CN213782393U - Terminal single-path intelligent port lock - Google Patents

Abstract

The utility model discloses a terminal single-path intelligent port lock, which belongs to the technical field of confidential network security science of party administration, and comprises a hardware structure and a control system, wherein a plug part with hardware protection is inserted at the end of a confidential computer port and cannot be manually pulled out, the control system can provide bidirectional communication between an internal network and an external network to verify whether a network to which a network wire inserted into a female jack of a network port belongs is a confidential network, and a non-confidential network does not connect a circuit between a male plug of the network port and the female jack of the network port; the problem of safe access of secret-related application terminal equipment and a machine room secret-related network is solved, and illegal external connection alarming caused by wrong network cable insertion of a user is prevented. And the visual management of the network ports of the computer and various information equipment can be realized by combining the information management system. The product is convenient to use and can be used in a plug-and-play mode, a user does not need to have professional knowledge of a computer, illegal external connection is prevented better, hidden danger of secret leakage is avoided, and the situations of hacker invasion, virus attack or unauthorized networking use equipment and the like are prevented.

Description

Terminal single-path intelligent port lock

Technical Field

The utility model relates to a security secret equipment technical field to secret-related network uses specifically is a terminal single-channel intelligent network port lock.

Background

In the current information-oriented era, information-oriented equipment is connected through a network, but with the rapid development of information networks in China, the safety situation at home and abroad is increasingly severe. Party, government, enterprise and police units' computers and some important data are gradually moved to a confidential network for strict control, and the confidential network only allows physical connection and implements the principle of who uses and is responsible. However, even if many security precautionary measures are taken, illegal external connection accidents involving confidential computers and equipment cannot be avoided, although each system has strict regulations and strict examination on the access of internal and external networks, some units and employees can have illegal external connection events and security illegal events, so that the assessment deduction of the unit year after year is caused, and the unit year end assessment and the prior assessment are influenced. More serious, illegal external connection may cause that the secret-related network is attacked by hackers and viruses to cause paralysis of each application system in the secret-related network and leakage of sensitive information of enterprises. One of the reasons for the above problems is that because network plug and network plug are standardized general devices, just like a door without lock, it is difficult to carry out effective management and control, and anyone can pull out at will and insert, and network plug is the general piece moreover, and appearance is the same, can't distinguish which root is secret-related net twine, which root is public net twine. Two secret-related intranets are transversely constructed and developed, a plurality of organization units gradually form the situation that one secret-related terminal and one non-secret-related terminal are manually operated, the shortage of office environments in various regions causes that secret-related equipment and non-secret-related equipment cannot keep an effective spacing distance, equipment users or maintenance personnel can easily insert wrong network cables or network ports, equipment illegal external connection alarming is immediately triggered to cause secret leakage risks, three-level monitoring reporting is triggered, even more serious situations are that the intranet and the extranet are directly connected in a wrong way, serious network safety accidents of grid connection are caused, and the situation of which responsibility is responsible is hard to be known afterwards.

It is obvious that in the work under the environment of secret-related field at present, the general problem puzzles that secret-related network cables, the net gape of secret-related computers can be pulled out and plugged at will, net gape of net gape are inserted by mistake.

SUMMERY OF THE UTILITY MODEL

For solving not enough and the defect that above-mentioned prior art exists, to a great deal of problem on above-mentioned technique, management, the application, the utility model provides a network port safety electronic lock solves the security access problem of secret-involved application terminal equipment and computer lab secret-involved network, prevents that the user from inserting wrong net twine and taking place the alarm of joining in marriage to the rule outside. And the visual management of the network ports of the computer and various information equipment can be realized by combining the information management system. The product is convenient to use and can be used in a plug-and-play mode, a user does not need to have professional knowledge of a computer, illegal external connection is prevented better, hidden danger of secret leakage is avoided, and the situations of hacker invasion, virus attack or unauthorized networking use equipment and the like are prevented.

