RU216964U1 - Dual circuit computing monoblock - Google Patents

Abstract

The utility model relates to computer technology and can be used in personal computer systems, including automated systems for processing information containing information constituting confidential information. A dual-loop computing monoblock contains a computing unit for processing information of a low level of confidentiality, a computing unit for processing information of a high level of confidentiality, and a device for switching between these computing units with the ability to process information of different levels of confidentiality independently of each other, and the computing units are made with galvanically isolated power circuits and switching computing units through galvanically isolated Ethernet Gigabit and UART interfaces, and the computing unit for processing information of a low level of confidentiality is based on microprocessors that use external interfaces for input/output of information and interaction with the operator: USB port, UART port and HDMI port , while the computing unit for processing information of a high level of confidentiality of the monoblock is implemented in the form of a module of the SMARC standard using external interfaces Cases for input-output of confidential information: 1 Gigabit Ethernet port; 2 Host USB 2.0 ports, 2 UART ports and a RIK / MIK card reader, a high-level confidentiality computing processing unit includes a trusted 64-bit KOMDIV microprocessor, a monoblock tamper control unit, random access memory, a random number generator and a security unit that implements a parry circuit threats of unauthorized access to confidential information, including a real-time clock, a power voltage monitor and a watchdog timer, as well as a monoblock equipped with a power supply circuit that ensures the operation of the security unit from an external power source and from a battery power supply. As a result, an increase in the reliability and compactness of a dual-loop computing monoblock is achieved while reducing power consumption, which ensures secure processing of information with a high level of confidentiality and is developed on the basis of a domestic microprocessor, thereby increasing the security of information flows used in the computing modules of a single monoblock. f-ly, 1 ill.

Description

The utility model relates to computer technology and can be used in personal computer systems, incl. in automated systems for processing information containing information constituting confidential information.

Modern development requires the creation of effective automated systems that allow you to quickly process and transmit information of various levels of confidentiality. At the same time, it is important to use the minimum number of devices while maintaining the level of work safety.

Currently, the solution of the state task of import substitution and the creation of electronic computing tools using the domestic component base and domestic microprocessors is relevant. Particular attention is paid to the creation of automated systems for processing confidential information.

A known system for the simultaneous processing of information of different confidentiality, containing data conversion units of a computer for processing information with a low level of confidentiality and a computer for processing information with a high level of confidentiality, a device for interacting with an operator, a device for accessing shared external media, a user authentication unit and a unit switching control, which is connected through the appropriate power management interfaces with a computer for processing information with a low level of confidentiality and with a computer for processing information with a high level of confidentiality, the data conversion units of which are connected through the corresponding interfaces with galvanic isolation to the switching control unit, which is connected to the device to interact with the operator through the interface to devices for interaction with the operator, to the device for access to shared external media - through the interface to the a device for accessing shared external media, to the user authentication unit - through the interface of the user authentication unit, to the means of passive protection of information from leakage through technical channels and to the means of active protection of information from leakage through technical channels - through the corresponding power management interfaces (see Fig. patent RU 2623903, class. G06F 21/30, G06F 21/62, G06F 12/08, publ. 06/29/2017).

Also known is a monoblock with two independent computers and switchable peripherals, containing a housing in which two computing modules and a device for switching between computing modules of information input-output devices, as well as an information output device in the form of a monitor, each of the computing modules is made independent with the ability to work simultaneously and independently of another and with the ability to connect to the Internet or a corporate network and contains an additional module that allows unidirectional transmission of information from one computing module to another device (see patent RU 139001, class G06F 15 /163, G06F 21/74, published 03/27/2014).

The closest in technical essence to the proposed one is a double-circuit monoblock containing the first and second computing modules, as well as a switching device and an information output unit in the form of a monitor, while the switching device is made in the form of a keyboard, video and mouse switching module containing a microcontroller equipped with memory , the first switching unit, the control input of which is connected to the corresponding output of the microcontroller, the first signal input is configured to be connected to the keyboard, and the first and second signal outputs are configured to be connected to the corresponding inputs of the first and second computing modules, the second switching unit, the control input of which connected to the corresponding output of the microcontroller, the first signal input is configured to be connected to the mouse via the USB input, and the first and second signal outputs are configured to be connected to the corresponding inputs of the first and second computing modules her (see patent RU 2733336, class. G06F 15/163, G06F 1/16, G06F 21/74, publ. 01.10.2020].

The above computing devices are used as a central processing unit of imported microcircuits, which reduces the degree of security of the computing system and the relatively low energy efficiency and significant dimensions, which is associated with the need to use two computers in some cases.

The technical problem to be solved by the present utility model is to overcome the above disadvantages.

The technical result of the utility model is to increase the reliability and compactness of a dual-loop computing monoblock while reducing power consumption, which ensures secure processing of information with a high level of confidentiality and is developed on the basis of a domestic microprocessor, which excludes the possibility of making unauthorized changes to its design by the manufacturer and thereby increasing the security of information flows, used in computing modules of one monoblock.

The specified technical problem is solved, and the technical result is achieved due to the fact that the dual-loop computing monoblock contains a computing unit for processing information of a low level of confidentiality, a computing unit for processing information of a high level of confidentiality, and a device for switching between these computing units with the ability to process information of different level of confidentiality independently of each other, moreover, the computing units are made with galvanically isolated power circuits and carry out switching of the computing units through galvanically isolated Ethernet Gigabit and UART interfaces, and the computing unit for processing information of a low level of confidentiality is based on microprocessors using external interfaces for input-output information and interaction with the operator: USB port, UART port and HDMI port, while the computer processing unit of high-level config monoblock privacy is implemented in the form of a SMARC standard module using external interfaces for input-output of confidential information: 1 Gigabit Ethernet port; 2 Host USB 2.0 ports, 2 UART ports and a RIK / MIK card reader, a high-level confidentiality computing processing unit includes a trusted 64-bit KOMDIV microprocessor, a monoblock tamper control unit, random access memory, a random number generator and a security unit that implements a parry circuit threats of unauthorized access to confidential information, including a real-time clock, a supply voltage monitor and a watchdog timer, as well as a monoblock equipped with a power supply circuit that ensures the operation of the security unit from an external power source and from a battery power supply.

