CN203387539U

CN203387539U - Network-used commercial PC with security chip

Info

Publication number: CN203387539U
Application number: CN201320482960.7U
Authority: CN
Inventors: 刘毅; 张行健; 梅宏勇
Original assignee: SHANGHAI JETWAY SECURITY INTEGRATED CIRCUIT Co Ltd
Current assignee: SHANGHAI JETWAY SECURITY INTEGRATED CIRCUIT Co Ltd
Priority date: 2013-08-08
Filing date: 2013-08-08
Publication date: 2014-01-08
Anticipated expiration: 2023-08-08

Abstract

The utility model belongs to the field of computers and particularly relates to a network-used commercial PC with a security chip. The PC includes a south bridge, an Ethernet controller, an Ethernet connector and also includes a security module with an Ethernet interface and a switch at least including four interfaces. The first interface of the switch is an Ethernet interface connected with the Ethernet interface of the security module. The second interface of the switch is an Ethernet interface connected with the Ethernet controller. The third interface of the switch is an Ethernet interface connected with the Ethernet connector. The forth interface of the switch is a selecting control interface connected with the security module. The security module controls the third interface in whether to be connected with the first interface or the second interface trough the forth interface. The commercial PC is capable of controlling safe transmission of data and realizing sharing of resources such as information, calculation capability and an encryption engine stored in a TPM chip of the commercial PC and the like among a plurality of PCs through servers.

Description

The commercial PC with safety chip used in a kind of network

Technical field

The utility model belongs to computer realm, relates in particular to the commercial PC with safety chip, the commercial PC with safety chip particularly used in a kind of network.

Background technology

In computer system architecture commonly used, in PC, any data can be transmitted via ethernet controller, comprising the information that can openly transmit, also comprised in addition the private information that need to carry out some safe handlings, just there is certain potential safety hazard in this.The higher commercial PC for level of security, safety problem is particularly outstanding, loads fire compartment wall and antivirus software in most solution system, and such fail safe still needs to strengthen.Existing also have the commercial PC with safety chip, but the cost control when network application, and the aspects such as the interior resource-sharing of safety chip are optimized space in addition.

Summary of the invention

The purpose of this utility model is the problem existed for prior art, and the commercial PC with safety chip used in a kind of network is provided.

To achieve these goals, the technical solution of the utility model is:

The commercial PC of the band safety chip (TPM) used in a kind of network, comprise south bridge (South Bridge), ethernet controller (Ethernet Controller), ethernet connector (Ethernet Connector), also comprise a module of the TPM with Ethernet interface and a switch (Switch) that at least comprises four interfaces; Described switch first interface A is Ethernet interface, connected with the Ethernet interface of described TPM module; Described switch the second interface B is Ethernet interface, with described ethernet controller, is connected; Described switch the 3rd interface C is Ethernet interface, with described ethernet connector, is connected; Described switch the 4th interface D is connected with the TPM module, and for selecting control interface, the TPM module is controlled the 3rd interface C with first interface A or the second interface B gating by the 4th interface.

Below the further technical scheme of the utility model:

Preferably, the described module of the TPM with Ethernet interface is connected with south bridge by the LPC interface.

Preferably, the described module of the TPM with Ethernet interface is the TPM integrated circuit (IC) chip with Ethernet interface.

Preferably, the described module of the TPM with Ethernet interface is a TPM integrated circuit (IC) chip and an ethernet physical layer functional module.

Preferably, described ethernet physical layer functional module is connected by the MII bus with described TPM integrated circuit (IC) chip.

The beneficial effects of the utility model mainly contain:

The utility model comprises the Switch with the TPM module of Ethernet interface and band selection control interface D, the TPM module can by controlling, switch the 4th interface D option interface A and C be communicated with or interface B and C connection, thereby control the safe transmission of data, for responsive data, need to, through the filtration of TPM module, for common data, can directly by Ethernet Controller, through switch, transmit.In addition for commercial PC, from saving resource, the angle of controlling cost, for in network with the computer of the commercial PC of the utility model, server can be controlled business PC by the management of network remote safety, comprise the commercial PC of Remote configuration the utility model scheme and on network the mutual private information of safety, can realize between multiple pc sharing in the commercial PC of the utility model the resources such as canned data, computing capability and crypto engine in the TPM chip by server in addition.

