CN2687972Y - One-way physical-isolating net gate - Google Patents

One-way physical-isolating net gate Download PDF

Info

Publication number
CN2687972Y
CN2687972Y CN 200320126703 CN200320126703U CN2687972Y CN 2687972 Y CN2687972 Y CN 2687972Y CN 200320126703 CN200320126703 CN 200320126703 CN 200320126703 U CN200320126703 U CN 200320126703U CN 2687972 Y CN2687972 Y CN 2687972Y
Authority
CN
China
Prior art keywords
holding wire
module
port ram
intranet
physical insulation
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CN 200320126703
Other languages
Chinese (zh)
Inventor
杨立志
吴赣
杨明
童兆丰
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
JINGTAI NETWORK SCIENCE AND TECHNOLOGY Co Ltd BEIJING
Original Assignee
JINGTAI NETWORK SCIENCE AND TECHNOLOGY Co Ltd BEIJING
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by JINGTAI NETWORK SCIENCE AND TECHNOLOGY Co Ltd BEIJING filed Critical JINGTAI NETWORK SCIENCE AND TECHNOLOGY Co Ltd BEIJING
Priority to CN 200320126703 priority Critical patent/CN2687972Y/en
Application granted granted Critical
Publication of CN2687972Y publication Critical patent/CN2687972Y/en
Anticipated expiration legal-status Critical
Expired - Fee Related legal-status Critical Current

Links

Images

Landscapes

  • Small-Scale Networks (AREA)

Abstract

The utility model discloses a one-way physical-isolating net gate which is composed of an inner and an outer net host machine modules, a data exchanging module and a 1+1 hot-ready double-power supply module on a hardware. The utility model is able to proceed the data exchange of the application layer with safety, high efficiency and controllability between two network spaces isolated with each other, which adopts the 1+1 hot-ready double power supplies in a 1U machine case, and the inner and outer net host machine modules are respectively and tightly sliced with the double-port RAM card of the data exchanging module together through double rows of contact pins so as to greatly raise the reliability of the system.

