CN2629124Y

CN2629124Y - Arrangement for computer network safety isolating

Info

Publication number: CN2629124Y
Application number: CN 03251233
Authority: CN
Inventors: 李化雨; 孙昭蟒; 朱程锦
Original assignee: Lenovo Beijing Ltd
Current assignee: Lenovo Beijing Ltd
Priority date: 2003-05-27
Filing date: 2003-05-27
Publication date: 2004-07-28
Anticipated expiration: 2013-05-27

Abstract

The utility model discloses a network safety isolation device for computer, which comprises a change-over switch, a hard disk power supply switching module which supplies power to the Ethernet and internet hard disks, a network interface switching module which connects the local computer network interface with the Ethernet or the internet, a PCI-IDE switching module which realizes change from the PCI interface to the IDE interface, and a control module. The input of the control module is connected with the change-over switch in the computer, while the outputs of the control module are connected with the hard disk power supply switching module and the network interface switching module respectively. Ethernet and internet hard disks can be connected independently to the IDE interfaces on the main board by utilizing the utility model, so that the interference between data lines is avoided; on the other hand, although the Ethernet and internet hard disks occupy the only two IDE interfaces on the main board, the operation of other IDE equipments can be ensured by the PCI-IDE switching module.

Description

The device that computer network security is isolated

Technical field

The utility model relates to computer network security technology, relates in particular to the device that a kind of computer network security is isolated, and belongs to computer network security field.

Background technology

Universal day by day along with development of computer and network, network security becomes the focus that people pay close attention to.Present many enterprises, organization user have inner LAN (Local Area Network), some user wishes that the computing machine in the LAN (Local Area Network) can visit external network (as Internet), guarantee the LAN (Local Area Network) internal security simultaneously, comprise: data are not by extranet access, and the network security isolation technology produces for solving such problem.

On computing machine of the many employings of present network security isolation technology two hard disks are installed and are realized that a hard disk is installed the operating system that Intranet is used, the storage internal data; Another piece hard disk is installed the operating system that outer net uses, the storage external data, and the data of two hard disks are isolated fully, thus the safety that realizes intranet and extranet is isolated.

Wherein the mutual isolation of hard disk is crucial, adopts two kinds of schemes at present: control hard disc data line, control hard disk power lead.All there is shortcoming in various degree in these two kinds of methods, and the method for control hard disc data line can increase the length of hard disc data line, increases the standard in the ATA standard; The method of control hard disk power lead is in implementation procedure, if two hard disks are connected on the principal and subordinate position of same data line, when carrying out high speed data transfer, the inoperative hard disk can produce the data of work hard disk and disturb, cause data to be made mistakes, system can't discern hard disk when serious; If two different I DE interfaces that two hard disks are connected on mainboard respectively can be avoided the problem of data line phase mutual interference.But consider that present computer motherboard has only two ide interfaces, and IDE equipment such as CDROM/DVDROM are the standard configurations of computer system, therefore Network Isolation switching and PCI-IDE function are integrated in one and can well overcome the above problems.

The utility model content

The purpose of this utility model is the device that provides a kind of computer network security to isolate at the deficiencies in the prior art, switching of hard disk power supply and PCI-IDE function are integrated in one, solve the interference problem between the data line comprehensively, realize that the safety of internal-external network system is isolated.

The purpose of this utility model is achieved in that

The device that a kind of computer network security is isolated comprises setting change-over switch, intranet and extranet hard disk power supply handover module on computers, network interface handover module and switching controls module at least; Wherein, the input end of switching controls module connects change-over switch, and its output connects hard disk power supply handover module and Network Interface Module respectively.

Hard disk power supply handover module is connected and composed by Intranet hard disk power interface, outer net hard disk power interface and computer system power source interface and power transfer relay at least; Wherein, the computer system power source interface connects Intranet hard disk power interface and outer net hard disk power interface respectively by power transfer relay, and power transfer relay is connected with the control signal of switching controls module.

The network interface handover module comprises, inner-mesh network interface, outer net network interface, native network interface and network transfer relay; Wherein, the native network interface connects inner-mesh network interface and outer net network interface respectively by the network transfer relay, and the network transfer relay is connected with the control signal of switching controls module.

In order not influence the access of other IDE equipment, the utility model also further is provided with the PCI-IDE modular converter, this PCI-IDE modular converter is made of pci interface, ide interface and the change-over circuit that connects these two interfaces, wherein, this PCI-IDE connects the PCI connector of computing machine by its pci interface, and by its ide interface connection IED equipment, change-over circuit is electrically connected with this pci interface and ide interface respectively.

