CN211830822U

CN211830822U - Homemade safety local area network equipment

Info

Publication number: CN211830822U
Application number: CN202020572995.XU
Authority: CN
Inventors: 朱云; 李元骅; 乐宏彦; 李耀龙
Original assignee: Beijing Shudun Information Technology Co ltd
Current assignee: Beijing Shudun Information Technology Co ltd
Priority date: 2020-04-14
Filing date: 2020-04-14
Publication date: 2020-10-30
Anticipated expiration: 2030-04-14

Abstract

The utility model discloses a homemade safety local area network equipment relates to communication technology field. The localization safety local area network equipment comprises a localization encryption switch and a plurality of localization encryption network cards, wherein the localization encryption switch is electrically connected with the localization encryption network cards in a two-way mode, the localization encryption switch comprises a localization high-performance FPGA chip, a first encryption module and a support plate exchange chip, and the localization high-performance FPGA chip is electrically connected with the support plate exchange chip in the two-way mode. The homemade security local area network equipment can ensure the confidentiality and controllability of transmitted data, can prevent illegal access by utilizing a network card binding mode, and can destroy sensitive data through a self-destruction system to prevent data leakage when potential safety hazards appear.

Description

Homemade safety local area network equipment

Technical Field

The utility model relates to the field of communication technology, specifically be domestic safety local area network equipment.

Background

With the continuous development of network communication and information technology in China, network attack behaviors cannot enter the network without holes, the current network security situation is severe, if illegal personnel invade an internal network through the network attack technology, malicious attack is carried out in the internal network, information is stolen, and data tampering causes serious consequences and loss. Therefore, it is imperative to improve the security protection technology of the confidential internal network and strengthen the information protection.

SUMMERY OF THE UTILITY MODEL

The utility model provides a localization safety local area network equipment has someone to deliberately insert private internal network and falsify or maliciously attack the problem of network system in internal network, provides the local area network safety protection equipment based on localization safe and reliable.

In order to achieve the above purpose, the utility model discloses a following technical scheme realizes: the localization safety local area network device comprises a localization encryption switch and a plurality of localization encryption network cards, wherein the localization encryption switch is electrically connected with the localization encryption network cards in a two-way mode.

Furthermore, the localization encryption switch comprises a localization high-performance FPGA chip, a first encryption module and a support plate exchange chip, wherein the localization high-performance FPGA chip is electrically connected with the support plate exchange chip in a bidirectional mode.

Further, the localization high-performance FPGA chip contains a first FPGA encryption and decryption module, the first FPGA encryption and decryption module is connected with the first encryption module through an SPI interface in a bidirectional electric manner, the first encryption module is connected with a first safety chip through a USB in a bidirectional electric manner, and the first safety chip is connected with the localization high-performance FPGA chip in a bidirectional electric manner through the SPI.

Furthermore, a plurality of the localization encryption network cards are electrically connected with a PC host through PCIE interfaces in a bidirectional mode, the localization encryption network cards comprise second FPGA encryption and decryption modules, and the second FPGA encryption and decryption modules are electrically connected with a second safety chip in a bidirectional mode.

Furthermore, the second FPGA encryption and decryption module is electrically connected with the MAC chip in a bidirectional mode.

Furthermore, the second security chip is electrically connected with a second encryption module in a bidirectional manner.

The utility model provides a homemade safety local area network equipment. The method has the following beneficial effects:

the homemade security local area network equipment can ensure the confidentiality and controllability of transmitted data, can prevent illegal access by utilizing a network card binding mode, and can destroy sensitive data through a self-destruction system to prevent data leakage when potential safety hazards appear.

Drawings

Fig. 1 is a schematic structural diagram of the present invention.

In the figure: 1. a domestic encryption switch; 101. a localization high-performance FPGA chip; 102. the first FPGA encryption and decryption module; 103. a first security chip; 104. a first encryption module; 105. exchanging chips on the carrier plate; 2. a localization encryption network card; 201. the second FPGA encryption and decryption module; 202. a second security chip; 203. a second encryption module; 204. and a MAC chip.

Detailed Description

The technical solutions in the embodiments of the present invention will be described clearly and completely with reference to the accompanying drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only some embodiments of the present invention, not all embodiments.

Examples of which are illustrated in the accompanying drawings, wherein like reference numerals refer to the same or similar elements or elements having the same or similar function throughout. The embodiments described below with reference to the drawings are exemplary and intended to be used for explaining the present invention, and should not be construed as limiting the present invention.

Referring to fig. 1, the present invention provides a technical solution: the localization safety local area network device comprises a localization encryption switch 1 and a plurality of localization encryption network cards 2, wherein the localization encryption switch 1 is electrically connected with the localization encryption network cards 2 in a bidirectional mode.

