KR20000001931A - Lan card - Google Patents

Abstract

PURPOSE: A LAN card is provided to use enough the limited slot of a system and to perfectly block its intrusion in different communication nets. CONSTITUTION: The LAN card comprises: plural Ethernet controllers for controlling to contact to a short-distance communication net with the Ethernet method by exchanging the system and data; plural MAC memories(20)(25) for storing an Ethernet address to the Ethernet controller; plural boot rooms for programs for the operation of the Ethernet controller; plural filter units for filtering the data input and output to communicate with a short-distance communication net in the Ethernet controller.

Description

LAN card

The present invention relates to a local area network (LAN) card, and more particularly, to be connected to only one communication network according to the user's choice by being simultaneously connected to physically different communication networks to allow a limited slot of the system to be used with ease. It is about a LAN card that completely blocks intrusion from Esau.

Recently, the concept of information processing is rapidly changing from the centralized processing type to the distributed type which processes various small and medium computers near the user.

As this distributed process progresses, a PC or workstation can be shared from a host for sharing a printer or modem with several PCs or minicoms or sharing a hard disk to exchange data with a large computer as well as a centralized computer. A network formed by being connected to a communication controller that connects a computer or a peripheral device at a high speed so as to process data transfer between computers directly through a high speed is called a local area network (LAN).

A communication controller for connecting a PC to such a LAN is called a LAN card and inserted into a PC bus slot of a PC.

1 is a block diagram showing a state of connecting and using a plurality of communication networks.

As shown here, there are two separate communication networks (NET1) for security reasons, and internal communication networks (NET2, NET3) and external networks, which are generally configured. User A connected to NET1), user B connected to security-separated communication network NET1 and generally configured internal communication networks NET2 and NET3 at the same time, and user connected to generally configured internal communication networks NET2 and NET3. There is C.

In general, the internal communication networks NET2 and NET3 are connected to the external network through a router.

In the communication network configured as described above, user A is used only in a separate communication network (NET1) for security reasons, and cannot generally use the internal communication network (NET2, NET3) or external communication network. However, user B is able to access both the separate communication network NET1, the internal communication networks NET2 and NET3, and the external communication network connected to the internal communication networks NET2 and NET3. On the other hand, User C can be connected to the internal network NET3 and connected to the Internet or local office through an external communication network via a router. However, for security reasons, it is impossible to connect to the separated communication network NET1.

In the case of the user B above, there is a problem in that a LAN card for accessing each communication network must be installed in the case of using the separate communication network NET1 and the company communication networks NET2 and NET3 at the same time.

In addition, there is a necessity that the separated communication network NET1 cannot be accessed via the user B from the internal communication networks NET2 and NET3 or an external communication network.

The present invention was created to meet the above necessity, an object of the present invention is to install a plurality of ports in one LAN card to be able to simultaneously connect to the physically different communication network and communication with one communication network according to the user's choice It is to provide a LAN card to set the operation of a plurality of ports so that can be performed.

1 is a block diagram showing a state in which a plurality of general communication networks are connected.

Figure 2 is a block diagram showing a LAN card according to the present invention.

3 is a circuit diagram illustrating a port selector of FIG. 2.

4 is a flowchart showing the operation procedure of the LAN card according to the present invention.

-Explanation of symbols for the main parts of the drawings-

10,15: 1st, 2 Ethernet controllers

20,25: 1st, 2MAC memory

30,35: 1st, 2butrom

40,45: 1st, 2nd filter part

50,55: 1st, 2nd electronic switch

60,65: 1st, 2nd inspection lamp

70,75: 1st, 2nd connector

80: oscillator

90: port selector

The present invention for realizing the above object is a plurality of Ethernet controller for exchanging data with the system and controlling to be connected to the local area network by Ethernet, and a plurality of MAC memory for storing the Ethernet addresses for the plurality of Ethernet controller, respectively A plurality of bootroms each having a program for operating the plurality of Ethernet controllers, an oscillator for generating a clock for operating the plurality of Ethernet controllers, a plurality of check lamps for checking the operation of the plurality of Ethernet controllers, and A plurality of filter units for respectively filtering data input and output for communication with the local area network by a plurality of Ethernet controllers, a plurality of connectors through which the data input and output via the plurality of filter units are physically connected to the local area network, and a plurality of filter And each parameter is a plurality of connector is characterized in that parts made of the port selection of the plurality of electronic switches to regulate the transmission of data, complementary to operate according to operation of the plurality of electronic switches to control the plurality of Ethernet controllers.

Referring to the operation of the present invention made as described above are as follows.

The LAN card according to the present invention reads an Ethernet address from each Mac memory by operating a plurality of Ethernet controllers, and loads an operating program from each boot ROM. By operating the port selector to control the operation of the plurality of electronic switches, the data output through each filter unit from the plurality of Ethernet controllers are transmitted only to one of the selected ones. Communication with the communication network connected to the selected connector can be performed.

Since the electronic switch physically blocks the connector and the Ethernet controller, data cannot be transferred between different communication networks connected to a plurality of connectors.

Hereinafter, exemplary embodiments of the present invention will be described with reference to the accompanying drawings. In addition, the present embodiment is not intended to limit the scope of the present invention, but is presented by way of example only and the same parts as in the conventional configuration using the same reference numerals and names.

Figure 2 is a block diagram showing a LAN card as an embodiment according to the present invention.