Description

Unidirectional physical insulation network gap
Technical field
Unidirectional physical insulation network gap is a kind of for the product that carries out the application layer data exchange safe, efficient, controlled between the network of isolating each other at two.The electronic technology field that belongs to network security.
Background technology
The development of computer network information system has brought very big facility for people's study, life, work.But simultaneously, because the fragility of computer network information system itself has also been brought huge security threat to people.Information security and network security are subjected to the extensive concern of government and society day by day, also are subjected to computer and network technologies expert's great attention simultaneously.
In order to protect computer network information system, many units adopt safety measures such as encryption, viral detection, fire compartment wall, intrusion detection at present usually.The computer network information system resource of unit has all been protected in these measures from one or more aspect.
But unavoidably all there is the limitation of self in every kind of safe practice, all can not solve safety problem fully.For example: fire compartment wall is positioned at the information gateway of network, and it takes measures such as packet filtering, network address translation, application level proxy that network is protected.To a great extent, fire compartment wall can make the internal institution network reach quite high level of security, for example, can limit source IP, purpose IP, service etc.But fire compartment wall itself also has certain limitation, for example, can not take precautions against not connection by it, can not prevent because the safety problem that the potential safety hazard of application program (for example cgi script) is brought etc.Simultaneously, firewall product is the same with all computer software and hardware products, exists the safety issue of self inevitably.Because the unprovability of firewall program correctness is difficult to guarantee that there are not security breaches in fire compartment wall.The leak that exists when fire compartment wall is found and during by malicious exploitation, fire compartment wall just might invaded person be taken over, thereby firewall rule will be distorted by it will, and causes whole network to be broken, cause serious consequences such as leakage of data, this is especially unacceptable for important state-owned unit, department.
Anti-virus and intrusion detection also have safety function separately separately, still, equally also exist technical separately deficiency.Present anti-virus software and intruding detection system have adopted similar techniques, and whether mate virus or intrusion behavior by the mode of " feature database ", thereby if should not have this " feature " in " feature database ", these are just attacked and can not be detected.For the computer network field of exponentially development, all there are every day new leak, new virus, new attack method to occur, this just means that also the feature database of " slowly " upgrades the attack development that can't catch up with " rapidly ", thereby use these technology to carry out security protection merely, for security protection system, be far from being enough.
Many unit personnels have also had recognized that the deficiency of these safe practices, therefore, between many important units or different department, adopt and build two complete physically-isolated computer networks and ensure crucial the application.In do with the Office of the State Council in do to send out in [2002] No. 17 files and clearly propose: " electronic government affair network is made of government affairs Intranet and government affairs outer net, physical isolation between two nets, logic isolation between government affairs outer net and the Internet." this safeguard measure is very effective for the protection of significant data.
But,,, require between the internal network and the Internet of government/enterprise, perhaps to carry out information interchange between the heterogeneous networks of government/enterprises in order outwards to issue or acquisition of information along with the expansion of E-Government and e-commerce initiative.Because between a plurality of networks is physically-isolated fully, at present, realize that the information interchange between the heterogeneous networks can only adopt the most original mode, promptly the mode by human intervention realizes, the data that regularly will need to shift copy on the storage mediums such as floppy disk, and then it is copied in the objective network.
Along with carrying out of E-Government, ecommerce, the quantity of swap data and frequency are how much level risings between heterogeneous networks, and the level of security difference of heterogeneous networks, the flow direction of data is also wished and can effectively be controlled, therefore, file transfer between network has been brought huge workload to administrative staff, has also brought the sluggishness of information flow between network simultaneously, and information can not be implemented between network to be shared timely.This original solution more and more can't satisfy user's demand.
The utility model content
The purpose of the present utility model is to overcome the deficiencies in the prior art, invents a kind of unidirectional physical insulation network gap, and target is that the application layer data that carries out safe, efficient, controlled between two networks of isolating each other exchanges.
For realizing goal of the invention of the present utility model, the technical scheme that unidirectional physical insulation network gap adopted is such:
Unidirectional physical insulation network gap is equipped with the duplicate supply module by intranet host module, outer net host module, data exchange module and 1+1 heat and forms on hardware.
Further, the data exchange module of unidirectional physical insulation network gap is connected with outer net host module symmetry with the intranet host module respectively by control line, has constituted the structure that two main frames add the internal memory Switching Module.
