Network security device based on Loongson 3A3000

Abstract

The utility model belongs to the field of network security, and relates to a Loongson 3A3000-based network security device, which comprises a Loongson 3A3000, a chipset, a memory module, a bus expansion interface, a network interface, a USB (Universal Serial Bus) interface, a CF (Compact Flash) card slot, an SATA (Serial Advanced Technology Attachment) interface, a real-time clock module, a watchdog module, a serial port, a hardware monitoring module and a BYPASS module which are electrically connected, the chipset is also connected with the memory module and the network interface, the memory module is connected with the chipset through a DDR3 / DDR4 slot, and the chipset provides a bus expansion interface and an SATA interface to be connected with the chipset. Security events can be uploaded efficiently, a powerful service agent function is achieved, and a solid technical support is provided for constructing a safe and reliable network environment. And the comprehensive performance and security of the method are of great significance to the improvement of the overall network security protection level.

Description

Technical Field

[0001] The utility model relates to the technical field of network security, and more specifically, to a network security device based on Loongson 3A3000. Background Art

[0002] Network security devices are the equipment and technologies used to protect networks from malicious attacks and data breaches. These devices play a vital role in maintaining data integrity, confidentiality, and availability.

[0003] Currently, there are a wide variety of network security devices and technologies, but all have their flaws. Firewalls are a common network security device that block unnecessary network traffic using predefined rule sets. However, firewalls have some drawbacks, such as being unable to completely eliminate virus attack sources and being completely incapable of defending against external attacks for which no policies have been set. Furthermore, inherent vulnerabilities in firewall technology can lead to other attacks. Consequently, they often have poor performance in uploading events and providing service proxy functions. Utility Model Content

[0004] In view of the above-mentioned defects of the prior art, the present invention provides a network security device based on Loongson 3A3000, comprising:

[0005] The Loongson 3A3000, chipset, memory module, bus expansion interface, network interface, USB interface, CF card slot, SATA interface, real-time clock module, watchdog module, serial port, hardware monitoring module, and BYPASS module are electrically connected. The Loongson 3A3000 is connected to the chipset via the HT3.0 high-speed bus, and the chipset is also connected to the memory module and network interface at the same time. The memory module is connected to the chipset via a DDR3 / DDR4 slot, and the chipset provides the bus expansion interface, the network interface, the USB interface, and the SATA interface. The CF card slot is connected to the chipset, the real-time clock module is connected to the chipset, the watchdog module is connected to the chipset, the serial port is connected to the chipset, the hardware monitoring module is connected to the chipset, and the BYPASS module is connected to the network interface.

[0006] Preferably, the chipset includes the Loongson 7A1000 bridge chip.

[0007] Preferably, the real-time clock module includes: a quartz crystal oscillator, a counter, a power management circuit, a non-volatile memory and an interface circuit electrically connected.

[0008] Preferably, the watchdog module includes a timer, a reset circuit, a control circuit, a dog feeding pin, a reset pin and a non-maskable interrupt pin.

[0009] Preferably, the hardware monitoring module includes a temperature sensor, a voltage sensor, a fan speed sensor, a current sensor, a humidity sensor and a monitoring chip.

[0010] Preferably, the BYPASS module includes an optical switch or relay, a GPIO controller, a watchdog timer network interface card and a control logic circuit.

[0011] Preferably, the power management circuit includes a main power supply, a backup power supply, a power detection circuit, a switch switching circuit and a voltage regulation circuit.

[0012] Preferably, the reset circuit includes a resistor R1 and a capacitor C1 connected in series, which are then connected in parallel with the positive and negative electrodes of a diode D1.

[0013] Preferably, the control circuit includes PAL16L8 or GAL16V8.

[0014] Preferably, the power detection circuit includes a voltage divider circuit, an NMOS tube, an ADC analog-to-digital converter and an MCU.

