A device for transmitting data between internal and external networks
Patent Information
- Application Number
- CN202521676809.6
- Authority / Receiving Office
- CN · China
- Patent Type
- Utility models(China)
- Current Assignee / Owner
- Filing Date
- 2025-08-07
- Publication Date
- 2026-09-01
- Estimated Expiration
- 2035-08-07
AI Technical Summary
(1)具有突出的安全风险:容易传播病毒 / 恶意软件,U 盘插入外网设备后可能感染病毒,再插入内网时会将威胁带入,导致内网核心系统被攻击
本实用新型的内外网数据传输装置,通过将结构设置相似的两台集成化主机左右并排固定在2U托架上,其中一台集成化主机用于连接内网,另外一台集成化主机用于连接外网,2U托架可以便捷地安装到服务器机箱内,提高了产品的集成化,有利于提升用于体验;进一步地,在集成化主机的一侧并排设有扫码窗和显示屏,集成化主机内部设有扫码模块和控制主板,而且显示屏、网口和扫码模块均与控制主板连接;当两台集成化主机安装固定后,其中一台集成化主机的扫码窗朝向另外一台集成化主机的显示屏,通过扫码模块进行扫码,即可实现传输数据,无需人工去调试设备与设备之间的相对位置,也无需繁琐的审核流程,自动生产二维码、自动扫描获取并传递信息,用户体验非常好。由于两台主机设备相互可以扫描到对方的二维码从而获取到需要传递的相关信息,而且二维码从设备外部不可见,避免了人为的手机、相机拍摄获取敏感信息的可能性,提高了数据传输的安全性。
Smart Images

Figure CN224709662U_ABST
Abstract
Description
Technical Field
[0001] This utility model belongs to the field of data transmission technology, specifically relating to a data transmission device for internal and external networks. Background Technology
[0002] The core reason why enterprises physically isolate their internal and external networks is to maximize the security of core data and systems. This can be understood from three aspects: 1. Isolating the risk of sensitive information: Internal networks typically store core corporate data (such as customer information, trade secrets, and technology patents). Physical isolation can completely cut off direct access paths from external networks (such as the Internet), preventing external threats such as hacker attacks and virus intrusions from directly penetrating the core system.
[0003] 2. Meeting Compliance and Control Requirements: Some industries (such as finance, energy, and government) have strict compliance regulations requiring strong isolation and protection of sensitive data. Physical isolation clearly distinguishes the boundaries between internal and external networks, facilitating enterprise control over data flow and preventing information leakage or unauthorized dissemination.
[0004] 3. Reduce network attack surface: External networks connect to the internet and face a variety of complex security threats (such as phishing and ransomware). Physical isolation allows the internal network to operate independently of the external network environment, significantly reducing the possibility of attacks and lowering security maintenance costs.
[0005] In summary, physical isolation is like adding a "wall that cannot be penetrated by the network" to the core data of an enterprise, cutting off the direct channel of external threats at the physical level, and is a "hardcore" means of ensuring information security.
[0006] In existing technologies, USB flash drives are typically used for internal / external network data transfer. While USB flash drives, as offline storage media, can temporarily solve the requirement that "data must be transferred across networks," they still have the following shortcomings: (1) It has prominent security risks: it is easy to spread viruses / malicious software. After the USB flash drive is inserted into the external network device, it may be infected with viruses. When it is inserted into the internal network, it will bring the threat in, causing the core system of the internal network to be attacked.
[0007] (2) Data leakage risk: If the USB flash drive is used to copy sensitive data, information may be leaked due to management oversight (such as loss of the USB flash drive or unauthorized copying), and it is difficult to trace the operation records.
[0008] (3) Compliance issues: The compliance requirements of industries such as finance and confidentiality explicitly prohibit "uncontrolled cross-network transmission of USB flash drives", such operations may violate regulatory provisions.
[0009] In addition, existing technologies that use QR codes and barcode scanners for internal / external network data transmission also have shortcomings: (1) Data leakage risk: QR codes are visual graphics that anyone can obtain by taking pictures with a mobile phone or camera. If they contain sensitive information, they can be easily stolen by unauthorized personnel.
[0010] (2) Risk of data tampering: If the QR code is maliciously replaced after it is generated (such as covering the real QR code with a fake QR code), the barcode scanner will read the wrong data, which may lead to business abnormalities.
