Data protection equipment and electronic equipment
By using optocouplers to achieve one-way signal transmission in data protection equipment, the problem of insufficient security of traditional peripheral interfaces is solved and the information security of control equipment is improved.
Patent Information
- Application Number
- CN202422133018.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Utility models(China)
- Current Assignee / Owner
- Filing Date
- 2024-08-30
- Publication Date
- 2025-06-10
- Estimated Expiration
- 2034-08-30
AI Technical Summary
Traditional peripheral interfaces are easily targeted, leading to data theft or remote control behavior.
A data protection device is designed, including a first interface module, a first isolation module and a control module. The first isolation module realizes unidirectional transmission of signals through an optocoupler to avoid information outflow.
By transmitting signals in one-way, information leakage in the control equipment is effectively avoided and information security is improved.
Smart Images
Figure CN222965675U_ABST
Abstract
Description
Technical Field
[0001] This application belongs to the technical field of information protection, and particularly relates to a data protection device and an electronic device. Background Art
[0002] For devices such as computers, external devices (such as keyboards, mice, and monitors, etc.) are essential. At the same time, in order to enable the rapid replacement of external devices, devices such as computers will have corresponding peripheral interfaces to connect with various external devices, and these peripheral interfaces are prone to becoming targets of attacks, resulting in data theft or remote control of devices such as computers. Summary of the Invention
[0003] The purpose of this application is to provide a data protection device and an electronic device, aiming to solve the security problems of traditional peripheral interfaces.
[0004] The first aspect of the embodiments of this application provides a data protection device, including: a first interface module, which is used to connect with an external device to access the first data signal output by the external device; a first isolation module, the first end of the first isolation module is connected to the first interface module, and the first isolation module is used to control the unidirectional transmission of the first data signal to the second end of the first isolation module; a control module, the first end of the control module is connected to the second end of the first isolation module, the second end of the control module is used to connect with a control device, and the control module is used to control the conduction and cutoff of the first isolation module and transmit the first data signal to the control device.
[0005] In one embodiment, the first interface module includes a plurality of first interface units, the first isolation module includes a plurality of first isolation units, the first interface module is connected to the first ends of each of the first isolation units in a one-to-one correspondence, and the second ends of each of the first isolation units are connected to the respective input ends of the control module in a one-to-one correspondence.
[0006] In one embodiment, the first isolation unit includes a plurality of optocouplers, and the optocouplers are used to connect the first interface module and the control module.
[0007] In one embodiment, it further includes a second isolation module, the second isolation module is connected between the control module and the control device, and the second isolation module is used to control the unidirectional transmission of the signal output by the control module to the control device.
[0008] In one embodiment, it further includes a power supply module, the power supply module is respectively connected to the first interface module, the first isolation module, and the control module, and the power supply module is used to provide a working voltage.
[0009] In one embodiment, it further includes a video output module. The first interface module includes a video interface unit. The video interface unit is used to connect to a display device. The first end of the video output module is used to connect to the control device. The video output module is used to connect to the video interface unit, and the video output module is used to unidirectionally transmit the video signal output by the control device to the video interface unit.
[0010] In one embodiment, the video output module includes a display driving unit, a first signal conversion unit, a signal transmission unit, and a second signal conversion unit. The first end of the display driving unit is used to connect to the control device. The second end of the display driving unit is sequentially connected to the video interface unit through the first signal conversion unit, the signal transmission unit, and the second signal conversion unit. Both the first signal conversion unit and the second signal conversion unit are used for unidirectional conversion of signal types.
[0011] In one embodiment, the first signal conversion unit is used to convert the electrical signal provided by the display driving unit into an optical signal, and the second signal conversion unit is used to convert the optical signal into an electrical signal.
[0012] In one embodiment, the signal transmission unit includes an optical fiber.
[0013] In a second aspect of the embodiments of the present application, an electronic device is provided, including a control device and the data protection device as described above. The control device is connected to an external device through the data protection device.
