DE202009005437U1 - Apparatus for physically connecting and physically disconnecting a first data network area and a second data network area - Google Patents

Abstract

Apparatus for physically connecting a first data network area to a second data network area and physically separating the first data network area from the second data network area, comprising:
- a first terminal (101; 201) for connecting the first data network area;
- a second port (102; 202) for connecting the second data network area; and
A switch (103; 203) connected to the first terminal (101; 201) and to the second terminal (102; 202).

Description

The The present invention relates to a physical device Connecting a first data network area to a second one Data network area and physically disconnect the first data network area from the second data network area.

at a data transmission network such as an Ethernet (IEEE 802.3) are computers or other network-enabled devices or Network devices traditionally have special Network cable with the data transmission network connected. In the case of an Ethernet, this is indicated by a computer or a computer Network device an ethernet interface. The Ethernet interface typically has a Registration Jack (RJ) jack, into the one RJ connector (RJ45 8P8C etc) at one end of a network cable (10/100/1000 Base-T) can be plugged. An RJ plug on the the other end of the network cable is usually in a wall-mounted RJ box plugged into the data transmission network connected is.

One local data transmission network like a local area network (LAN) in many cases over one Forwarding device (English: router) with a wide area network (WAN = Wide Area Network) connected to the Internet. In these make contains one Router in general a switch device, the usual has multiple RJ jacks for connecting computers or other network devices and between the connected computers and network devices Local area network forms.

There Computer or other network devices in a data transmission network usually over Network cable constantly with the data transmission network are physically connected and in an average office environment are more than eight hours a day in operation, in particular to Protecting the computers of their operating systems through so-called software firewalls (English: firewalls) and an anti-virus software extended. A software firewall monitors and controls the traffic between a computer and the communications network and thus can be protected against unauthorized access from the data transmission network, for example, a local area network connected to the Internet is to the computer and unauthorized data transfers to the computer and protect from the computer to the communications network. A Anti-virus software should u. a. before installing damaged Protecting computer programs on a computer. Such a faulty one Computer program can both serve the purpose of destroying the Computers themselves, the operating system or data as well as the Remote control of the computer and unauthorized data removal etc. serve.

Also Routers are usually constantly connected to a wide area network such as the Internet. Therefore are similar integrated in the routers so-called hardware firewalls that the Traffic between a local area network, such as a private one Monitor and control the computer network and the wide area network.

One Disadvantage of known firewalls, anti-virus software and Hardware firewalls is that these are usually computers etc., with a data transmission network are connected, only conditionally against unauthorized access and thus Protect attacks can. This is because operating systems for computers and data transfer protocols, such as the Internet Protocol (IP), numerous possibilities a harmful one Manipulation and circumvention of security mechanisms, open.

Even if a computer connected to a data communications network is, is off or in a standby mode (English: Standby) is, there is a danger that the computer over his Network interface with the data transmission network is turned on. For example, with an Ethernet, it is possible to have a computer over Wake on LAN (WOL) data packet to its Ethernet interface.

In Become offices Computer seldom used uninterruptedly by its users and thus additionally monitored. At least during lunch breaks, computers are usually unobserved with a respective data transmission network connected. In such unsupervised periods would to Example, unauthorized access to a computer on a communications network, especially if this is in a performance impairment or an unusual one Operating behavior expresses a user of a computer does not attract attention.

The The object of the present invention is a device to create an extra simple and effective protection of one with a data transmission network connected network device allows.

These The object is achieved by a device according to claim 1.

The idea underlying the present invention is to protect one connected to a data transmission network Network device a simple switch, which allows a secure physical separation between the data transmission network and the network device to provide.

The The invention provides a device for physically connecting a first data network area with a second data network area and physically separating the first data network area from the second Data network area, with a first port for connecting the first one Data network area, a second port for connecting the second data network area and a switch that is connected to the first Connection and connected to the second port.

