Switch safety protection circuit and switch
By connecting the security lock unit in series on the main power supply line of the switch management unit to control the management authority of the switch, the problem of management security risks of managed switches in the prior art is solved, and the information security management level is improved.
Patent Information
- Application Number
- CN202421047046.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Utility models(China)
- Current Assignee / Owner
- Filing Date
- 2024-05-14
- Publication Date
- 2025-02-14
- Estimated Expiration
- 2034-05-14
AI Technical Summary
Existing managed switches have management security risks when managing configuration permissions, which can easily cause information security accidents.
A switch safety protection circuit is designed, and the security lock unit is added in series on the main power supply line of the management unit, and the working state of the management unit is controlled by unlocking and closing the safety lock unit, thereby controlling the management authority of the switch.
The information security control level of switch management configuration permissions has been improved, and the switch management permissions are controlled through hardware equipment has been controlled, reducing the security risks of software management control.
Smart Images
Figure CN222484725U_ABST
Abstract
Description
Technical Field
[0001] The utility model relates to the technical field of switches, and in particular to a switch safety protection circuit and a switch. Background Art
[0002] At present, when existing managed switches need to obtain management and configuration permissions for the switches, they often perform software management and control methods such as Web login user authentication or serial port login authentication. There are certain management security risks. Once the switch login information is leaked, or the network administrator privately modifies the network configuration without permission, it is easy to cause information security accidents. Utility Model Content
[0003] The utility model aims to solve at least one of the technical problems existing in the prior art. To this end, the utility model proposes a switch security protection circuit, which can improve the information security control level of the switch management configuration authority.
[0004] The utility model also provides a switch.
[0005] According to the first aspect of the present invention, the switch security protection circuit includes:
[0006] A management unit, comprising a power supply terminal, a plurality of first communication terminals and a plurality of second communication terminals, each of the first communication terminals corresponds to one of the second communication terminals, and the first communication terminals are used to connect to a switch;
[0007] A connection component, comprising a first connection end and a second connection end, wherein the first connection end is used to connect to an input power source, and the second connection end is connected to the power supply end of the management unit;
[0008] A safety lock unit, whose switch contact is connected in series between the first connection end and the second connection end of the connection component, and the safety lock unit is used to adjust the on-off of the switch contact to make the first connection end and the second connection end conductive or disconnected;
[0009] The data communication interface unit is used to connect the multiple second communication terminals of the management unit with multiple external interfaces of external devices.
[0010] The switch security protection circuit according to the embodiment of the utility model has at least the following gain effects:
[0011] In the embodiment of the present application, by adding a security lock unit, the two ends of the connection component set between the power supply end of the management unit and the input power supply are connected in series. Only when the security lock unit is unlocked, the two ends of the connection component can be connected. When the security lock unit is unlocked, the two ends of the connection component are disconnected, and the power supply end of the management unit cannot access the input power supply and is powered off. Therefore, the switch connected to the management unit cannot perform management and control of configuration permissions. The switch security protection circuit of the embodiment of the utility model adds a security lock unit in series to the main power supply line of the management unit of the traditional managed switch. The security lock unit realizes the conduction and disconnection of the main power supply circuit of the management unit by unlocking and locking, thereby controlling the working state of the management unit connected to the switch, and then achieving the purpose of controlling the management permissions of the switch. Compared with the existing pure software management and control method, a method of controlling the management configuration permissions of the switch by hardware devices is added, thereby improving the level of information security management and control.
[0012] According to some embodiments of the present utility model, the switch security protection circuit further includes:
[0013] A first filtering unit, connected between the first connection end and the input power supply;
[0014] The second filtering unit is connected between the second connection end and the ground line.
[0015] According to some embodiments of the present invention, the first filtering unit includes:
[0016] a first diode, whose anode is used to connect to the input power supply and whose cathode is connected to the first connection end;
[0017] The first capacitor is connected between the first connection end and the ground line.
