Communication system with isolated internal and external networks

Abstract

The invention provides a communication system with isolated internal and external networks. The system comprises an intranet subsystem, an extranet subsystem and a combining system, wherein the intranet subsystem is connected with the combining system and is used for outputting an intranet network signal; the extranet subsystem is connected with the combining system and is used for outputting extranet network signals; and the combining system is used for carrying out signal combining processing on the intranet network signal output by the intranet subsystem and the extranet network signal output by the extranet subsystem so as to output a combined signal, so that the isolation of the intranet and the extranet under the condition of one AP is realized, the security of the intranet and the extranet is improved, and the service life of the intranet and the extranet is prolonged. And the cost is reduced on the basis of ensuring the communication quality.

Description

TECHNICAL FIELD

[0001] The present application relates to the communication technology field, and particularly relates to a communication system for internal and external network isolation. BACKGROUND

[0002] Medical systems generally require internal and external network services due to the demand for smart hospital construction. The internal network is used for wireless access of medical terminal devices such as handheld terminals of medical staff and mobile ward rounds, and the external network is used to provide wireless network services for patients and their families. In order to protect the security of internal network data, the internal and external networks are required to be effectively isolated. The so-called isolation means that the devices connected to the internal network cannot obtain data through the external network, and similarly, the devices connected to the external network cannot obtain data from the internal network.

[0003] In related solutions, two methods are usually used to realize the isolation of internal and external networks. One method is a software isolation method, which sets different data area service set identifiers (SSIDs) through wireless access points (APs) and allocates corresponding data area access terminals. The terminal can only access network resources through its own SSID, and the resource access rights of the terminal are limited according to different data area SSIDs. A control relationship table of SSIDs and virtual local area networks (VLANs) is established, and the data area is divided for access by different groups through VLAN logical isolation, thereby realizing the safe isolation of internal and external networks. The other method is a physical isolation method of two sets of APs, which independently designs an AP for the internal and external networks. For the internal network AP, the internal network data is processed, and for the external network AP, the external network data is processed.

[0004] However, the network security of the software isolation method in the related technology is insufficient, and the signal quality of the physical isolation method is poor and the implementation cost is high. SUMMARY

[0005] The present application provides a communication system for internal and external network isolation to solve the problem of insufficient network security of the software isolation method and poor signal quality and high implementation cost of the physical isolation method in the related technology.

[0006] In a first aspect, the present application provides a communication system for internal and external network isolation, comprising an internal network subsystem, an external network subsystem and a combining system:

[0007] The internal network subsystem is connected with the combining system and is used to output internal network signals.

[0008] The external network subsystem is connected with the combining system and is used to output external network signals.

[0009] The combining system is used to combine the intranet network signal output by the intranet subsystem and the external network signal output by the external network subsystem to output a combined signal.

[0010] This application provides a secure communication system capable of isolating internal and external networks. It employs two independent data stream systems: an internal network subsystem and an external network subsystem, to process internal and external network data respectively. Hardware isolation ensures the security of internal network data, and a combining system outputs a unified combined signal, which includes both the internal and external network signals. The communication system in this application utilizes a single access point (AP). Both the internal and external network subsystems belong to the same AP, thus enabling simultaneous output of both internal and external network signals from a single AP. This achieves isolation between the internal and external networks with a single AP, improving security. Furthermore, compared to the traditional physical isolation method using two APs, it reduces signal interference and hardware costs, lowering costs while maintaining communication quality.

[0011] Optionally, the combining system includes an internal network RF power divider network, an external network RF power divider network, and a combining network; the internal network RF power divider network is used to perform power division processing on the internal network signal output by the internal network subsystem to output multiple corresponding sub-internal network signals to the combining network; the external network RF power divider network is used to perform power division processing on any one external network signal output by the external network subsystem to output multiple corresponding sub-external network signals to the combining network; the combining network is used to perform signal merging processing on the sub-internal network signals and the sub-external network signals to output a combined signal.

[0012] This application establishes an internal network RF power divider network and an external network RF power divider network. A signal input to the RF power divider network is distributed to multiple output ports, resulting in multiple sub-internal network signals and multiple sub-external network signals. These signals are then output to a combining network for combining processing. The resulting combined signal can connect to more antennas, thereby expanding the network coverage. By using the internal and external RF power divider networks, signal distribution and transmission are implemented for the internal and external subsystems respectively. This eliminates the need for a separate signal source for each receiver. Since one access point (AP) can cover multiple rooms, the solution in this application effectively reduces costs. Therefore, by setting up an RF power divider network to extend the signal, this application can reduce the number of APs and thus lower communication costs.

[0013] Optionally, the combining system includes an internal network power amplification network, an external network power amplification network, and a combining network; the internal network power amplification network amplifies the internal network signal output by the internal network subsystem to output an amplified internal network signal to the combining network; the external network power amplification network amplifies the external network signal output by the external network subsystem to output an amplified external network signal to the combining network; the combining network combines the amplified internal network signal and the amplified external network signal to output a combined signal.

[0014] Here, this application sets up an internal network power amplification network and an external network power amplification network, which are used to amplify the internal network signal and the external network signal respectively, thereby achieving the effect of signal enhancement, which is conducive to better processing and using these signals, and meets the requirements of AP system stability and signal quality.

[0015] Optionally, the intranet subsystem includes a first radio chip, and the extranet subsystem includes a second radio chip; the first radio chip is used to process network signals in a first frequency band; the second radio chip is used to process network signals in a second frequency band; wherein the first frequency band and the second frequency band are different.

[0016] In this application, the radio chips of the intranet subsystem and the extranet subsystem use different signal frequency bands. Due to the difference in frequency bands, signal blocking and interference are avoided between the intranet subsystem and the extranet subsystem, thereby improving the signal quality of both the intranet and extranet network signals.

[0017] Optionally, the aforementioned communication system with isolated internal and external networks also includes a public frequency band radio chip; the public frequency band radio chip is used to process network signals in the public frequency band, wherein the first frequency band, the second frequency band, and the public frequency band are all different.

[0018] Here, the communication system with internal and external network isolation provided in this application is equipped with a common frequency band radio chip to output signals in a common frequency band different from those of the internal network subsystem and the external network subsystem. This common frequency band radio chip can be an independent radio chip, or it can be implemented based on a chip within the internal network subsystem or the external network subsystem. Optionally, the network of the common frequency band radio chip can be flexibly switched to either the internal network subsystem or the external network subsystem according to the settings. By adopting a switchable common RF channel scheme, it can simultaneously meet the transmission requirements of the internal network subsystem and the external network subsystem for different frequency bands. Compared to the scheme where two APs need to deploy two common parts, only one common part is required, simplifying the system structure and further reducing costs.

[0019] Optionally, the aforementioned communication system with isolated internal and external networks further includes a microcontroller unit; when the communication system with isolated internal and external networks includes a public frequency band radio chip, the microcontroller unit is used to control the public frequency band radio chip to connect to the internal network subsystem or to the external network subsystem.

[0020] This application incorporates a microcontroller unit (MCU) for controlling the entire communication system isolated from both internal and external networks. Specifically, the MCU controls the switching connection between the public frequency band radio chip and either the internal or external network subsystem, enabling flexible control of the public frequency band network signals. Even if this application uses only one public frequency band radio chip, the MCU can switch between these chips to meet the output requirements of the public frequency band network signals in both internal and external network application scenarios, thus improving the flexibility and reliability of the communication system isolated from both internal and external networks.

[0021] Optionally, the intranet subsystem includes a first central processing unit (CPU), and the extranet subsystem includes a second CPU; the first CPU is used to send a first local area network (LAN) address of the intranet subsystem to the microcontroller unit; the second CPU is used to send a second LAN address of the extranet subsystem to the microcontroller unit.

[0022] The microcontroller unit is configured to: receive a first local area network (LAN) address of the intranet subsystem and a second LAN address of the corresponding external network subsystem, wherein the external network subsystem is an external network subsystem installed in the same physical location as the intranet subsystem; package the first LAN address and the second LAN address and upload them to the access controller, so that the access controller configures the intranet subsystem and the corresponding external network subsystem as a companion network, and determines the management and maintenance information of the intranet subsystem or the management and maintenance information of the corresponding external network subsystem as the maintenance information of the companion network.

[0023] Here, the internal network subsystem and external network subsystem of this application are each equipped with an independent Central Processing Unit (CPU) to manage their corresponding subsystems. Each CPU can collect the Media Access Control (MAC) addresses of its respective subsystem. Based on the above structure, this application sets up a companion network function. Since an AP in this application has two MAC addresses, one for the internal network and one for the external network, the MCU can report both MAC addresses to the Access Controller (AC). The AC configures the two received MAC addresses as a pair of companion MACs. Because the two companion MACs are in the same installation location, one installation location can be associated with two MACs. This allows the relationship between the two MAC addresses and the AP installation location to be established simultaneously. In the future, no matter which MAC fails, the system can find the faulty AP through the correspondence and perform maintenance, reducing the system's maintenance difficulty and cost.

[0024] Optionally, the first central processing unit is further configured to acquire first status information of the intranet subsystem, generate a first heartbeat message based on the first status information, and send the first heartbeat message to the microcontroller unit; the second central processing unit is further configured to acquire second status information of the extranet subsystem, generate a second heartbeat message based on the second status information, and send the second heartbeat message to the microcontroller unit; the microcontroller unit is configured to determine whether there is a fault in the intranet subsystem and the extranet subsystem based on the first heartbeat message and the second heartbeat message, and perform fault handling.

[0025] In this application, each CPU can also acquire the status information of its corresponding subsystem and transmit the status information to the MCU in the form of heartbeat messages. The MCU analyzes the heartbeat messages to realize fault monitoring of the internal network subsystem and external network subsystem, and automatically handles faults, thereby improving the reliability, security and stability of the system.

[0026] Optionally, the microcontroller unit is further configured to: generate status information of the communication system isolated from the internal and external networks based on the first heartbeat message and the second heartbeat message; and upload the status information of the communication system isolated from the internal and external networks to the access controller, so that the access controller can save the status information of the communication system isolated from the internal and external networks.