[0011] (3) Lack of audit traceability: It is difficult to record operation logs such as "who generated the QR code, who scanned the QR code, and the purpose of the data", which does not meet compliance requirements (such as the financial and confidential industries need to be fully traceable).
[0012] Meanwhile, using a "QR code + barcode scanner" method for internal / external network data transmission requires two computer hosts, two monitors, and two barcode scanners—a total of six devices. The computer hosts run the relevant software to generate QR codes; the monitors display the QR codes; and the barcode scanners scan the QR codes. Since these devices are all independently placed and connected via data cables, they occupy a significant amount of space and are quite scattered, making integration into a server rack inconvenient. Because they can all be moved independently, if the relative positions of the monitor and the barcode scanner change drastically during use, the barcode scanner may not be able to effectively align with the QR code on the monitor, resulting in unscanned codes and a very poor user experience. Utility Model Content
[0013] The technical problem this invention aims to solve is how to improve the convenience and security of internal / external network data transmission, providing a compact, easy-to-operate, and highly secure internal / external network data transmission device. To achieve the above objective, this invention can adopt the following technical solution: A data transmission device for internal and external networks includes a 2U bracket and two integrated hosts fixed side-by-side on the 2U bracket. One integrated host is connected to the internal network, and the other is connected to the external network. Each integrated host has a barcode scanning window and a display screen side-by-side on one side, and a network port on the other side. Each integrated host contains a barcode scanning module and a control motherboard. The display screen, network port, and barcode scanning module are all connected to the control motherboard. After the two integrated hosts are installed and fixed, the barcode scanning window of one integrated host faces the display screen of the other integrated host, and data is transmitted via barcode scanning through the barcode scanning module.
[0014] As a further improvement of this utility model, the integrated host is provided with a guide rail, and the scanning module is slidably mounted on the guide rail to facilitate adjustment of the installation position of the scanning module.
[0015] As a further improvement of this utility model, the display screens and scanning modules of the two integrated hosts are arranged in a mirror image, and the adjacent side facades of the two integrated hosts are provided with scanning windows, so as to enable the scanning module of one integrated host to scan the QR code on the display screen of the other integrated host.
[0016] As a further improvement of this utility model, the scanning window is provided with a transparent glass partition to prevent impurities from entering the integrated host.
[0017] As a further improvement of this utility model, the two integrated hosts are an intranet host and an extranet host, respectively. The intranet host has an intranet scanning window and an intranet display screen side by side on one side, and the intranet host has an intranet scanning module inside. The extranet host has an extranet scanning window and an extranet display screen side by side on one side, and the extranet host has an extranet scanning module inside. When the intranet host and the extranet host are fixed side by side on a 2U bracket, the intranet scanning window faces the extranet display screen, and the intranet scanning module faces the extranet display screen. Conversely, the extranet scanning window faces the intranet display screen, and the extranet scanning module faces the intranet display screen.
[0018] As a further improvement of this utility model, the integrated host is provided with a power input port on the side, and a power module is provided inside the integrated host to control the power supply of the motherboard.
[0019] Compared with the prior art, the advantages of this utility model are: This utility model discloses an internal and external network data transmission device. Two integrated host units with similar structures are fixed side-by-side on a 2U bracket. One integrated host connects to the internal network, and the other connects to the external network. The 2U bracket allows for convenient installation into a server chassis, improving product integration and enhancing user experience. Furthermore, a barcode scanning window and a display screen are arranged side-by-side on one side of each integrated host. The integrated host contains a barcode scanning module and a control motherboard, with the display screen, network port, and barcode scanning module all connected to the control motherboard. Once the two integrated hosts are installed and fixed, the barcode scanning window of one host faces the display screen of the other. Data transmission is achieved by scanning the barcode using the scanning module. There is no need for manual adjustment of the relative positions of the devices or cumbersome approval processes. The device automatically generates QR codes, automatically scans to obtain and transmit information, resulting in an excellent user experience. Because the two host devices can scan each other's QR codes to obtain the relevant information, and the QR codes are invisible from the outside of the devices, the possibility of human intervention by taking photos or videos with mobile phones or cameras to obtain sensitive information is avoided, thus improving data transmission security. Attached Figure Description
[0020] Figure 1This is a schematic diagram of the partial structure of the internal and external network data transmission device in a specific embodiment of this utility model; Figure 2 This is a schematic diagram of the internal structure of the internal and external network data transmission device in a specific embodiment of this utility model; Figure 3 This is a schematic diagram illustrating data interaction between the internal and external network data transmission devices in a specific embodiment of this utility model; Figure 4 This is a schematic diagram of the structural principle of the 2U bracket in a specific embodiment of this utility model; Legend: 100, Integrated host; 101, Scanning window; 102, Display screen; 103, Network port; 104, Power input port; 1001, Intranet host; 1002, Extranet host; 1011, Intranet scanning window; 1012, Extranet scanning window; 1021, Intranet display screen; 1022, Extranet display screen; 1051, Intranet scanning module; 1052, Extranet scanning module; 106, Control motherboard; 107, Power module; 108, Guide rail; 200, 2U bracket. Detailed Implementation
[0021] The present invention will be further described below with reference to the accompanying drawings and specific preferred embodiments, but this does not limit the scope of protection of the present invention.
