USB interface plugging device

Abstract

The invention relates to a USB interface plugging device which comprises a plugging plug capable of being inserted into a USB female head and a handheld terminal used in cooperation with the plugging plug. After the plugging plug is inserted into the USB interface, the plugging plug is automatically locked through the locking unit to form a physical plug which cannot be pulled out; the locking unit maintains a locking state, and the integrated connection unit is used for identity authentication and recording. The handheld terminal is connected with the plugging plug through the interface and establishes data communication with the plugging plug. And after encryption verification authorization, the handheld terminal controls the locking unit to unlock through the connecting unit. According to the plugging device, the USB interface can be reliably and physically locked, and the plugging device has identity authentication control and use recording functions, so that the safety management level of the USB interface is improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of computer interface security protection, in particular to a USB interface plugging device with encryption verification and magnetic control unlocking structure. BACKGROUND

[0002] As a commonly used computer peripheral device connection port, USB interface is widely used in data transmission and external storage devices. However, while being convenient, USB interface also brings serious security risks: unauthorized devices connected through USB interface may implant viruses or steal data, posing a threat to computer and network security. In high-security environments such as government, military, power systems and other important information infrastructure, physical isolation of USB interfaces is usually required to prevent any unauthorized USB device from accessing.

[0003] Existing USB interface physical plugging measures usually use simple dust plugs or mechanical locks. For example, a silica gel dust plug can be inserted into the USB port to prevent dust, but since there is no locking mechanism, users can easily pull it out, and it cannot play a role in forced plugging. Some USB interface locks use mechanical key locks, such as the USB port protection device disclosed in Chinese invention patent (CN114784573A), which uses a special key to unlock and remove when needed. Although this type of mechanical lock can achieve plugging of the USB interface to some extent, it still has shortcomings: first, the mechanical key may be copied or lost, causing security risks; second, these devices usually do not have identity recognition or use record functions, and cannot monitor who unlocked which interface at what time, making it difficult to meet the needs of audit tracing. In addition, when managing multiple USB interface locks at the same time, it is easy to lose or misplug the locks, causing inconvenience to interface management.

[0004] Therefore, there is an urgent need for a plugging device that can reliably physically lock the USB interface and has identity authentication control and use record functions to improve the level of USB interface security management and overcome the above-mentioned shortcomings in the prior art. SUMMARY

[0005] The purpose of the present application is to provide a USB interface physical plugging device with encryption verification and magnetic control unlocking structure to solve the problem of insufficient security and controllability of existing USB interface plugging measures. Through the scheme of the present application, the USB interface will be firmly plugged in the absence of authorization, and only authorized special equipment can unlock and remove it, and each unlocking operation is recorded and traced.

[0006] The technical solution adopted by the present application is as follows: A USB interface plugging device, comprising: The plug includes a shell, a male head arranged on one side of the shell, a locking unit, and a connecting unit. The locking unit includes a connecting rod rotatably arranged in the shell and elastically connected with the shell, a locking piece arranged on one end of the connecting rod, and a magnetic piece arranged on the other end of the connecting rod and in the shell; the end of the connecting rod provided with the locking piece extends out of the shell and is arranged in the male head. The connecting unit includes a first control module arranged in the shell, an inductor coil connected with the first control module and arranged in the shell, and a first interface arranged on the other side of the shell and connected with the first control module; the inductor coil is arranged to generate a magnetic field to attract the magnetic piece after being powered. The handheld terminal includes a second control module and a second interface connected with the second control module. After the first interface and the second interface are connected, the second control module establishes data communication with the first control module, and after encrypted authorization, the first control module controls the inductor coil to generate a magnetic field to attract the magnetic piece to drive the connecting rod to rotate, so that the locking piece is withdrawn from the locking position, thereby achieving unlocking of the plug.

[0007] In an embodiment of the present application, the locking piece protrudes along the height direction of the male head to form a clamping portion.