One Advantage of the invention is that, for example, a user a computer connected to a communications network, with little effort can disconnect such a connection very quickly, when he leaves his computer or in the operation of the computer abnormal deviations from the usual Operation noticed, for example, unauthorized access to the computer.

One Another advantage of the invention is that the device independently from a data transmission network controllable and thus not manipulable.

In the dependent claims find advantageous developments and improvements of specified in claim 1 device.

According to one preferred development of the device of the invention are the first port and / or the second port an ethernet port.

One Advantage of this preferred embodiment of the invention is that at a frequent desired Separating, for example, a computer from a communications network no connectors, such as between RJ sockets and RJ plugs, thereby overstressed and thus a longer one Own life.

According to one Another preferred embodiment of the device of the invention the first connection and / or the second connection are a connection for a wireless network.

According to one Another preferred embodiment of the device of the invention For example, the first data network area is a communications network and the second data network area is a network device.

According to one Another preferred embodiment of the device of the invention is the network device a computer.

According to one Another preferred embodiment of the device of the invention the device has a controller that controls the switch in such a way dependent on by a user using the network device first data network area with the second data network area to connect or the first data network area of the second Disconnect data network area.

One Advantage of this preferred embodiment of the invention is that the user does not have to operate the switch manually, but rather the controller depends on the switch from a use of the network device automatically controls to a connection between the first data network area and the second data network area to create or disconnect.

According to one Another preferred embodiment of the device of the invention the device has a sensor for detecting a usage of the Network device, which is connected to the controller.

According to one Another preferred embodiment of the device of the invention the device further comprises a third terminal for connecting a User input device the network device, which is connected to the sensor, and a fourth connection to the Connect the device on the network device connected to the third port is connected, wherein the controller depends on the switch an operation of the user input device controls.

One Advantage of this preferred embodiment of the invention is that use of a network device, such as a networked computer, found in a simple way is by the actuation a user input device, such as a keyboard or mouse, of the network device becomes.

According to one Another preferred embodiment of the device of the invention the device has a controller that controls the switch in time, around the first data network area of the second data network area in certain periods physically separate.

One Advantage of this preferred embodiment of the invention is that further simplifies the operation of the device, a Automation and even more effective protection can be achieved.

According to one Another preferred embodiment of the device of the invention the switch is an electrical switch.

One Advantage of this preferred embodiment of the invention is that the switch has a clear physical separation, that is one Interruption of the electrical signal, and not just a software-controlled one Separation between, for example, a networked computer and a data communications network allows this disconnection gives access to the computer via the Data transmission network impossible power.

According to one Another preferred embodiment of the device of the invention the switch is an optical switch.

According to one Another preferred embodiment of the device is the device in a network device integrated.

According to one Another preferred embodiment of the device of the invention is the device in a USB hub is integrated.

preferred embodiments The present invention is described below with reference to FIG the attached Drawings closer explained. It demonstrate:

1 partially schematically an embodiment of a device according to the invention;

2 another embodiment of a device according to the invention; and

3 a development of the embodiment of 2 ,

1 16 shows, partially in schematic, an embodiment of an apparatus for physically connecting a first data network area to a second data network area and physically separating the first data network area from the second data network area according to the invention.

Of the first data network area is preferably a local area network (LAN), and the second data network area is preferably a network device such as a Computer, a networkable Camera, a network storage such as a network hard drive, or a network printer, etc. The first data network area is alternatively a wide area network like the internet, and the second one Data network area is alternatively a router with integrated Switch, with the network devices can be connected or a network device.

The device has a housing 100 , a first Registration Jack (RJ) jack 101 (RJ45 8P8C), a second RJ socket 102 and a switch 103 on. The first and second RJ sockets 101 and 102 each have eight (1, 2, ... 8) electrical contacts 104 and 105 , which are all usable for the connection with a 1000 Base-T-Ethernet (IEEE 802.3ab) as well as a 10 Base-T or a 100 Base-T-Ethernet.