[0027] The MCU can also report the status information of the communication system isolated from the internal and external networks to the AC in real time. The AC can record faults based on the status information of the communication system isolated from the internal and external networks, which facilitates fault diagnosis and equipment maintenance, and reduces the difficulty and cost of system maintenance.

[0028] Optionally, a buzzer is installed at a physical location corresponding to the companion network; the microcontroller is further configured to: in response to a buzzer sounding command, acquire buzzer information of the target companion network corresponding to the buzzer sounding command; and generate a buzzer control command based on the buzzer information to control the buzzer installed at the physical location corresponding to the target companion network to sound.

[0029] In this application, a buzzer is installed at the AP installation location. Once an AP fails, the maintenance personnel can initiate a buzzer sound command in the system. The system can then trigger the buzzer at the corresponding installation location of the AP to sound, thus achieving accurate location of the faulty AP and facilitating the maintenance personnel to quickly find the faulty AP for maintenance.

[0030] Optionally, the aforementioned communication system with isolated internal and external networks further includes a first power supply circuit and a second power supply circuit: the first power supply circuit is used to supply power to the internal network subsystem; the second power supply circuit is used to supply power to the external network subsystem.

[0031] In this application, independent power supply circuits are configured for the internal network subsystem and the external network subsystem respectively, so as to realize the power supply of the internal network subsystem and the external network subsystem and improve the system stability.

[0032] Optionally, the aforementioned communication system with internal and external network isolation further includes a microcontroller unit, a first power converter, and a second power converter; the first power converter is used to convert the first electrical energy output from the first power circuit to obtain first converted electrical energy, and output the first converted electrical energy to power the microcontroller unit; the second power converter is used to convert the second electrical energy output from the second power circuit to obtain second converted electrical energy, and output the second converted electrical energy to power the microcontroller unit.

[0033] This application configures a first power converter (DC-to-DC converter, abbreviated as DCDC) and a second power converter, along with an MCU, to manage a communication system isolated from both internal and external networks. The MCU is powered by the first power converter (which converts the output energy of the first power circuit into first converted energy) and the second power converter (which converts the output energy of the second power circuit into second converted energy). These two power converters and their corresponding power circuits are independent of each other; the MCU can operate normally as long as one of them has power, thus improving the stability of the isolated communication system and ensuring its normal and stable operation.

[0034] Optionally, the first power supply circuit includes a first power receiving device detection module, and the second power supply circuit includes a second power receiving device detection module.

[0035] The first power receiving device detection module is used to send a first indication signal to the microcontroller unit, the first indication signal being used to indicate the power supply status of the first power circuit; the second power receiving device detection module is used to send a second indication signal to the microcontroller unit, the second indication signal being used to indicate the power supply status of the second power circuit; the microcontroller unit is used to determine the power supply status of the first power circuit and the second power circuit through the first indication signal and the second indication signal, and according to the power supply status of the first power circuit and the second power circuit, control whether the first power circuit supplies power to the intranet subsystem and / or the extranet subsystem, and control whether the second power circuit supplies power to the intranet subsystem and / or the extranet subsystem.

[0036] This application employs a dual-power, single-controller power supply scheme. The MCU receives a first indication signal from the first powered device detection module in the first power supply circuit and a second indication signal from the second powered device detection module in the second power supply circuit. These indication signals indicate the power supply status of the corresponding power circuit. Based on the first and second indication signals, the MCU accurately determines the power supply status of the first and second power circuits. According to these different power supply statuses, the MCU can control the power supply sources for the internal and external network subsystems, as well as the corresponding power supply systems for the first and second power circuits, to meet the power supply requirements of various scenarios. This improves the power supply flexibility and stability of communication systems with isolated internal and external networks.

[0037] The communication system for internal and external network isolation provided in this application employs two independent data stream systems: an internal network subsystem and an external network subsystem, to process internal network data and external network data respectively. Hardware isolation ensures the security of internal network data, and a combining system is used to uniformly output the combined signal. This combined signal includes the network signal corresponding to the internal network and the network signal corresponding to the external network. In this embodiment, the communication system for internal and external network isolation is a single AP. Both the internal network subsystem and the external network subsystem belong to the same AP. Therefore, the network signals of the internal network and the external network can be output simultaneously through a single AP, achieving isolation between the internal and external networks with a single AP, improving the security of the internal and external networks. At the same time, compared with the traditional physical isolation method of two APs, signal interference and hardware costs are reduced, and costs are lowered while ensuring communication quality. Attached Figure Description

[0038] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application.

[0039] Figure 1 A schematic diagram of the architecture of an AP-STA communication system provided in this application embodiment;

[0040] Figure 2 A schematic diagram of the framework structure of a communication system with internal and external network isolation provided in an embodiment of this application;

[0041] Figure 3 A schematic diagram of the framework structure of another communication system with isolated internal and external networks provided in this application embodiment;

[0042] Figure 4 A schematic diagram of the framework structure of another communication system with internal and external network isolation provided in the embodiments of this application;

[0043] Figure 5 A schematic diagram of the framework structure of another communication system with internal and external network isolation provided in the embodiments of this application;

[0044] Figure 6 A schematic diagram illustrating the control relationship between a microcontroller unit, a first central processing unit, and a second central processing unit is provided for embodiments of this application.

[0045] Figure 7 This is a schematic diagram of the power supply system framework of a communication system with internal and external network isolation provided in an embodiment of this application.

[0046] Explanation of reference numerals in the attached figures:

[0047] 11-AP; 12-First STA; 13-Second STA; 14-Third STA; 15-Fourth STA;

[0048] 101 - Combining system; 102 - Internal network subsystem; 103 - External network subsystem;

[0049] 1011 - Internal network RF power divider network; 1012 - External network RF power divider network; 1013 - Combining network;

[0050] 104 - Public frequency band radio chip;

[0051] 500 - Microcontroller unit; 501 - First central processing unit; 502 - Second central processing unit;

[0052] 701 - First power supply circuit; 702 - Second power supply circuit; 703 - First power converter; 704 - Second power converter;

[0053] 7011 - First power receiving device detection module; 7021 - Second power receiving device detection module;

[0054] 705 - First analog switch; 706 - Second analog switch.

[0055] The accompanying drawings illustrate specific embodiments of this application, which will be described in more detail below. These drawings and descriptions are not intended to limit the scope of the concept in any way, but rather to illustrate the concept of this application to those skilled in the art through reference to particular embodiments. Detailed Implementation

[0056] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numbers in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this application. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this application as detailed in the appended claims.

[0057] The terms “first,” “second,” “third,” and “fourth,” etc. (if present), in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a particular order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this application described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms “comprising” and “having,” and any variations thereof, are intended to cover a non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0058] To ensure the security of intranet data, effective isolation between intranet and extranet is typically required. Isolation means that devices connected to the intranet cannot access data through the extranet, and vice versa. Finding an economical and effective way to solve the problem of intranet / extranet isolation while ensuring convenient daily maintenance has become a pain point for users in healthcare settings.

[0059] The relevant technical solutions mainly fall into the following three categories:

[0060] One method is software isolation. This involves setting Service Set Identifiers (SSIDs) for different data zones on the Access Point (AP) and assigning corresponding access terminals to these zones. Terminals can only access network resources using their own SSIDs, and resource access permissions are restricted based on the SSIDs of different data zones. A mapping table between SSIDs and service Virtual Local Area Networks (VLANs) is established. Within the data service zone, a Demilitarized Zone (DMZ) and a core data zone are divided. Paths and permissions for service VLANs to access the DMZ and core data zones are defined. When a user accesses the network using the corresponding SSID, access to internal network data is based on this path and permission, while external data is isolated. By using VLANs for logical isolation, data zones are divided for different users, achieving secure isolation between the internal and external networks. However, this software-based logical isolation of the internal and external networks has insufficient security. Once attacked, it is susceptible to software tampering, posing a risk to the security of internal network data.

[0061] The second method involves physical isolation using two sets of APs. This is achieved by designing separate APs for the internal and external networks. The internal AP is dedicated to processing internal network data, while the external AP is dedicated to processing external network data. While this solution does provide hardware isolation, it has the following drawbacks: The cost of using two sets of APs for physical isolation is too high. Two sets of APs double the overall construction and maintenance workload. Since the same area needs to be covered, the internal and external APs must be deployed in the same location, leading to signal interference. The main reason for this interference is that using two APs for internal and external network signal coverage, and the industry practice of using two identical AP models to reduce R&D investment, is to use them. Furthermore, to cover the same area, the two APs need to be placed close together during deployment. Because the two APs are the same model, their internal filters are also identical—both are full-band filters—meaning the output signal frequency bands of the two APs are exactly the same. When the first AP transmits a signal, the second AP experiences interference due to the identical signal frequency band, affecting signal quality and user experience. Similarly, the second AP's signal transmission will also affect the first AP. Since the 2.4GHz bands of the other two APs are completely independently controlled, if the 2.4GHz bands of both APs are turned on at the same time, there will be mutual interference. In actual use and maintenance, a lot of effort is required to ensure that only one of the two APs has its 2.4GHz band on in order to guarantee the transmission quality of the 2.4GHz band.

[0062] The third method also uses physical isolation with two APs. The internal network has a two-tier architecture. The first tier generates the internal wireless signal and connects to the second tier via a long RF feeder. The second tier amplifies the internal signal at the RF level and then splits it into multiple parts, each distributed to a different room to achieve internal network signal coverage. The external network portion of this solution has only one tier, directly generating the wireless signal and then splitting it into multiple parts, each distributed to a different room to achieve external network signal coverage. While this solution does offer hardware isolation, it has the following drawbacks: the internal signal is amplified at two stages, introducing noise and degrading signal quality, resulting in weaker signal coverage compared to a single-tier architecture. The solution uses a large amount of long RF cable (typically 18 meters or 35 meters between the two tiers), which significantly limits practical installation and deployment; cables exceeding 35 meters are unusable. Furthermore, long RF feeders are expensive. Due to architectural limitations, the entire solution can only support 64 rooms; beyond that, additional equipment is required.

[0063] Based on the above solutions, it can be seen that the relevant technologies have technical problems: software isolation methods have insufficient network security, while physical isolation methods have poor signal quality and high implementation costs.

