TWM254016U - An improved network connection device - Google Patents

Description

M254016 IV. Creation Instructions (1) [Technical Field to which the New Type belongs_ This creation is about the improvement of a kind of card not only as a means to activate the network connection = knot device, the user recognizes that it is the main component that needs to pass identity verification And, the user identification card has the encryption function to communicate with the network, and the process of further utilization can only be processed after it is processed. When the negative material is transferred, it must be leaked through encryption. This can prevent the theft of data or [previous technology] In today's science and technology, the relevant technology has gradually become more and more difficult, i B win = li,-Bessun processing device and communication, so the information processing device and widely A Applied in the field of information explosion in one area, at the same time, the capital equipment can keep up with current trends; z strengthen the f information processing device week, and when enterprises strive to improve the competitiveness of capital-raising enterprises At the same time as the safety and control of the peripheral equipment, Xiang and Wen Wang's questioning will also be derived one after another. Management ί :: ϊThe network communication system for external contact 'This system is secure. Nowadays, many small and medium-sized enterprises (SMEs) or individuals work and use Virtual Private Network (VPN) The purpose of the data channel is to pursue the security of the resources and the time of loss. To construct a VPN tunnel, you need to read a lot of private data, such as credentials (CA), Preshare Key (pre-share key), and employee ID ( Account 'identification), Password (secret stone horse) or private, Kushiro (Private Network), etc., so how to make the company's internal data M254016 Fourth, creation instructions (2) not to be stolen or leaked is very important . As shown in Figure 1, it is a schematic diagram of a conventional technology. The network connection device 1A in the figure is mainly composed of a memory device 11A, a transmission device 12A, and a central processing unit 13A. Among them, the memory device 11A can store related basic setting data of the network connection device 丨 4, and can also store the company's confidential data and encryption software, and the encryption software system is to protect the company's confidential data from being stolen or leaked The transmission device 12A includes an external connection device i2iA and an internal connection device 1 22A 'to provide a function of exporting or inputting data between the external network domain 4A and the internal network domain 15 A' and the External connection device 1 2 1 a

Data relay (M odem) to connect to the external network domain 1 4 A; the internal connection device 1 2 2 A is a network port, and 122 internal connection devices can be used; ) 16A, make the internal connection £ 122A have multiple intranet ports, which can be connected to multiple users to form the internal network domain 15A, and can also be used with a wireless interface device 17A and a signal transmitter 18 The purpose of connecting with the user end of the internal network domain 15A; the central processing unit 13A is connected to the memory device 丨 A and the transmission device 2A is electrically connected, and processes the data in the memory device 1A and the transmission device 12A The operation of the network is based on the transmission between the network domains, and the network connection and the device 1 of the conventional technology operate as described below. Eight η 时 When the user wants to read the company confidential data in the memory device 11A or store the second driver ’s confidential data in the memory device 11A, first call "on" and then go through the central processor 13. The hidden device 11A 'if the memory Device 11A has encryption function 4

Creation instructions on page 7 (3) System 'The software will return a packet sequence, such as a turn-on password, and then when its user enters the pass, he will read the system on the memory device m freely.' Make coffee ^ but, Min Zhi a one by one and stored action. Guxian: various manufacturers will add the VPN > plus setting data (6) * σ, the basic port of the road connection device 1A is stored in the product ^ r L7 ίγ ^ r ,, uxiang Set 11A, such as on a flash read-only memory (hereinafter referred to as Flash ROM) or on a flash memory card “+, Γ ^ τΛ, lv 丁 々 々 J σ dagger card (hereinafter referred to as Compact Flash card) , Η i \ η, the prudent asset manager, and finally many companies also make it more private and

