CN214480691U - Machine room multi-path intelligent port lock with two-layer switching - Google Patents

Abstract

The utility model discloses a computer lab multichannel intelligent port lock of two layers of exchanges in area, including a two layers of switches, built-in net gape lock control module that has on the circuit board of two layers of switches to be connected through the installation relay between every net gape terminal and the two layers of switching modules of switch, net gape lock control module can pass through the physics break-make state of relay control net gape terminal and two layers of switching modules between the circuit. The built-in verification program for the multi-path intelligent network port lock of the machine room with the two-layer exchange is used for verifying whether the network port terminal and the network port terminal of the exchanger are inserted into the network cable or not and whether the network cable is a secret-involved network or a public network external network or not, the situation that the external network cable is inserted in a wrong way into a secret-involved computer and then is inserted in a wrong way is prevented, and consequences and risks caused by secret-involved calculation are effectively avoided.

Description

Machine room multi-path intelligent port lock with two-layer switching

Technical Field

The utility model relates to a security secret equipment technical field to secret network uses specifically is a computer lab multichannel intelligent port lock of taking two layers of exchanges.

Background

In the current information-oriented era, information-oriented equipment is connected through a network, but with the rapid development of information networks in China, the safety situation at home and abroad is increasingly severe. Party, government, enterprise and police units' computers and some important data are gradually moved to a confidential network for strict control, and the confidential network only allows physical connection and implements the principle of who uses and is responsible. However, even if many security precautionary measures are taken, illegal external connection accidents involving confidential computers and equipment cannot be avoided, although each system has strict regulations and strict examination on the access of internal and external networks, some units and employees can have illegal external connection events and security illegal events, so that the assessment deduction of the unit year after year is caused, and the unit year end assessment and the prior assessment are influenced. More serious, illegal external connection may cause that the secret-related network is attacked by hackers and viruses to cause paralysis of each application system in the secret-related network and leakage of sensitive information of enterprises. One of the reasons for the above problems is that because network plug and network plug are standardized general devices, just like a door without lock, it is difficult to carry out effective management and control, and anyone can pull out at will and insert, and network plug is the general piece moreover, and appearance is the same, can't distinguish which root is secret-related net twine, which root is public net twine. Two secret-related intranets are transversely constructed and developed, a plurality of organization units gradually form the situation that one secret-related terminal and one non-secret-related terminal are manually operated, the shortage of office environments in various regions causes that secret-related equipment and non-secret-related equipment cannot keep an effective spacing distance, equipment users or maintenance personnel can easily insert wrong network cables or network ports, equipment illegal external connection alarming is immediately triggered to cause secret leakage risks, three-level monitoring reporting is triggered, even more serious situations are that the intranet and the extranet are directly connected in a wrong way, serious network safety accidents of grid connection are caused, and the situation of which responsibility is responsible is hard to be known afterwards.

A two-layer switch operates at layer 2 (data link layer) of the OSI model and is therefore referred to as a two-layer switch. The development of the two-layer switching technology is mature, and the two-layer switch belongs to data link layer equipment, can identify the MAC address information in the data frame, forwards the MAC address information according to the MAC address, and records the MAC address and the corresponding port in an internal address table. At present, in the work under the environment of the confidential field, the problems that the network cable of the confidential network and the network port of the two-layer switch in the confidential machine room can be randomly plugged and the network cable network port is mistakenly plugged are commonly existed, and the network switching equipment which can safely manage the confidential machine room is lacked at present.

SUMMERY OF THE UTILITY MODEL

For solving not enough and the defect that above-mentioned prior art exists, to a great deal of problem on above-mentioned technique, management, the application, the utility model provides a computer lab multichannel intelligent port lock of taking two-layer exchange solves secret computer lab, secret involved network's safe access problem, prevents that the user from inserting wrong net twine, or mistake and pulls out the net twine and take place the alarm of the antithetical couplet of violation. And the visual management of the network ports of the computer and various information equipment can be realized by combining the information management system. The product is convenient to use, does not need a user to have computer professional knowledge, and can better prevent illegal external connection, avoid hidden danger of secret leakage, prevent hacker intrusion, virus attack or unauthorized networking equipment use and the like.

Specifically, the utility model discloses a realize like this:

a multi-channel intelligent network port lock with two-layer switch for machine room is composed of a two-layer switch, and a control module of network port lock, which is arranged in the circuit board of said two-layer switch and connected between each network port terminal of switch and two-layer switch via relay.

