Power interruption monitoring device, method and external protection device
The power failure monitoring device addresses the lack of abnormal power outage detection in external protection devices by using a dedicated power acquisition circuit and alarm module to prevent unauthorized data transfer and enhance security during power failures.
Patent Information
- Application Number
- JP2024532505
- Authority / Receiving Office
- JP · JP
- Patent Type
- Applications
- Current Assignee / Owner
- Priority Date
- 2021-12-02
- Filing Date
- 2022-11-06
- Publication Date
- 2024-12-13
- Estimated Expiration
- 2042-11-06
AI Technical Summary
Existing external protection devices lack effective monitoring for abnormal power outages, which can be exploited by malicious users to cause unauthorized data transfer and system compromise.
A power failure monitoring device and method that includes a power acquisition circuit, continuity module, and alarm module, connected to a dedicated power acquisition port, which monitors and alerts on abnormal power outages, ensuring mutually exclusive power supply with the external protection device to prevent unauthorized data transfer.
Effectively prevents security issues by detecting and alerting on abnormal power outages, recording power failure status information, and ensuring secure operation even when the external protection device is powered off.
Smart Images

Figure 2024545865000001_ABST
Abstract
Description
[Technical field]
[0001] The present invention relates to the technical field of equipment security protection, and in particular to a power interruption monitoring device and a power interruption monitoring method for an external protection device, as well as a corresponding external protection device. [Background technology]
[0002] In recent years, the spread of networks has progressed significantly due to the development of computer and network technology, and while people enjoy the convenience brought by networks, they also face new threats to network security and data security. Common threats include the intrusion of malicious code, virus / Trojan horse infection, DDoS attacks, information theft by hackers, unauthorized access, spoofing of legitimate users, destruction of data integrity, disruption of normal system operation, spread of viruses using networks, man-in-the-middle attacks, etc.
[0003] To solve the problem of network security or data security, there are many technical measures, such as installing and using network security products such as black / white lists, traffic control software, firewalls, antivirus, and intrusion detection systems on hosts, but even with the above measures, various security incidents still occur frequently. Statistics show that 70% of security incidents are caused by insiders' illegal use of key resources such as hosts, and only 30% of real threats come from outside. Insiders lack security awareness when using hosts, and are behind firewalls, so access to various external devices is not standardized, and backdoors for viruses or Trojans are embedded, which may lead to data leakage, virus infection, system crashes, and even network paralysis. In addition, system misoperation or intentional destruction may also cause adverse effects and serious losses.
[0004] In addition, for some special equipment, such as hosts equipped with special software control, and engineering workstation / operator station equipment in certain industrial fields, suitable security protection software may not exist on the market, or installing security software may easily cause compatibility problems with the existing software of the host, which may further affect performance. Furthermore, after these engineering workstation or operator station hosts are put into production, the operating system is basically not upgraded, and even after security software is installed, the software version and malicious code library are often not updated in a timely manner, resulting in a decrease in the effectiveness and efficiency of security protection.