The utility model provides a terminal single-pass intelligent network port lock, includes net gape male plug, net gape female jack and net gape lock control box body, and net gape female jack is integrated to be installed at net gape lock control box body rear end, and net gape male plug is connected to net gape lock control box body front end, wherein: the network port lock control box body comprises a built-in power supply and a controller, and a network port male plug is connected with a network port female jack through the controller; the controller can identify whether a network where a network cable connected to the female jack of the network port is located is a secret-involved network or a non-secret-involved network, and can send a control signal for keeping disconnection or connection to the controller; the controller can control the physical on-off state of the circuit between the network port male plug and the network port female jack through the relay.

Furthermore, an elastic switch is arranged in the net port female jack and is a press switch with elasticity, the press switch is connected to the controller, and the press switch can be started after the net port is inserted to switch on a circuit of the built-in power supply and the controller; the circuit of the built-in power supply and the controller can be disconnected by pressing the switch to automatically reset at the network port pull-out port.

The net mouth male plug further comprises a shell covering the locking spring piece, and a stepping motor arranged in the shell and positioned on the side face of the net mouth male plug, wherein a wire rope with one end fixed on one side of the net mouth male plug and the other end connected with the winding end of the stepping motor is inserted into the locking spring piece positioned at the top of the net mouth male plug, and the stepping motor can drive the winding end to rotate forwards or backwards so as to realize the winding and the release of the wire rope; the stepping motor is connected to the controller and the built-in power supply through a lead.

Furthermore, a radio frequency identification module is also included in the lock control box body, and the radio frequency identification module is connected with the controller.

Specifically, the utility model discloses a principle that technical scheme adopted: the utility model discloses a product a terminal single-pass intelligent network mouth lock, including net gape male plug, net gape female jack and net gape lock control box body, install components and parts such as built-in power, controller, relay in the net gape lock control box body, constitute a microprogram circuit system, net gape male plug is used for inserting on the PC net gape, whole product uses as an external configuration, under the normality, built-in microprogram circuit is in the off state, and keeps being disconnected non-interconnecting link state between net gape male plug and the net gape female jack; when the PC is required to be plugged with a network cable for use, the network cable can only be plugged into the female jack of the network port, the first RJ45 terminal of the network cable is plugged into the female jack of the network port, the elastic switch of the microprogrammed circuit is touched and turned on, and the program is started, namely, the controller verifies the network where the plugged network cable is located, judges whether the current network is an extranet or not, and can pass the verification only if the current network is judged to be not the extranet. On the other hand, a protective shell is arranged on the net mouth male plug, the shell wraps a locking spring piece at the end of RJ45, once the net mouth male plug is plugged into a confidential computer, the intelligent net mouth lock cannot be pulled out of the confidential computer in a manual mode, the randomness and the feasibility of manually replacing the net line plug are prevented, when the net mouth male plug needs to be pulled out, the authority verification needs to be carried out on the identity of an operator, namely, a radio frequency identification module arranged in the intelligent net mouth lock can identify the authority of the current operator, only an operator who accords with the preset authority management can complete the identity authority verification through a radio frequency card, a stepping motor in the protective shell rotates forwards, the locking spring piece at the end of RJ45 is pulled to be pressed downwards, the locking state between an RJ45 terminal and the net mouth is released, and the operator can manually pull out the intelligent net mouth lock. On the other hand, the management authority can be two, one is a common authority, and can be used for controlling unlocking of the network port male plug; one is administrator authority, and data exchange and other operations are realized through radio frequency information.

The utility model has the advantages that:

(1) this intelligent network port lock is through the shell design and the miniature step motor's of RJ45 terminal combination, realize forming the lock body structure to the RJ45 terminal, in case insert the net gape, unable manual unblock is extracted, need carry out identity authority authentication to operating personnel, operating personnel who has the authority can drive the locking spring piece through built-in miniature step motor and push down, unblock RJ45 terminal, just can extract, the effectual condition of extracting the secret-involved net twine of other personnel maloperation that has prevented is at will, prevent other people from receiving privately, the function of private network twine.

