CN217693340U - One-way isolation optical gate device - Google Patents
One-way isolation optical gate device Download PDFInfo
- Publication number
- CN217693340U CN217693340U CN202221358819.1U CN202221358819U CN217693340U CN 217693340 U CN217693340 U CN 217693340U CN 202221358819 U CN202221358819 U CN 202221358819U CN 217693340 U CN217693340 U CN 217693340U
- Authority
- CN
- China
- Prior art keywords
- module
- electrically connected
- shell
- optical module
- controller
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Landscapes
- Optical Communication System (AREA)
Abstract
The utility model provides an one-way isolation optical gate device, include: the power supply module is electrically connected with a power supply end of each one-way isolation module; each unidirectional isolation module comprises a first Ethernet interface used for connecting an external network, a second Ethernet interface used for connecting an internal network, a PCB, a controller configured on the PCB, a transmitting optical module and a receiving optical module; the output end of the controller is electrically connected with the driving end of the transmitting optical module and the driving end of the receiving optical module, a first Ethernet interface is configured on the shell and electrically connected with the transmitting optical module, and a second Ethernet interface is configured on the shell and electrically connected with the receiving optical module; the TX end of the transmitting optical module is connected with the RX end of the receiving optical module through an optical fiber, so that the problems of low transmission efficiency and long transmission time when data interaction is needed in the existing isolation mode are solved.
Description
Technical Field
The utility model relates to an optoisolation field, in particular to one-way isolation optical gate device.
Background
A security isolation GAP (GAP) (simply "GAP") which addresses the need for a secure, properly controlled data exchange between government internal and external networks brought about by e-government, is based on bi-directional, i.e., by configuration, allowing bi-directional data exchange between high and low security networks. However, in some networks with extremely high security level, such as secret-related networks, the secret-related networks cannot be directly communicated with the internet according to the technical requirement of information confidentiality; when the confidential network is connected with the non-confidential network, if the non-confidential network is physically isolated from the Internet, a bidirectional network is adopted to isolate the confidential network from the non-confidential network; if the non-confidential network is logically isolated from the Internet, a one-way gatekeeper is adopted to isolate the confidential network from the non-confidential network, so that confidential data is ensured not to flow from the high-security-level network to the low-security-level network.
At present, some organ units can store important data and data in high-security network equipment of an internal network, and the high-security network equipment can cut off the connection with an external network, so that the attack of the external network can be effectively resisted, and the security of the data is ensured; if data needs to be transmitted from the low-security level to the high-security level device, the data needs to be recorded in the optical disc, or the data needs to be copied by the U disc, and the high-security level device reads the content of the copied optical disc or the U disc.
When data interaction is needed in the existing isolation mode, the transmission efficiency is low, and the transmission time is long.
In view of this, the present application is presented.
SUMMERY OF THE UTILITY MODEL
The utility model discloses an optical gate device is kept apart to one-way aims at solving current isolation mode when data interaction is used to needs, and transmission efficiency is low, and transmission time is long.
The utility model discloses a one-way isolation optical gate device that first embodiment provided, include: the power supply module is electrically connected with a power supply end of each one-way isolation module;
each unidirectional isolation module comprises a first Ethernet interface used for connecting an external network, a second Ethernet interface used for connecting an internal network, a PCB, a controller configured on the PCB, a transmitting optical module and a receiving optical module;
the output end of the controller is electrically connected with the driving end of the transmitting optical module and the driving end of the receiving optical module, a first Ethernet interface is configured on the shell and electrically connected with the transmitting optical module, and a second Ethernet interface is configured on the shell and electrically connected with the receiving optical module;
and the TX end of the transmitting optical module is connected with the RX end of the receiving optical module through an optical fiber.
Preferably, each of the unidirectional isolation modules further comprises an indicator light module;
the indicator light module is arranged on the shell and is electrically connected with the output end of the controller.
Preferably, the indicator light module comprises a power-on indicator light, a transmitting light module working indicator light, and a receiving light module working indicator light.