Further, the intranet host module of unidirectional physical insulation network gap, outer net host module, data exchange module and 1 add 1 heat and are equipped with the duplicate supply module and are placed in the 1U standard PC case.
Further, the data exchange module of unidirectional physical insulation network gap is a core with the two-port RAM chip, and two-port RAM connects left and right sides port respectively by rambus; The A of two-port RAM both sides 0----A 12Address bus, I/O 0----I/O 15Data/address bus, R/ W holding wire, CE holding wire, OE holding wire, UB holding wire, LB holding wire, Busy holding wire, SEM holding wire, INTL holding wire respectively with the A of intranet and extranet main frame Switching Module rambus 0----A 12Address bus, I/O 0----I/O 15Data/address bus, R/ W holding wire, CE holding wire, OE holding wire, UB holding wire, LB holding wire, Busy holding wire, SEM holding wire, the corresponding connection of INTL holding wire.
Further, in the unidirectional physical insulation network gap inside and outside host's machine module respectively by double contact pin with close being plugged on of data exchange module two-port RAM chucking, the 29--41 pin in the double contact pin respectively with address bus A 0--A 12Link to each other; 7--22 pin in the double contact pin respectively with data/address bus I/O 0--I/O 15Link to each other; 49--56 pin in the double contact pin links to each other with R/ W holding wire, CE holding wire, SEM holding wire, OE holding wire, UB holding wire, LB holding wire, INTL holding wire, Busy holding wire respectively.
Further, the intranet and extranet host module is positioned on the chassis backplane by the screw at four angles respectively, and the intranet and extranet host module tightens close being plugged on by double contact pin with the data exchange module two-port RAM respectively, constitutes an integral body; The screw that two-port RAM is stuck in by four angles is positioned on the chassis backplane.
Further, 1+1 heat is equipped with the duplicate supply module and is emitted on side by side in the 1U standard PC case, and its fixed form is to be screwed on the cabinet by four Spring screwses to realize.
Further, the CPU of unidirectional physical insulation network gap selects homemade Noah's ark Arca-2 chip for use.
Further, by the lock of cabinet outside, control doc electric board write the pin wire jumper, realize doc is allowed the physics control writing and forbid writing.
Advantage of the present utility model is:
(1) unidirectional physical insulation network gap is connected between two physically-isolated networks, these two networks are still isolated in physical layer.
(2) unidirectional physical insulation network gap has information exchange ability at a high speed, and the speed of information exchange between two networks reaches 200Mbps and has the ability of further expanding.
(3) unidirectional physical insulation network gap adopts hot stand-by power source in the 1U cabinet, adds that custom-designed connected mode and low-power consumption mainboard make the reliability of system increase substantially.
(4) unidirectional physical insulation network gap adopts doc read-write line traffic control technology, makes to have unidirectional delivery on the system physical, improves the physical security of system.
(5) adopting homemade CPU is the proprietary motherboard design of core, can prevent to utilize the leak of Intel X86 system to attack.
Description of drawings
Fig. 1 is the utility model internal structure schematic diagram; 1 is that heat is equipped with the duplicate supply module, and 2 is the intranet host module, and 3 is the outer net host module, and 4 is data exchange module.
Fig. 2 is the utility model hardware architecture figure.
Fig. 3 is the utility model data exchange module hardware control logic figure.
Fig. 4 is a rambus connected mode schematic diagram in the double contact pin.
Fig. 5 is intranet host module, outer net host module, data exchange module three module connected mode schematic diagram.
Fig. 6 is for connecting vertical view for the utility model power supply.
Embodiment
Below in conjunction with description of drawings execution mode of the present utility model.
(1) complete machine hardware architecture
Unidirectional physical insulation network gap is formed (as shown in Figure 1) by three parts on function logic, i.e. intranet host module 2, outer net host module 3 and data exchange module 4.System power supply adopts the hot stand-by power source 1 of 1+1, and cabinet adopts standard 1U cabinet.
Its complete machine is characterized as in the 1U standard PC case, and supply power mode adopts heat to be equipped with the duplicate supply design, and simultaneity factor comprises intranet host module, outer net host module and three modules of data exchange module.Data exchange module connects the intranet host module respectively and the outer net host module constitutes an integral body.
(2) architecture of two host computer systems+internal memory Switching Module
In the architecture of two host computer systems of intranet and extranet and data exchange module, the hardware of intranet host module and outer net host module is the homemade proprietary mainboard host computer system that designs voluntarily, mainboard adopts the design of 6 laminates, contains stratum and anti-interference layer, to improve the anti-interference and the reliability of system.Data exchange module is the two-port RAM card, promptly adopts the internal memory exchanged form to realize the function of data exchange module.Data exchange module based on the internal memory exchanged form links to each other with the intranet and extranet host module by control line, constitutes the architecture of two host computer systems+internal memory Switching Module.
When host computer system was isolated physically inside and outside unidirectional physical insulation network gap was finished the read-write of data Switching Module mutual exclusion by the both sides host module, data are changed to the work of opposite side exchange from a top-cross.Its connection diagram as shown in Figure 2, wherein intranet host module 2 and outer net host module 3 are complete two cover host computer systems of symmetry.
