various protocols such as EtherCAT, UDP, NetBEUI and the like; the input-output interface may include, but is not limited to: the system comprises a 1-path encryption and decryption card interface, a 2-path optical fiber gigabit network interface, a 2-path RS232 serial interface, a 6-path USB interface, a 2-path CAN interface, a 10-path AD interface and a 24-path digital IO interface; the intrusion detection intelligent equipment can acquire different types of data based on various types of input and output interfaces on the rear input and output interface board, and can carry out intrusion detection on the acquired various types of data, so that the intrusion detection intelligent equipment has comprehensive functions.
In this embodiment, because the intrusion detection smart device is provided with a CAN interface, an AD interface, a digital IO interface and a network interface, other devices (for example, industrial field devices and/or an upper computer) may be connected and communicated with the intrusion detection smart device through a CAN signal line, an AD signal line, an IO signal line and/or a network line, for example, the intrusion detection smart device may realize AD signal acquisition of data such as direct current voltage and acquisition of a two-way CAN signal through an ISOEM-U5-P2-O7 isolator and an AD7328BRUZ-TSSOP20 chip, and may realize Input and Output (IO) of digital quantity via a digital card.
In this embodiment, the intrusion detection smart device and other devices (e.g., industrial field devices and/or upper computers) may form a system.
In this embodiment, the data may be various types of data generated by behaviors of internal and external users and system activities, and the specific step of performing intrusion detection on the acquired data may include: analyzing and detecting various types of data generated by the behaviors of internal and external users and system activities through the mainboard module, analyzing the defects and the vulnerability of equipment or a system, and specifying a pertinence detection rule by combining protocol characteristics; identifying attack behaviors and abnormal behaviors according to Snort detection rules, and responding; and carrying out system resource and data integrity evaluation on other equipment and control models of the other equipment, monitoring system logs, and storing access records and attack footprints. And then, the data which is not invaded is encrypted, decrypted and digitally authenticated through the encryption and decryption card, so that the safe transmission of the data is realized, and the diversity of the data is realized through the network port, the CAN interface, the USB3.0 interface, the AD interface and the digital IO interface.
In this embodiment, the encryption and decryption board card is provided with an FPGA chip to undertake the calculation task of the encryption and decryption algorithm, and hardware encryption and decryption operations are realized, so that the encryption and decryption operations basically do not occupy CPU resources on the motherboard module, and the encryption and decryption speeds of various types of data such as direct-current voltage, current, torque, rotation speed, and the like can be ensured.
In this embodiment, when the encryption/decryption card performs encryption/decryption and digital authentication on data that is not invaded, instead of performing encryption/decryption and digital authentication on data that is not invaded by using a pure software method, specifically, when the data is input, the encryption/decryption card performs encryption and digital authentication on the input data through an encryption algorithm, and when the data is output, the encryption/decryption card performs decryption and digital authentication on the data by using a decryption algorithm corresponding to the encryption algorithm; the encryption and decryption card can comprise a Tang telecommunication encryption chip and an FPGA chip, supports a compact PCI protocol, abandons a traditional golden finger connection mode and adopts a pin hole connector plugging mode, and has high density and high reliability.
In this embodiment, the motherboard module may further update the encryption and decryption algorithms in the encryption and decryption card, thereby further ensuring the security of industrial-level data communications of multiple types.
In this embodiment, if the input/output interface includes 2 ways of optical fiber gigabit net mouths, 2 ways of RS232 serial interfaces, 6 ways of USB interfaces, 2 ways of CAN interfaces, 10 ways of AD interfaces and 24 ways of digital IO interfaces, then intrusion detection smart device CAN simultaneously carry out intrusion detection and storage to the data of 2 ways of optical fiber gigabit net mouths, 2 ways of RS232 serial interfaces, 6 ways of USB interfaces, 2 ways of CAN interfaces, 10 ways of AD interfaces and 24 ways of digital IO interfaces.
