USB expansion safety real-time bus network card equipment and terminal networking method

Abstract

The invention provides USB (Universal Serial Bus) extension safety real-time bus network card equipment and a terminal networking method, which are applied to the technical field of network data safety. The network card device comprises a USB interface, a nonvolatile memory, a device ID comparison module, a fingerprint authentication module and an SRB bus module. According to the invention, the secure data transmission of the sensitive equipment is ensured by storing and comparing the equipment ID, identifying the equipment type and using fingerprint authentication, and the sensitive data can be selectively transmitted on the secure real-time bus channel according to the data sensitivity, so that the usability of the network card equipment is improved while the data security is ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of network data security, and in particular to a USB extended security real-time bus network card device and a terminal networking method. Background Art

[0002] In today's era of digital transformation, network data security has become a core issue of concern to individuals, enterprises and even countries. As information and key business processes increasingly rely on network infrastructure, ensuring the security of this information is not only a necessary means to protect privacy, but also an important guarantee for maintaining economic stability and social order. USB (Universal Serial Bus) devices are popular because of their versatility, ease of use and high-speed transmission capabilities. Among many USB devices, USB network cards (also known as USB Ethernet adapters) are a common network connection device that connects to computers through USB interfaces to achieve network access.

[0003] However, existing USB network cards have significant deficiencies in security. They often lack effective data security mechanisms and have difficulty identifying and managing different types of data, which may lead to data leakage or unauthorized access. As network security threats continue to evolve, it is particularly important to improve the data security and management capabilities of USB network cards. Summary of the invention

[0004] In view of the above problems, the present invention provides a USB extended secure real-time bus network card device and a terminal networking method that overcomes the above problems or at least partially solves the above problems. The technical solution includes:

[0005] A USB extended security real-time bus network card device comprises: a USB interface, a non-volatile memory, a device ID comparison module, a fingerprint authentication module and an SRB bus module.

[0006] The USB interface is used to connect to a network terminal that has a network demand;

[0007] The non-volatile memory is used to store a sensitive device ID list;

[0008] The device ID comparison module is used to read the device ID of the networked terminal, retrieve the device ID of the networked terminal in the sensitive device ID list, and identify the device type of the networked terminal;

[0009] The fingerprint authentication module is used to perform a fingerprint authentication process on the networked terminal whose device type is a sensitive device: verify the fingerprint information of the device person in charge of the networked terminal, and after the authentication is passed, trigger the SRB bus module to open the secure real-time bus channel, and when the authentication fails, prevent the transmission of sensitive data;

[0010] The SRB bus module is used to transmit the sensitive data of the networked terminal whose device type is a sensitive device through the secure real-time bus channel.

[0011] Optionally, the SRB bus module transmits the non-sensitive data of the networked terminal whose device type is a non-sensitive device through a common network data channel.

[0012] Optionally, when receiving data through the RJ45 network interface, the SRB bus module identifies whether the data is in a secure real-time bus format. If so, it triggers the fingerprint authentication module to execute the fingerprint authentication process. After the authentication is passed, it opens the secure real-time bus channel and triggers the device ID comparison module to verify the device type of the receiving terminal. When the device type of the receiving terminal is a sensitive device, the data is transmitted through the secure real-time bus channel.

[0013] Optionally, when the USB interface is inserted into the networking terminal, the device ID comparison module compares the device ID of the networking terminal with the sensitive device ID list stored in the non-volatile memory. If the device ID of the networking terminal exists in the sensitive device ID list, the device type of the networking terminal is identified as a sensitive device; if the device ID of the networking terminal does not exist in the sensitive device ID list, the device type of the networking terminal is identified as a non-sensitive device.

[0014] Optionally, when the USB interface is inserted into the networked terminal with the corresponding network card driver installed, the network card driver is not installed repeatedly, but the fingerprint authentication module is triggered to execute the fingerprint authentication process each time the network card driver runs, and the timeliness of the fingerprint authentication is set according to usage requirements.

[0015] A terminal networking method is applied to a USB extended secure real-time bus network card device, the method comprising:

[0016] Connecting to a network terminal via a USB interface and reading the device ID of the network terminal;

[0017] Retrieving the device ID from a device ID list stored in a non-volatile memory to identify the device type of the networked terminal;

[0018] In the case where the device type is a sensitive device, a fingerprint authentication process is performed: the fingerprint information of the device owner of the networked terminal is verified, and after the authentication is passed, a secure real-time bus channel is opened, and when the authentication fails, the transmission of sensitive data is blocked;

[0019] The sensitive data of the networked terminal whose device type is a sensitive device is transmitted through the secure real-time bus channel.

