WO2008010653A1

WO2008010653A1 - Computer system

Info

Publication number: WO2008010653A1
Application number: PCT/KR2007/003354
Authority: WO
Inventors: Hai-Jin Yun; Jung-Chun Yu
Original assignee: K-Sum C & F Co., Ltd.
Priority date: 2006-07-19
Filing date: 2007-07-11
Publication date: 2008-01-24
Also published as: KR100709385B1

Abstract

The present invention is directed to a computer system that has 2 computer main frames accessing independent networks in the same space, and can operate the 2 computer main frames through only one external input/output (I/O) device, e.g., a mouse, a keyboard, a monitor, and a sound output device (speaker) using a switching device. Accordingly, it is possible to selectively access at least 2 networks using only one computer system and separate the networks from each other, thereby improving user convenience and protecting a major network requiring security.

Description

Description COMPUTER SYSTEM

Technical Field

[1] The present invention relates to a computer system, and more particularly, to a computer system that simultaneously accesses at least 2 networks including a major network requiring security, and prevents external hacking into the major network and virus infection. Background Art

[2] Protection from hacking or virus attacks is very important for networks such as national information systems or company networks, unlike the Internet which is open to the public. For example, when information leaks from a terminal connected to the national defense network of the national information system via the Internet, national security may be significantly threatened. In addition, when terminals connected to the financial management network of the national information system are infected with a virus through the Internet, at worst, vital information may be lost.

[3] To separate and protect the national information system from the Internet, terminals connected to the national information system are separated from those connected to the Internet and separately used. Thus, in order to access the Internet and the national information system, a person must control 2 computers connected to the Internet and the national information system, respectively.

[4] According to such a method, a major network such as the national information system is effectively protected, but users are inconvenienced. For example, a mobile memory must be used to copy information from the Internet to a computer connected to the national information system.

[5] In addition, provision of 2 computers to all users to enable simultaneous access to the national information system and the Internet causes many problems in terms of cost and space. In other words, purchasing 2 computers to access 2 networks is an economic loss, and also the use of 2 computers on a small office desk is a spatial loss.

[6] Therefore, when 2 computer main frames accessing independent networks are incorporated in the space of one computer, it is possible to independently access a first network, e.g., the national information system, and a second network, e.g., the Internet. Thus, a complete security system can be constructed to ensure the protection of a major network.

[7] In addition, business space can be more efficiently used, and user convenience can be improved.

[8] Hereinafter, the terminology "computer" refers to a main frame including, in a case, all devices constituting a computer system except for an external input/output (I/O) device, e.g., a display, a keyboard, a mouse, a speaker, etc.

[9] In addition, the terminology "computer main frame" refers to a constitution including a communication port and a main board on which a power supply, a central processing unit (CPU), a memory, a graphic card, an auxiliary memory unit, such as a hard disk drive (HDD), a compact disk-read only memory (CD-ROM), etc., a network card, a sound card, etc., are mounted. Disclosure of Invention Technical Problem

[10] The present invention is directed to a computer system that has 2 computer main f rames accessing independent networks in the same space, and can operate the 2 computer main frames through only one external input/output (I/O) device, e.g., a mouse, a keyboard, a monitor, and a sound output device (speaker) using a switching device.

[11] The present invention is also directed to a computer system capable of readily copying information between networks while maintaining a complete security system between the networks. Technical Solution

[12] One aspect of the present invention provides a computer system comprising: a first communication port connected to a first network; a first main board capable of accessing the first network through the first communication port; a first memory for storing data processed by the first main board; a second communication port connected to a second network; a second main board capable of accessing the second network through the second communication port and independently booted from the first main board; a second memory for storing data processed by the second main board; a selective auxiliary memory capable of selectively connecting to one of the first and second main boards and capable of being accessed by only the connected one of the first and second main boards; and a switch selectively connecting the selective auxiliary memory to one of the first and second main boards.

[13] The computer system may further comprise a case including the first and second communication ports, the first and second main boards, the selective auxiliary memory, the first and second memories, and the switch.

[14] The computer system may further comprise an input/output (I/O) device including a display, a keyboard and a mouse, and the switch may comprise an I/O device connector connected to the I/O device and selectively connecting the I/O device to one of the first and second main boards.

[15] The computer system may further comprise: a first power supply for supplying power to the first main board and a component connected to the first main board; and a second power supply for supplying power to the second main board and a component connected to the second main board, independently from the first power supply.

[16] The first and second main boards may perform virus checking after storing data in the selective auxiliary memory.