[0008] In an embodiment of the present application, the locking unit further includes a rotating shaft and a torsional spring; the rotating shaft is arranged in the shell along the width direction of the shell and the rotating shaft penetrates the connecting rod; the first torsional arm of the torsional spring is inserted into the connecting rod and the second torsional arm is inserted into the shell to form a counterforce point.

[0009] In an embodiment of the present application, the first control module includes a first memory; the first memory is used to store an encrypted key corresponding to a unique encrypted identity information of the plug and record information of each unlocking operation; the second control module includes a second memory; the second memory is used to store an encrypted key; the encrypted key of the first memory and the encrypted key of the second memory are successfully paired to achieve unlocking of the plug.

[0010] In an embodiment of the present application, the information includes unlocking time and the ID of the handheld terminal.

[0011] In an embodiment of the present application, the first interface includes a power supply positive pole, a power supply ground, and an RS485 interface for data communication, to realize bidirectional data communication between the first control module and the handheld terminal.

[0012] In one embodiment of the present application, the handheld terminal further comprises a display module; the display module is used for displaying the success or failure of unlocking.

[0013] In one embodiment of the present application, the handheld terminal further comprises an interaction module; the interaction module is used for converting the physical action into the instruction recognizable and responsive to the second control module in real time.

[0014] In one embodiment of the present application, the handheld terminal further comprises a state indicating lamp, which is used for indicating the state of the handheld terminal.

[0015] In one embodiment of the present application, the second interface is provided with the contact matching the first interface.

[0016] The above technical solution of the present application has the following advantages compared with the prior art: The USB interface plugging device sets a mechanical self-locking structure; the locking piece is automatically locked after the plugging plug is inserted into the USB female head. The locking piece is controlled by the connecting rod, the rotating shaft and the torsional spring, and the self-locking and resetting are realized without external power. The mechanical locking structure ensures that the unauthorized person cannot directly pull out the plugging device, and is the basis of physical plugging.

[0017] The USB interface plugging device sets a magnetic control unlocking mechanism; the plugging device is provided with a magnetic piece, which is matched with an inductor coil. When unlocking is needed, the authorized handheld terminal controls the inductor coil to generate a magnetic field to attract the magnetic piece to drive the connecting rod to move, overcome the elastic force of the torsional spring and reset the locking piece, so that the USB interface is unlocked and released, the mechanical key is avoided, and the controllability and safety of the unlocking process are improved.

[0018] The USB interface plugging device sets a passive electronic control hub; the plugging plug is integrated with a first control module. The first control module is responsible for encrypted authentication with the second control module of the handheld terminal and receiving the unlocking instruction, and records the operation log. The passive design makes the device small in size and long in service life, and does not affect the operation of the protected equipment.

[0019] The USB interface plugging device sets an encrypted identity authentication; the handheld terminal and the plugging plug are subjected to bidirectional encrypted authentication by using pre-shared keys or digital certificates before unlocking, and only the authorized terminal that passes the authentication can trigger the unlocking. This encrypted authentication mechanism ensures that even if the plugging plug is obtained by others, it cannot be unlocked by the unauthorized terminal, and illegal pulling out is avoided.

[0020] The USB interface plugging device sets an operation audit tracking; the first control module records the time of each unlocking operation, handheld terminal ID and other information, and the corresponding operator and time can be traced and inquired when necessary. This function provides the audit tracking ability of the USB port use, and improves the security management level.

[0021] In summary, the USB interface blocking device of the present application combines the physical locking mechanism with the digital encryption authentication technology, providing double security: unauthorized personnel cannot pull the blocking device out of the USB interface even if they get the blocking device body, and only by using the authorized handheld terminal and passing the encrypted identity verification can the blocking device be unlocked and removed. In this way, the security weakness of the pure mechanical USB lock that it can be easily opened with a universal tool is overcome, and the defects of the pure software port control scheme that it is easy to be cracked and inconvenient to use are avoided. Since the blocking device itself is passive powered, compact in structure, does not affect the normal use and aesthetics of the device, and does not consume the power of the protected device; its unlocking process requires the cooperation of a special handheld terminal and leaves operation records, significantly improving the security and traceability of USB port management.

