Integrated peripheral expansion interface access device
By integrating peripheral expansion interface access devices and utilizing the cooperation of the main control module and switching module, physical isolation of unauthorized USB devices is achieved, solving the data security problem caused by unauthorized device access and simplifying the development of host computer programs.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Utility models(China)
- Current Assignee / Owner
- FUJIAN CENTM INFORMATION
- Filing Date
- 2025-04-18
- Publication Date
- 2026-05-08
AI Technical Summary
Existing technologies cannot effectively physically isolate unauthorized USB device access, making it difficult to guarantee the security of host computer data. In particular, as the number and types of devices increase, the development of host computer programs becomes more difficult.
An integrated peripheral expansion interface access device is adopted, including an access module, a main control module, a switching module, and an expansion interface. The connection mode of the switching module is controlled by the verification result of the main control module, so that unauthorized USB devices are physically isolated from the host computer.
It achieves physical isolation between unauthorized USB devices and the host computer, simplifies host computer program development, and improves data security.
Smart Images
Figure CN224217035U_ABST
Abstract
Description
Technical Field
[0001] This utility model relates to the field of device access control technology, and in particular to an integrated peripheral expansion interface access device. Background Technology
[0002] Integrated peripheral devices are used in industries such as finance and insurance. To ensure the security of connected devices, the host computer needs to manage the connected USB devices to prevent unauthorized access and improve data security. For example, current methods involve connecting USB devices such as USB security tokens and USB flash drives to the integrated peripheral's USB expansion port. That is, the integrated peripheral's expansion USB interface is directly connected to the host computer, and the host computer program or upper-layer interface manages the USB, disabling or allowing certain USB devices to connect at the software level.
[0003] However, as the number and types of connected devices increase, the development of host computer programs or upper-layer interfaces becomes more difficult. Furthermore, it is impossible to physically prevent unauthorized USB devices from accessing the network. Utility Model Content
[0004] The technical problem to be solved by this utility model is to provide an integrated peripheral expansion interface access device, thereby physically isolating unauthorized device access.
[0005] To solve the above-mentioned technical problems, the technical solution adopted by this utility model is as follows:
[0006] An integrated peripheral expansion interface access device includes an access module, a main control module, a switching module, and an expansion interface. The access terminal of the switching module is connected to the expansion interface. The expansion interface is used to connect to a peripheral device. The control output terminal of the main control module is connected to the control input terminal of the switching module, and controls the output terminal of the switching module to selectively connect to either the input terminal of the main control module or the input terminal of the access module based on the verification result of the peripheral device. The output terminal of the switching module is connected to the input terminal of the main control module by default. The output terminal of the access module is used to connect to a host computer.
[0007] Furthermore, the access module includes an access control chip; the access control chip includes a host pin, a main control pin, and peripheral pins; the switching module includes a first sub-output terminal; the host pin is used to connect to a host computer; the main control pin is connected to the interactive input terminal of the main control module; and the peripheral pin is selectively connected to the first sub-output terminal of the switching module.
[0008] Furthermore, the access module also includes a coupling unit; one end of the coupling unit is grounded, and the other end is connected to the power supply pin of the access control chip.
[0009] Furthermore, the coupling unit includes at least one capacitor; one end of the capacitor is connected to the power supply pin of the access control chip, and the other end is grounded.
[0010] Furthermore, the coupling unit also includes at least one inductor; the access control chip includes at least two different types of power supply pins; the two ends of the inductor are respectively connected to one type of power supply pin.
[0011] Furthermore, the main control module includes a main control chip; the main control chip includes peripheral pins, control pins, and interaction pins; the switching module includes a second sub-output terminal; the peripheral pins are selectively connected to the second sub-output terminal of the switching module; the control pins are connected to the control input terminal of the switching module; and the interaction pins are connected to the interaction input terminal of the access module.
[0012] Furthermore, the switching module includes a switching chip; the switching chip includes a control input pin, a first sub-output pin, a second sub-output pin, and an input pin; the input pin is connected to the expansion interface; the control input pin is connected to the control output terminal of the main control module, and controls the first sub-output pin to be connected to the input terminal of the access module, or the second sub-output pin to be connected to the input terminal of the main control module.
[0013] Furthermore, the expansion interface includes an interface and an expansion circuit; the input terminal of the interface terminal is used to connect to a peripheral device; the output terminal of the interface terminal is connected to the input terminal of the expansion circuit; and the output terminal of the expansion circuit is connected to the access terminal of the switching module.