[17] The selective auxiliary memory may be an attachable/detachable mobile storage medium.

[18] Another aspect of the present invention provides a computer system having first and second computer main frames capable of independently accessing different networks in a space of one computer, the computer system comprising: a selective auxiliary memory separately disposed from the first and second computer main frames in the space of the one computer, selectively connected to one of the first and second computer main frames, and capable of being accessed by the connected computer main frame alone; an I/O device including a display, a keyboard and a mouse, connected to the one computer to constitute the computer system, and selectively connected to one of the first and second computer main frames; and a switch disposed in the space of the one computer and selectively connecting the I/O device and the selective auxiliary memory to one of the first and second computer main frames according to a control signal of a user. Here, the first and second computer main frames respectively comprise separately disposed and independently operating power supplies, main boards including a central processing unit (CPU), a memory, a graphic card, an auxiliary memory unit and a network card, and communication ports connected to the different networks. The different networks that the first and second computer main frames access are operated independently from each other. The switch is supplied with power from a power supply disposed in an operating one of the first and second computer main frames or from an additional power supply, and when the control signal of a user is input while the first and second computer main frames independently access the different networks and are in operation, the switch selectively connects the I/O device and the selective auxiliary memory with one of the first and second computer main frames according to the input control signal of a user, while maintaining connections between the first and second computer main frames and the respective networks. The one of the first and second computer main frames that is accessing the selective auxiliary memory performs a verification process such as virus checking when data is stored in the selective auxiliary memory. Brief Description of the Drawings

[19] FIG. 1 is a block diagram of a computer system according to an exemplary embodiment of the present invention. Best Mode for Carrying Out the Invention

[20] Hereinafter, an exemplary embodiment of the present invention will be described in detail. However, the present invention is not limited to the exemplary embodiment disclosed below, but can be implemented in various types. Therefore, the present exemplary embodiment is provided for complete disclosure of the present invention and to fully inform the scope of the present invention to those ordinarily skilled in the art.

[21] FIG. 1 is a block diagram of a computer system according to an exemplary embodiment of the present invention.

[22] Referring to FIG. 1, the computer system of the present invention comprises: a computer 13; a first computer main frame 4 disposed in the space of the computer 13 and including a first communication port 1, a first main board 2 and a first power supply 3; a second computer main frame 8 separately disposed from the first computer main frame 4 in the space of the computer 13 and including a second communication port 5, a second main board 6 and a second power supply 7; a selective auxiliary memory 9 separately disposed from the first and second computer main frames 4 and 8 in the space of the computer 13; a switch 10 disposed in the computer 13; and an input/ output (I/O) device 40 connected to the computer 13.

[23] The first communication port 1 of the first computer main frame 4 is a communication device for accessing a first network 11 and operates in connection with a local area network (LAN) card, etc. Here, the first network 11 denotes a major network, such as a national information system, a company network, and so on.

[24] The first main board 2 has a central processing unit (CPU) (not shown in the drawing), a graphic card (not shown) and a network card (not shown) to connect with the first network 11 via the first communication port 1 and process I/O data, and also includes a memory (not shown) and an auxiliary memory unit (not shown), such as a hard disk drive (HDD), a compact disk-read only memory (CD-ROM), a random access memory (RAM), etc., for storing the processed data.

[25] In addition, the first power supply 3 supplies power to the first communication port

1 and devices associated with data processing of the first main board 2.

[26] Meanwhile, functions and constitutions of the second communication port 5, the second main board 6 and the second power supply 7 in the second computer main frame 8 respectively correspond to those of the first communication port 1, the first main board 2 and the first power supply 3 in the first computer main frame 4. On the other hand, the second network 12 and the first network 11, that is a major network, are operated independently from each other, and the second network 12 is a network that unspecified persons can access at their will, e.g., the Internet, unlike the first network 11. The second power supply 7 supplies power to the second communication port 5 and devices associated with the second main board 6, and thus is independent of the first power supply 3.

[27] In addition, CPUs, graphic cards, network cards, memories and auxiliary memory units are respectively disposed in the first and second main boards 2 and 6, and operate independently from the other main board.

[28] The selective auxiliary memory 9 is accessed by the first and second computer main frames 4 and 8, and may be implemented by a RAM, an electrically erasable and programmable read-only memory (EEPROM), an HDD, and so on. Unlike this exemplary embodiment, the selective auxiliary memory 9 may be also implemented by a mobile storage medium that can be attached to and detached from the outside of the computer 13.

