WO2014015514A1

WO2014015514A1 - Cloud terminal

Info

Publication number: WO2014015514A1
Application number: PCT/CN2012/079262
Authority: WO
Inventors: 吴鸿钟; 叶思海
Original assignee: 华为技术有限公司
Priority date: 2012-07-27
Filing date: 2012-07-27
Publication date: 2014-01-30
Also published as: CN104012045A

Abstract

Provided is a cloud terminal. The cloud terminal comprises at least two network interface units and a control unit connected to the at least two network interface units. The at least two network interface units are used to connect a computer network, and each network interface unit corresponds to at least one computer network. The control unit controls one of the at least two network interface units to be in a working state, and controls other network interface units to be a non-working state. Since only one network interface unit is in the working state to establish a communication connection between the network interface unit and a corresponding computer network, information in one physically isolated computer network cannot leak to another physically isolated computer network through electromagnetic radiation, and the another physically isolated computer network cannot invade this physically isolated computer network through electromagnetic radiation, thereby improving safety of the computer network.

Description

TECHNICAL FIELD The present application relates to communication technologies, and in particular, to a cloud terminal. Background technique

Cloud Computing (Cloud Computing) is an emerging business computing model. Cloud computing systems can distribute computing tasks on a large number of computer-based resource pools, namely cloud computing servers, so that various application systems can acquire computing power and storage space as needed. And various software services. The cloud terminal is a desktop thin terminal device that cooperates with the cloud computing overall solution, so it can be called a Thin Client (TC). In a cloud computing system, users' desktops, applications, and data stores are centrally managed by a cloud computing server. Users can access the network through a cloud terminal to obtain the same services as a traditional personal computer (PC). In some highly secure office applications (eg, government or military, etc.), physical isolation of computer networks is generally required. Physical isolation means that there is no physical or direct network connection between any two computer networks. For example, the Internet (also known as an external network or an external network) and the local area network (also known as the internal network or the internal network) do not physically have direct or indirect network connections, which can ensure that the external network cannot penetrate the internal network through the network connection. At the same time, the information of the internal network is prevented from leaking to the external network through the network connection. Therefore, in order to achieve physical isolation of the computer network, users can access different physical computer networks through different cloud terminals to access the cloud computing server to obtain different desktops, applications and data storage.

However, electromagnetic radiation may be generated between multiple cloud terminals, for example, the distance between multiple cloud terminals is relatively close, so that information of the internal network is leaked through electromagnetic radiation to other internal networks or external networks, and external networks or Other internal networks invade the internal network through electromagnetic radiation, resulting in a reduction in the security of the computer network. SUMMARY OF THE INVENTION Aspects of the present application provide a cloud terminal for improving the security of a computer network. An aspect of the present application provides a cloud terminal, including: At least two network interface units for connecting to a computer network, wherein each network interface unit corresponds to at least one computer network;

And a control unit, coupled to the at least two network interface units, configured to control one of the at least two network interface units to be in an active state, and to control other network interface units to be in an inactive state.

The above-mentioned aspect and any possible implementation manner further provide an implementation manner, where the control unit includes:

a first switch, connected to the at least two network interface units, configured to control, according to operation of a user of the cloud terminal, one of the at least two network interface units selected by the operation to be in The working status, as well as controlling other network interface units, are inactive.

The foregoing aspect, and any possible implementation manner, further provide an implementation manner, where the control unit includes a second switch and a first controller, where:

The second switch is configured to send, to the first controller, a first selection instruction for selecting a network interface unit;

The first controller is connected to the second switch, and is connected to the at least two network interface units, and configured to receive the first selection instruction sent by the second switch, according to the first selection The instruction selects one of the at least two network interface units, controls the selected network interface unit to be in an active state, and controls other network interface units to be in an inactive state.

The aspect as described above, and any possible implementation manner, further providing an implementation manner, where the first switch or the second switch included in the control unit is disposed on a motherboard of the cloud terminal, or is disposed on The shell of the cloud terminal is disposed on an input device connected to the cloud terminal, or is disposed on a display device connected to the cloud terminal.