[0022] In the description of this utility model, it should be understood that the terms "side", "center", "longitudinal", "transverse", "length", "width", "thickness", "upper", "lower", "front", "rear", "left", "right", "vertical", "horizontal", "top", "bottom", "inner", "outer", "clockwise", "counterclockwise", "axial", "radial", "circumferential", etc., indicating the orientation or positional relationship based on the orientation or positional relationship shown in the accompanying drawings, are only for the convenience of describing this utility model and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation, and therefore should not be construed as a limitation of this utility model.
[0023] Furthermore, the terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of technical features indicated. Thus, a feature defined as "first" or "second" may explicitly or implicitly include one or more of that feature. In the description of this utility model, "multiple" means two or more, unless otherwise explicitly specified.
[0024] Example like Figure 1 , Figure 2 and Figure 4As shown, the internal and external network data transmission device of this utility model includes a 2U bracket 200 and two integrated host units 100 fixed side by side on the 2U bracket 200. One integrated host unit 100 is connected to the internal network, and the other integrated host unit 100 is connected to the external network. The 2U bracket 200 and the two integrated host units 100 can be easily installed in a server rack. One side of each integrated host unit 100 has a barcode scanning window 101 and a display screen 102, while the other side has a network port 103. Inside the integrated host unit 100 are a barcode scanning module and a control motherboard 106. The display screen 102, network port 103, and barcode scanning module are all connected to the control motherboard 106. The casing of the integrated host unit 100 is typically designed for industrial or commercial environments, providing a higher level of protection and significantly improving the reliability and lifespan of the equipment in harsh or busy environments (such as factory workshops, warehouses, outdoors, and restaurant kitchens); reducing maintenance costs.
[0025] After the two integrated host units 100 are installed and fixed, the scanning window 101 of one integrated host unit 100 faces the display screen 102 of the other integrated host unit 100, and data is transmitted through the scanning module. It should be noted that there should be no light-emitting devices such as LEDs inside the integrated host unit 100 to avoid light interference with the scanning module during operation. In this embodiment, both integrated host units 100 only need to be connected to a power cord, eliminating the need for multiple data and video cables, reducing installation complexity, time, and labor costs; and facilitating rapid deployment, relocation, or replacement of the equipment.
[0026] In this embodiment, two small integrated host units 100, each equipped with a display screen 102 and a barcode scanning module, are manufactured using a simplified, miniaturized, and integrated approach and placed side-by-side in a standard 2U rack 200. This significantly reduces the size, and the 2U rack 200 can be easily installed in a server rack. Thanks to the fully automated operation, there is no need for manual adjustment of the relative positions of the devices, nor for cumbersome review processes. QR codes are automatically generated, scanned, and information is automatically acquired and transmitted, resulting in an excellent user experience. One of the two integrated host units 100 connects to the intranet, while the other connects to the internet, achieving complete physical isolation. The entire information transmission link is converted from electrical signals to optical signals and then back to electrical signals, fully complying with relevant industry audit and traceability requirements.
[0027] like Figure 2 As shown, the integrated host 100 has a guide rail 108 inside, and the scanning module is slidably mounted on the guide rail 108 to adjust the installation position of the scanning module, thereby adjusting the distance between the scanning module and the display screen 102 of another integrated host 100, so as to better recognize the QR code.
