WO2022227309A1 - 机械隔离式数据传输装置 - Google Patents

机械隔离式数据传输装置 Download PDF

Info

Publication number
WO2022227309A1
WO2022227309A1 PCT/CN2021/108732 CN2021108732W WO2022227309A1 WO 2022227309 A1 WO2022227309 A1 WO 2022227309A1 CN 2021108732 W CN2021108732 W CN 2021108732W WO 2022227309 A1 WO2022227309 A1 WO 2022227309A1
Authority
WO
WIPO (PCT)
Prior art keywords
module
data
head
control
interface unit
Prior art date
Application number
PCT/CN2021/108732
Other languages
English (en)
French (fr)
Inventor
陈森伟
李伟青
周永强
Original Assignee
广东电网有限责任公司梅州供电局
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 广东电网有限责任公司梅州供电局 filed Critical 广东电网有限责任公司梅州供电局
Publication of WO2022227309A1 publication Critical patent/WO2022227309A1/zh

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/78—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure storage of data
    • G06F21/80—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure storage of data in storage media based on magnetic or optical technology, e.g. disks with sectors

Definitions

  • the embodiments of the present application relate to data transmission technologies, for example, to a mechanically isolated data transmission device.
  • the present application provides a mechanically isolated data transmission device to improve the security of data transmission.
  • the mechanically isolated data transmission device includes: a first interface unit, a first control unit, a first magnetic head module, a magnetic medium, a transmission structure, and a second magnetic head a module, a second control unit and a second interface unit;
  • the first interface unit and the second interface unit are configured such that one of them serves as an input interface and the other serves as an output interface;
  • the first control unit is configured to control the first magnetic head module to be a writing module when the first interface unit is used as an input interface, and to control the writing module to write the data received by the first interface unit into the writing module.
  • the first magnetic head module is controlled as a read module, and the read module is controlled to read data from the magnetic medium and send it to the first interface unit;
  • the second control unit is configured to control the second magnetic head module to be a writing module when the second interface unit is used as an input interface, and to control the writing module to write the data received by the second interface unit into the writing module.
  • the second magnetic head module is controlled as a read module, and the read module is controlled to read data from the magnetic medium and send it to the second interface unit;
  • the transmission structure is used for driving the magnetic medium so as to transmit the part of the magnetic medium after the magnetic data written by the writing module in the magnetic medium from the writing module to the reading module.
  • the mechanically isolated data transmission device further includes:
  • a wipe head module wherein the wipe head is slidably connected to the magnetic medium, and the wipe head module is used to erase the data in the part of the magnetic medium after the data is read by the read module;
  • the transmission structure is a runner, the magnetic medium is a magnetic disk, and the magnetic disk is arranged on the runner.
  • the first control unit includes: a first data processing module, a first data writing control module and a first data reading control module;
  • the first magnetic head module includes a first write head and a first read head
  • the first data processing module is used to control the first data writing control module to work when the first interface unit is used as an input interface, and the first data writing control module is used to control the first writing head writing the data received by the first interface unit into the magnetic medium; the first data processing module is further configured to control the first data reading control module to work when the first interface unit is used as an output interface, The first data read control module is used to control the first read head to read data from the magnetic medium and send the data to the first interface unit.
  • the mechanically isolated data transmission device further includes:
  • the first data processing module is further configured to perform logical judgment on the preset content in the data read by the first data reading control module when the first interface unit is used as an output interface, and when the judgment result is inconsistent. Generate an initialization signal when the preset conditions are met;
  • the logic control unit is configured to initialize data in the second control unit according to the initialization signal.
  • the preset content includes at least one of accuracy, size and repeatability.
  • the first magnetic read head is configured to only be able to read character strings in a first preset format in the magnetic medium.
  • the second control unit includes: a second data processing module, a second data writing control module and a second data reading control module;
  • the second magnetic head module includes a second write head and a second read head
  • the second data processing module is used to control the second data writing control module to work when the second interface unit is used as an input interface, and the second data writing control module is used to control the second writing head writing the data received by the second interface unit into the magnetic medium; the second data processing module is further configured to control the second data reading control module to work when the second interface unit is used as an output interface, The second data read control module is used for controlling the second read head to read data from the magnetic medium and send the data to the second interface unit.
  • the erasing head module includes a first erasing head and a second erasing head, and along the rotation direction of the magnetic disk, the first writing head, the second reading head, the first erasing head, The second write head, the first read head and the second wipe head are arranged in sequence.
  • the second write head is configured to only write a character string in a second preset format to the magnetic medium.
  • the first interface unit is a USB port or a network port
  • the second interface unit is a USB port or a network port.
  • the mechanically isolated data transmission device includes a first interface unit, a first control unit, a first magnetic head module, a magnetic medium, a transmission structure, a second magnetic head module, a second control unit and the second interface unit; the first interface unit and the second interface unit are configured so that one of them is used as the input interface, and the other is used as the output interface; the first control unit is configured to control the first magnetic head module as the input interface when the first interface unit is used as the input interface
  • the writing module controls the writing module to write the data received by the first interface unit into the magnetic medium, controls the first magnetic head module as the reading module when the first interface unit is used as the output interface, and controls the reading module to read from the magnetic medium Get the data and send it to the first interface unit;
  • the second control unit is configured to control the second magnetic head module as the writing module when the second interface unit is used as the input interface, and control the writing module to write the data received by the second interface unit When the second interface unit is used as the output interface, the second magnetic
  • the data transmission is realized mechanically, and the data between the input interface and the output interface is isolated, which ensures that no data link is generated between the data input and output, and greatly improves the security of data transmission.
  • the mechanical transmission structure because of the mechanical transmission structure, there is no need to configure network policies, and people without relevant network expertise can plug and play, which is extremely convenient to use.
  • FIG. 1 is a schematic structural diagram of a mechanically isolated data transmission device according to an embodiment of the present application.
  • FIG. 2 is a schematic structural diagram of still another mechanically isolated data transmission device according to an embodiment of the present application.
  • the mechanically isolated data transmission device includes: a first interface unit 11 , a first control unit 12 , and a first magnetic head module 13.
  • the first control unit 12 is configured to control the first magnetic head module 13 as a writing module when the first interface unit 11 is used as an input interface, and control the writing module to write the data received by the first interface unit 11 into the magnetic medium, when the first interface unit 11 is used as the output interface, the first magnetic head module 13 is controlled as a read module, and the read module is controlled to read data from the magnetic medium 14 and send it to the first interface unit 11;