[0015] The network security device based on Loongson 3A3000 of the present utility model has the following beneficial effects: BRIEF DESCRIPTION OF THE DRAWINGS

[0016] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following will briefly introduce the drawings required for the embodiments or the description of the prior art. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on the structures shown in these drawings without creative work. The following will further illustrate the present invention in conjunction with the drawings and embodiments. In the drawings:

[0017] Figure 1 This is a schematic diagram of the module structure of an embodiment of the network security device based on Loongson 3A3000 of the present invention. DETAILED DESCRIPTION

[0018] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the embodiments described are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of the present invention.

[0019] It should be noted that if the embodiments of the present invention involve directional indications (such as up, down, left, right, front, back, etc.), the directional indications are only used to explain the relative position relationship, movement status, etc. between the various components under a certain specific posture (as shown in the accompanying drawings). If the specific posture changes, the directional indications will also change accordingly.

[0020] In addition, if there are descriptions involving "first", "second", etc. in the embodiments of the present invention, the descriptions of "first", "second", etc. are only for descriptive purposes and cannot be understood as indicating or implying their relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features specified as "first" or "second" may explicitly or implicitly include at least one of such features. In addition, the technical solutions between the various embodiments can be combined with each other, but this must be based on the fact that ordinary technicians in this field can implement them. When the combination of technical solutions is contradictory or cannot be implemented, it should be deemed that such a combination of technical solutions does not exist and is not within the scope of protection required by the present invention.

[0021] Example 1

[0022] A network security device based on Loongson 3A3000 comprises the Loongson 3A3000, a chipset, a memory module, a bus expansion interface, a network interface, a USB interface, a CF card slot, a SATA interface, a real-time clock module, a watchdog module, a serial port, a hardware monitoring module, and a BYPASS module which are electrically connected. The Loongson 3A3000 is connected to the chipset via an HT3.0 high-speed bus. The chipset is also connected to the memory module and the network interface. The memory module is connected to the chipset via a DDR3 / DDR4 slot. The chipset provides a bus expansion interface, a network interface, a USB interface, and a SATA interface. The CF card slot is connected to the chipset. The real-time clock module is connected to the chipset. The watchdog module is connected to the chipset. The serial port is connected to the chipset. The hardware monitoring module is connected to the chipset. The BYPASS module is connected to the network interface.

[0023] The Loongson 3A3000 is a general-purpose processor launched by Loongson Technology for personal computers, servers, and other information technology applications. Based on the Loongson 3 series architecture, this processor achieves significant performance improvements through structural optimization and the application of new processes. The Loongson 3A3000 boasts a main frequency of up to 1.5GHz and a memory interface that meets DDR3-1600 specifications, providing efficient data processing capabilities for the system.

[0024] In terms of core configuration, the Loongson 3A3000 adopts a quad-core 64-bit design, with each core equipped with 64KB of private L1 instruction cache, 64KB of private L1 data cache, and 256KB of private L2 cache. In addition, the processor also shares 8MB of L3 cache, further improving data access speed and overall system performance.

[0025] In terms of memory controller, the Loongson 3A3000 supports 72-bit DDR2 / 3-1600 memory and has ECC high-speed I / O capabilities, ensuring data integrity and system stability. The processor is also equipped with two 16-bit HyperTransport 3.0 controllers and supports multi-processor data consistency interconnect (CC-NUMA), making it possible to build high-performance multi-way server systems.

[0026] In terms of power management, the Loongson 3A3000 uses advanced power control technology, supporting dynamic shutdown of key module clocks and dynamic frequency conversion of the main clock, allowing the processor to effectively reduce power consumption while maintaining high performance. At a main frequency of 1.5GHz, the processor's typical power consumption is 30W, demonstrating excellent energy efficiency.

[0027] In a specific implementation, the chipset includes but is not limited to the Loongson 7A1000 bridge chip.

[0028] In terms of interfaces, the Loongson 7A1000 bridge chip connects to the Loongson 3 series processors, such as the Loongson 3A3000, via the HT3.0 high-speed bus interface, enabling efficient data transmission. The bridge chip also features three x8 PCI E2.0 lanes, two x4 PCI E2.0 lanes, three SATA 2.0 lanes, and six USB 2.0 lanes, providing ample options for system expansion. Furthermore, the Loongson 7A1000 bridge chip supports a variety of smaller interfaces, including SPI, UART, I2C, and GPIO, meeting the needs of diverse application scenarios.