[0064] To address the aforementioned issues, this application provides a communication system with isolated internal and external networks. It employs two independent data stream systems: an internal network subsystem 102 and an external network subsystem 103, to process internal and external network data respectively, and output the data through a combining system 101. Hardware isolation ensures the security of internal network data while reducing costs while maintaining communication quality.

[0065] Exemplary, Figure 1 This application provides an embodiment of an AP-STA communication system architecture diagram, as shown below. Figure 1 As shown, the AP-STA communication system provided in this application embodiment includes AP11, first STA12, second STA13, third STA14 and fourth STA15.

[0066] In the AP-STA communication system described above, the device that provides network access services is called an AP, which stands for wireless access point.

[0067] The communication system with internal and external network isolation provided in this application embodiment can be used as... Figure 1 AP11 in the provided AP-STA communication system provides network services to any STA accessing the AP-STA communication system. When the internal and external network isolated communication system provided in this application embodiment is used as AP11, it can provide network services for both the internal and external networks through a single AP, reducing costs while ensuring communication quality, and ensuring the security of internal network data through internal hardware isolation.

[0068] In the AP-STA communication system described above, the device that connects to the AP and then accesses the network is called a station (abbreviated as STA). A STA can be a personal computer, a mobile phone, or other terminal device. In medical system applications, a STA can also be a handheld terminal for hospital medical staff, a mobile ward round vehicle, or other medical terminal devices.

[0069] Among them, the first STA12, the second STA13, the third STA14 and the fourth STA15 can all be connected to AP11. After the first STA12, the second STA13, the third STA14 and the fourth STA15 are connected to AP11, AP11 provides network services to the first STA12, the second STA13, the third STA14 and the fourth STA15.

[0070] Understandable, Figure 1 This is merely illustrative of the situation. Figure 1 medium structure Figure 1 The number of APs and STAs and their connection relationships are not specifically limited in the embodiments of this application.

[0071] Optionally, in the application scenario of a medical system, an AP in this embodiment of the application may be equipped with multiple antennas. Each antenna can simultaneously output intranet wireless signals and extranet wireless signals. Based on the multiple antennas corresponding to the AP, the AP's signal can cover multiple wards. The antennas deployed in each ward can connect to multiple STAs to achieve coverage of intranet and extranet signals at low cost.

[0072] The technical solution of this application and how the technical solution of this application solves the above-mentioned technical problems are described in detail below with specific embodiments. These specific embodiments can be combined with each other, and the same or similar concepts or processes may not be described again in some embodiments. The embodiments of this application will now be described with reference to the accompanying drawings.

[0073] Figure 2 A schematic diagram of the framework structure of a communication system with internal and external network isolation provided in this application embodiment is shown below. Figure 2 As shown, the communication system with isolated internal and external networks includes a combining system 101, an internal network subsystem 102, and an external network subsystem 103.

[0074] The intranet subsystem 102 is connected to the combining system 101 and is used to output intranet network signals; the extranet subsystem 103 is connected to the combining system 101 and is used to output extranet network signals; the combining system 101 is used to combine the intranet network signals output by the intranet subsystem 102 and the extranet network signals output by the extranet subsystem 103 to output a combined signal.

[0075] Here, the external network signal, the internal network signal, and the combined signal obtained by merging the external network signal and the internal network signal can all provide wireless network access services to the STA through the antenna of the wireless access network.

[0076] Optionally, the output of the combining system 101 is connected to an antenna, through which the STA can use the network's wireless access service.

[0077] Optionally, this embodiment of the application may also input a wireless access signal, which is the reverse process of outputting the combined signal described above. Specifically, the combining system 101 receives the combined signal, splits the combined signal to obtain the intranet network signal and / or extranet network signal corresponding to the combined signal, and inputs the intranet network signal and / or extranet network signal to the corresponding intranet subsystem 102 and / or extranet subsystem 103 for processing, thereby outputting the corresponding intranet wired signal and / or extranet wired signal.

[0078] Optionally, the intranet subsystem 102 includes a first radio chip, and the extranet subsystem 103 includes a second radio chip; the first radio chip is used to process network signals in a first frequency band; the second radio chip is used to process network signals in a second frequency band; wherein the first frequency band and the second frequency band are different.

[0079] In some embodiments, the first radio chip is a RADIO-5.8GHz chip, and the second radio chip is a RADIO-5.2GHz chip or a RADIO-2.4GHz chip.

[0080] In some embodiments, the first radio chip is a RADIO-5.2GHz chip, and the second radio chip is a RADIO-5.8GHz chip or a RADIO-2.4GHz chip.

[0081] In some embodiments, the first radio chip may also be a RADIO-2.4GHz chip, or the second radio chip may also be a RADIO-2.4GHz chip or a RADIO-5.8GHz chip.

[0082] This application embodiment does not impose specific restrictions on the signal frequency band of each subsystem. By setting radio chips with different signal frequency bands for the internal network subsystem 102 and the external network subsystem 103, the mutual interference between the signals of the internal network subsystem 102 and the external network subsystem 103 can be effectively reduced, and the signal quality can be improved.

[0083] Specifically, the 2.4GHz signal band has a wide coverage area and strong wall penetration capability, making it suitable for scenarios requiring large coverage areas. Both 5.8GHz and 5.2GHz belong to the 5GHz signal band, have less interference, and can meet the needs of short-distance, high-speed data transmission. This application does not impose specific restrictions on the signal bands of each radio chip; they can be flexibly set according to actual conditions and requirements.

[0084] The RADIO chip, or Radio Frequency Integrated Circuit (RFIC), primarily functions to receive and transmit radio signals. Through its internal circuitry, it converts digital signals into radio waves for transmission, and simultaneously converts received radio waves back into digital signals for processing.

[0085] In this embodiment, the radio chip of the intranet subsystem 102 and the radio chip of the extranet subsystem 103 use different signal frequency bands. Due to the different frequency bands, signal blocking and interference are avoided between the intranet subsystem 102 and the extranet subsystem 103, thereby improving the signal quality of the intranet network signal and the extranet network signal.

[0086] Optionally, the intranet subsystem 102 includes a first end and a second end, and the second end of the intranet subsystem 102 is connected to... Figure 2 The system is connected to the combining system 101, and the first end of the intranet subsystem 102 is connected to the intranet wired network to receive intranet data input from the intranet wired network.

[0087] Optionally, the external network subsystem 103 includes a first end and a second end, and the second end of the external network subsystem 103 is connected to... Figure 2 The system is connected to the combining system 101, and the second end of the external network subsystem 103 is connected to the external wired network to receive external network data input from the external wired network.

[0088] Optionally, the first end of the intranet subsystem 102 is connected to the intranet wired network via optical fiber or network cable; the first end of the extranet subsystem 103 is connected to the extranet wired network via optical fiber or network cable.

[0089] The communication system with internal and external network isolation provided in this application embodiment can be deployed in a way that supports both optical fiber and network cable, which improves the deployment flexibility. Communication can still be achieved even if the deployment distance is far, further improving the deployment flexibility of the communication system with internal and external network isolation.

[0090] In one possible implementation, the intranet subsystem 102 includes a first radio chip, a first central processing unit 501, a first physical layer, and a first network interface connector; a first end of the first network interface connector is connected to the intranet wired network, and a second end of the first network interface connector is connected to a first end of the first physical layer; a second end of the first physical layer is connected to a first end of the first central processing unit 501, and a second end of the first central processing unit 501 is connected to a first end of the first radio chip; a second end of the first radio chip is connected to the combining system 101.

[0091] In one possible implementation, the external network subsystem 103 includes a second radio chip, a second central processing unit 502, a second physical layer, and a second network interface connector; the first end of the second network interface connector is connected to the external wired network, and the second end of the second network interface connector is connected to the first end of the second physical layer; the second end of the second physical layer is connected to the first end of the second central processing unit 502, and the second end of the second central processing unit 502 is connected to the first end of the second radio chip; the second end of the second radio chip is connected to the combining system 101.

[0092] Each of the first and second CPUs has its own MAC layer. The MAC layer is primarily responsible for data link layer protocol operations, including data frame assembly, frame transmission and reception, and Ethernet address management. The MAC layer in the internal network subsystem 102 can connect to the first physical layer (PHY layer), while the MAC layer in the external network subsystem 103 can connect to the second PHY layer. The MAC layer and PHY layer communicate and coordinate through an interface. The MAC layer passes data frames to the PHY layer and controls data transmission and reception. Simultaneously, the PHY layer passes physical layer information to the MAC layer for processing. The PHY layer is responsible for converting data into signals suitable for transmission over the physical medium and, at the receiving end, restoring the received signals back to data.

[0093] In this embodiment, the intranet subsystem 102 and the extranet subsystem 103 are two independent systems. Each subsystem has an independent CPU, radio chip, network interface connector, and physical layer PHY. The analog signals of the intranet wired network and the extranet wired network can be converted into wireless access networks for the intranet and extranet respectively through their respective CPUs, radio chips, network interface connectors, and PHYs. The intranet subsystem 102 and the extranet subsystem 103 achieve secure and reliable physical isolation between the intranet and extranet through independent hardware, thereby improving the security of communication.

[0094] Optionally, the first and second network interface connectors can be RJ45 interfaces, which can be used to connect the system to an Ethernet cable. The RJ45 interface defines a standardized 8-pin connector for plugging into the end of an Ethernet cable and transmitting data over twisted pairs.

[0095] Optionally, the first network interface connector and the second network interface connector can be any type of fiber optic connector, which can be used to connect each subsystem to the Ethernet fiber optic cable.

[0096] Optionally, the first radio chip includes a first frequency band unit, and the second radio chip includes a second frequency band unit; the signal frequency band of the first frequency band unit is the first frequency band, and the signal frequency band of the second frequency band unit is the second frequency band.

[0097] Optionally, both the first and second frequency bands are 5GHz bands, but the first and second frequency bands are different.

[0098] Because the 5GHz signal band experiences less interference, it can meet the requirements for short-distance, high-speed data transmission, improving the network quality of both the internal and external network subsystems. Furthermore, it can meet the short-distance, high-speed data transmission needs of medical system applications.

[0099] In this embodiment of the application, the radio chip of the intranet subsystem 102 and the radio chip of the extranet subsystem 103 use different signal frequency bands, thus avoiding signal blocking and interference between the intranet subsystem 102 and the extranet subsystem 103, and improving the signal quality of the intranet wireless access network and the extranet wireless access network.