Preferably, each of the unidirectional isolation modules further comprises a debug interface;
the debugging interface is configured on the shell and is electrically connected with the debugging end of the controller.
Preferably, each of the unidirectional isolation modules further comprises at least two USB interfaces;
each USB interface is arranged on the shell and is electrically connected with the input end of the controller.
Preferably, each of the unidirectional isolation modules further comprises a restart key;
the restart key is arranged on the shell and is electrically connected with the input end of the controller.
Preferably, the controller is RK3399.
Preferably, the power module comprises a power supply loop and a power interface configured on the shell;
the input end of the power interface is used for connecting an external power supply, the input end of the power supply loop is electrically connected with the power interface, and the output end of the power supply loop is connected with the power end of each one-way isolation module.
Preferably, the temperature sensor, the fan and the heat dissipation hole are arranged in the shell;
the temperature sensor is arranged in the shell, the fan is arranged in the shell and can send out air in the shell from the heat radiation hole;
the temperature sensor is electrically connected with the input end of the controller, and the output end of the controller is electrically connected with the control end of the fan.
Based on the utility model provides a pair of one-way isolation optical gate device, power module be used for to the electronic component of one-way isolation module supplies power, first ethernet interface is used for connecting the outer net, second ethernet interface is used for connecting the intranet, the controller is used for the drive emission optical module and receiving optical module, wherein, emission optical module's TX end pass through optic fibre with receiving optical module's RX end is connected, and the light transmission, the light reception that utilize the optic fibre network card are two totally independent optic fibre conditions, cut one of them optic fibre to realize the one-way technique of physics light, solve current isolation mode when needing to use data interaction, transmission efficiency is low, and transmission time is long.
Drawings
Fig. 1 is a schematic view of a unidirectional isolation module according to an embodiment of the present invention;
fig. 2 is a schematic view of a connection mode of the unidirectional isolation module according to an embodiment of the present invention;
fig. 3 is a schematic diagram illustrating an internal connection of a unidirectional isolation optical shutter device according to an embodiment of the present invention;
fig. 4 is a schematic front and back view of a unidirectional isolating shutter device according to an embodiment of the present invention;
fig. 5 is a schematic diagram of a reset circuit provided by an embodiment of the present invention;
fig. 6 is a schematic diagram of a power-on circuit according to an embodiment of the present invention;
fig. 7 is a schematic diagram of a voltage step-down circuit provided by an embodiment of the present invention;
fig. 8 is a schematic diagram of a fan driving circuit according to an embodiment of the present invention.
Detailed Description
To make the objects, technical solutions and advantages of the embodiments of the present invention clearer, the drawings of the embodiments of the present invention are combined to clearly and completely describe the technical solutions of the embodiments of the present invention, and obviously, the described embodiments are some embodiments of the present invention, not all embodiments. Based on the embodiments in the present invention, all other embodiments obtained by a person skilled in the art without creative work belong to the protection scope of the present invention. Thus, the following detailed description of the embodiments of the present invention, as presented in the figures, is not intended to limit the scope of the invention, as claimed, but is merely representative of selected embodiments of the invention. Based on the embodiments in the present invention, all other embodiments obtained by a person skilled in the art without creative work belong to the protection scope of the present invention.
The following detailed description of the embodiments of the present invention will be made with reference to the accompanying drawings.
The utility model discloses an optical gate device is kept apart to one-way aims at solving current isolation mode when data interaction is used to needs, and transmission efficiency is low, and transmission time is long.
