A U disk-based internal and external network data exchanger

Abstract

The utility model relates to data transmission and information security technical field discloses a kind of internal and external network data exchanger based on U disk.The structure of the exchanger is equipped with uplink interface, downlink interface and control switching module, realize the safe switching and transmission of U disk data between internal and external network host, and utilize independent file transmission record storage chip to record file name, identification code, transmission time and direction, form the traceability log of non-deletable.The control right can be flexibly switched by host instruction or equipment end key, realize bidirectional data interaction under physical isolation environment, improve data transmission efficiency and security.The utility model is suitable for internal and external network data exchange demand of enterprise, scientific research and government agency, can simplify operation process and improve the real-time performance and traceability of data synchronization while ensuring safety.

Description

Technical Field

[0001] This utility model belongs to the field of data transmission and information security technology, and in particular relates to an internal and external network data exchanger based on a USB flash drive. Background Technology

[0002] In modern information environments, enterprises, research institutions, and government departments generally adopt internal and external network isolation to ensure information security. However, with the increasing complexity of business systems and the growing demand for data interaction, how to efficiently exchange data between internal and external networks while ensuring network security has become an urgent problem to be solved in the field of information security and data management. Traditional data exchange methods mostly rely on manual operation, such as transferring data by plugging and unplugging removable storage media or using one-way optical shutter devices. While these methods meet the basic needs of data interaction to a certain extent, they are cumbersome to operate, have low transmission efficiency, and cannot meet the needs of multi-directional or bi-directional data synchronization, making it difficult to support the actual needs of collaborative updates between internal and external network systems and high-frequency data interaction.

[0003] In existing technologies, some solutions propose using USB flash drives as data transmission media to achieve data exchange between internal and external networks. For example, CN105630399A discloses a USB flash drive data exchange system that enables direct data transmission between USB flash drives, which can improve the convenience of data transmission to a certain extent. However, most of these solutions have functional limitations: on the one hand, they mostly only support one-way transmission and cannot meet the requirements of bidirectional data interaction and real-time synchronization; on the other hand, they do not adequately consider data security and traceability, and are difficult to meet the requirements for encryption, recording, and traceability of the data transmission process in complex network security environments. Although some patented technologies have constructed network virus isolation systems (such as CN204719759U) or USB flash drive data processing systems (such as CN202976846U), they either cannot solve the bidirectional synchronization problem or fail to balance security control and efficiency during the data interaction process.

[0004] With the diversification of information security threats and the continuous increase in the frequency of data interaction by business systems, existing one-way, inefficient data exchange methods are no longer adequate to meet the needs of application scenarios. The limitations of existing technologies become increasingly apparent, especially when rapid, large-scale data synchronization is required, while ensuring the secure and controllable transmission process. Utility Model Content

[0005] To address the aforementioned technical issues, this utility model provides a USB flash drive-based internal and external network data exchanger that balances high-efficiency data exchange, bidirectional interactive capabilities, and secure traceability.

[0006] Specifically, the technical solution provided by this utility model is as follows:

[0007] A USB flash drive-based intranet / extranet data exchanger includes multiple uplink interfaces, downlink interfaces, a channel switching module, and a transmission recording module, as well as switching buttons corresponding to the uplink interfaces. The uplink interfaces are used to connect to intranet / extranet hosts, and the downlink interfaces are used to connect to external storage devices. Both the uplink and downlink interfaces are connected to the channel switching module. The channel switching module, in conjunction with the switching buttons, is used to select the uplink interface for data transmission with the downlink interface. When the switching button corresponding to the uplink interface is pressed, that uplink interface obtains exclusive access to the downlink interface for data transmission. The transmission recording module is used to record file transfer information for both the uplink and downlink interfaces.

[0008] Preferably, the internal and external network data exchange further includes a signal conversion module disposed between the uplink interface and the channel switching module. The signal conversion module is used to parse the channel switching command transmitted from the host through the uplink interface into control information that the channel switching module can recognize.

[0009] Furthermore, the channel switching module is also connected to a switching reminder module, which is used to provide a switching reminder when the data transmission channel changes.

[0010] Preferably, the switching reminder module is a buzzer, a display screen, or an indicator light.

[0011] Furthermore, the uplink interface includes a first USB interface and a second USB interface, and the downlink interface is a USB flash drive interface. The first USB interface is equipped with a switching button A connected to the channel switching module, and the second USB interface is equipped with a switching button B connected to the channel switching module.