[0014] Furthermore, the expansion circuit includes a fuse resistor; the fuse resistor is connected to the output terminal of the interface terminal.
[0015] Furthermore, the expansion circuit includes a common-mode inductor; the input terminal of the common-mode inductor is connected to the output terminal of the expansion interface; and the output terminal of the common-mode inductor is connected to the access terminal of the switching module.
[0016] The beneficial effects of this utility model are as follows: by selectively connecting the output terminal of the switching module to the input terminal of the main control module or the input terminal of the access module, and connecting the control output terminal of the main control module to the control input terminal of the switching module, while the output terminal of the switching module is connected to the input terminal of the main control module by default, that is, only when the peripheral device passes the verification of the main control module will the output terminal of the switching module be connected to the input terminal of the access module, thereby enabling the peripheral device to connect to the host computer; when the peripheral device fails the verification, the peripheral device is connected to the main control module, thus achieving physical isolation between the peripheral device and the host computer. Attached Figure Description
[0017] Figure 1 This is a schematic diagram of the module connection of an integrated peripheral expansion interface access device according to an embodiment of this utility model;
[0018] Figure 2 This is a schematic diagram of the access module circuit of an integrated peripheral expansion interface access device according to an embodiment of this utility model;
[0019] Figure 3 This is a circuit diagram of the coupling unit of the access module of an integrated peripheral expansion interface access device according to an embodiment of the present invention.
[0020] Figure 4 This is a schematic diagram of the main control module circuit of an integrated peripheral expansion interface access device according to an embodiment of the present utility model;
[0021] Figure 5 This is a schematic diagram of the switching module circuit of an integrated peripheral expansion interface access device in an embodiment of this utility model;
[0022] Figure 6 This is a schematic diagram of the expansion module circuit of an integrated peripheral expansion interface access device in an embodiment of this utility model;
[0023] Label Explanation:
[0024] 1. Access module; 2. Main control module; 3. Switching module; 4. Expansion interface;
[0025] U2, access control chip; U1A, main control chip; U3, switching chip; B1, interface terminal; F1, fuse resistor; L1, common mode inductor. Detailed Implementation
[0026] To explain in detail the technical content, objectives, and effects of this utility model, the following description is provided in conjunction with the embodiments and accompanying drawings.
[0027] An integrated peripheral expansion interface access device includes an access module, a main control module, a switching module, and an expansion interface. The access terminal of the switching module is connected to the expansion interface. The expansion interface is used to connect to peripherals. The control output terminal of the main control module is connected to the control input terminal of the switching module, and controls the output terminal of the switching module to selectively connect to either the input terminal of the main control module or the input terminal of the access module based on the verification result of the peripheral. The output terminal of the switching module is connected to the input terminal of the main control module by default. The output terminal of the access module is used to connect to a host computer.
[0028] As can be seen from the above description, the beneficial effects of this utility model are as follows: by selectively connecting the output terminal of the switching module to the input terminal of the main control module or the input terminal of the access module, and connecting the control output terminal of the main control module to the control input terminal of the switching module, while the output terminal of the switching module is connected to the input terminal of the main control module by default, that is, only when the peripheral device passes the verification of the main control module will the output terminal of the switching module be connected to the input terminal of the access module, thereby enabling the peripheral device to connect to the host computer; when the peripheral device fails the verification, the peripheral device is connected to the main control module, thus achieving physical isolation between the peripheral device and the host computer.
[0029] Furthermore, the access module includes an access control chip; the access control chip includes a host pin, a main control pin, and peripheral pins; the switching module includes a first sub-output terminal; the host pin is used to connect to a host computer; the main control pin is connected to the interactive input terminal of the main control module; and the peripheral pin is selectively connected to the first sub-output terminal of the switching module.
[0030] As described above, by using an access control chip as an access module, the pins of the access control chip are connected to the main control module and the switching module respectively, thereby realizing the interaction between the access control chip and other modules.
[0031] Furthermore, the access module also includes a coupling unit; one end of the coupling unit is grounded, and the other end is connected to the power supply pin of the access control chip.
[0032] As described above, by setting up a coupling unit, the parasitic inductance and capacitance of the access module can be reduced, thereby avoiding signal distortion or delay.
[0033] Furthermore, the coupling unit includes at least one capacitor; one end of the capacitor is connected to the power supply pin of the access control chip, and the other end is grounded.
[0034] As can be seen from the above description, by using multiple capacitors as coupling units, noise signals in the circuit can be effectively filtered out.