[0100] based on Figure 2 The internal network subsystem 102 and external network subsystem 103 in the above embodiments, and their internal structures, each include a "wired-data processing-wireless signal" path to ensure physical isolation between internal and external network data. The following describes the working process of the wireless signal output by the communication system with isolated internal and external networks. Taking the output process of the internal network subsystem 102 as an example, the working process is as follows:

[0101] Step 1.1: Internal network data enters the physical isolation system between internal and external network data from the internal network RJ45 interface.

[0102] Step 1.2: The PHY chip of the intranet processes the intranet data from the intranet RJ45 and converts it into high-speed intranet data.

[0103] Step 1.3: The internal network CPU receives high-speed data from the internal network PHY chip, processes it through its built-in MAC module, and forwards the data to the internal network RADIO chip.

[0104] Step 1.4: The intranet RADIO chip converts the received data into intranet network signals.

[0105] After the above processing, the conversion from wired to wireless signals is achieved. The conversion from wireless to wired signals is the reverse process. The processing method of the external network subsystem 103 is the same as that of the internal network subsystem 102, and will not be described in detail here.

[0106] This application provides a secure communication system capable of isolating internal and external networks. It employs two independent data stream systems: an internal network subsystem 102 and an external network subsystem 103, to process internal and external network data respectively. Hardware isolation ensures the security of internal network data, and a combining system 101 outputs a unified combining signal. This combining signal includes both the internal and external network signals. In this embodiment, the communication system is a single access point (AP). Both the internal and external network subsystems belong to the same AP, allowing for simultaneous output of both internal and external network signals from a single AP. This achieves isolation between the internal and external networks with a single AP, improving security. Furthermore, compared to the traditional physical isolation method using two APs, it reduces signal interference and hardware costs, lowering costs while maintaining communication quality.

[0107] Figure 3 This is a schematic diagram of the framework structure of another communication system with isolated internal and external networks provided in an embodiment of this application. Figure 3 As shown, in Figure 2 Based on this, the combining system 101 provided in the embodiments of this application may include an internal network radio frequency power divider network 1011, an external network radio frequency power divider network 1012 and a combining network 1013.

[0108] The internal network RF power divider network 1011 is used to perform power division processing on the internal network signal output from the internal network subsystem 102, so as to output multiple corresponding sub-internal network signals to the combining network 1013. The external network RF power divider network 1012 is used to perform power division processing on any one of the external network signals output from the external network subsystem 103, so as to output multiple corresponding sub-external network signals to the combining network 1013. The combining network 1013 is used to perform signal merging processing on the sub-internal network signals and the sub-external network signals to output a combined signal.

[0109] Optionally, Figure 3 Taking the internal network RF power divider network 1011 and the external network RF power divider network 1012 as examples, if the internal network subsystem 102 outputs one internal network signal to the internal network RF power divider network 1011, then the internal network RF power divider network 1011 can output four sub-internal network signals to the combining network 1013. If the external network subsystem 103 outputs one internal network signal to the external network RF power divider network 1012, then the external network RF power divider network 1012 can output four sub-external network signals to the combining network 1013. Based on this setting, the combining network 1013 can provide four wireless access signals that simultaneously include both internal and external networks through four antennas. Figure 3This is merely illustrative. In practice, the number of network signals output by the intranet subsystem 102 and the extranet subsystem 103 can be two or more. Each network signal output by the intranet subsystem 102 and the extranet subsystem 103 can be connected to an RF power divider network. Furthermore, the number of output ports of the intranet RF power divider network 1011 and the extranet RF power divider network 1012 can be any number.

[0110] The number of sub-internal network signals and sub-external network signals can be the same or different. The number of sub-internal network signals and sub-external network signals is determined by the number of output ports of the internal network RF power divider network 1011 and the external network RF power divider network 1012.

[0111] It is understood that any RF power divider network in any embodiment of this application can be an RF power divider network with any number of output ports, such as a 1-to-2, 1-to-4, or 1-to-8 RF power divider network.

[0112] Based on the communication system with internal and external network isolation in the above embodiments, its combined signal can provide wireless access service through an antenna. One antenna can configure wireless access service in one room through a switch, so the combined signal output by one antenna can cover one room. To save on overall network construction costs, if one AP needs to cover more rooms, it is necessary to output more combined signals, that is, to divide the transmitted signal of one AP into more parts. RF power dividers can achieve the above function. However, as the signal is divided into more and more parts, the signal power of each part will become smaller and smaller, resulting in poorer signal power in each room. Therefore, there is an upper limit to the number of signal power dividers. Optionally, the signal of each RF channel can be divided into 4 parts, which can both meet the signal quality in each room and control costs.

[0113] Theoretically, the more rooms a single access point (AP) covers, the fewer APs are needed for the entire network, resulting in lower costs and simpler maintenance. Conversely, fewer APs mean higher costs and more difficult maintenance. Therefore, setting up a radio frequency (RF) power divider network can reduce costs. In one possible implementation, taking both the internal network RF power divider network 1011 and the external network RF power divider network 1012 as examples, the processing procedure of the RF power divider network is introduced:

[0114] The RADIO chip can be a single-channel chip or a dual-channel chip.

[0115] Here, single-channel means that the RADIO chip has only one radio frequency channel, that is, only one output port, and one RADIO chip can output one network signal; dual-channel means that the RADIO chip has two radio frequency channels, that is, the RADIO chip has two output ports, and can output two network signals.

[0116] For example, if a RADIO chip has two radio frequency channels, then the RADIO chip includes two output ports. For any radio frequency signal processed by the RADIO chip, the radio frequency signal can be output through the two output ports respectively. That is, a RADIO chip outputs two radio frequency signals. Each radio frequency signal is divided into 4 parts, so 8 parts of radio frequency signals can be output. Each part of radio frequency signal is given to a room to achieve signal coverage of 8 rooms.

[0117] Optionally, the selected CPU chip or RADIO chip for processing network signals can also be a single chip that outputs 2 or 4 signals. This application embodiment does not impose specific limitations on the number of signals.

[0118] Optionally, for the intranet network signals and extranet network signals output by the intranet subsystem 102 and extranet subsystem 103, the intranet RF power divider network 1011 and the extranet RF power divider network 1012 divide the signals into four parts, which are then sent to the combining network 1013 to be combined with RADIO signals of different frequency bands. A total of 8 RF signal outputs are achieved, where each RF signal output includes the RF signals corresponding to the intranet subsystem 102 and the extranet subsystem 103.

[0119] Optionally, the combining network 1013 includes a filter module. Taking a 5.8GHz signal as an example, the part of the combining network 1013 that processes the 5.8GHz signal includes a 5.8GHz filter, which can filter the 5.2GHz and 2.4GHz signals, solving the problem of mutual interference between signals. The other 2.4GHz and 5.2GHz circuits also include filters for their respective operating frequency bands, achieving the same function. Finally, the combining network 1013 distributes the eight signals to different antennas.

[0120] Based on the system in the above embodiments, this solution divides the radio frequency signal into eight parts using one AP. Each part of the radio frequency signal is then transmitted to a room via radio frequency cables and connected to an antenna deployed in each room, achieving signal coverage for eight rooms, which is referred to as a cell. The entire ward is divided into several cells, each covered by an independent AP. One AP can cover multiple rooms through the radio frequency power splitting network in this solution, and the total number of rooms it can support is unlimited. This solves the problem of limited room coverage in two-tier architecture solutions.

[0121] Optionally, when the communication system with isolated internal and external networks is used for wireless signal input, i.e. wireless signal reception, before the internal network wireless signal and the external network wireless signal are input to the internal network subsystem 102 and the external network subsystem 103, they can also be processed by signal merging, signal amplification, etc., through the internal network radio frequency power divider network 1011 and the external network radio frequency power divider network 1012 to facilitate network signal processing.

[0122] In some possible implementations, the internal network RADIO chip converts the received signal into an internal network radio frequency signal and amplifies the signal through a front-end module (FEM) chip. Finally, the amplified signal is sent to the internal network radio frequency power divider network 1011. The external network RADIO chip converts the received signal into an external network radio frequency signal and amplifies the signal through an FEM chip. Finally, the amplified signal is sent to the external network radio frequency power divider network 1012.

[0123] It is understood that in the above embodiments, each subsystem, network, and component within the entire system can serve as both an input and an output of network signals / digital signals, including the intranet subsystem 102, the extranet subsystem 103, the combining system 101, etc. The input and output of the same subsystem, network, and component are the corresponding reverse processes.

[0124] Here, this embodiment of the application sets up an internal network RF power divider network 1011 and an external network RF power divider network 1012. A signal input to the RF power divider network can be distributed to multiple output ports of the RF power divider network, thereby obtaining multiple sub-internal network signals and multiple sub-external network signals. These signals are then output to a combining network 1013 for combining processing. The resulting combined signal can connect to more antennas, thereby expanding the network coverage. Through the internal network RF power divider network 1011 and the external network RF power divider network 1012, signal distribution and transmission are realized in the internal network subsystem 102 and the external network subsystem 103, respectively. It is not necessary to equip each receiver with a separate signal source. Since one AP can cover multiple rooms, the solution of this embodiment of the application effectively reduces costs. Therefore, this embodiment of the application, by setting up an RF power divider network to extend the signal, can reduce the number of APs, thereby reducing communication costs.

[0125] Optionally, the combining system 101 includes an internal power amplification network, an external power amplification network, and a combining network 1013.

[0126] The internal network power amplifier network is used to amplify the internal network signal output by the internal network subsystem 102, so as to output the amplified internal network signal to the combining network 1013; the external network power amplifier network is used to amplify the external network signal output by the external network subsystem 103, so as to output the amplified external network signal to the combining network 1013; the combining network 1013 is used to combine the amplified internal network signal and the amplified external network signal to output the combined signal.

[0127] Optionally, the internal network power amplification network can be set between the internal network RF power divider network 1011 and the internal network subsystem 102, or it can be set between the internal network RF power divider network 1011 and the combining network 1013.

[0128] Optionally, the external network power amplification network can be set between the external network RF power divider network 1012 and the external network subsystem 103, or it can be set between the external network RF power divider network 1012 and the combining network 1013.