[0014] The beneficial effect of the embodiments of the present application compared with the prior art is that by controlling the unidirectional transmission of signals through the first isolation module, the information in the control device can be prevented from flowing out through the data protection device, thereby protecting the information in the control device. BRIEF DESCRIPTION OF THE DRAWINGS
[0015] Figure 1 It is a schematic diagram of the data protection device provided by an embodiment of the present application;
[0016] Figure 2 It is a schematic diagram of the first isolation module and the first interface module provided by an embodiment of the present application;
[0017] Figure 3 It is a circuit schematic diagram of the first isolation module provided by an embodiment of the present application;
[0018] Figure 4 It is another circuit schematic diagram of the first isolation module provided by an embodiment of the present application;
[0019] Figure 5Another schematic diagram of the data protection device provided by an embodiment of the present application;
[0020] Figure 6 Another schematic diagram of the data protection device provided by an embodiment of the present application;
[0021] Figure 7 Schematic diagram of an electronic device provided by an embodiment of the present application. Detailed implementation manners
[0022] In order to make the technical problems, technical solutions and beneficial effects to be solved by the present application clearer, the present application will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.
[0023] It should be noted that when an element is referred to as being "fixed to" or "disposed on" another element, it can be directly on the other element or indirectly on the other element. When an element is referred to as being "connected to" another element, it can be directly connected to the other element or indirectly connected to the other element.
[0024] It should be understood that the orientation or positional relationship indicated by the terms "length", "width", "upper", "lower", "front", "rear", "left", "right", "vertical", "horizontal", "top", "bottom", "inner", "outer", etc. is based on the orientation or positional relationship shown in the drawings, and is only for the convenience of describing the present application and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore should not be construed as a limitation to the present application.
[0025] In addition, the terms "first" and "second" are only used for descriptive purposes and cannot be construed as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Thus, the features defined with "first" and "second" may explicitly or implicitly include one or more of such features. In the description of the present application, "a plurality of" means two or more unless otherwise specifically defined.
[0026] Figure 1 The schematic diagram of the display panel provided by an embodiment of the present application is shown. For the convenience of description, only the parts related to this embodiment are shown and are described in detail as follows:
[0027] The data protection device 10 includes: a first interface module 100, a first isolation module 200, a control module 300, and a device simulation module 400.
[0028] The first interface module 100 is used to connect to an external device 20 to access the first data signal output by the external device 20; the first end of the first isolation module 200 is connected to the first interface module 100, and the first isolation module 200 is used to control the unidirectional transmission of the first data signal to the second end of the first isolation module 200; the first end of the control module 300 is connected to the second end of the first isolation module 200, and the second end of the control module 300 is used to connect to a control device 30. The control module 300 is used to control the conduction and cutoff of the first isolation module 200 and transmit the first data signal to the control device 30.
[0029] By controlling the unidirectional transmission of the signal through the first isolation module 200, the information in the control device 30 can be prevented from flowing out through the data protection device 10, so as to protect the information in the control device 30 and improve the information security of the control device 30.
[0030] In some embodiments, as Figure 2 shown, the data protection device 10 further includes a device simulation module 400. The device simulation module 400 is connected between the second end of the control module 300 and the control device 30. The control module 300 is further used to decode the first data signal and output the decoded first data signal. The device simulation module 400 is further used to re-encode and package the decoded first data signal to obtain and output a second data signal to the control device 30. For the control device 30, the device simulation module 400 is a conventional external device and does not require an additional driver, which can improve the compatibility of the data protection device 10. Among them, the external device 20 can be a device such as a mouse, a keyboard, or a joystick. The control device 30 can be a device such as a computer or an industrial control computer. The control module 300 and the device simulation module 400 can include microcontrollers such as chips and single-chip microcomputers.
[0031] It can be understood that the device simulation module 400 can only re-encode the signals it can recognize, and the signals it cannot recognize cannot be re-encoded and output. By re-decoding and encoding the data signal through the control module 300 and the device simulation module 400, the control device 30 can be prevented from being implanted with programs, Trojans, and viruses in the external device 20.
[0032] It should be noted that the first data signal provided by the external device 20 includes a feature code corresponding to the type of the external device 20.
[0033] In some embodiments, the device simulation module 400 includes a plurality of simulation units, and each simulation unit is used to re-encode the data signal of an external device 20.
[0034] Exemplarily, the device simulation module 400 may include two simulation units. The external device 20 includes a keyboard and a mouse. One simulation unit is used for re-encoding the first data signal provided by the keyboard, and the other simulation unit is used for re-encoding the first data signal provided by the mouse. The device simulation module 400 can only pass the first data signal provided by the keyboard and the first data signal provided by the mouse.
[0035] In some embodiments, the control module 300 can also implement screening of the first data signal.