The utility model compared with prior art, its advantage is: the intranet and extranet hard disk is independent separately to link to each other with mainboard, is connected on the ide interface of mainboard, has so just avoided the interference between the data line; Taken only two ide interfaces on the mainboard owing to the intranet and extranet hard disk on the other hand, so the PCI-IDE translation interface has guaranteed the use of other IDE equipment.

Description of drawings

Fig. 1 is the utility model integral module synoptic diagram;

Fig. 2 is that each module of the utility model is formed synoptic diagram;

Fig. 3 is a hard disk power supply handover module circuit diagram;

Fig. 4 is a network interface handover module circuit diagram;

Fig. 5 is a PCI-IDE modular converter synoptic diagram;

Fig. 6 is a module controls interpolation block circuit diagram;

Fig. 7 is the Switch structure circuit diagram;

Fig. 8 is a state lock-in circuit synoptic diagram.

Embodiment

Below in conjunction with accompanying drawing content of the present utility model is described in detail.

As shown in Figure 1, the utility model comprises four modules: hard disk power supply handover module, network interface handover module, PCI-IDE modular converter and switching controls module also comprise the connecting line interconnected with main frame.The inside of each module is formed as shown in Figure 2.

As shown in Figure 3, hard disk power supply handover module comprises three external interfaces: Intranet hard disk power interface J6, outer net hard disk power interface J4 and computer system power source interface J5.It finishes the power supply to the intranet and extranet hard disk, and the computer system power source of input is controlled the signal controlling of module, from different power interface output, to different hard disk power supplies.When control signal CONTROL was low level, 2,3 pins of relay K 4, K5 and 8,9 pins were communicated with, and network source is communicated with system power supply in making, thereby realized the Intranet hard disk is powered; When control signal CONTROL signal was high level, 3,4 pins of relay K 4, K5 and 7,8 were communicated with, and outer network source is connected with system power supply, thereby gave the power supply of outer net hard disk; Above-mentioned CONTROL signal is from the switching controls module.

As shown in Figure 4, the network interface handover module comprises three external interfaces: inner-mesh network interface J3, outer net network interface J1 and native network interface J2, and it finishes the switching of native network interface J2 with inside and outside network, and its action is controlled by control module.When control signal CONTROL was low level, 2,3 pins of relay K 2, K3 and 8,9 pins were communicated with, and native network interface J2 and interior network interface J3 are connected; When control signal CONTROL was high level, 3,4 pins of relay K 2, K3 and 7,8 were communicated with, and native network interface J2 and outer network interface J1 are connected; Above-mentioned control signal CONTROL is equally from the switching controls module.

As shown in Figure 5, the PCI-IDE module is that conversion chip and the connection line of PROMISE ADC20268PCI constitutes by model mainly, this conversion chip is connected on the pci bus of computing machine by its corresponding pin, and its IDE output signal is connected on the ide interface of the present utility model.

Referring to Fig. 6,7,8, the switching controls module comprises control signal generation circuit and one six needle socket J7, switch-over control signal produces circuit and is mainly connected to form by integrated circuit 7400 and 74HC74, rising edge pulse during computer starting twice by integrated circuit 7400 is anti-phase, the time-delay back arrives the clock signal clk input end of integrated circuit 74HC74, and integrated circuit 74HC74 is the d type flip flop that rising edge triggers.Connect the D end of this d type flip flop from the status signal SWITCH of the change-over switch S1 of socket J7 input.Produce control signal CONTROL at the Q of trigger end thus, be used for controlling respectively hard disk power supply handover module and Network Interface Module.2,4, the 6 pin ground signallings of six needle socket J7,1,3 pins meet power supply VCC, and pin 5 links to each other with power supply VCC by a pull-up resistor R1.

The change-over switch S1 and the pilot lamp that are provided with on switching controls module and the computing machine link to each other, and change-over switch S1 is positioned on the cabinet panel, is a triac device, and status signal SWITCH is connected to the pin 5 of gang socket J8.Change-over switch S1 has two on off states: a state is that the

5,6 of gang socket J8 is disconnected, and

1,2 is communicated with, and

3,4 disconnects,

1,2 is communicated with, make Intranet pilot lamp D1 luminous, this moment, status signal SWITCH ground connection was low level; Another state is that

5,6 is disconnected, and this moment, status signal SWITCH connect sky, but since pin 5 draw high by pull-up resistor, therefore be in high level,

1,2 disconnects simultaneously, and Intranet pilot lamp D1 extinguishes,

3,4 is connected, and makes outer net pilot lamp D2 luminous.Not only can in time reflect the user mode of intranet and extranet by above-mentioned pilot lamp, can also make the user in time find network failure as the feedback indication.

