Gap isolation device

Abstract

The utility model discloses a gatekeeper isolation device, and the device comprises an internal processing module which is used for communicating with an intranet and processing data received from the intranet or data sent to the intranet; the external processing module is used for communicating with an external network and processing data received from the external network or data sent to the external network; and the data exchange module is respectively connected with the internal processing module and the external processing module through a serial bus.

Description

Technical Field

[0001] The utility model relates to the field of security isolation, and specifically to a network isolation device. Background Art

[0002] With the continuous improvement of Internet infrastructure and the in-depth popularization and application of 5G technology, China's Internet work has entered a new stage of development. While making full use of the Internet to improve work methods and work efficiency, strengthening information security has become the most important issue.

[0003] In terms of ensuring information security, simply relying on simple and single security measures such as firewalls and anti-viruses cannot meet the security requirements of security system construction at all. Secondly, if early isolation methods are adopted, such as using isolation cards or manually transferring data using removable media, such low-efficiency and low-reliability solutions cannot meet the business requirements of Internet informatization construction either. Therefore, users need more secure and efficient isolation technologies and products for internal and external network information exchange. Summary of the Utility Model

[0004] The utility model provides a network isolation device to achieve more secure and efficient isolation technologies and products for internal and external network information exchange.

[0005] According to one aspect of the present application, a network isolation device is provided, including: an internal processing module for communicating with the internal network and processing data received from or sent to the internal network; an external processing module for communicating with the external network and processing data received from or sent to the external network; and a data exchange module, wherein the data exchange module is connected to the internal processing module and the external processing module respectively through a serial bus.

[0006] Optionally, the external processing module includes a first central processing unit, and the first central processing unit is connected to the data exchange module through a serial bus; and the internal processing module includes a second central processing unit, and the second central processing unit is connected to the data exchange module through a serial bus.

[0007] Optionally, the device further includes a housing for accommodating the internal processing module, the external processing module, and the data exchange module.

[0008] Optionally, the device further includes an external communication module connected to the first central processing unit for communicating with the external network.

[0009] Optionally, the housing is further provided with a Lora antenna interface, a SIM card slot, a 4G antenna interface, a first Console interface, a first network port, a second network port, and / or a first WiFi antenna interface for communicating with the external network. And among them, the Lora antenna interface, the SIM card slot, the 4G antenna interface, the first Console interface, the first network port, the second network port, and the first WiFi antenna interface are connected to an external communication module.

[0010] Optionally, the device further includes an internal communication module connected to the second central processing unit for communicating with the internal network.

[0011] Optionally, the housing is further provided with a second Console interface, a third network port, a fourth network port, and / or a second WiFi antenna interface for communicating with the internal network. And among them, the second Console interface, the third network port, the fourth network port, and the second WiFi antenna interface are connected to the internal communication module.

[0012] Optionally, the housing is further provided with a first terminal block, and a first signal isolation module is further provided inside the housing, where the first signal isolation module is respectively connected to the first terminal block and the first central processing unit.

[0013] Optionally, the housing is further provided with a second terminal block, and a second signal isolation module is further provided inside the housing, where the second signal isolation module is respectively connected to the second terminal block and the second central processing unit.

[0014] Optionally, the external processing module further includes a memory connected to the first central processing unit; and the internal processing module further includes a memory connected to the second central processing unit.

[0015] In summary, through the network isolation security device provided by the present utility model, when the internal network needs to send data to the external network, the internal processing module communicates with the internal network, and uses a serial bus to send the data received from the internal network to the data exchange unit in a serial manner. The data exchange unit then sends the data to the external processing module in a serial manner, and for example, it can be stored in the external processing module in the form of a file, and then sent to the external network through the external processing module. When the external network needs to send data to the internal network, the external processing module communicates with the external network, and uses a serial bus to send the data received from the external network to the data exchange unit in a serial manner. The data exchange unit then sends the data to the internal processing module in a serial manner, and for example, it can be stored in the internal processing module in the form of a file, and then sent to the internal network through the internal processing module. Thus, through the network isolation security device provided by the present utility model, a secure and efficient isolation technology and information exchange between the internal and external networks can be realized.