As shown here, the first and second Ethernet controllers 10 and 15 for exchanging data with the system via a PC bus of the system and controlling the Ethernet connection to the local area network, and the first Ethernet controller 10 Checking the operation of the first Ethernet controller 10 and the first boot memory 30 storing the first MAC memory 20 storing the Ethernet address for the first Ethernet controller 10, and a program for operating the first Ethernet controller 10. Input and output through the first inspection lamp 60 for filtering, the first filter unit 40 for filtering data input and output for communication with the local area network by the first Ethernet controller 10, and the first filter unit 40. A first electronic switch 50 for intermittent data transmission via a first connector 70 physically connected to a local area network, a first filter unit 40, and a first connector 70; Ethernet Ad to Second Ethernet Controller 15 A second MAC memory 25 for storing a register, a second boot 35 for storing a program for operating the second Ethernet controller 15, and a second for checking the operation of the second Ethernet controller 15. The check lamp 65, the second filter unit 45 for filtering the data input and output for communication with the local area network in the second Ethernet controller 15, and the data input and output via the second filter unit 45 A second electronic switch 55 physically connected to a local area network, a second electronic switch 55 intervening between the second filter unit 45 and the second connector 75 to intercept data transmission, The oscillator 80 generates a clock for the operation of the two Ethernet controllers 10 and 15, and the first and second Ethernet switches 10 and 15 operate the first and second electronic switches 50 and 55. It consists of a port selection unit 90 to operate complementarily under the control of.

FIG. 3 is a circuit diagram illustrating the port selector, the first and second electronic switches, the first and second filter parts, and the first and second connector parts of FIG. 2.

As shown here, when an output is generated from the first Ethernet controller 10 to communicate with a communication network connected to the first connector 70, the JK flip-flop 92 of the port selector 90 is preset. Then, when the Q value becomes "1", the first electronic switch 50 is turned on, while the Q 'becomes "0", the second electronic switch 55 is turned off, and is output from the first Ethernet controller 10. The data is transmitted not only to the first connector 70 through the first filter unit 40 but also to block data from the second Ethernet controller 15 from being transmitted through the second connector 75.

On the other hand, when the output occurs in the second Ethernet controller 15, the JK flip-flop 92 of the port selector 90 is cleared. Therefore, the Q value becomes "0" so that the first electronic switch 50 is turned off and the Q 'becomes "1", so that the second electronic switch 55 is turned on. Therefore, data output from the first Ethernet controller 10 is blocked from being transmitted through the first connector 70, and data output from the second Ethernet controller 15 is transmitted through the second connector 75. Be sure to

The operation of the first and second electronic switches 50 and 55 in the port selection unit 90 is performed according to the output value of the first Ethernet controller 10 or the second Ethernet controller 15 selected by the system without any separate operation. Control on / off.

The operation of the present embodiment made as described above will be described with reference to a flowchart sequentially showing the operation of the LAN card shown in FIG.

When first operated, that is, when there is no output signal in both the first Ethernet controller 10 and the second Ethernet controller 15, the final state value is maintained due to the characteristics of the JK flip-flop 92 of FIG.

After that, the user establishes a port connected to the communication network to be connected (S10). At this time, the set port is compared with the first port (S20). When the set port is the first port, the first electronic switch 50 is turned on in the port selector 90 and the second electronic switch 55 is turned off to operate the first connector according to the operation of the first Ethernet controller 10. Communication with the communication network connected to 70 is performed (S30) (S50).

However, if the selected port is not the first port, the first electronic switch 50 is turned off and the second electronic switch 55 is turned on to operate the second Ethernet controller 15 in accordance with the operation of the second Ethernet controller 15. Communication with the connected communication network is performed (S40) (S50).

When the user wants to connect to another communication network while performing this work, that is, to communicate with the communication network currently connected to the first connector 70 and to communicate with the communication network connected to the second connector 75, the system selected by the user is selected. The 2 Ethernet controller 15 generates a signal for connection with the communication network connected to the second connector 75, and the port is changed by the signal (S60). In this case, when no other communication network is selected, communication with the same communication network is continued (S50). However, if a different communication network is selected, the selected port is returned (S20) so that the communication with another communication network is turned off and the electronic switch connected to the existing communication network is switched on to turn on the electronic switch connected to the communication. To do it.

As described above, the present invention intrudes between different communication networks while simultaneously communicating with different communication networks connected to the plurality of connectors by controlling the operation of the plurality of electronic switches connected to the plurality of connectors by output signals output from the plurality of Ethernet controllers. The advantage is that different networks can be used simultaneously while maintaining security.

Since a plurality of communication networks can be physically connected to one LAN card and used simultaneously, slots of the system can be freed up.

Claims (1)

A plurality of Ethernet controllers for exchanging data with the system and controlling the Ethernet connection to the local area network; A plurality of MAC memories each storing an Ethernet address for a plurality of Ethernet controllers, A plurality of bootroms each having a program for operating the plurality of Ethernet controllers; An oscillator for generating a clock for operation of a plurality of Ethernet controllers, A plurality of check lamps for checking the operation of the plurality of Ethernet controllers, A plurality of filter units respectively filtering input / output data for communicating with a local area network in a plurality of Ethernet controllers; A plurality of connectors to which data input and output via a plurality of filter units are physically connected to a local area network, respectively; A plurality of electronic switches for intermittent data transmission, each of which is mediated by a plurality of filter units and a plurality of connectors; Port selector to operate the plurality of electronic switches complementary to the control of the plurality of Ethernet controller Lan card, characterized in that consisting of.