Communication system and equipment applied to network security

Abstract

The invention discloses a communication system and equipment applied to network security. The communication system comprises terminal equipment, network relay equipment, a communication optical cable and a server, the terminal equipment is an upper computer, and a firewall and an intrusion prevention system are arranged on the terminal equipment; the network relay equipment comprises a switch and a router, and the switch and the router are used for forwarding electric (optical) signals; the invention relates to the technical field of communication systems, a highly integrated structure is adopted, a firewall and an intrusion prevention system are arranged on a terminal device and a server, an optical cable data protection unit is integrated on one side of the server, the optical cable data protection unit is used for remotely monitoring an optical cable, data stealing is avoided, and the communication efficiency is improved. Aiming at the optical cable data stealing means at the present stage, whether the optical cable data is stolen or not is detected by depending on the on-off condition of the optical cable and attenuation of optical fiber signals, and then the optical cable data is protected through the protection structure, so that the network security is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of communication systems, and in particular to a communication system and equipment applied in network security. Background Art

[0002] With the advancement and maturity of network technology, people's production and life are increasingly dependent on the network. However, this means that people are increasingly relying on the network to save and transmit important data, which puts higher demands on network security.

[0003] Network data transmission mainly relies on communication systems. Therefore, in modern network security services, communication systems are required to have high network security protection performance. The current network communication system architecture is mainly composed of terminal equipment, routers, switches, optical cables and servers, which are built step by step.

[0004] From the architecture of the network communication system, it can be found that the current network data protection is more based on the communication encryption protection of the upper-level server and the terminal data protection based on the user. The protection of the upper-level server is mainly based on physical protection measures such as firewalls, intrusion prevention systems and cabinets, while terminal data protection can rely on firewalls and anti-intrusion software. At the same time, the interaction time with the user is longer and can be better protected and monitored, so the security is better.

[0005] Although the data protection of communication servers and terminals has good protection performance, the optical cables used as the intermediate transmission of data exchange often have no security defense measures. This makes the theft through optical cables a new and more covert data theft method during the transmission of communication data. Specifically, there are reports that "SubCom has deployed monitoring equipment on submarine optical cables around the world." Therefore, how to protect optical cables from stolen data is an important development trend in future network security.

[0006] Based on the above, protecting network data security requires not only protecting network servers and personal terminals, but also protecting the optical cables used for transmission is also an important task. At present, the means of stealing optical cable data are mainly divided into accessing the optical cable through external leads to divert the optical signal, and stripping the optical cable to expose the bare optical fiber to collect the leaked optical signal. At present, the monitoring and protection of optical cable data transmission mainly adopts the attenuation of optical cable signals as the detection method. The method is relatively simple, and the deformation and bending of the optical cable can easily cause the attenuation of the optical cable signal. Therefore, the detection is prone to errors, and usually does not have subsequent disposal functions, which can easily cause data theft. In view of this, in-depth research on the above issues led to the emergence of this case. Summary of the invention

[0007] In view of the deficiencies of the prior art, the present invention provides a communication system and equipment applied in network security, which solves the existing background technology problems.

[0008] To achieve the above objectives, the present invention is implemented through the following technical solutions: A communication system applied in network security, including terminal equipment, network relay equipment, communication optical cables and servers;

[0009] The terminal device is a host computer, and a firewall and an intrusion prevention system are arranged on the terminal device;

[0010] The network relay equipment includes a switch and a router, and the switch and the router are used for forwarding electrical (optical) signals;

[0011] The communication optical cable connects the network relay device and the server for optical signal transmission;

[0012] The server plays the role of data protocol conversion, data storage and network management;

[0013] The server side establishes an encrypted communication tunnel based on the VPN access control module, and sets a data encryption module and an access control module;

[0014] The server side is also provided with an optical cable data protection unit, which is connected to the communication optical cable and performs data protection detection on the communication optical cable. The optical cable data protection unit is composed of an armor protection detection module, an optical fiber attenuation detection module and a data protection module;

[0015] The armor protection detection module transmits ultrasonic signals through the armor layer of the communication optical cable to perform continuity detection, and transmits the detection data to the data protection module;

[0016] The optical fiber attenuation detection module protects the optical cable communication data by detecting the signal attenuation data of the communication optical cable, and transmits the detection data to the data protection module;

[0017] The data protection module is equipped with a dynamic IP simulation module and a hardware encryption engine. The data protection module analyzes the armor layer on-off data and the optical fiber attenuation data, and starts the dynamic IP simulation module and the hardware encryption engine according to the analysis results.

[0018] The authentication method of the VPN access control module is one or more of the following methods: mobile phone verification code login, username and password login, fingerprint authentication and face recognition authentication.