[0016] Those skilled in the art will better understand the above and other objects, advantages and features of the present utility model from the following detailed description of specific embodiments of the present application in conjunction with the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Some specific embodiments of the present application will be described in detail hereinafter with reference to the accompanying drawings in an illustrative rather than restrictive manner. The same reference numerals in the drawings denote the same or similar components or parts. Those skilled in the art should understand that these drawings are not necessarily drawn to scale. In the drawings:

[0018] Figure 1 is a schematic diagram of the module architecture of the network isolation device according to an embodiment of the present application; and

[0019] Figure 2 and Figure 3 is a schematic diagram of the appearance of the network isolation device according to an embodiment of the present application. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0020] It should be noted that, without conflict, the embodiments in the present utility model and the features in the embodiments may be combined with each other. The present utility model will be described in detail below with reference to the accompanying drawings and in conjunction with the embodiments.

[0021] In order to enable those skilled in the art to better understand the solution of the present utility model, the technical solutions in the embodiments of the present utility model will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present utility model. Obviously, the described embodiments are only a part of the embodiments of the present utility model, rather than all the embodiments. All other embodiments obtained by those of ordinary skill in the art based on the embodiments of the present utility model without creative efforts shall fall within the protection scope of the present utility model.

[0022] It should be noted that the terms "first", "second", etc. in the specification and claims of the present utility model and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that such terms can be interchanged under appropriate circumstances so as to describe the embodiments of the present utility model herein. In addition, the terms "comprising" and "having" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product or device including a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units not clearly listed or inherent to these processes, methods, products or devices.

[0023] It should be noted that the terms used herein are only for describing specific embodiments and are not intended to limit the exemplary embodiments according to the present application. As used herein, unless the context clearly indicates otherwise, the singular form is also intended to include the plural form. In addition, it should be understood that when the terms "comprise" and / or "include" are used in this specification, it indicates the presence of features, steps, operations, devices, components and / or combinations thereof.

[0024] Figure 1 is a schematic diagram of a module architecture according to an embodiment of the present utility model, with reference to Figure 1 As shown, the utility model provides a network isolation device, including: an internal processing module 17, used to communicate with an intranet and process data received from the intranet or data sent to the intranet; an external processing module 16, used to communicate with an external network and process data received from the external network or data sent to the external network; and a data exchange module 18, wherein the data exchange module is connected to the internal processing module 17 and the external processing module 16 respectively through a serial bus.

[0025] The data exchange unit 18 may be, for example, a processor capable of communicating in a serial bus manner, which will not be described in detail herein.

[0026] As described in the background technology, in terms of information security, if we only rely on simple and single security measures, such as firewalls and anti-virus, we will not be able to meet the security needs of security system construction; secondly, if we adopt early isolation methods, such as using isolation cards or using mobile media for manual data transmission, this inefficient and low-reliability solution cannot meet the business needs of Internet informatization construction. Therefore, users need to have safer and more efficient isolation technologies and products for internal and external network information exchange.

[0027] In view of this, through the network isolation security device provided by the present utility model, when the internal network needs to send data to the external network, the internal processing module 17 communicates with the internal network, and uses a serial bus to send the data received from the internal network to the data exchange unit 18 in a serial manner. The data exchange unit 18 then sends the data to the external processing module 16 in a serial manner, and can be stored in the external processing module 16 in the form of a file, for example, and then sent to the external network through the external processing module 16. When the external network needs to send data to the internal network, the external processing module 16 communicates with the external network, and uses a serial bus to send the data received from the external network to the data exchange unit 18 in a serial manner. The data exchange unit 18 then sends the data to the internal processing module 17 in a serial manner, and can be stored in the internal processing module 17 in the form of a file, for example, and then sent to the internal network through the internal processing module 17. Thus, through the network isolation security device provided by the present utility model, a safe and efficient isolation technology and information exchange between the internal and external networks can be realized.

[0028] In addition, the data exchange unit 18 can be connected to the internal processing module 17 and the external processing module 16 respectively by using a dual-serial-port link, for example.

[0029] Optionally, the external processing module 16 includes a first central processing unit 23, and the first central processing unit 23 is connected to the data exchange module 18 through a serial bus; and the internal processing module 17 includes a second central processing unit 24, and the second central processing unit 24 is connected to the data exchange module 18 through a serial bus. Further optionally, the external processing module 16 further includes a memory connected to the first central processing unit 23; and the internal processing module 17 further includes a memory connected to the second central processing unit 24. Thus, the first central processing unit 23 and the second central processing unit 24 can communicate and transfer data with the data exchange module 18 through the serial bus and can also store data by using the memory. Among them, the first central processing unit 23 and the second central processing unit 24 can adopt a central processing unit with a model number of MediaTek MT7621 dual-core 880MHz, for example.