Its external interface of intranet host module comprises:
1, RJ45 network interface as the Intranet management port, connects the Intranet supervisory computer.
2, RJ45 network interface as the inner-mesh network port, connects inner-mesh network.
3, DB9 standard serial port as serial interface management login mouth, connects the Intranet supervisory computer.
4, two USB interface as system extension, are used for purposes such as authenticating user identification, external equipment.
Its external interface of outer net host module comprises:
1, RJ45 network interface as the outer net management port, connects the outer net supervisory computer.
2, RJ45 network interface as the outer net network port, connects the outer net network.
3, DB9 standard serial port as serial interface management login mouth, connects the outer net supervisory computer.
4, two USB interface as system extension, are used for purposes such as authenticating user identification, external equipment.
Data exchange module 4 is connected with outer net host module symmetry respectively at the intranet host module by control line.The both sides host module is by taking/discharge the read-write that realizes the mutual exclusion of data Switching Module to the busy control line.
(3) hardware control logic of data exchange module
Data exchange module is a core with the two-port RAM chip.Two-port RAM connects left and right sides port respectively by rambus.Its operation principle is: by the CE chip selection signal, certain side is chosen two-port RAM, read and write two-port RAM if desired, judge that then the busy line is empty and not busy, if be not busy, then obtain control and forbid that the other end obtains control, read or write instruction set R/ W line according to application layer then, if write command, by data wire I/O 0--I/O 15Data are write A 0--A 15In the address space that address wire is expressed, if read instruction, A 0--A 15Data in the address space that address wire is expressed are read data wire I/O 0----I/O 15Come up.
Can see from top operation principle, two-port RAM is equivalent to vacant in intermediate state at ordinary times, when host computer system a certain side in both sides is obtained control, the opposite side disable access, vice versa, thereby make the both sides host computer system can not visit two-port RAM simultaneously, just physically can not link together simultaneously, the more impossible two-port RAM that reads while write, thereby the isolation on the network physical of realization both sides.
The hardware control logic of data exchange module connects as shown in Figure 3, and writing data to the right side with the left side is example, and workflow is as follows:
1) left-sided system adopts polling mode to detect the two-port RAM state.
2) system receives the write command request that application layer is sent, and whether the two-port RAM state that detects poll is idle.
3) if not idle, then get back to 2 up to the free time.If free time then obtain control, the opposite side of set simultaneously busy line is effective, forbids the opposite side visit.
4), write application layer data in the address space of appointment according to application layer protocol.
5) transmission is write and is finished interruption to two-port RAM, and the invalid opposite side busy of two-port RAM line sends interrupt signal simultaneously to the opposite side system.
6) opposite side system respective interrupt according to application layer protocol, is read the data of designated space.
7) finish a data write exchange.
The connected mode of its control line is:
" the A of two-port RAM both sides 0--A 12Address bus " connect the A of intranet and extranet main frame Switching Module rambus respectively 0--A 12Address bus.
" the I/O of two-port RAM both sides 0-I/O 15Data/address bus " connect the I/O of intranet and extranet main frame Switching Module rambus respectively 0--I/O 15Data/address bus.
" R/ W " holding wire of two-port RAM both sides connects intranet and extranet main frame Switching Module rambus R/ W holding wire respectively.
" CE " holding wire of two-port RAM both sides connects intranet and extranet main frame Switching Module rambus CE holding wire respectively.
" OE " holding wire of two-port RAM both sides connects intranet and extranet main frame Switching Module rambus OE holding wire respectively.The OE holding wire is represented efficient in operation.
" UB " holding wire of two-port RAM both sides connects intranet and extranet main frame Switching Module rambus UB holding wire respectively.The UB holding wire represents that the byte of transmitting is effectively high-order.
" LB " holding wire of two-port RAM both sides connects intranet and extranet main frame Switching Module rambus LB holding wire respectively.The LB holding wire represents that the byte low level that transmits is effective.
" Busy " holding wire of two-port RAM both sides connects intranet and extranet main frame Switching Module rambus Busy holding wire respectively.The busy holding wire is represented system busy.
" SEM " holding wire of two-port RAM both sides connects intranet and extranet main frame Switching Module rambus SEM holding wire respectively.
" INTL " holding wire of two-port RAM both sides connects intranet and extranet main frame Switching Module rambus INTL holding wire respectively.
The A of two-port RAM both sides 13--A 15Address bus keeps not usefulness, can make system can satisfy the functional requirement of big capacity, dual access memory exchange by its use being expanded the bandwidth and the capacity of two-port RAM chip.
Provide an application example that adopts double contact pin as the control line connected mode below, double contact pin is the connector that two rows pin holes position is arranged, suppose that with one side that double contact pin is installed be the mainboard front, then in the face of the mainboard front, the lower left corner is No. 1 pin among the figure, the connected mode of its pin as shown in Figure 4, address bus A 0--A 12Link to each other data/address bus I/O with 29--41 pin in the double contact pin respectively 0--I/O 15Link to each other with 7--22 pin in the double contact pin respectively, R/ W holding wire, CE holding wire, SEM holding wire, OE holding wire, UB holding wire, LB holding wire, INTL holding wire, Busy holding wire link to each other with 49--56 pin in the double contact pin respectively.