[0022] The USB interface blocking device of the present application is particularly suitable for occasions with strict security requirements for USB interfaces (such as classified computer, server interface management, etc.), and can effectively prevent illegal data copying and virus propagation through USB ports, reducing the risk of sensitive information leakage and network intrusion. BRIEF DESCRIPTION OF DRAWINGS

[0023] In order to make the content of the present application more easily understood, the present application will be further described in detail below according to specific embodiments of the present application and in conjunction with the accompanying drawings.

[0024] Figure 1 is a cross-sectional view of the USB interface blocking device of the present application after being inserted into the USB male head.

[0025] Figure 2 is a front view of the USB interface blocking device of the present application after being inserted into the USB male head.

[0026] Figure 3 is a schematic diagram of the handheld terminal of the present application.

[0027] Figure 4 is a structural block diagram of the handheld terminal and the blocking plug of the present application.

[0028] DESCRIPTION OF DRAWINGS 10, blocking plug; 20, locking unit; 201, locking piece; 202, connecting rod; 203, pivot; 204, magnetic piece; 30, connecting unit; 301, inductor coil; 302, first control module; 303, first interface; 40, handheld terminal; 401, second interface; 402, display module; 403, interaction module; 404, status indicator light; 50, USB female head. DETAILED DESCRIPTION

[0029] The present application will be further described with reference to the drawings and specific examples, so that those skilled in the art can better understand the present application and implement it.

[0030] The foregoing and other technical contents, features and effects of the present application will be clearly presented in the following detailed description of embodiments with reference to the accompanying drawings. The directional terms mentioned in the following embodiments, such as up, down, left, right, front or back, are only the directions of the drawings. Therefore, the directional terms are used for illustration, not for limiting the present application. In addition, the same reference numerals represent the same elements in all embodiments.

[0031] In combination Figures 1 to 3 A USB interface plugging device includes a plugging plug 10 and a handheld terminal 40 used in combination with the plugging plug 10.

[0032] The plugging plug 10 includes a shell, a male head provided on one side of the shell, a locking unit 20 and a connecting unit 30.

[0033] The male head has the same size and shape as a standard USB plug and can be inserted into a USB female head 50.

[0034] The locking unit 20 includes a connecting rod 202 rotatably provided in the shell and elastically connected with the shell, a locking piece 201 provided on one end of the connecting rod 202 and a magnetic piece 204 provided on the other end of the connecting rod 202 and in the shell. The end of the connecting rod 202 provided with the locking piece 201 extends out of the shell and is provided in the male head. Specifically, the locking piece 201 protrudes in the height direction of the female head to form a clamping portion.