The foregoing aspect and any possible implementation manner further provide an implementation manner, where the at least two network interface units include:

At least two first network interface units, each of said first network interface units corresponding to one of said computer networks; or

At least two second network interface units, each of said second network interface units corresponding to at least two of said computer networks; or

At least one of the first network interface unit and at least one of the second network interface units. The above-mentioned aspect and any possible implementation manner further provide an implementation manner, where the control unit further includes:

a third switch, connected to the second network interface unit, configured to select one of the at least two computer networks selected by the operation according to an operation of a user of the cloud terminal, to When the second network interface unit is in an active state, establishing a communication connection between the second network interface unit and the selected one of the computer networks.

The aspect as described above, and any possible implementation manner, further provide an implementation manner, where the control unit further includes a fourth switch and a second controller, where:

The fourth switch is configured to send, to the second controller, a second selection instruction for selecting a computer network;

The second controller is connected to the fourth switch, and is connected to the second network interface unit, and configured to receive the second selection instruction sent by the fourth switch, according to the second selection instruction A computer network of the at least two of the computer networks is selected such that when the second network interface unit is in an active state, a communication connection between the second network interface unit and the selected one of the computer networks is established.

And the third switch or the fourth switch included in the control unit is disposed on a motherboard of the cloud terminal, or is disposed in the foregoing aspect, and any possible implementation manner. The shell of the cloud terminal is disposed on an input device connected to the cloud terminal, or is disposed on a display device connected to the cloud terminal.

The cloud terminal in the embodiment of the present application includes at least two network interface units and a control unit connected to the at least two network interface units, where the at least two network interface units are used to connect to a computer network. Each of the network interface units corresponds to at least one computer network, and the control unit controls one of the at least two network interface units to be in an active state, and controls other network interface units to be in a non-working state, since only a network interface unit is in operation to establish a communication connection between the network interface unit and a corresponding computer network, and therefore, does not cause a physically isolated computer network to leak through electromagnetic radiation to other physically isolated computer networks, and Other physically isolated computer networks infiltrate the physically isolated computer network by electromagnetic radiation, thereby increasing the security of the computer network. DRAWINGS In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, a brief description of the drawings used in the embodiments or the prior art description will be briefly described below. Obviously, the drawings in the following description It is a certain embodiment of the present application, and other drawings can be obtained according to the drawings without any creative labor for those skilled in the art.

1 is a schematic diagram of a cloud computing system in which different cloud terminals in different technologies are connected to different physically isolated computer networks;

FIG. 2 is a schematic structural diagram of a cloud terminal according to an embodiment of the present disclosure;

FIG. 3 is a schematic structural diagram of a cloud terminal according to another embodiment of the present disclosure;

FIG. 4 is a schematic structural diagram of a cloud terminal according to another embodiment of the present disclosure;

FIG. 5 is a schematic structural diagram of a cloud terminal according to an embodiment of the present disclosure;

FIG. 6 is a schematic structural diagram of a cloud terminal according to another embodiment of the present disclosure;

FIG. 7 is a schematic structural diagram of a cloud terminal according to another embodiment of the present disclosure;

FIG. 8 is a schematic structural diagram of a cloud terminal according to another embodiment of the present disclosure;

FIG. 8B is a schematic structural diagram of a cloud terminal according to another embodiment of the present disclosure;

FIG. 9A is a schematic structural diagram of a cloud terminal according to another embodiment of the present disclosure;

FIG. 9B is a schematic structural diagram of a cloud terminal according to another embodiment of the present disclosure. The technical solutions in the embodiments of the present application are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present application. The embodiments are part of the embodiments of the present application, and not all of the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present application without departing from the inventive scope are the scope of the present invention.

In addition, the term "and/or" in this context is merely an association describing the associated object, indicating that there may be three relationships, for example, A and / or B, which may indicate: A exists separately, and A and B exist simultaneously. There are three cases of B alone. In addition, the character "/" in this article generally indicates that the contextual object is an "or" relationship.