[0019] The server is equipped with a firewall, an intrusion prevention system, and a security information and event management system.

[0020] A communication device used in network security, comprising a server cabinet, a connection port is provided on one side of the server cabinet, the connection port is used to install a communication optical cable, and an optical cable data protection unit is provided on the connection port for monitoring the communication optical cable;

[0021] The optical cable data protection unit comprises an integrated box body, which is a hollow shell with a rectangular structure. Both sides of the integrated box body are connected to the server cabinet by bolts. A detection and protection mechanism is provided at the bottom of the integrated box body to connect with the communication optical cable.

[0022] The detection and protection mechanism is composed of an optical fiber attenuation detection module and an armor protection detection module;

[0023] The integrated box is provided with a data protection module connected to the server in the server cabinet;

[0024] The communication optical cable is provided with a companion detection optical fiber and an armor layer is wrapped outside the optical fiber; the optical fiber attenuation detection module performs optical signal attenuation of the optical fiber based on the companion detection optical fiber; the armor protection detection module is installed based on the armor layer of the communication optical cable;

[0025] The armor protection detection module is composed of a positioning installation component wrapped outside the communication optical cable, a signal transceiver installed on the positioning installation component, and a detection control component connected to the signal transceiver and the positioning installation component. The positioning installation component is installed outside the communication optical cable to provide an installation space for the detection control component. The detection control component connects the signal transceiver to the armor layer of the communication optical cable.

[0026] The signal transceiver is powered by an integrated box body, the signal transceiver is arranged based on a relay, and the detection end of the signal transceiver is connected to the detection control component and to the armor layer of the communication optical cable;

[0027] The optical fiber attenuation detection module includes an optical power meter, a positioning card mounting slot and a data transmitter;

[0028] The data protection module includes a data conversion interface, which is connected to the signal transceiver and the data transmitter respectively. The data conversion interface is connected to a protection controller, and the protection controller is equipped with a dynamic IP simulation module and a hardware encryption engine. The data conversion interface receives detection signals transmitted by the signal transceiver and the data transmitter, and the protection controller controls the dynamic IP simulation module and the hardware encryption engine to work according to the detection signals. The dynamic IP simulation module and the hardware encryption engine are connected to a server.

[0029] The positioning and installation assembly includes a wrapping ring sleeve, which is composed of a pair of semi-annular positioning ring tubes, one side of the pair of positioning ring tubes is connected by a hinge, and the corresponding sides of the pair of positioning ring tubes are provided with connectors, and the connectors connect and fix the pair of positioning ring tubes;

[0030] The connector comprises a pressing rod, which is movably mounted on a positioning ring tube, and a corresponding reverse pull sleeve is arranged on the other positioning ring tube, and a locking sleeve is arranged on the outer sleeve of the pressing rod, and a through groove is provided on the reverse pull sleeve, and the through groove matches the diameter of the pressing rod, and a limiting groove is arranged on the through groove, and the limiting groove cooperates with the reverse pull sleeve;

[0031] Two pairs of sealing rubber rings are arranged at both ends of a pair of positioning ring tubes, and the two pairs of sealing rubber rings use an inflatable structure to wrap the outer sheath of the communication cable.

[0032] The detection control assembly includes a fixing seat, one side of the positioning ring tube extends out of the fixing seat, the fixing seat is provided with a telescopic channel, the fixing seat is connected to the integrated box body, the integrated box body is provided with a telescopic controller, the bottom of the telescopic controller is connected to a telescopic control rod, the telescopic control rod penetrates the fixing seat and contacts the armor layer, and the telescopic control rod is connected to the detection end;

[0033] The telescopic controller includes a control motor, a driving gear is provided at the driving end of the control motor, a driving rack is meshed with one side of the driving gear, the driving rack is connected to the telescopic control rod, a reverse thrust spring is sleeved on the outer sleeve of the telescopic control rod, a one-way ratchet is provided on the inner shaft of the driving gear, a driving roller is sleeved on the driving end of the control motor, a one-way ratchet is provided on one side of the driving roller, and the one-way ratchet is meshed with the one-way ratchet.

[0034] The accompanying detection optical fiber is coaxially arranged with the optical fiber in the communication optical cable, and the armor layer is a GYTA type or GYTS type armor layer.

[0035] The end of the accompanying detection optical fiber is connected to a light source. The optical power meter calculates the optical power and the wavelength of the optical signal after the accompanying detection optical fiber is transmitted, calculates the optical power attenuation efficiency according to the wavelength and compares it with the actual detection optical power.