[0035] The locking unit 20 also includes a rotating shaft 203 and a torsion spring (the specific shape is not shown in the figure, but is only schematic). The rotating shaft 203 is located inside the housing along the width direction of the housing and passes through the connecting rod 202. The first torsion arm of the torsion spring is inserted into the connecting rod 202, and the second torsion arm is inserted into the housing, forming a reaction point. Specifically, a through hole is opened in the middle of the connecting rod 202, i.e., at the location of the rotating shaft 203, with the hole diameter slightly larger than the outer diameter of the rotating shaft 203. The torsion spring is fitted onto the rotating shaft 203 and positioned on one side of the connecting rod 202. The center coil of the torsion spring is fitted onto the rotating shaft 203, forming an inner ring positioning. Both ends of the rotating shaft 203 are pressed into the housing through self-lubricating bushings or bearings to ensure smooth rotation. The first torsion arm is inserted into the radial hole or groove on the connecting rod 202 to ensure that the torque of the torsion spring can act directly on the connecting rod 202. The second torsion arm is inserted into the fixing hole or slot of the housing, forming a reaction point of the housing. During assembly, the torsion spring is pre-twisted at a certain angle so that the locking element 201 always extends out of the female head and remains in the locked position when there is no magnetic force. A shaft retaining ring or stepped shoulder is used to axially lock the connecting rod 202 and the torsion spring together onto the rotating shaft 203 to prevent them from coming loose. When it is necessary to unlock, the connecting rod 202 is rotated by an external force, pushing the locking element 201 inward to retract into the male head. The rotation of the connecting rod 202 is resisted by the spring force of the torsion spring; once the external force disappears, the torsion spring will cause the connecting rod 202 to automatically reset the locking element 201 to the extended state. Therefore, without a dedicated unlocking method, the plug 10 will be firmly locked inside the USB female port after insertion and cannot be pulled out by hand.

[0036] The connection unit 30 includes a first control module 302 disposed within the housing, an inductor coil 301 connected to the first control module 302 and disposed within the housing, and a first interface 303 disposed on the other side of the housing and connected to the first control module 302. The inductor coil 301 is configured to generate a magnetic field to attract the magnetic component 204 when energized. Specifically, the first control module 302 includes a first memory. The first memory is used to store the encryption key corresponding to the unique encrypted identification information of the blocking plug 10, and to record information for each unlocking operation. The information includes the unlocking time and the ID of the handheld terminal 40. The second control module includes a second memory. The second memory is used to store encryption keys. When the encryption keys in the first memory and the second memory are successfully paired, the blocking plug 10 is unlocked. Further, the first control module 302 can be an STM32 microcontroller. The first control module 302 incorporates the AES symmetric algorithm.

[0037] The first interface 303 includes a positive power supply, a power supply ground, and an RS485 interface for data communication, so as to realize bidirectional data communication between the first control module 302 and the handheld terminal 40.

[0038] It should be noted that when the blocking plug 10 is in the locked state, the first control module 302 is generally in a dormant, power-off state to save energy and improve security. The first control module 302 only activates and prepares to accept authentication commands when the handheld terminal 40 triggers the blocking plug 10 through the first interface 303. Furthermore, the unlocking log recorded in the first control module 302 can be subsequently read and analyzed, allowing administrators to audit the usage of each USB interface blocking device. In the event of abnormal unlocking or loss of a blocking device, the logs can be used to trace the time and user, enhancing the controllability of security management.

[0039] The handheld terminal 40 includes a second control module, a second interface 401 connected to the second control module, a display module 402, an interaction module 403, and a status indicator 404. The second interface 401 is a magnetic connector with contacts that match those of the first interface 303. When unlocking is required, the operator aligns the second interface 401 with the first interface 303 of the plug 10, causing it to magnetically adhere and lock onto the first interface 303, ensuring reliable electrical contact connection and establishing a power and data connection between the handheld terminal 40 and the plug 10. The second interface 401 and the second control module are connected via a magnetic power supply cable; alternatively, an integrated structure can be used to directly integrate the second interface 401 onto the handheld terminal 40 if necessary. After the first interface 303 and the second interface 401 are connected, the second control module establishes data communication with the first control module 302. After encryption, verification, and authorization, the first control module 302 controls the inductor coil 301 to generate a magnetic field, which attracts the magnetic component 204 to rotate the connecting rod 202, thereby causing the locking component 201 to retract from the locked position and unlocking the plug 10. Furthermore, the second control module can be an STM32 microcontroller. The second control module incorporates the AES symmetric algorithm.