[0129] Optionally, the internal RF power divider network 1011 and the external RF power divider network 1012 may also include signal amplification functions.

[0130] Optionally, the combined network 1013 may also include signal amplification functionality.

[0131] Optionally, in this embodiment of the application, at least one additional amplifier circuit may be provided outside the combining system 101. The amplifier network may be set at any location in the communication system that is isolated from the internal and external networks, so as to amplify the signal during the network signal processing and improve the signal quality.

[0132] Here, this embodiment of the application sets up an internal network power amplification network and an external network power amplification network, which are used to amplify the internal network signal and the external network signal, respectively, thereby achieving the effect of signal enhancement, which is conducive to better processing and using these signals, and meeting the requirements of AP system stability and signal quality.

[0133] Figure 4 This is a schematic diagram of the framework structure of another communication system with isolated internal and external networks provided in an embodiment of this application. Figure 4 As shown, the communication system with internal and external network isolation provided in this application embodiment may include an internal network subsystem 102, an external network subsystem 103, a combining system 101, and a public frequency band radio chip 104.

[0134] Specifically, the public band radio chip 104 is connected to the combining system 101.

[0135] Optionally, the combining system 101 includes a common frequency band radio power divider network and a combining network 1013, and the common frequency band radio chip 104 is connected to the combining network 1013 through the common frequency band radio power divider network.

[0136] Optionally, the public band radio chip 104 is used to output public band network signals.

[0137] Optionally, the public band radio chip 104 is also used to process the input public band network signal. Specifically, when a communication system with isolated internal and external networks uses it for wireless signal input (i.e., wireless signal reception), the following processing steps are performed:

[0138] The network signal is input to the combining network 1013 in the system through at least one antenna. The combining network 1013 splits the network signal to obtain the intranet network signal, the extranet network signal and the public frequency band network signal. The network signals can be input to the intranet subsystem 102, the extranet subsystem 103 and the public frequency band radio chip 104 or their corresponding subsystems for processing.

[0139] By using RF combining, network signals from different frequency bands are combined and output, reducing the number of external interfaces of the AP, and ultimately reducing the number of RF cables. This results in a 50% reduction in cable costs, antenna costs, and deployment costs, further lowering communication costs.

[0140] Optionally, the public band radio frequency power divider network includes an amplifier circuit.

[0141] Optionally, an amplification network is provided between the public band radio chip 104 and the combining system 101 to amplify the signal.

[0142] The public frequency band radio chip 104 is used to process network signals in the public frequency band, wherein the first frequency band, the second frequency band, and the public frequency band are all different.

[0143] The public frequency band radio chip 104 can provide wireless access services, including inputting public frequency band wireless signals and outputting public frequency band wireless signals. The public frequency band wireless signals can be wireless signals from an intranet or wireless signals from an external network. The public frequency band radio chip 104 in this embodiment can switch to an intranet or switch to an external network.

[0144] Alternatively, the public band radio chip 104 may be a radio chip for handling any one of 5.8 GHz, 5.2 GHz or 2.4 GHz wireless networks.

[0145] Optionally, the public frequency band radio chip 104 can be a chip independent of the internal network subsystem 102 and the external network subsystem 103, and the public frequency band radio chip 104 corresponds to the public frequency band subsystem of the communication system set up in the internal and external network isolation, and the structure of the public frequency band subsystem is the same as that of the internal network subsystem 102 and the external network subsystem 103.

[0146] Optionally, the public frequency band radio chip 104 can be a chip inside the internal network subsystem 102 or the external network subsystem 103, or the public frequency band processing function can be implemented based on the chip inside the internal network subsystem 102 or the external network subsystem 103.

[0147] Specifically, taking an example where the signal corresponding to the internal network subsystem 102 is 5GHz, the signal corresponding to the external network subsystem 103 is 5GHz, and the signal corresponding to the public frequency band subsystem is 2.4GHz, the signal frequency bands corresponding to the internal network subsystem 102 and the external network subsystem 103 are different. The internal network subsystem 102, the external network subsystem 103, and the public radio frequency subsystem may include the following four devices:

[0148] The first central processing unit 501 located in the intranet subsystem 102 (see...) Figure 5 (As shown), it does not include radio chip functionality.

[0149] The first radio chip installed in the intranet subsystem 102 includes a first frequency band unit and a third frequency band unit, and is capable of realizing 5GHz and 2.4GHz radio functions within the intranet.

[0150] The second central processing unit 502 located in the external network subsystem 103 (see...) Figure 5 As shown, it includes a fourth frequency band unit, which can realize the function of an external network 2.4GHz radio chip.

[0151] The second radio chip installed in the external network subsystem 103 includes a second frequency band unit and is capable of realizing radio functions for the 5GHz external network.

[0152] The third and fourth frequency band units share a single processing path.

[0153] Optionally, the output of the common radio frequency subsystem is connected to the combining system 101.

[0154] The 2.4GHz band signal can be switched between internal and external networks according to user needs, sharing a common 2.4GHz RF signal processing path, thus reducing costs. Without this design, the cost of two separate paths would be required.

[0155] Optionally, the above-mentioned communication system with isolated internal and external networks also includes a microcontroller unit 500; when the communication system with isolated internal and external networks includes a public frequency band radio chip 104, the microcontroller unit 500 is used to control the public frequency band radio chip 104 to connect to the internal network subsystem 102 or to the external network subsystem 103.

[0156] Through MCU control, flexible switching of public frequency bands between the intranet and the internet can be achieved.

[0157] This application embodiment includes an MCU, which can be used to control the entire communication system isolated from both internal and external networks. Specifically, the MCU controls the switching connection between the public frequency band radio chip 104 and the internal network subsystem 102 or the external network subsystem 103, enabling flexible control of the public frequency band network signals. Even if this application embodiment only includes one public frequency band radio chip 104, the MCU can still meet the output requirements of the public frequency band network signals in both internal and external network application scenarios through switching control, thereby improving the flexibility and reliability of the communication system isolated from both internal and external networks.

[0158] Optionally, the public frequency band radio chip 104 is connected to the switching switch, and the MCU is also connected to the switching switch. The MCU can control the public frequency band radio chip 104 to connect to the intranet subsystem 102 or to the extranet subsystem 103 by controlling the switching switch, thereby switching the public frequency band to the intranet or to the extranet.

[0159] Optionally, the MCU is used to control the switching between the third frequency band unit and the fourth frequency band unit. The third frequency band unit is set in the internal network subsystem 102, and the fourth frequency band unit is set in the external network subsystem 103.

[0160] Optionally, the first radio chip further includes a third frequency band unit, and the second central processing unit 502 further includes a fourth frequency band unit; the signal frequency band of the third frequency band unit is the third frequency band, and the signal frequency band of the fourth frequency band unit is the fourth frequency band; the MCU is used to send a switching signal to the first central processing unit 501 and the second central processing unit 502 to control whether the network service of the third frequency band unit is enabled through the first central processing unit 501 or the network service of the fourth frequency band unit is enabled through the second central processing unit 502.

[0161] Here, the communication system with internal and external network isolation provided in this embodiment of the application is equipped with a common frequency band radio chip 104 to output signals in a common frequency band different from those of the internal network subsystem 102 and the external network subsystem 103. This common frequency band radio chip 104 can be an independent radio chip, or it can be implemented based on a chip within the internal network subsystem 102 or the external network subsystem 103. Optionally, the network of the common frequency band radio chip 104 can be flexibly switched to either the internal network subsystem 102 or the external network subsystem 103 according to the settings. By adopting a switchable common RF channel scheme, the transmission requirements of the internal and external network subsystems for different frequency bands can be met simultaneously. Compared to the scheme where two APs need to deploy two common parts, only one common part is required, simplifying the system structure and further reducing costs.

[0162] Optionally, Figure 5 A schematic diagram of the framework structure of another communication system with internal and external network isolation provided in the embodiments of this application is shown below. Figure 5 As shown, the communication system with internal and external network isolation provided in this application embodiment includes an internal network subsystem 102, an external network subsystem 103, a combining system 101, and a microcontroller unit 500.

[0163] The intranet subsystem 102 includes a first central processing unit 501, and the extranet subsystem 103 includes a second central processing unit 502.

[0164] Optionally, both the first central processing unit 501 and the second central processing unit 502 are connected to the microcontroller unit 500, and the connection method can be either an I2C bus or a Universal Asynchronous Receiver / Transmitter (UART) interface.

[0165] Optionally, the microcontroller unit 500 can be connected to an intranet wired network and an extranet wired network. The connection method can be any communication connection method, such as through a serial communication interface, an internal integrated circuit (I-squared-C, abbreviated as I2C), or a linear bus connection.

[0166] Optionally, when the communication system with isolated internal and external networks includes a public frequency band radio chip 104, the microcontroller unit 500 is used to control the public frequency band radio chip 104 to connect to the internal network subsystem 102 or to the external network subsystem 103.

[0167] Optionally, the first central processing unit 501 is used to send the first local area network address of the intranet subsystem 102 to the microcontroller unit 500. The second central processing unit 502 is used to send the second local area network address of the extranet subsystem 103 to the microcontroller unit 500.

[0168] The microcontroller unit 500 is configured to: receive a first local area network (LAN) address of the intranet subsystem 102 and a second LAN address of the corresponding external network subsystem 103. It then packages the first and second LAN addresses and uploads them to the AC (Access Controller), enabling the AC to configure the intranet subsystem 102 and the corresponding external network subsystem 103 as a companion network, and to determine the management and maintenance information of either the intranet subsystem 102 or the corresponding external network subsystem 103 as the maintenance information for the companion network.

[0169] In this context, a LAN address is a unique identifier assigned to network devices within a local area network (LAN). It is primarily used for communication and identification between devices. Here, the LAN address refers to the MAC address. Since both the internal network subsystem 102 and the external network subsystem 103 have independent CPUs, and each CPU has its own MAC address, the MAC address can represent the uniqueness of both the internal network subsystem 102 and the external network subsystem 103. By binding the unique LAN addresses of the internal network subsystem 102 and the external network subsystem 103, the binding between them can be achieved.

[0170] Among them, the external network subsystem 103 corresponding to the internal network subsystem 102 is the external network subsystem 103 installed in the same physical location as the internal network subsystem 102.

