KR20110088981A - Dual port lan card and computer device capable of supporting dual network - Google Patents

Abstract

PURPOSE: A network converting computer using a dual port Lan card is provided to securely protect an internal data from an external hacking. CONSTITUTION: A first contact point(115) discontinues a connection with both a local network and an external network. A second contact point(117) is connected to a local network. The signal switching switch(113) is connected to one of a selected contact point among a first, a second, or a third contact point. A Lan card control part transmits a switching conversion signal to the signal conversion switch using a Lan card control signal from the Lan card controller.

Description

DUAL PORT LAN CARD AND COMPUTER DEVICE CAPABLE OF SUPPORTING DUAL NETWORK}

The present invention relates to a computer device capable of performing network switching (internal and external network switching) conveniently and safely while reducing time, and enabling network switching with enhanced security using an external storage device.

In general, the communication environment using computers such as the Internet is rapidly growing, and information retrieval, processing, payment, and data transmission through networking by installing an internal networking network (hereinafter, referred to as an “internal network” or an “intranet”) for building an internal system. Doing However, the convenience and cost-saving effect of using this internal network and external network by connecting a single computer increases, but there are many risk factors in terms of stability. If such a networking is a military unit or a nuclear power plant that requires national security, there is concern about hacker intrusion. It means fatal damage. In addition, even if an invasion of a financial institution occurs if the customer's deposits are unfairly withdrawn, this also causes a fatal damage to the computer system and a decrease in reliability of the customer. In order to prevent such a system damage, it is recommended to separate the external network from the internal network and to have two separate computers to use for the internal network and the external network.

For example, a first computer including a monitor, a keyboard, a main body, and a LAN card that uses an internal network (LAN network) to connect the monitor, the keyboard, the main body, and an external network (Internet network). A second computer including a modem is provided to select and use the corresponding computer according to each desired network.

In this case, however, each individual has two computers, and if necessary, selects a computer and installs and uses an application program such as a document writer on each PC, which is expensive and inconvenient to use.

Therefore, in order to solve such inconvenience in use, the conventionally proposed network switching device.

Such network switching device shall not allow data transmission between heterogeneous networks, and for this purpose, it should not be external network (hereinafter referred to as "Internet network" or "external network"). (Hard disk) Access should be prohibited. In addition, it should have a function such as controlling the use of a PC in addition to an authorized user by using a physical lock (key) device.

Recently, a method of physically and securely switching a network using a network switching device or using a SBC (Server Based Computing) operating system has been in the spotlight.

However, the SBC method is weak in security because it is based on a logical method, and the physical method is also called “temporary file, cookie file, Active-X, which are created regardless of user's intention when using applications such as Internet web surfing or document writer. ”(Hereinafter referred to as“ user file ”) is not written to a separate storage device external to the PC, but rather to a storage device such as a HDD inside the PC where the OS (operating system such as Windows or LINUX) is stored. There is a problem that the security is not made thoroughly when switching the network using a network switching device.

In case of physical network conversion by using network conversion converter, dual port LAN card (PCI or USB Type, etc.) is used to easily change and access the internal network external network selectively. In the case of network switching using a network switching device in a PC operated using an OS, the user file record is left in the internal storage device (hard disk) inside the PC where the OS is installed during network switching. The purpose is to enhance the security effect when switching over the network by completely saving and storing the city user files inside and outside the PC. In other words, when the internal network is used, the user file is stored in the internal storage device provided inside the computer, and when the external network is used, the user file is stored in the external storage device provided outside the computer to further increase the security.

In the method of efficiently separating the network at low cost without degrading the performance of the PC, a device is configured in hardware to prevent the internal network / external network from being connected at the same time when the external network / internal network is connected to the LAN card. In addition, when the hacking attempt is attempted from the connected external network, the LAN card timer is activated to physically disconnect both external and internal networks to prevent forced connection and hacking from the outside. .

In addition, it is an object of the present invention to construct a method that can completely protect the internal data from hacking from the outside by separating and storing the user file inside and outside the PC.

The above object of the present invention is a dual port LAN card that is connected to the main board via PCI communication or USB communication to selectively connect the internal network (intranet network) or external network (internet network), not connected to either the internal network or the external network. A signal switching switch that connects to a contact selected from a first contact, a second contact connected to an internal network (intranet network), and a third contact connected to an external network (internet network), and a received LAN card control. A LAN card controller which transmits a switching switch signal to the signal switching switch using a signal, converts data between the signal switching switch and the main board to a PCI or USB method, and converts the LAN card control signal received from the main board. It includes a PCI or USB connection terminal for connecting to the interface processor and the motherboard to transmit to the LAN card control unit Due to the dual-port LAN card as claimed can be achieved.