The dual-loop computing monoblock contains a computing unit for processing information of a low level of confidentiality and a computing unit for processing information of a high level of confidentiality, combined in one housing, mounted on one board.

The double-circuit computing monoblock is equipped with a controller for trusted switching of the monitor, keyboard and mouse, separate buttons for turning on / off computing blocks.

The drawing shows a block diagram of a two-loop computing monoblock, which shows its main design features.

A dual-loop computing monoblock contains a computing unit 1 for processing information of a high level of confidentiality, a computing unit 3 for processing information of a low level of confidentiality, and a device for switching between these computing units with the ability to process information of different levels of confidentiality independently of each other..

Computing units 1 and 3 are made with galvanically isolated power circuits 4 and switching computing units through galvanically isolated Ethernet Gigabit 7 and UART 6 interfaces.

The computing unit 3 for processing information of a low level of confidentiality is made on the basis of microprocessors using external interfaces for input-output of information and interaction with the operator: USB port 14, UART port 17, Ethernet Gigabit port 18 and HDMI port 19. Several USB ports can be made. For example, two more USB ports 15 and 16 can be used.

Computing unit 1 for processing information of a high level of confidentiality of the monoblock is implemented in the form of module 8 of the SMARC standard, using external interfaces for input-output of confidential information: 1 Gigabit 13 Ethernet port; 2 Host USB 2.0 ports - 10 and 11, UART 5 port for switching the RIK / MIK 2 card reader and external UART 12 port.

The computing unit 1 for processing information of a high level of confidentiality includes a trusted 64-bit microprocessor KOMDIV, a control unit for opening a monoblock 24, a random access memory 25, a random number generator 23 and a security unit 9 that implements a scheme for parrying threats of unauthorized access to confidential information, including a real-time clock 20, supply voltage monitor 21 and watchdog timer 22, as well as the monoblock is equipped with a power supply circuit 26, which ensures the operation of the safety unit from an external power source 4 and from a battery power supply27.

The dual-loop computing monoblock preferably contains a computing unit 3 for processing information of a low level of confidentiality and a computing unit 1 for processing information of a high level of confidentiality, combined in one housing, mounted on the same board.

The two-loop computing monoblock is preferably equipped with a controller for trusted switching of the monitor, keyboard and mouse, and separate on/off buttons for the computing units.

As devices designed to interact with the operator, a visual information display device is used - a monitor, a text information input device - a keyboard and a pointing input device - a mouse type manipulator. Input devices can be replaced with a touchpad or trackball. The connection of the above devices intended for interaction with the operator is carried out through the computing unit 3 for processing information of a low level of confidentiality.

When using a computing device to simultaneously process information of different confidentiality, the authenticated user is provided with the functionality of simultaneously processing information with different levels of confidentiality using one set of devices by accessing shared external media using computing devices 1 and 3. Transfer of confidential information between computing devices 1 and 3 is carried out by means of software that provides encryption of information.

A dual-circuit computing monoblock is a universal computing device that can be used in various automated systems with a diverse set of devices designed for input-output information (for example: monitor, mouse, keyboard, touchpad, joystick, printer, scanner, projector, audio speakers, headphones, microphone), as well as on devices connected to the Internet or working in corporate networks.

As a general hardware platform software, for example, one of the Linux operating systems can be used.

A dual-loop computing monoblock and basic software for it can be produced on the territory of the Russian Federation for a long period of time: 10 years or more. The necessary upgrades of the basic software and the two-loop computing monoblock can be performed by domestic specialists using promising Russian microprocessors and operating systems.

Claims (3)

1. A dual-loop computing monoblock containing, combined in one monoblock housing, a computing unit for processing information of a low level of confidentiality, a computing unit for processing information of a high level of confidentiality, and a device for switching between these computing units with the ability to process information of different levels of confidentiality independently of each other, moreover, the computing units are made with galvanically isolated power circuits and switching computing units through galvanically isolated interfaces of Ethernet Gigabit and UART ports, and the computing unit for processing information of a low level of confidentiality is based on microprocessors that use external interfaces for input-output of information and interaction with the operator: USB port, port UART, Ethernet Gigabit port and HDMI port, characterized in that the computing unit for processing information of a high level of confidentiality of the monoblock is implemented in the form of a mod SMARC standard using external interfaces for input-output of confidential information: 1 Gigabit Ethernet port; 2 Host USB 2.0 ports, 2 UART ports and a RIK/MIK card reader, with a high-level confidentiality computing processing unit including a trusted 64-bit KOMDIV microprocessor, a monoblock tamper control unit, random access memory, a random number generator and a security unit that implements the scheme fending off threats of unauthorized access to confidential information, including a real-time clock, a supply voltage monitor and a watchdog timer, as well as a monoblock equipped with a power supply circuit that ensures the operation of the security unit from an external power source and from a battery power supply. 2. A dual-circuit computing monoblock according to claim 1, characterized in that the computing unit for processing information of a low level of confidentiality and the computing unit for processing information of a high level of confidentiality, combined in one housing, are mounted on the same board. 3. A two-circuit computing monoblock according to claim 1 or 2, characterized in that the monoblock is equipped with a controller for trusted switching of the monitor, keyboard and mouse, separate on/off buttons for computing units.

Images