[0029] In terms of display, the Loongson 7A1000 bridge chip integrates a 2D / 3D GPU display controller and supports dual-channel DVO display, providing users with high-quality graphics processing capabilities. At the same time, the bridge chip also supports a 16-bit DDR3 video memory controller, further improving graphics processing performance.

[0030] In terms of power consumption, the Loongson 7A1000 bridge chip adopts a low-power design, with a power consumption range of between 5 and 8W, ensuring stable system operation and energy efficiency. In addition, the bridge chip also supports ACPI specifications and JTAG boundary scan functions, facilitating system debugging and maintenance.

[0031] In a specific implementation, the real-time clock module includes: a quartz crystal oscillator, a counter, a power management circuit, a non-volatile memory and an interface circuit that are electrically connected.

[0032] A quartz crystal oscillator is the core component of an RTC module, generating a stable clock signal. It uses the piezoelectric effect to generate mechanical vibrations when voltage is applied to the crystal, producing a high-frequency signal. This signal is divided by a frequency divider within the RTC chip and converted to a lower frequency signal (such as 1 Hz) for use by the counter.

[0033] The counters in the RTC module store and update time information. They include counters for seconds, minutes, hours, days, months, and years. Each time a 1Hz signal arrives, the seconds counter increments by 1. When the seconds counter reaches 60, the minutes counter increments by 1, and so on. This accumulation mechanism ensures real-time time updates.

[0034] The power management circuit includes a main power supply, a backup power supply, a power detection circuit, a switching circuit, and a voltage regulation circuit. The power management circuit automatically switches to a backup power supply (such as a small button battery) when the main power is lost, ensuring that time information is continuously stored and updated. This design allows the RTC module to continue operating after the device loses power, maintaining accurate time.

[0035] The primary power source is typically a stable AC or DC power source, while the backup power source might be something like a small coin cell battery.

[0036] The power detection circuit is used to monitor the status of the main power supply in real time, including parameters such as voltage and current. In specific implementation, the power detection circuit includes a voltage divider circuit, an NMOS transistor, an ADC analog-to-digital converter, and an MCU.

[0037] Switching circuit: When the main power supply fails, it automatically switches to the backup power supply to ensure uninterrupted power supply to the system.

[0038] Voltage regulation circuit: used to adjust the voltage of the backup power supply to the level required by the system to ensure stable operation of the system.

[0039] The various components in the power management circuit are connected via copper traces and solder joints on the circuit board. Both the main power supply and the backup power supply are connected to the input of the power detection circuit. The output of the switching circuit is connected to the system power supply and the input of the voltage regulation circuit, respectively. The output of the voltage regulation circuit is directly connected to the system power supply.

[0040] Non-volatile memory is used to store critical time-related data and configuration information. This data is not lost even if the device loses power. This allows the RTC module to quickly restore the previous time setting after the device is powered on again.

[0041] The RTC module can set up multiple interfaces (such as I 2 C, SPI, or UART) to communicate with the host processor or other electronic components. The host processor can read or set the time and date information of the RTC through these interfaces.

[0042] The real-time clock module not only has the basic time keeping function, but can also integrate a variety of additional functions to meet the needs of different application scenarios, such as:

[0043] First, time measurement and storage: The RTC module can measure and store the current time and date information in real time, including seconds, minutes, hours, days, months, and years.

[0044] Second, leap year adjustment: The RTC module has a leap year processing function that can automatically adjust the number of days in February of a leap year to ensure the accuracy of the date information.

[0045] Third, it has alarm and timer functions. The RTC module can support alarm and timer functions, allowing users to set specific time trigger events, such as alarm reminders or scheduled tasks.

[0046] Fourth, integrated temperature sensor: It can monitor the ambient temperature in real time and adjust the frequency of the oscillator according to temperature changes to reduce the impact of temperature on time accuracy.

[0047] Fifth, it has timestamp and intrusion detection functions: timestamp is used to record the time when external events occur, while intrusion detection is used to detect unauthorized access or tampering and record the corresponding timestamp data.

[0048] Sixth: It has power management function: it can achieve the best energy consumption balance under different power conditions and extend battery life.