[0020] Optionally, the method further includes:

[0021] The non-sensitive data of the networked terminal whose device type is a non-sensitive device is transmitted through a common network data channel.

[0022] Optionally, the method further includes:

[0023] Receive data through the RJ45 network interface, detect whether the received data is in the secure real-time bus format, if so, execute the fingerprint authentication process, and verify the device type of the receiving terminal. When the device type of the receiving terminal is a sensitive device, transmit the data through the secure real-time bus channel.

[0024] Optionally, retrieving the device ID from a device ID list stored in a non-volatile memory to identify the device type of the networked terminal includes:

[0025] When the USB extended secure real-time bus network card device is inserted into the networking terminal, by comparing the device ID of the networking terminal with the sensitive device ID list stored in the non-volatile memory, if the device ID of the networking terminal exists in the sensitive device ID list, the device type of the networking terminal is identified as a sensitive device; if the device ID of the networking terminal does not exist in the sensitive device ID list, the device type of the networking terminal is identified as a non-sensitive device.

[0026] Optionally, the method further includes:

[0027] When the USB extended secure real-time bus network card device is inserted into the networked terminal in which the corresponding network card driver has been installed, the network card driver is not installed repeatedly, but the fingerprint authentication process is executed each time the network card driver runs, and the timeliness of fingerprint authentication is set according to usage requirements.

[0028] By means of the above technical scheme, the present invention provides a USB extended secure real-time bus network card device and a terminal networking method, wherein the network card device includes a USB interface, a non-volatile memory, a device ID comparison module, a fingerprint authentication module and an SRB bus module. The USB interface is used to connect a networked terminal with a networking requirement; the non-volatile memory is used to store a sensitive device ID list; the device ID comparison module is used to read the device ID of the networked terminal, retrieve the device ID of the networked terminal in the sensitive device ID list, and identify the device type of the networked terminal; the fingerprint authentication module is used to perform a fingerprint authentication process for a networked terminal whose device type is a sensitive device: verify the fingerprint information of the device person in charge of the networked terminal, and after the authentication is passed, trigger the SRB bus module to open a secure real-time bus channel, and when the authentication fails, prevent the transmission of sensitive data; the SRB bus module is used to transmit sensitive data of a networked terminal whose device type is a sensitive device through a secure real-time bus channel. The network card device provided by the present invention can provide corresponding support and security protection according to the data sensitivity of the networked terminal, and provide a flexible data transmission mechanism, and can select a secure real-time bus channel for transmission according to different sensitivity requirements of the data, while ensuring data security, it also takes into account ease of use.

[0029] The above description is only an overview of the technical solution of the present invention. In order to more clearly understand the technical means of the present invention, it can be implemented according to the contents of the specification. In order to make the above and other purposes, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] Various other advantages and benefits will become apparent to those of ordinary skill in the art by reading the detailed description of the preferred embodiments below. The accompanying drawings are only for the purpose of illustrating the preferred embodiments and are not to be considered as limiting the present invention. Moreover, the same reference symbols are used throughout the accompanying drawings to represent the same components. In the accompanying drawings:

[0031] Figure 1 A schematic diagram of the structure of a USB extended secure real-time bus network card device provided by an embodiment of the present invention is shown;

[0032] Figure 2 Another structural schematic diagram of a USB extended secure real-time bus network card device provided by an embodiment of the present invention is shown;

[0033] Figure 3 A schematic diagram of a process of a terminal networking method provided by an embodiment of the present invention is shown;

[0034] Figure 4 The principle block diagram of the USB extended secure real-time bus network card provided by the embodiment of the present invention is shown;

[0035] Figure 5 A schematic diagram showing a sensitive device and a sensitive device communicating through a secure real-time bus channel provided by an embodiment of the present invention is shown;

[0036] Figure 6 A schematic diagram showing that a sensitive device and a non-sensitive device provided by an embodiment of the present invention cannot communicate with each other;

[0037] Figure 7 A schematic diagram showing a non-sensitive device provided by an embodiment of the present invention and a non-sensitive device communicating through a common network data channel is shown. DETAILED DESCRIPTION

[0038] The exemplary embodiments of the present invention will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present invention are shown in the accompanying drawings, it should be understood that the present invention can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided in order to enable a more thorough understanding of the present invention and to enable the scope of the present invention to be fully communicated to those skilled in the art.