[0036] In one embodiment, as Figure 2 shown, the first interface module 100 includes a plurality of first interface units 110, the first isolation module 200 includes a plurality of first isolation units 210, the first interface module 100 is connected to the first ends of the respective first isolation units 210 in a one-to-one correspondence, and the second ends of the respective first isolation units 210 are connected to the respective input ends of the control module 300 in a one-to-one correspondence.
[0037] Among them, each first interface unit 110 may include interfaces of different models to connect different external devices 20. The number of first interface units 110 and the specific models of the interfaces can be set according to actual needs. In some embodiments, the first interface module 100 includes 4 first interface units 110, 3 of which include a USB interface each, and 1 of which includes a serial communication interface.
[0038] At the same time, each first interface unit 110 can be connected to the control module 300 through a corresponding independent first isolation unit 210 to avoid interference between external devices 20. It can be understood that each first isolation unit 210 can unidirectionally transmit the first data signal received by the corresponding first interface unit 110 to the control module 300.
[0039] In one embodiment, the first isolation unit 210 includes a plurality of optocouplers, and the optocouplers are used to connect the first interface module 100 and the control module 300.
[0040] It should be noted that the number of optocouplers in a first isolation unit 210 is the same as the number of signal lines for transmitting the first data signal. For example, when two signal lines are required to transmit a first data signal, two optocouplers need to be provided in a first isolation unit 210. While realizing unidirectional transmission of signals from a physical level through optocouplers, it can also achieve high-voltage isolation of electrical signals to avoid excessive voltage and current passing through the first isolation unit 210.
[0041] Exemplarily, as Figure 3As shown, a first isolation unit 210 includes a first optocoupler U1 and a second optocoupler U2. Taking the first optocoupler U1 as an example, the anode of the light-emitting device of the first optocoupler U1 is connected to the first pin of the corresponding first interface unit 110, the cathode of the light-emitting device of the first optocoupler U1 is grounded, the emitter of the photoreceiver of the first optocoupler U1 is grounded, and the collector of the photoreceiver of the first optocoupler U1 is connected to the corresponding pin of the control module 300.
[0042] In one embodiment, the first isolation unit 210 further includes a switching device. The switching device can be disposed between the first interface unit 110 and the control module 300, and the control module 300 can control the connection between the first interface unit 110 and the control module 300 through the switching device. Wherein, the switching device can include at least one of a relay, a MOS transistor, and a triode.
[0043] When there is a risk of data leakage in the control device 20, the control module 300 can actively control the switching device to turn off, so that the signal can only be transmitted unidirectionally, protecting the control device 20.
[0044] Specifically, as Figure 4 shown, the first isolation unit 210 includes a first switching device S1 and a second switching unit S2. Taking the first relay S1 as an example, the first relay S1 is connected between the collector of the photoreceiver of the first optocoupler U1 and the corresponding pin of the control module 300, and the control module 300 can actively disconnect the connection with the corresponding first interface unit 110 through the first relay S1.
[0045] In one embodiment, as Figure 5 shown, the data protection device 10 further includes a second isolation module 500. The second isolation module 500 is connected between the control module 300 and the device simulation module 400, and the second isolation module 500 is used to control the unidirectional transmission of the signal output by the control module 300 to the device simulation module 400.
[0046] Through the second isolation module 500, the data in the control device 30 can be further protected, improving the security of the control device 30. It can be understood that the internal structure of the second isolation module 500 can correspond to that of the first isolation module 200, that is, the second isolation module 500 can include multiple second isolation units, and one second isolation unit can be used to transmit a second data signal to ensure that the signals received by each first interface unit 110 can be transmitted to the control device 30 without interference. The second isolation unit can include an optocoupler or a switching device, and the structure of the second isolation unit can be the same as that of the first isolation unit, which will not be elaborated in this embodiment.
[0047] In some embodiments, asFigure 5 As shown, the data protection device 10 further includes a second interface module 600 corresponding to the control device 30. The second interface module 600 is used to connect to the control device 30, and the second interface module 600 can be connected to the device simulation module 400. It can be understood that the internal structure of the second interface module 600 can correspond to that of the first interface module 100, that is, the second interface module 600 can include a plurality of second interface units to ensure that the signals received by each first interface unit 110 can be transmitted to the control device 30 without interference from each other.
[0048] It can be understood that the respective interfaces in the first interface module 100 are usually female connectors for connecting to external devices 20, and the respective interfaces in the second interface module 600 are usually male connectors for inserting into the corresponding interfaces in the control device 30.
