KR20160117369A - Power of Ethernet device having a date encryption algorithm - Google Patents

Abstract

The present invention relates to a power over Ethernet (PoE) device having a data encryption algorithm. The PoE device is to minimize load of a conventional CPU by additionally installing an encryption processing device for encrypting data in the PoE device, encrypting the data inputted in the PoE, and outputting the data to the outside. The PoE device comprises: power sourcing equipment (PSE) to supply power to a PoE line; and a powered device (PD) which is coupled with the PoE to receive the power from the PSE. The PoE device additionally includes an encryption data processing unit to encrypt data.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention [0001] The present invention relates to a power-over-

The present invention relates to a power over Ethernet device having a data encryption algorithm, and more particularly to a power over Ethernet device in which an encryption processing device for encrypting data is additionally installed in a power over Ethernet (PoE) device, The present invention relates to a power over Ethernet device having a data encryption algorithm.

This application is a Korean priority application filed by the Korean Patent Application No. 10-2015-0045670 filed on March 31, 2015, the contents of which are incorporated herein by reference.

Power over Ethernet (PoE) is a method of simultaneously supplying data and power using an Ethernet cable. It is used for access points (APs) such as Internet phones, network cameras, and wireless LANs It is used to supply data and power directly. With the POE module, the user can send data and power simultaneously via CAT5 Ethernet cable, one of the twisted-pair cable standards based on the criteria (EIA / TIA568 commercial building wiring) that defines the category of UTP cable.

This not only provides greater flexibility in the location of wireless APs and network equipment installations, but also allows for significant savings in installation costs in most cases.

If POE is configured as above, there is no need to install a separate power cable, so the cost is reduced. In the conventional case, although the POE is installed around the power supply source, Is free.

On the other hand, if a power failure occurs when power is supplied, an uninterruptible system can be constructed through UPS. In case of a device failure, the equipment is automatically reset when the device is overloaded and the cable is disconnected.

1, in the case of a system 400b using PoE, a PoE hub 300 connected to an external network such as the Internet network or an internal intranet is connected to the RJ-45 connector 460 in the system 400b UTP (Unshielded Twisted Pair) cable. The signal line of the output pin of the RJ-45 connector 460 is connected to the internal circuit part 450 through the Ethernet interface part 430 to receive an external input signal, and the RJ- The power supply line among the output pins of the power supply unit 460 is connected to the power supply module 440 via the PoE module 470 to receive power from the internal circuit unit 450.

When PoE is used, the PoE hub 300 and the system 400b are connected to an external network such as the Internet network or a hub (or router) connected to an internal intranet via the UPT cable, And a PoE function for supplying the PoE function.

The operation principle of the conventional Ethernet LAN system is as shown in Figs. 2 and 2B. First, a frame received through the media 23 and 26 conforming to the Ethernet standard is transmitted from the PHY layers 22 and 25 to the upper MAC layers 21 and 24.

A PHY layer 22 such as 10Base7, 10Base5 (Thick), and 10Base2 (Thin) is available for 10 megabits per second (Mbps) Ethernet and 100Base-Tx, 100Base-T4, 100Base- PHY layer 25 is provided.

In the case of 10 Mbps Ethernet, the path through which the data is transmitted from the PHY layer to the MAC layer is an AUI (Attachment Unit Interface). In the case of 100 Mbps Ethernet, the path through which data is transmitted from the PHY layer to the MAC layer is MII (Media Independent Interface) to be.

On the other hand, modern living space has developed from the offline to the ubiquitous world beyond the online world due to the development of computing and network technologies. As the share of network in everyday life becomes bigger and cyber activity increases, the threats and attacks on the network are becoming more complicated, diversified, decentralized, intelligent, elaborated and networked.

Therefore, a variety of network security devices are emerging to prevent, counteract, and prevent risks, threats, accidents, etc., and many network administrators and network service providers are actively reviewing the introduction of such network security devices.