[0018] According to some embodiments of the present invention, the second filtering unit includes:
[0019] a second diode, a cathode of which is connected to the second connection end, and an anode of which is connected to the ground line;
[0020] A second capacitor connected between the second connection end and the ground line;
[0021] A third capacitor is connected between the second connection end and the ground line.
[0022] According to some embodiments of the present invention, the connection assembly is a switch device.
[0023] According to some embodiments of the present invention, the management unit includes a management chip.
[0024] According to some embodiments of the present invention, the management chip is a TP3232N chip.
[0025] According to some embodiments of the present invention, the switch security protection circuit further includes a protection unit connected between the management unit and the data communication interface unit, the protection unit includes a plurality of protection sub-units, and each of the protection sub-units is provided corresponding to one of the second communication terminals.
[0026] According to some embodiments of the present invention, the protection subunit includes:
[0027] a first resistor, a first end of which is connected to the second communication end, and a second end of which is connected to the data communication interface unit;
[0028] a fourth capacitor connected between the second end of the first resistor and a ground line;
[0029] A third diode is connected between the second end of the first resistor and the ground line.
[0030] The switch according to the second embodiment of the utility model includes the switch security protection circuit as described in the first embodiment. The switch in the utility model embodiment includes the switch security protection circuit as described in the first embodiment, and thus has all the beneficial effects of the switch security protection circuit as described in the first embodiment.
[0031] Additional aspects and advantages of the present invention will be given in part in the following description, and in part will become apparent from the following description, or will be learned through the practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS
[0032] The above and / or additional aspects and advantages of the present invention will become apparent and easily understood from the description of the embodiments in conjunction with the following drawings, in which:
[0033] Figure 1 The following is a circuit diagram of a switch security protection circuit according to an embodiment of the present utility model.
[0034] Reference numerals:
[0035] Management unit 100,
[0036] Safety lock unit 200,
[0037] Data communication interface unit 300,
[0038] The first filtering unit 400,
[0039] The second filtering unit 500,
[0040] Protection unit 600. DETAILED DESCRIPTION
[0041] The embodiments of the present invention are described in detail below, and examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the present invention, and cannot be understood as limiting the present invention.
[0042] In the description of the present utility model, if there is a description of first, second, etc., it is only for the purpose of distinguishing technical features, and cannot be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features or implicitly indicating the order of the indicated technical features.
[0043] In the description of the present invention, it should be understood that the descriptions involving orientation, such as the orientation or positional relationship indicated as up, down, etc., are based on the orientation or positional relationship shown in the drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the present invention.
[0044] In the description of the present utility model, it should be noted that, unless otherwise clearly stated, terms such as limitation, setting, installation, connection, etc. should be understood in a broad sense, and technicians in the relevant technical field can reasonably determine the specific meanings of the above terms in the present utility model based on the specific content of the technical solution.
[0045] The technical solution of the present utility model will be clearly and completely described below in conjunction with the accompanying drawings. Obviously, the embodiments described below are only part of the embodiments of the present utility model, not all of the embodiments.
[0046] See also Figure 1 As shown, Figure 1 The circuit diagram of the switch security protection circuit of the embodiment of the utility model is as follows. The switch security protection circuit includes:
[0047] The management unit 100 has a power supply terminal, a plurality of first communication terminals and a plurality of second communication terminals, each first communication terminal corresponds to a second communication terminal, and the first communication terminal is used to connect to the switch;
[0048] A connection component, having a first connection end and a second connection end, the first connection end is used to connect to an input power source, and the second connection end is connected to a power source end of the management unit 100;
[0049] A safety lock unit 200, whose switch contact is connected in series between the first connection end and the second connection end of the connection component, and the safety lock unit 200 is used to adjust the on-off of the switch contact to make the first connection end and the second connection end conductive or disconnected;
[0050] The data communication interface unit 300 is used to connect the multiple second communication terminals of the management unit 100 to the multiple external interfaces of the external device.