[0028] In this embodiment, the displays 102 and scanning modules of the two integrated host units 100 are arranged in a mirror image, and scanning windows 101 are provided on adjacent side facades of the two integrated host units 100, so that the scanning module of one integrated host unit 100 can scan the QR code on the display 102 of the other integrated host unit 100, and the scanning modules of the two integrated host units 100 will not interfere with each other. Since the scanning module communicates directly with the control motherboard 106 through the internal bus (USB Host Controller integrated on SoC), the long path of "barcode scanner -> USB cable -> computer USB interface -> operating system driver -> application" and external physical interfaces in the traditional solution are eliminated. The internal bus has sufficient and dedicated bandwidth, and is not affected by external USB hubs or port sharing; the latency from data scanning to being acquired by the processor is significantly reduced, achieving near real-time decoding and response; and problems such as unstable connection, poor contact, and electromagnetic interference caused by external cables and interfaces are avoided, greatly improving the stability and reliability of data transmission. Furthermore, a transparent glass partition is provided in the barcode scanning window 101 to prevent impurities from entering the integrated host 100.
[0029] like Figure 2 As shown, the integrated host 100 has a power input port 104 on its side, and a power module 107 inside the integrated host 100 to power the control motherboard 106. 220V AC power is input to the power module 107 through the power input port 104, and then converted to 12V DC power to power the control motherboard 106. The display screen 102 is lit up through the display interface on the control motherboard 106 and displays the QR code generated by the system. The scanning module scans the QR code on the display screen 102 of another integrated host 100 through the scanning window 101 on the side of the integrated host 100 to obtain the information, which is then transmitted to the software system running on the control motherboard 106 for parsing via USB or serial port. It is understood that, according to conventional settings in this field, the network port 103 and the power input port 104 are both located on the rear panel of the integrated host 100, while a display screen is located on the front panel of the integrated host 100 to facilitate viewing the transmitted data content.
[0030] By highly integrating functional components such as the QR code scanning module, control motherboard 106, display screen 102, and power module 107 into a compact physical housing, the exposed connection cables required in traditional solutions—such as easily damaged and unsightly data cables (e.g., USB cables connecting the barcode scanner and computer), video cables (connecting the computer and monitor), and power cables (which may be powered separately)—are eliminated. This improves the overall aesthetics and simplicity of the device; significantly reduces the risk of failure due to cable pulling, trampling, aging, and loose interfaces. Moreover, embedded designs typically prioritize compactness, and the integrated host 100 is much smaller than the combination of "host + monitor + peripherals," making it particularly suitable for space-constrained locations (such as retail counters, small workbenches, production line stations, and warehouse shelves); facilitating mobile deployment or embedded installation; and improving the cleanliness of the working environment.
[0031] like Figure 2 and Figure 3 As shown, the two integrated hosts 100 are an intranet host 1001 and an extranet host 1002. The intranet host 1001 has an intranet QR code scanning window 1011 and an intranet display screen 1021 arranged side-by-side on one side, and an intranet QR code scanning module 1051 is installed inside the intranet host 1001. The extranet host 1002 has an extranet QR code scanning window 1012 and an extranet display screen 1022 arranged side-by-side on one side, and an extranet QR code scanning module 1052 is installed inside the extranet host 1002. When the intranet host 1001 and the extranet host 1002 are fixed side by side on the 2U bracket 200, the intranet scanning window 1011 faces the extranet display screen 1022, and the intranet scanning module 1051 faces the extranet display screen 1022. The intranet scanning module 1051 can only scan the QR code on the extranet display screen 1022. The extranet scanning window 1012 faces the intranet display screen 1021, and the extranet scanning module 1052 faces the intranet display screen 1021. The extranet scanning module 1052 can only scan the QR code on the intranet display screen 1021.