Korean Registered Patent No. 10-1220171 (announcement on January 21, 2013), "Multi-room system based on home Ethernet network and set-top box device for the same"

SUMMARY OF THE INVENTION The present invention has been made to solve the above-mentioned problems, and it is an object of the present invention to provide an encryption processing device in a power over Ethernet device and output the data to the outside in a state in which data input to the power- The present invention has been made to solve the above problems.

A power over Ethernet device having a data encryption algorithm according to an embodiment of the present invention includes a Power Sourcing Equipment (PSE) 100 for supplying power to a PoE (Power over Ethernet) line, and a PoE And a PSE (Coupled PD) 200. The PSE may further include encrypted data processing means 110 for encrypting data.

The cryptographic data processing unit 110 encrypts data for encryption to generate ciphertext, generates random number data, generates a bitstream based on the ciphertext and the random number data, and generates a bitstream generated by the ciphertext time synchronization And a channel change method based on the GSPS time synchronization and the random number value, wherein the time data synchronized with the GS time is used as the source data, and the channel data is preset in the source data A time value is generated by applying a variable condition, and the channel is changed according to the generated time value and the random number value.

Also, the variable condition causes the time value to be generated by adding or subtracting a predetermined unit time to the source data, and the unit time used in the variable condition is data of a variable function that can be changed through a user , The cryptographic data processing means 110 transmits the random number data to the cryptographic data processing means 110. The cryptographic data processing means 110 processes the random number data at a predetermined time period in which the user can be set and when the limit size of the cumulative method of the bitstream to be transmitted exceeds a predetermined size, May generate a new random number data differently from the previously generated random number data, and use the generated random number data to generate the bit stream.

As described above, according to the present invention, an encryption processing device is additionally provided in a power-over-Ethernet device, and the data input to the power-over-Ethernet device is encrypted and output to the outside, thereby minimizing the load of the conventional CPU .

1 is a block diagram of a conventional Ethernet LAN system.
FIGS. 2A and 2B are diagrams illustrating the operation principle of a conventional Ethernet LAN system.
3 is a block diagram of an Ethernet LAN system according to the present invention;

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Reference will now be made in detail to the embodiments of the present invention, examples of which are illustrated in the accompanying drawings. These embodiments are described in sufficient detail to enable those skilled in the art to practice the invention. It should be understood that the various embodiments of the present invention are different, but need not be mutually exclusive. For example, certain features, structures, and characteristics described herein may be implemented in other embodiments without departing from the spirit and scope of the invention in connection with one embodiment. It is also to be understood that the position or arrangement of the individual components in each described embodiment may be varied without departing from the spirit and scope of the present invention.

The following detailed description is, therefore, not to be taken in a limiting sense, and the scope of the present invention is to be limited only by the appended claims, along with the full scope of equivalents to which the claims are entitled, if properly explained. In the drawings, like reference numerals refer to the same or similar functions throughout the several views.

While the present invention has been described in connection with what is presently considered to be the most practical and preferred embodiment, it is to be understood that the invention is not limited to the disclosed embodiments. Also, in certain cases, there may be a term selected arbitrarily by the applicant, in which case the meaning thereof will be described in detail in the description of the corresponding invention. Therefore, the term used in the present invention should be defined based on the meaning of the term, not on the name of a simple term, but on the entire contents of the present invention.

Whenever an element is referred to as " including " an element throughout the description, it is to be understood that the element may include other elements as well, without departing from the other elements unless specifically stated otherwise. In addition, the term " "... Module " or the like means a unit for processing at least one function or operation, which may be implemented in hardware or software, or a combination of hardware and software.

A power over Ethernet device having a data encryption algorithm according to an embodiment of the present invention will be described with reference to FIG.

3 is a configuration diagram of an Ethernet LAN system of the present invention.

As shown, a power over Ethernet device having a data encryption algorithm according to an embodiment of the present invention includes a PoE power supply (PSE) 100 and a PoE power supply And a network device (PD) 200 in which data communication is performed.

