CN201993768U

CN201993768U - Encryption card with network interfaces

Info

Publication number: CN201993768U
Application number: CN2010206113960U
Authority: CN
Inventors: 孙国忠; 叶丞; 石旭; 曹振南; 董建珊
Original assignee: BEIJING SHUGUANG TIANYAN INFORMATION TECHNOLOGY Co Ltd
Current assignee: Shuguang Cloud Computing Group Co Ltd
Priority date: 2010-11-17
Filing date: 2010-11-17
Publication date: 2011-09-28
Anticipated expiration: 2020-11-17

Abstract

The utility model provides an encryption card with network interfaces, wherein a network interface is added to the encryption card, and a local host network data encryption module, a far-end client data encryption and decryption module and a far-end monitoring and maintaining module are also added to the encryption card. Each module receives data through the network interface, and the processed data is sent through the network interface after being processed. The encryption card with a network interface enables the work efficiency of the encryption card to be increased greatly.

Description

A kind of encrypted card with network interface

Technical field

The utility model relates to the encrypted card field, particularly a kind of encrypted card with network interface.

Background technology

At present, encrypted card is widely used in information security field, is used for the authenticated identity and ensures secure user data.Common encrypted card needs directly to be inserted on the PCI (Peripheral Component Interconnect) or PCIE (PCI-Express) slot of computing machine in use, by PCI or PCIE and main-machine communication, encrypted card carries out after the operations such as corresponding encryption and decryption or signature the result data bag being returned to main frame, because the transfer rate of PCI and PCIE interface is fast, when carrying out the local data encryption, this encrypted work pattern is efficiently.But this common encrypted card that does not have network interface and network service has following defective:

1. encrypted card at first need receive data by network interface card by main frame when carrying out network data encryption, afterwards data is transferred to encrypted card by PCI or PCIE, after encrypted card is finished encryption, passes to the user by network, and its structure as shown in Figure 1.In this case, the efficient of the encrypting and decrypting of data is low than the local data encrypting and decrypting.

2. encrypted card is when high load capacity is worked, data interaction is frequent on PCI or the PCIE bus, be difficult to this moment by the duty of PCI or PCIE interface monitoring integrated circuit board and make corresponding adjustment, secondly if encrypted card is installed on the remote host, then the user needs initial landing to arrive remote host, PCI or PCIE interface by the remote host duty of obtaining encrypted card when using encrypted card, is safeguarded very inconvenient so then.

Summary of the invention

The utility model provides a kind of encrypted card with network interface for addressing the aforementioned drawbacks.

A kind of encrypted card with network interface comprises network interface, PCI or PCIE interface, native network data encrypting and deciphering module, Terminal Server Client data encrypting and deciphering module and remote monitoring and maintenance module.

A kind of optimal technical scheme of the present utility model is: described native network data encrypting and deciphering module is connected with a network interface, and is connected with local host by PCI or PCIE interface;

Described remote client end data encrypting and deciphering module is connected with a network interface;

Described remote monitoring and maintenance module are connected with a network interface.

Another optimal technical scheme of the present utility model is: described native network data encryption module, and according to configured in advance, use specific enciphering and deciphering algorithm to handle data, the data after will handling by PCI or PCIE bus send main frame to; To the data that main frame is given encrypted card by PCI or PCIE bus transfer, according to configured in advance, use specific enciphering and deciphering algorithm to handle, transmit data by network interface;

Described remote client end data encrypting and deciphering module according to configured in advance, uses specific enciphering and deciphering algorithm to handle data, passes remote client end back by network interface;

Described remote monitoring and maintenance module, can the receiving remote keeper monitor and maintenance command, according to order the integrated circuit board duty is monitored, the integrated circuit board running parameter is configured, the integrated circuit board fault is handled, can be passed the execution result of order back remote administrator by network interface simultaneously.

Description of drawings

Fig. 1 is the synoptic diagram that connects according to network interface on the encrypted card of the present utility model.

Fig. 2 is the synoptic diagram according to network service module on the encrypted card of the present utility model.

Specific embodiments

The utility model at first provides the network interface of a plurality of difference in functionalitys on encrypted card, be the synoptic diagram that connects according to network interface on the encrypted card of the present utility model as Fig. 1:

1) network interface 1 is used for this machine enciphered data, the Network Transmission of data decryption and identification authentication data;

2) network interface 2 is used for the Terminal Server Client enciphered data, data decryption and identification authentication data Network Transmission;

3) network interface 3 is used for the Network Transmission of remote monitoring and service data;

Secondly the utility model provides different network services at different network interfaces:

1. native network data encrypting and deciphering module (module 1)

As shown in Figure 2, to enter the data (remote data 1) of encrypted card by network interface 1, this module can use specific enciphering and deciphering algorithm to handle according to configured in advance, and the data transmission after will handling by PCI or PCIE is given main frame; Main frame is transferred to the data of encrypted card by PCI or PCIE, use specific enciphering and deciphering algorithm to handle according to prior configuration after, carry out data transmission by network interface 1.

2. remote client end data encrypting and deciphering module (module 2)

As shown in Figure 2, to enter the far-end client's of encrypted card data (remote data 2) by network interface 2, this module can use specific enciphering and deciphering algorithm to handle according to prior configuration, and Terminal Server Client is returned in the transmission after will handling by network interface 2.

3. remote monitoring and maintenance module (module 3)

As shown in Figure 2, by network interface 3, monitoring and maintenance command (remote data 3) that this module can the receiving remote keeper are monitored the duty of integrated circuit board according to order, and the running parameter of integrated circuit board is configured.Fault to integrated circuit board is handled, and can pass the execution result of order back remote administrator by network interface 3 simultaneously.

Claims

1. the encrypted card with network interface is characterized in that: comprise network interface, PCI or PCIE interface, native network data encrypting and deciphering module, Terminal Server Client data encrypting and deciphering module and remote monitoring and maintenance module.

2. a kind of according to claim 1 encrypted card with network interface is characterized in that:

Described native network data encrypting and deciphering module is connected with a network interface, and is connected with local host by PCI or PCIE interface;

3. a kind of according to claim 1 encrypted card with network interface is characterized in that:

Described native network data encryption module according to configured in advance, uses specific enciphering and deciphering algorithm to handle data, and the data after will handling by PCI or PCIE bus send main frame to; To the data that main frame is given encrypted card by PCI or PCIE bus transfer, according to configured in advance, use specific enciphering and deciphering algorithm to handle, transmit data by network interface;