The switching controls module also further is provided with state locking logical circuit, after start, the state lock function that state locking logical circuit produces can not influence the duty of computing machine to the operation of change-over switch S1, this circuit has utilized d type flip flop 74HC74 rising edge to trigger, the state lock-in feature, system power supply is carried out filtering, through after the time-delay of certain hour, join the input end of clock of d type flip flop as trigger pip, the status signal SWITCH signal of change-over switch S1 connects the state input end (D signal end) of d type flip flop, after rising edge of clock signal arrives, the signal of state input end (D signal end) is exported, this moment, d type flip flop can keep the stable of output terminal, arrived up to next rising edge clock signal; Under open state, system power supply is can not produce rising edge again, therefore, also just guaranteed to power up again stable after, stir the switching that status switch S1 can not produce network and hard disk.So only just can carry out inside and outside net and switch, guarantee the safety of Intranet at off-mode.

Work relationship between each module of Network Isolation control device that the utility model is realized is as follows:

When computing machine is in off-mode, can select to use Intranet or outer net by the change-over switch that is positioned on the cabinet.After on off state is determined, start computer power supply, control signal generation circuit is to socket 5 in six needle sockets, and promptly status signal SWITCH judges.SWITCH is positioned at low level state when status signal, the expression user selects to use internal network, control module produces control signal corresponding connects the power interface of Intranet hard disk power interface and computer system, native network interface and inner-mesh network interface are connected, thereby realize connecting with Intranet and powering to Intranet.This moment, the outer net hard disk was in power-down state, and outer net also disconnects, and has guaranteed the safety of Intranet.

SWITCH is in high level state when status signal, the expression user selects to use external network, the outer net pilot lamp can be bright, control module produces control signal corresponding connects the power interface of outer net hard disk power interface and computer system, native network interface and outer net network interface are connected, thereby realize connecting with outer net and powering to outer net.This moment, the Intranet hard disk was in power-down state, and Intranet disconnects, and can not exert an influence to Intranet to the operation of outer net.

The state lock-in circuit guarantees the stable working state after start, and is promptly invalid to the operation of change-over switch after the start, only just can carry out intranet and extranet and switch under the state of shutdown, guaranteed the safety of Intranet.

The PCI-IDE module is independently on function, it has realized an ide interface, thereby (for example: under situation CD-ROM drive CDROM/DVDROM etc.), intranet and extranet hard disc data line is separate, thereby adapts to high-speed data transmission to have guaranteed to exist in main frame other IDE equipment.

It should be noted that at last: above embodiment is only unrestricted in order to the explanation the technical solution of the utility model, although the utility model is had been described in detail with reference to preferred embodiment, those of ordinary skill in the art is to be understood that, can make amendment or be equal to replacement the technical solution of the utility model, and not breaking away from the spirit and scope of technical solutions of the utility model, it all should be encompassed in the middle of the claim scope of the present utility model.

Claims

1, a kind of device of computer network security isolation is characterized in that: comprise change-over switch, intranet and extranet hard disk power supply handover module, network interface handover module and switching controls module; Wherein, the input end of switching controls module connects change-over switch, and its output connects hard disk power supply handover module and network interface handover module respectively.

2, the device of computer network security isolation according to claim 1, it is characterized in that: described hard disk power supply handover module is connected and composed by Intranet hard disk power interface, outer net hard disk power interface and computer system power source interface and power transfer relay at least; Wherein, the computer system power source interface connects Intranet hard disk power interface and outer net hard disk power interface respectively by power transfer relay, and power transfer relay is connected with the control signal of switching controls module.

3, the device of computer network security isolation according to claim 1, it is characterized in that: described network interface handover module comprises, inner-mesh network interface, outer net network interface, native network interface and network transfer relay; Wherein, the native network interface connects inner-mesh network interface and outer net network interface respectively by the network transfer relay, and the network transfer relay is connected with the control signal of switching controls module.

4, the device of computer network security isolation according to claim 1, it is characterized in that: described switching controls module comprises: control signal generation circuit and display circuit; Display circuit comprises that at least Intranet connects pilot lamp and is connected pilot lamp with outer net, and status signal, Intranet connection pilot lamp are connected pilot lamp with outer net and are connected to change-over switch by control signal generation circuit.

5, the device of computer network security isolation according to claim 4, it is characterized in that: described control module also further comprises by rising edge and triggers the state locking logical circuit that the d type flip flop of state latch constitutes, the input of this state locking logical circuit connects computer power supply, and output connects the status signal of change-over switch.

6, the device of isolating according to the arbitrary described computer network security of claim 1-5, it is characterized in that: described device further is provided with: the PCI-IDE modular converter, this PCI-IDE modular converter is made of pci interface, ide interface and the change-over circuit that connects these two interfaces, wherein, this PCI-IDE connects the PCI connector of computing machine by its pci interface, and by its ide interface connection IED equipment, change-over circuit is electrically connected with this pci interface and ide interface respectively.