  • the second control unit 17 is configured In order to control the second magnetic head module 16 as the writing module when the second interface unit 18 is used as the input interface, and control the writing module to write the data received by the second interface unit 18 into the magnetic medium 14, the second interface unit 18 is used as the writing module.
  • the second magnetic head module 16 When outputting the interface, the second magnetic head module 16 is controlled as a reading module, and the reading module is controlled to read data from the magnetic medium 14 and send it to the second interface unit 18; The part after the magnetic data written by the writing module is transferred from the writing module to the reading module.
  • the mechanically isolated data transmission device can transmit data from the input interface to the output interface, wherein, when the first interface unit 11 is used as the input interface, the second interface unit 18 is used as the output interface; and when the first interface unit 11 is used as the output interface When the interface is used, the second interface unit 18 is used as an input interface; the first interface unit 11 can be used as both an input interface and an output interface, and the second interface unit 18 can also be used as an input interface and an output interface.
  • the interface unit 11 and the second interface unit 18 are the same type of interface, and the directionality of the interface does not need to be considered during use.
  • the second interface unit 18 is connected to the internal equipment, the first interface unit 11 can be connected to the internal equipment, and the second interface unit 18 can be connected to the external equipment, which is more convenient to use; the first interface unit 11 and the Which of the second interface unit 18 is used as the input interface can be determined according to the data transmission protocol. For example, the voltage of each port of the first interface unit 11 when data is input is different from the voltage when data is output. Based on this, it can be determined that the first interface unit is the input interface. The interface is also the output interface.
  • the first control unit 12 and the second control unit 17 control the corresponding magnetic head modules to work;
  • the input unit 18 is the output interface, then the first control unit 12 controls the first magnetic head module 13 to be the writing module, the second control unit 17 controls the second magnetic head module 16 to be the reading module, and the first control unit 12 according to
  • the data received in the first interface unit 11 controls the writing module to write data into the magnetic medium 14, and the transmission structure 15 starts to work at the same time, and the part of the written data in the magnetic medium 14 is transmitted to the reading module, and the reading module reads
  • the data in the magnetic medium 14, and the second control unit 17 sends the data read by the reading module to the second interface unit 18 for output, thereby realizing the transmission of data from the input interface to the output interface; if the second interface unit 18 is determined is an input interface, and the first input unit 11 is an output interface.
  • the second control unit 17 controls the second magnetic head module 16 to be a writing module
  • the first control unit 12 controls the first magnetic head module 13 to be a reading module.
  • the second control unit 17 controls the writing module to write data to the magnetic medium 14 according to the data received in the second interface unit 18, and at the same time the transmission structure 15 starts to work, and transmits the part of the written data in the magnetic medium 14 to the reading module where, the reading module reads the data in the magnetic medium 14, and the first control unit 12 sends the data read by the reading module to the first interface unit 11 for output, thereby realizing the transmission of data from the input interface to the output interface;
  • data transmission is realized by mechanical means, and the data between the input interface and the output interface is isolated, which ensures that no data link is generated between the data input and output, and greatly improves the security of data transmission. .
  • the mechanical transmission structure there is no need to configure network policies, and people without relevant network expertise can plug and play, which is extremely convenient to use.
  • the adopted mechanically isolated data transmission device includes a first interface unit, a first control unit, a first magnetic head module, a magnetic medium, a transmission structure, a second magnetic head module, a second control unit, and a first magnetic head module.
  • the first interface unit and the second interface unit are configured so that one of them is used as an input interface and the other is used as an output interface;
  • the first control unit is configured to control the first magnetic head module as a write interface when the first interface unit is used as an input interface module, and control the writing module to write the data received by the first interface unit into the magnetic medium, control the first magnetic head module as the reading module when the first interface unit is used as the output interface, and control the reading module to read from the magnetic medium the data is sent to the first interface unit;
  • the second control unit is configured to control the second magnetic head module as the writing module when the second interface unit is used as the input interface, and control the writing module to write the data received by the second interface unit
  • the transmission structure is used for driving the magnetic medium to The part of the magnetic medium after the magnetic data is written by the writing module is transferred
  • the data transmission is realized mechanically, and the data between the input interface and the output interface is isolated, which ensures that no data link is generated between the data input and output, and greatly improves the security of data transmission.
  • the mechanical transmission structure because of the mechanical transmission structure, there is no need to configure network policies, and people without relevant network expertise can plug and play, which is extremely convenient to use.
  • the mechanically isolated data transmission device further includes: a wipe head module 19, the wipe head module 19 is slidably connected to the magnetic medium 14, and the wipe head module 19 is used for erasing the magnetic medium 14 by The reading module reads the data in the part after the data; the transmission structure 15 is a runner, the magnetic medium 14 is a magnetic disk, and the magnetic disk is arranged on the runner.
  • the runner can be driven to rotate by an electrode.
  • the magnetic medium 14 is a reusable magnetic medium.
  • the wiping head module 19 By setting the wiping head module 19, after the reading module has read the data, the wiping head module will store the data. erasing, so that each part in the magnetic medium can be reused, that is, when the transmission structure 14 is transmitting, the part of the magnetic medium that has been written by the writing module is firstly transmitted to the reading module, and the reading module reads the data.
  • the data is sent to the head-wiping module, and the data is erased by the head-wiping module and then sent to the reading module, thereby reusing each part of the magnetic medium and greatly reducing the cost.
  • At least one magnetic track 141 is provided on the magnetic disk.
  • N the number of magnetic tracks
  • L the distance from the writing module to the reading module
  • S the rotation speed of the wheel
  • T the interval time
  • the delay of the data transfer can be ignored, which can fully meet the high-speed requirements of current data transmission.
  • the device is designed as a plug-and-play mode, multiple devices can be used to form a combination mode to group the data, and multiple devices can work simultaneously, which also meets the requirements for large data transfer.
  • the magnetic medium can also be other magnetic media, such as magnetic tape, etc.
  • the magnetic tape can be set to have a larger data storage space, and the erasing head module need not be set in this case.
  • FIG. 2 is a schematic structural diagram of another mechanically isolated data transmission device provided by an embodiment of the present application.
  • the first control unit 12 includes: a first data processing module 121 , a first data writing control module 122 and a first data read control module 123;
  • the first magnetic head module 13 includes a first write head 131 and a first read head 132;
  • the first data processing module 121 is used to control when the first interface unit 11 is used as an input interface
  • the first data writing control module 122 works, and the first data writing control module 122 is used for controlling the first writing head to write the data received by the first interface unit 11 into the magnetic medium;