The mode of double contact pin makes can combine closely between mainboard A and mainboard B and the two-port RAM card, has improved the reliability of system.It is of no use that 42,43,44 3 address wires have also been reserved in this design simultaneously, when needing in system, and can be compatible and expand A 13, A 14, A 15Three address wires, the system that makes reach the function of 16 bit address line addressing.
(4) three module connection physically, fastening means
(as Fig. 5) intranet host modules A and outer net host module B are positioned on the chassis backplane by the screw " ◎ " at four angles respectively, mainboard A and mainboard B tighten close being plugged on by double contact pin with two-port RAM respectively, two-port RAM is stuck in by the screw at four angles " ◎ " and is positioned on the chassis backplane, such three modules closely connect, firm is positioned on the chassis backplane, reduced the connector between plate and the plate, make system's antidetonation, anti-loose ability increases substantially, and effectively raises the reliability of system.
(5) in the 1U standard PC case, the supply power mode that duplicate supply heat is equipped with
The utility model in the 1U standard PC case, the supply power mode that adopts duplicate supply heat to be arranged side by side fully.For overlook the schematic diagram that power supply connects from top, the left side is the positive side of product as Fig. 6.Dotted portion is a wall of computer case, power module A, power module B be two identical, but power module independently is connected with power supply backplane by interface slot, forms the power pack that heat each other is equipped with, and is arranged side by side in the 1U cabinet.Because 1U cabinet height is limited, power module A and power module B discharge side by side, so its fixed form is to be screwed on the cabinet by four Spring screwses to realize, be tighten the screws then power supply fix, unscrew screw, spring ejects screw, extracts power supply and changes thereby can hand pinch screw.It is less that such design has solved 1U cabinet volume, and the problem that hot stand-by power source can't be put into makes safe gateway can satisfy some reliability requirements than higher industry and occasion, and the design of 1U cabinet simultaneously makes type attractive in appearance, and can reduce cost.
(6) this money mainboard that adopts homemade CPU to design
The utility model is selected for use homemade CPU to design proprietary mainboard to be used for safe gateway product.
Providing below and selecting homemade Noah's ark Arca-2 chip for use is the application example of system CPU.Homemade Noah's ark is for No. 2 a high-performance towards information terminal apparatus, low-power consumption, high integration SOC chip.Most of function in integrated high-performance core cpu and the PC framework north and south bridge is the ideal solution of network computer and information terminal apparatus.
Noah's ark Arca-2 number is the risc processor chip of non-Intel command system, its core cpu operating frequency is up to 400MHz, maximum power dissipation has only 360 milliwatts, has complete MMU function, the support hardware debugging, Harvard's bus structures, integrated 8K/16K instruction cache and 8K/16K data high-speed buffer memory.In addition, No. 2, Noah's ark is integrated 32 pci bus controllers, support the external memory interface of multiple type of memory, the USB1.1 controller, 10/100Mbps self adaptation ethernet controller meets the Audio Controller of AC97 standard, the serial communication controller, infrared controller, smart card controller, and direct a large amount of peripheral modules such as memory access controller, clock generator, power managed device, interrupt control unit, clock timer, house dog clock, universal I port.Noah's ark is for No. 2 the most competitive high-performance of industry, low-power consumption microprocessor products.
(7) doc dish read-write control and physically unidirectional delivery
Doc (Disk on Chip) dish essence class is in hard disk, for visiting the same transparent operation by similar hard disk with the operating system aspect.
Occurring because doc dish is the form with chip, is to finish by corresponding write line set to writing of its therefore, and for from physically controlling the write capability of doc dish, system realizes the control of writing of doc dish by the wire jumper mode.
System is by the lock of cabinet outside, and twisting is locked into forbids shelves, and then wire jumper does not connect, and write line is unsettled, and doc can not write; Twisting is locked into and allows shelves, and then the bar line connects, and write line is communicated with, and when write signal was come, doc can respond and carry out write operation.
Because the configuration and the program of system all are placed on the doc, therefore when configure machine, twisting is locked into forbids shelves, and system will be according to configuration operation, unless people's physics is arranged near this machine, and revise to dispose and could change running status.And the transmission policy of information between two networks is by the configuration decision, because can not writing of doc dish, be equivalent to physically solidify configuration information, when deploy content requires information can only be during to opposite side, in fact from physically having determined the unidirectional delivery of information from a side network flow.
The power supply that the utility model adopts is the hot stand-by power source of 65W*2, and inside and outside host's machine module CPU is Noah's ark Arca-2, and the mainboard model is proprietary mainboard, in save as HYNIX 128MB or more than, it is M-systems MD2811-D16-V3 DOC TSOP that doc coils; The two-port RAM of data exchange module is IDT IDT70V15S 8K X 16 DUAL-PORT SRAM.