[0035] Furthermore, the coupling unit also includes at least one inductor; the access control chip includes at least two different types of power supply pins; the two ends of the inductor are respectively connected to one type of power supply pin.
[0036] As can be seen from the above description, by placing inductors between different types of power supply pins, the noise between different power supply pins can be reduced.
[0037] Furthermore, the main control module includes a main control chip; the main control chip includes peripheral pins, control pins, and interaction pins; the switching module includes a second sub-output terminal; the peripheral pins are selectively connected to the second sub-output terminal of the switching module; the control pins are connected to the control input terminal of the switching module; and the interaction pins are connected to the interaction input terminal of the access module.
[0038] As described above, by using a main control chip as the main control module, and connecting each pin of the main control module to the access module and the switching module respectively, and by generating control signals based on the detection results through the control pins, the switching module's path switching can be controlled.
[0039] Furthermore, the switching module includes a switching chip; the switching chip includes a control input pin, a first sub-output pin, a second sub-output pin, and an input pin; the input pin is connected to the expansion interface; the control input pin is connected to the control output terminal of the main control module, and controls the first sub-output pin to be connected to the input terminal of the access module, or the second sub-output pin to be connected to the input terminal of the main control module.
[0040] As described above, by using a switching chip as a switching module, and connecting the first sub-output pin, the second sub-output pin, and the input pin to the access module, the main control module, and the expansion pin respectively, the first sub-output pin can be connected to the input terminal of the access module, or the second sub-output pin can be connected to the input terminal of the main control module, based on the signal received by the control input pin.
[0041] Furthermore, the expansion interface includes an interface terminal and an expansion circuit; the input terminal of the interface terminal is used to connect to a peripheral device; the output terminal of the interface terminal is connected to the input terminal of the expansion circuit; and the output terminal of the expansion circuit is connected to the access terminal of the switching module.
[0042] As described above, by setting up an expansion circuit and connecting it to the interface terminal, the signal input from the peripheral device can be converted into the signal type required by the subsequent module.
[0043] Furthermore, the expansion circuit includes a fuse resistor; the fuse resistor is connected to the output terminal of the interface terminal.
[0044] As can be seen from the above description, setting a fuse resistor can effectively protect the circuit.
[0045] Furthermore, the expansion circuit includes a common-mode inductor; the input terminal of the common-mode inductor is connected to the output terminal of the interface terminal; and the output terminal of the common-mode inductor is connected to the access terminal of the switching module.
[0046] As described above, by setting a common-mode inductor, the voltage signal input from the peripheral device can be converted into the voltage signal required by the subsequent modules.
[0047] The integrated peripheral expansion interface access device provided by this utility model can be applied to scenarios where USB devices are connected, and can realize the security detection of connected USB devices. The following is a description of the specific implementation method:
[0048] Example 1
[0049] Please refer to Figure 1 The entire system consists of a host computer, integrated peripherals (integrated peripheral expansion interface access devices), and peripherals; this embodiment uses the connection of USB devices as an example for explanation. In the system, the host computer is generally a computer (PC) such as a desktop or laptop computer that can directly issue control commands, and it connects to the integrated peripherals via a USB host port. Peripherals are generally USB devices with USB interfaces, such as USB tokens, USB flash drives, etc.; different USB devices have different descriptors. Meanwhile, the host computer only adds the integrated peripherals to its whitelist by default, meaning that the integrated peripherals can be directly recognized by the host computer; other USB devices need to be connected to the integrated peripherals' expansion USB interface and authenticated by the integrated peripherals before they can connect to the host computer.
[0050] An integrated peripheral expansion interface access device includes an access module 1 (USB HUB), a main control module 2 (MCU), a switching module 3 (UBS switch), an expansion interface 4, and other functional modules. For example, the expansion interface 4 is a USB expansion port. The access terminal of the switching module 3 is connected to the expansion interface 4. The expansion interface 4 is used to connect to peripherals. The control output terminal (GPIO) of the main control module 2 is connected to the control input terminal of the switching module 3, and controls the output terminal of the switching module 3 to selectively connect to the input terminal (USB host) of the main control module 2 or the input terminal (port 2) of the access module 1 according to the verification result of the peripheral. The output terminal of the switching module 3 is connected to the input terminal of the main control module 2 by default. The output terminal (port 0) of the access module 1 is used to connect to a host computer. Specifically, the USB hub is used for communication between the PC, MCU, and USB expansion port; the MCU is used to detect USB devices, confirm their safety, and control the USB switch to allow connection to the host computer; the USB switch, under the control of the MCU, switches the USB expansion port to connect to the MCU or the USB hub; the USB expansion port is used to connect USB devices; other functional modules integrate the basic functions of peripherals, such as IC card readers, magnetic stripe card readers, and electronic imaging devices.