[0012] Compared with existing technologies, this invention enables more efficient and secure data exchange in physically isolated internal and external network environments, balancing bidirectional interaction and traceability. It overcomes the shortcomings of traditional solutions, which only allow unidirectional transmission, rely on manual operation, and lack real-time performance and security guarantees. Through a USB flash drive-based design, this invention allows internal and external network hosts to transmit data in a relatively direct manner, improving data transmission efficiency while meeting stringent security requirements and reducing user complexity. Simultaneously, mandatory encryption and compression mechanisms during data transmission ensure file security, while an independent file transmission record storage chip provides complete traceability, ensuring that the name, hash value, date, and transmission direction of all transmitted files are indelibly recorded, forming a traceable and auditable security system. Through a dual control method of host-side commands and device switching, data exchange is more flexible, ensuring operational controllability while effectively reducing misoperation and potential security risks.

[0013] Overall, this invention not only improves the efficiency and flexibility of data exchange between internal and external networks, but also significantly enhances security, traceability, and user experience, demonstrating clear technological progress and comprehensive advantages. Attached Figure Description

[0014] The accompanying drawings are provided to further understand the present invention and form part of the specification. They are used together with the embodiments of the present invention to explain the present invention and do not constitute a limitation thereof.

[0015] Figure 1 This is a schematic diagram of the framework of an internal and external network data exchange provided in an embodiment of the present invention;

[0016] Figure 2 This is a circuit diagram of a channel switching module provided in an embodiment of the present invention;

[0017] Figure 3 This is a schematic diagram of a buzzer circuit provided in one embodiment of the present invention;

[0018] Figure 4 This is a circuit diagram of a USB interface 1 provided in an embodiment of the present invention;

[0019] Figure 5 This is a schematic diagram of the USB interface 2 circuit provided in one embodiment of the present invention;

[0020] Figure 6 This is a schematic diagram of a channel switching circuit provided in an embodiment of the present invention;

[0021] Figure 7 This is a schematic diagram of a Type-C interface circuit provided in an embodiment of this utility model;

[0022] Figure 8 This is a schematic diagram of a USB flash drive interface circuit provided in one embodiment of the present invention. Detailed Implementation

[0023] To make the objectives, technical solutions, and advantages of the embodiments of this utility model clearer, the technical solutions of the embodiments of this utility model will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this utility model, not all embodiments. Other embodiments obtained by those skilled in the art based on the embodiments of this utility model without creative effort are all within the protection scope of this utility model.

[0024] This invention provides a USB flash drive-based internal / external network data exchange, mainly comprising multiple uplink interfaces, a downlink interface (USB flash drive interface), a channel switching module, a transmission recording module, and switching buttons corresponding to the uplink interfaces. The uplink interfaces are used to connect to hosts on the internal / external networks, and the downlink interfaces are used to connect USB flash drives. Both the uplink and downlink interfaces are connected to the channel switching module. The channel switching module, in conjunction with the switching buttons, is used to select the uplink interface for data transmission with the downlink interface. When the switching button corresponding to a specific uplink interface is pressed, that uplink interface obtains exclusive access to data transmission with the downlink interface, regardless of whether other uplink interfaces are currently in use.

[0025] The file transfer record module records file transfer information, including the filename, file identifier, transfer date, and transfer direction for each transferred file. File transfer records do not support manual deletion; they can only be written to automatically or read manually. The file identifier distinguishes files with different content; files with different content have different identifiers, and files with the same identifier must have the same content. Files with different filenames but the same content will also have the same identifier. Commonly used file identifiers can be generated based on hash functions such as MD5 or SHA.

[0026] Figure 1 This is a specific embodiment of the internal and external network data exchange of this utility model. In this embodiment, there are two uplink interfaces (USB interface 1 and USB interface 2) and one downlink interface (USB interface) for connecting a USB flash drive. USB interface 1 is equipped with a switch button A and USB interface 2 is equipped with a switch button B.

[0027] Now, assuming you need to transfer a file from computer A on the intranet to computer B on the internet, you can connect computer A to USB port 1, computer B to USB port 2, and plug a USB flash drive into the USB port. First, by pressing switch button A, the channel switching module opens the data transfer channel between USB port 1 and the USB flash drive port, allowing computer A to save the file to be transferred to the USB flash drive. Then, by pressing switch button B, the channel switching module opens the data transfer channel between USB port 2 and the USB flash drive port, allowing computer B to read the file transferred from computer A from the USB flash drive. File transfer information is retained by the transfer record module. During the transfer, files transferred to / from the USB flash drive via USB port 1 or USB port 2 are recorded and buffered in a secure storage chip. This chip can only write to or read file transfer records, not delete them. Before file transfer, the computer can force encryption and compression of all transferred files; the password is dynamically generated by the sending computer.