[0049] In one embodiment, the data protection device 10 further includes a power supply module 700. The power supply module 700 is respectively connected to the first interface module 100, the first isolation module 200, the control module 300, and the device simulation module 400. The power supply module 700 is used to provide a working voltage.
[0050] In some embodiments, the power supply module 700 includes a voltage conversion unit and a power supply switch unit. The voltage conversion unit is used to connect to an external power supply to generate a working voltage based on the input voltage provided by the external power supply. The power supply switch unit is disposed at the output end of the voltage conversion unit and is used to connect to the first interface module 100, the first isolation module 200, the control module 300, and the device simulation module 400. The control module 300 can control the conduction and cutoff of the power supply switch unit, thereby controlling the output of the working voltage. The first interface module 100, the first isolation module 200, the control module 300, and the device simulation module 400 can perform corresponding operations based on the working voltage. Among them, the voltage conversion unit can include a voltage conversion circuit such as a DC / DC conversion circuit or an AC / DC conversion circuit. Which voltage conversion circuit the voltage conversion unit specifically adopts can be determined according to actual requirements. The power supply switch unit can include at least one of a relay, a MOS transistor, and a triode.
[0051] In some embodiments, the power supply module 700 further includes an energy storage unit. The energy storage unit is connected to the input end of the voltage conversion unit and is used to provide electrical energy to the voltage conversion unit in the case of a lack of input voltage provided by an external power supply. The energy storage unit can include a battery pack.
[0052] In one embodiment, as Figure 6As shown in the figure, the data protection device 10 further includes a video output module 800. The first interface module 100 includes a video interface unit. The video interface unit is used to connect to a display device. The first end of the video output module 800 is used to connect to the control device 30. The video output module 800 is used to connect to the video interface unit. The video output module 800 is used to unidirectionally transmit the video signal output by the control device 30 to the video interface unit. In this embodiment, the type of the interface in the video interface unit is not limited. Exemplarily, the video interface unit may include at least one of a DP interface, an HDMI interface, a DVI interface, and a VGA interface.
[0053] It should be noted that when the video interface unit is connected to the display device, the relevant parameters and information of the display device can be transmitted to the control device 30 through the first interface module 100, the first isolation module 200, the control module 300, and the device simulation module 400 in sequence. The video signal output by the control device 30 can be transmitted to the display device through the video output module 800 and the video interface unit, improving the information security of the control device 30.
[0054] Unidirectionally transmitting the video signal output by the control device 30 to the video interface unit through the video output module 800 can prevent external devices from attacking the control device 30 from the video interface unit.
[0055] In one embodiment, the device simulation module 400 includes a display device simulation unit. The first data signal includes the display parameters of the display device. It can be understood that the control module 300 can decode the display parameters of the display device, and the display device simulation unit can re-encode and package the display parameters of the display device.
[0056] The display device simulation unit can prevent signals other than the necessary display parameters from being transmitted to the control device 30, thereby improving the security of the control device 30.
[0057] In one embodiment, as Figure 6 shown, the video output module 800 includes a display driving unit 810, a first signal conversion unit 820, a signal transmission unit 830, and a second signal conversion unit 840. The first end of the display driving unit 810 is used to connect to the control device 30. The second end of the display driving unit 810 is connected to the video interface unit through the first signal conversion unit 820, the signal transmission unit 830, and the second signal conversion unit 840 in sequence. Both the first signal conversion unit 820 and the second signal conversion unit 840 are used for unidirectional conversion of signal types.
[0058] Through the first signal conversion unit 820 and the second signal conversion unit 840, two irreversible one-way conversions of signals are performed, so that while the control device 30 outputs a video signal through the video output module 800, external signals can be prevented from being transmitted from the video output module 800 to the control device 30.
[0059] In one embodiment, the first signal conversion unit 820 is used to convert the electrical signal provided by the display driving unit 810 into an optical signal, and the second signal conversion unit 840 is used to convert the optical signal into an electrical signal.
[0060] Specifically, the first signal conversion unit 820 may include an optoelectronic converter, the second signal conversion unit 840 may include an optical receiver, and the signal transmission unit 830 includes an optical fiber for transmitting the optical signal.
[0061] In the video output module 800, by performing optoelectronic conversion, unidirectional transmission of signals can be achieved, and overvoltage and overcurrent signals can also be isolated.