[0030] Optionally, referring to Figure 2 and Figure 3 as shown, the device further includes a housing 1 for accommodating the internal processing module 17, the external processing module 16, and the data exchange module 18.

[0031] Optionally, the device further includes an external communication module 25 connected to the first central processing unit 23 for communicating with the external network. And further referring to Figure 2 and Figure 3As shown, the housing 1 is also provided with a Lora antenna interface 2 for communicating with the external network, a SIM card slot 3, a 4G antenna interface 4, a first Console interface 5, a first network port 6, a second network port 7, and / or a first WiFi antenna interface 14. And among them, the Lora antenna interface 2, the SIM card slot 3, the 4G antenna interface 4, the first Console interface 5, the first network port 6, the second network port 7, and the first WiFi antenna interface 14 are connected to the external communication module 25. Among them, both the first network port 6 and the second network port 7 are connected to the external network, so that they can be used to communicate with the external network for different types of data. For example, the first network port 6 can communicate for management data, and the second network port 7 can communicate for service data.

[0032] Thus, the network isolation device provided by the present utility model can communicate with the external network through various different types of networking methods, so that it can be used more flexibly.

[0033] Optionally, the device further includes an internal communication module 19 connected to the second central processing unit 24 for communicating with the internal network. And among them, the housing 1 is also provided with a second Console interface 8, a third network port 9, a fourth network port 10, and / or a second WiFi antenna interface 15 for communicating with the internal network. And among them, the second Console interface 8, the third network port 9, the fourth network port 10, and the second WiFi antenna interface 15 are connected to the internal communication module 19. Thus, the network isolation device provided by the present utility model can communicate with the internal network through various different types of networking methods, so that it can be used more flexibly. Among them, both the third network port 9 and the fourth network port 10 are connected to the internal network, so that they can be used to communicate with the internal network for different types of data. For example, the third network port 9 can communicate for management data, and the fourth network port 10 can communicate for service data.

[0034] Optionally, the housing 1 is further provided with a first terminal block 12, and a first signal isolation module 21 is further provided inside the housing 1, wherein the first signal isolation module 21 is respectively connected to the first terminal block 12 and the first central processing unit 23. Specifically, the first terminal block 12 may include two RJ45 terminals, two CAN terminals, and four RS485 terminals. Thus, in this way, communication with the outside can be carried out through various types of buses.

[0035] Optionally, the housing 1 is further provided with a second terminal block 13, and a second signal isolation module 22 is further provided inside the housing 1, wherein the second signal isolation module 22 is respectively connected to the second terminal block 13 and the second central processing unit 24. Specifically, the second terminal block 13 may include two RJ45 terminals, two CAN terminals, and four RS485 terminals. Thus, in this way, communication with the inside can be carried out through various types of buses.

[0036] Optionally, the external processing module 16 further includes a memory connected to the first central processing unit 23; and the internal processing module 17 further includes a memory connected to the second central processing unit 24. The memory may be composed of, for example, RAM and ROM.

[0037] In summary, through the network gateway security device provided by the present utility model, when the internal network needs to send data to the external network, the internal processing module communicates with the internal network, and uses the serial bus to send the data received from the internal network to the data exchange unit in a serial manner. The data exchange unit then sends the data to the external processing module in a serial manner, and may be stored in the external processing module in the form of a file, for example, and then sent to the external network through the external processing module. When the external network needs to send data to the internal network, the external processing module communicates with the external network, and uses the serial bus to send the data received from the external network to the data exchange unit in a serial manner. The data exchange unit then sends the data to the internal processing module in a serial manner, and may be stored in the internal processing module in the form of a file, for example, and then sent to the internal network through the internal processing module. Thus, through the network gateway security device provided by the present utility model, a secure and efficient isolation technology and information exchange between the internal and external networks can be realized.

[0038] Unless otherwise specifically stated, the relative arrangements of the components and steps, numerical expressions and values set forth in these embodiments do not limit the scope of the present utility model. At the same time, it should be understood that for the sake of description, the dimensions of the various parts shown in the drawings are not drawn in actual proportional relationship. Technologies, methods and devices known to those of ordinary skill in the relevant art may not be discussed in detail, but where appropriate, the said technologies, methods and devices should be regarded as part of the authorization specification. In all the examples shown and discussed here, any specific value should be construed as merely exemplary and not as a limitation. Therefore, other examples of the exemplary embodiments may have different values. It should be noted that: like reference numerals and letters denote like items in the following drawings, and thus, once an item is defined in one drawing, it does not need to be further discussed in subsequent drawings.