[0051] Please refer to Figure 2The access module 1 includes an access control chip U2; the access control chip U2 includes host pins (DM0 & DP0), main control pins (DM1 & DP1), and peripheral pins (DM2 & DP2); the switching module 3 includes a first sub-output terminal; the host pins are used to connect to a host computer; the main control pins are connected to the interactive input terminal of the main control module 2; and the peripheral pins are selectively connected to the first sub-output terminal of the switching module 3.
[0052] Please refer to Figure 3 The access module 1 further includes a coupling unit; one end of the coupling unit is grounded, and the other end is connected to the power supply pin of the access control chip U2. The coupling unit includes at least one capacitor; one end of the capacitor is connected to the power supply pin of the access control chip U2, and the other end is grounded. Figure 2 as well as Figure 3 As shown, the access control chip U2 includes at least two different types of power supply pins (DVDD_HUB, 3.3V_HUB, AVDD_HUB, +5_HUB), and the coupling unit also includes at least one inductor, with each end of the inductor connected to one of the power supply pins of the specified type.
[0053] Please refer to Figure 4 The main control module 2 includes a main control chip U1A; the main control chip U1A includes peripheral pins (PA11 & PA12), a control pin (PB11), and interaction pins (PB14 & PB15); the switching module 3 includes a second sub-output terminal; the peripheral pins are selectively connected to the second sub-output terminal of the switching module 3; the control pins are connected to the control input terminal of the switching module 3; and the interaction pins are connected to the interaction input terminal of the access module 1. Its specific working principle is as follows: the voltage of the MCU control pin is pulled high through resistor R2, configuring the MCU's OTG_FS as a peripheral; and the voltage of the MCU's PB12 / OTG_HS_ID is pulled down to ground (potential) through resistor R6, configuring the MCU's OTG_HS interface as a Host interface; simultaneously, a control signal is output to the control input terminal of the switching module 3 through the control pin, realizing the selection control of the connection mode.
[0054] Please refer to Figure 5The switching module 3 includes a switching chip U3; the switching chip U3 includes a control input pin (SEL), a first sub-output pin (DA+&DA-), a second sub-output pin (DB+&DB-), and an input pin (D+&D-); the input pin is connected to the expansion interface 4; the control input pin is connected to the control output terminal of the main control module 2, and controls the first sub-output pin to connect to the input terminal of the access module 1, or the second sub-output pin to connect to the input terminal of the main control module 2. The specific working principle is as follows: when the control input pin is high, the input pin is connected to the second sub-output pin, that is, the USB peripheral is connected to the main control module 2 (MCU); when the control input pin is low, the input pin is connected to the first sub-output pin, that is, the USB peripheral is connected to the access module 1 (USB HUB).
[0055] Please refer to Figure 6 The expansion module includes an interface terminal B1 and an expansion circuit; the input terminal of the interface terminal B1 is used to connect to a peripheral device; the output terminal of the interface terminal B1 is connected to the input terminal of the expansion circuit; the output terminal (USB_Port_DM & USB_Port_DP) of the expansion circuit is connected to the access terminal of the switching module 3; the expansion circuit includes a fuse resistor F1 and a common-mode inductor L1; the fuse resistor F1 is connected to the output terminal of the interface terminal B1; the input terminal of the common-mode inductor L1 is connected to the output terminal of the expansion interface 4; the output terminal of the common-mode inductor L1 is connected to the access terminal of the switching module 3.
[0056] The working principle of the above-mentioned integrated peripheral expansion interface access device is as follows:
[0057] When a USB device is connected, since the switching module 3 connects the USB peripheral to the main control module 2 by default, the USB device is first connected to the main control module 2 after it is connected. The main control module 2 performs security checks on the USB device, such as by obtaining the USB device descriptor and confirming whether it is in the whitelist. If it is a storage device, it will also scan the storage content to confirm whether the storage device is safe.
[0058] If the USB device passes the detection, the main control module 2 will inform the host computer of the device information, such as device type, PID, VID, etc., through the uplink port to allow access; at the same time, the main control module 2 will pull down the voltage of the control input pin (SEL) of the control switching module 3 through the control pin (PB11), so that the switching module 3 will connect the expansion interface 4 to the access module 1, realizing the connection between the USB device and the host computer.