Referring to fig. 1 to 4, a unidirectional isolation optical shutter device according to a first embodiment of the present invention includes: the power supply module is electrically connected with a power supply end of each one-way isolation module, wherein the internal connections of the one-way isolation modules are shown in figure 3;
each unidirectional isolation module comprises a first Ethernet interface 4 for connecting an external network, a second Ethernet interface 5 for connecting an internal network, a PCB (printed circuit board), a controller 1 configured on the PCB, an optical emission module 2 and an optical receiving module 3;
wherein, the output end of the controller 1 is electrically connected with the driving end of the transmitting optical module and the driving end of the receiving optical module 3, the first ethernet interface 4 is configured on the housing and electrically connected with the transmitting optical module, and the second ethernet interface 5 is configured on the housing and electrically connected with the receiving optical module;
wherein, the TX end of the transmitting optical module 2 is connected to the RX end of the receiving optical module through an optical fiber, as shown in fig. 3.
It should be noted that, in the prior art, when data is transmitted from a low-security-level device to a high-security-level device, the data needs to be recorded in an optical disc, or the data needs to be copied by using a U-disc, and the high-security-level device reads the contents of the copied optical disc or the U-disc.
In this embodiment, the unidirectional isolation module supplies power based on the power module, where the first ethernet interface 4 is configured to connect to an external network (low-security level), the second ethernet interface 5 is configured to connect to an internal network (high-security level), and the controller 1 is configured to drive the transmitting optical module 2 and the receiving optical module 3, that is, drive the transmitting optical module 2 to convert an electrical signal of the first ethernet interface 4 into an optical signal, and drive the receiving optical module 3 to convert the optical signal into an electrical signal, and connect to the internal network through the second ethernet interface 5.
In this embodiment, the unidirectional isolation optical gate generally supports database transfer and file transfer functions. The file transfer function mainly comprises: FTP and SAMBA protocols support a special client to realize active file acquisition; file security check: IP address, user authentication information, user authority, buffer space size and the like; high, priority file priority processing;
the database transmission function mainly comprises: realizing the function based on file transmission; three transmission modes are as follows: copying a whole table, triggering synchronization and marking synchronization; four databases: oracle, MS SQL Server, DB2, sybase have solved current isolation mode when needing to use data interaction, and transmission efficiency is low, and transmission time is long.
It should be noted that, in this embodiment, 4 unidirectional isolation modules may be provided, so that each device may support 4 extranet and intranet hosts to connect, which is more efficient than the conventional copy mode and has high security, and a unidirectional transmission fiber module is used to ensure unidirectional transmission of data by using the unidirectional transmission characteristic of light, and a low security level may be transmitted to a high security level, and the high security level may only receive and may not transmit, and a multi-host structural design and unidirectional hardware are used to cut off TCP/IP protocol communication, thereby forming unidirectional isolation between networks, and the device does not accept active requests from any unknown source.
In a possible embodiment of the present invention, each of the unidirectional isolation modules further comprises an indicator light module, wherein the indicator light module comprises a power-on indicator light 8, a power-on indicator light 9, a light-emitting module operation indicator light 10, and a light-receiving module operation indicator light 11;
the indicator light module is disposed on the housing and electrically connected to an output terminal of the controller 1.
It should be noted that the power-on indicator light 8 is used to light up when the unidirectional isolation module is powered on, wherein the indicator light is not on when a certain unidirectional isolation module cannot be powered on, so that a technician can quickly perform troubleshooting.
The start indicator lamp 9 is used to indicate that the device is started, that is, the start indicator lamp can be turned on when each unidirectional isolation module is started, and the transmitting optical module working indicator lamp 10 and the receiving optical module working indicator lamp 11 are respectively used to indicate the working states of the transmitting optical module 2 and the receiving optical module 3.
In a possible embodiment of the present invention, each of the unidirectional isolation modules further includes a debug interface;
the debugging interface 6 is configured on the shell and is electrically connected with the debugging end of the controller 1.
It should be noted that the debugging interface 6 is used for connecting with an external debugging device, such as a notebook computer, and it can load a program into the control through the debugging interface.
In a possible embodiment of the present invention, each of the unidirectional isolation modules further includes at least two USB interfaces 12;
each of the USB interfaces is disposed on the housing and electrically connected to the input terminal of the controller 1.