(2) Through the built-in verification program of the intelligent port lock, whether the intelligent port lock is a secret-related network or a public network outer network can be verified while the network cable is inserted, the situation that the outer network cable is wrongly inserted into a secret-related computer and then wrongly inserted is discovered is prevented, and consequences and risks caused by mistakenly inserted secret-related calculation are effectively avoided.

Drawings

FIG. 1 is a perspective view of a product of a single-way intelligent port lock of a terminal;

FIG. 2 is a schematic diagram of a network port male plug structure of a single-channel intelligent network port lock of a terminal;

FIG. 3 is a schematic diagram showing the principle of the internal structure of a single-way intelligent network lock, in which a public plug of the network port is inserted into a confidential computer port and locked by a locking spring plate;

FIG. 4 is a diagram illustrating a state where a public plug of a single-channel intelligent network lock of a terminal is inserted into a confidential computer network;

FIG. 5 is a schematic view of the housing covering the lock spring plate;

FIG. 6 is a schematic diagram of a female jack of a single-way intelligent port lock of a terminal;

FIG. 7 is a diagram illustrating the effect of the usage status of a single-way intelligent port lock of a terminal;

FIG. 8 is a schematic view of the stepping motor being actuated to unlock the lock spring plate;

wherein: the computer network port locking device comprises a 1-network port male plug, a 2-network port female jack, a 3-network port lock control box body, a 31-elastic switch, a 32-locking spring piece, a 33-shell, a 34-stepping motor, a 35-wire rope, a 36-radio frequency identification module, a 4-RJ 45 terminal and a 5-secret-related computer port.

Detailed Description

In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention will be described in detail with reference to the accompanying drawings. It should be understood that the description is intended to be illustrative only and is not intended to limit the scope of the present invention. Moreover, in the following description, descriptions of well-known structures and techniques are omitted so as to not unnecessarily obscure the concepts of the present invention.

It should be stated that, the controller be the treater component that has programming, processing and control function that can purchase on the existing market, and the procedure of its operation be the technical staff can be according to the utility model discloses a function and demand are compiled and are realized, do not the utility model discloses the content of protection, the utility model discloses what protect is the whole of this product and the relation of connection and the structural configuration characteristics of inside device.

Example 1: introduction to structure and function of product embodiments

The utility model provides a terminal single-pass intelligent network port lock, includes net gape male plug 1, net gape female jack 2 and net gape lock control box body 3, and net gape female jack 2 is integrated to be installed in 3 rear ends of net gape lock control box body, and net gape male plug 1 is connected to 3 front ends of net gape lock control box body, wherein: the net mouth lock control box body 3 comprises a built-in power supply and a controller, and the net mouth male plug 1 is connected with the net mouth female jack 2 through the controller; the built-in power supply supplies power for functional parts such as the whole controller, the relay and the like, the net mouth male plug 1 is used for being inserted into a net mouth of a confidential computer, and the net mouth female jack 2 is used for being externally connected with a network cable terminal. The controller can identify whether the network where the network cable connected to the network port female jack 2 is located is a secret-involved network or a non-secret-involved network, and can send a control signal for keeping disconnection or connection to the controller; the controller can control the on-off state of the circuit between the net mouth male plug 1 and the net mouth female jack 2. After the network condition of the accessed network cable is verified through the controller, if the network risk of accessing an external network does not exist and the network condition belongs to a verified secret-related internal network, the controller controls a built-in relay to switch on the circuits of the network port male plug 1 and the network port female jack 2, and the secret-related computer is accessed to the secret-related network cable; when the network to which the network cable belongs is detected to be in an external network environment, the disconnection state between the network port male plug 1 and the network port female jack 2 is kept, and the confidential computer and the network cable cannot be connected, so that the protection purpose is achieved.