[0036] One end of the data protection module passes through the integrated box body, and a plurality of data interfaces are arranged outside the data protection module, and the plurality of data interfaces are connected to the server through a network cable;

[0037] The integrated box body is a cavity shell with a rectangular structure. A power adapter is arranged on one side of the integrated box body, and the power adapter is connected to the server. A control cover is arranged on one side of the integrated box body, and the control cover is connected to the integrated box body in a separate body.

[0038] Beneficial Effects

[0039] The present invention provides a communication system and device for network security. It has the following beneficial effects: a highly integrated structure is adopted. In addition to setting up a firewall and an intrusion prevention system on the terminal device and the server, an optical cable data protection unit is integrated on the server side. The optical cable data protection unit is used to remotely monitor the optical cable to avoid data theft. In view of the current optical cable data theft methods, the on-off status of the optical cable and the attenuation of the optical fiber signal are used to detect whether the optical cable data is stolen, and then the optical cable data is protected by the protection structure, thereby improving network security. Specifically, the following advantages are also included;

[0040] 1. Connect the optical cable data protection unit to the server, and monitor the detection data of the optical cable data protection unit on the server side, so as to facilitate the quantification and control of the protection effect of the optical cable data;

[0041] 2. The detection methods of the optical cable data protection unit are divided into long-distance continuity detection relying on the armor layer as a conductor and attenuation data monitoring based on the attenuation of the optical cable signal. They can effectively monitor the common methods of optical cable data theft and discover data theft in time;

[0042] 3. The data protection module installed in the optical cable data protection unit, based on its own firewall and other protection measures, uses the data protection module to encrypt or cut off the communication data through dynamic IP and encryption operations after the optical cable is stolen, so as to effectively protect the communication data;

[0043] 4. The optical cable data protection unit adopts an independently set installation structure, with an integrated box as the main body and installed close to the communication optical cable. It has a simple structure and high integration, and has low requirements for modification of the existing server structure, making it more convenient to deploy and disassemble. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] Figure 1 The present invention is a system block diagram of a communication system applied in network security.

[0045] Figure 2 This is a first three-dimensional structural schematic diagram of a communication device used in network security according to the present invention.

[0046] Figure 3 This is a second three-dimensional structural schematic diagram of a communication device applied in network security according to the present invention.

[0047] Figure 4 This is a schematic diagram of the main structure of a communication device used in network security according to the present invention.

[0048] Figure 5This is a third stereoscopic structural schematic diagram of a communication device applied in network security according to the present invention.

[0049] Figure 6 The present invention is a schematic diagram of a cross-sectional three-dimensional structure of a communication device used in network security.

[0050] Figure 7 This is a fourth three-dimensional structural schematic diagram of a communication device applied in network security according to the present invention.

[0051] Figure 8 This is a schematic diagram of a front cross-sectional structure of a communication device used in network security according to the present invention.

[0052] Fig. 9 The present invention is a schematic diagram of a partial cross-sectional structure of a communication device used in network security.

[0053] Fig.10 This is a schematic diagram of the three-dimensional structure of a positioning and installation component of a communication device used in network security according to the present invention.

[0054] Fig.11 The present invention is a schematic diagram of a side cross-sectional structure of a communication device used in network security.

[0055] Fig.12 A communication device used in network security according to the present invention Figure 8 A local enlarged schematic diagram of point A in the middle.

[0056] Fig.13 The present invention is a schematic diagram of an optical cable data protection unit system of a communication system and equipment used in network security.

[0057] In the figure: 1. Server cabinet; 2. Communication optical cable; 3. Integrated box; 4. Optical fiber attenuation detection module; 5. Armor protection detection module; 6. Data protection module; 21. Armor layer; 22. Accompanying detection optical fiber; 31. Power adapter; 32. Control cover; 33. Electrical controller; 41. Optical power meter; 42. Positioning card slot; 43. Data transmitter; 51. Positioning installation component; 52. Signal transceiver; 53. Detection control component; 54. Level adjustment component; 61. Data conversion interface; 62. Protection controller; 63. Data interface; 511. Positioning ring tube; 512. Hinge; 513. Connection device; 514, blocking rubber ring; 531, fixing seat; 532, telescopic channel; 533, telescopic controller; 534, telescopic control rod; 541, rotating ring groove; 542, rotating plate; 543, horizontal track; 544, sliding seat; 545, guide wire rod; 546, rotating ring; 5131, pressing rod; 5132, reverse pull sleeve; 5133, locking sleeve; 5134, through slot; 5135, limit slot; 5331, control motor; 5332, driving gear; 5333, driving rack; 5334, reverse push spring; 5335, one-way ratchet; 5336, driving roller; 5337, one-way ratchet. DETAILED DESCRIPTION

[0058] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0059] See also Figure 1-13 The present invention provides an implementation scheme: In modern communication systems, client-based firewalls and intrusion prevention systems can effectively protect the security of network data. Firewalls and intrusion prevention systems can also be installed on the server side. Therefore, network data is only easily intercepted and cracked during transmission. At present, the transmission of network data mainly relies on optical cable equipment. Therefore, many measures have emerged to steal data from optical cables. How to protect the transmission of network security data is an urgent problem to be solved.