It should be noted that the USB interface may be used to connect some input devices, such as a mouse, a keyboard, or some devices thereof.
In a possible embodiment of the present invention, each of the unidirectional isolation modules further includes a restart button 7;
the restart key 7 is disposed on the housing and electrically connected to an input terminal of the controller 1.
It should be noted that, when the apparatus cannot continue to operate for some reason, the restart key 7 can be pressed to quickly power on the device again, so that the apparatus can continue to operate, where the reset circuit is shown in fig. 5.
In a possible embodiment of the present invention, the controller 1 may be of the type RK3399.
It should be noted that the controller 1 may also be other types, which are not limited in this embodiment, but these embodiments are all within the scope of the present invention.
With continuing reference to fig. 4, in a possible embodiment of the present invention, the power module includes a power supply circuit, a power interface 15 disposed on the housing;
the input end of the power interface 15 is used for connecting an external power supply, the input end of the power supply loop is electrically connected with the power interface 15, and the output end of the power supply loop is connected with the power end of each unidirectional isolation module.
It should be noted that the power supply circuit may include a power on/off circuit (as shown in fig. 6) and a voltage reduction circuit (as shown in fig. 7), wherein the voltage reduction circuit is used to reduce the adapted voltage level to 5V or 3.3V for system use, and wherein the power on/off circuit includes a power on/off key 13 disposed on the surface of the housing for turning on and off the isolation device.
In a possible embodiment of the present invention, the present invention further includes a temperature sensor, a fan, and a heat dissipation hole 14 disposed inside the housing;
the temperature sensor is arranged in the shell, the fan is arranged in the shell and can send out air in the shell from the heat dissipation hole;
the temperature sensor is electrically connected with the input end of the controller 1, and the output end of the controller 1 is electrically connected with the control end of the fan.
It should be noted that the temperature sensor is configured to detect the temperature inside the casing, and the controller 1 can adjust the rotation speed of the fan according to the temperature, wherein the fan driving circuit is shown in fig. 8.
Based on the utility model provides a pair of one-way isolation optical gate device, power module be used for to the electronic component of one-way isolation module supplies power, first ethernet interface 4 is used for connecting the outer net, second ethernet interface 5 is used for connecting the intranet, controller 1 is used for the drive emit optical module 2 with receive optical module 3, wherein, emit optical module 2 the TX end pass through optic fibre with receive optical module's RX end and connect, utilize optic fibre network card's light transmission, light reception to two totally independent optic fibre conditions, cut one of them optic fibre to realize the one-way technique of physics light, solve current isolation mode when needs use data interaction, transmission efficiency is low, and transmission time is long.
Above only the utility model discloses a preferred embodiment, the utility model discloses a scope not only limits in above-mentioned embodiment, and the fan belongs to the utility model discloses a technical scheme under the thinking all belongs to the utility model discloses a scope.
Claims (9)
1. A one-way isolating optical shutter device comprising: the device comprises a shell, a plurality of one-way isolation modules arranged in the shell, and a power supply module electrically connected with a power supply end of each one-way isolation module;
each unidirectional isolation module comprises a first Ethernet interface used for connecting an external network, a second Ethernet interface used for connecting an internal network, a PCB, a controller configured on the PCB, a transmitting optical module and a receiving optical module;
the output end of the controller is electrically connected with the driving end of the transmitting optical module and the driving end of the receiving optical module, a first Ethernet interface is configured on the shell and electrically connected with the transmitting optical module, and a second Ethernet interface is configured on the shell and electrically connected with the receiving optical module;
and the TX end of the transmitting optical module is connected with the RX end of the receiving optical module through an optical fiber.
2. A one-way isolating shutter device in accordance with claim 1 wherein each one-way isolating module further comprises an indicator light module;
the indicator light module is arranged on the shell and is electrically connected with the output end of the controller.
3. A unidirectional isolating shutter device according to claim 2 wherein said indicator light module includes a power-on indicator light, a transmitting light module operation indicator light, and a receiving light module operation indicator light.