Furthermore, the network port lock control module can identify whether a network where a network cable connected to the network port terminal or/and the network port terminal is located is a secret-related network or a non-secret-related network through the embedded intelligent chip, and can send a control signal for keeping disconnection or connection to the relay.

Furthermore, a locking ring structure is arranged in the area above the net port terminals in the two-layer switch, the locking ring structure comprises a rotatable locking ring arranged above or below each net port terminal, the rotatable locking ring can rotate in or out of the net port terminals, and the rotated rotatable locking ring is positioned below the locking spring pieces of the net cable plugs inserted into the net port terminals and can limit the downward movement displacement of the locking spring pieces.

Furthermore, the area above the net port terminal inside the two-layer switch is provided with a corresponding slot for accommodating the rotation of the rotatable locking ring, the outer side surface of the rotatable locking ring is of a toothed structure, the top area of each rotatable locking ring is matched and connected with the same telescopic rack, the tail end of each telescopic rack is connected with a lock body motor arranged inside the two-layer switch, the lock body motor is connected to the net port lock control module, and each rotatable locking ring can be driven by the telescopic rack through extending or retracting displacement to rotate in or out of the slot of the telescopic rack relative to the net port terminal.

Furthermore, the tooth-shaped structure is replaced by an extension rod and a rotating gear, the rotating gear is installed at the tail end of the extension rod, the front end of the extension rod is connected to the ring center of the rotatable locking ring, and the rotating gear is matched with the telescopic rack.

Furthermore, two groups of rotatable locking rings and telescopic racks are arranged corresponding to the upper and lower layers of net mouth terminals, one of the upper and lower layers of telescopic racks is directly matched and connected with a gear of a lock body motor, the lock body motor is simultaneously matched and connected with a driven gear, and the driven gear is matched and connected with the other telescopic rack through an auxiliary gear, so that synchronous transmission is realized.

Further, a radio frequency identification module (13) is further installed in the top of the two-layer switch, and the radio frequency identification module is connected with the network port lock control module.

The technical scheme of the utility model adopted principle: the utility model discloses a product is a computer lab multichannel intelligent network mouth lock of taking two layers of exchanges, including a two layers of exchanges, built-in net gape lock control module that has on the circuit board of two layers of exchanges to be connected through the installation relay between every net gape terminal of switch and two layers of exchange modules, net gape lock control module can pass through the physics break-make state of relay control net gape terminal and two layers of exchange module between the circuit. The basic function is the two-layer exchanger equipment for machine room, the improvement is the on-off control between the two-layer exchange module and the net mouth output and input terminals, and the design of the net mouth lock control module, when one net line is connected to the net mouth terminal, the program on the net mouth lock control module accesses and verifies whether the net line belongs to the net is a secret-related net or a public net, once the net line is confirmed to be a public net line, the net mouth terminal is not actually connected, only if the net line is confirmed to be a secret-related net or an internal net, the net mouth lock control module enables the net mouth terminal to be actually connected, and the exchange function and the network connection function are realized. Meanwhile, the net mouth terminal on the switch body is also designed with a lock body, when a net wire is inserted into the net mouth terminal, the normal network is ensured, the rotatable locking ring can rotate in the net mouth terminal, the part extending out after the rotation of the rotatable locking ring is positioned below the locking spring piece of the net wire plug inserted into the net mouth terminal, and the downward displacement of the locking spring piece can be limited, namely, at the moment, a general person cannot pull down the net wire inserted into the switch of the machine room multi-path intelligent net mouth lock with the two-layer exchange or randomly replace the net wire to insert, on one hand, the rotatable locking ring can limit the locking spring piece of the inserted net wire not to be pressed down and pulled out, and on the other hand, the other net wire can be prevented from being inserted into the switch to be connected into the inner net, and the net mouth terminal is also provided with a rotatable structure, but the rotatable locking ring of the input end and the output end can be independently controlled. To release the locking state between the RJ45 terminal and the network port, an operating user needs to have two kinds of management authorities, one of which is a common authority and can be used for controlling the unlocking of the network port terminal; one is administrator authority, and realizes data exchange, network port terminal unlocking and other operations through radio frequency information.

The utility model has the advantages that:

(1) this computer lab multichannel intelligent port lock with two layers of exchanges passes through the design to the rotatable catch of RJ45 terminal, realize forming the lock body structure to the RJ45 terminal with reasonable structure, in case insert the net gape of switch, under the state of locking is assigned to net gape lock control module, rotatable catch is gone into, pin RJ45 terminal, unable manual unblock is extracted, need carry out identity authority authentication to operating personnel, operating personnel who has the authority just can drive rotatable catch through the removal of flexible rack through built-in lock body motor control and rotate out, unblock RJ45 terminal, just can extract, the effectual condition of extracting at will the secret involved net twine of other personnel's maloperation with concerning secret calculation that has prevented, prevent other people and accept privately, the function of private net twine.