FIG. 1 is a schematic diagram of a cloud computing system applied to a cloud terminal device according to an embodiment of the present invention. As shown in FIG. 1 , a cloud computing system distributes computing tasks on a resource pool formed by a large number of computers, so that various application systems can be obtained as needed. Computing power, storage space, and various software services. In the cloud In the computing system, in order to achieve physical isolation of the computer network, users can access different physically isolated computer networks through different cloud terminals (ie, cloud terminal 1, cloud terminal 2, and cloud terminal 3) (ie, external network, internal network 1 And internal network 2).

FIG. 2 is a schematic structural diagram of a cloud terminal according to an embodiment of the present disclosure, as shown in FIG. 2 . The cloud terminal of this embodiment includes at least two network interface units 22 and a control unit 23.

At least two network interface units 22 are provided for connecting to the computer network, wherein each network interface unit 22 corresponds to at least one computer network.

Wherein any two of the computer networks do not physically have a direct or indirect network connection;

The control unit 23 is connected to the at least two network interface units 22 for controlling one of the at least two network interface units 22 to be in an active state, and controlling other network interface units to be in an inoperative state.

In this embodiment, the network interface unit, which may be a network interface card (NIC), or a network adapter, is one of the most basic components in a computer network, and is a connection terminal (for example, a PC or a cloud terminal, etc.) And a hardware device of the computer network; or a central processing unit that implements the function of the network card, the central processing unit is connected to a network port.

It can be understood that there is no physical or direct network connection between any two of the computer networks, and it can be understood that any two of the computer networks are physically isolated, so the computer network can It is called a physically isolated computer network.

It can be understood that at least two network interface units 22 may be disposed on the main board of the cloud terminal, or may not be disposed on the main board of the cloud terminal, and are disposed in other places, for example, a shell of the cloud terminal, etc. .

Optionally, in a possible implementation manner of this embodiment, as shown in FIG. 3, the control unit 23 may specifically include a switch, that is, a first switch 31, and is connected to the at least two network interface units 22, And controlling, according to the operation of the user of the cloud terminal, one of the at least two network interface units 22 selected by the operation to be in an active state, and controlling other network interface units to be in an inactive state.

Optionally, in a possible implementation manner of this embodiment, as shown in FIG. 4, the control unit 23 may specifically include a second switch 41 and a first controller 42;

The second switch 41 is configured to send to the first controller 42 to select a network interface list. The first selection instruction of the element;

The first controller 42 is connected to the second switch 41, and is connected to the at least two network interface units 22, and configured to receive the first selection command sent by the second switch 41, according to the The first selection instruction selects one of the at least two network interface units 22, controls the selected network interface unit to be in an active state, and controls other network interface units to be in an inactive state.

The first switch 31 or the second switch 41 included in the control unit 23 may be disposed on a main board of the cloud terminal.

When the user is ready to access the desktop through the cloud terminal, it is also necessary to connect an input device (for example, a keyboard, a mouse, etc.) and a display device to operate together with the cloud terminal. Correspondingly, the first switch 31 or the second switch 41 included in the control unit 23 may further be disposed on an input device (for example, a keyboard, a mouse, etc.) connected to the cloud terminal; or may be configured This embodiment does not limit the display device (for example, a display, etc.) to which the cloud terminal is connected.

In addition, the first switch 31 or the second switch 41 included in the control unit 23 may also be disposed on a casing of the cloud terminal.

Optionally, in a possible implementation manner of this embodiment, the first switch 31 or the second switch 41 may be a mechanical switch.

Specifically, the first switch 31 can be a single-pole multi-throw switch, and one of the at least two network interface units 22 can be determined according to the current direction according to the operation of the user of the cloud terminal.

Specifically, the second switch 41 can be a single-pole multi-throw switch, and one of the at least two network interface units 22 can be determined according to the current direction according to the operation of the user of the cloud terminal.

Optionally, in a possible implementation manner of the embodiment, the first switch 31 or the second switch 41 may specifically be a level-triggered switch.