In this embodiment, the backplane supports a compact PCI protocol, and the compact backplane abandons a traditional gold finger connection mode and adopts a pin jack connector plugging mode, so that the backplane has high density and high reliability; because the backplane supports the compact PCI protocol, the backplane may be referred to as a compact PCI backplane, according to the compact PCI protocol, only functions are implemented on functional boards (e.g., a motherboard module, a CAN & AD card, a digital IO card, and an encryption/decryption card) in front of the backplane without an external interface, when signals are output externally, all signals are relayed and transmitted by the backplane and then output via the external interface on a rear input/output interface board, as exemplified by a CAN interface, where the CAN & AD card includes: the CAN card realizes two paths of CAN signals through an expansion chip, and needs to be provided with two paths of CAN ports on a rear input/output interface board through the relay of a backboard.
In this embodiment, in order to expand the function of the CAN bus, a CAN card having a magnetic isolation CAN interface and a compact PCI protocol is designed, the CAN card CAN use ADM-3053 and CTM1051A-3.3V chips to implement a magnetic isolation technique, and the CAN card collects information of each node on the CAN bus, forwards the information to the host computer, and CAN forward commands and data of the host computer to each node and complete partial monitoring and management work of a user system on the CAN bus.
In the embodiment, the CAN card board carries two CAN controllers, the two CAN controllers carried by the CAN card board are placed at different positions of the CAN card, and the two CAN controllers CAN be independently executed in a controller area network; the two CAN controllers are magnetically isolated, and the two magnetically isolated CAN cards are controller local area networks which provide online capability for computers, have automatic transmission repeating function and provide bus arbitration and error detection capability, so that the probability of data loss CAN be greatly reduced, and the reliability of the system is ensured.
In the foregoing specific implementation manner of the intrusion detection intelligent device for multiple types of data, further, the motherboard module, the CAN & AD card, the digital IO card, the encryption/decryption card, the rear input/output interface board, and the power supply module are connected to the backplane by pin-and-socket connectors;
the main board module, the CAN & AD card, the digital IO card, the encryption and decryption card and the power supply module are positioned on the front side of the back board, and the rear input and output interface board is positioned on the rear side of the back board.
In this embodiment, the motherboard module, the CAN & AD card, the digital IO card, the encryption/decryption card, and the power module are located on the front side of the backplane, and are key board cards for implementing intrusion detection, and the board cards located on the front side of the backplane may be referred to as front side board cards; the rear input/output interface board is positioned at the rear side of the back plate, and the board card positioned at the rear side of the back plate can be called as a rear side board card; the back plate is used for relaying the front side board card and the rear side board card, the back plate is used for realizing relay connection with the front side board card and the rear side board card, and protocol conversion and data transmission of an interface are completed; the back plate, the front side and the rear side of each plate are clamped in the intelligent intrusion detection equipment to form a vertical plugging relation through the pinhole type connectors; for example, the mainboard module, the CAN & AD card, the digital IO card, the encryption and decryption card and the power module CAN be connected with the back plate in a front-to-back manner through an intensive european pin hole connector with a height of two millimeters, so that power and signal intercommunication among the boards is realized; the back plate is connected with the rear input and output interface board in a plug-in mode from the back side of the back plate through three connectors of J1/J4, J2/J5 and J3. Signals are generated by the board cards in the front, are connected and relayed by the backboard, and are output by the corresponding interfaces on the rear input/output interface board, so that the transmission and connection of a power supply and the signals are realized in the intrusion detection intelligent equipment in a high-density and high-reliability European-type pinhole connector interconnection mode, and the reliability of the whole equipment can be improved.
In the foregoing specific embodiment of the intrusion detection smart device for multiple types of data, further, the CAN & AD card includes: the device comprises a first conversion module and a first interface expansion module;
the first conversion module is used for converting the PCI bus into a local bus, wherein the local bus is connected with the first interface expansion module;
the first interface extension module is used for extending a plurality of paths of CAN signals and a plurality of paths of AD signals, wherein the plurality of paths of CAN signals and the plurality of paths of AD signals are connected to the rear input and output interface board through the backboard, and the rear input and output interface board provides a plurality of paths of CAN interfaces and a plurality of paths of AD interfaces. In this embodiment, the CAN & AD card includes: a first conversion module and a first interface extension module, that is, the first conversion module and the first interface extension module are components of a CAN & AD card that converts a PCI bus into a local bus (the local bus may also be referred to as a local bus) using a first conversion module that may include: the PCI9054 chip is used for converting a PCI bus into a local bus, and the EEPROM chip stores configuration information of the PCI9054 chip for a long time after an instruction is cured; the local bus is connected with a first interface extension module (wherein, the first interface extension module CAN be an STM32F207ZGT6 chip) and extends 10 paths of AD signals and 2 paths of CAN signals, the extended 10 paths of AD signals and 2 paths of CAN signals are connected to a rear input and output interface board through a backboard, the rear input and output interface board externally provides 10 paths of AD interfaces and 2 paths of CAN interfaces, and the STM32F207ZGT6 chip needs a J-Link tool and Keil5.0 software for program solidification.