[0051] The safety lock unit 200 controls the on and off of the connecting component. When the safety lock unit 200 is in an unlocked state, the switch contacts inside the safety lock unit 200 are turned on, and then the first connecting end and the second connecting end of the connecting component are turned on. When the safety lock unit 200 is in an unlocked state, the switch contacts inside the safety lock unit 200 are turned off, and then the first connecting end and the second connecting end of the connecting component cannot be turned on.
[0052] The input power is connected to the power supply end of the management unit 100 after passing through the connection component and the safety lock unit 200. Only when the first connection end and the second connection end of the connection component are connected, the main power supply line of the management unit 100 is connected, and the management unit 100 can work normally after powering on, and the connected switch can be configured and managed; when the first connection end and the second connection end of the connection component are not connected, the main power supply line of the management unit 100 is disconnected, the management unit 100 cannot be powered and cannot work normally, and the connected switch cannot be configured and managed.
[0053] In the embodiment of the present application, by adding a security lock unit 200, the two ends of the connection component set between the power supply end of the management unit 100 and the input power supply are connected in series. Only when the security lock unit 200 is unlocked, the two ends of the connection component can be connected. When the security lock unit 200 is not unlocked, the two ends of the connection component are disconnected, and the power supply end of the management unit 100 cannot access the input power supply and is powered off, so the switch connected to the management unit 100 cannot perform management and control of configuration permissions. The switch security protection circuit of the embodiment of the utility model adds a security lock unit 200 in series to the main power supply line of the management unit 100 of the traditional managed switch. The security lock unit 200 realizes the connection and disconnection of the main power supply line of the management unit 100 by unlocking and locking, thereby controlling the working state of the management unit 100 connected to the switch, and then achieving the purpose of controlling the management permissions of the switch. Compared with the existing pure software management and control method, a method of controlling the management configuration permissions of the switch by adding hardware devices is added, thereby improving the information security management and control level.
[0054] In some embodiments, the security lock unit 200 can be a mechanical lock structure, which can be mechanically switched by a matching key. The key can be kept by the information administrator. When the switch needs to be configured and managed, the information administrator uses the matching key to turn the mechanical lock to the unlocked state, the switch contacts inside the security lock unit 200 are connected, the main power supply line is connected, and the management unit 100 can be powered on and started normally to perform normal configuration management on the switch; after the configuration management is completed, when the information administrator uses the matching key to turn the mechanical lock to the locked state, the switch contacts inside the security lock unit 200 are open, the main power supply line is disconnected, the management unit 100 stops working, and the switch cannot be configured and managed. This process adds a method of controlling the switch management configuration authority by using a lock as a hardware device, thereby improving the level of information security management and control.
[0055] like Figure 1 As shown, in some embodiments, the switch security protection circuit further includes:
[0056] A first filtering unit 400 is connected between the first connection terminal and the input power supply;
[0057] The second filtering unit 500 is connected between the second connection terminal and the ground line.
[0058] The first filter unit 400 is arranged between the first connection end of the connection component and the input power supply, and the second filter unit 500 is arranged between the second connection end of the connection component and the management unit 100. Since a peak current or voltage may be generated when the first connection end and the second connection end are turned on or off at the moment, the first filter unit 400 and the second filter unit 500 can effectively protect the circuit and reduce the impact of the peak current or voltage generated at the moment.
[0059] like Figure 1 As shown, in some embodiments, the first filtering unit 400 includes a first diode and a first capacitor;
[0060] A first diode, whose anode is used to connect to the input power supply and whose cathode is connected to the first connection terminal;
[0061] The first capacitor is connected between the first connection terminal and the ground line.
[0062] The first filtering unit 400 is arranged between the first connection end of the connecting component and the input power supply, which can reduce the noise and interference of the input end, and can also reduce the impact of the instantaneous peak current or voltage. The first diode can prevent instantaneous impact, absorb surges, and achieve electrostatic protection. The first capacitor can achieve filtering and rectification, and play a protective role on the circuit.