(2) The built-in verification program for the multi-path intelligent network port lock of the machine room with the two-layer exchange is used for verifying whether the network port terminal and the network port terminal of the exchanger are inserted into the network cable or not and whether the network cable is a secret-involved network or a public network external network or not, the situation that the external network cable is inserted in a wrong way into a secret-involved computer and then is inserted in a wrong way is prevented, and consequences and risks caused by secret-involved calculation are effectively avoided.

Drawings

FIG. 1 is a schematic diagram of an internal structure of a multi-path intelligent network port lock of a machine room with two-layer switching;

FIG. 2 is a perspective view of a multi-path intelligent portal lock of a machine room with two-layer switching;

FIG. 3 is a schematic diagram of a rotationally lockable RJ45 terminal;

fig. 4 is a schematic structural diagram of a double-layer network port terminal synchronous lock in embodiment 2;

fig. 5 is a schematic structural diagram of a double-layer network port terminal synchronization lock in embodiment 2;

wherein: the intelligent network gateway comprises a two-layer switch 1, a two-layer switch 2, a power supply module 3, a network port terminal 4, a network port lock control module 5, a rotatable lock ring 6, a lock leaf 7, a network cable plug 8, a slot 9, a lock body motor 10, an extension rod 101, a rotating gear 102, a driven gear 103, an auxiliary gear 104, a telescopic rack 11, an intelligent chip 12, a radio frequency identification module 13 and a relay 15.

Detailed Description

In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention will be described in detail with reference to the accompanying drawings. It should be understood that the description is intended to be illustrative only and is not intended to limit the scope of the present invention. Moreover, in the following description, descriptions of well-known structures and techniques are omitted so as to not unnecessarily obscure the concepts of the present invention.

It is required to state, net gape lock control module, intelligent chip be the processor element that has programming, processing and control function that can purchase on the existing market, and the procedure of its operation be that the technical staff can be according to the utility model discloses a function and demand are compiled the realization, not the utility model discloses the content of protection, the utility model discloses what protect is the whole of this product and the relation of connection and the structural configuration characteristics of inside device.

Example 1: introduction to structure and function of product embodiments

A machine room multi-path intelligent port lock with two-layer switching comprises a two-layer switch 1, wherein a circuit board of the two-layer switch 1 is internally provided with a port lock control module 5, each port terminal 4 of the switch is connected with the two-layer switching module 2 through an installation relay 15, and the port lock control module 5 can control the physical on-off state of a circuit between the port terminal 4 and the two-layer switching module 2 through the relay 15. The two-layer switching module 2 is an existing product and is used for switching and transferring network data, the network port terminal 4 is a network signal input port, the network port terminal 4 is a network signal output port for completing distribution after switching, and the network port lock control module 5 can identify whether a network where a network cable connected to the network port terminal 4 is located is a secret-involved network or a non-secret-involved network through the embedded intelligent chip 12 and can send a control signal for keeping disconnection or connection to the relay 15. After the network condition of the accessed network cable is verified through the network interface lock control module 5, if the network risk of accessing an external network does not exist and the network belongs to a verified secret-related internal network, the network interface lock control module 5 controls the built-in relay 15 to be connected with a circuit from the two-layer exchange module 2 to the network interface terminal 4, so that the access interaction of the secret-related network is realized; when the network to which the network cable belongs is detected to be in an external network environment, the circuit between the two-layer switching module 2 and the network port terminal 4 is kept in a disconnected state, and a confidential computer connected with the confidential network cannot be connected with the network cable, so that the purpose of protection is achieved. It verifies can be to net gape terminal 4 male net twine verify, also can be to net gape terminal 4, net gape terminal 4 male net twine all verify, consequently, relay 15 is installed between every net gape terminal 4 and two-layer exchange module 2, can the break-make of the physical connection of the data between certain net gape terminal 4 of directional independent control and the switch, and after the net twine was inserted, the discernment net twine inserted conventional technique, the utility model discloses only write in the discernment net twine on net gape lock control module 5 and insert the back, the program that preferentially verifies carries out the function and adds successively, and such technical step has been prior art.