  • the first data processing module 121 is also used for When an interface unit 11 is used as an output interface, the first data read control module 123 is controlled to work, and the first data read control module 123 is used to control the first read head 132 to read data from the magnetic medium and send it to the first interface unit 11 .
  • the first data processing module 121 can be used to comprehensively process the data received from the first interface unit 11.
  • the data is integrated and output to the first data writing control module 122.
  • the first data processing module 121 controls the first data processing module 121.
  • a data writing control module 122 works, and controls the first data reading control module 123 to not work, that is, the first write head 131 in the first magnetic head module 13 works, and the first read head 132 does not work, so that The first magnetic head module 13 is controlled as a writing module.
  • the mechanically isolated data transmission device further includes: a logic control unit 20; the first data processing module 121 is further configured to read and control the first data when the first interface unit 11 is used as an output interface
  • the preset content in the data read by the module 123 is logically judged, and an initialization signal is generated when the judgment result does not meet the preset condition; the logic control unit 20 is used to initialize the data in the second control unit according to the initialization signal.
  • the first interface unit 11 is used to connect an internal device
  • the second interface unit 18 is used to connect an external device
  • the internal device is the device to be protected, that is, the data in the internal device needs to be processed protection, and the data in the internal device is safe data, while the security of the data in the external device is unknown, and there may be malicious data
  • the first data processing module 121 may
  • the preset content can be, for example, at least one of accuracy, size, and repeatability. For example, when the accuracy is too low, or the data size is too small, or the repeatability is too high, it means that the input is from an external device. There may be malicious data in the data of 171.
  • the first data processing module will generate an initialization signal
  • the logic control unit 20 will initialize the data in the second data processing module 171 according to the initialization signal, so as to prevent malicious data from being written into the internal device, This further improves security.
  • the logic control unit 20 only initializes the data received from the outside in the second data processing module 171, such as clearing, and does not initialize the programs in the second data processing module 171.
  • the second data processing module The factory program in 171 is solidified in the second data processing module 171, and the initialization of the second data processing module 171 will not affect its factory program. After the second data processing module 171 is restarted, its function will not be affected, but malicious programs can be completely removed. Therefore, malicious data cannot be transmitted to the internal device, and the external device does not need to perform security scanning on the input files, which saves money. Security scan time, improve data transmission efficiency.
  • the first magnetic read head is configured to only be able to read character strings in the first preset format in the magnetic medium.
  • the first preset format may be, for example, a text format.
  • the first interface unit is used to connect an internal device
  • the second interface unit is used to connect an external device
  • the data written by the external device to the internal device Since the security is unreliable, there may be malicious data.
  • the first read head can only read strings in text format, and strings in non-text format will be read as garbled characters.
  • the first data processing The module can judge that there is a problem with the data input by the external device according to the read garbled code.
  • the first data processing module generates an initialization signal, and the logic control unit initializes the second control unit according to the initialization signal. That is, by setting the first magnetic read head to only read character strings in the first preset format, the security of data transmission can be further improved.
  • the second control unit 17 includes: a second data processing module 171, a second data writing control module 172 and a second data reading control module 173;
  • the second magnetic head module 16 includes a second writing head 161 and a second data reading control module 173;
  • the second data processing module 171 is used to control the second data write control module 172 to work when the second interface unit 18 is used as the input interface, and the second data write control module 172 is used to control the second write head to write The data received by the second interface unit 18 is written into the magnetic medium;
  • the second data processing module 171 is further configured to control the second data reading control module 173 to work when the second interface unit 18 is used as the output interface, and the second data reading control module 173 is used to control the second read head 172 to read data from the magnetic medium and send it to the second interface unit 18 .
  • the second data processing module 171 can be used to comprehensively process the data received from the second interface unit 18, for example, the data is integrated and output to the second data writing control module 172, at this time, the second data processing module 171 controls the The second data writing control module 172 works and controls the second data reading control module 173 to not work, that is, the second writing head 161 in the second magnetic head module 16 works, and the second reading head 162 does not work, thus The second magnetic head module 16 is controlled as a writing module.
  • the second write head 161 is configured to only be able to write the character string in the second preset format to the magnetic medium.
  • the second preset format may be a text format.
  • the first interface unit is used to connect the internal device
  • the second interface unit is used to connect to the external device.
  • the data written by the external device to the internal device is due to security Untrustworthy, there may be malicious data, in order to further improve the security, the second write head can only write strings in text format, and strings in non-text format cannot be written to the magnetic medium, thus limiting the access to the hardware.
  • the format of the text written by the internal device That is, by setting the second write head to only write character strings in the second preset format, the security of data transmission can be further improved.
  • the erasing head module 19 includes a first erasing head 191 and a second erasing head 192, and along the rotation direction of the magnetic disk, the first writing magnetic head 131, the second reading magnetic head 162, the first erasing head 191 , the second write head 161 , the first read head 132 and the second wipe head 192 are arranged in sequence.
  • the first writing head, the second reading head 162, the first erasing head 191, the second writing head 161, the first reading head 132 and the second erasing head 192 are all fixed, and the magnetic disk can be rotated under the rotation of the rotating structure , the direction of rotation is fixed.
  • the first write head 131 writes the track into the track, and then the track on which data is written is transferred to the second read head 162 to be read by the second read head 162, and then the part of the track is transferred again.
  • the data is cleared by the first erasing head 191, and then the part of the track is transferred to the first writing head, thereby completing the reuse of the magnetic medium.
  • the second write head 161 can only encode the text format, and the file format is directly restricted by the hardware, which has high security.
  • the second write head 161 writes the external data into the track (non-text format will be written as garbled characters), and then the drive structure drives the track on which the data is written to the first read head 132, where it is transferred by the first read head 132.
  • the first read head 132 reads (non-text format will be translated into garbled text strings), and then the data in the track is erased at the second erase head, and the first data processing module can save the data by creating a new file.
  • the first interface unit is a USB port or a network port
  • the second interface unit is a USB port or a network port.
  • the USB port or the network port has a wide range of applications in the field of data transmission, and this setting can greatly improve the compatibility of the mechanically isolated data transmission device.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Theoretical Computer Science (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Signal Processing For Digital Recording And Reproducing (AREA)