[0049] The RTC module can also be implemented using the DS1302 or RX8900CE / RX8900SA. The DS1302 connects to the MCU via synchronous serial communication (SSC), requiring only three wires for data transmission: RST (chip enable), DAT (input / output data line), and CLK (serial clock). It contains a 32.768kHz quartz crystal oscillator, generating a stable clock signal. This signal, after frequency division, is used to update the internal counter, enabling real-time time measurement and storage.

[0050] The RX8900CE / RX8900SA incorporates a high-precision quartz crystal oscillator, generating a stable clock signal. Its timing circuitry precisely counts and processes these clock signals, enabling accurate time measurement. Furthermore, the module is equipped with a power management circuit that automatically switches to a backup power source in the event of a main power outage, ensuring continuous storage and updating of time information.

[0051] In specific implementation, the watchdog module includes a timer, a reset circuit, a control circuit, a dog feeding pin, a reset pin and a non-maskable interrupt pin.

[0052] The timer is the core component of the watchdog module, responsible for recording the operating time of the electronic device. It is the key component that triggers a restart of the watchdog module. The timer can be an independent hardware timer chip or a timer module integrated into the CPU.

[0053] The reset circuit consists of a resistor R1 and a capacitor C1 connected in series, then connected in parallel to the positive and negative terminals of a diode D1. The reset circuit primarily controls the restart and reset functions of electronic devices. When a timer detects a timeout or an abnormality, the reset circuit receives a signal and restarts or resets the electronic device. The reset circuit can include a reset pin, a reset circuit chip, and more.

[0054] The control circuit is the outermost protective layer of the watchdog module, working in conjunction with the timer and reset circuits to monitor and protect electronic devices. It includes control logic and interface circuits to receive and process timer signals and control the operation of the reset circuit. The control circuit can be a standalone logic chip or integrated into a complex system control chip.

[0055] The reset pin is used to output a reset signal. When the timer detects a timeout or an abnormality, the reset pin sends a reset signal to restart the electronic device. The reset pin can be a dedicated reset pin connected to the reset circuit of the electronic device.

[0056] The non-maskable interrupt (NMI) pin receives interrupt signals from the watchdog module. When the timer detects an anomaly, it sends an interrupt signal to the electronic device through the NMI pin, allowing the device to take appropriate action. The NMI pin is specifically designed to handle high-priority interrupts.

[0057] The output of the timer is connected to the dog feeding pin to detect whether the electronic device sends the dog feeding signal on time. The electronic device is controlled by the program to periodically send a signal to the dog feeding pin to clear the timer counter.

[0058] When the timer detects a timeout or anomaly, its output sends a signal to the reset pin, triggering the reset circuit to restart the electronic device.

[0059] The timer can send an interrupt signal to the electronic device through the non-maskable interrupt pin, so that the electronic device can take corresponding processing measures after receiving the interrupt signal.

[0060] The control circuit includes a PAL16L8 or GAL16V8. It connects to the timer and reset circuit, receiving signals from the timer and controlling the reset circuit. The control circuit can also connect to other system components to monitor and protect the entire system.

[0061] The functions of the watchdog module are:

[0062] First, fault detection: Timers monitor the operating status of electronic devices. If a device experiences a fault or timeout, the timer detects it and triggers appropriate action.

[0063] Second, it can automatically restart: When a fault is detected, the watchdog module will automatically restart the electronic device through the reset circuit. This helps the device recover from the fault state and continue to operate normally.

[0064] Third, program reset: The watchdog module can also send an interrupt signal to the electronic device through the non-maskable interrupt pin, allowing the device to perform a program reset operation. This helps the device recover from program errors.

[0065] Fourth, strong flexibility: The watchdog module has configurable overflow time and reset mode. This allows users to flexibly configure the watchdog module according to specific application requirements.

[0066] Fifth, it can protect system resources: The watchdog module can monitor and protect system resources to prevent the device from exhausting resources due to long-term downtime or program errors.

[0067] In specific implementation, the hardware monitoring module includes a temperature sensor, a voltage sensor, a fan speed sensor, a current sensor, a humidity sensor and a monitoring chip.