[0028] Regarding the switching method of data transmission channels, besides switching via a switch button, in some embodiments, switching can also be initiated by a switch command issued by a host connected to the uplink interface. Once a host connected to the uplink interface sends a switch command, it gains exclusive right to transmit data with the downlink interface, regardless of whether other hosts are interacting with the downlink interface. Therefore, a corresponding signal conversion module needs to be added between the uplink interface and the channel switching module to parse the switch command from the host via the uplink interface into control information that the channel switching module can recognize. For example... Figure 1 In the process, a signal conversion module A is provided between USB interface 1 and the channel switching module, and a signal conversion module B is provided between USB interface 2 and the channel switching module.

[0029] In some embodiments, the channel switching module is further connected to a switching reminder module, used to provide a corresponding reminder when the data transmission channel changes. For example, Figure 1 A buzzer is added to indicate when channels switch. Alternatively, a display screen or indicator light can be used to show the data transmission enable status of each uplink interface in real time.

[0030] Figure 2 The circuit diagram for the channel switching module provided in this example uses an STM32F030R8T8 as the main controller to run the code logic for functions such as channel switching. The BEEP pin is used to connect to the buzzer circuit (e.g., Figure 3 As shown), KEY1 and KEY2 are used to connect to the circuits of switch button A and switch button B, respectively, and UART1 and UART2 ports are used to connect to the USB interface 1 circuit (as shown). Figure 4 (as shown) and USB interface 2 circuit (as shown) Figure 5 As shown), both USB interface circuits are connected to the channel switching circuit (as shown). Figure 6 (As shown) can be connected, and the USB interface circuit can be connected via the Type-C interface circuit (such as...). Figure 7 Connects to internal and external network hosts; the U_EN and INT_OC terminals are used to connect to the USB flash drive interface circuit (e.g., ...). Figure 8 (As shown).

[0031] For file identification codes, this embodiment also provides an identification code generation algorithm based on hierarchical dynamic feature projection and hybrid modulus operation of file content to ensure that files with the same content generate the same identification code under different filenames, locations, and times. Specifically, the file identification code designed in this embodiment consists of a master fingerprint code and a verification sequence. The master fingerprint code is generated through sampling feature projection, and the verification sequence is used to reduce collisions and false identifications.

[0032] Let the byte stream of the file be {b1, b2, ..., b}. L}, b i∈[0,255], where L is the total number of bytes in the file, the steps for generating the file identification code are as follows:

[0033] S1, Multi-resolution hierarchical sampling

[0034] Sampling region division: The byte stream is divided into a file header region, a file middle region, and a file tail region. The file header region takes the first 1% of the bytes in the file, with a maximum of 64KB. The file middle region takes the range of ±0.5%L near the middle of the file. The file tail region takes the last 1% of the bytes in the file, with a maximum of 64KB.

[0035] Uniform sampling in partitions: N sampling points are uniformly collected in each region (if insufficient, they are supplemented cyclically), forming a sampling sequence {s1, s2, ..., s...}. 3N}, each s i One byte corresponds to each sampling point. The number of sampling points is usually 256, i.e., N = 256, which is a power of 2, making binary operations easier.

[0036] S2, Dynamic Feature Projection

[0037] For each byte s in the sampled sequence i Calculate a projection value p i This yields the projection sequence {p1, p2, ..., p} corresponding to the sampling sequence. 3N}, p i =((s) i (i+7))mod251)⊕ROTL(s i ,i).

[0038] Among them, (i+7) is used to avoid the product being always 0 when index i is 0, thus improving the distribution; the prime number 251 can break up periodic patterns and reduce collisions; mod represents modulo operation, ⊕ represents bitwise XOR operation; ROTL(s i ,i) indicates that the byte s i Circularly shift left by i bits to further break down the correlation between high and low bits;

[0039] S3, Constructing Grouped Vectors

[0040] The projection sequence {p1,p2,…,p} is used to... 3N The data is divided into 8 groups, each with a length of 3N / 8. The average value of the bytes in each group is taken and rounded to form an 8-dimensional vector [v1,v2,…,v8].

[0041] S4. Generate the master fingerprint code F

[0042] Using the mixed-mode weighted summation formula:

[0043] Where, k 3mod 257 is obtained by breaking down the prime number 257 (close to the maximum value of 256 bytes). 48 Used to limit the output to a 48-bit integer.

[0044] S5. Generate the verification sequence C

[0045] Weighted sum of XOR operations based on vector [v1,v2,…,v8]:

[0046] C=(13(v1⊕v5)+17(v2⊕v6)+19(v3⊕v7)+23(v4⊕v8))mod2 16 ,

[0047] Among them, the coefficients 13, 17, 19, and 23 are all prime numbers, used to reduce the regularity. 16 Used to limit the output to a 16-bit integer.