[0063] like Figure 1As shown, in some embodiments, the second filtering unit 500 includes a second diode, a second capacitor and a third capacitor;
[0064] A second diode, a cathode of which is connected to the second connection terminal, and an anode of which is connected to the ground line;
[0065] A second capacitor connected between the second connection terminal and the ground line;
[0066] The third capacitor is connected between the second connection terminal and the ground line.
[0067] The second filtering unit 500 is arranged between the second connection end of the connecting component and the management unit 100, which can reduce the noise and interference input to the power supply end of the management unit 100, and can also reduce the impact of the instantaneous peak current or voltage. The second diode can prevent instantaneous impact, absorb surges, and achieve electrostatic protection. Specifically, the second diode can adopt a Zener diode, and the second capacitor and the third capacitor can achieve filtering and rectification to protect the circuit. Specifically, the second capacitor can be used as a low-frequency filter capacitor at the input end to filter out power supply ripples, and the third capacitor can be used as a medium- and high-frequency filter capacitor to filter out power supply glitches.
[0068] In some embodiments, the connection component is a switch device. When the safety lock unit 200 is not provided, the main power supply line of the management unit 100 can be controlled by the switch device, but the safety protection level is insufficient. Therefore, the safety lock unit 200 is also provided in series at both ends of the switch device. Specifically, Figure 1 As shown, the switch device has a first end, a middle end and a second end. A switch contact is provided between the first end and the middle end to control conduction. Generally, they are in a conducting state. The middle end and the second end are respectively connected to two switch contacts of the safety lock unit 200. When the safety lock unit 200 is in an unlocked state, the two switch contacts of the safety lock unit 200 are conducted, and the middle end is connected to the second end, and then the switch device is conducted as a whole. When the safety lock unit 200 is in an unlocked state, the two switch contacts of the safety lock unit 200 are disconnected, and the middle end is disconnected from the second end, and then the switch device is not conducted as a whole. In some embodiments, the switch device can be a variety of different switch devices such as a light touch switch and a touch switch.
[0069] like Figure 1As shown, in some embodiments, the management unit 100 includes a management chip. The management chip can implement configuration authority management of the switch. Specifically, the power supply end is the power supply connection end of the management chip, the multiple first communication ends are the multiple communication ports connected to the management chip and the switch, including the communication ports for input and the communication ports for output, the multiple second communication ends are the communication ports connected to the management chip and other devices, also including the communication ports for input and the communication ports for output, and the second communication ends are often connected to the multiple external interfaces of the external device after passing through the data communication interface unit 300.
[0070] like Figure 1 As shown, in some embodiments, the data communication interface unit 300 is an interface device, specifically, it can be a PHJ8-SHIE interface.
[0071] In some embodiments, the management chip is a TP3232N chip. Specifically, the pins of the TP3232N chip can communicate with the switch and the data communication interface unit 300. These pins can be used for digital input or output, analog input, and can support protocols such as UART, I2C and SPI. The switch is connected to the TP3232N chip, and then connected to other external devices through the data communication interface unit 300, realizing data interaction between the switch and other external devices. The TP3232N chip can also realize the management of switch communication.
[0072] like Figure 1 As shown, in some embodiments, the switch security protection circuit further includes a protection unit 600 connected between the management unit 100 and the data communication interface unit 300, and the protection unit 600 includes a plurality of protection subunits, each of which is set corresponding to a second communication terminal. The protection unit 600 plays a role of buffering and protection between the management unit 100 and the data communication interface unit 300. Each protection subunit protects a stable connection between a second communication terminal and the data communication interface unit 300.
[0073] like Figure 1 As shown, in some embodiments, the protection subunit includes a first resistor, a fourth capacitor and a third diode;
[0074] A first resistor, a first end of which is connected to the second communication end, and a second end of which is connected to the data communication interface unit 300;
[0075] a fourth capacitor connected between the second end of the first resistor and the ground;
[0076] The third diode is connected between the second end of the first resistor and the ground line.