Claims (9)

1, a kind of unidirectional physical insulation network gap is characterized in that: this unidirectional physical insulation network gap adds the 1 hot duplicate supply module that is equipped with by intranet host module, outer net host module, data exchange module and 1 and forms.
2, unidirectional physical insulation network gap as claimed in claim 1 is characterized in that: described data exchange module is connected with outer net host module symmetry with the intranet host module respectively by control line, has constituted the structure that two main frames add the internal memory Switching Module.
3, unidirectional physical insulation network gap as claimed in claim 1 is characterized in that: described intranet host module, outer net host module, data exchange module and 1 add the 1 hot duplicate supply module that is equipped with and are placed in the 1U standard PC case.
4, unidirectional physical insulation network gap as claimed in claim 2, described data exchange module is a core with the two-port RAM chip, two-port RAM connects left and right sides port respectively by rambus; The A of two-port RAM both sides 0-----A 12Address bus, I/O 0-----I/O 15Data/address bus, R/ W holding wire, CE holding wire, OE holding wire, UB holding wire, LB holding wire, Busy holding wire, SEM holding wire, INTL holding wire respectively with the A of intranet and extranet main frame Switching Module rambus 0----A 12Address bus, I/O 0----I/O 15Data/address bus, R/ W holding wire, CE holding wire, OE holding wire, UB holding wire, LB holding wire, Busy holding wire, SEM holding wire, the corresponding connection of INTL holding wire.
5, unidirectional physical insulation network gap as claimed in claim 4 is characterized in that: described inside and outside host's machine module tightens close being plugged on by double contact pin with described data exchange module two-port RAM respectively; 29-41 pin in the double contact pin respectively with address bus A 0--A 12Link to each other, in the double contact pin-the 7-22 pin respectively with data/address bus I/O 0-I/O 15Link to each other, the 49-56 pin in the double contact pin links to each other with R/ W holding wire, CE holding wire, SEM holding wire, OE holding wire, UB holding wire, LB holding wire, INTL holding wire, Busy holding wire respectively.
6, as claim 3 or 5 described unidirectional physical insulation network gaps, it is characterized in that described intranet and extranet host module is positioned on the chassis backplane by the screw at four angles respectively, the intranet and extranet host module tightens close being plugged on by double contact pin with described data exchange module two-port RAM respectively, constitutes an integral body; The screw that two-port RAM is stuck in by four angles is positioned on the chassis backplane.
7, unidirectional physical insulation network gap as claimed in claim 3 is characterized in that: described 1 adds the 1 hot duplicate supply module that is equipped with is emitted in the 1U standard PC case side by side, and its fixed form is to be screwed on the cabinet by four Spring screwses to realize.
8, unidirectional physical insulation network gap as claimed in claim 1 is characterized in that: the CPU of unidirectional physical insulation network gap can select homemade Noah's ark Arca-2 chip for use.
9, unidirectional physical insulation network gap as claimed in claim 3 is characterized in that: by the lock of described cabinet outside, control doc electric board write the pin wire jumper, realize doc is allowed the physics control writing and forbid writing.
CN 200320126703 2003-12-09 2003-12-09 One-way physical-isolating net gate Expired - Fee Related CN2687972Y (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN 200320126703 CN2687972Y (en) 2003-12-09 2003-12-09 One-way physical-isolating net gate