Abstract

一种机械隔离式数据传输装置，机械隔离式数据传输装置包括：第一接口单元、第一控制单元、第一磁头模组、磁介质、传动结构、第二磁头模组、第二控制单元和第二接口单元；第一控制单元配置为在第一接口单元作为输入接口时控制第一磁头模组作为写模组，在第一接口单元作为输出接口时控制第一磁头模组作为读模组；第二控制单元配置为在第二接口单元作为输入接口时控制第二磁头模组作为写模组，在第二接口单元作为输出接口时控制第二磁头模组作为读模组，控制读模组从磁介质读取数据并发送至第二接口单元；传动结构用于传动磁介质以将磁介质中被写模组写入磁数据后的部分由写模组处传动至读模组处。能够提高数据传输的安全性。

Description

机械隔离式数据传输装置
本申请要求在2021年4月30日提交中国专利局、申请号为202110482302.7的中国专利申请的优先权，该申请的全部内容通过引用结合在本申请中。
技术领域
本申请实施例涉及数据传输技术，例如涉及一种机械隔离式数据传输装置。
背景技术
随着网络安全要求的提高，一些核心设备或局域网络无法直接采集外部数据。然而在实际应用中又不可避免的要与外部网络进行数据交互。
相关技术中一般通过传输数据线等方式进行数据交互，然而传输数据线安全性较差。
发明内容
本申请提供一种机械隔离式数据传输装置，以提高数据传输的安全性。
本申请实施例提供了一种机械隔离式数据传输装置，所述机械隔离式数据传输装置包括：第一接口单元、第一控制单元、第一磁头模组、磁介质、传动结构、第二磁头模组、第二控制单元和第二接口单元；
所述第一接口单元和所述第二接口单元配置为其中一个作为输入接口，另一个作为输出接口；
所述第一控制单元配置为在所述第一接口单元作为输入接口时控制所述第一磁头模组作为写模组，并控制写模组将所述第一接口单元接收的数据写入所述磁介质，在所述第一接口单元作为输出接口时控制所述第一磁头模组作为读模组，控制读模组从所述磁介质读取数据并发送至所述第一接口单元；
所述第二控制单元配置为在所述第二接口单元作为输入接口时控制所述第二磁头模组作为写模组，并控制写模组将所述第二接口单元接收的数据写入所 述磁介质，在所述第二接口单元作为输出接口时控制所述第二磁头模组作为读模组，控制读模组从所述磁介质读取数据并发送至所述第二接口单元；
所述传动结构用于传动所述磁介质以将磁介质中被写模组写入磁数据后的部分由写模组处传动至读模组处。
可选地，所述机械隔离式数据传输装置还包括：
擦头模组，所述擦头与所述磁介质滑动连接，所述擦头模组用于擦除所述磁介质中由读模组读取数据后的部分中的数据；
所述传动结构为转轮，所述磁介质为磁盘，所述磁盘设置于所述转轮上。
可选地，所述第一控制单元包括：第一数据处理模块、第一数据写入控制模块及第一数据读取控制模块；
所述第一磁头模组包括第一写磁头和第一读磁头；
所述第一数据处理模块用于在所述第一接口单元作为输入接口时控制所述第一数据写入控制模块工作，所述第一数据写入控制模块用于控制所述第一写磁头将所述第一接口单元接收的数据写入所述磁介质；所述第一数据处理模块还用于在所述第一接口单元作为输出接口时控制所述第一数据读取控制模块工作，所述第一数据读取控制模块用于控制所述第一读磁头从所述磁介质读取数据并发送至所述第一接口单元。
可选地，所述机械隔离式数据传输装置还包括：
逻辑控制单元；
所述第一数据处理模块还用于在所述第一接口单元作为输出接口时，对所述第一数据读取控制模块读取的数据中的预设内容进行逻辑判断，并在判断结果不满足预设条件时生成初始化信号；
所述逻辑控制单元用于根据所述初始化信号对所述第二控制单元中的数据进行初始化。
可选地，所述预设内容包括准确性、大小和重复性中的至少一个。
可选地，所述第一读磁头被配置为仅能读取所述磁介质中第一预设格式的 字符串。
可选地，所述第二控制单元包括：第二数据处理模块、第二数据写入控制模块及第二数据读取控制模块；
所述第二磁头模组包括第二写磁头和第二读磁头；
所述第二数据处理模块用于在所述第二接口单元作为输入接口时控制所述第二数据写入控制模块工作，所述第二数据写入控制模块用于控制所述第二写磁头将所述第二接口单元接收的数据写入所述磁介质；所述第二数据处理模块还用于在所述第二接口单元作为输出接口时控制所述第二数据读取控制模块工作，所述第二数据读取控制模块用于控制所述第二读磁头从所述磁介质读取数据并发送至所述第二接口单元。
可选地，所述擦头模组包括第一擦头和第二擦头，沿所述磁盘的旋转方向，所述第一写磁头、所述第二读磁头、所述第一擦头、所述第二写磁头、所述第一读磁头及所述第二擦头依次排布。
可选地，所述第二写磁头被配置为仅能向所述磁介质写入第二预设格式的字符串。
可选地，所述第一接口单元为USB口或网口；
所述第二接口单元为USB口或网口。
本申请实施例的技术方案，采用的机械隔离式数据传输装置包括第一接口单元、第一控制单元、第一磁头模组、磁介质、传动结构、第二磁头模组、第二控制单元和第二接口单元；第一接口单元和第二接口单元配置为其中一个作为输入接口，另一个作为输出接口；第一控制单元配置为在第一接口单元作为输入接口时控制第一磁头模组作为写模组，并控制写模组将第一接口单元接收的数据写入磁介质，在第一接口单元作为输出接口时控制第一磁头模组作为读模组，控制读模组从磁介质读取数据并发送至第一接口单元；第二控制单元配置为在第二接口单元作为输入接口时控制第二磁头模组作为写模组，并控制写模组将第二接口单元接收的数据写入磁介质，在第二接口单元作为输出接口时 控制第二磁头模组作为读模组，控制读模组从磁介质读取数据并发送至第二接口单元；传动结构用于传动磁介质以将磁介质中被写模组写入磁数据后的部分由写模组处传动至读模组处。通过机械的方式实现数据传输，输入接口和输出接口之间的数据被隔离，确保了数据输入与输出之间无数据链路的生成，极大地提高了数据传输的安全性。同时由于采用的是机械传动结构，无需配置网络策略，无相关网络专业知识的人也能即插即用，使用极为方便。
附图说明
图1为本申请实施例提供的一种机械隔离式数据传输装置的结构示意图；
图2为本申请实施例提供的又一种机械隔离式数据传输装置的结构示意图。
具体实施方式
下面结合附图和实施例对本申请作进一步的详细说明。可以理解的是，此处所描述的具体实施例仅仅用于解释本申请，而非对本申请的限定。另外还需要说明的是，为了便于描述，附图中仅示出了与本申请相关的部分而非全部结构。