[0005] Therefore, in the prior art, an external terminal protection device (also called an external protection device) that solves the above problem and a corresponding protection system (Patent Document 1) are disclosed. The external protection device (EPD) takes over each interface of a protected device (Protected Device, PD), and allows an external device that needs to access various interfaces of the protected device to access them simply by connecting to the external protection device, thereby achieving the purpose of protecting the protected device without installing security protection software on the protected device. However, since the external protection device and the protected device are each independently powered, there is a possibility that a malicious user may cut off the power supply of the external protection device, thereby causing the protected device to avoid safety monitoring and achieving the purpose of destroying the protected device. [Prior art documents] [Patent documents]
[0006] [Patent Document 1] International Application Publication No. WO2020087781A1 [Patent Document 2] International Application Publication No. W02020087781AL Summary of the Invention [Problem to be solved by the invention]
[0007] Therefore, in order to improve the safety of the protected equipment, it is an urgent issue how to monitor an abnormal power interruption of an external protection device and issue an alarm even under a power interruption state. The main object of the present invention is to provide a power interruption monitoring device, a power interruption monitoring method, and a corresponding external protection device in order to at least partially solve the above technical problems. [Means for solving the problem]
[0008] In order to achieve the above object, as a first aspect of the present invention, a power interruption monitoring device is proposed, which is electrically connected to a protected device and takes over the input / output function of the protected device, thereby monitoring and issuing a warning for an abnormal power interruption of an external protection device that prevents unauthorized data transfer of the protected device, The power interruption monitoring device comprises a power acquisition circuit, a power acquisition conduction module, and an alarm module, the power acquisition circuit is used to connect the power interruption monitoring device to a dedicated power acquisition port, and the dedicated power acquisition port is not connected to a power supply circuit of the external protection device; the power acquisition conduction module is used to monitor whether an abnormal power interruption has occurred in the external protection device, and when an abnormal power interruption is detected, to make the power acquisition circuit conductive so that the power interruption monitoring device can acquire power via a dedicated power acquisition port and start up; The alarm module is used to send an alarm message at the start of the power interruption monitoring device.
[0009] According to a preferred embodiment of the present invention, the dedicated power acquisition port is provided by a power supply circuit of the protected device.
[0010] According to a preferred embodiment of the present invention, the power acquisition conduction module includes an automatic switch whose control end is connected to the power supply circuit of the external protection device, and when the power supply circuit of the external protection device is operating normally, the automatic switch opens the power acquisition circuit, and when an abnormal power interruption occurs in the power supply circuit of the external protection device, the automatic switch closes the power acquisition circuit.
[0011] According to a preferred embodiment of the present invention, the apparatus further comprises a storage module for storing the abnormal power-off status information.
[0012] According to a preferred embodiment of the present invention, the storage module is a memory shared with other modules of the external protection device.
[0013] According to a preferred embodiment of the present invention, the power supply device further includes a communication module for transmitting the alarm message to an external receiving device, and a main control module for determining whether an abnormal power outage has occurred based on the operating state of the power acquisition conductive module, and issuing a command to the alarm module based on the determination result.
[0014] According to a preferred embodiment of the present invention, the communication module shares a MAC address and an IP address with the communication module of the external protection device.
[0015] In order to achieve the above object, as a second aspect of the present invention, a power interruption monitoring method is proposed for monitoring and issuing an alarm for an abnormal power interruption of an external protection device that is electrically connected to a protected device and takes over the input / output functions of the protected device, thereby preventing unauthorized data transfer of the protected device, the method including the following steps. providing a dedicated power acquisition port that is not connected to a power supply circuit of the external protection device; and A step of monitoring whether an abnormal power interruption occurs in the external protection device, and if an abnormal power interruption is detected, turning on a power acquisition mode from the dedicated power acquisition port and notifying with an alarm.
[0016] According to a preferred embodiment of the present invention, the dedicated power acquisition port is provided by a power supply circuit of the protected device.
[0017] According to a preferred embodiment of the present invention, the method further comprises the step of obtaining power from the dedicated power obtaining port for storing abnormal power loss status information.
[0018] According to a preferred embodiment of the present invention, the method further comprises the step of obtaining power from the dedicated power obtaining port for transmitting an alarm message to an external receiving device.
[0019] In order to achieve the above object, as a third aspect of the present invention, there is proposed an external protection device that is electrically connected to a protected device and takes over the input / output function of the protected device to prevent unauthorized data transfer of the protected device. The external protection device includes the above-mentioned power interruption monitoring device for monitoring and issuing an alarm for an abnormal power interruption of the external protection device.
[0020] According to a preferred embodiment of the present invention, the power interruption monitoring device is mounted within the housing of the external protection device.