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN 200320126703 CN2687972Y (en) 2003-12-09 2003-12-09 One-way physical-isolating net gate

Publications (1)

Publication Number Publication Date
CN2687972Y true CN2687972Y (en) 2005-03-23

Family

ID=34662183

Family Applications (1)

Application Number Title Priority Date Filing Date
CN 200320126703 Expired - Fee Related CN2687972Y (en) 2003-12-09 2003-12-09 One-way physical-isolating net gate

Country Status (1)

Country Link
CN (1) CN2687972Y (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102202055A (en) * 2011-04-28 2011-09-28 广州汇智通信技术有限公司 Isolation gateway
CN107743117A (en) * 2017-08-22 2018-02-27 北京华电众信技术股份有限公司 Gateway and the method and apparatus of control data transmission

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102202055A (en) * 2011-04-28 2011-09-28 广州汇智通信技术有限公司 Isolation gateway
CN107743117A (en) * 2017-08-22 2018-02-27 北京华电众信技术股份有限公司 Gateway and the method and apparatus of control data transmission

Similar Documents

Publication Publication Date Title
US20210149812A1 (en) Network interface controller with eviction cache
US8745302B2 (en) System and method for high-performance, low-power data center interconnect fabric
US11703933B2 (en) Remote register updates
CN104620234B (en) Reducing latency in a peripheral component interconnect express link
Kant Data center evolution: A tutorial on state of the art, issues, and challenges
TWI480728B (en) Squelch filtration to limit false wakeups
CN103150279B (en) Method allowing host and baseboard management controller to share device
CN102077181A (en) Method and system for generating and delivering inter-processor interrupts in a multi-core processor and in certain shared-memory multi-processor systems
Wang et al. Dnnguard: An elastic heterogeneous dnn accelerator architecture against adversarial attacks
CN1828574A (en) Computer system using serial connect bus, and method for interconnecting a plurality of CPU using serial connect bus
CN102970190B (en) Network traffic monitoring system
US20200374310A1 (en) Protection from network initiated attacks
CN2687972Y (en) One-way physical-isolating net gate
CN2684479Y (en) Security isolation apparatus for unidirectional connection network
CN102223388A (en) Cluster memory
CN100555260C (en) The integrating device of master-controlled bottom layer managing plane and method
CN102650933B (en) Storage system for network communication recording device of digital substation
WO2013107169A1 (en) Redundant array of independent disks (raid) controller and system
Otani et al. Peach: A multicore communication system on chip with PCI Express
CN2582282Y (en) Physical isolation equipment for network safety
CN201699750U (en) Colony memory
CN102541806A (en) Computer
CN208796140U (en) The super fusion all-in-one machine of one kind
CN205193686U (en) Computing equipment
CN210324195U (en) CPCI-E industrial control computer mainboard based on Shenwei 121 processor

Legal Events

Date Code Title Description
C14 Grant of patent or utility model
GR01 Patent grant
C17 Cessation of patent right
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20050323

Termination date: 20100111