[0039] In today's era of accelerated digital transformation, network data security has become a core issue of concern to individuals, enterprises and even countries. As information and key business processes increasingly rely on network infrastructure, ensuring the security of this information is not only a necessary means to protect privacy, but also an important guarantee for maintaining economic stability and social order. USB (Universal Serial Bus) devices are popular due to their versatility, ease of use and high-speed transmission capabilities. Among them, USB network cards (also known as USB Ethernet adapters) are a common network connection device that connects to computers through USB interfaces to achieve network access. However, existing USB network cards have significant deficiencies in security. Generally, these devices lack effective data security mechanisms, making it difficult to identify and manage different types of data, which can easily lead to data leakage or unauthorized access.

[0040] In recent years, network security threats have become increasingly complex and diverse, including malware attacks, data theft, and network interruptions, all of which have put forward higher requirements for the security of data transmission. Especially in the context of the popularization of IoT devices and the increase in remote work, USB network cards, as key network access points, may have security vulnerabilities that can be quickly exploited by attackers and cause widespread impact. Therefore, it is particularly important to improve the data security and management capabilities of USB network cards. This not only involves hardware-level security enhancements, but also includes software-level access control, data encryption, and user authentication and other improvement measures.

[0041] In order to address these challenges, it is crucial to develop USB network card devices with higher security standards. In response to this demand, the present invention introduces a USB extended secure real-time bus network card device with integrated multiple security functions. It has functions such as device identification, user identity authentication and data encryption transmission, ensuring comprehensive security protection during data use and transmission. This not only helps to resist potential security threats, but also enhances users' trust in network security and promotes the safe development of the digital process.

[0042] like Figure 1 As shown, a structural schematic diagram of a USB extended secure real-time bus network card device provided by an embodiment of the present invention may include a USB interface, a non-volatile memory, a device ID comparison module, a fingerprint authentication module and an SRB bus module.

[0043] USB interface, used to connect to an Internet terminal with Internet access requirements.

[0044] Among them, the USB interface is a standard interface for data transmission and connection between devices. The USB interface provides a standardized and universal connection method, allowing various networked terminals to easily connect to network card devices. Its plug-and-play feature simplifies the device connection process and improves the versatility of the device and user experience.

[0045] Among them, the network terminal refers to a device that can connect to the network and perform data communication. The network terminal can include various types of electronic devices, such as computers, mobile devices, Internet of Things devices, network peripherals, and multimedia devices.

[0046] Non-volatile memory for storing a list of sensitive device IDs.

[0047] Among them, non-volatile memory is used in network card devices to store data information that needs to be preserved for a long time, such as sensitive device ID lists, to ensure that the information is not lost after the device is powered off.

[0048] The sensitive device ID list is a list of specific device identifiers (IDs) used to identify and manage devices that are considered to require additional protection or special attention. These devices may be marked as "sensitive" due to their functions, uses, or the sensitivity of the data they process, such as terminal devices involving information security, commercial secrets, personal privacy, etc. The embodiment of the present invention can pre-enter the device ID of the sensitive device into the sensitive device ID list.

[0049] The device ID comparison module is used to read the device ID of the networked terminal, retrieve the device ID of the networked terminal in the sensitive device ID list, and identify the device type of the networked terminal.

[0050] The device ID comparison module is a functional component for identifying and comparing the identification of networked terminal devices. The device ID comparison module reads the device ID of the networked terminal and searches the stored sensitive device ID list to identify the device type and whether it belongs to the category of sensitive devices.

[0051] The fingerprint authentication module is used to perform the fingerprint authentication process for networked terminals whose device type is sensitive equipment: verify the fingerprint information of the device owner of the networked terminal, and after the authentication is passed, trigger the SRB bus module to open the secure real-time bus channel. When the authentication fails, the transmission of sensitive data is blocked.

[0052] The fingerprint authentication module is a biometric component used to verify the identity of the user and the fingerprint information of the person in charge of the networked terminal. If the device type is a sensitive device, this module executes the fingerprint authentication process to decide whether to trigger the SRB bus module to open the secure real-time bus channel to transmit sensitive data. The embodiment of the present invention can pre-enter the fingerprint information of the person with operation authority and store it in the internal non-volatile memory for fingerprint authentication.

[0053] Among them, the Secure Real-time Bus (SRB) refers to a communication channel with security mechanisms and timeliness mechanisms for encrypting sensitive data and synchronizing macrocycles, which can ensure that sensitive data can be transmitted safely and timely.