[0021] According to a preferred embodiment of the present invention, the dedicated power acquisition port of the power interruption monitoring device is provided by a USB port of the protected device. Effect of the Invention
[0022] Compared with the prior art, the present invention has at least the following advantageous effects:
[0023] (1) The present invention uses a mutually exclusive power supply design that allows the dedicated power acquisition port to be conductive and operational when the external protection device is abnormally powered off, thereby effectively preventing security issues caused by power outages of the external protection device.
[0024] (2) By providing a storage module, the power interruption monitoring device of the present invention can effectively record the status information of abnormal power interruption and provide data support for subsequent power interruption analysis.
[0025] (3) Since the power interruption monitoring module of the external protection device of the present invention uses a power supply that is mutually exclusive with other modules, a shared memory module can be used, and the simultaneous operation of two systems does not affect the normal operation of the memory. Furthermore, when a dual-port memory device is used, control by an electronic switch is not required.
[0026] (4) The present invention enables effective and timely monitoring by using a communication module provided in the power interruption monitoring device to send an alarm message to an external device such as a server even when the power to the external protection device is interrupted. [Brief description of the drawings]
[0027] [Figure 1] 1 is a schematic configuration diagram of a power interruption monitoring device according to a first embodiment of the present invention, which is applied to an external terminal protection device. [Diagram 2] FIG. 11 is a schematic configuration diagram of a power interruption monitoring device according to a second embodiment of the present invention that is applied to an external terminal protection device. [Diagram 3] FIG. 11 is a schematic configuration diagram of a power interruption monitoring device according to a third embodiment of the present invention, which is applied to an external terminal protection device. [Figure 4] FIG. 11 is a schematic configuration diagram of a power interruption monitoring device according to a fourth embodiment of the present invention, which is applied to an external terminal protection device. [Diagram 5] FIG. 11 is a schematic configuration diagram of a power interruption monitoring device according to a fifth embodiment of the present invention, which is applied to an external terminal protection device. [Figure 6] 4 is a flowchart of a power interruption monitoring method according to an embodiment of the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS
[0028] In order to make the objectives, technical means and advantages of the present invention clearer, the present invention will be described in more detail below with reference to the drawings in conjunction with specific embodiments.
[0029] The present invention proposes a solution to the problem of circumventing the protection mechanism of an external protective device (EPD) caused by power interruption in the conventional technology by monitoring abnormal power interruption of the external protective device (EPD) and issuing an alarm even in a power interruption state, thereby improving the safety of the protected equipment and preventing the problem of circumventing the protection mechanism caused by power interruption of the external protective device. The present invention proposes a power interruption monitoring device, a corresponding power interruption monitoring method, and an external protective device.
[0030] In this invention, an abnormal power outage refers to a situation in which the terminal protection device is powered off without a normal shutdown operation, such as by unplugging the power inlet while the device is on, cutting the power cord, pressing and holding a switch to shut down the device, or cutting the internal circuitry of the terminal protection device.
[0031] The power interruption monitoring device and method of the present invention are specialized for monitoring and alerting of abnormal power interruptions in an external protection device, and the external protection device is electrically connected to a protected device and takes over the input / output functions of the protected device, thereby preventing unauthorized data transfer from the protected device.
[0032] The power interruption monitoring device proposed by the present invention includes at least a power acquisition circuit, a power acquisition conduction module, and an alarm module, the power acquisition circuit being used for connecting the power interruption monitoring device to a dedicated power acquisition port, the dedicated power acquisition port being not connected to a power supply circuit of the external protection device, the power acquisition conduction module being used for monitoring whether an abnormal power interruption has occurred in the external protection device, and when an abnormal power interruption has occurred, making the power acquisition circuit conductive so that the power interruption monitoring device can acquire power via the dedicated power acquisition port and start up, and the alarm module being used for transmitting an alarm message at the start up of the power interruption monitoring device.
[0033] The dedicated power acquisition port may be any power acquisition port that can supply power and is not connected to the power supply circuit of the external protection device. However, in a preferred embodiment, the dedicated power acquisition port is connected to the power supply circuit of the protected device. If a user tries to illegally intrude into the protected device, the power supply of the protected device needs to be normal to read, write, or transmit data, so connecting the dedicated power acquisition port to the power supply circuit of the protected device is a more reliable choice.