[0048] S6, Combine the final identification code

[0049] Convert the main fingerprint code F and the verification sequence C into hexadecimal and concatenate them to obtain the final identification code.

[0050] Suppose that the sampling sequence obtained from sampling a certain file is S={12,87,201,45,133,255,64,39,…}, with a total of 768 points, calculate its projection sequence P={p1,p2,…,p 768}:

[0051] For s1 = 12, p1 = ((12 × (1 + 7)) mod 251) ⊕ ROTL(12, 1) = 120.

[0052] For s2 = 87, p2 = ((87 × (2 + 7)) mod 251) ⊕ ROTL(87, 2) = 70.

[0053] ...

[0054] The average is calculated by grouping the data, assuming that the calculated 8-dimensional vector is [102,85,97,110,123,88,95,107].

[0055] Before generating the master fingerprint, calculate the weighted average for each group:

[0056] k 3 mod 257: 1,8,27,64,125,216,86,255,

[0057] Then F = (102×1 + 85×8 + 97×27 + 110×64 + ... + 107×255) mod 2 48 =140528

[0058] The calculated verification sequence is as follows:

[0059] C=(13×(102⊕123)+17×(85⊕88)+19×(97⊕95)+23×(110⊕107))mod 2 16 =699,

[0060] The hexadecimal representations of 140528 and 699 are 0x224F0 and 0x02BB, respectively. Therefore, the identification code of this file can be represented as 224F0-02BB.

[0061] The identification code provided in this embodiment has significant advantages over conventional hashing or verification methods (such as MD5, SHA, or CRC). By employing multi-resolution layered sampling and nonlinear dynamic feature projection combined with hybrid modular arithmetic, it avoids the high complexity of byte-by-byte calculation of the entire file, thereby significantly reducing the computational load and improving the generation speed. Simultaneously, by covering the file header, middle, and tail with three layers of sampling, combined with cyclic shifting, prime-number modular arithmetic, and XOR weighting, it effectively disperses data distribution and reduces the collision rate, ensuring accurate differentiation even with minor file modifications. Furthermore, the identification code is entirely dependent on the file content and is independent of the filename, path, or generation time, ensuring that the identification code for files with identical content remains constant.

[0062] The above is the main content of the internal and external network data exchanger provided by this utility model. This utility model adopts an isolation design, locks read and write permissions, and avoids the leakage of internal and external network data; it upgrades and improves the traditional internal and external network data interaction mode, making bidirectional data interaction more direct and efficient; and it adopts a data-traceability design, so that when data is leaked, the specific operation can be traced through the traceability log, which meets the application environment of internal and external network data interaction.

[0063] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of this utility model, and not to limit it; under the concept of this utility model, the technical features of the above embodiments or different embodiments can also be combined, the steps can be implemented in any order, and there are many other variations of different aspects of this utility model as described above, which are not provided in detail for the sake of brevity; although this utility model has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features; and these modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of this application.

Claims

1. A U disk-based internal and external network data exchanger, characterized in that, The inner-outer network data exchanger comprises a plurality of uplink interfaces, downlink interfaces, channel switching modules and transmission recording modules, and switching buttons corresponding to the uplink interfaces; the uplink interfaces are used for connecting inner and outer network hosts, and the downlink interfaces are used for connecting external memories; the uplink interfaces and the downlink interfaces are connected with the channel switching modules; the channel switching modules cooperate with the switching buttons to select the uplink interfaces for data transmission with the downlink interfaces; and the transmission recording modules are used for recording file transmission information of the uplink interfaces and the downlink interfaces.

2. The Intranet / Internet data exchanger of claim 1 wherein, The inner-outer network data exchanger further comprises a signal conversion module arranged between the uplink interfaces and the channel switching modules, and the signal conversion module is used for analyzing channel switching instructions from the hosts transmitted by the uplink interfaces into control information recognizable by the channel switching modules.

3. The Intranet / Internet data exchanger of claim 1 wherein, The channel switching module is further connected with a switching reminding module, which is used for reminding switching when the data transmission channel is changed.

4. The Intranet / Internet data exchanger of claim 3 wherein, The switching reminding module is a buzzer, a display screen or an indicator light.

5. The Intranet / Internet data exchanger of claim 1 wherein, The uplink interfaces comprise a first USB interface and a second USB interface, the downlink interface is a U disk interface, the first USB interface is correspondingly provided with a switching button A connected with the channel switching module, and the second USB interface is correspondingly provided with a switching button B connected with the channel switching module.

Images