Specifically, the first switch 31 can be a level trigger, and one of the at least two network interface units 22 is determined according to the trigger signal control. For example, the trigger signal may be a different trigger signal to indicate that the first switch 31 is capable of determining a network interface unit corresponding to the trigger signal. For example, the trigger signal may also be the same trigger signal to indicate that the first switch 31 determines the network interface list corresponding to the number of times according to the number of times the received trigger signal is received. Yuan.

Specifically, the second switch 41 can be a level trigger, and the trigger signal is sent to the first controller 42 to enable the first controller 42 to select the at least two network interface units 22 according to the trigger signal. A network interface unit in . For example, the trigger signal can be a different trigger signal to indicate that the first controller 42 can select a network interface unit corresponding to the trigger signal. For another example, the trigger signal may also be the same trigger signal to instruct the first controller 42 to select a network interface unit corresponding to the number of times according to the number of received trigger signals.

Optionally, in a possible implementation manner of the embodiment, the at least two network interface units 22 may include at least two first network interface units 221, and each of the first network interface units 221 corresponds to one Computer Network, as shown in FIG. 5, shows three first network interface units 221 of a first network interface unit A, a first network interface unit B and a first network interface unit C.

For example, taking the cloud terminal shown in FIG. 4 as an example, the first controller 42 receives the first selection instruction sent by the second switch 41 for selecting the first network interface unit A connected to the external network, according to the first selection. The instruction selects the first network interface unit A, controls the first network interface unit A to be in an active state, and controls the first network interface unit B and the first network interface unit C to be in an inoperative state, for example, a power-off state. In this way, the cloud terminal can connect to the external network through the first network interface unit A, access the corresponding cloud computing server, and obtain corresponding desktop, application, and data storage, and other network services provided by the external network.

Optionally, in a possible implementation manner of this embodiment, the at least two network interface units 22 may include at least two second network interface units 222, and each of the second network interface units 222 corresponds to at least two. The computer network, as shown in FIG. 6, shows two second network interface units 222 of a second network interface unit A, a second network interface unit B and a second network interface unit C.

Optionally, in a possible implementation manner of the embodiment, the at least two network interface units 22 may include at least one of the first network interface unit 221 and at least one of the second network interface units 222, as shown in the figure. As shown in Figure 7, a first network interface unit and a second network interface unit are shown.

Further, as shown in FIG. 8A and FIG. 8B, the control unit 23 provided in this embodiment may further include another switch, in addition to the first switch, or the second switch and the first controller. a third switch 81, connected to the second network interface unit 222, for rooting And selecting, according to an operation of a user of the cloud terminal, one of the at least two computer networks selected by the operation, so that when the second network interface unit 222 is in a working state, establishing a location A communication connection between the second network interface unit 222 and the selected one of the computer networks.

Further, as shown in FIG. 9A and FIG. 9B, the control unit 23 provided in this embodiment may further include a fourth switch 91 and, in addition to the first switch, or the second switch and the first controller. a second controller 92; wherein:

The fourth switch 91 is configured to send, to the second controller 92, a second selection instruction for selecting a computer network;

The second controller 92 is connected to the fourth switch 91, and is connected to the second network interface unit, and configured to receive the second selection instruction sent by the fourth switch 91, according to the And selecting, by the second selection instruction, one of the at least two computer networks, such that when the second network interface unit is in an active state, establishing a relationship between the second network interface unit and the selected one of the computer networks Communication connection.

The third switch 81 or the fourth switch 91 included in the control unit 23 may be disposed on a main board of the cloud terminal.

When the user is ready to access the desktop through the cloud terminal, it is also necessary to connect an input device (for example, a keyboard, a mouse, etc.) and a display device to operate together with the cloud terminal. Correspondingly, the third switch 81 or the fourth switch 91 included in the control unit 23 may also be specifically disposed on an input device (eg, a keyboard, a mouse, etc.) connected to the cloud terminal; or may be configured This embodiment does not limit the display device (for example, a display, etc.) to which the cloud terminal is connected.

In addition, the third switch 81 or the fourth switch 91 included in the control unit 23 may also be disposed on a casing of the cloud terminal.