[0054] The secure real-time bus channel protects the confidentiality of sensitive data through encryption technology. The encryption mechanism ensures that only authorized entities can access and understand the data content, thus preventing the data from being eavesdropped or tampered with during transmission.

[0055] Among them, the synchronization macrocycle refers to coordinating the operations of multiple devices or systems within a predetermined time period. In a secure real-time bus channel, this synchronization mechanism ensures that all devices participating in the communication work within the same time frame, thereby effectively preventing timing attacks and data packet misalignment.

[0056] Among them, the time validity mechanism ensures that data is transmitted and processed within strict time limits. By implementing the time validity mechanism, the secure real-time bus channel can ensure that data does not lose its value or cause security risks due to network delays. At the same time, this can also prevent replay attacks because each data packet has strict time validity.

[0057] The SRB bus module is used to transmit sensitive data of a networked terminal whose device type is a sensitive device through a secure real-time bus channel.

[0058] Among them, the SRB bus module is an interface or channel for secure data transmission. The SRB bus module transmits sensitive data of networked terminals whose device type is sensitive equipment through a secure real-time bus channel. Only after the fingerprint authentication is successful, this module will activate the transmission channel to ensure the security of the data.

[0059] The embodiment of the present invention transmits sensitive data through a secure real-time bus channel to ensure that the data is encrypted and protected during transmission. The design of the SRB bus module can ensure the secure transmission of sensitive information, prevent data leakage and interception, and thus maintain the confidentiality and integrity of network communications.

[0060] The present invention provides a USB extended secure real-time bus network card device, which includes a USB interface, a non-volatile memory, a device ID comparison module, a fingerprint authentication module and an SRB bus module. The USB interface is used to connect a network terminal with a network demand; the non-volatile memory is used to store a sensitive device ID list; the device ID comparison module is used to read the device ID of the network terminal, retrieve the device ID of the network terminal in the sensitive device ID list, and identify the device type of the network terminal; the fingerprint authentication module is used to perform a fingerprint authentication process for a network terminal whose device type is a sensitive device: verify the fingerprint information of the device person in charge of the network terminal, and after the authentication is passed, trigger the SRB bus module to open a secure real-time bus channel, and when the authentication fails, prevent the transmission of sensitive data; the SRB bus module is used to transmit sensitive data of a network terminal whose device type is a sensitive device through a secure real-time bus channel. The network card device provided by the present invention can provide corresponding support and security protection according to the data sensitivity of the network terminal, and provide a flexible data transmission mechanism, and can select a secure real-time bus channel for transmission according to different sensitivity requirements of the data, while ensuring data security, it also takes into account ease of use.

[0061] Optionally, the SRB bus module transmits non-sensitive data of a networked terminal whose device type is a non-sensitive device through a common network data channel.

[0062] Among them, ordinary network data channel refers to the path for data transmission through standard network protocols and infrastructure, without involving enhanced security measures or special encryption mechanisms.

[0063] The embodiments of the present invention provide a flexible network architecture by supporting different types of data and devices, and can automatically select a suitable transmission channel according to the sensitivity of the networked terminals and data, thereby optimizing the transmission efficiency of non-sensitive data while ensuring the security of critical data.

[0064] Optional, based on Figure 1 The structure shown, such as Figure 2As shown, another structural schematic diagram of the USB extended secure real-time bus network card device provided by an embodiment of the present invention, when the SRB bus module receives data through the RJ45 network interface, it identifies whether the data is in the secure real-time bus format. If so, it triggers the fingerprint authentication module to execute the fingerprint authentication process. After the authentication is passed, the secure real-time bus channel is opened, and then the device ID comparison module is triggered to verify the device type of the receiving terminal. When the device type of the receiving terminal is a sensitive device, the data is transmitted through the secure real-time bus channel.

[0065] Among them, the RJ45 network interface is a standard interface type for Ethernet network connection.

[0066] The safe real-time bus format refers to a data format used for transmission in a safe real-time bus channel.

[0067] The embodiments of the present invention use multi-level security verification measures during data reception and transmission, including format recognition, fingerprint authentication, and device ID comparison, to ensure that only verified users and devices can access the data, effectively preventing unauthorized access and potential security threats.

[0068] Optionally, when the USB interface of the networked terminal is inserted into the device ID comparison module, by comparing the device ID of the networked terminal with the list of sensitive device IDs stored in the non-volatile memory, if the device ID of the networked terminal exists in the list of sensitive device IDs, the device type of the networked terminal is identified as a sensitive device; if the device ID of the networked terminal does not exist in the list of sensitive device IDs, the device type of the networked terminal is identified as a non-sensitive device.