The domestic encryption switch 1 comprises a domestic high-performance FPGA chip 101, a first encryption module 104 and a carrier board exchange chip 105, the domestic high-performance FPGA chip 101 is electrically connected with the carrier board exchange chip 105 in a bidirectional mode, 32 SM4 algorithm cores are provided inside the domestic high-performance FPGA chip 101 to provide high-performance network data stream encryption, the domestic high-performance FPGA chip 101 comprises a first FPGA encryption and decryption module 102, the first FPGA encryption and decryption module 102 is electrically connected with the first encryption module 104 in a bidirectional mode through an SPI interface to provide encryption protection and key management service for data streams at a network link layer, the first encryption module 104 is mainly selected from the main domestic electronic components and chips, the first encryption module 104 is electrically connected with a first security chip 103 in a bidirectional mode through a USB, the first security chip 103 is electrically connected with the domestic high-performance FPGA chip 101 in a bidirectional mode through an SPI interface, a plurality of domestic encryption network cards 2 are electrically connected with a PC host in a bidirectional mode through a PCIE interface, the network data stream entering and exiting the PC host is encrypted and protected on a link layer, the electronic components and chips of the plurality of homemade encryption network cards 2 are mainly selected from the homemade, the plurality of homemade encryption network cards 2 all comprise a second FPGA encryption and decryption module 201, the second FPGA encryption and decryption module 201 is electrically connected with a second security chip 202 in a bidirectional mode, the second FPGA encryption and decryption module 201 is electrically connected with an MAC chip 204 in a bidirectional mode, the second security chip 202 can provide the national passwords SM2 and SM3 algorithm and provide the secure storage of sensitive data, the second security chip 202 is electrically connected with a second encryption module 203 in a bidirectional mode, the second encryption module 203 is communicated with an external management program through a serial port, and the second encryption module 203 provides functions of key management, equipment self-destruction and the like.

When the encryption device is used, the first encryption module 104 is connected with a localization encryption switch 1 of a local area network system to encrypt and protect data streams entering and exiting the localization encryption switch 1 in a network, and the localization encryption network card 2 is connected with a PC host connected with a central switch and used as a network card of the PC host to encrypt and protect the data streams entering and exiting the PC host. In the safety protection equipment, the main components adopt home-made components and parts, a home-made high-performance FPGA chip 101 provides high-efficiency SM4 algorithm encryption, 32 algorithm cores are integrated and dispatched in parallel, the full-backplane bandwidth rate of an encryption switch is realized, the encryption and decryption rate can reach over 32G, and the safety and reliability first encryption module 104 and the second encryption module 203 are matched.

The above, only be the concrete implementation of the preferred embodiment of the present invention, but the protection scope of the present invention is not limited thereto, and any person skilled in the art is in the technical scope of the present invention, according to the technical solution of the present invention and the utility model, the concept of which is equivalent to replace or change, should be covered within the protection scope of the present invention.

Claims

1. The localized security local area network device comprises a localized encryption switch (1) and a plurality of localized encryption network cards (2), and is characterized in that: the domestic encryption switch (1) is electrically connected with the domestic encryption network cards (2) in a bidirectional mode.

2. The homemade secure local area network device of claim 1, wherein: the localization encryption switch (1) comprises a localization high-performance FPGA chip (101), a first encryption module (104) and a carrier board exchange chip (105), wherein the localization high-performance FPGA chip (101) is electrically connected with the carrier board exchange chip (105) in a two-way mode.

3. The homemade secure local area network device of claim 2, wherein: the localization high-performance FPGA chip (101) comprises a first FPGA encryption and decryption module (102), the first FPGA encryption and decryption module (102) is in bidirectional electric connection with a first encryption module (104) through an SPI interface, the first encryption module (104) is in bidirectional electric connection with a first safety chip (103) through a USB, and the first safety chip (103) is in bidirectional electric connection with the localization high-performance FPGA chip (101) through the SPI.

4. The homemade secure local area network device of claim 1, wherein: the home-made encryption network cards (2) are all electrically connected with a PC host through PCIE interfaces in a bidirectional mode, the home-made encryption network cards (2) comprise second FPGA encryption and decryption modules (201), and the second FPGA encryption and decryption modules (201) are electrically connected with second safety chips (202) in a bidirectional mode.

5. The homemade secure local area network device of claim 4, wherein: the second FPGA encryption and decryption module (201) is electrically connected with an MAC chip (204) in a bidirectional mode.

6. The homemade secure local area network device of claim 4, wherein: the second security chip (202) is electrically connected with a second encryption module (203) in a bidirectional mode.