[0032] In this embodiment, an intranet host 1001 and an extranet host 1002 with similar structural configurations are fixed side by side on a 2U bracket 200. The intranet host 1001 is connected to the intranet through a network port 103, and the extranet host 1002 is connected to the extranet through a network port 103. Moreover, the 2U bracket 200 can be easily installed into a server chassis, which improves the integration of the product and enhances the user experience. Furthermore, a barcode scanning window 101 and a display screen 102 are arranged side-by-side on one side of the integrated host 100. The integrated host 100 contains a barcode scanning module and a control motherboard 106. The display screen 102, network port 103, and barcode scanning module are all connected to the control motherboard 106, achieving a fully automated workflow. After the intranet host 1001 and the extranet host 1002 are installed and fixed, the barcode scanning window of the intranet host 1001 faces the display screen of the extranet host 1002, and vice versa. Data transmission is achieved by scanning the barcode using the barcode scanning module. There is no need for manual adjustment of the relative positions between the devices, nor for cumbersome review processes. The system automatically generates QR codes, automatically scans to obtain and transmit information, providing an excellent user experience. Since the two host devices can scan each other's QR codes to obtain the relevant information to be transmitted, and the QR codes are invisible from the outside of the devices, the possibility of people obtaining sensitive information by taking pictures with mobile phones or cameras is avoided, thus improving the security of data transmission.
[0033] The internal and external network data transmission device in this embodiment, compared to the traditional "desktop computer + external QR code scanner" solution, achieves a high degree of integration in structure, completely eliminating easily damaged exposed connection cables. It boasts significant advantages such as compact size, robust structure, good protection, and extremely simple installation and deployment. In terms of data processing and transmission, through direct internal connection between the scanning module and the computing unit and deep software and hardware optimization, it achieves ultra-low latency, ultra-high reliability data transmission, and more efficient and faster QR code decoding and data processing capabilities. Simultaneously, the overall system stability and reliability are significantly enhanced, and power consumption is lower.
[0034] This invention effectively solves the problems of traditional solutions, such as numerous and easily faulty cables, large size and space occupation, complex installation and maintenance, high data transmission delay and poor reliability, and insufficient overall system efficiency and stability. It is especially suitable for application scenarios with high requirements for space, reliability, real-time performance and convenient deployment.
[0035] While the present invention has been disclosed above with reference to preferred embodiments, it is not intended to limit the present invention. Any person skilled in the art can make many possible variations and modifications to the technical solutions of the present invention, or modify them into equivalent embodiments, without departing from the spirit and technical essence of the present invention. Therefore, any simple modifications, equivalent substitutions, equivalent changes, and modifications made to the above embodiments based on the technical essence of the present invention, without departing from the content of the technical solutions of the present invention, shall still fall within the protection scope of the present invention.
Claims
1. An apparatus for transmitting data between an intranet and an extranet, characterized by comprising: The system includes a 2U bracket (200) and two integrated hosts (100) fixed side-by-side on the 2U bracket (200). The two integrated hosts (100) are an intranet host (1001) and an extranet host (1002), respectively. The intranet host (1001) is connected to the intranet, and the extranet host (1002) is connected to the extranet. One side of the intranet host (1001) is provided with an intranet scanning window (1011) and an intranet display screen (1021). The intranet host (1001) has an intranet scanning module (1051) inside, and a network port (103) is provided on the other side. The intranet display screen (1021), the network port (103), and the intranet scanning module (1051) are all connected to the control motherboard (106) of the intranet host. The extranet host (1002) has an extranet scanning window (1012) and an extranet display screen (1021) on one side. The external network host (1002) has an external network scanning module (1052) inside its display screen (1022) and a network port (103) on the other side of its external network host (1002). The external network display screen (1022), network port (103) and external network scanning module (1052) are all connected to the control motherboard (106) of the external network host. The display screens and scanning modules of the two integrated hosts are arranged in a mirror image. When the internal network host (1001) and the external network host (1002) are fixed side by side on the 2U bracket (200), the internal network scanning window (1011) is opposite to the external network display screen (1022), the internal network scanning module (1051) faces the external network display screen (1022), the external network scanning window (1012) is opposite to the internal network display screen (1021), and the external network scanning module (1052) faces the internal network display screen (1021) to realize bidirectional data transmission.
2. The apparatus of claim 1, wherein The integrated host (100) has a guide rail (108) inside, and the scanning module is slidably mounted on the guide rail (108) to facilitate adjustment of the installation position of the scanning module.
3. The apparatus of claim 1, wherein The scanning window (101) is provided with a transparent glass partition to prevent impurities from entering the integrated host (100).
4. The device according to any one of claims 1 to 3, wherein The integrated host (100) has a power input port (104) on its side and a power module (107) inside the integrated host (100) to power the control motherboard (106).