[0040] The display module 402 displays whether the unlocking was successful or failed. The interaction module 403 converts physical actions into commands that the second control module can recognize and respond to in real time. The status indicator 404 indicates the status of the handheld terminal 40. In this embodiment, the handheld terminal 40 prompts the user with operation steps and authentication results through the display module 402, such as requiring the input of identity credentials like passwords or fingerprints (the specific authentication method can be designed according to implementation needs, such as entering a PIN code or automatic authentication using the terminal's built-in security element), and displays information such as "Authentication successful, please remove the plug" or "Authentication failed". The interaction module 403 includes multiple buttons for the user to confirm the execution of unlocking commands. The status indicator 404 indicates the device status using colors such as red and green or by flashing, for example, a red light indicates an unauthorized lock, and a green light indicates an authorized and unlockable state.

[0041] like Figure 4As shown, the working principle of this invention is as follows: After the second interface 401 is connected to the first interface 303, the handheld terminal 40 supplies power to the first control module 302 through the VCC and GND lines, and at the same time establishes a data communication link with the first control module 302 through the RS485 communication interface.

[0042] The second control module then engages in bidirectional encrypted verification negotiation with the first control module 302, using methods such as challenge-response or key authentication, to confirm that the handheld terminal 40 has the authorization to unlock the blocking plug. During the identity verification process, the unique identifier stored in the first control module 302 can be used to compare the unlocking task information of the handheld terminal 40, ensuring that the handheld terminal 40 corresponds one-to-one with the blocking plug 10 and preventing accidental locking or unauthorized terminals attempting to unlock.

[0043] Once the encryption verification is successful, the handheld terminal 40 enters the unlocking execution phase. The second control module energizes the inductor coil 301. The inductor coil 301 is located near the magnetic component 204 inside the sealing plug 10. When the inductor coil 301 is energized, it generates a magnetic field inside the sealing plug 10, exerting an attractive or repulsive force on the magnetic component 204 (depending on the direction of the coil current and the polarity of the magnet). Preferably, the magnetic component 204 is a magnet, and the polarity of the magnet is pre-installed to match the direction of the magnetic field generated by the energized inductor coil 301, so that the energized inductor coil 301 attracts the magnet. The magnetic component 204 is fixed to the other end of the connecting rod 202, so when the magnetic component 204 is moved by the attractive force, it will drive the connecting rod 202 to rotate around the shaft 203 against the elastic force of the torsion spring. The other end of the connecting rod 202 is provided with a locking component 201, which retracts inward into the interior of the sealing plug 10 when the connecting rod 202 rotates, disengaging from the locking position inside the USB female connector 50. At this point, the plug 10 and the USB female connector 50 are no longer locked together, and the operator can easily pull the plug 10 out of the USB female connector 50 to complete the unlocking operation.

[0044] After being unlocked and unplugged, the sealing plug 10 can be reused to seal the same or other USB female connectors 50. After being unplugged, the locking member 201 will return to its extended state due to the torsion spring, ready to be inserted and locked again. When using it again, simply insert the sealing plug 10 into the target USB female connector 50, and the locking member 201 will automatically lock, repeating the above action, achieving quick sealing without external assistance. The sealing plug 10 and its internal mechanism provided by this invention are compact and small, allowing most components to be housed within a casing the size of a USB plug, making it suitable for use within the space of a standard USB interface.

[0045] As described above, the handheld terminal 40 connects to the power supply and establishes communication → performs encrypted authentication → after successful authentication, the inductor coil 301 generates a magnetic field → the magnetic field attracts the magnetic component 204, causing the connecting rod 202 to rotate → the locking component 201 retracts to unlock → the sealing plug 10 is pulled out. The entire process requires the cooperation of an authorized terminal to complete, ensuring the security of USB interface management.

[0046] This invention, through electronic control and magnetic unlocking, avoids structures such as mechanical keyholes on the sealing plug 10 that could weaken the sealing strength, thus eliminating any gaps for direct disassembly and enhancing its resistance to damage. Furthermore, since the unlocking process requires power and encrypted authentication from an external handheld terminal 40, even if an unauthorized person obtains the sealing plug 10 itself, they cannot easily remove it.