[0069] When a USB interface is inserted into a networked terminal, the embodiment of the present invention quickly and effectively identifies the importance and sensitivity of a sensitive device based on a sensitive device ID list so as to apply appropriate security policies, thereby ensuring that sensitive devices are more strictly protected and reducing resource consumption on non-sensitive devices.

[0070] Optionally, when the USB interface is inserted into a networked terminal with a corresponding network card driver installed, the network card driver is not installed repeatedly, but the fingerprint authentication module is triggered to execute the fingerprint authentication process each time the network card driver runs, and the timeliness of the fingerprint authentication is set according to usage requirements.

[0071] By avoiding repeated installation of the network card driver, the embodiment of the present invention allows the user to start using the USB device more quickly when inserting it, reduces waiting time, and improves the convenience and efficiency of device use. At the same time, the fingerprint authentication process is triggered each time the network card driver runs, ensuring that identity authentication is performed each time the device is used. This increases the security of device use and prevents unauthorized access.

[0072] Corresponding to the above-mentioned embodiment of the USB extended secure real-time bus network card device, the embodiment of the present invention also provides a terminal networking method, such as Figure 3 As shown, a flow chart of a terminal networking method provided by an embodiment of the present invention is shown, and the terminal networking method is applied to a USB extended secure real-time bus network card device. The method may include:

[0073] S300, connecting to a network terminal via a USB interface and reading a device ID of the network terminal.

[0074] The embodiment of the present invention establishes a physical connection with the target network terminal through the USB interface of the USB extended secure real-time bus network card device. After the connection is established, the device ID of the network terminal is accessed and read, wherein the device ID is a unique identifier for identifying and distinguishing different devices.

[0075] S310: Retrieve the device ID from the device ID list stored in the non-volatile memory to identify the device type of the networked terminal.

[0076] The non-volatile memory is a component of the USB extended secure real-time bus network card device.

[0077] The embodiment of the present invention uses a sensitive device ID list pre-recorded in a non-volatile memory to retrieve the device ID of a networked terminal. By retrieving the device ID list, it is possible to determine whether the networked terminal is a sensitive device, thereby determining the subsequent processing flow.

[0078] S320. When the device type is a sensitive device, execute the fingerprint authentication process: verify the fingerprint information of the device owner of the networked terminal, open the secure real-time bus channel after the authentication is passed, and block the transmission of sensitive data when the authentication fails.

[0079] When a networked device is identified as a sensitive device, the fingerprint authentication process is initiated. This process involves reading and verifying the fingerprint information of the device owner of the networked device to ensure that the person using the networked device is an authorized person. If the authentication is successful, the secure real-time bus channel will be activated to allow sensitive data transmission. If the authentication fails, sensitive data transmission will be blocked to prevent unauthorized access.

[0080] S330. Transmit sensitive data of a networked terminal whose device type is a sensitive device through a secure real-time bus channel.

[0081] After the fingerprint authentication is passed, the embodiment of the present invention uses a secure real-time bus channel to transmit the data of the sensitive device, wherein the secure real-time bus channel has high security and timeliness functions, including data encryption and other security measures to ensure that the data is not intercepted or tampered with during the transmission process. The use of the secure real-time bus channel ensures the secure transmission of sensitive data, meets the requirements of information security and commercial secret protection, and ensures data integrity and confidentiality.

[0082] A flow chart of a terminal networking method provided by an embodiment of the present invention, the terminal networking method is applied to a USB extended secure real-time bus network card device, the method may include: connecting a networked terminal through a USB interface and reading the device ID of the networked terminal; retrieving the device ID from a device ID list stored in a non-volatile memory to identify the device type of the networked terminal; in the case where the device type is a sensitive device, executing a fingerprint authentication process: verifying the fingerprint information of the device person in charge of the networked terminal, opening a secure real-time bus channel after the authentication is passed, and blocking the transmission of sensitive data when the authentication fails; transmitting sensitive data of a networked terminal whose device type is a sensitive device through a secure real-time bus channel. The present invention can provide corresponding support and security protection according to the data sensitivity of the networked terminal, and provide a flexible data transmission mechanism, and can select a secure real-time bus channel for transmission according to different sensitivity requirements of the data, while ensuring data security, it also takes into account ease of use.

[0083] Optional, in the above Figure 3 On the basis of one or more corresponding embodiments, in another optional embodiment provided by the embodiment of the present invention, the method may further include:

[0084] Transmit non-sensitive data of networked terminals whose device type is non-sensitive equipment through ordinary network data channels.