Optionally, in a possible implementation manner of the embodiment, the third switch 81 or the fourth switch 91 may be a mechanical switch.

Specifically, the third switch 81 can be a single-pole multi-throw switch, and one of the at least two computer networks can be determined according to the current direction according to the operation of the user of the cloud terminal.

Specifically, the fourth switch 91 may be a single-pole multi-throw switch, and one of the at least two computer networks may be determined according to a current direction according to a user operation of the cloud terminal. Computer network.

Optionally, in a possible implementation manner of the embodiment, the third switch 81 or the fourth switch 91 may specifically be a level-triggered switch.

Specifically, the third switch 81 can be a level trigger that determines a computer network of the at least two of the computer networks based on the trigger signal control. For example, the trigger signal can be a different trigger signal to indicate that the third switch 81 is capable of determining a network of computers corresponding to the trigger signal. For another example, the trigger signal may also be the same trigger signal to instruct the third switch 81 to determine the computer network corresponding to the number of times according to the number of times the received trigger signal is received.

Specifically, the fourth switch 91 can be a level trigger, and send a trigger signal to the second controller 92, so that the second controller 92 can select the at least two computer networks according to the trigger signal. In a computer network. For example, the trigger signal can be a different trigger signal to indicate that the second controller is capable of selecting a computer network corresponding to the trigger signal. For another example, the trigger signal may also be the same trigger signal to instruct the second controller to select a computer network corresponding to the number of times according to the number of times the received trigger signal is received.

For example, as shown in FIG. 9A, the first controller receives a first selection instruction sent by the second switch for selecting a second network interface unit A connected to the external network or the internal network 1, and selects the first selection instruction according to the first selection instruction. The second network interface unit A controls the second network interface unit A to be in an active state, and controls the second network interface unit B and the second network interface unit C to be in an inoperative state, for example, a power-off state. Since the second network interface unit A is in the working state, the second controller 92 can further receive the second selection instruction sent by the fourth switch 91 for selecting to connect to the external network, and select the second selection instruction according to the second selection instruction. The external network to which the network interface unit A is connected is such that when the second network interface unit A is in an active state, a communication connection between the second network interface unit A and the selected external network is established. In this way, the cloud terminal can connect to the external network through the second network interface unit A, access the corresponding cloud computing server, to obtain the corresponding desktop, application and data storage, and other network services provided by the external network.

For another example, as shown in FIG. 9B, the first controller receives a first selection instruction sent by the second switch for selecting a first network interface unit connected to the external network, and selects the first network interface unit according to the first selection instruction. And controlling the first network interface unit to be in an active state, and controlling the second network interface unit to be in an inactive state, for example, a power off state. In this way, the cloud terminal can connect to the external network through the first network interface unit, and access the corresponding cloud computing server to obtain a corresponding Desktop, application and data storage, as well as other network services provided by external networks.

For another example, as shown in FIG. 9B, the first controller receives a first selection instruction sent by the second switch for selecting a second network interface unit connected to the internal network 1 or the internal network 2, and selecting according to the first selection instruction. The second network interface unit controls the second network interface unit to be in an active state, and controls the first network interface unit to be in an inactive state, for example, a power off state. Since the second network interface unit is in the working state, the second controller 92 can further receive the second selection instruction sent by the fourth switch 91 for selecting the connection internal network 1, and select the second selection instruction according to the second selection instruction. The internal network 1 connected to the network interface unit establishes a communication connection between the second network interface unit and the selected internal network 1 when the second network interface unit is in an active state. In this way, the cloud terminal can connect to the internal network 1 through the second network interface unit to access the corresponding cloud computing server to obtain the corresponding desktop, application and data storage, and other network services provided by the external network.

It should be noted that, in this embodiment, the first switch and the third switch and the fourth switch may be combined or divided. Similarly, the second switch may be combined with or separated from the third switch and the fourth switch.

It should be noted that, in this embodiment, the first controller may be combined or divided with the second controller.