The accompanying drawing explanation

Fig. 1 is the commercial PC block diagram with the TPM chip used in a kind of network that the utility model is corresponding;

Fig. 2 is the commercial PC block diagram with the TPM chip used in another network that the utility model is corresponding;

Fig. 3 is that the commercial PC that the utility model is corresponding is used schematic diagram in network.

Embodiment

It is as follows that the utility model is described in further detail in conjunction with the accompanying drawings and embodiments:

Embodiment 1:

As shown in Figure 1, the commercial PC with the TPM chip used in a kind of network, comprise South Bridge, Ethernet Controller, Ethernet Connector, also comprise a module of the TPM with Ethernet interface and a Switch who at least comprises four interfaces; Switch first interface A is Ethernet interface, connected with the Ethernet interface of TPM module; Switch the second interface B is Ethernet interface, with Ethernet Controller, is connected; Switch the 3rd interface C is Ethernet interface, with Ethernet Connector, is connected; Switch the 4th interface D is connected with the TPM module, and for selecting control interface, the TPM module is controlled the 3rd interface C with first interface A or the second interface B gating by the 4th interface.TPM module with Ethernet interface in the present embodiment is an integrated circuit (IC) chip of the TPM with Ethernet interface.The described module of the TPM with Ethernet interface is connected with south bridge by the LPC interface.

Embodiment 2:

Different from above-described embodiment 1 is with the TPM module of Ethernet interface is a TPM integrated circuit (IC) chip and an ethernet physical layer functional module, and the ethernet physical layer functional module is connected by the MII bus with described TPM integrated circuit (IC) chip.

Embodiment 3:

Different from above-described embodiment, as shown in Figure 3, commercial PC1 is the commercial PC shown in the utility model embodiment 1, and commercial PC2 is the commercial PC shown in the utility model embodiment 2, and commercial PC3 is general commercial PC, is not with the TPM module.Passage between Switch acquiescence gating interface A and C when PC1 and PC2 start, all data all will transmission after the TPM module is filtered.Server, finding to configure respectively as required PC1 and PC2 after PC1 and PC2 are connected into network respectively, can be switched to the network service passage of PC1 or PC2 between B and C according to the data security grade on Switch, specifically how to configure and depends on concrete application.For PC3, because its inside does not have the TPM module, if its user has the demand based on the TPM chip application, the for example realization of certain concrete crypto engine algorithm, can be via after server, by PC1 or PC2, completing this part function, share thus in the commercial PC of the utility model the resources such as canned data, computing capability and crypto engine in the TPM chip, thus can be from saving resource, control the cost of whole network.

Claims

1. the commercial PC with safety chip used in a network, comprise south bridge, ethernet controller, ethernet connector, it is characterized in that, also comprises a security module with Ethernet interface and a switch that at least comprises four interfaces; Described switch first interface (A) is Ethernet interface, connected with the Ethernet interface of described security module; Described switch the second interface (B) is Ethernet interface, with described ethernet controller, is connected; Described switch the 3rd interface (C) is Ethernet interface, with described ethernet connector, is connected; Described switch the 4th interface (D) is connected with security module, and for selecting control interface, security module is controlled the 3rd interface with first interface or the second interface gating by the 4th interface.

2. the commercial PC with safety chip used in network as claimed in claim 1, is characterized in that, the described security module with Ethernet interface is connected with south bridge by the LPC interface.

3. the commercial PC with safety chip used in network as claimed in claim 2, is characterized in that, the described security module with Ethernet interface is the safety integrated circuit chip with Ethernet interface.

4. the commercial PC with safety chip used in network as claimed in claim 2, is characterized in that, the described security module with Ethernet interface is a safety integrated circuit chip and an ethernet physical layer functional module.

5. the commercial PC with safety chip used in network as claimed in claim 4, is characterized in that, described ethernet physical layer functional module is connected by the MII bus with described safety integrated circuit chip.