图1为本申请实施例提供的一种机械隔离式数据传输装置的结构示意图，参考图1，机械隔离式数据传输装置包括：第一接口单元11、第一控制单元12、第一磁头模组13、磁介质14、传动结构15、第二磁头模组16、第二控制单元17和第二接口单元18；第一接口单元11和第二接口单元18配置为其中一个作为输入接口，另一个作为输出接口；第一控制单元12配置为在第一接口单元11作为输入接口时控制第一磁头模组13作为写模组，并控制写模组将第一接口单元11接收的数据写入磁介质，在第一接口单元11作为输出接口时控制第一磁头模组13作为读模组，控制读模组从磁介质14读取数据并发送至第一接口单元11；第二控制单元17配置为在第二接口单元18作为输入接口时控制第二磁头模组16作为写模组，并控制写模组将第二接口单元18接收的数据写入磁介 质14，在第二接口单元18作为输出接口时控制第二磁头模组16作为读模组，控制读模组从磁介质14读取数据并发送至第二接口单元18；传动结构15用于传动磁介质14以将磁介质14中被写模组写入磁数据后的部分由写模组处传动至读模组处。
具体地，机械隔离式数据传输装置能够将数据从输入接口传输至输出接口，其中，第一接口单元11作为输入接口时，第二接口单元18作为输出接口；而当第一接口单元11作为输出接口时，第二接口单元18作为输入接口；第一接口单元11既可以作为输入接口又可以作为输出接口，同样第二接口单元18也既可以作为输入接口又可以作为输出接口，可设置第一接口单元11和第二接口单元18为相同类型的接口，在使用时不必考虑接口的方向性，换句话说，若需要在外部设备与内部设备之间传输数据，既可以将第一接口单元11接到外部设备，将第二接口单元18接到内部设备，又可以将第一接口单元11接到内部设备，将第二接口单元18接到外部设备，使用较为方便；第一接口单元11和第二接口单元18哪个作为输入接口可根据数据传输协议来确定，如第一接口单元11在数据输入时各个端口的电压与在数据输出时的电压不同，据此可判断第一接口单元为输入接口还是输出接口。
在本实施例中，当确定了输入接口和输出接口后，第一控制单元12和第二控制单元17控制对应的磁头模组工作；例如若确定第一接口单元11为输入接口，而第二输入单元18为输出接口，则此时第一控制单元12控制第一磁头模组13为写模组，第二控制单元17控制第二磁头模组16为读模组，第一控制单元12根据第一接口单元11中接收的数据控制写模组向磁介质14中写数据，同时传动结构15开始工作，将磁介质14中写完数据的部分传动至读模组处，读模组读取磁介质14中的数据，并由第二控制单元17将读模组读取的数据发送至第二接口单元18输出，从而实现数据从输入接口到输出接口的传输；若确定第二接口单元18为输入接口，而第一输入单元11为输出接口，则此时第二控制单元17控制第二磁头模组16为写模组，第一控制单元12控制第一磁头模组 13为读模组，第二控制单元17根据第二接口单元18中接收的数据控制写模组向磁介质14中写数据，同时传动结构15开始工作，将磁介质14中写完数据的部分传动至读模组处，读模组读取磁介质14中的数据，并由第一控制单元12将读模组读取的数据发送至第一接口单元11输出，从而实现数据从输入接口到输出接口的传输；在本实施例中，通过机械的方式实现数据传输，输入接口和输出接口之间的数据被隔离，确保了数据输入与输出之间无数据链路的生成，极大地提高了数据传输的安全性。同时由于采用的是机械传动结构，无需配置网络策略，无相关网络专业知识的人也能即插即用，使用极为方便。
本实施例的技术方案，采用的机械隔离式数据传输装置包括第一接口单元、第一控制单元、第一磁头模组、磁介质、传动结构、第二磁头模组、第二控制单元和第二接口单元；第一接口单元和第二接口单元配置为其中一个作为输入接口，另一个作为输出接口；第一控制单元配置为在第一接口单元作为输入接口时控制第一磁头模组作为写模组，并控制写模组将第一接口单元接收的数据写入磁介质，在第一接口单元作为输出接口时控制第一磁头模组作为读模组，控制读模组从磁介质读取数据并发送至第一接口单元；第二控制单元配置为在第二接口单元作为输入接口时控制第二磁头模组作为写模组，并控制写模组将第二接口单元接收的数据写入磁介质，在第二接口单元作为输出接口时控制第二磁头模组作为读模组，控制读模组从磁介质读取数据并发送至第二接口单元；传动结构用于传动磁介质以将磁介质中被写模组写入磁数据后的部分由写模组处传动至读模组处。通过机械的方式实现数据传输，输入接口和输出接口之间的数据被隔离，确保了数据输入与输出之间无数据链路的生成，极大地提高了数据传输的安全性。同时由于采用的是机械传动结构，无需配置网络策略，无相关网络专业知识的人也能即插即用，使用极为方便。
可选地，继续参考图1，机械隔离式数据传输装置还包括：擦头模组19，擦头模组19与磁介质14滑动连接，擦头模组19用于擦除磁介质14中由读模组读取数据后的部分中的数据；传动结构15为转轮，磁介质14为磁盘，磁盘 设置于转轮上。
具体地，转轮可由电极带动旋转，在本实施例中，磁介质14为可重复利用的磁介质，通过设置擦头模组19，当读模组读完数据后，擦头模组将数据擦除，从而使得磁介质中的各部分能够重复利用，也即传动结构14在传动时，先将磁介质中被写模组写完数据的部分传动至读模组处，读模组读取数据，该部分又被传送至擦头模组处，由擦头模组擦除数据后再传送至读模组处，从而重复利用磁介质中的各部分，极大地降低成本。
示例性地，磁盘上设置有至少一个磁道141，当磁道数量为N时，由写模组到读模组之间的距离设为L，设转轮转速为S，间隔时间为T，则有T＝L/SN。由于L是固定的，那么T就由转速S决定。假设转轮的半径为5cm,以半圆为L，参照当前机械硬盘每分7200-3000转的转速，取每分3000转计算，磁道100(常规在1800道左右)，T＝L/SN＝0.05/50000＝0.000001(秒)＝0.001(毫秒)。所以其转输数据的延时可忽略不计，完全可满足当前数据传输的高速率要求。数据量大时，由于本装置设计为即插即用方式，则可采用多个装置形成组合方式，对数据进行分组，多装置同时工作，同样满足大数据转输要求。
需要说明的是，在其它一些实施方式中，磁介质也可以是其它磁介质，如也可以是磁带等，可设置磁带具有较大的数据存储空间，此时也可不必设置擦头模组。