[0034] In one embodiment, the dedicated power acquisition port is provided by an interface of an external protection device that is connected to the external protection device, in this way, on the one hand, the connection cable and hardware structure can be simplified, and on the other hand, when the connection cable of the external protection device that is connected to the interface of the protected device has the function of plugging / unplugging detection and alarm, the dedicated power acquisition port can also protect the connection cable.
[0035] In another embodiment, the dedicated power acquisition port of the power interruption monitoring device is provided by the USB interface of the protected device. The power supply can be realized by the conventional 5V USB interface. The power interruption monitoring device is connected to the USB port of the protected device through a power acquisition circuit, and the USB connection cable between the protected device and the power interruption monitoring device can be physically reinforced, or the USB connection voltage can be monitored to realize the insertion and removal of the connection cable.
[0036] The power acquisition conduction module may include an automatic switch connected to the power supply circuit of the external protection device, the automatic switch being realized by, for example, a relay. When the power supply circuit of the external protection device is operating normally, the automatic switch opens the power acquisition circuit, and when an abnormal power interruption occurs in the power supply circuit of the external protection device, the automatic switch closes the power acquisition circuit. For example, a relay is provided in the power supply circuit of the external protection device, and when the power supply circuit of the external protection device is normally supplying power, the relay is controlled to close and turn off the power supply circuit of the power interruption monitoring device, and when the power supply circuit of the external protection device is interrupted, the relay is not closed and turns on the power supply circuit of the power interruption monitoring device.
[0037] The automatic switch of the power acquisition conduction module determines that the external protection device has been abnormally powered off, for example, by detecting whether the voltage difference between the power supply terminal (VCC) and ground (GND) of the power supply circuit of the external protection device is lower than a set voltage threshold.
[0038] It is understood that the power interruption monitoring device of the present invention and other operating modules of the external protection device do not supply power at the same time, which is also called mutually exclusive power supply or mutually exclusive operation mode. That is, when the power supply to the other modules in the external protection device is normal, if the power supply to the power interruption monitoring module is cut off and the other modules in the external protection device are abnormally powered off, the power interruption monitoring device is triggered and started to issue an alarm.
[0039] Therefore, the present invention can effectively prevent security problems caused by power outages of the external protection device by enabling the dedicated power acquisition port to be conductive and operational when the external protection device is abnormally powered off.
[0040] In a preferred embodiment, the power interruption monitoring device comprises a main control module with data processing capability, for example implemented by a microcontroller (MCU), a single board computer (SBC), or a programmable logic controller (PLC), and the main control module can determine whether an abnormal power interruption condition has occurred based on the operating state of the power acquisition conduction module (relay), and issue a command to the alarm module based on the determination result.
[0041] In a preferred embodiment, the alarm module can issue an alarm based on the judgment and command of the main control module, such as an alarm sound, an alarm light and / or a flashing display screen.
[0042] In a preferred embodiment, the power interruption monitoring device further includes a storage module for storing abnormal power interruption status information. The status information includes power interruption time, abnormal power interruption count, and device information. The storage module can be realized by various memories such as RAM or non-volatile memory (EPROM), preferably a dual-port non-volatile memory, and more preferably a flash memory. By providing a storage module, the status information of abnormal power interruption can be effectively recorded and data support can be provided for subsequent power interruption analysis.
[0043] In a preferred embodiment, the memory module is shared with other modules of the external protection device. For example, the memory module can be connected to the power interruption monitoring device and the control module of the external protection device at the same time. Since the power interruption monitoring device and other operating modules of the external protection device are not powered at the same time, the memory module can write information through the control of the power interruption monitoring device and the external protection device, respectively. Since the power interruption monitoring device and the external protection device are powered and operated mutually exclusively, the memory module can use a single port or dual ports, and the simultaneous operation of the two systems will not affect the normal operation of the memory, and no electronic switch is required to control the conduction of different circuits.