At this time, the present invention is characterized in that a data encryption processing means 110 for enciphering processing is additionally provided in the PoE system, the data is encrypted using the encryption processing means, There is a characteristic that it can relieve the load.

That is, the PoE power supply 100 of the present invention is manufactured by additionally mounting the data encryption processing unit 110 so that when the data is output simultaneously with the power input, the PoE power supply 100 outputs the data in a state of encrypting the data in advance , Since encryption is performed in the self-encryption processing CPU circuit unit, it is not necessary to separately encrypt data from other CPUs, thereby enabling more flexible data communication.

The PoE power supply 100 is provided with an AC / DC converter 130 for converting an AC power source to a DC power source. The AC / DC converter 130 also includes an Ethernet A switch 120 is provided.

Then, the Ethernet switch connects the data encryption processing means 110 to encrypt the Internet data, and outputs the encrypted data to the network device 200 together with the power source through the interface device 150.

The cryptographic data processing unit 110 encrypts data for encryption to generate ciphertext, generates random number data, generates a bitstream based on the ciphertext and the random number data, and outputs the generated bitstream to the S / It may be a method of changing the channel according to the random number value of the random number data. Here, as for the channel change method based on the time synchronization of the password data processing means and the random number value of the encrypted data processing means, the time data synchronized with the GSPS time is used as the source data, a time value is generated by applying a variable condition preset in the source data, And changing the channel according to the generated time value and the random number value.

In addition, the variable condition causes a time value to be generated by adding or subtracting a preset unit time to time data synchronized with the source time data, which is the source time data, Lt; / RTI >

The cryptographic data processing means 110 may also be configured to process the random number data at a predetermined time period during which the user can be set and when the limit size of the cumulative method of the transmitted bitstream exceeds a preset size and when the number of times of transmission of the bitstream is preset If the number of times is exceeded, the new random number data may be newly generated differently from the previous random number data and used for generating the bit stream.

On the other hand, Ethernet is the most widely used method for local area networking recently. The IEEE 802.3 group, which is the origin of the Ethernet standard, has been further expanded to IEEE 802.3af, which defines the power supply via an Ethernet cable. The IEEE 802.3af standard specifies a Power over Ethernet (PoE) system that includes powering through the unshielded twisted-pair (UTP) line connection from Power Sourcing Equipment (PSE) to the Power Device side of the link. .

For reference, network devices such as an IP phone, a wireless LAN access point, a personal computer, and a web camera required two connections. One is a LAN (LAN) and the other is a power supply system. The PoE system does not require additional connection and line connection to network devices, instead power is supplied via Ethernet cabling for data transmission.

As specified in the IEEE 802.3af standard, the PSE and PD are non-data-intensive, which allows network devices using such common cable connections used for data transmission to form and supply power. Configuration.

A PoE power supply (PSE, 100) is a device that is electrically specified at the physical connection point of a cable connection that powers the link. The PoE power supply 100 is generally associated with an Ethernet switch 120, a router, a hub or other network switching device or a midspan device. The network device (PD) 200 is a device that generates electric power or requests electric power. The network device (PD) 200 may be associated with a digital IP telephone, a wireless network access point, a PDA or notebook computer docking stations, a cell phone charger, and a HVAC thermostat.

The main function of the PoE power supply (PSE, 100) is to find a link for the PD power request, optionally classify the PD, power the link when the PD is detected, And disconnecting the power when it is no longer needed or needed. The network device PD 200 is involved in the PD sensing process by requesting power and providing a sense signal indicating valid or non-valid to indicate that power has been received. The electrical characteristics of the PD sensing signal are measured by the PSE.

Electrical signals can be transmitted through cables in normal, differential or common mode. A normal-mode signal appears between a pair of wires or a single wire that refers to (or passes through) a region, chassis, or shield. The normal-mode signal can be read between two wires in a balanced or unbalanced transmission path. Differential-mode signals appear differentially on a pair of wires in the configuration of an underground cable. The common-mode signal appears identically on both the local common or ground lines of the two-wire transmission system.