[0060] Embodiment 1: In view of the above problems, according to the attached Figure 1It can be seen that the present application discloses a communication system applied in network security, including terminal equipment, network relay equipment, communication optical cables and servers; in the specific implementation process, the terminal equipment is responsible for human-computer interaction, the data generated during the use of the terminal equipment is converted by the network relay equipment, and then the data is sent to the server through the communication optical cable, the server stores and processes the data uploaded by the terminal equipment, and then sends it back to the network relay equipment through the communication optical cable, and then the network relay equipment distributes the data to the terminal equipment. In this process, in order to protect the network security of the data, it is necessary to set network protection measures on network equipment at all levels, as follows;

[0061] The terminal device is the host computer, which is a mobile phone, computer and other devices. It is mainly responsible for human-computer interaction and the sending and receiving of client data. The terminal device is equipped with a firewall and intrusion prevention system;

[0062] Network relay equipment includes switches and routers. Network relay equipment is installed in large computer rooms or homes to integrate and collect data, and switches and routers are used to forward electrical (optical) signals;

[0063] Communication optical cables connect network relay equipment and servers for optical signal transmission. Switches convert electronic data into optical signals and use the high-speed characteristics of optical fibers to complete data interaction with servers.

[0064] The server is the data processing center and storage center of the communication system. The specific server plays the role of data protocol conversion, data storage and network management. The data uploaded by the terminal device is processed and stored by the server, and then the processed data is sent back to the terminal device in the form of an optical signal to complete the network service. In order to protect the security of the server, the server is equipped with a firewall, an intrusion prevention system, and a security information and event management system. The server side establishes an encrypted communication tunnel based on the VPN access control module, and sets up a data encryption module and an access control module. The verification method of the VPN access control module is one or more of the following methods: mobile phone verification code login, username and password login, fingerprint authentication, and face recognition authentication.

[0065] In view of the problem that there is no protection means in the process of optical cable data transmission in the current network security, in order to protect data security, an optical cable data protection unit is also set on the server side. The optical cable data protection unit is connected to the communication optical cable. The optical cable data protection unit performs optical fiber signal attenuation detection and continuity detection on the communication optical cable separately, and encrypts the server data;

[0066] The optical cable data protection unit consists of an armor protection detection module, an optical fiber attenuation detection module, and a data protection module;

[0067] The armor protection detection module transmits ultrasonic signals through the armor layer of the communication optical cable to perform continuity detection, and transmits the detection data to the data protection module;

[0068] The optical fiber attenuation detection module protects the optical cable communication data by detecting the signal attenuation data of the communication optical cable, and transmits the detection data to the data protection module;

[0069] The data protection module is equipped with a dynamic IP simulation module and a hardware encryption engine. The data protection module analyzes the armor layer on-off data and the optical fiber attenuation data, and starts the dynamic IP simulation module and the hardware encryption engine according to the analysis results.

[0070] Embodiment 2: In view of the above problems, according to the attached Figure 2 -Attached Fig.13 It can be seen that in order to cooperate with the application of the above system, the present application also discloses a communication device used in network security, including a server cabinet 1, the communication device is installed based on the server cabinet 1, the server cabinet 1 integrates the server and various security devices necessary for the server, and a connection port is provided on one side of the server cabinet 1, the connection port is used to install a communication optical cable 2, the communication optical cable 2 is connected to the server, and plays a role in optical signal transmission, and then an optical cable data protection unit is provided on the connection port for monitoring and protecting the communication optical cable 2;

[0071] According to the instruction manual Figure 2 -Attached Figure 5 It can be seen that the above-mentioned optical cable data protection unit includes an integrated box body 3, which is a hollow shell with a rectangular structure. The integrated box body 3 serves as the main onboard box body for installing the optical cable data protection unit. The integrated box body 3 itself is made of plastic-lined aluminum alloy. Both sides of the integrated box body 3 are connected to the server cabinet 1 by bolts, which is convenient for disassembly and maintenance.