[0044] According to a preferred embodiment of the present invention, the power interruption monitoring device further comprises a communication module for transmitting the alarm message to an external receiving device. For example, the external receiving device is a server or a client of a control center, such as an authority management server, a staff client, etc. Specifically, the power interruption monitoring device can transmit an alarm message to a management server via the communication module. The communication module is a device capable of communicating through conventional communication technologies, such as a wired network, a wireless network, Bluetooth, etc.
[0045] According to a preferred embodiment of the present invention, the communication module is a network communication module, and shares a MAC address and an IP address with the network communication module of the external protection device, that is, the communication module of the power interruption monitoring device and the communication module of the external protection device more preferably share a MAC address and an IP address of a network port, so as to adopt a shared network port design.
[0046] The present invention also discloses a power interruption monitoring method for monitoring and issuing an alarm for an abnormal power interruption in an external protection device that is electrically connected to a protected device and takes over the input / output functions of the protected device, thereby preventing unauthorized data transfer of the protected device, the method including the steps of providing a dedicated power acquisition port that is not connected to a power supply circuit of the external protection device, and monitoring whether an abnormal power interruption has occurred in the external protection device, and if an abnormal power interruption is detected, turning on a power acquisition mode from the dedicated power acquisition port and issuing an alarm.
[0047] In a preferred embodiment, power is obtained from the dedicated power acquisition port for storing abnormal power loss status information. In another preferred embodiment, power is obtained from the dedicated power acquisition port for transmitting alarm messages to an external receiving device.
[0048] Preferably, when an abnormal power failure is detected, the stored operation status information of the device is updated, changed to status information indicating "abnormal power failure", and a warning message is notified. In order to prevent a user from maliciously disconnecting the communication line to block the notification, the status information of "abnormal power failure" can be set to be cleared after a confirmation message of successful notification is received.
[0049] The present invention also proposes an external protection device that is electrically connected to a protected device and takes over the input / output functions of the protected device to prevent unauthorized data transfer of the protected device. The external protection device further includes the above-mentioned power interruption monitoring device for monitoring and issuing an alarm for an abnormal power interruption of the external protection device.
[0050] The power interruption monitoring device can operate as an external device of the external protection device, but in a preferred embodiment, the power interruption monitoring device is mounted inside the housing of the external protection device. In other words, the power interruption monitoring device can operate independently, but can also be mounted inside the housing as an additional device of the external protection device, which reduces the possibility of the power interruption monitoring device being maliciously turned off, improves security protection performance, and simplifies the device structure.
[0051] As described above, the dedicated power acquisition port of the power interruption monitoring device is provided by the USB port of the protected device, so that the circuit of the power interruption monitoring device for connecting to the dedicated power acquisition port can be integrated into the connection interface between the external protection device and the protected device.
[0052] Hereinafter, exemplary embodiments will be described in detail with reference to the accompanying drawings. Although the drawings show exemplary embodiments of the present invention, it will be understood that the present invention may be implemented in a variety of forms, and the present invention should not be construed as being limited to the examples described herein. On the contrary, these implementation examples are provided to more completely understand the contents of the present invention and to comprehensively convey the scope of the present invention to those skilled in the art.
[0053] As used herein, the term "and / or" is merely an association relationship describing related elements, and indicates that three relationships can exist, for example, "A and / or B" can indicate three situations: A exists alone, A and B exist together, and B exists alone. Also, as used herein, the symbol " / " generally indicates that the related elements before and after are in an "or" relationship. EXAMPLES
[0054] Example 1 1 is a schematic diagram of a power interruption monitoring device according to a first embodiment of the present invention, which is applied to an external terminal protection device. As shown in FIG. 1, a power interruption monitoring device 300 is used to monitor and issue an alarm for an abnormal power interruption of an external protection device 100. The external protection device 100 is connected to a corresponding interface of a protected device 200 via an internal interface 102, and accesses one or more external devices via an external interface 101. The internal interface 102 and the external interface 101 may be one or more, and the connection relationship of the interfaces is shown only by blocks in the figure, and the actual type and number of interfaces may change according to a specific application scenario.