[0171] Optionally, Figure 6 This is a schematic diagram illustrating the control relationship between a microcontroller 500, a first central processing unit 501, and a second central processing unit 502, provided as an embodiment of this application. Figure 6 As shown, the MCU coordinates and controls the two CPUs, managing the data.

[0172] Both CPUs connect to their respective management channels, which can be I2C buses or UART interfaces, and send their respective MAC and Internet Protocol (IP) addresses to the MCU. After receiving the information from the two CPUs, the MCU combines the information and sends it to the AC. The AC can then know the companion relationship between the two CPUs, thus realizing the companion network function.

[0173] Optionally, each CPU will send its MAC and IP addresses once after startup. Once the MCU detects the CPU's heartbeat signal, it can determine that the CPU is online. If it does not receive the MAC or other information sent by the CPU, it will actively initiate a query through the interconnected I2C or UART interface to ensure that it has been received.

[0174] A normal access point (AP) has only one MAC address, which uniquely identifies the AP. The MAC address is entered into the system along with the AP's deployment location. This allows the subsystem's management interface to display the location of the AP with MAC address ***** as room ****, establishing a unique correspondence between MAC addresses and AP locations. If the system detects a malfunction in the AP with MAC address ****, it can immediately pinpoint the location of the faulty AP and quickly address the issue.

[0175] Referring to the above embodiment, an AP contains two CPUs, and each CPU has a MAC layer. Therefore, an AP contains two MAC addresses, where MAC address 1 corresponds to CPU1 and MAC address 2 corresponds to CPU2. In order to uniquely establish the relationship between MAC and AP location, two MAC address strings need to be recorded. For the entire network devices, this means that twice as many MAC addresses need to be recorded, which greatly increases the workload and is prone to errors.

[0176] To address the above issues, the concept of a companion network is introduced. An AP includes an internal network subsystem 102 and an external network subsystem 103, each with one CPU. For a given AP, a companion network refers to the subsystems corresponding to two CPUs within the same AP. After the AP powers on normally, both CPUs send their respective MAC addresses to the MCU through their management channels. The MCU then packages the received MAC addresses and sends them to the management AC (Administrative Assistant), i.e., the management system. This allows the management system to know that the two MAC addresses are in the same location. Therefore, in the process of recording MAC addresses and AP deployment locations and entering them into the system, only one MAC address from the AP needs to be recorded. After entering the information into the system, the system can naturally search for its companion network, i.e., the MAC address of the other CPU on the same AP, based on the recorded MAC address. Then, both MAC addresses are simultaneously bound to the AP installation location. This establishes a relationship between both MAC addresses and the AP installation location. Since both MAC addresses are bound to the AP installation location, the AP installation location can be found through either MAC address. In the future, regardless of which MAC address is detected as faulty, the system can locate the faulty AP through the corresponding relationship for maintenance.

[0177] In this embodiment, the intranet subsystem 102 and the extranet subsystem 103 are each equipped with an independent CPU to manage their respective subsystems. Each CPU can collect the MAC addresses of its corresponding subsystem. Based on the above structure, this embodiment provides a companion network function. Since an AP in this application has two MAC addresses, one for the intranet and one for the extranet, the MCU can report both MAC addresses to the AC. The AC configures the two received MAC addresses as a pair of companion MACs. Because the two companion MACs are in the same installation location, an installation location can be associated with two MACs. This allows the relationship between the two MAC addresses and the AP installation location to be established simultaneously. In the future, no matter which MAC address the system detects as faulty, the faulty AP can be found through the correspondence and maintained, reducing the system's maintenance difficulty and cost.

[0178] Optionally, the first central processing unit 501 is further configured to acquire the first status information of the intranet subsystem 102, generate a first heartbeat message based on the first status information, and send the first heartbeat message to the microcontroller unit 500; the second central processing unit 502 is further configured to acquire the second status information of the extranet subsystem 103, generate a second heartbeat message based on the second status information, and send the second heartbeat message to the microcontroller unit 500; the microcontroller unit 500 is configured to determine whether there is a fault in the intranet subsystem 102 and the extranet subsystem 103 based on the first heartbeat message and the second heartbeat message, and perform fault handling.

[0179] Optionally, the CPU can also transmit critical information such as its health status to the MCU via heartbeat messages. The MCU analyzes the heartbeat messages to determine the current state of the CPU. For an unhealthy CPU, the MCU will operate the CPU's reset pin to attempt a hardware reset, aiming to achieve CPU self-recovery.

[0180] In this embodiment, each CPU can also acquire the status information of its corresponding subsystem and transmit the status information to the MCU in the form of a heartbeat message. The MCU analyzes the heartbeat message to realize fault monitoring of the internal network subsystem 102 and the external network subsystem 103, and automatically handles faults, thereby improving the reliability, security and stability of the system.

[0181] Optionally, the microcontroller unit 500 is further configured to: generate status information of the communication system isolated from the internal and external networks based on the first heartbeat message and the second heartbeat message; and upload the status information of the communication system isolated from the internal and external networks to the access controller so that the access controller can save the status information of the communication system isolated from the internal and external networks.

[0182] Optionally, the MCU will collect and report the current key configuration information, including but not limited to the current AP's channel, transmit power, and whether it is powered externally, to the AC. Optionally, the key configuration information includes fault information of each key configuration. The AC saves the above information to realize fault recording. Alternatively, the AC can discover faults based on the key configuration information and record the faults to facilitate fault diagnosis and equipment maintenance.

[0183] Optionally, after saving the status information of the communication system, the AC can display the status information. Alternatively, in response to calls from maintenance personnel, it can send the status information of the communication system to the user's terminal device to facilitate troubleshooting and equipment maintenance.

[0184] The MCU can also report the status information of the communication system isolated from the internal and external networks to the AC in real time. The AC can record faults based on the status information of the communication system isolated from the internal and external networks, which facilitates fault diagnosis and equipment maintenance, and reduces the difficulty and cost of system maintenance.

[0185] Optionally, a buzzer is installed at the physical location corresponding to the companion network; the microcontroller 500 is also configured to: in response to a buzzer sounding command, acquire buzzer information of the target companion network corresponding to the buzzer sounding command; and generate a buzzer control command based on the buzzer information to control the buzzer installed at the physical location corresponding to the target companion network to sound.

[0186] Optionally, the buzzer information may be included in the maintenance information.

[0187] Optionally, the buzzer information includes the buzzer identifier and / or the buzzer location.

[0188] Alternatively, the buzzer here can be an onboard device of the AP.

[0189] Alternatively, the buzzer here can also be a separate device from the AP, installed independently at the physical location corresponding to the target companion network, and the buzzer can communicate with the AP.

[0190] Optionally, maintenance personnel can initiate a buzzer sound command by clicking or sending information on terminal devices or servers.

[0191] Currently, most access point (AP) devices are installed concealed within the ceiling. This installation method makes it difficult to locate an AP if it malfunctions, as conventional maintenance methods are insufficient. When operations need to be performed on the AP itself, locating its position is challenging. Current solutions simply involve installing the AP, recording its approximate location and MAC address, and then entering this information into the system. This approach only provides a rough location and cannot pinpoint the exact location. This application addresses this problem by installing a buzzer.

[0192] In this embodiment, the control logic of the buzzer is as follows: when there is no control signal input, the buzzer is in a silent state. When a control signal of a certain frequency is given to the control circuit, the control circuit converts the control signal into a level and sends it to the buzzer, which then emits a sound of a specific frequency. Depending on the frequency of the input control signal, the buzzer can produce sounds of different loudness. When the control signal stops being input, the buzzer stops emitting sound.

[0193] In this embodiment of the application, the control signal is generated by the onboard MCU.

[0194] In this embodiment, a buzzer trigger switch is designed at the AC and network ends. The maintenance personnel only need to click the switch to trigger the buzzer of the corresponding AP to sound.

[0195] Optionally, considering that the buzzer may have an impact on and cause discomfort to the patient, the buzzer in this embodiment of the application is configured as follows:

[0196] Specifically, in medical system applications, the loudness of the buzzer needs to undergo rigorous tuning and testing to limit it to a level greater than a first preset loudness and less than a second preset loudness. This ensures that maintenance personnel can hear it nearby, but the sound is not loud enough for a large number of patients to hear, thus improving the user experience. This embodiment does not impose specific limitations on the first and second preset loudness levels, which can be determined based on actual conditions. In other application scenarios, the loudness of the buzzer may not be limited.

[0197] Optionally, the location information of maintenance personnel can be monitored. The buzzer should only be activated when the maintenance personnel are detected near the approximate location of the access point (AP). Once the AP's location is found, it is recommended to quickly turn off the buzzer to avoid prolonged sounding that could disturb the patient's rest. Optionally, the trigger condition for turning off the buzzer can be: detecting that the distance between the maintenance personnel and the AP is less than a preset distance, or receiving a shutdown operation from the maintenance personnel on the corresponding switch set on the buzzer. This embodiment does not impose a specific limitation on the preset distance, which can be determined according to actual conditions. Providing multiple buzzer control schemes improves the flexibility of system maintenance and enhances the user experience.

[0198] Besides making it easier for maintenance personnel to locate the access point (AP), the buzzer will not be triggered in other fault scenarios, ensuring that it will not make a sound when operated by non-professionals and thus not affect patients.

[0199] In this embodiment, a buzzer is installed at the AP installation location. Once an AP malfunctions, maintenance personnel can initiate a buzzer sound command in the system. The system can then trigger the buzzer at the corresponding AP installation location to sound, achieving accurate location of the faulty AP and facilitating maintenance personnel to quickly find and maintain the faulty AP.

[0200] Optionally, embodiments of this application also include a dual power supply; correspondingly, Figure 7 A schematic diagram of the power supply system framework for a communication system with isolated internal and external networks, provided in an embodiment of this application, is shown below. Figure 7 As shown, the power supply system includes a first power supply circuit 701 and a second power supply circuit 702.

[0201] The first power supply circuit 701 is used to supply power to the internal network subsystem 102; the second power supply circuit 702 is used to supply power to the external network subsystem 103.