[0062] Figure 7 The schematic diagram of the display panel provided by an embodiment of the present application is shown. For the convenience of description, only the parts related to this embodiment are shown and are described in detail as follows:
[0063] The electronic device 40 includes a control device 30 and a data protection device 10 as described in any of the above embodiments. The control device 30 is connected to the external device 20 through the data protection device 10.
[0064] Among them, the control device 30 may be a device such as a computer or an industrial control computer. The data protection device 10 can protect the control device 30, prevent information leakage, and withstand the implantation of programs, Trojans, and viruses from the external device 20.
[0065] Those skilled in the art can clearly understand that for the convenience and brevity of description, only the above-mentioned division of each functional unit and module is used as an example. In actual applications, the above functions can be allocated to different functional units and modules according to needs, that is, the internal structure of the device is divided into different functional units or modules to complete all or part of the functions described above. Each functional unit and module in the embodiment can be integrated in a processing unit, or each unit can exist physically alone, or two or more units can be integrated in one unit. The above integrated unit can be implemented in the form of hardware or in the form of a software functional unit. In addition, the specific names of each functional unit and module are only for the convenience of mutual distinction and do not limit the protection scope of the present application. The specific working processes of the units and modules in the above system can refer to the corresponding processes in the foregoing method embodiments and will not be repeated here.
[0066] In the above embodiments, the descriptions of the respective embodiments have their own focuses. For parts not detailed or recorded in a certain embodiment, reference may be made to the relevant descriptions of other embodiments.
[0067] The above-described embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them; although the present application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that they can still modify the technical solutions described in the foregoing embodiments, or perform equivalent replacements for some of the technical features; and these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the respective embodiments of the present application, and should all be included within the protection scope of the present application.
Claims
1. A data protection device, characterized in that: include: A first interface module, wherein the first interface module is used to connect to an external device to access a first data signal output by the external device; a first isolation module, wherein a first end of the first isolation module is connected to the first interface module, and the first isolation module is used to control the unidirectional transmission of the first data signal to the second end of the first isolation module; A control module, wherein the first end of the control module is connected to the second end of the first isolation module, the second end of the control module is used to connect to a control device, and the control module is used to control the on and off of the first isolation module and transmit the first data signal to the control device.
2. The data protection device according to claim 1, characterized in that: The first interface module includes multiple first interface units, the first isolation module includes multiple first isolation units, the first interface module is connected to the first end of each first isolation unit in a one-to-one correspondence, and the second end of each first isolation unit is connected to each input end of the control module in a one-to-one correspondence.
3. The data protection device according to claim 2, characterized in that: The first isolation unit includes a photoelectric coupler, and the photoelectric coupler is used to connect the first interface module and the control module.
4. The data protection device according to claim 1, characterized in that: It also includes a second isolation module, which is connected between the control module and the control device, and is used to control the unidirectional transmission of the signal output by the control module to the control device.
5. The data protection device according to claim 1, characterized in that: It also includes a power supply module, which is respectively connected to the first interface module, the first isolation module and the control module, and is used to provide a working voltage.
6. The data protection device according to any one of claims 1 to 5, characterized in that: Also includes a video output module, wherein the first interface module includes a video interface unit; The video interface unit is used to connect to the display device, the first end of the video output module is used to connect to the control device, the video output module is used to connect to the video interface unit, and the video output module is used to unidirectionally transmit the video signal output by the control device to the video interface unit.
7. The data protection device according to claim 6, characterized in that: The video output module includes a display driving unit, a first signal conversion unit, a signal transmission unit, and a second signal conversion unit; The first end of the display driving unit is used to connect to the control device, and the second end of the display driving unit is connected to the video interface unit through the first signal conversion unit, the signal transmission unit and the second signal conversion unit in sequence; the first signal conversion unit and the second signal conversion unit are both used for unidirectional conversion of signal types.
8. The data protection device according to claim 7, characterized in that: The first signal conversion unit is used to convert the electrical signal provided by the display driving unit into an optical signal, and the second signal conversion unit is used to convert the optical signal into an electrical signal.
9. The data protection device according to claim 7, characterized in that: The signal transmission unit includes an optical fiber.
10. An electronic device, characterized in that: The invention comprises a control device and the data protection device according to any one of claims 1 to 9, wherein the control device is connected to an external device through the data protection device.