[0039] For ease of description, spatial relative terms such as "above", "over", "on the upper surface", "upper", etc. can be used here to describe the spatial positional relationship of a device or feature shown in the figure with other devices or features. It should be understood that the spatial relative terms are intended to cover different orientations in use or operation in addition to the orientation described in the figure for the device. For example, if the device in the drawing is inverted, the device described as "above or over other devices or structures" will then be positioned "below or under other devices or structures". Thus, the exemplary term "above" can include both the orientations of "above" and "below". The device can also be positioned in other different ways (rotated 90 degrees or in other orientations), and the corresponding explanations should be made for the spatial relative descriptions used here.

[0040] In the description of the present utility model, it should be understood that the orientations or positional relationships indicated by orientation words such as "front, rear, upper, lower, left, right", "lateral, vertical, perpendicular, horizontal" and "top, bottom", etc. are usually based on the orientations or positional relationships shown in the drawings. It is only for the convenience of describing the present utility model and simplifying the description. Without contrary explanations, these orientation words do not indicate and imply that the device or element referred to must have a specific orientation or be constructed and operated in a specific orientation. Therefore, it should not be construed as a limitation on the protection scope of the present utility model; the orientation words "inside, outside" refer to the inside and outside relative to the contour of each component itself.

[0041] The above is only the preferred specific implementation manner of the present application, but the protection scope of the present application is not limited thereto. Any changes or substitutions that can be easily thought of by those skilled in the art within the technical scope disclosed in the present application should be covered within the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

Claims

1. A network isolation device, characterized in that, Comprising: An internal processing module (17) for communicating with an internal network and processing data received from or sent to the internal network; An external processing module (16) for communicating with an external network and processing data received from or sent to the external network; And A data exchange module (18), wherein the data exchange module is respectively connected to the internal processing module (17) and the external processing module (16) through a serial bus.

2. The device according to claim 1, characterized in that The external processing module (16) includes a first central processing unit (23), and the first central processing unit (23) is connected to the data exchange module (18) through a serial bus; and The internal processing module (17) includes a second central processing unit (24), and the second central processing unit (24) is connected to the data exchange module (18) through a serial bus.

3. The device according to claim 2, wherein It further includes a housing (1) for accommodating the internal processing module (17), the external processing module (16) and the data exchange module (18).

4. The device according to claim 3, characterized in that, It further includes an external communication module (25) connected to the first central processing unit (23) for communicating with an external network.

5. The device according to claim 4, characterized in that, The housing (1) is further provided with a Lora antenna interface (2), a SIM card slot (3), a 4G antenna interface (4), a first Console interface (5), a first network port (6), a second network port (7) and / or a first WiFi antenna interface (14) for communicating with an external network, and The Lora antenna interface (2), the SIM card slot (3), the 4G antenna interface (4), the first Console interface (5), the first network port (6), the second network port (7) and the first WiFi antenna interface (14) are connected to the external communication module (25).

6. The device according to claim 3, characterized in that, It further includes an internal communication module (19) connected to the second central processing unit (24) for communicating with an internal network.

7. The device according to claim 6, characterized in that, The housing (1) is further provided with a second Console interface (8), a third network port (9), a fourth network port (10) and / or a second WiFi antenna interface (15) for communicating with an internal network, and The second Console interface (8), the third network port (9), the fourth network port (10) and the second WiFi antenna interface (15) are connected to the internal communication module (19).

8. The device according to claim 3, characterized in that, The housing (1) is further provided with a first terminal block (12), and a first signal isolation module (21) is further provided inside the housing (1), wherein the first signal isolation module (21) is respectively connected to the first terminal block (12) and the first central processing unit (23).

9. The device according to claim 3, wherein The housing (1) is further provided with a second terminal block (13), and a second signal isolation module (22) is further provided inside the housing (1), wherein the second signal isolation module (22) is respectively connected to the second terminal block (13) and the second central processing unit (24).

10. The device according to claim 2, wherein the external processing module (16) further comprises a memory connected to the first central processing unit (23); and the internal processing module (17) further comprises a memory connected to the second central processing unit (24).

Images