[29] The switch 10 selectively connects the selective auxiliary memory 9 to one of the first and second computer main frames 4 and 8, and performs a switching operation in response to a control signal (not shown) from the first and second computer main frames 4 and 8 or a selection signal input from a user. Since the selective auxiliary memory 9 is connected to one of the first and second computer main frames 4 and 8 according to switching of the switch 10, only one of the first and second computer main frames 4 and 8 connected to the selective auxiliary memory 9 can access the selective auxiliary memory 9. Thus, those skilled in the art can understand that no collision occurs when the first and second computer main frames 4 and 8 simultaneously attempt to access the selective auxiliary memory 9.

[30] In addition, the switch 10 includes an I/O connector (not shown) to which the general-purpose I/O device 40, such as a display, a mouse, a keyboard, etc., is connected, thereby selectively transferring input signals received from the mouse and the keyboard to one of the first and second computer main frames 4 and 8 and selectively transferring one of image signals output from the first and second computer main frames 4 and 8 to the display. Like the selective auxiliary memory 9, a switching operation for the display, mouse and keyboard depends on the control signal from the first and second computer main frames 4 and 8 or the selection signal input from the user. It will be understood that the above-described operation of the switch 10 may be implemented by an additional CPU and controller and designed in a simple logic circuit.

[31] The use of the computer system shown in FIG. 1 will be described in detail below.

[32] When a user wants to use the first network 11, i.e., a major network, he/she turns on the first power supply 3 to operate the first computer main frame 4, thereby activating the first communication port 1 and components mounted on the first main board 2. Likewise, when the user wants to use the second network 12, i.e., the Internet, he/she turns on the second power supply 7 alone to operate the second computer main frame 8, thereby activating the second communication port 5 and components mounted on the second main board 6. Since the power sources of the first and second computer main frames 4 and 8 are separate, a power supply problem in one computer main frame does not have influence on the other computer main frame and can be independently fixed.

[33] Here, those skilled in the art can understand that activating of the CPUs in the main boards 2 and 6 denotes booting of an operating system, such as Windows or Linux. In addition, it will be understood that activating of other components, i.e., memories, auxiliary memory units, etc., included in the main boards 2 and 6 and the communication ports 1 and 5 includes the initialization step of a general booting process. Such a booting operation is well known and thus will not be described in detail here.

[34] When the user wants to use both the major network and the Internet, he/she may turn on both the first and second power supplies 3 and 7, thereby activating network connections of the respective first and second computer main frames 4 and 8. In other words, as described above, according to such a turn-on operation, the booting and initialization operation may be independently performed in the first and second computer main frames 4 and 8.

[35] The user switches the switch 10 by a hardware or software-based method, so that the mouse, the keyboard, the display, and the selective auxiliary memory 9 connected to the switch 10 are connected to one of the first and second computer main frames 4 and 8.

[36] When the switch 10 is switched to connect with the first computer main frame 4, all input signals from the mouse and the keyboard are transferred to the first main board 2 and have influence on the processing operation of the first main board 2, and an image signal output from the first main board 2 is output to and displayed on the display. In addition, the first main board 2 senses the selective auxiliary memory 9 and can access it without any restriction. It will be understood that such an I/O connection is symmetrically formed in the same way when the switch 10 is switched to connect with the second computer main frame 8.

[37] The use of the computer system when predetermined data downloaded from the

Internet is uploaded via a major network will now be described.

[38] A user switches the switch 10 to connect the mouse, the keyboard, the display, and the selective auxiliary memory 9 to the second computer main frame 8, downloads data from the Internet, and stores it in the selective auxiliary memory 9.

[39] Subsequently, the data stored in the selective auxiliary memory 9 is verified for virus check, etc., by the second computer main frame 8.

[40] When the data in the selective auxiliary memory 9 is determined to be safe, the user switches the switch 10 to connect the mouse, the keyboard, the display, and the selective auxiliary memory 9 to the first computer main frame 4. Then, using the mouse or keyboard, the user makes the first main board 2 read the data stored in the selective auxiliary memory 9 and uploads the data to the major network via the first communication port 1, thereby achieving his/her purpose.

[41] Using the selective auxiliary memory 9 as described above, the computer system according to an exemplary embodiment of the present invention can readily exchange information between networks while maintaining a complete security system between the networks, unlike the conventional art.

[42] One thing to note is that the switching operation of the switch 10 can be modified to be independently performed from a plurality of devices connected to the switch 10.