In the PoE system, the power between the PSE 100 and the PD 200 is supplied by powering the center-taps of isolated transformers, which are typically used to couple Ethernet data signals to the wire side, Lt; / RTI >

Thus, Ethernet data is transmitted differentially, and power transmission in common mode between Ethernet transmit pairs and receive pairs does not affect Ethernet data transmission in differential mode. The PD sensing and power supply protocol in a PoE system includes an analog method for sensing impedance or a current on a common-mode connection of Ethernet twisted pairs.

The present invention is applicable to a PoE (Power over Ethernet) system including a PSE (Power Sourcing Equipment) 100 for supplying power to a PoE link and a PD (Power Device) 200 connected to a PoE link for receiving power from the PSE Lt; RTI ID = 0.0 > and / or < / RTI >

PSE 100 and PD 200 are provided to support encrypted data communication in a common mode between two pairs of lines in an Ethernet twisted pair cable.

According to another example of the present invention, the protocol for data communication between the PD 200 and the PSE 100 in the PoE system is such that the PD 200 starts data transmission after receiving power from the PSE 100 , And notifying the PDE 200 of the receipt of the data signal by the PSE 100.

For example, the data transmission may be initiated during a low-current period defined by the IEEE 802.3af standard. The duration of the data signal transmitted by the PD may be limited by a defined 250 ms window defined by the IEEE 802.3af standard.

The PD 200 may initiate data communication with the PSE 100 for its identification. For example, the PD 200 may transmit PSE data to determine whether the PSE can supply power higher than the amount of power required by the IEEE 802.3af standard. The PSE 100 may respond with a data transmission confirming that it can supply a higher amount of power.

According to another example of the present invention, a PD interface device may be provided in a PoE system to enable a PD to support data communication with the PSE. The PD interface device includes a variable load for data transmission having logic levels defined by a PD operating current value drawn from the PSE 100 and logic levels of data transmitted by the PSE 100 And a voltage sensing unit for sensing line voltage levels corresponding to the line voltage levels.

According to another example of the present invention, the PSE apparatus 100 is provided with a PSE apparatus 100 that enables support of encrypted data communication with a PD in a PoE system. The PSE device includes a current sensing portion for sensing current values corresponding to a logic level of data received from the PD and being drawn by the PD and a current sensing portion for sensing current levels of respective logic levels And a voltage generator for generating first line voltage and second line voltage levels corresponding to the first line voltage and the second line voltage.

100: PoE power supply
110: Data encryption processing means
120: Ethernet switch
130: AC / DC conversion unit
140, 150: Interface device
200: Network device

Claims (3)

A Power Sourcing Equipment (PSE) 100 for powering a Power over Ethernet (PoE) line; And
A powered device (PD) coupled to the PoE to receive the power from the PSE;
Lt; / RTI >
Wherein the PSE further comprises encryption data processing means (110) for encrypting data. The method according to claim 1,
The cryptographic data processing means 110 encrypts data for encryption to generate ciphertext, generates random number data, generates a bitstream based on the ciphertext and the random number data, and outputs the generated bitstream to the S / Wherein the channel change method according to the present invention is a method for changing a channel according to a random number of a random number data. In the channel change method according to the present invention, time data synchronized with a GS time is used as source data, And a channel is changed according to the generated time value and the generated random number value. 3. The method of claim 2,
Wherein the variable condition causes the time value to be generated by adding or subtracting a predetermined unit time to the source data, wherein the unit time used in the variable condition is variable function data that can be changed through a user,
The cryptographic data processing means 110 processes the random number data at a predetermined time period during which the user can be set and when the limit size of the cumulative method of the bitstream to be transmitted exceeds a predetermined size and the number of times of transmission of the bit stream to be transmitted is Wherein the random number generator generates a new random number data differently from the previous random number generator and generates a new random number data for generating the bit stream when the predetermined number of transmission times is exceeded.

Images