[0202] In this embodiment, the internal network subsystem 102 and the external network subsystem 103 are each configured with independent power supply circuits to provide power to the internal network subsystem 102 and the external network subsystem 103, thereby improving system stability.

[0203] Optionally, such as Figure 7 As shown, the power supply system of the above-mentioned communication system with internal and external network isolation also includes a microcontroller unit 500, a first power converter 703, and a second power converter 704; the first power converter 703 is used to convert the first electrical energy output from the first power circuit 701 to obtain first converted electrical energy, and output the first converted electrical energy to power the microcontroller unit 500; the second power converter 704 is used to convert the second electrical energy output from the second power circuit 702 to obtain second converted electrical energy, and output the second converted electrical energy to power the microcontroller unit 500.

[0204] Here, because the voltage required to power the MCU is relatively low, while the voltages of the first power supply circuit 701 and the second power supply circuit 702, which power the internal network subsystem 102 and the external network subsystem 103, are relatively high, the first power supply circuit 701 and the second power supply circuit 702 cannot directly power the MCU. Therefore, a first power converter 703 and a second power converter 704 are needed to perform voltage conversion processing on the first power supply circuit 701 and the second power supply circuit 702 to reduce the voltage, meet the power supply requirements of the MCU, and improve the system's safety and lifespan.

[0205] Here, this embodiment of the application configures a first power converter 703 and a second power converter 704, and an MCU to manage a communication system isolated from both internal and external networks. The MCU is powered by the first converted energy obtained by the first power converter 703 from the output energy of the first power circuit 701, and by the second converted energy obtained by the second power converter 704 from the output energy of the second power circuit 702. These two DC-DC converters and their corresponding power circuits are independent of each other. Only one of them needs to be powered for the MCU to work normally, which improves the stability of the communication system isolated from both internal and external networks and ensures the normal and stable operation of the communication system.

[0206] Optionally, such as Figure 7 As shown, the first power supply circuit 701 includes a first power receiving device detection module 7011, and the second power supply circuit 702 includes a second power receiving device detection module 7021.

[0207] The first power receiving device detection module 7011 is used to send a first indication signal to the microcontroller unit 500, the first indication signal being used to indicate the power supply status of the first power supply circuit 701; the second power receiving device detection module 7021 is used to send a second indication signal to the microcontroller unit 500, the second indication signal being used to indicate the power supply status of the second power supply circuit 702; the microcontroller unit 500 is used to determine the power supply status of the first power supply circuit 701 and the second power supply circuit 702 through the first indication signal and the second indication signal, and according to the power supply status of the first power supply circuit 701 and the second power supply circuit 702, control whether the first power supply circuit 701 supplies power to the intranet subsystem 102 and / or the extranet subsystem 103, and control whether the second power supply circuit 702 supplies power to the intranet subsystem 102 and / or the extranet subsystem 103.

[0208] Here, the first power receiving device detection module 7011 is used to detect the power supply status of the first power supply circuit 701, and the second power receiving device detection module 7021 is used to detect the power supply status of the second power supply circuit 702. The power supply status includes whether there is a fault and its power. The detected information is converted into a first indication signal and a second indication signal and sent to the MCU. After the MCU judges the power supply status of the first power supply circuit 701 and the second power supply circuit 702 according to the first indication signal and the second indication signal, it realizes coordinated control to ensure the power supply of each subsystem.

[0209] Optionally, the power supply status includes whether there is a fault and the power supply capacity.

[0210] Optionally, such as Figure 7 As shown, the power supply system provided in this application embodiment also includes a first analog switch 705 and a second analog switch 706.

[0211] In some embodiments, the first terminal of the first power supply circuit 701 is connected to the microcontroller unit 500 via the first power converter 703, and the first terminal of the second power supply circuit 702 is connected to the microcontroller unit 500 via the second power converter 704; the second terminal of the first power supply circuit 701 is connected to the intranet subsystem 102, and the third terminal of the first power supply circuit 701 is connected to the extranet subsystem 103 via the first analog switch 705; the second terminal of the second power supply circuit 702 is connected to the extranet subsystem 103, and the third terminal of the second power supply circuit 702 is connected to the intranet subsystem 102 via the second analog switch 706.

[0212] Optionally, the microcontroller unit 500 can turn the switches of each power supply on and off, thereby flexibly controlling the power supply status of the two power supplies to achieve adaptability to various power supply scenarios. Through the dual power supply, a power disaster recovery function can be realized. Even if one power supply fails, it will not affect the power supply of the overall system, thus improving the reliability of the communication system with internal and external network isolation.

[0213] Optionally, it also includes a third analog switch and a fourth analog switch; the third frequency band unit is connected to the first power supply circuit 701 through the third analog switch; the fourth frequency band unit is connected to the second power supply circuit 702 through the fourth analog switch.

[0214] It should be noted that the switching of the third and fourth analog switches controls the power supply to the RF path in the common frequency band.

[0215] The third and fourth analog switches ensure the power supply to the common radio frequency section, further improving the reliability of the communication system with isolated internal and external networks.

[0216] Specifically, the MCU can control the turning off of the first analog switch 705, the second analog switch 706, the third analog switch, and the fourth analog switch respectively.

[0217] Optionally, the first power converter 703 and the second power converter 704 are DC-DC converters used to limit the voltage within the 3.3V set by the MCU. The first power converter 703 is DC-DC1, and the second power converter 704 is DC-DC2.

[0218] Optionally, the first power supply circuit 701 and the second power supply circuit 702 are DC-DC converters that provide Power over Ethernet (PoE). The first power converter 703 is PoE1, and the second power converter 704 is PoE2.

[0219] Optionally, both the first power supply circuit 701 and the second power supply circuit 702 are equipped with a DC-DC converter for flexible control of the output power of the first power supply circuit 701 and the second power supply circuit 702.

[0220] The specific control methods are as follows:

[0221] The MCU is powered by two independent DC-DC power converters, either DC-DC1 or DC-DC2. The MCU can function normally as long as one of them is powered. The input power to the two DC-DC power converters comes from two different PoE circuits, PoE1 and PoE2. This design ensures that the MCU can start normally regardless of which PoE circuit is powered.

[0222] The MCU can receive indication signals from the PoE circuit. By analyzing these signals, it can determine the appropriate operating state of the first through fourth analog switches. Controlling these switches allows for adaptation to different power supply scenarios.

[0223] In both PoE circuits, the output voltage of the Power Delivery (PD) detection module is supplied to the Power Sourcing Equipment Chip (PSE). This design ensures that the device has PSE functionality regardless of which PoE circuit provides power. The specific enabling and disabling of the PSE function is controlled by the PSE chip's built-in enable function. Control is also given to the MCU, which can determine whether the PSE function should be enabled based on the input status.

[0224] The PoE1 circuit output directly powers part of the internal network subsystem 102, and similarly, the PoE2 circuit output directly powers part of the external network subsystem 103. This design reduces the need for two analog switches, thus lowering costs.

[0225] The common circuit needs to provide power regardless of how the device is powered on. Therefore, the outputs of the PoE1 and PoE2 circuits are respectively powered by the third analog switch. When the PoE1 circuit is active, the MCU controls the third analog switch to open and the fourth analog switch to close; similarly, when the PoE2 circuit is active, the MCU controls the fourth analog switch to open and the third analog switch to close.

[0226] By designing the circuits described above, it is possible to adapt to the power supply requirements of different power supply scenarios and functions.

[0227] The reasons for adopting a dual PoE power supply scheme are analyzed as follows:

[0228] PoE is a technology that supplies power to devices via a network cable. It comes in three standards: AF, AT, and BT, each corresponding to different power outputs. AT is 25.5W, and BT is 71W. In this solution, because AT has lower power and BT has higher power, AT power supply can only power some functions, while BT power supply can power all functions.

[0229] Optionally, the logic of the first and second analog switches described above is as follows:

[0230] When both PoE1 and PoE2 are AT or both are BT, both the first and second analog switches are closed.

[0231] In addition, analog switch 1 is closed only when PoE1 is BT, and open when PoE1 is AT.

[0232] The control logic for the third and fourth analog switches is as follows: if the system is configured to enable the public frequency band signal for a particular subsystem, then the corresponding switch for that subsystem will be closed. For example, if the public frequency band is configured for use within the internal network, then the third analog switch should be closed and the fourth analog switch should be open.

[0233] This solution uses one AP with two RJ45 network ports: port 1 corresponds to the internal network subsystem 102, and port 2 corresponds to the external network subsystem 103. For maximum ease of use, users can configure whether internal network subsystem 102 or external network subsystem 103 is used as the internal network.

[0234] The possible usage scenarios for users are as follows:

[0235] Scenario 1: Only network cable is connected to network port 1 and the PoE power is AT: This corresponds to the scenario where the user only uses the internal network subsystem 102 as the internal network.

[0236] Scenario 2: Connect a network cable to network port 1 with PoE power of BT, and connect a network cable to network port 2 with no power supply function: This corresponds to a scenario where the user uses the internal network subsystem 102 as the internal network and the external network subsystem 103 as the external network.

[0237] Scenario 3: Only network cable is plugged into network port 2 and the PoE power is AT: This corresponds to the scenario where the user only uses the external network subsystem 103 as the internal network.

[0238] Scenario 4: Connect a network cable to network port 2 with PoE power of BT, and connect a network cable to network port 1 with no power supply: This scenario corresponds to a user using external network subsystem 103 as the internal network and internal network subsystem 102 as the external network.

[0239] Scenario 5: Connect a network cable to network port 1 with PoE power set to AT, and connect a network cable to network port 2 with PoE power set to AT. This corresponds to a scenario where the user uses internal network subsystem 102 as the internal network and external network subsystem 103 as the external network, or a scenario where external network subsystem 103 is used as the internal network and internal network subsystem 102 is used as the external network.

[0240] Scenario 6: Connect a network cable to network port 1 with a PoE power of BT, and connect a network cable to network port 2 with a PoE power of BT, corresponding to the power disaster recovery function.

[0241] Based on scenarios one and three above, it's clear that users might only plug a PoE-enabled network cable into one port, and you don't know which side the user will plug it into, as they might use either the internal network subsystem 102 or the external network subsystem 103 as their internal network. In this case, if the device only has PoE circuitry in the internal network subsystem 102, it won't support situations where the user only wants to use the external network subsystem 103 as their internal network and only provides PoE power to it. To avoid restricting user usage, two independent PoE power supply circuits are necessary, allowing users to choose the PoE power supply solution according to their needs.