In this embodiment, as shown in fig. 3, the PCI bus is connected to the logic control and processing circuit on the board card through circuit conversion and a local bus to complete the control of the interface to the board card and the input and output of signals, the logic control and processing circuit meets the function requirement of the board card, completes the functions of address decoding, data format conversion, logic control, and the like, and simultaneously performs the control of the peripheral function circuit and the driving circuit and the input and output of signals, wherein the logic control and processing circuit may be implemented by an FPGA device.
As shown in FIG. 4, the compact PCI bus interface control logic implements the interface between the PCI9054 chip and the 64bit, 66.6MHz PCI bus; the local bus interface control logic is connected with the PCI9054 chip. The internal resources of the PCI9054 chip comprise a PCI configuration internal register, local bus control logic and a pair of read-write FIFOs, and are used for configuring a system and connecting a PCI bus and the local bus. The internal logic of the PCI9054 chip consists of a serial EEPROM controller and FIFO control logic, wherein the serial EEPROM controller is used for loading the value of the configuration register from an optional external serial EEPROM, and the FIFO control logic is used for controlling reading and writing of the FIFO and coordinating the compact PCI bus and the local bus. The JTAG interface is used for debugging circuits through Keil5.0 software and programs, and the programs are solidified into the card of the invention through the interface.
The local/local bus of the PCI9054 chip has two working MODEs (MODE): a non-multiplexing mode and a multiplexing mode. In the non-multiplexing MODE, the PCI9054 employs the non-multiplexing MODE when the MODE input is low, and conversely employs the multiplexing MODE when the MODE input is high. In multiplex mode, LA [27:2] is used to transmit addresses, LAD [63:32] is a 64-bit address/data multiplexed bus; in non-multiplexing mode, LA [27:2] is the address bus and LD [63:32] is the data bus.
For a better understanding of the present embodiment, the compact PCI bus signals are illustrated:
the compact PCI bus signal completes the time sequence conversion of the bus, so that the intrusion detection intelligent equipment CAN control the functional circuits of various components (a mainboard module, a CAN & AD card, a digital IO card, an encryption and decryption card, a rear input and output interface board and a power module). In this embodiment, the design of the CAN & AD card and the digital IO card is completed by using an interface scheme of a PCI9054 chip plus an FPGA. A PCI9054 chip produced by PLX company is used as a PCI controller, and an FPGA of Altera company is used for carrying out read-write logic and compact PCI expansion function design.
In the embodiment, the PCI9054 is an interface chip with 32/64 bits and 33/66MHz frequency, and can enable the fastest transmission speed of a PCI signal to reach 264 MB/s; support multiplexing and non-multiplexing 32/64 bit address or data protocol of the local bus, and support 8 bit, 16 bit and 32 bit operation of the dynamic local bus, the local clock can reach 66.6MHz at most; support 5 PCI to local address space mappings, each space allowing for separate programming of wait states, bus widths, and burst transfer functionality; the V2.2 version specification of compact PCI power management is supported; the PCI expansion and PCI target pre-reading mode of the key Product Data (VPD) is supported, so that the bandwidth can be increased, and the reading delay can be reduced; the PCI9054 chip has 9 programmable general purpose I/O chips and can be used for multiple purposes; hot plugging of compact PCI is supported; its power supply supports DC3.3V and 5V voltage tolerant operation and has an optional serial EEPROM interface.
The compact PCI bus has excellent performance, can quickly transmit various types of data by adopting the European pin jack connector, has very deep interface logic, is difficult to realize by using an FPGA at the initial development stage of the bus, has low reliability, and generally adopts a special PCI interface chip to realize the interface function of the compact PCI, thereby being a very effective and reliable design realization method.