[0085] In the embodiment of the present invention, the networked device connected to the USB extended secure real-time bus network card device is identified as a non-sensitive device, indicating that the networked device does not involve confidential information or sensitive content-related data transmission and can use a common network channel instead of a secure real-time bus channel. The common network data channel is a standard data transmission path without additional security mechanisms and is suitable for transmitting data that does not require additional confidentiality measures.

[0086] The embodiment of the present invention uses ordinary network channels to transmit non-sensitive data, which reduces the occupation of high-security channel resources and optimizes the use of system resources, so that it can give priority to serving data that requires security protection. In addition, ordinary network channels usually do not require complex encryption and identity authentication processes, so data transmission speed is faster, thereby improving the overall efficiency of data transmission and reducing unnecessary delays.

[0087] Optional, in the above Figure 3 On the basis of one or more corresponding embodiments, in another optional embodiment provided by the embodiment of the present invention, the method may further include:

[0088] Receive data through the RJ45 network interface and detect whether the received data is in the secure real-time bus format. If so, execute the fingerprint authentication process and verify the device type of the receiving terminal. If the device type of the receiving terminal is a sensitive device, transmit the data through the secure real-time bus channel.

[0089] The embodiment of the present invention receives data sent from an external network through an RJ45 interface. After the data is received, it is detected whether the data conforms to the secure real-time bus format, wherein the secure real-time bus format is a format that may contain specific identifiers or structures and is used to mark the data as sensitive content. If the data is identified as a secure real-time bus format, the fingerprint authentication process will be started to verify the fingerprints of the relevant personnel to ensure that the processing and transmission of the data are performed by authorized personnel. After the fingerprint authentication is passed, it is also necessary to verify whether the type of the terminal device receiving the data is a sensitive device. Only sensitive devices have the right to receive and process such data. If the receiving terminal is verified as a sensitive device, the data will be transmitted through a secure real-time bus channel. The embodiment of the present invention enhances the ability to resist errors and unauthorized operations through multi-level verification (data format, fingerprint, device type), and improves the reliability of the overall network and data transmission.

[0090] Optional, in the above Figure 3 On the basis of one or more corresponding embodiments, in another optional embodiment provided by the embodiment of the present invention, retrieving the device ID from the device ID list stored in the non-volatile memory to identify the device type of the networked terminal may specifically include:

[0091] When a USB extended secure real-time bus network card device is inserted into a networked terminal, by comparing the device ID of the networked terminal with a list of sensitive device IDs stored in a non-volatile memory, if the device ID of the networked terminal exists in the list of sensitive device IDs, the device type of the networked terminal is identified as a sensitive device; if the device ID of the networked terminal does not exist in the list of sensitive device IDs, the device type of the networked terminal is identified as a non-sensitive device.

[0092] The embodiments of the present invention can dynamically adjust security policies by comparing device IDs and identifying device types, ensuring strict control over the transmission and processing of sensitive data, thereby flexibly maintaining efficient and secure data transmission in different operating environments.

[0093] Optional, in the above Figure 3On the basis of one or more corresponding embodiments, in another optional embodiment provided by the embodiment of the present invention, the method may further include:

[0094] When the USB extended secure real-time bus network card device is inserted into a networked terminal that has installed the corresponding network card driver, the network card driver is not installed repeatedly, but the fingerprint authentication process is executed each time the network card driver runs, and the timeliness of the fingerprint authentication is set according to the usage requirements.

[0095] When the USB extended secure real-time bus network card is inserted into a networked terminal, the embodiment of the present invention will detect whether the corresponding network card driver has been installed. If the driver has been installed, repeated installation is avoided, which saves time and reduces resource consumption. The fingerprint authentication process is executed each time the network card driver runs. This means that when the network card starts working, fingerprint verification must be passed to ensure that only authorized users can activate and use the functions of the network card. The embodiment of the present invention can set the timeliness of fingerprint authentication according to specific usage requirements, so that repeated authentication is not required within a certain period of time, or authentication is required each time it is used, depending on the balance between security policy and user convenience.

[0096] The embodiment of the present invention can maintain an efficient operation process while ensuring security and provide a user-friendly usage experience through accurate fingerprint authentication and a reasonable drive management strategy.

[0097] It should be understood that the various steps described in the method embodiments of the present invention may be performed in different orders and / or in parallel. In addition, the method embodiments may include additional steps and / or omit the steps shown. The scope of the present invention is not limited in this respect.