Another object of the present invention is connected to the main board via PCI or USB communication 1) dual port LAN card for selectively connecting the internal network (intranet network) or external network (internet network), the central processing unit and volatile storage Devices, video cards, 2) motherboards with various external connection terminals on the printed circuit board, 3) input devices such as mice and keyboards, output devices such as monitors and speakers, 4) USB terminals, serial A network switching computer having an external storage device connected to an external connection terminal such as a terminal or a parallel terminal to store data. A dual port LAN card is a first contact or an internal network that disconnects a connection so that neither the internal network nor the external network is connected. A signal switching switch connecting to one of the second contact point connected to the (Intranet network) and the third contact point connected to the external network (Internet network); Is composed of a LAN card controller for transmitting a switching switch signal to the signal switching switch using a LAN card control signal 1) converts the data between the signal switching switch and the motherboard suitable for PCI or USB, and 2) the main And an interface processor for transmitting a LAN card control signal received from the board to the LAN card controller and a PCI or USB connection terminal for connecting to the main board. 3) The main board inputs an external network selection signal from a user. Receiving a network switch, characterized in that for generating a control signal for storing temporary files, cookie files, Active-X generated in the external storage device irrespective of user's intention when using an application such as Internet web surfing or document writer Achieveable by computer.

In the method of efficient network separation at low cost without degrading the performance of the PC, in-house network separation and document security using two PCs currently provide network separation and in-house document security environment, and introduce and maintain a PC. It can reduce the high cost of maintenance, users can easily separate the network by clicking, and can use PC performance (application program such as video and document creator) as it is, and increase energy and work space by using one PC. It is possible to quickly switch from the internal network to the external network, and by selecting the external network / internal network selectively, the internal network / external network is not connected at the same time and the internal / external network is forcibly checked when hacking intention is identified from the external network. It is possible to block hacking by blocking all off and by recording user files in external storage device when accessing external network. Virus and hacked files can not be planted in the storage device has the advantage of excellent security.

1 is a block diagram of a computer device capable of network switching according to an embodiment of the present invention.
FIG. 2 is a block diagram illustrating the operation of a dual port LAN card, an internal storage device, and a user agent residing on a mainboard used in a computer switchable network device of the present invention; FIG.
3 is a flowchart of operating a LAN management resident program.

Hereinafter, the technical spirit of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram of a computer device capable of network switching according to an embodiment of the present invention. The computer device 100 capable of network switching according to the present invention can be disconnected from the network or selectively connected to any one of an internal network (intranet network) and an external network (internet network), and a main board and a PCI card method or a USB method. A dual port LAN card 110, a main board having a central processing unit, a volatile storage device, a video card, and various external connection terminals on a printed circuit board, an input device such as a mouse, a keyboard, a monitor, An output device such as a speaker and the like, and an external storage device connected to an external connection terminal such as a USB terminal, a serial terminal or a parallel terminal to store data.

Although not shown in FIG. 1, the present invention resides in a volatile storage device, such as a cache storage device stored in an internal storage device and executed at the time of computer booting, and included in a central processing unit, or a RAM provided in a main board. While the dual port LAN card 110 is characterized in that it comprises a user agent (USER AGENT) for selecting / controlling the connection mode.

The internal storage device includes an OS (system operating program for operating a system such as Windows) and an application program such as a document writer. Such an application program refers to a program that can be freely used in an intranet environment as a commercial program used by ordinary computer users for free or for free. In addition, a program used when using an internal network (intranet network) and an internal network user logon history file (User File) are recorded.

FIG. 2 is a block diagram illustrating the operation of a dual port LAN card, an internal storage device, and a user agent resident on a main board used in a computer switchable network device of the present invention. The dual port LAN card 110 may include a first LAN port connected to an RJ-45 type for connecting to an intranet mode, a second LAN port connected to an RJ-11 type for connecting to an internet mode, and a signal switching switch 113. ), The LAN card controller 121, the interface processor 111 and the motherboard connection terminal (PCI / USB connection terminal).

If you use RJ-45 type for the port connected to intranet mode and RJ-11 type for the port connected to internet mode, the port may be used differently. Because the user can easily distinguish, it is possible to use different colors or shapes while using the same type of port.

The interface processor 111 is a processor having a small sized volatile storage device and a central processing unit therein, and transmits control signals and data transmitted from a motherboard connection terminal (PCI / USB connection terminal) to the LAN card controller 121. It converts the transfer switch 113 according to each communication protocol and transmits it. The volatile storage device includes a LAN management resident program, and is a circuit block unit that performs control signals and data processing with the main board. The function of the LAN management resident program will be described in more detail with reference to FIG. 3 to be described later. Of course, the data proceeds in two-way communication between the main board and the signal switching switch 113, and the control signal proceeds in one-way communication from the main board to the signal switching switch 113 and the LAN card controller 121. The motherboard connection terminal is usually implemented in a PCI method, but can also be implemented in a USB method.

The LAN card controller 121 is a circuit block unit that issues a switching control command to the signal switching switch 113 according to a control signal transmitted from the interface processor 111 through the user agent. The signal switching switch 113 converts the switching contact according to the control signal transmitted from the LAN card controller 121. The signal switching switch 113 is provided with a first contact 115, a second contact 117, and a third contact 119, the second contact 117 is connected to the first LAN port, and the third contact ( 119 is connected to the second LAN port. The first contact 115 is a contact for disconnecting the communication terminal for both the internal network and the external network.