Machine 4 I Beco stored in the memory to gain Fan 1] A

& UP ^ I set in the mountain, and the read memory device 11A must be used, & the stored encryption software will give six households wu ^ sub-version, mouth protection function, but because of information storage: 妗 二 哭 二, _ ^ F card or other memory, 'It is very easy for him to get private information m, and it is easy to crack the software with encryption'. Therefore, the conventional technology has been linked to Japan, and the function of confidentiality required by% 刖 has been Increasing deficiencies' Now the manufacturers are trying to find a better way to prevent the theft or leakage of materials. [New content] In view of this, this creation is an improvement of a network connection device, which uses a user identification card with its natural authentication and encryption capabilities to prevent data from being stolen or used. For the purpose of leakage, the main setting data has been stored in the user identification card in advance, which allows users to simply use the user identification card into the network system device, and can easily use the VPN without the complicated professional settings.

Page 8 M254016 IV. Creation Instructions (4) 1 '' --- [Embodiment Mode] As shown in Figure 2 is not a schematic diagram of the creation, the network link 1 (such as a router) is mainly used by a user The identification card 丨 〇, a memory device Η, a transmission device 12 and a central processing unit 丨 3; the user identification card 10 is the main component for starting the network connection device 1; the memory device 11 is storable Relevant basic setting data of the network connection device. The transmission device 12 includes an external connection device 丨 2 j and an internal connection device 1 2 2 ′ to provide an external network domain 4, such as the Internet. And 15 internal network domains such as local area network (LAN) or wide area network (WAN) data output or input function; the central processing unit 丨 3 and the user identification card 10, memory device 丨 丨 and transmission device 丨2 has an electrical connection and processes data between the user identification card 丨 0, the memory device 丨 丨, and the transmission device worker 2. When a user connects to the transmission device 12 through an external network domain 4 or an internal network domain 5 and wants to pass through the network domain, at this time, the user terminal transmits a packet of data to the central processor via the transmission device 12丨 3, and then passed to the user identification card via the central processor j 3 丨 〇, the user identification card 丨 〇 Upon receipt of this packet information = will immediately return another packet information in the original path, in order to request an identity check also The action 'Wait for the client to pass data between domains after the identity verification is passed' to ensure that the user's right to use the Internet to transmit data through the network-connected device is allowed to prevent People interested in stealing information. 6 And the user identification card 10 has a storage function, and because it has enhanced software, the company's confidential information, such as credentials, pre-distribution

M254016 ^, creation instructions (5) Preshare Key, employee account number, password or private network are stored in the user identification card 10, if a user terminal is externally connected to the device through one of the transmission devices 12 1 2 ( (Such as a modem) or an internal connection device 1 22 (such as a network port) to read confidential information in the user identification card 10, the user identification card 10 will return another packet to confirm the use Whether the client can read the confidential information stored in the user identification card 10, but if the number of times of entering an error message exceeds the original setting of the user identification card 10, the user identification card 10 will activate a protection function, which will prevent the Disconnect all paths to read the internal data to prevent any user from reading the confidential data again to achieve the protection function, and the current user identification card 10 cannot copy its internal data yet, thus preventing the data from being stolen Or external; and the internal connection device 1 2 2 is a network port and the internal connection device 122 can be used with a switching hub 16 (Switch Hub), so that the internal connection device 122 has multiple internal connections Port, which can be used to connect more end frames—Local area network (LAN) or a local area network (WAN), to connect network connection device i, or network connection R—Wireless interface device 17 and—Signal network The purpose of the user end of domain 15 is to use the winter team from the back, the internal port p, and if the network two is eliminated, the trouble of laying out the network route. If you have encryption software, you can use the basic functions of dual protection of the device 1 1; the card 1◦ has become more mixed with each other, but if you consider that the network requires many steps, it will be complicated. The full nature of the daughter of Pui Chiu is also progressive. The characteristics of this creation are summarized as follows

Page 10 M254016, creation instructions (6) Network connection devices, users will not be able to enter the domain to perform data transfer actions, and outside hackers will be more unable to invade the local network to steal data, so its confidentiality can be more confidential improve. Z. Because the user identification card itself has a verification function, you can ask for a password. If you enter the password incorrectly one or more times, the user identification card will be locked and cannot be used, so it can prevent being stolen by others. Misappropriation, which in turn increases its security.