[0098] In order to facilitate understanding of the data transmission process involved in the USB extended secure real-time bus network card provided in the embodiment of the present invention, Figure 4 , Figure 5 , Figure 6 and Figure 7 Provide explanation.

[0099] Figure 4The figure shows a principle block diagram of a USB extended secure real-time bus network card provided by an embodiment of the present invention, which is intended to provide secure connections for devices with networking requirements. The user's devices are divided into sensitive devices and non-sensitive devices, and different devices need to adapt different drivers when installing the network card driver. For sensitive devices involving information security, commercial secrets, personal privacy and other requirements, fingerprint authentication of the person in charge of the device is required when installing the network card driver. If the authentication is successful, the transmission channel of sensitive data is opened; if the authentication fails, the sensitive data will be prevented from communicating with the next level module (SRB bus module). After the authentication is passed, the ordinary network data channel is usually closed to ensure the security and timeliness of the data, but the two channels can be enabled at the same time by a dedicated person. The SRB bus module processes sensitive and non-sensitive data differently. Sensitive data is processed through security mechanisms and timeliness mechanisms (such as encryption, transmission synchronization macrocycles) to ensure data security and timely transmission. Sensitive devices usually send sensitive data, and all data transmission must use a secure real-time bus channel. Data that fails authentication is not allowed to be sent externally. Any operation on sensitive devices requires the relevant personnel to authenticate their operable permissions to ensure that only authorized personnel can operate the device. The non-sensitive data of non-sensitive devices does not need to be authenticated and is directly transmitted to the SRB bus module through the non-sensitive data channel. The SRB module only forwards it to the network.

[0100] For RJ45 network port data reception, the received network data is first detected by the SRB module to see if it is in the secure real-time bus format. If it is, it needs to go through the fingerprint authentication channel, and the receiving device must be a sensitive device, otherwise the data cannot be received normally.

[0101] Figure 5 FIG. 1 is a schematic diagram showing a sensitive device communicating with another sensitive device through a secure real-time bus channel provided by an embodiment of the present invention. Figure 6 It is a schematic diagram showing that a sensitive device and a non-sensitive device provided by an embodiment of the present invention cannot communicate with each other. Figure 7 The diagram shows a schematic diagram of a non-sensitive device communicating through a common network data channel provided by an embodiment of the present invention. The networked device using the USB extended secure real-time bus network card device only allows data communication between devices of the same type. Specifically, data transmission between sensitive devices is carried out through a secure real-time bus channel to ensure data security and real-time performance; and data transmission between non-sensitive devices is carried out using a common network data channel.

[0102] Although operations are depicted in a particular order, this should not be understood as requiring that the operations be performed in the particular order shown or in a sequential order.Multitasking and parallel processing may be advantageous under certain circumstances.

[0103] An embodiment of the present invention provides a computer-readable storage medium on which a program is stored. When the program is executed by a processor, the terminal networking method is implemented.

[0104] An embodiment of the present invention provides a processor, which is used to run a program, wherein the terminal networking method is executed when the program is run.

[0105] The present invention also provides a computer program product, which, when executed on an electronic device, is suitable for executing a program of initializing the steps of the terminal networking method.

[0106] The present invention is described with reference to the flowcharts and / or block diagrams of the network devices, methods, and computer program products according to the embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of the processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable device to generate a machine, so that the instructions executed by the processor of the computer or other programmable device generate instructions for implementing the process in the flowchart. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0107] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in the present invention are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant laws, regulations and standards of relevant countries and regions.

[0108] It is understandable that before using the technical solutions disclosed in the embodiments of the present disclosure, the types, scope of use, usage scenarios, etc. of the personal information involved in the present disclosure should be informed to the user and the user's authorization should be obtained in an appropriate manner in accordance with relevant laws and regulations.

[0109] In the description of the present invention, it should be understood that the terms "up", "down", "front", "back", "left" and "right" etc. indicating directions or positional relationships are based on the directions or positional relationships shown in the accompanying drawings. They are only for the convenience of describing the present invention and simplifying the description. They do not indicate or imply that the positions or elements referred to must have specific directions, be constructed and operate in specific directions. Therefore, they should not be understood as limitations of the present invention.

[0110] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. It should also be noted that the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0111] It should be understood by those skilled in the art that the embodiments of the present invention may be provided as methods, systems or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment or an embodiment combining software and hardware aspects. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0112] The above are only embodiments of the present invention and are not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent substitution, improvement, etc. made within the spirit and principle of the present invention should be included in the scope of the claims of the present invention.