[0068] Temperature sensors include thermistors, thermocouples, and integrated temperature sensors. They measure the internal temperature of a system to prevent hardware damage from overheating. They connect to a monitoring chip via analog signal lines and output a voltage or current signal proportional to the temperature.

[0069] Voltage sensors include Hall effect sensors and voltage divider circuits. They monitor the power supply voltage and the voltages of various supply lines to ensure they remain within a reasonable range and prevent hardware failures caused by voltage fluctuations. The voltage sensor connects to the monitoring chip via an analog signal line and outputs a voltage signal proportional to the voltage.

[0070] Fan speed sensors include Hall effect sensors and photoelectric sensors. They monitor fan speed to ensure proper cooling and prevent overheating. The fan speed sensor is connected to a monitoring chip via a digital signal line and outputs a pulse signal with a frequency proportional to the fan speed.

[0071] Current sensors include shunts and Hall effect sensors. They monitor the current in each power supply circuit to prevent hardware damage caused by overcurrent. They connect to a monitoring chip via analog signal lines and output a voltage signal proportional to the current.

[0072] Humidity sensors include resistive and capacitive humidity sensors. They monitor ambient humidity to prevent hardware damage or performance degradation caused by excessive humidity. The humidity sensor connects to a monitoring chip via an analog signal line and outputs a voltage or current signal proportional to the humidity.

[0073] Monitoring chips include general-purpose hardware monitoring chips and temperature control chips. These chips process signals from various sensors, performing data processing and generating alarm outputs. They connect to sensors via bus interfaces such as I2C and SPI, and to alarm devices via GPIOs. Examples of general-purpose hardware monitoring chips include the AS99172F. Examples of temperature control chips include the ADT7463 and MAX1978ETM+T.

[0074] The BYPASS module is used to ensure that connectivity between networks is not affected when a device fails or loses power.

[0075] In specific implementation, the BYPASS module includes an optical switch or relay, a GPIO controller, a watchdog timer, a network interface card and a control logic circuit.

[0076] Optical switches or relays are the core components of BYPASS modules, used to achieve physical network connectivity in the event of a device failure. They are typically connected between two or more network interfaces, implementing network bypass functionality by switching control signals.

[0077] The GPIO controller is used to receive signals from the system or other controllers and control the state of the optical switch or relay based on these signals. The GPIO controller is usually connected to the optical switch or relay through data lines, control lines, and ground lines.

[0078] The watchdog timer is used to monitor the system's operating status. When the system fails or freezes, the watchdog timer triggers the BYPASS function. The watchdog timer is usually connected to the GPIO controller through a control line.

[0079] The network interface card is used to connect to the network and is the interface for the BYPASS module to communicate with the external network. The network interface card is usually connected to the external network through a network cable or optical fiber, and is connected to the control logic circuit through a data line.

[0080] The control logic circuit receives signals from devices such as the GPIO controller and watchdog timer, and controls the BYPASS module's operating state based on these signals. The control logic circuit is typically connected to other devices via data lines, control lines, and ground lines.

[0081] The BYPASS module primarily uses optical switches or relays to achieve physical connectivity in the network. Optical switches or relays are typically connected between two or more network interfaces, and they implement the network bypass function by switching control signals.

[0082] When a network security device is operating normally, the optical switch or relay is closed, allowing network traffic to be processed and forwarded through the device. If a network security device fails or loses power, the optical switch or relay switches to an open state, allowing network traffic to continue to flow around the failed device.

[0083] To control optical switches or relays, BYPASS modules typically use a GPIO controller to receive signals from the system or other controllers. The GPIO controller controls the optical switch or relay based on the received signals. A watchdog timer also monitors the system's operating status and triggers BYPASS functions when necessary.

[0084] The working principle of the network security device based on Loongson 3A3000 is:

[0085] When an abnormality or event occurs in the system, the network security device based on the Loongson 3A3000 can record the event information in real time and upload it to a remote server or management center through a network interface. The specific implementation process is as follows:

[0086] Event capture: The device captures system abnormalities or event information through hardware monitoring modules, watchdog modules, etc.