[0047] In the description of the embodiments of the present invention, it should also be noted that, unless otherwise explicitly specified and limited, the terms "set" and "connection" should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral connection; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium; and they can refer to the internal connection of two components. Those skilled in the art can understand the specific meaning of the above terms in the present invention based on the specific circumstances.

[0048] Obviously, the above embodiments are merely illustrative examples for clear explanation and are not intended to limit the implementation. Those skilled in the art will recognize that other variations or modifications can be made based on the above description. It is neither necessary nor possible to exhaustively list all possible implementations here. However, obvious variations or modifications derived therefrom are still within the scope of protection of this invention.

Claims

1. A USB interface blocking device, characterized in that, include: The plug (10) includes a housing, a male connector located on one side of the housing, a locking unit (20), and a connecting unit (30). The locking unit (20) includes a connecting rod (202) rotatably disposed within the housing and elastically connected to the housing, a locking member (201) disposed at one end of the connecting rod (202), and a magnetic member (204) disposed at the other end of the connecting rod (202) and disposed within the housing; the end of the connecting rod (202) with the locking member (201) extends out of the housing and is disposed within the male head; The connection unit (30) includes a first control module (302) disposed within the housing, an inductor coil (301) connected to the first control module (302) and disposed within the housing, and a first interface (303) disposed on the other side of the housing and connected to the first control module (302); the inductor coil (301) is configured to generate a magnetic field to attract the magnetic component (204) after being energized. The handheld terminal (40) includes a second control module and a second interface (401) connected to the second control module. After the first interface (303) and the second interface (401) are connected, the second control module establishes data communication with the first control module (302). After encryption verification and authorization, the first control module (302) controls the inductor coil (301) to be energized to generate a magnetic field, so as to attract the magnetic component (204) to drive the connecting rod (202) to rotate, thereby causing the locking component (201) to retract from the locked position and unlock the plug (10).

2. The USB interface blocking device according to claim 1, characterized in that, The locking member (201) protrudes along the height direction of the male head to form a snap-fit ​​portion.

3. The USB interface blocking device according to claim 1, characterized in that, The locking unit (20) further includes a rotating shaft (203) and a torsion spring; the rotating shaft (203) is disposed in the housing along the width direction of the housing and passes through the connecting rod (202); the first torsion arm of the torsion spring is inserted into the connecting rod (202) and the second torsion arm is inserted into the housing to form a reaction point.

4. The USB interface blocking device according to claim 1, characterized in that, The first control module (302) includes a first memory; the first memory is used to store the encryption key corresponding to the unique encrypted identity information of the blocking plug (10), and to record information for each unlocking operation; The second control module includes a second memory; the second memory is used to store encryption keys; when the encryption keys of the first memory and the second memory are successfully paired, the blocking plug (10) is unlocked.

5. The USB interface blocking device according to claim 4, characterized in that, The information includes the unlock time and the ID of the handheld terminal (40).

6. The USB interface blocking device according to claim 1, characterized in that, The first interface (303) includes a positive power supply, a power supply ground, and an RS485 interface for data communication, so as to realize bidirectional data communication between the first control module (302) and the handheld terminal (40).

7. The USB interface blocking device according to claim 1, characterized in that, The handheld terminal (40) also includes a display module (402); the display module (402) is used to display whether the unlocking was successful or failed.

8. The USB interface blocking device according to claim 1, characterized in that, The handheld terminal (40) also includes an interaction module (403); the interaction module (403) is used to convert physical actions into instructions that can be recognized and responded to by the second control module in real time.

9. The USB interface blocking device according to claim 1, characterized in that, The handheld terminal (40) also includes a status indicator light (404) for indicating the status of the handheld terminal (40).

10. The USB interface blocking device according to claim 1, characterized in that, The second interface (401) is provided with contacts that match the first interface (303).

Images