[0055] As shown in Fig. 1, the external protection device 100 and the protected device 200 are powered by their own power sources. The external protection device 100 is electrically connected to the protected device 200 through an internal interface, and when an external device needs to access the protected device, it needs to be connected to one or more external interfaces 101 of the external protection device 100, and accesses the protected device 200 under the security control of the external protection device 100, and takes over the input / output function of the protected device 200 to prevent unauthorized data transfer of the protected device. The configuration and operation method of the external protection device 100 can use any configuration or method of the prior art, and are not limited in the present invention.
[0056] Furthermore, in the first embodiment, the power interruption monitoring device 300 includes a power acquisition circuit 301, a power acquisition conduction module 302, and an alarm module 303. The power acquisition circuit 301 is used to connect the power interruption monitoring device 300 to a dedicated power acquisition port 201, and the dedicated power acquisition port 201 is connected to a power supply circuit in the protected device 200. It is noteworthy that when both the external protection device 100 and the protected device 200 are powered on and operating normally, the power acquisition circuit 301 is opened, and therefore the alarm module 303 in the power interruption monitoring device 300 does not operate.
[0057] The power acquisition conduction module 302 is located in the external protection device 100, and monitors whether an abnormal power interruption has occurred in the external protection device 100. When an abnormal power interruption is detected, the power acquisition circuit 301 is made conductive, and the power interruption monitoring device 300 is started by acquiring power from the dedicated power acquisition port 201, and the alarm module 303 transmits an alarm message when the power interruption monitoring device 300 is started. It has been found that the power interruption monitoring device 300 of this embodiment uses a mutually exclusive power supply design with other operating modules of the external protection device 100, and can operate by making the dedicated power acquisition port 201 conductive when the external protection device 100 is abnormally powered off, thereby effectively preventing security problems caused by power interruption of the external protection device 100.
[0058] As described above, the dedicated power acquisition port 201 in this embodiment 1 is connected to the power supply circuit in the protected device 200. However, the present invention is not limited to this, and one of the objects of the present invention is to prevent a problem in which effective security control cannot be performed when the external protection device 100 is abnormally powered off, and therefore the dedicated power acquisition port 201 of the power interruption monitoring device 300 of the present invention is connected to a safer power supply circuit without being connected to the power supply circuit of the external protection device. This safer power supply circuit may be, for example, a backup power source, a backup battery, a wireless power supply, or other safe power supply devices. The dedicated power acquisition port 201 in this embodiment is provided by the power supply circuit of the protected device 200, which is a more reliable choice. The advantage is that when a user tries to illegally invade the protected device, the power supply of the protected device must be normal in order to read, write, or transmit data.
[0059] 1 only shows a schematic diagram of a dedicated power acquisition port 201 of a protected device 200 according to a first embodiment. The dedicated power acquisition port 201 can be any contact on the power supply circuit of the protected device, but more preferably, is a contact that does not substantially affect the internal circuit structure of the protected device. The dedicated power acquisition port can be a direct circuit pin, or can utilize any conventional port pin that can supply power, such as a USB interface or a serial port connected to a power supply circuit.
[0060] In this embodiment 1, the power acquisition conductive module 302 includes an automatic switch connected to the power detection port 103 of the external protection device 100, and the automatic switch is realized by, for example, a relay. The power detection port 103 is a contact on the power supply electric circuit (not shown) of the external protection device 100, and the electrical performance (for example, voltage change) of the contact is directly related to whether the power supply of the external protection device 100 is cut off or not, but is not limited to a specific connection position. For example, it can be directly connected to the output end of the power supply, or can be connected to various interfaces directly related to the power supply, such as a USB port or a serial port.