Preferably, an elastic switch 31 is arranged in the net mouth female jack 2, the elastic switch 31 is connected to the controller, and the elastic switch 31 can be used for switching on a circuit of the built-in power supply, the controller and the controller after the net mouth is plugged; the built-in power supply, the controller and the circuit of the controller can be disconnected at the network port plug-in port. When the RJ45 terminal 4 is inserted into the female jack 2 of the network port, the top of the end of the RJ45 terminal 4 touches and presses the elastic switch 31, the circuit of the power supply is switched on, the controller is started, the network is identified and verified, and meanwhile, the power consumption of other components is also provided. When the RJ45 terminal 4 is pulled out from the female jack 2 of the network port, the elastic switch 31 is released, the power circuit is disconnected, the controller and other electrical components are powered off, and the RJ45 terminal is in a standby state, so that the energy consumption of the built-in power supply is saved.

The net mouth male plug 1 further comprises a shell 33 covering the locking spring piece 32, and a stepping motor 34 arranged inside the shell 33 and positioned on the side face of the net mouth male plug 1, wherein the locking spring piece 32 positioned at the top of the net mouth male plug 1 is inserted and installed with a rope 35, one end of the rope 35 is fixed on one side of the net mouth male plug 1, the other end of the rope 35 is connected with the winding end of the stepping motor 34, and the stepping motor 34 can drive the winding end to rotate forwards or backwards so as to realize the drawing and releasing of the rope 35; the stepper motor 34 is connected to a controller. The shell 33 wraps the locking spring piece 32 to form a protective structure outwards, namely, the net mouth male plug 1 cannot be manually detached and pulled out from a confidential computer, only after system authentication and permission meeting, the stepping motor 34 can be controlled to rotate forwards under the action of the controller, the locking spring piece 32 at the end of the RJ45 is pulled to press downwards through tightening of the cord 35, the locking state between the RJ45 terminal 4 and the net mouth is released, and an operating user can manually pull out the net mouth male plug 1 of the intelligent net mouth lock from the confidential computer.

Preferably, the lock control box further comprises a radio frequency identification module 36, and the radio frequency identification module 36 is connected with the controller. The rfid module 36 is disposed in the bottom of the top surface of the internet access lock control box 3, and has the functions of sensing the rf card and reading and exchanging data, and the controller can verify and process the read data information and send out corresponding control commands or data information.

Preferably, the controller is used for reading information of the radio frequency card, the controller verifies the authority and the type of the radio frequency card, whether the radio frequency card is authorized or not is identified, and a command for controlling the network port male plug 1 to be pulled out can be sent to the controller according to the fact that the authorization authority is a common authority; and sending a rejection prompt for the terminal without permission.

Furthermore, the utility model discloses still including setting up the intelligent network port lock service management platform who builds in secret intranet in advance, also build an outer net service management platform on the outer net, be used for storing program, data information, the intelligent network port lock product information that is used for the network verification respectively for compare, verify and feedback information function with the verification information that the controller sent.

Example 2: practical operation demonstration case

The method comprises the following steps that firstly, a service management end is preset and installed in a secret-related network, and the service management end comprises an intranet authentication server stored with authentication information; a public network authentication server is preset in an external network, and the public network authentication server comprises authentication information stored in the public network authentication server; the verification servers have the functions of data information storage and verification operation and can make verification feedback;

secondly, a network port of a network cable is accessed into the network port female jack, and a verification program is started after the network port is accessed in place;

thirdly, the verification program carries out home network verification on the network cable inserted into the female jack of the network port, and sends verification access information to a preset intranet verification server through the network cable and also sends verification access information to a public network verification server;

fourthly, after receiving the verification access information, the internal network verification server and the public network verification server can respectively feed back verification information to the verification program; thirdly, if the specified preset program is operated, the verification server sends a feedback instruction to the verification program;

after receiving the feedback instruction, the verification program can determine whether the network to which the network belongs is a secret-related intranet or a public network extranet or whether the network can be accessed to the extranet, that is, the verification program receives the feedback verification information and judges the network type to which the network cable belongs based on the verification information;

sixthly, when the network type of the network cable is a non-public network and the network cable is verified to be a secret-related internal network, controlling a relay to be connected with a circuit between the network port female jack and the network port male plug; as long as the feedback verification information contains information from the public network, the circuit between the female jack of the network port and the common plug of the network port is not switched on, and misconnection information is recorded. The router is prevented from being inserted wrongly, and the condition of accessing the internal network and the external network can be simultaneously realized.