[0087] Event logging: Store captured event information in local storage devices such as SSD, HDD, etc.

[0088] Event upload: Upload recorded event information to a remote server or management center through a network interface. Supports multiple network protocols and transmission methods, such as HTTP, FTP, SMTP, etc.

[0089] The network security device based on the Loongson 3A3000 also has a service proxy function, which can act as an intermediate node to provide forwarding and proxy services for communications between the client and the server. The specific implementation process is as follows:

[0090] Client request: The client sends a request to the device to access resources or services on the remote server;

[0091] Request forwarding: After receiving the client request, the device forwards the request to the target server according to the configuration information;

[0092] Server response: After receiving the request, the target server processes the request and returns a response result;

[0093] Response forwarding: After the device receives the server response, it forwards the response result to the client.

[0094] Through the service proxy function, the network security device based on Loongson 3A3000 can achieve the following functions:

[0095] First, perform load balancing: distribute client requests to multiple servers to achieve load balancing and improve system performance and reliability.

[0096] Second, perform access control: perform access control on client requests to ensure that only legitimate requests can access the target server.

[0097] Third, perform security isolation: provide security isolation between networks to prevent malicious attacks and data leakage.

[0098] The beneficial effects of implementing this embodiment are as follows: by carrying the Loongson 3A3000 processor, it has strong computing power and multiple security mechanisms, which can effectively resist various types of network attacks, and with the optimized chipset design, it ensures efficient and stable data transmission; it adopts large-capacity memory to ensure the smooth processing of complex network security tasks; its bus expansion interface is rich and supports a variety of high-speed peripheral connections, which greatly improves the scalability and flexibility of the system; the network interface not only supports high-speed data transmission, but also has a built-in hardware-level firewall function, which further strengthens the security protection of the network boundary; it is also equipped with multiple USB interfaces, CF card slots and SATA interfaces, which are convenient for different forms The secure storage media access meets diverse data security needs; the real-time clock module ensures the accuracy of time synchronization, which is crucial for security operations such as log auditing; the watchdog mechanism effectively monitors the system operation status and immediately restarts once an anomaly is detected to ensure service continuity; the hardware monitoring module can monitor key parameters such as device temperature and voltage in real time to prevent service interruptions caused by hardware failures; and the BYPASS module provides a physical layer data pass-through path in the event of a device failure, ensuring uninterrupted transmission of network traffic; it can not only efficiently upload security events, but also has powerful service proxy functions, providing solid technical support for building a safe and reliable network environment. Its comprehensive performance and security are of great significance to improving the overall level of network security protection.

[0099] Example 2

[0100] See also Figure 1 , is a schematic diagram of the module structure of an embodiment of the network security device based on Loongson 3A3000 of the present invention. Figure 1As shown, based on the first embodiment, the network security device based on the Loongson 3A3000 provided in the first embodiment of the present invention includes the Loongson 3A3000 main CPU and the 7A1000 chipset. The Loongson 3A3000 is connected to the PMON socket via SPI. The Loongson 3A3000 has a built-in UART1 interface, an external UART0 interface, and an RJ45 interface. The 7A1000 chipset also connects to a 1x8 PCIe slot via PCI E_X8, a 1x4 PCIe slot via PCI E_X4, and a 2x7-pin SATA bus. It also connects to two LM75ADPs, the MCU, the EEPROM, and PCI EX4 / X8 via I2C1. It also connects to the internal USB2 / 3 / 4 / 5 ports and the external USB0 / 1 ports via I2C0. It also connects to the fan via PWM. It also connects to four I210s via PCI E_4*X1. The four I210s are in turn connected to the external front panel RJ45 / SFP ports 5-8, which are then connected to the BYPASS module. The four I210s are also connected to the internal front panel RJ45 / SFP ports 1-4, which are then connected to the BYPASS module. The 7A1000 chipset is also connected to the DVO to VGA interface module through DVO1 and is also connected to FLASH.