[0059] If the USB device fails the detection, the host device continues to maintain a high level through the control pin (PB11) so that the connection mode of the switching module 3 does not switch. That is, the expansion interface is still connected to the host module 2, thus forming physical isolation between the USB device and the host computer, thereby ensuring system security.
[0060] Once the USB device is connected to the host computer, if the USB device is unplugged, the host computer's device manager will detect the unplug signal and notify the main control module 2 through the USB host interface. Subsequently, the main control module 2 will pull up the control pin (PB11), and the control switching module 3 will be reset to the default state, thereby disconnecting the expansion interface from the host computer.
[0061] If the USB device is always connected to the host device, the host module 2 will not perform any action when the USB device is unplugged.
[0062] By integrating the main control module within the peripheral device, the security of the extended USB interface access is managed, simplifying the development of the host computer program or upper-layer interface; and by switching the connection between the extended interface and the main control module or access module through the switching module, the connection between the USB peripheral device and the host computer is physically isolated, preventing unauthorized USB devices from accessing the host computer and improving the data security of the host computer.
[0063] The above description is merely an embodiment of this utility model and does not limit the patent scope of this utility model. Any equivalent modifications made based on the content of this utility model specification and drawings, or direct or indirect applications in related technical fields, are similarly included within the patent protection scope of this utility model.
Claims
1. An integrated peripheral expansion interface access device, characterized in that, This includes the access module, main control module, switching module, and expansion interfaces; The access point of the switching module is connected to the expansion interface; The expansion interface is used to connect to peripherals; The control output terminal of the main control module is connected to the control input terminal of the switching module, and controls the output terminal of the switching module to selectively connect to the input terminal of the main control module or the input terminal of the access module according to the verification result of the peripheral device. The output of the switching module is connected to the input of the main control module by default. The output of the access module is used to connect to the host computer.
2. The integrated peripheral expansion interface access device according to claim 1, characterized in that, The access module includes an access control chip; The access control chip includes host pins, main control pins, and peripheral pins; The switching module includes a first sub-output terminal; The host pins are used to connect to the host computer; The main control pin is connected to the interactive input terminal of the main control module; The peripheral pin is selectively connected to the first sub-output terminal of the switching module.
3. The integrated peripheral expansion interface access device according to claim 2, characterized in that, The access module further includes a coupling unit; One end of the coupling unit is grounded, and the other end is connected to the power supply pin of the access control chip.
4. The integrated peripheral expansion interface access device according to claim 3, characterized in that, The coupling unit includes at least one capacitor; One end of the capacitor is connected to the power supply pin of the access control chip, and the other end is grounded.
5. The integrated peripheral expansion interface access device according to claim 3, characterized in that, The coupling unit further includes at least one inductor; The access control chip includes at least two different types of power supply pins; The two ends of the inductor are respectively connected to a power supply pin of one type.
6. The integrated peripheral expansion interface access device according to claim 1, characterized in that, The main control module includes a main control chip; The main control chip includes peripheral pins, control pins, and interaction pins; The switching module includes a second sub-output terminal; The peripheral pin is selectively connected to the second sub-output terminal of the switching module; The control pin is connected to the control input terminal of the switching module; The interaction pin is connected to the interaction input terminal of the access module.
7. The integrated peripheral expansion interface access device according to claim 1, characterized in that, The switching module includes a switching chip; The switching chip includes a control input pin, a first sub-output pin, a second sub-output pin, and an input pin; The input pin is connected to the expansion interface; The control input pin is connected to the control output terminal of the main control module, and controls the first sub-output pin to be connected to the input terminal of the access module, or the second sub-output pin to be connected to the input terminal of the main control module.
8. The integrated peripheral expansion interface access device according to claim 1, characterized in that, The expansion interface includes interface terminals and expansion circuitry; The input end of the interface terminal is used to connect to peripherals; The output terminal of the interface terminal is connected to the input terminal of the expansion circuit; The output terminal of the expansion circuit is connected to the input terminal of the switching module.
9. The integrated peripheral expansion interface access device according to claim 8, characterized in that, The extended circuit includes a fuse resistor; The fuse resistor is connected to the output terminal of the interface terminal.
10. An integrated peripheral expansion interface access device according to claim 8, characterized in that, The expansion circuit includes a common-mode inductor; The input terminal of the common mode inductor is connected to the output terminal of the interface terminal; The output terminal of the common-mode inductor is connected to the input terminal of the switching module.