Preferably, the two-layer switch 1 is provided with a locking ring structure in an area above the net gape terminals 4, the locking ring structure comprises a rotatable locking ring 6 installed above or below each net gape terminal 4, the rotatable locking ring 6 can rotate in or out of the net gape terminal 4, and the rotated rotatable locking ring 6 is positioned below the locking spring 7 of the net twine plug 8 inserted into the net gape terminal 4, and can limit the downward displacement of the locking spring 7.

The area above the net port terminal 4 in the double-layer exchanger 1 is provided with a corresponding slot 9 for accommodating the rotation of the rotatable locking ring 6, the outer side surface of the rotatable locking ring 6 is of a toothed structure, the top area of each rotatable locking ring 6 is matched and connected with the same telescopic rack 11, the tail end of the telescopic rack 11 is connected with a lock body motor 10 arranged in the double-layer exchanger 1, the lock body motor 10 is connected to the net port lock control module 5, and the telescopic racks 11 can drive each rotatable locking ring 6 in the respective slot 9 through the extending or retracting displacement and rotate in or out relative to the net port terminal 4. For example, in normal state, the net mouth terminal 4 is in an unlocked state, the telescopic rack 11 is in a retracted state, at this time, the end of the rotatable locking ring 6 is retracted in the slot 9, the net mouth terminal 4 is not shielded, the net line can be normally inserted, when the construction of the secret-related network is completed and the network is normally operated, the control personnel controls the network port lock control module 5 to start the locking state, at the moment, the lock body motor 10 is started to drive the telescopic rack 11 to extend, and in the process of extending the telescopic rack 11, the tooth-shaped structure of the rotatable lock ring 6 matched with the telescopic rack is driven to rotate along with the telescopic rack, the rotatable lock ring 6 rotates into the area of the net gape terminal 4 from the inside of the open slot 9, specifically, below the locking spring piece 7 of the net twine plug 8 inserted into the net gape terminal 4, can limit the downward movement displacement of the locking spring piece 7, and at the moment, the net twine plug 8 cannot be pulled out from the net gape terminal 4 and cannot be inserted. The control of the network port lock control module 5 can be carried out by further installing a radio frequency identification module 13 in the top of the two-layer exchanger 1, the radio frequency identification module 13 is connected with the network port lock control module 5, through radio frequency card authentication, only through system authentication, the network port lock control module 5 can be controlled to carry out instruction control, the lock body motor 10 is controlled to rotate positively, the rotatable lock ring 6 is driven to rotate through retraction and extension of the telescopic rack 11, the locking and unlocking states between the network port terminals 4 are carried out, and the network cable on the exchanger can be manually pulled out and plugged.

Embodiment 2, on the basis of embodiment 1, the tooth-shaped structure is replaced by an extension rod 101 and a rotating gear 102, the rotating gear 102 is installed at the tail end of the extension rod 101, the front end of the extension rod 101 is connected to the ring center of the rotatable locking ring 6, and the rotating gear 102 is matched with the telescopic rack 11. Specifically, the method comprises the following steps: two groups of rotatable lock rings 6 and telescopic racks 11 are arranged corresponding to the upper and lower layers of net mouth terminals 4, one of the upper and lower layers of telescopic racks 11 is directly matched and connected with a gear of a lock body motor 10, the lock body motor 10 is simultaneously matched and connected with a driven gear 103, and the driven gear 103 is matched and connected with the other telescopic rack 11 through an auxiliary gear 104, so that synchronous transmission is realized.

Example 3: practical operation demonstration case

The method comprises the following steps that firstly, a service management end is preset and installed in a secret-related network, and the service management end comprises an intranet authentication server stored with authentication information; a public network authentication server is preset in an external network, and the public network authentication server comprises authentication information stored in the public network authentication server; the verification servers have the functions of data information storage and verification operation and can make verification feedback;

secondly, a network port terminal is connected into a network port of a network cable, and a verification program is started;

thirdly, the verification program carries out home network verification on the network port terminal or a network cable inserted into the network port terminal, and sends verification access information to a preset intranet verification server through the network cable and also sends verification access information to a public network verification server;

fourthly, after receiving the verification access information, the internal network verification server and the public network verification server can respectively feed back verification information to the verification program; thirdly, if the specified preset program is operated, the verification server sends a feedback instruction to the verification program;

after receiving the feedback instruction, the verification program can determine whether the network to which the network belongs is a secret-related intranet or a public network extranet or whether the network can be accessed to the extranet, that is, the verification program receives the feedback verification information and judges the network type to which the network cable belongs based on the verification information;

sixthly, when the network type of the network cable is a non-public network and the network cable is verified to be a secret-related internal network, controlling a relay to switch on a circuit between a network port terminal or an output terminal and the two-layer exchange module; as long as the feedback verification information contains information from the public network, the circuit is not connected, and misconnection information is recorded. The switch is prevented from being inserted wrongly, and the condition of internal and external networks can be accessed simultaneously.