可选地，图2为本申请实施例提供的又一种机械隔离式数据传输装置的结构示意图，参考图2，第一控制单元12包括：第一数据处理模块121、第一数据写入控制模块122和第一数据读取控制模块123；第一磁头模组13包括第一写磁头131和第一读磁头132；第一数据处理模块121用于在第一接口单元11作为输入接口时控制第一数据写入控制模块122工作，第一数据写入控制模块122用于控制第一写磁头将第一接口单元11接收的数据写入磁介质；第一数据处理模块121还用于在第一接口单元11作为输出接口时控制第一数据读取控制模块123工作，第一数据读取控制模块123用于控制第一读磁头132从磁介质 读取数据并发送至第一接口单元11。
具体地，第一数据处理模块121可用于综合处理从第一接口单元11接收的数据，如将该数据整合后输出至第一数据写入控制模块122，此时第一数据处理模块121控制第一数据写入控制模块122工作，并且控制第一数据读取控制模块123不工作，也即此时第一磁头模组13中第一写磁头131工作，而第一读磁头132不工作，从而控制第一磁头模组13作为写模组。
可选地，继续参考图2，机械隔离式数据传输装置还包括：逻辑控制单元20；第一数据处理模块121还用于在第一接口单元11作为输出接口时，对第一数据读取控制模块123读取的数据中的预设内容进行逻辑判断，并在判断结果不满足预设条件时生成初始化信号；逻辑控制单元20用于根据初始化信号对第二控制单元中的数据进行初始化。
具体地，在本实施例中，第一接口单元11用于连接内部设备，第二接口单元18用于连接外部设备，其中，内部设备为待保护的设备，也即内部设备中的数据需要进行保护，并且内部设备中的数据均是安全的数据，而外部设备中的数据的安全性未知，可能存在恶意数据；本实施例中第一数据处理模块121可对接收的数据中的预设内容进行逻辑判断，预设内容例如可以是准确性、大小和重复性中的至少一个，例如准确性过低时，或者数据量的大小过小，或者重复性过高时，均表示从外部设备输入的数据中可能存在恶意数据，此时第一数据处理模块会生成初始化信号，逻辑控制单元20根据该初始化信号对第二数据处理模块171中的数据进行初始化，防止恶意数据写入内部设备中，从而进一步提高安全性。
需要说明的是，逻辑控制单元20仅对第二数据处理模块171中从外部接收的数据进行初始化，如清零，而对第二数据处理模块171中的程序不进行初始化，第二数据处理模块171中的出厂程序固化在第二数据处理模块171中，对第二数据处理模块171的初始化不会影响其出厂程序。第二数据处理模块171重启后，不会影响其功能，但是却可将恶意程序彻底清除，由此，恶意数据无 法传输到内部设备，而外部设备也不必对输入的文件进行安全扫描，可节省安全扫描时间，提高数据传输效率。
进一步地，第一读磁头被配置为仅能读取磁介质中第一预设格式的字符串。
具体地，第一预设格式例如可以是文本格式，在本实施例中，第一接口单元用于连接内部设备，第二接口单元用于连接外部设备，外部设备向内部设备中写入的数据由于安全性不可信，可能存在恶意数据，为了进一步提高安全性，设置第一读磁头仅能读取文本格式的字符串，而非文本格式的字符串将会被读成乱码，第一数据处理模块可根据读取出的乱码判断外部设备输入的数据存问题，此时第一数据处理模块生成初始化信号，逻辑控制单元根据该初始化信号对第二控制单元进行初始化。也即通过设置第一读磁头仅能读取第一预设格式的字符串，可进一步提高数据传输的安全性。
可选地，第二控制单元17包括：第二数据处理模块171、第二数据写入控制模块172和第二数据读取控制模块173；第二磁头模组16包括第二写磁头161和第二读磁头162；第二数据处理模块171用于在第二接口单元18作为输入接口时控制第二数据写入控制模块172工作，第二数据写入控制模块172用于控制第二写磁头将第二接口单元18接收的数据写入磁介质；第二数据处理模块171还用于在第二接口单元18作为输出接口时控制第二数据读取控制模块173工作，第二数据读取控制模块173用于控制第二读磁头172从磁介质读取数据并发送至第二接口单元18。
具体地，第二数据处理模块171可用于综合处理从第二接口单元18接收的数据，如将该数据整合后输出至第二数据写入控制模块172，此时第二数据处理模块171控制第二数据写入控制模块172工作，并且控制第二数据读取控制模块173不工作，也即此时第二磁头模组16中第二写磁头161工作，而第二读磁头162不工作，从而控制第二磁头模组16作为写模组。
进一步地，第二写磁头161被配置为仅能向磁介质写入第二预设格式的字符串。
具体地，第二预设格式可为文本格式，本实施例中，第一接口单元用于连接内部设备，第二接口单元用于连接外部设备，外部设备向内部设备中写入的数据由于安全性不可信，可能存在恶意数据，为了进一步提高安全性，设置第二写磁头仅能写文本格式的字符串，而非文本格式的字符串不能写入磁介质中，从而在硬件上限制了向内部设备写入的文本的格式。也即通过设置第二写磁头仅能写入第二预设格式的字符串，可进一步提高数据传输的安全性。
可选地，继续参考图2，擦头模组19包括第一擦头191和第二擦头192，沿磁盘的旋转方向，第一写磁头131、第二读磁头162、第一擦头191、第二写磁头161、第一读磁头132及第二擦头192依次排布。
具体地，第一写磁头、第二读磁头162、第一擦头191、第二写磁头161、第一读磁头132及第二擦头192均固定，而磁盘可在转动结构的转动下转动，转动方向固定。
示例性地，当需要从内部设备向外部设备传输数据时，由于内部设备中的数据不存在恶意数据，数据是可信的，因此第一写磁头和第二读磁头均不限制数据格式，经第一控制模块处理后，由第一写磁头131写入磁道中，随后写入数据的磁道被传动到第二读磁头162处，由第二读磁头162读取，随后该部分磁道又被传动到第一擦头191处，由第一擦头191清除数据，再随后该部分磁道又被传动到第一写磁头处，从而完成磁介质的重复利用。
而当需要从外部设备向内部设备传输数据时，由于外部设备中的数据不可信，此时显示数据格式，仅限文本格式数据。为确保外部数据是文本格式，第二写磁头161仅能编码文本格式，由硬件直接限制文件格式，安全性较高。当外部数据输入时，第二写磁头161将外部数据写入到磁道中(非文本格式将会被写成乱码)，随后传动结构将写入数据的磁道传动至第一读磁头132处，被第一读磁头132读取(非文本格式将会被译成乱码文本字符串)，然后在第二擦头处磁道中的数据被擦除，并且第一数据处理模块可通过新建文件来保存数据。
可选地，第一接口单元为USB口或网口；第二接口单元为USB口或网口。 USB口或网口在数据传输领域具有广泛的应用，这样设置可极大地提高机械隔离式数据传输装置的兼容性。