[0242] Two independent ports allow users to choose the appropriate PoE power supply scheme (AT or BT) based on their needs and the power supply capacity of their switch, ensuring that users can use it however they want. Furthermore, the dual PoE power supply scheme also provides power disaster recovery functionality, corresponding to scenario six. The specific implementation principle of the disaster recovery function is as follows:

[0243] The so-called power backup function means that a system has two power supply paths, both of which are normally active and capable of independently powering the entire system. If one power supply path fails, the other power supply path can quickly take over the responsibilities of the failed path, allowing the system to return to normal operation in a short time without human intervention.

[0244] Specifically, in this plan,

[0245] The PoE1 and PoE2 circuits are two independent power supply paths. Under normal operating conditions, the PoE1 circuit supplies power to the internal network subsystem 102, and the PoE2 circuit supplies power to the external network subsystem 103. The common part is powered by the internal network subsystem 102. At this time, the first analog switch 705, the second analog switch 706, and the fourth analog switch are all controlled by the MCU to be in the open state, while the third analog switch is controlled by the MCU to be in the closed state.

[0246] When the PoE1 circuit fails, the internal network subsystem 102 and the common part will lose power, and the indication signal from the PoE1 circuit to the MCU will inform the MCU of the power failure. After receiving the power failure signal, the MCU controls the first analog switch 705 and the third analog switch to open, and the second analog switch 706 and the fourth analog switch to close, so that the power supply of the common part and some circuits of the internal network subsystem 102 can be switched to the PoE2 circuit. Therefore, the power supply of the common part and some circuits of the internal network subsystem 102 is restored, and the system resumes normal operation.

[0247] When the PoE2 circuit fails, the external network subsystem 103 will lose power, and the indication signal from the PoE2 circuit to the MCU will inform the MCU of the power failure. After receiving the power failure signal, the MCU controls the second analog switch 706 and the fourth analog switch to open, and the first analog switch 705 and the third analog switch to close, so that the power supply of the external network subsystem 103 circuit can be switched to the PoE1 circuit. Therefore, the external network subsystem 103 circuit is restored to power, and the system resumes normal operation.

[0248] Once the maintenance personnel have eliminated the power fault and restored power to the faulty power supply path, the MCU receives the indication signal again, obtains the information that the power supply has returned to normal, and then operates the analog switches. The first analog switch 705, the second analog switch 706, and the fourth analog switch are all controlled by the MCU to be in the open state, while the third analog switch is controlled by the MCU to be in the closed state, that is, it returns to the original normal state and continues to work.

[0249] It is understood that the structures illustrated in the embodiments of this application do not constitute a specific limitation on the architecture of a communication system with isolated internal and external networks. In other feasible embodiments of this application, the above architecture may include more or fewer components than illustrated, or combine some components, or split some components, or arrange different components, which can be determined according to the actual application scenario and is not limited here. Figures 1-7 The components shown can be implemented in hardware, software, or a combination of both.

[0250] The terms "first," "second," "third," "fourth," etc. (if present) in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this application described herein can be implemented, for example, in a sequence other than those illustrated or described herein.

[0251] Furthermore, the terms “comprising” and “having”, and any variations thereof, are intended to cover non-exclusive inclusion, such that a process, method, system, product, or apparatus that includes a series of steps or units is not necessarily limited to those steps or units that are explicitly listed, but may include other steps or units that are not explicitly listed or that are inherent to such process, method, product, or apparatus.

[0252] The term "multiple" in this article refers to two or more. The term "and / or" in this article is merely a description of the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A alone, A and B simultaneously, or B alone. Furthermore, the character " / " in this article generally indicates an "or" relationship between the preceding and following related objects; in formulas, the character " / " indicates a "division" relationship between the preceding and following related objects.

[0253] It is understood that the various numerical designations used in the embodiments of this application are merely for descriptive convenience and are not intended to limit the scope of the embodiments of this application.

[0254] It is understood that, in the embodiments of this application, the order of the above-mentioned process numbers does not imply the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this application.

Claims

1. A communication system for internal and external network isolation, characterized in that, The system comprises an inner network subsystem, an outer network subsystem and a combining system: The inner network subsystem is connected with the combining system and is configured to output an inner network signal; The outer network subsystem is connected with the combining system and is configured to output an outer network signal; The combining system is configured to perform signal combining processing on the inner network signal output by the inner network subsystem and the outer network signal output by the outer network subsystem to output a combined signal.

2. The intra-extranet isolated communication system of claim 1, wherein, The combining system comprises an inner network RF power dividing network, an outer network RF power dividing network and a combining network; The inner network RF power dividing network is configured to perform power dividing processing on the inner network signal output by the inner network subsystem to output a plurality of corresponding sub-inner network signals to the combining network; The outer network RF power dividing network is configured to perform power dividing processing on any one of the outer network signals output by the outer network subsystem to output a plurality of corresponding sub-outer network signals to the combining network; The combining network is configured to perform signal combining processing on the sub-inner network signals and the sub-outer network signals to output a combined signal.

3. The intra-extranet isolated communication system of claim 1, wherein, The combining system comprises an inner network power amplification network, an outer network power amplification network and a combining network; The inner network power amplification network is configured to perform amplification processing on the inner network signal output by the inner network subsystem to output an amplified inner network signal to the combining network; The outer network power amplification network is configured to perform amplification processing on the outer network signal output by the outer network subsystem to output an amplified outer network signal to the combining network; The combining network is configured to perform signal combining processing on the amplified inner network signal and the amplified outer network signal to output a combined signal.

4. The intra-extranet isolated communication system of claim 1, wherein, The inner network subsystem comprises a first radio chip, and the outer network subsystem comprises a second radio chip; The first radio chip is configured to process a network signal of a first frequency band; The second radio chip is configured to process a network signal of a second frequency band; The first frequency band is different from the second frequency band.

5. The intra-extranet isolated communication system of claim 4, wherein, A public frequency band radio chip is further included; The public frequency band radio chip is configured to process a network signal of a public frequency band, and the first frequency band, the second frequency band and the public frequency band are all different.

6. The in-out web isolated communication system according to any one of claims 1 to 5, wherein A micro control unit is further included; When the communication system comprising the inner and outer network isolation comprises the public frequency band radio chip, the micro control unit is configured to control the public frequency band radio chip to be connected to the inner network subsystem or the outer network subsystem.

7. The intra-extranet isolated communication system of claim 6, wherein, The inner network subsystem comprises a first central processing unit, and the outer network subsystem comprises a second central processing unit; The first central processing unit is configured to send a first local area network address of the inner network subsystem to the micro control unit; The second central processing unit is configured to send a second local area network address of the outer network subsystem to the micro control unit; The micro control unit is configured to: receive the first local area network address of the inner network subsystem and receive the second local area network address of the corresponding outer network subsystem of the inner network subsystem, wherein the corresponding outer network subsystem of the inner network subsystem is an outer network subsystem installed in the same physical location as the inner network subsystem; The first LAN address and the second LAN address are packaged and uploaded to an access controller, so that the access controller configures the intranet subsystem and the extranet subsystem corresponding to the intranet subsystem as a buddy network, and determines management and maintenance information of the intranet subsystem or management and maintenance information of the extranet subsystem corresponding to the intranet subsystem as maintenance information of the buddy network.

8. The intra-extranet isolated communication system of claim 7, wherein, The first central processor is further configured to acquire first state information of the intranet subsystem, and generate a first heartbeat packet according to the first state information, and send the first heartbeat packet to the micro control unit; The second central processor is further configured to acquire second state information of the extranet subsystem, and generate a second heartbeat packet according to the second state information, and send the second heartbeat packet to the micro control unit; The micro control unit is configured to determine whether the intranet subsystem and the extranet subsystem have a fault according to the first heartbeat packet and the second heartbeat packet, and perform fault processing.

9. The intra-extranet isolated communication system of claim 8, wherein, The micro control unit is further configured to: generate state information of the intranet-extranet isolation communication system according to the first heartbeat packet and the second heartbeat packet; upload the state information of the intranet-extranet isolation communication system to an access controller, so that the access controller saves the state information of the intranet-extranet isolation communication system.

10. The in-out web isolated communication system according to any one of claims 7 to 9, wherein, A buzzer is installed at a physical position corresponding to the buddy network; The micro control unit is further configured to: in response to a buzzer sound instruction, acquire buzzer information of a target buddy network corresponding to the buzzer sound instruction; generate a buzzer control instruction according to the buzzer information, to control the buzzer installed at the physical position corresponding to the target buddy network to sound.

11. The in-out web isolated communication system according to any one of claims 1 to 5, wherein, Further comprising a first power supply circuit and a second power supply circuit: The first power supply circuit is configured to supply power to the intranet subsystem; The second power supply circuit is configured to supply power to the extranet subsystem.

12. The intra-extranet isolated communication system of claim 11, wherein, Further comprising a micro control unit, a first power supply converter and a second power supply converter; The first power supply converter is configured to convert first electric energy output by the first power supply circuit to obtain first converted electric energy, and output the first converted electric energy to supply power to the micro control unit; The second power supply converter is configured to convert second electric energy output by the second power supply circuit to obtain second converted electric energy, and output the second converted electric energy to supply power to the micro control unit.

13. The intra-extranet isolated communication system of claim 12, wherein, The first power supply circuit comprises a first power receiving device detection module, and the second power supply circuit comprises a second power receiving device detection module; The first power receiving device detection module is configured to send a first indication signal to the micro control unit, the first indication signal being used to indicate a power supply state of the first power supply circuit; The second power receiving device detection module is configured to send a second indication signal to the micro control unit, the second indication signal being used to indicate a power supply state of the second power supply circuit; The micro control unit is configured to determine the power supply state of the first power supply circuit and the power supply state of the second power supply circuit through the first indication signal and the second indication signal, and control whether the first power supply circuit supplies power to the inner network subsystem and / or the outer network subsystem and control whether the second power supply circuit supplies power to the inner network subsystem and / or the outer network subsystem according to the power supply state of the first power supply circuit and the power supply state of the second power supply circuit.

Images