[0101] The beneficial effects of implementing this embodiment are as follows: by carrying the Loongson 3A3000 processor, it has strong computing power and multiple security mechanisms, which can effectively resist various types of network attacks, and with the optimized chipset design, it ensures efficient and stable data transmission; it adopts large-capacity memory to ensure the smooth processing of complex network security tasks; its bus expansion interface is rich and supports a variety of high-speed peripheral connections, which greatly improves the scalability and flexibility of the system; the network interface not only supports high-speed data transmission, but also has a built-in hardware-level firewall function, which further strengthens the security protection of the network boundary; it is also equipped with multiple USB interfaces, CF card slots and SATA interfaces, which are convenient for different forms The secure storage media access meets diverse data security needs; the real-time clock module ensures the accuracy of time synchronization, which is crucial for security operations such as log auditing; the watchdog mechanism effectively monitors the system operation status and immediately restarts once an anomaly is detected to ensure service continuity; the hardware monitoring module can monitor key parameters such as device temperature and voltage in real time to prevent service interruptions caused by hardware failures; and the BYPASS module provides a physical layer data pass-through path in the event of a device failure, ensuring uninterrupted transmission of network traffic; it can not only efficiently upload security events, but also has powerful service proxy functions, providing solid technical support for building a safe and reliable network environment. Its comprehensive performance and security are of great significance to improving the overall level of network security protection.

[0102] While the present invention has been described with reference to specific embodiments, those skilled in the art will appreciate that various modifications and equivalents may be made without departing from the scope of the present invention. Furthermore, numerous modifications may be made to adapt the present invention to specific applications without departing from its scope. Therefore, the present invention is not limited to the specific embodiments disclosed herein but encompasses all embodiments falling within the scope of the claims.

Claims

1. A network security device based on Loongson 3A3000, characterized in that: include: The Loongson 3A3000, chipset, memory module, bus expansion interface, network interface, USB interface, CF card slot, SATA interface, real-time clock module, watchdog module, serial port, hardware monitoring module, and BYPASS module are electrically connected. The Loongson 3A3000 is connected to the chipset via the HT3.0 high-speed bus, and the chipset is also connected to the memory module and network interface at the same time. The memory module is connected to the chipset via a DDR3 / DDR4 slot, and the chipset provides the bus expansion interface, the network interface, the USB interface, and the SATA interface. The CF card slot is connected to the chipset, the real-time clock module is connected to the chipset, the watchdog module is connected to the chipset, the serial port is connected to the chipset, the hardware monitoring module is connected to the chipset, and the BYPASS module is connected to the network interface.

2. The network security device based on Loongson 3A3000 according to claim 1, characterized in that: The chipset includes the Loongson 7A1000 bridge chip.

3. The network security device based on Loongson 3A3000 according to claim 1, characterized in that: The real-time clock module includes a quartz crystal oscillator, a counter, a power management circuit, a non-volatile memory and an interface circuit that are electrically connected.

4. The network security device based on Loongson 3A3000 according to claim 1, characterized in that: The watchdog module includes a timer, a reset circuit, a control circuit, a dog feeding pin, a reset pin and a non-shielding interrupt pin.

5. The network security device based on Loongson 3A3000 according to claim 1, characterized in that: The hardware monitoring module includes a temperature sensor, a voltage sensor, a fan speed sensor, a current sensor, a humidity sensor and a monitoring chip.

6. The network security device based on Loongson 3A3000 according to claim 1, characterized in that: The BYPASS module includes an optical switch or relay, a GPIO controller, a watchdog timer network interface card and a control logic circuit.

7. The network security device based on Loongson 3A3000 according to claim 3, characterized in that: The power management circuit includes a main power supply, a backup power supply, a power detection circuit, a switch switching circuit and a voltage regulation circuit.

8. The network security device based on Loongson 3A3000 according to claim 4, characterized in that: The reset circuit includes a resistor R1 and a capacitor C1 connected in series, which are then connected in parallel with the positive and negative electrodes of a diode D1.

9. The network security device based on Loongson 3A3000 according to claim 4, characterized in that: The control circuit includes PAL16L8 or GAL16V8.

10. The network security device based on Loongson 3A3000 according to claim 7, characterized in that: The power detection circuit includes a voltage divider circuit, an NMOS tube, an ADC analog-to-digital converter and an MCU.

Images