The network type of the network cable is a non-public network (secret-related network), and the verification access information sent by the verification server is correct, but the feedback verification information does not contain the verification access information from the public network, and the relay is controlled to be connected with a line between the female jack of the network port and the common plug of the network port.

On the other hand, the utility model discloses a net gape male plug is used for inserting the computer network mouth, and the locking spring piece of net gape male plug is protected by the shell shade, and is passed by a cotton rope, and one end of cotton rope is connected to step motor's wire winding end, and step motor and cotton rope are in the lax state under the normality, and net gape male plug is once inserted and is blocked; when the network port male plug needs to be pulled out, the radio frequency identification module connected with the verification program needs to read and send the radio frequency card information to the verification program, and the right and the type of the radio frequency card are verified by the verification program, and the method comprises the following steps:

if the plug is in a common authority, the controller can be sent to control the stepping motor to rotate forward, the cord is recycled, the locking spring piece is pressed down, the net mouth male plug is in a state of being capable of being pulled out, the stepping motor is reset to rotate reversely after a certain time, the cord is released, the locking spring piece is reset, and the net mouth male plug is in a state of not being pulled out;

if the user does not have the authority, a rejection prompt is sent.

It is to be understood that the above-described embodiments of the present invention are merely illustrative of or explaining the principles of the invention and are not to be construed as limiting the invention. Therefore, any modification, equivalent replacement, improvement and the like made without departing from the spirit and scope of the present invention should be included in the protection scope of the present invention. Further, it is intended that the appended claims cover all such variations and modifications as fall within the scope and boundaries of the appended claims or the equivalents of such scope and boundaries.

Claims (5)

1. The utility model provides a terminal single pass intelligent network port lock, its characterized in that, includes net gape public plug (1), net gape female jack (2) and net gape lock control box body (3), and net gape female jack (2) integrated the installing in net gape lock control box body (3) rear end, and net gape public plug (1) is connected to net gape lock control box body (3) front end, wherein:

the net mouth lock control box body (3) comprises a built-in power supply and a controller, and the net mouth male plug (1) is connected with the net mouth female jack (2) through the controller;

the controller can identify whether a network where a network cable connected to the network port female jack (2) is located is a secret-involved network or a non-secret-involved network through the embedded intelligent chip, and can send a control signal for keeping disconnection or connection to the controller;

the controller can control the physical on-off state of a line between the net mouth male plug (1) and the net mouth female jack (2) through the relay.

2. A terminal single-channel intelligent port lock according to claim 1, wherein the network port female jack (2) is internally provided with an elastic switch (31), the elastic switch (31) is a press switch with elasticity, the press switch is connected to the controller, and the press switch can be started after the network port is inserted to switch on a circuit with a built-in power supply and the controller; the circuit of the built-in power supply and the controller can be disconnected by pressing the switch to automatically reset at the network port pull-out port.

3. A single-way intelligent port lock with terminal as claimed in claim 1, wherein the male plug (1) further comprises a housing (33) for covering the lock spring piece (32), a stepping motor (34) installed inside the housing (33) and located at the side of the male plug (1) with port, a thread rope (35) with one end fixed at one side of the male plug (1) with port and the other end connected with the winding end of the stepping motor (34) is inserted into the lock spring piece (32) at the top of the male plug (1) with port, and the stepping motor (34) can drive the winding end to rotate forward or backward to realize the retraction and release of the thread rope (35); the stepping motor (34) is connected to the controller and the built-in power supply through a lead.

4. A terminal single-way intelligent port lock according to claim 3, wherein a radio frequency identification module (36) is further included in the lock control box, and the radio frequency identification module (36) is connected with the controller.

5. A terminal single-way intelligent port lock according to claim 1, wherein the specifications of the network port male plug (1) and the network port female jack (2) are matched with the RJ45 terminal (4).

Images