[0077] The protection subunit is connected between a second communication terminal and the data communication interface unit 300, wherein the first resistor can play a role of current limiting protection, the fourth capacitor can achieve filtering and rectification, and play a role in protecting the circuit, and the third diode can prevent instantaneous impact, absorb surges, and achieve electrostatic protection, etc. In some embodiments, a fourth diode is further provided between the two third diodes of every two protection subunits to play a further protective role, and specifically, the third diode and the fourth diode can be bidirectional voltage regulator diodes.
[0078] The embodiment of the utility model further provides a switch, which includes the switch security protection circuit as described in the above embodiment. The switch in the embodiment of the utility model includes the switch security protection circuit as described in the above embodiment, and thus has all the beneficial effects of the switch security protection circuit as described in the embodiment of the first aspect.
[0079] Adding this switch security protection circuit to the switch increases the method of using hardware devices to control the switch management configuration permissions, thereby improving the level of information security management and control, compared with the existing pure software management and control method.
[0080] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "illustrative embodiments", "examples", "specific examples", or "some examples" means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the utility model. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described can be combined in any one or more embodiments or examples in a suitable manner.
[0081] Although the embodiments of the present invention are described in detail above in conjunction with the accompanying drawings, the present invention is not limited to the above embodiments. Those skilled in the art can understand that various changes, modifications, substitutions and variations can be made to these embodiments without departing from the principle and purpose of the present invention. The scope of the present invention is defined by the claims and their equivalents.
Claims
1. A switch security protection circuit, characterized in that: include: A management unit, comprising a power supply terminal, a plurality of first communication terminals and a plurality of second communication terminals, each of the first communication terminals corresponds to one of the second communication terminals, and the first communication terminals are used to connect to a switch; A connection component, comprising a first connection end and a second connection end, wherein the first connection end is used to connect to an input power source, and the second connection end is connected to the power supply end of the management unit; A safety lock unit, whose switch contact is connected in series between the first connection end and the second connection end of the connection component, and the safety lock unit is used to adjust the on-off of the switch contact to make the first connection end and the second connection end conductive or disconnected; The data communication interface unit is used to connect the multiple second communication terminals of the management unit with multiple external interfaces of external devices.
2. The switch security protection circuit according to claim 1, characterized in that: The switch security protection circuit also includes: A first filtering unit, connected between the first connection end and the input power supply; The second filtering unit is connected between the second connection end and the ground line.
3. The switch security protection circuit according to claim 2, characterized in that: The first filtering unit comprises: a first diode, whose anode is used to connect to the input power supply and whose cathode is connected to the first connection end; The first capacitor is connected between the first connection end and the ground line.
4. The switch security protection circuit according to claim 2, characterized in that: The second filtering unit comprises: a second diode, a cathode of which is connected to the second connection end, and an anode of which is connected to the ground line; A second capacitor connected between the second connection end and the ground line; A third capacitor is connected between the second connection end and the ground line.
5. The switch security protection circuit according to claim 1, characterized in that: The connecting component is a switch device.
6. The switch security protection circuit according to claim 1, characterized in that: The management unit includes a management chip.
7. The switch security protection circuit according to claim 6, characterized in that: The management chip is a TP3232N chip.
8. The switch security protection circuit according to claim 1, characterized in that: The switch security protection circuit further includes a protection unit connected between the management unit and the data communication interface unit. The protection unit includes a plurality of protection subunits. Each of the protection subunits is provided corresponding to one of the second communication terminals.
9. The switch security protection circuit according to claim 8, characterized in that: The protection subunit includes: a first resistor, a first end of which is connected to the second communication end, and a second end of which is connected to the data communication interface unit; a fourth capacitor connected between the second end of the first resistor and a ground line; A third diode is connected between the second end of the first resistor and the ground line.
10. A switch, characterized in that: It comprises the switch security protection circuit as claimed in any one of claims 1 to 9.