The network type of the network cable is a non-public network (secret-related network), and the verification access information sent by the verification server is correct, but the feedback verification information does not contain the verification access information from the public network, and the relay is controlled to be connected with a line between the network port terminal or the output terminal and the two-layer switching module.

The radio frequency identification module (13) is connected with the internet access lock control module, the radio frequency card is divided into an unlocking card and a locking card, through radio frequency card authentication, only through system authentication, the authentication is met, the internet access lock control module can be controlled to carry out instruction control, a lock body motor is controlled to rotate positively, a rotatable lock ring is driven to rotate through retraction and release of a telescopic rack, locking and unlocking states between the internet access terminals are carried out, and then the internet cable on the switch can be manually plugged. If the user does not have the authority, a rejection prompt is sent.

It is to be understood that the above-described embodiments of the present invention are merely illustrative of or explaining the principles of the invention and are not to be construed as limiting the invention. Therefore, any modification, equivalent replacement, improvement and the like made without departing from the spirit and scope of the present invention should be included in the protection scope of the present invention. Further, it is intended that the appended claims cover all such variations and modifications as fall within the scope and boundaries of the appended claims or the equivalents of such scope and boundaries.

Claims (7)

1. The utility model provides a computer lab multichannel intelligent network mouth lock of taking two layers of exchanges, includes a two layers of switches (1), its characterized in that, embeds there is net gape lock control module (5) on the circuit board of two layers of switches (1) to be connected through installation relay (15) between every net gape terminal (4) and two layers of switching module (2) of switch, net gape lock control module (5) can be through relay (15) control net gape terminal (4) and two layers of switching module (2) the physics break-make state of circuit between.

2. The machine room multi-path intelligent portal lock according to claim 1, wherein the portal lock control module (5) can identify whether the network where the network cable connected to the portal terminal (4) is located is a secret-related network or a non-secret-related network through the embedded intelligent chip (12), and can send a control signal for keeping disconnection or connection to the relay (15).

3. A machine room multi-path intelligent portal lock according to claim 1, wherein the area above the portal terminals (4) of the two-layer switch (1) is provided with a locking ring structure, the locking ring structure comprises a rotatable locking ring (6) installed above or below each portal terminal (4), the rotatable locking ring (6) can be turned in or out in the portal terminal (4), and the turned-in rotatable locking ring (6) is located below the locking spring (7) of the cable plug (8) inserted into the portal terminal (4) and can limit the amount of downward movement of the locking spring (7).

4. The machine room multi-path intelligent portal lock according to claim 3, wherein the area inside the two-layer switch (1) above the portal terminal (4) is provided with corresponding slots (9) for accommodating the rotatable locking ring (6) to rotate, the outer side surface of the rotatable locking ring (6) is of a toothed structure, the top area of each rotatable locking ring (6) is in fit connection with the same telescopic rack (11), the tail end of the telescopic rack (11) is connected with a lock body motor (10) installed inside the two-layer switch (1), the lock body motor (10) is connected to the portal lock control module (5), and the telescopic rack (11) can drive each rotatable locking ring (6) to rotate in or out in the respective slot (9) through extending or retracting displacement relative to the portal terminal (4).

5. The machine room multi-way intelligent portal lock is characterized in that the tooth-shaped structure is replaced by an extension rod (101) and a rotating gear (102), the rotating gear (102) is installed at the tail end of the extension rod (101), the front end of the extension rod (101) is connected to the center of the rotatable locking ring (6), and the rotating gear (102) is matched with the telescopic rack (11).

6. The machine room multi-channel intelligent portal lock of claim 5, wherein two sets of rotatable locking rings (6) and retractable racks (11) are arranged corresponding to the upper and lower layers of portal terminals (4), one of the upper and lower layers of retractable racks (11) is directly engaged with a gear of a lock body motor (10), the lock body motor (10) is simultaneously engaged with a driven gear (103), and the driven gear (103) is engaged with the other retractable rack (11) through an auxiliary gear (104), so as to realize synchronous transmission.

7. The machine room multi-path intelligent portal lock according to claim 1, wherein a radio frequency identification module (13) is further installed in the top of the two-layer switch (1), and the radio frequency identification module (13) is connected with the portal lock control module (5).

Images