In this embodiment, the FPGA device of ALTERA corporation, its development environment, and the tool quitus ii12.0 are used, which is a high-density asic that can be defined and configured by the user in the field according to the requirements of the designed digital system. The design module can realize the design of a digital system with large-scale logic gates under the support of FPGA development system software.
The major advantages of the FPGA can be summarized as the following three parts:
the field programmable characteristic of the FPGA greatly shortens the design period, and a designer can provide a sample plate which is quickly realized in the field in a short time.
The FPGA can provide effective logic capacity density which is much larger than that of EPLD and CPLD devices, thereby greatly reducing the space of a printed circuit board, greatly reducing the power consumption of a system, and simultaneously greatly improving the process realizability of system design and the reliability of products.
The FPGA device can be erased and written by heat and programmed repeatedly, and can be directly simulated in the development process without loss of process realization.
In a specific implementation manner of the foregoing intrusion detection smart device for multiple types of data, further, the digital IO card includes: the second conversion module and the second interface expansion module;
the second conversion module is configured to convert the PCI bus into a local bus, where the local bus is connected to the second interface expansion module;
the second interface expansion module is configured to expand multiple paths of IO signals, where the multiple paths of IO signals are connected to the rear input/output interface board through the backplane, and the rear input/output interface board provides multiple paths of digital IO interfaces;
each path of digital IO interface in the multiple paths of digital IO interfaces can be independently configured to be an output interface or an input interface.
In this embodiment, the digital IO card converts the PCI bus into the local bus using a second conversion module, where the second conversion module may include: the PCI9054 chip is used for converting a PCI bus into a local bus, and the EEPROM chip stores configuration information of the PCI9054 chip for a long time after an instruction is cured; the local bus is connected with a second interface expansion module (wherein the second interface expansion module can be an EP1C3T144C8N chip carried by a digital IO card board) and expands 24 paths of IO signals, the expanded 24 paths of IO signals are connected to a rear input and output interface board after passing through a backboard, and the rear input and output interface board provides 24 paths of digital IO interfaces to the outside, wherein the EP1C3T144C8N chip carried by the digital IO card board is loaded and an FPGA program is compiled by software, and a USB Blaster emulator and QuartusII12.0 software are required to be used for program solidification.
In this embodiment, the 24 paths of digital IO interfaces are used to provide 24 paths of TTL digital input/output IO ports, and each group of IO ports may be independently configured as an output port or an input port.
In this embodiment, as shown in fig. 5, a functional circuit block diagram of a digital IO card is shown, an HCPL2631 device is used as a 10MHz optical coupler, and SG2003J/883b is used as a driving circuit. The digital output is subjected to a driving circuit, high voltage is pulled to 26VDC, and power of 26V is supplied by a peripheral direct current power supply. When an application program sets a certain path of output signal, the corresponding register of the path is set through the driving interface function, the FPGA outputs a corresponding signal according to the set value of the register, and the corresponding signal is changed into a 26VDC signal or a 0VDC signal through the driving circuit.
In this embodiment, the input of digital quantity inserts to 10MHz opto-coupler HCPL2631 chip behind the current-limiting resistor, when input signal voltage is 14.9V ~ 26.1V for direct current, the opto-coupler switches on, can output a corresponding High state, when input signal is direct current 0V ~ 0.81V, the opto-coupler does not switch on, output another kind of corresponding Low state this moment, the output line of opto-coupler is connected to FPGA device EP2C8Q208C8N, FPGA internal logic can judge the High or Low state of input signal according to two kinds of states of opto-coupler, place the input state of this way digital quantity in the corresponding register. When the application program needs to read the state of the channel, a driving interface function needs to be called, the digital quantity fast switching and state conversion are achieved through a chip ULN2803AFWG and an industrial relay JRC-089M-002-05-II, the driving interface function returns the state of the digital quantity input signal of the channel, the returned state is transmitted to acquisition software, and the digital IO card function is achieved after the returned state is analyzed and processed through the software.
In the specific implementation of the intelligent intrusion detection device for multiple types of data, the device further comprises a first network port expansion module connected with the backplane and a network port transformer connected with the first network port expansion module;
the first network port expansion module and the network port transformer connected with the first network port expansion module are used for expanding a first path of network port;
and the first network port is used for inputting and outputting network data.