4. A unidirectional isolating shutter device in accordance with claim 1 wherein each of said unidirectional isolating modules further comprises a debug interface;
the debugging interface is configured on the shell and is electrically connected with the debugging end of the controller.
5. A unidirectional isolating shutter device according to claim 1 wherein each of said unidirectional isolating modules further comprises at least two USB interfaces;
each USB interface is configured on the shell and is electrically connected with the input end of the controller.
6. A unidirectional isolating shutter device according to claim 1 wherein each unidirectional isolating module further includes a reset button;
the restart key is arranged on the shell and is electrically connected with the input end of the controller.
7. A unidirectional isolating shutter device as claimed in claim 1 wherein said controller is of the type RK3399.
8. A unidirectional isolating shutter device according to claim 1 wherein said power module includes a power supply circuit, a power interface disposed on said housing;
the input end of the power interface is used for connecting an external power supply, the input end of the power supply loop is electrically connected with the power interface, and the output end of the power supply loop is connected with the power end of each one-way isolation module.
9. A unidirectional isolating shutter device according to claim 1 further comprising a temperature sensor disposed within the housing, a fan, a heat sink opening into a surface of said housing;
the temperature sensor is arranged in the shell, the fan is arranged in the shell and can send out air in the shell from the heat radiation hole;
the temperature sensor is electrically connected with the input end of the controller, and the output end of the controller is electrically connected with the control end of the fan.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202221358819.1U CN217693340U (en) | 2022-05-30 | 2022-05-30 | One-way isolation optical gate device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202221358819.1U CN217693340U (en) | 2022-05-30 | 2022-05-30 | One-way isolation optical gate device |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN217693340U true CN217693340U (en) | 2022-10-28 |
Family
ID=83705207
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202221358819.1U Active CN217693340U (en) | 2022-05-30 | 2022-05-30 | One-way isolation optical gate device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN217693340U (en) |
-
2022
- 2022-05-30 CN CN202221358819.1U patent/CN217693340U/en active Active
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| JP3109027B2 (en) | Optical communication device | |
| KR100265704B1 (en) | Cable manager system and computer with the same | |
| CN113886326A (en) | ARM server and data processing method | |
| CN217693340U (en) | One-way isolation optical gate device | |
| US20230195671A1 (en) | Storage enclosure and system including the storage enclosure | |
| JPH0588793A (en) | Extension system | |
| CN210958390U (en) | Isolation gatekeeper device for network security | |
| TW202037004A (en) | Fan to be used as a relay node comprising a male connecting port, a female connecting port, a transmission wire set, a power acquisition unit, and a signal processing unit | |
| CN106230514A (en) | The optical module of a kind of low-power consumption and the power-economizing method of reduction ammeter optical module power consumption | |
| CN220137687U (en) | ARM server management system | |
| CN111653885A (en) | Novel Type-C interface device and application method thereof | |
| CN206099992U (en) | Low -power dissipation optical module | |
| US7330351B2 (en) | Mobile power adapter | |
| CN111412162B (en) | Electronic equipment and host thereof | |
| CN215117773U (en) | Infrared communication power supply circuit and system | |
| CN214901903U (en) | Intelligent overcurrent device based on big data short message | |
| CN213152101U (en) | Image safety transmission device | |
| CN213211018U (en) | Signal processing board card | |
| CN215268320U (en) | Ten-trillion encryption isolation gateway based on domestic high-performance processor | |
| Jagun et al. | Design and development of a computer controlled switching system via universal serial bus port. | |
| CN218829967U (en) | Non-network security isolation system based on USB-to-4 serial port | |
| TW202024985A (en) | Lock control circuit and electronic system having the same | |
| CN210469318U (en) | FC emulation control portable equipment based on USB interface | |
| CN208781209U (en) | A kind of monitoring system of data center | |
| CN217404863U (en) | Extended password server based on cplie bus |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| GR01 | Patent grant | ||
| GR01 | Patent grant |