[0072] Furthermore, the integrated box body 3 is a cavity shell with a rectangular structure, a power adapter 31 is arranged on one side of the integrated box body 3, the power adapter 31 is connected to the server, a control cover plate 32 is arranged on one side of the integrated box body 3, the control cover plate 32 is connected to the integrated box body 3 in a split manner, and the electrical controller 33 in the integrated box body 3 can be controlled by the control cover plate 32, a detection and protection mechanism is arranged at the bottom of the integrated box body 3 and connected to the communication optical cable 2, the detection and protection mechanism is composed of an optical fiber attenuation detection module 4 and an armor protection detection module 5, and the main function of the detection and protection mechanism is to perform attenuation detection of the optical fiber signal of the communication optical cable 2 and on-off detection of the armor protection layer, which is specifically implemented by the above-mentioned optical fiber attenuation detection module 4 and armor protection detection module 5;

[0073] A data protection module 6 is provided in the integrated box body 3 and connected to the server in the server cabinet 1. When the optical fiber attenuation detection module 4 and the armor protection detection module 5 detect that the optical cable data is stolen, the data protection module 6 implements temporary protection of the server, further enriching the server data protection means, making it difficult to decipher the data transmitted by the optical cable, achieving the purpose of protecting the data, and at the same time, issuing an alarm and cutting off the server operation, which can further improve the security of data protection;

[0074] According to the instruction manual Figure 5 It can be seen that the communication optical cable 2 is provided with a companion detection optical fiber 22 and an armor layer 21 is wrapped around the optical fiber. The companion detection optical fiber 22 is coaxially arranged with the optical fiber in the communication optical cable 2. The armor layer 21 is a GYTA type or a GYTS type armor layer 21. The companion detection optical fiber 22 is a single-mode optical fiber (SMF) with a detection wavelength of 1550nm and a bandwidth of 10GHz / km. The optical fiber attenuation detection module 4 can perform optical signal attenuation of the optical fiber based on the companion detection optical fiber 22. Under normal circumstances, the attenuation range of the companion detection optical fiber 22 is 0.2-0.3dB / km. If the detection value is higher than the range, it can be determined that the data has been stolen; the armor protection detection module 5 is based on the armor layer 21 of the communication optical cable 2 to implement monitoring. The armor layer 21 is actually a conductor. Then, the armor protection detection module 5 is used to construct a continuity detection system based on the armor layer 21, and the armor layer 21 is arranged outside the optical fiber of the cable. When the outer skin of the optical cable is damaged to steal data, the armor protection detection module 5 can be used to determine whether the optical cable is damaged and whether the data security is threatened according to the continuity of the armor layer 21, and then determine the disconnection position of the optical cable data;

[0075] According to the instruction manual Figure 6 -Attached Figure 8 It can be known that the armor protection detection module 5 is composed of a positioning and installation component 51 wrapped outside the communication optical cable 2, a signal transceiver 52 installed on the positioning and installation component 51, and a detection control component 53 connecting the signal transceiver 52 and the positioning and installation component 51. The positioning component is installed based on the integrated box body 3, and the positioning and installation component 51 is installed outside the communication optical cable 2 to provide an installation space for the detection control component 53. The detection control component 53 can be movable and is installed based on the positioning and installation component 51. The detection control component 53 connects the signal transceiver 52 to the armor layer 21 of the communication optical cable 2, and the armor layer 21 is connected through the signal transceiver 52 to form a continuity detection system;

[0076] According to the instruction manual Figure 8It can be seen that the signal transceiver 52 is powered by the integrated box body 3, the signal transceiver 52 is set based on the relay, the detection end of the signal transceiver 52 is connected to the detection control component 53 and connected to the armor layer 21 of the communication optical cable 2, the signal transceiver 52 uses ultrasound as the detection signal, the ultrasonic detection signal is transmitted through the armor layer 21, and the signal is detected by the detection end at the signal transceiver 52 on the server side. After receiving the ultrasonic signal, the amplifier and filter carried by the signal transceiver 52 are used for signal processing. When it is detected that the transmission of the armor layer 21 signal is blocked, the relay will turn on the alarm circuit, thereby realizing the operation of the alarm and data protection module 6;

[0077] According to the instruction manual Fig. 9 -Attached Fig.11 It can be known that the above-mentioned optical fiber attenuation detection module 4 includes an optical power meter 41, a positioning card slot 42 and a data transmission device 43. The end of the above-mentioned accompanying detection optical fiber 22 is connected to a light source, and the optical power meter 41 is installed and fixed by the positioning card slot 42. The optical fiber attenuation detection detects and analyzes the optical fiber wavelength through the optical power meter 41, and detects the output power of the optical fiber of the optical cable. If there is an act of stealing data, the optical fiber signal will be intercepted, causing a decrease in the output optical fiber power. According to the decrease in the optical fiber power, it is judged whether the optical fiber attenuation is within the normal attenuation range, and then the data transmission device 43 is used to transmit the detection result;