Claims (10)

  1. 一种机械隔离式数据传输装置，包括：第一接口单元、第一控制单元、第一磁头模组、磁介质、传动结构、第二磁头模组、第二控制单元和第二接口单元；
    所述第一接口单元和所述第二接口单元配置为其中一个作为输入接口，另一个作为输出接口；
    所述第一控制单元配置为在所述第一接口单元作为输入接口时控制所述第一磁头模组作为写模组，并控制写模组将所述第一接口单元接收的数据写入所述磁介质，在所述第一接口单元作为输出接口时控制所述第一磁头模组作为读模组，控制读模组从所述磁介质读取数据并发送至所述第一接口单元；
    所述第二控制单元配置为在所述第二接口单元作为输入接口时控制所述第二磁头模组作为写模组，并控制写模组将所述第二接口单元接收的数据写入所述磁介质，在所述第二接口单元作为输出接口时控制所述第二磁头模组作为读模组，控制读模组从所述磁介质读取数据并发送至所述第二接口单元；
    所述传动结构用于传动所述磁介质以将磁介质中被写模组写入磁数据后的部分由写模组处传动至读模组处。
  2. 根据权利要求1所述的机械隔离式数据传输装置，还包括：
    擦头模组，所述擦头与所述磁介质滑动连接，所述擦头模组用于擦除所述磁介质中由读模组读取数据后的部分中的数据；
    所述传动结构为转轮，所述磁介质为磁盘，所述磁盘设置于所述转轮上。
  3. 根据权利要求2所述的机械隔离式数据传输装置，其中，所述第一控制单元包括：第一数据处理模块、第一数据写入控制模块及第一数据读取控制模块；
    所述第一磁头模组包括第一写磁头和第一读磁头；
    所述第一数据处理模块用于在所述第一接口单元作为输入接口时控制所述第一数据写入控制模块工作，所述第一数据写入控制模块用于控制所述第一写磁头将所述第一接口单元接收的数据写入所述磁介质；所述第一数据处理模块 还用于在所述第一接口单元作为输出接口时控制所述第一数据读取控制模块工作，所述第一数据读取控制模块用于控制所述第一读磁头从所述磁介质读取数据并发送至所述第一接口单元。
  4. 根据权利要求3所述的机械隔离式数据传输装置，还包括：
    逻辑控制单元；
    所述第一数据处理模块还用于在所述第一接口单元作为输出接口时，对所述第一数据读取控制模块读取的数据中的预设内容进行逻辑判断，并在判断结果不满足预设条件时生成初始化信号；
    所述逻辑控制单元用于根据所述初始化信号对所述第二控制单元中的数据进行初始化。
  5. 根据权利要求4所述的机械隔离式数据传输装置，其中，所述预设内容包括准确性、大小和重复性中的至少一个。
  6. 根据权利要求4所述的机械隔离式数据传输装置，其中，所述第一读磁头被配置为仅能读取所述磁介质中第一预设格式的字符串。
  7. 根据权利要求3所述的机械隔离式数据传输装置，其中，所述第二控制单元包括：第二数据处理模块、第二数据写入控制模块及第二数据读取控制模块；
    所述第二磁头模组包括第二写磁头和第二读磁头；
    所述第二数据处理模块用于在所述第二接口单元作为输入接口时控制所述第二数据写入控制模块工作，所述第二数据写入控制模块用于控制所述第二写磁头将所述第二接口单元接收的数据写入所述磁介质；所述第二数据处理模块还用于在所述第二接口单元作为输出接口时控制所述第二数据读取控制模块工作，所述第二数据读取控制模块用于控制所述第二读磁头从所述磁介质读取数据并发送至所述第二接口单元。
  8. 根据权利要求7所述的机械隔离式数据传输装置，其中，所述擦头模组包括第一擦头和第二擦头，沿所述磁盘的旋转方向，所述第一写磁头、所述第 二读磁头、所述第一擦头、所述第二写磁头、所述第一读磁头及所述第二擦头依次排布。
  9. 根据权利要求7所述的机械隔离式数据传输装置，其中，所述第二写磁头被配置为仅能向所述磁介质写入第二预设格式的字符串。
  10. 根据权利要求1所述的机械隔离式数据传输装置，其中，所述第一接口单元为USB口或网口；
    所述第二接口单元为USB口或网口。
PCT/CN2021/108732 2021-04-30 2021-07-27 机械隔离式数据传输装置 WO2022227309A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202110482302.7 2021-04-30
CN202110482302.7A CN113010926B (zh) 2021-04-30 2021-04-30 机械隔离式数据传输装置