In this embodiment, the first network port expansion module connected to the back plate may beThe ICH9M network chip, the network port transformer can be IMG \ M1801IG chip;the ICH9M network chip is connected to a network port transformer IMG \ M1801IG and extends a network port, wherein the network port may be an optical fiber network port.
In this embodiment, two optical fiber network ports can implement fast Ethernet input and output of network data, support Ethernet and Internet transmission standards, and signal transmission supports standard TCP/IP, EtherCAT and UDP protocols.
In a specific embodiment of the foregoing intrusion detection intelligent device for multiple types of data, further, the device further includes: the second network port expansion module is connected with the back plate;
the second network port expansion module is used for expanding a second network port;
and the second router port is used for inputting and outputting network data.
In this embodiment, the second port expansion module expands the other optical fiber port with one PCIE X4 signal, so that Ethernet fast input and output of network data can be realized through the two optical fiber ports, Ethernet and Internet transmission standards are supported, and signal transmission supports standard TCP/IP, EtherCAT, and UDP protocols.
In a specific embodiment of the foregoing intrusion detection intelligent device for multiple types of data, further, the device further includes: an AC filter connected to the back plate;
the alternating current filter is used for filtering 220V alternating current.
In this embodiment, as shown in fig. 2, the apparatus further includes: an AC filter connected to the back plate; the 220V alternating current of the mains supply is filtered by the alternating current filter and then is led into the power supply module through the backboard, and the reliable European power supply connector female head is used on the power supply module and is connected with the European power supply connector male head on the backboard in a plug-in mode.
In a specific implementation manner of the foregoing intrusion detection intelligent device for multiple types of data, further, the multiple types of input and output interfaces further include: a display port;
and the display port is used for accessing the liquid crystal display.
In this embodiment, as shown in fig. 2, the input/output interface of the intrusion detection intelligent device includes: encryption and decryption card interface, internet access, RS232 serial interface, USB interface, CAN interface, AD interface and digital IO interface, as shown in figure 6, intrusion detection smart machine CAN pass through input/output interface inserts ten gigabit switch, keyboard, mouse, prevents that hot wall realizes its external interface. Data such as external voltage and the like, signals or digital IO signals sent by industrial CAN equipment are collected and stored in a hard disk embedded in a mainboard module of the intelligent intrusion detection equipment, and data CAN be read and written through upper computer software.
In this embodiment, the multiple types of input/output interfaces may further include: 1 display port, wherein the display port can be used for accessing a liquid crystal display.
In a specific embodiment of the foregoing intrusion detection intelligent device for multiple types of data, further, the device further includes: the standby board card is connected with the back plate; wherein,
the spare board card comprises: one or more of RS232 serial interface card, video and audio synthesis card, 1553B bus card, 3U card based on compact PCI bus and 6U card based on compact PCI bus.
In this embodiment, the apparatus further includes: the standby board card is connected with the back plate and is positioned on the front side of the back plate; the spare board card can expand the function of the device according to the actual situation, for example, the spare board card includes: one or more of an RS232 serial interface card, a video and audio synthesis card, a 1553B bus card, a 3U board card based on a compact PCI bus and a 6U board card based on the compact PCI bus are inserted into a standby card slot as shown in FIG. 2, so that the functional performance of the intelligent intrusion detection equipment is further enriched, wherein the 3U board card can be inserted into the 6U board card slot, and the intelligent intrusion detection equipment has strong compatibility; the compact PCI bus abandons the golden finger form of the traditional PCI bus, adopts a stable and reliable pin hole connector form, has high density and high reliability, and simultaneously supports the hot plug function of the board card, thereby realizing the integration of various protocols and multifunctional board cards.
In this embodiment, the back board, the motherboard module, the CAN & AD card, the digital IO card, the encryption/decryption card, the rear input/output interface board, and the standby board all use electronic components conforming to the air or military grade, and use structural members conforming to the compact PCI standard and having an elegant appearance, so that the internal board, and chips and components thereon CAN be protected from being damaged by external stress.
While the foregoing is directed to the preferred embodiment of the present invention, it will be understood by those skilled in the art that various changes and modifications may be made without departing from the spirit and scope of the invention as defined in the appended claims.