[0078] According to the instruction manual Fig.13 It can be known that the above-mentioned data protection module 6 includes a data conversion interface 61, which is respectively connected to the signal transceiver 52 and the data transmitter 43, and is connected to a protection controller 62, which is equipped with a dynamic IP simulation module and a hardware encryption engine. The data conversion interface 61 receives the detection signal transmitted by the signal transceiver 52 and the data transmitter 43, and the protection controller 62 controls the dynamic IP simulation module and the hardware encryption engine to work according to the detection signal, and the dynamic IP simulation module and the hardware encryption engine are connected to the server;

[0079] In the specific implementation process, the data protection module 6 uses the protection controller 62 as the main control, and the protection controller 62 is built with the ATECC series security chip. The signal transceiver 52 and the data transmitter 43 are connected through the data conversion interface 61. When the signal transceiver 52 and the data transmitter 43 transmit the control signal of security protection, the dynamic IP simulation module and the hardware encryption engine connected to the protection controller 62 are used to encrypt the data of the server, thereby increasing the difficulty of data theft. In addition, the protection controller 62 is also equipped with an alarm module. In addition to remote alarm, the alarm module can also perform sound and light alarm through the sound and light alarm on the integrated box body 3. One end of the data protection module 6 passes through the integrated box body 3, and a plurality of data interfaces 63 are arranged outside the data protection module 6. The plurality of data interfaces 63 are connected to the server through network cables.

[0080] According to the instruction manual Figure 6 It can be seen that the above-mentioned positioning and installation component 51 includes a wrapping ring sleeve, which is fixed to the bottom of the integrated box body 3 through a horizontal adjustment component 54. The position of the wrapping ring sleeve can be adjusted by the horizontal adjustment component 54 to correspond to the communication optical cable 2. The wrapping ring sleeve is composed of a pair of positioning ring tubes 511 with a semi-annular structure. One side of the pair of positioning ring tubes 511 is connected by a hinge 512, so that the pair of positioning ring tubes 511 can rotate with the hinge 512 as the axis. A connector 513 is provided on the corresponding side of the pair of positioning ring tubes 511, and the connector 513 is connected to the pair of positioning ring tubes 511. The connector 513 can be used to fasten and fix the pair of positioning ring tubes 511, so that the pair of positioning ring tubes 511 wrap the outer skin of the communication optical cable 2 to the open position. Two pairs of sealing rubber rings 514 are provided at both ends of the pair of positioning ring tubes 511. The two pairs of sealing rubber rings 514 use an inflatable structure to wrap the outer skin of the communication cable. After the pair of positioning ring tubes 511 wrap the outside of the communication optical cable 2, the pair of sealing rubber rings 514 are inflated by injecting air, so that the pair of sealing rubber rings 514 expand and wrap the outer skin of the optical cable, thereby isolating the outer skin from external influences.

[0081] According to the instruction manual Figure 6 It can be seen that the above-mentioned horizontal adjustment component 54 includes a rotating ring groove 541, a rotating ring groove 541 is provided at the bottom of the integrated box body 3, a rotating plate 542 is mounted on the rotating ring groove 541, a horizontal track 543 is provided on the rotating plate 542, a sliding seat 544 is mounted on the horizontal track 543, a guide screw rod 545 is arranged parallel to one side of the horizontal track 543, the sliding seat 544 is threadedly engaged with the guide screw rod 545, and a rotating ring 546 is arranged at the bottom of the sliding seat 544 to be connected with one of the positioning ring tubes 511 of the wrapping ring sleeve;

[0082] According to the instruction manual Figure 6It can be known that the connector 513 includes a pressing rod 5131, which is movably mounted on a positioning ring tube 511, and a corresponding anti-pull sleeve 5132 is provided on the other positioning ring tube 511. The outer sleeve of the pressing rod 5131 is provided with a locking sleeve 5133, and the anti-pull sleeve 5132 is provided with a through groove 5134, which matches the diameter of the pressing rod 5131, and a limiting groove 5135 is provided on the through groove 5134, which cooperates with the anti-pull sleeve 5132.

[0083] During the specific implementation process, after a pair of positioning ring tubes 511 are symmetrically fastened together, the pressing rod 5131 is rotated to insert the pressing rod 5131 into the through groove 5134. During the process, the locking sleeve 5133 is always kept on the outside of the pressing rod 5131. When the pressing rod 5131 moves into place, the locking sleeve 5133 is released, and the locking sleeve 5133 is retracted by utilizing the reverse push action of the spring between the locking sleeve 5133 and the pressing rod 5131, and then the locking sleeve 5133 is inserted into the limiting groove 5135 of the reverse pull sleeve 5132. The pushing action of the spring is utilized to realize the pushing action of the pressing rod 5131, so that the pressing rod 5131 pulls the positioning ring tube 511 on one side to complete the fastening with the positioning ring tube 511 on the other side, thereby maintaining the sealing of the fastening of the pair of positioning ring tubes 511.