Publications (1)

Publication Number Publication Date
WO2022227309A1 true WO2022227309A1 (zh) 2022-11-03

Family

ID=76380505

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2021/108732 WO2022227309A1 (zh) 2021-04-30 2021-07-27 机械隔离式数据传输装置

Country Status (2)

Country Link
CN (1) CN113010926B (zh)
WO (1) WO2022227309A1 (zh)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113010926B (zh) * 2021-04-30 2023-01-24 广东电网有限责任公司梅州供电局 机械隔离式数据传输装置

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20020002645A1 (en) * 2000-06-30 2002-01-03 Kabushiki Kaisha Toshiba Electronic apparatus, system and method for controlling communication among devices coupled through different interfaces
CN104008755A (zh) * 2013-02-26 2014-08-27 国际商业机器公司 数据存储系统和向磁介质写入数据的方法
CN208000572U (zh) * 2017-12-29 2018-10-23 上海哈诚电子科技有限公司 一种usb接口多功能读写器
CN111957051A (zh) * 2020-09-01 2020-11-20 网易（杭州）网络有限公司 资源存储方法及装置
CN113010926A (zh) * 2021-04-30 2021-06-22 广东电网有限责任公司梅州供电局 机械隔离式数据传输装置

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6788488B2 (en) * 2001-01-22 2004-09-07 Qualcomm, Incorporated Variable mode multi-media data object storage device
JP3806093B2 (ja) * 2003-01-31 2006-08-09 株式会社東芝 ディスクコントローラ、同コントローラを備えたディスク記憶装置、及び同装置においてデータ書き込み禁止を制御する方法
US9792463B2 (en) * 2011-07-28 2017-10-17 Kenneth L. Miller Combination magnetic stripe and contactless chip card reader

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20020002645A1 (en) * 2000-06-30 2002-01-03 Kabushiki Kaisha Toshiba Electronic apparatus, system and method for controlling communication among devices coupled through different interfaces
CN104008755A (zh) * 2013-02-26 2014-08-27 国际商业机器公司 数据存储系统和向磁介质写入数据的方法
CN208000572U (zh) * 2017-12-29 2018-10-23 上海哈诚电子科技有限公司 一种usb接口多功能读写器
CN111957051A (zh) * 2020-09-01 2020-11-20 网易（杭州）网络有限公司 资源存储方法及装置
CN113010926A (zh) * 2021-04-30 2021-06-22 广东电网有限责任公司梅州供电局 机械隔离式数据传输装置

Also Published As

Publication number Publication date
CN113010926B (zh) 2023-01-24
CN113010926A (zh) 2021-06-22

Similar Documents

Publication Publication Date Title
TWI738739B (zh) 硬碟資料抹除方法、伺服器及系統
US9424443B2 (en) Method and apparatus for securing computer mass storage data
CN100454283C (zh) 虚拟通用串行总线设备系统及其数据传输方法
US8051300B2 (en) System and method for reducing latency on remotely-booted information handling systems
CN110163011B (zh) 一种高速安全硬盘设计方法
WO2022227309A1 (zh) 机械隔离式数据传输装置
EP3627334B1 (en) Extended storage device based on pcie bus
JP2007102653A (ja) データ記憶装置の機能試験方法及び機能試験装置
US20080005384A1 (en) Hard disk drive progressive channel interface
US10664172B1 (en) Coupling multiple controller chips to a host via a single host interface
US7640366B2 (en) Storage controller to control access to storage device via serial communication unit by executing control step units
US20220113353A1 (en) Input-output device with debug controller
US11216402B2 (en) Storage system and control method thereof
US7900028B2 (en) Method for initializing bus device
US8856390B1 (en) Using device control field to implement non-disruptive notification of an ATA device
KR100943855B1 (ko) 디스크 컨트롤러, 채널 인터페이스 및 그 이용 방법
US8943237B1 (en) Performance improvement for attached multi-storage devices
CN107292196A (zh) Io数据的读写方法和装置
WO2014147836A1 (ja) ストレージシステムにおける暗号化機能の保守交換方法及びストレージ装置
JPH11175261A (ja) ディスクの制御方法
US6546504B1 (en) System and method for providing streaming recording and playback of audio-video data
JPH1027154A (ja) 電子機器に内蔵されたｓｃｓｉ機器の制御方法
CN113553632A (zh) 一种数据安全传输接口设备、系统及方法
US20050188135A1 (en) High performance serial bus data recorder
TW407232B (en) Data transferring/separating controller

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 21938775

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 21938775

Country of ref document: EP

Kind code of ref document: A1