The user agent is stored in internal storage connected to the motherboard and resides in volatile storage such as RAM or RAM on the motherboard's central processing unit when the computer boots or when the user runs the user agent. Program. The user agent receives an intranet access or internet access command from the user, transmits a corresponding control signal to the dual port LAN card 110, and periodically outputs an 'Alive signal' indicating that the main board is operating normally. When a user is requested to access a third contact point (Internet network), the user file is stored only in the external storage device.

Fig. 3 is a process flow chart handled by a LAN resident program executed in an interface processor of a dual port LAN card. The LAN resident program is an executable code recorded in the LAN card control unit 121, and is executed when the computer is booted or when the LAN card is initialized. The LAN resident program resides in volatile storage in the interface processor 111 and is continuously executed while the computer is running. to be. When the LAN resident program is executed, the timer is set (ST10), and the timer is started (ST20). In the present invention, it is assumed that the timer starts from a certain number and continues to decrease. The LAN resident program determines whether the timer has expired (ST30), and if so, sends a control signal to the LAN card controller to switch the signal switching switch to the first contact point (ST35), and the computer is rebooted or a user agent. The LAN card is initialized using a program so that the LAN card is connected to the first contact point until the internal network and the external network are selected by normal signals, thereby disconnecting the external connection.

If the timer is still valid, it is determined whether an 'Alive signal' is input from the user agent (ST50). If 'Alive signal' is input, reset timer to initial state and start again from ST30. If the 'Alive signal' is not input, the user checks whether the LAN port connection conversion information input by the user agent is input as a LAN port conversion signal from the user agent (ST60). Transfer to the control unit (ST65), reset the timer (ST55), and perform again from step ST30.

In addition, in the present invention, when the signal switching switch of the dual port LAN card is connected to the third contact point (Internet mode), the 'user file' generated by the central processing unit, the video card, or the dual port LAN card of the motherboard is externally stored. It is stored only on the device.

The external storage device according to the present invention performs data transmission with the main board in a parallel connection or a serial connection method, and both a nonvolatile storage device such as a flash storage device and a volatile storage device to increase speed and use life if necessary. It was provided. Intranet access authentication information and files to be reused are stored in the nonvolatile storage device of the external storage device. In the volatile storage device, temporary files that do not require permanent recording in the Internet connection environment are stored.

100: switchable computer device 110: dual port LAN card
111: interface processor 113: signal switching switch
115: first contact 117: second contact
119: third contact point 120: external storage device

Claims (5)

It is a dual port LAN card that is connected to the main board of the computer through PCI communication or USB communication to selectively connect the internal network (intranet network) or external network (internet network).
Connected with a contact selected from a first contact disconnected from both the internal network and the external network, a second contact connected to the internal network (intranet network), and a third contact connected to the external network (internet network). Signal switching switch;
A LAN card controller for transmitting a switching switch signal to the signal switching switch using the received LAN card control signal;
An interface processor for converting data between the signal switching switch and the main board into a PCI or USB method and transmitting a LAN card control signal received from the main board to the LAN card controller; And
Dual port LAN card characterized in that it comprises a PCI or USB connection terminal for connecting to the motherboard.
The method of claim 1,
The interface processor drives a timer that operates for a predetermined time, resets the timer to an initial state when receiving an 'Alive signal' indicating that the motherboard is operating normally, and returns to the first contact point when the timer ends. Dual port LAN card, characterized in that for transmitting the LAN card control signal to change to the LAN card control unit.
Dual port LAN card that connects to main board via PCI communication or USB communication to selectively connect internal network (intranet network) or external network (internet network), central processing unit, volatile storage device, video card and various external connection terminals. Connected to a main board having a printed circuit board, an input device such as a mouse or a keyboard, an output device such as a monitor or a speaker, and an external connection terminal such as a USB terminal, a serial terminal, or a parallel terminal to store data. A network switching computer having an external storage device,
The dual port LAN card is selected from a first contact disconnected so as not to be connected to both the internal network and the external network, a second contact connected to the internal network (intranet network) and a third contact connected to the external network (Internet network). Signal switching switch connected to the contact point of the LAN, LAN card control unit for transmitting a switching switch signal to the signal switching switch using the LAN card control signal received, and data between the signal switching switch and the motherboard suitable for PCI or USB And a PCI processor or a PCI connection terminal connected to the main board and an interface processor for converting the data, and transmitting a LAN card control signal received from the main board to the LAN card controller.
When the main board receives an external network selection signal from the user, the mainboard stores temporary files, cookie files, and Active-X generated in the external storage device regardless of the user's intention when using an application such as Internet web surfing or a document writer. Network switching computer, characterized in that for generating a control signal.
The method of claim 3, wherein
The external storage device performs data transmission with the main board in a parallel connection or a serial connection method, and includes both a nonvolatile storage device such as a flash storage device and a volatile storage device for improving speed and extending service life. Switched computer.
The method of claim 4, wherein
The internal network access authentication information is stored in the nonvolatile storage device of the external storage device, and the user intention is used in the volatile storage device of the external storage device when using an application such as Internet web surfing or a document writer generated when the external network is connected. Network switching computer, characterized in that temporary files, cookie files, and Active-X are stored irrelevant.

Images