[0084] According to the instruction manual Figure 7 -Attached Figure 8 And attached Fig.12 It can be seen that the detection control component 53 includes a fixed seat 531, a fixed seat 531 is extended from one side of a positioning ring tube 511, a telescopic channel 532 is provided on the fixed seat 531, a telescopic controller 533 is provided in the integrated box body 3, a telescopic control rod 534 is connected to the bottom of the telescopic controller 533, the telescopic control rod 534 passes through the fixed seat 531 and contacts the armor layer 21, and the telescopic control rod 534 is connected to the detection end;

[0085] In the specific implementation process, the fixed seat 531 is used as the installation space of the detection control component 53, and the fixed seat 531 is connected to the horizontal adjustment component 54. The position of the fixed seat 531 is controlled by the horizontal adjustment component 54 so that it moves synchronously with the wrapping ring. The telescopic control rod 534 is controlled by the telescopic controller 533 to move linearly in the telescopic channel 532, so that the telescopic control rod 534 drives the detection end to move, so that the detection end contacts the armor layer 21, and then the detection end contacts the armor layer 21 to realize the sending and receiving of ultrasonic signals.

[0086] According to the instruction manual Figure 7 -Attached Figure 8 And attached Fig.12It can be known that the above-mentioned telescopic controller 533 includes a control motor 5331, a driving end of the control motor 5331 is provided with a driving gear 5332, one side of the driving gear 5332 is meshed with a driving rack 5333, the driving rack 5333 is connected to the telescopic control rod 534, the outer sleeve of the telescopic control rod 534 is provided with a reverse thrust spring 5334, the inner shaft of the driving gear 5332 is provided with a one-way ratchet 5335, and a driving roller 5336 is sleeved on the driving end of the control motor 5331, and a one-way ratchet 5337 is provided on one side of the driving roller 5336, and the one-way ratchet 5337 is meshed with the one-way ratchet 5335.

[0087] In the specific implementation process, when detecting contact, the control motor 5331 does not output power. Under the action of the reverse thrust spring 5334, the reverse thrust spring 5334 pushes the telescopic control rod 534 downward, so that the telescopic control rod 534 drives the detection end to contact the armor layer 21. Then, during disassembly and inspection, by starting the control motor 5331, the control motor 5331 is used to drive the one-way ratchet 5337 to rotate, and then the one-way ratchet 5337 is engaged with the one-way ratchet 5335. Under the action of the one-way ratchet 5335, the driving gear 5332 is rotated, so that the driving gear 5332 is engaged with the driving rack 5333. Since the driving rack 5333 is connected to the telescopic control rod 534, the driving rack 5333 can pull the telescopic control rod 534 to move, thereby making the detection end out of contact with the armor layer 21, which is convenient for maintenance and inspection.

[0088] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A communication system for network security, characterized in that: Including terminal equipment, network relay equipment, communication optical cables and servers; The terminal device is a host computer, and a firewall and an intrusion prevention system are arranged on the terminal device; The network relay equipment includes a switch and a router, and the switch and the router are used for forwarding photoelectric signals; The communication optical cable connects the network relay device and the server for optical signal transmission; The server plays the role of data protocol conversion, data storage and network management; The server side establishes an encrypted communication tunnel based on the VPN access control module, and sets a data encryption module and an access control module; The server side is also provided with an optical cable data protection unit, which is connected to the communication optical cable and is composed of an armor protection detection module, an optical fiber attenuation detection module and a data protection module; The armor protection detection module transmits ultrasonic signals through the armor layer of the communication optical cable to perform continuity detection, and transmits the detection data to the data protection module; The optical fiber attenuation detection module protects the optical cable communication data by detecting the signal attenuation data of the communication optical cable, and transmits the detection data to the data protection module; The data protection module is equipped with a dynamic IP simulation module and a hardware encryption engine. The data protection module analyzes the armor layer on-off data and the optical fiber attenuation data, and starts the dynamic IP simulation module and the hardware encryption engine according to the analysis results.

2. A communication system for network security according to claim 1, characterized in that: The authentication method of the VPN access control module is one or more of the following methods: mobile phone verification code login, username and password login, fingerprint authentication and face recognition authentication.

3. A communication system for network security according to claim 2, characterized in that: The server is equipped with a firewall, an intrusion prevention system, and a security information and event management system.