[43] For example, when the mouse, the keyboard, the display, and the selective auxiliary memory 9 are separately switched, it is possible to check an image output from the second main board 6 on the display while the first main board 2 accesses the selective auxiliary memory 9 and reads data. In other words, while the first computer main frame 4 is connected to the selective auxiliary memory 9 and executes simulation software stored in the selective auxiliary memory 9 for a long time, the user can connect the display to the second computer main frame 8 and watch a movie provided by the second computer main frame 8.

[44] In addition, although a power source required for the switch 10 is not shown in FIG.

1, the switch 10 may receive its power from a turned-on one of the first and second power supplies 3 and 7 or an additional third power supply.

[45] According to this exemplary embodiment, the user can simply access each of the separate networks using the one computer 13, and can use data with confidence in the security between networks and the absence of viruses according to the degree of verification for the selective auxiliary memory 9 mediating the data.

[46] The exemplary embodiment describes the case of simultaneously accessing 2 networks, but those skilled in the art can readily implement a computer system simultaneously accessing at least 3 networks within the spirit of the present invention.

[47] While the invention has been shown and described with reference to certain exemplary embodiments thereof, it will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims. Industrial Applicability

[48] According to the present invention, 2 computer main frames capable of independently accessing different networks are incorporated in the space for one computer and operate independently, thereby separating the networks from each other even when the 2 computer main frames are simultaneously connected to the different networks. Consequently, it is possible to protect a major network requiring security. [49] In addition, by using a selective auxiliary memory that is selectively connected to one computer main frame and can be accessed by the connected computer main frame alone, information is readily copied between networks while maintaining a complete security system between the different networks. Consequently, it is possible to improve user convenience.

Claims

[1] A computer system, comprising: a first communication port connected to a first network; a first main board capable of accessing the first network through the first communication port; a first memory for storing data processed by the first main board; a second communication port connected to a second network; a second main board capable of accessing the second network through the second communication port and independently booted from the first main board; a second memory for storing data processed by the second main board; a selective auxiliary memory capable of selectively connecting to one of the first and second main boards and capable of being accessed by only the connected one of the first and second main boards; and a switch selectively connecting the selective auxiliary memory to one of the first and second main boards. [2] The computer system of claim 1, further comprising: a case including the first and second communication ports, the first and second main boards, the selective auxiliary memory, the first and second memories, and the switch. [3] The computer system of claim 2, further comprising: an input/output (I/O) device including a display, a keyboard, and a mouse, wherein the switch comprises an I/O device connector connected to the I/O device to selectively connect the I/O device to one of the first and second main boards. [4] The computer system of any one of claims 1 to 3, further comprising: a first power supply for supplying power to the first main board and a component connected to the first main board; and a second power supply for supplying power to the second main board and a component connected to the second main board, independently from the first power supply. [5] The computer system of claim 4, wherein the first and second main boards perform virus checking after storing data in the selective auxiliary memory. [6] The computer system of any one of claims 1 to 3, wherein the selective auxiliary memory is an attachable/detachable mobile storage medium. [7] The computer system of claim 6, wherein the first and second main boards perform virus checking after storing data in the selective auxiliary memory. [8] A computer system having first and second computer main frames capable of in- dependently accessing different networks in a space of one computer, the computer system comprising: a selective auxiliary memory separately disposed from the first and second computer main frames in the space of the one computer, selectively connected to one of the first and second computer main frames, and capable of being accessed by the connected computer main frame alone; an input/output (I/O) device including a display, a keyboard and a mouse, connected to the one computer to constitute the computer system, and selectively connected to one of the first and second computer main frames; and a switch disposed in the space of the one computer to selectively connect the I/O device and the selective auxiliary memory to one of the first and second computer main frames in response to a control signal of a user, wherein the first and second computer main frames each comprise separately disposed and independently operating power supplies, main boards including a central processing unit (CPU), a memory, a graphic card, an auxiliary memory unit and a network card, and communication ports connected to the different networks; the different networks that the first and second computer main frames access are operated independently from each other; the switch is supplied with power from a power supply disposed in an operating one of the first and second computer main frames or from an additional power supply, and when the control signal of a user is input while the first and second computer main frames independently access the different networks and are in operation, the switch selectively connects the I/O device and the selective auxiliary memory to one of the first and second computer main frames in response to the input control signal of a user while maintaining connections between the first and second computer main frames and the respective networks; and one of the first and second computer main frames accessing the selective auxiliary memory performs a verification process such as virus checking when data is stored in the selective auxiliary memory.