A first set of first to fourth electrical wires 106 . 107 . 108 and 109 connects the RJ sockets 101 and 102 directly electrically with each other. The first wire 106 connects the electrical contact with the designation 1 of the first RJ socket 101 with the electrical contact with the designation 1 of the second RJ socket 102 , The second wire 107 connects the electrical contact with the designation 3 of the first RJ socket 101 with the electrical contact with the designation 3 of the second RJ socket 102 , The third wire 108 connects the electrical contact with the designation 5 of the first RJ socket 101 with the electrical contact with the designation 5 of the second RJ socket 102 , And the fourth wire 109 connects the electrical contact with the designation 7 of the first RJ socket 101 with the electrical contact with the designation 7 of the second RJ socket 102 ,

A second set of fifth to eighth electric wires 110 . 111 . 112 and 113 connects the first RJ socket 101 electrically with the switch 103 , The fifth wire 110 connects the electrical contact with the designation 2 of the first RJ socket 101 with a first end of a first switching element 114 of the switch 103 , The sixth wire 111 connects the electrical contact with the designation 4 of the first RJ socket 101 with a first end of a second switching element 115 of the switch 103 , The seventh wire 112 connects the electrical contact with the designation 6 of the first RJ socket 101 with a first end of a third switching element 116 of the switch 103 , And the eighth wire 113 connects the electrical contact with the designation 8 of the first RJ socket 101 with a first end of a fourth switching element 117 of the switch 103 ,

A third set of ninth to twelfth electrical wires 118 . 119 . 120 and 121 connects the second RJ socket 102 electrically with the switch 103 , The ninth wire 118 connects the electrical contact with the designation 2 of the second RJ socket 102 with a second end of the first switching element 114 of the switch 103 , The tenth wire 119 connects the electrical contact with the designation 4 of the second RJ socket 102 with a second end of the second switching element 115 of switch 103 , The eleventh wire 120 connects the electrical contact with the designation 6 of the second RJ socket 102 with a second end of the third switching element 116 of the switch 103 , The twelfth wire 121 connects the electrical contact with the designation 8 of the second RJ socket 102 with a second end of the fourth switching element 117 of the switch 103 ,

The first wire 106 (TD1 + (Transmit Data Plus)) and the fifth wire 110 and ninth wire 118 (RD1 (Receive Data Minus)) form a first wire pair according to the 1000 Base-T standard. The second wire 107 (TD2 + (Transmit Data Plus)) and the seventh wire 112 and eleventh wire 120 (RD2- (Receive Data Minus)) form a second wire pair. The sixth wire 111 and the tenth wire 119 (TD3 + (Transmit Data Plus)) and the third wire 108 (RD3- (Receive Data Minus)) form a third wire pair. And the fourth wire 109 (TD4 + (Transmit Data Plus)) and the eighth wire 113 and twelfth wire 121 (RD4- (Receive Data Minus)) form a fourth wire pair.

The first switching element 114 of the switch 103 is operational to the electrical connection between the fifth wire 110 and the ninth wire 118 (RD1-) and interrupt data transmission in the first wire pair (TD1 + / RD1-). The second switching element 115 of the switch 103 is operational to the electrical connection between the sixth wire 111 and the tenth wire 119 (TD3 +) and interrupt data transmission in the third wire pair (TD3 + / RD3-). The third switching element 116 of the switch 103 is operational to the electrical connection between the seventh wire 112 and the eleventh wire 120 (RD2-) and interrupt data transmission in the second wire pair (TD2 + / RD2-). The fourth switching element 117 of the switch 103 is operational to the electrical connection between the eighth wire 113 and the twelfth wire 121 (RD4-) and interrupt data transmission in the fourth wire pair (TD4 + / RD4-).