3. As the user identification card itself has more encryption function, when the user reads or stores private and confidential data on the user identification card, the above-mentioned actions can only be carried out after the user's identification card has passed. Therefore, The protection of data is more guaranteed. ‘Convenient and easy to make Η 疋’ Not only has been stolen ’, so I ’m referring to this creation according to law. That is to say, the user identification card can store some main setting data in advance. The user only needs to insert the user identification card into the network connection device, and then use the VPN, thus eliminating some complicated professional settings.

Based on 'this creation is provided with an improvement on a network-connected device, it can effectively improve the confidentiality of the data to prevent the company's internal data or leakage, and its use can avoid the complicated and complicated settings. This creation is extremely useful Progressive and in line with the requirements for applying for a new patent, the application was submitted, and the Bureau would like to grant a quasi-patent at an early date. The creation has been described in detail above, but the above is only one of the preferred embodiments, which can only be limited: equal changes in the scope of the creation application and modification of J. The scope of the patent of this creation .

$ 11 pages M254016 Schematic illustrations [Schematic illustrations] Figure 1 is a frame of known technology. Figure 2 is a framework illustration of this creation. [Illustration i. No. U] 1 A Network connection device 1 1 A 1 Jiyi device 12A transmission device 121 A external connection device 122A internal connection device 13A CPU 14A external network domain 15A internal network domain 16A switching hub 17A wireless interface device 18A signal transmission device 1 network system device 10 user identification card 11 1 Jiyi device 12 transmission device 121 external connection device 122 internal connection device 13 central processing unit 14 external network domain 15 internal network domain

Page 12 M254016 Brief Description of Drawings 16 Switching Hub 17 Wireless Interface Device 18 Signal Transmitter

11.1 page 13

Claims (1)

M254016 5 2 4 'Scope of patent application. J The improvement of the network connection device, the device includes the use of two identification cards, "the user identification card is to activate the network connection device and < Device 'The memory device can store the basic setting data of the network connection device; the network wheel f is set, and the transmission device provides the function of outputting or inputting data to and from the external network domain and internal or inter-domain; two central processing units, The central processing unit is connected with the user identification card and the memory card, and processes data between the user identification card, the memory device and the transmission device. • As an improvement of a network connection device described in item i of the patent application scope, the network system device may be a router. • As an improvement of a network connection device described in item i of the scope of patent application, the household identification card is a -SIM card and has the function of providing identity verification and encryption. • As an improvement of a network-connected device described in item i of the patent application scope, the memory element is a flash read-only memory (FUsh r⑽). • An improvement of a network connection device as described in item 1 of the Jingjing patent scope, the memory element is a flash memory card (CF car ^) \ • A network as described in item i of the patent scope The improvement of the connection device, the transmission device includes an external connection device and an internal connection device. 7 ‘Improvement of a network connection device as described in item 6 of the declared patent scope’ 4 The external connection device is a modem that connects to the external network domain Page 14 M254016 5. Application scope of patent application. 8. According to the improvement of a network connection device described in item 6 of the scope of the patent application, the internal connection device is an intranet port to achieve the function of connecting to the internal network domain. 9 · As an improvement of a network connection device described in item 8 of the scope of the patent application, the internal connection device can be matched with a switching hub, so that the network connection device has a plurality of intranet connection ports. 10. The improvement of a network connection device as described in item 6 of the scope of patent application, the internal connection device is a wireless interface device, and is connected to the internal network domain by wireless transmission. 11. According to the improvement of a network connection device described in item 1 of the scope of patent application, the external network domain may be the Internet. 1 2. As an improvement of a network connection device described in item 1 of the scope of patent application, the internal network domain may be a local area network (LAN). 1 3. As an improvement of a network connection device described in item 1 of the scope of patent application, the internal network domain may be a wide area network (WAN). Page 15