4. A communication device used in network security, applied to a communication system used in network security as claimed in any one of claims 1 to 3, characterized in that: Comprising a server cabinet (1), wherein a connection port is provided on one side of the server cabinet (1), the connection port is used to install a communication optical cable (2), and an optical cable data protection unit is provided on the connection port for monitoring the communication optical cable (2); The optical cable data protection unit comprises an integrated box body (3), the integrated box body (3) being a hollow shell with a rectangular structure, the two sides of the integrated box body (3) being connected to the server cabinet (1) by bolts, and the bottom of the integrated box body (3) being provided with a detection and protection mechanism connected to the communication optical cable (2); The detection and protection mechanism is composed of an optical fiber attenuation detection module (4) and an armor protection detection module (5); The integrated box body (3) is provided with a data protection module (6) which is connected to the server in the server cabinet (1); The communication optical cable (2) is provided with a companion detection optical fiber (22) and an armor layer (21) is wrapped around the optical fiber; the optical fiber attenuation detection module (4) performs optical fiber optical signal attenuation based on the companion detection optical fiber (22); the armor protection detection module (5) is installed based on the armor layer (21) of the communication optical cable (2); The armor protection detection module (5) is composed of a positioning installation component (51) wrapped outside the communication optical cable (2), a signal transceiver (52) installed on the positioning installation component (51), and a detection control component (53) connected to the signal transceiver (52) and the positioning installation component (51), wherein the positioning installation component (51) is installed outside the communication optical cable (2) to provide an installation space for the detection control component (53), and the detection control component (53) connects the signal transceiver (52) to the armor layer (21) of the communication optical cable (2); The signal transceiver (52) is powered by the integrated box (3), the signal transceiver (52) is arranged based on a relay, and the detection end of the signal transceiver (52) is connected to the detection control component (53) and to the armor layer (21) of the communication optical cable (2); The optical fiber attenuation detection module (4) comprises an optical power meter (41), a positioning card mounting slot (42) and a data transmission device (43); The data protection module (6) comprises a data conversion interface (61), the data conversion interface (61) being connected to the signal transceiver (52) and the data transmitter (43) respectively, the data conversion interface (61) being connected to a protection controller (62), the protection controller (62) being equipped with a dynamic IP simulation module and a hardware encryption engine, the data conversion interface (61) receiving detection signals transmitted by the signal transceiver (52) and the data transmitter (43), the protection controller (62) controlling the dynamic IP simulation module and the hardware encryption engine to operate according to the detection signals, and the dynamic IP simulation module and the hardware encryption engine being connected to a server.

5. A communication device for use in network security according to claim 4, characterized in that: The positioning and installation assembly (51) comprises a wrapping ring sleeve, which is composed of a pair of semi-annular positioning ring tubes (511), one side of the pair of positioning ring tubes (511) is connected via a hinge (512), and the corresponding sides of the pair of positioning ring tubes (511) are provided with a connector (513), and the connector (513) connects and fixes the pair of positioning ring tubes (511).

6. A communication device for use in network security according to claim 5, characterized in that: The detection control component (53) comprises a fixing seat (531), one side of the positioning ring tube (511) extends out from the fixing seat (531), a telescopic channel (532) is provided on the fixing seat (531), the fixing seat (531) is connected to the integrated box body (3), a telescopic controller (533) is provided in the integrated box body (3), a telescopic control rod (534) is connected to the bottom of the telescopic controller (533), the telescopic control rod (534) passes through the fixing seat (531) and contacts the armor layer (21), and the telescopic control rod (534) is connected to the detection end.

7. A communication device for use in network security according to claim 6, characterized in that: The accompanying detection optical fiber (22) is coaxially arranged with the optical fiber in the communication optical cable (2), and the armor layer (21) is a GYTA type or a GYTS type armor layer (21).

8. A communication device for use in network security according to claim 7, characterized in that: The end of the accompanying detection optical fiber (22) is connected to a light source, and the optical power meter (41) calculates the optical power and the wavelength of the optical signal after transmission of the accompanying detection optical fiber (22), calculates the optical power attenuation efficiency according to the wavelength, and compares it with the actual detection optical power.

9. A communication device for use in network security according to claim 8, characterized in that: One end of the data protection module (6) passes through the integrated box body (3), and a plurality of data interfaces (63) are arranged outside the data protection module (6), and the plurality of data interfaces (63) are connected to the server via a network cable.

10. A communication device for use in network security according to claim 9, characterized in that: The integrated box body (3) is a hollow shell with a rectangular structure. A power adapter (31) is provided on one side of the integrated box body (3). The power adapter (31) is connected to a server. A control cover plate (32) is provided on one side of the integrated box body (3). The control cover plate (32) is connected to the integrated box body (3) in a separate body.

Images