In this embodiment, the cloud terminal includes at least two network interface units and a control unit connected to the at least two network interface units, where the at least two network interface units are used to connect to a computer network, where each network interface unit corresponds to At least one computer network, by the control unit, controlling one of the at least two network interface units to be in an active state, and controlling other network interface units to be in an inoperative state, since only one network interface unit is in a working state To establish a communication connection between the network interface unit and a corresponding computer network, and therefore, does not cause the physically isolated computer network to leak through electromagnetic radiation to other physically isolated computer networks, and other physically isolated computer networks through electromagnetic Radiation invades the physically isolated computer network, thereby increasing the security of the computer network.

In the several embodiments provided by the present application, it should be understood that the disclosed system, apparatus, and method may be implemented in other manners. For example, the device embodiments described above are merely illustrative. For example, the division of the unit is only a logical function division. In actual implementation, there may be another division manner, for example, multiple units or components may be combined or Can be integrated into another system, or some features can be ignored, or not executed. Another point that is shown or discussed between each other The coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interface, device or unit, and may be in an electrical, mechanical or other form.

The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the objectives of the solution of the embodiment.

In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of hardware plus software functional units.

Finally, it should be noted that the above embodiments are only used to explain the technical solutions of the present application, and are not limited thereto; although the present application is described in detail with reference to the foregoing embodiments, it will be understood by those skilled in the art that: The technical solutions described in the foregoing embodiments are modified, or some of the technical features are equivalently replaced.

Claims

claims

1. A cloud terminal, characterized by including:

At least two network interface units, used to connect computer networks, where each network interface unit corresponds to at least one computer network;

A control unit, connected to the at least two network interface units, is used to control one of the at least two network interface units to be in a working state, and to control other network interface units to be in a non-working state.

2. The cloud terminal according to claim 1, wherein the control unit includes: a first switch connected to the at least two network interface units, configured to operate according to the user's operation of the cloud terminal, Control one of the at least two network interface units selected by the operation to be in a working state, and control other network interface units to be in a non-working state.

3. The cloud terminal according to claim 1, characterized in that the control unit includes a second switch and a first controller, wherein:

The second switch is used to send a first selection instruction for selecting a network interface unit to the first controller;

The first controller is connected to the second switch and to the at least two network interface units, and is used to receive the first selection instruction sent by the second switch, according to the first selection The instruction selects one of the at least two network interface units, controls the selected network interface unit to be in a working state, and controls other network interface units to be in a non-working state.

4. The cloud terminal according to claim 2 or 3, characterized in that, the first switch or the second switch included in the control unit is provided on the main board of the cloud terminal, or is provided on the main board of the cloud terminal. On the shell of the cloud terminal, or on the input device connected to the cloud terminal, or on the display device connected to the cloud terminal.

5. The cloud terminal according to any one of claims 1 to 4, characterized in that the at least two network interface units include:

At least two first network interface units, each of the first network interface units corresponds to one of the computer networks; or

At least two second network interface units, each of the second network interface units corresponding to at least two of the computer networks; or At least one first network interface unit and at least one second network interface unit.

6. The cloud terminal according to claim 5, wherein the control unit further includes: a third switch connected to the second network interface unit, configured to operate according to a user's operation of the cloud terminal, Select one of the at least two computer networks selected by the operation, so that when the second network interface unit is in a working state, the second network interface unit and the selected computer network are established communication connections between.

7. The cloud terminal according to claim 5, characterized in that the control unit further includes a fourth switch and a second controller, wherein:

The fourth switch is used to send a second selection instruction for selecting a computer network to the second controller;

The second controller is connected to the fourth switch and to the second network interface unit, and is configured to receive the second selection instruction sent by the fourth switch, according to the second selection instruction One computer network among the at least two computer networks is selected, so that when the second network interface unit is in a working state, a communication connection between the second network interface unit and the selected computer network is established.

8. The cloud terminal according to claim 6 or 7, characterized in that, the third switch or the fourth switch included in the control unit is provided on the main board of the cloud terminal, or is provided on the main board of the cloud terminal. On the shell of the cloud terminal, or on the input device connected to the cloud terminal, or on the display device connected to the cloud terminal.