Claims

1. A USB extended secure real-time bus network card device, characterized in that: include: USB interface, non-volatile memory, device ID comparison module, fingerprint authentication module and SRB bus module, The USB interface is used to connect to a network terminal that has a network demand; The non-volatile memory is used to store a sensitive device ID list; The device ID comparison module is used to read the device ID of the networked terminal, retrieve the device ID of the networked terminal in the sensitive device ID list, and identify the device type of the networked terminal; The fingerprint authentication module is used to perform a fingerprint authentication process on the networked terminal whose device type is a sensitive device: verify the fingerprint information of the device person in charge of the networked terminal, and after the authentication is passed, trigger the SRB bus module to open the secure real-time bus channel, and when the authentication fails, prevent the transmission of sensitive data; The SRB bus module is used to transmit the sensitive data of the networked terminal whose device type is a sensitive device through the secure real-time bus channel.

2. The USB extended secure real-time bus network card device according to claim 1, characterized in that: The SRB bus module transmits the non-sensitive data of the networked terminal whose device type is a non-sensitive device through a common network data channel.

3. The USB extended secure real-time bus network card device according to claim 1, characterized in that: When receiving data through the RJ45 network interface, the SRB bus module identifies whether the data is in a secure real-time bus format. If so, the fingerprint authentication module is triggered to execute the fingerprint authentication process. After the authentication is passed, the secure real-time bus channel is opened, and the device ID comparison module is triggered to verify the device type of the receiving terminal. When the device type of the receiving terminal is a sensitive device, the data is transmitted through the secure real-time bus channel.

4. The USB extended secure real-time bus network card device according to claim 1, characterized in that: When the USB interface is inserted into the networking terminal, the device ID comparison module compares the device ID of the networking terminal with the sensitive device ID list stored in the non-volatile memory. If the device ID of the networking terminal exists in the sensitive device ID list, the device type of the networking terminal is identified as a sensitive device; if the device ID of the networking terminal does not exist in the sensitive device ID list, the device type of the networking terminal is identified as a non-sensitive device.

5. The USB extended secure real-time bus network card device according to claim 1, characterized in that: When the USB interface is inserted into the network terminal with the corresponding network card driver installed, the network card driver is not installed repeatedly, but the fingerprint authentication module is triggered to execute the fingerprint authentication process each time the network card driver runs, and the timeliness of fingerprint authentication is set according to usage requirements.

6. A terminal networking method, characterized in that: Applied to a USB extended secure real-time bus network card device, the method comprises: Connecting to a network terminal via a USB interface and reading the device ID of the network terminal; Retrieving the device ID from a device ID list stored in a non-volatile memory to identify the device type of the networked terminal; In the case where the device type is a sensitive device, a fingerprint authentication process is performed: the fingerprint information of the device owner of the networked terminal is verified, and after the authentication is passed, a secure real-time bus channel is opened, and when the authentication fails, the transmission of sensitive data is blocked; The sensitive data of the networked terminal whose device type is a sensitive device is transmitted through the secure real-time bus channel.

7. The method according to claim 6, characterized in that Also includes: The non-sensitive data of the networked terminal whose device type is a non-sensitive device is transmitted through a common network data channel.

8. The method according to claim 6, characterized in that Also includes: Receive data through the RJ45 network interface, detect whether the received data is in the secure real-time bus format, if so, execute the fingerprint authentication process, and verify the device type of the receiving terminal. When the device type of the receiving terminal is a sensitive device, transmit the data through the secure real-time bus channel.

9. The method according to claim 6, characterized in that The retrieving the device ID from the device ID list stored in the non-volatile memory to identify the device type of the networked terminal includes: When the USB extended secure real-time bus network card device is inserted into the networking terminal, by comparing the device ID of the networking terminal with the sensitive device ID list stored in the non-volatile memory, if the device ID of the networking terminal exists in the sensitive device ID list, the device type of the networking terminal is identified as a sensitive device; if the device ID of the networking terminal does not exist in the sensitive device ID list, the device type of the networking terminal is identified as a non-sensitive device.

10. The method according to claim 6, characterized in that Also includes: When the USB extended secure real-time bus network card device is inserted into the networked terminal in which the corresponding network card driver has been installed, the network card driver is not installed repeatedly, but the fingerprint authentication process is executed each time the network card driver runs, and the timeliness of fingerprint authentication is set according to usage requirements.

Images