The desk 103 is preferably a switch, in which all switching elements 114 . 115 . 116 and 117 can be switched on and off simultaneously, such as a 4-pole switch. In alternative embodiments, the switching elements are 114 . 115 . 116 and 117 individual switches that can be operated separately. In further alternative embodiments, the switch 103 another switching element, such as a relay, etc., which can switch several connections simultaneously or individually.

In alternative embodiments, each other wire of a wire pair is connected to a switching element or other combinations of wires of a wire pair are connected to the respective switching elements. In further alternative embodiments, only the wire pairs are with the switch 103 connected to the interruption, which are used for data transmission in the respective Ethernet standard, for example, 10, 100 or 1000 Base-T. In further alternative embodiments, all wires are between the first RJ socket 101 and the second RJ socket 102 connected to a respective switching element.

The housing 100 Preferably, a housing made of aluminum, steel or other conductive material to shield the device.

For example, during operation of the device, an RJ socket of a local area network is connected via a network cable (10/100/1000 Base-T) to the first RJ socket 101 connected, and the network interface of a computer is via a network cable to the second RJ socket 102 connected. By pressing the switch 103 For example, the computer may be physically disconnected from or physically connected to the local area network, ie, by an actual electrical break.

In another operating case, an RJ socket of a wide area network, such as the Internet, is via a network cable with the first RJ socket 101 and the network interface of a router is via a network cable to the second RJ socket 102 connected. By pressing the switch 103 For example, an entire local area network formed by a switch in the router with attached network devices may be physically disconnected from or connected to the wide area network, ie, by an actual electrical interrupt.

2 shows a further embodiment of a device according to the invention. The device has a first connection 201 for connecting a first data network area, a second port 202 for connecting a second data network area, a switch 203 , a controller 222 and a sensor 223 on. The desk 203 is between the first connection 201 and the second port 202 connected. The control 222 is with the switch 203 connected, and the sensor 223 is with the controller 222 connected.

The desk 203 serves to connect the first connection 201 with the second connection 202 and to disconnect such a connection. The desk 203 is through the controller 222 depending on an event caused by the sensor 223 is detected, controlled. This will be the switch 203 preferably geöff at a detection of the event net to the connection between the first port 201 and the second port 202 to interrupt.

The sensor 223 detects as an event preferably a use of the with the second port 202 connected second data network area, which is for example a computer or another network device. The sensor 223 For example, an infrared sensor, a microphone or similar sensor capable of detecting the presence of a user of the second data network area, such as the user of a computer.

3 shows a development of the embodiment of 2 , The device has compared to the device of 2 in addition a third connection 224 and a fourth connection 225 on. The sensor 223 is here with the controller 222 , the third connection 224 and the fourth connection 225 connected.

At the third port 224 is preferably a user input device 226 , such as a mouse, keyboard, webcam, etc., of the network device, such as a computer. The from the user input device 226 at the third port 224 detected signals are sent to both the fourth port 225 as well as to the sensor 223 passed. Thus, an actuation of the user input device 226 both through the sensor 223 be reported as an event as well as passed on to the network device as a control or input command.

The control 222 In this development of the invention, it is preferably designed such that it does not operate the user input device for a period of time which is longer than a predetermined time, for example 1 minute, 10 minutes or one hour 226 the switch 203 so controls to the first port 201 from the second port 202 to separate.

The desk 203 in 2 and 3 is preferably an electrical switch, such as a rocker switch, rocker switch, rotary switch, relay, etc., which provides physical electrical isolation and connection between the first port 201 and the second port 202 allows.

The first connection 101 and 201 and the second connection 201 and 202 in 1 . 2 and 3 are preferably electrical RJ connectors. In alternative embodiments, the first port is 201 and / or the second port 202 other electrical network connectors. In alternative embodiments, the first port is 201 and / or the second port 202 in each case a connection or an interface, for example an air interface, for a wireless network such as a wireless local area network (WLAN), a mobile radio network such as GSM (Global System for Mobile Communications), UMTS (Universal Mobile Telecommunications System 3GPP) etc.

The third connection 224 and the fourth connection 225 in 3 are preferably USB connectors and are alternatively FireWire (IEEE 1394), RS-232 PS / 2 connectors, etc. In other alternative embodiments of the invention, the third connector 224 and / or the fourth port 225 wireless connections.

The desk 203 in 2 and 3 alternatively is an optical switch, such as a fiber optic switch, a coupler switch, etc., which provides optical isolation and optical connection between the first port 201 and the second port 202 allows. The first connection 201 and the second connection 202 In this case, they are optical connectors such as an optical waveguide connector such as a glass fiber.

In alternative embodiments of the invention, the device has control or control 222 in 2 and 3 is extended by a control that the switch 203 timed and programmable to the switch 203 at certain times to close and open or turn on and off and thus physically connect or physically disconnect the first data network area and the second data network area.

In further alternative embodiments or developments of the invention are in the 1 - 3 shown devices in a network device, such as a computer, or a peripheral device of a network device, such as a USB (= Universal Serial Bus) hub integrated. In further alternative embodiments are in the 1 - 3 shown devices in a network cable, a router or switch, etc. integrated.

Even though the present invention above based on preferred embodiments is described, it is not limited thereto, but on diverse Modifiable manner.

101

first RJ socket

102

second RJ socket

103

switch

104

electrical contacts

105

electrical contacts

106

first wire

107

second wire

108

third wire

109

fourth wire

110

fifth wire

111

sixth wire

112

seventh wire

113

eight wire

114

first switching element

115

second switching element

116

third switching element

117

fourth switching element

118

ninth wire

119

tenth wire

120

eleventh wire

121

twelfth wire

201

first connection

202

second connection

203

switch

222

control

223

sensor

224

third connection

225

fourth connection

226

User input device

Claims (13)

Apparatus for physically connecting a first data network area to a second data network area and physically separating the first data network area from the second data network area, comprising: - a first port ( 101 ; 201 ) for connecting the first data network area; - a second connection ( 102 ; 202 ) for connecting the second data network area; and a switch ( 103 ; 203 ) connected to the first port ( 101 ; 201 ) and with the second connection ( 102 ; 202 ) connected is. Device according to claim 1, characterized in that the first connection ( 101 ; 201 ) and / or the second connection ( 102 ; 202 ) are an Ethernet connection. Device according to claim 1 or 2, characterized in that the first connection ( 101 ; 201 ) and / or the second connection ( 102 ; 202 ) are a connection for a wireless network. Device according to Claim 1, 2 or 3, characterized that the first data network area is a data transmission network and the second data network area is a network device. Device according to claim 4, characterized in that that the network device a computer is. Device according to claim 4 or 5, characterized by a controller ( 222 ), the switch ( 203 ) so as to connect the first data network area to the second data network area or separate the first data network area from the second data network area depending on a user's usage of the network device. Apparatus according to claim 6, characterized by a sensor ( 223 ) for detecting usage of the network device connected to the controller ( 222 ) connected is. Device according to claim 6 or 7, characterized by - a third connection ( 224 ) for connecting a user input device ( 226 ) of the network device connected to the sensor ( 223 ) connected is; and - a fourth port ( 225 ) for connecting the device to the network device connected to the third port ( 224 ), the controller ( 222 ) the switch ( 203 ) depending on an operation of the user input device ( 226 ) controls. Device according to one of the preceding claims, characterized by a controller ( 222 ), the switch ( 103 ; 203 ) in order to physically separate the first data network area from the second data network area during certain periods of time. Device according to one of the preceding claims, characterized in that the switch ( 103 ; 203 ) is an electrical switch. Device according to one of claims 1 to 9, characterized in that the switch ( 203 ) is an optical switch. Device according to one of the preceding claims, characterized in that the device is integrated in a network device is. Device according to one of the preceding claims, characterized characterized in that the device is integrated in a USB hub is.