[0061] The automatic switch of the first embodiment includes a control end and two connection ends, the control end is electrically connected to the power detection port 103, and the two connection ends are respectively connected to the dedicated power acquisition port 201 and the alarm module 303. When the power detection port 103 connected to the control end has a high voltage higher than a threshold (indicating that the power of the external protection device 100 is normally supplied), the automatic switch is in an OFF state. When the power detection port 103 connected to the control end has a low voltage lower than a threshold (indicating that the power supply of the external protection device 100 is stopped), the automatic switch is automatically switched to an ON state. Thus, the power acquisition conduction module 302 monitors whether an abnormal power interruption occurs in the external protection device 100, and when an abnormal power interruption is detected, the power acquisition circuit 301 is turned on to supply power to the alarm module 303, so that the power interruption monitoring device 300 obtains power from the dedicated power acquisition port 201 and starts up.
[0062] In this embodiment 1, the alarm module 303 issues an alarm message when the power interruption monitoring device 300 is started up, i.e., when the automatic switch is automatically switched to the on state, the alarm module 303 issues an alarm message immediately after obtaining power. The present invention is not limited to a method of transmitting an alarm message, and includes various methods of transmitting an alarm message using sound, light, or electricity as a medium, such as sounding an alarm, lighting an alarm, making a call, sending a message to a specific terminal, etc. In one embodiment, the alarm module 303 is equipped with a speaker and an LED light, and automatically sounds an alarm and / or lights an alarm when the power is turned on.
[0063] In another embodiment, the dedicated power acquisition port 201 also has a message input terminal / pin, so that the dedicated power acquisition port 201 can receive a message sent by the power interruption monitoring device 300 when the power interruption monitoring device 300 is started. Thus, the alarm module 303 may have a signal generating module, which sends a specific alarm message to the dedicated power acquisition port 201 when the alarm module 303 is powered on, so that the protected device 200 can issue a specific alarm after receiving the alarm message, for example, an alarm device provided in the protected device 200 itself issues an alarm, such as an alarm sound, flashing a display screen, etc.
[0064] In the first embodiment, the alarm module 303 and the automatic switch of the power acquisition conduction module 302 are both arranged outside the external protection device 100, so that both can be constructed as independent devices with housings, one end of which is connected to the dedicated power acquisition port 201 (e.g., a USB interface) of the protected device, and the other end is connected to the power detection port 103 (also e.g., a USB port) of the external protection device 100. It can be seen that this embodiment realizes the addition of an additional power interruption detection device based on the existing external protection device, and facilitates the upgrade of the existing external protection device to a device having abnormal power interruption protection function.
[0065] Example 2 FIG. 2 is a schematic diagram of a power interruption monitoring device according to a second embodiment of the present invention, which is applied to an external terminal protection device. As shown in FIG. 2, unlike the first embodiment, the alarm module 303 and the automatic switch of the power acquisition conductive module 302 of the second embodiment are both arranged inside the external protection device 100, in other words, the power interruption monitoring device 300 according to the second embodiment is installed in the housing of the external protection device 100. The power acquisition circuit 301 can be connected to the dedicated power acquisition port 201 of the protected device 200 through the interface of the external protection device 100, and the dedicated power acquisition port 201 is similarly connected to the power supply circuit in the protected device 200. The interface of the external protection device 100 that the power acquisition circuit 301 uses can be a dedicated power interface, and can also use a data interface such as a serial port, a USB port, etc.
[0066] In the second embodiment, the target alarm module 303 can be realized by utilizing an alarm device of the external protection device 100 itself, such as a speaker, an LED light, and the like.
[0067] It can be seen that in this embodiment, the power interruption monitoring device 300 is not implemented as an independent device, but is realized as a module included in the power interruption monitoring device 300. In this way, the power interruption monitoring device 300 can be realized by improving the hardware configuration inside the external protection device 100 without adding an independent device, and the wiring method becomes simpler.
[0068] Example 3 3 is a schematic diagram of a power interruption monitoring device according to a third embodiment of the present invention, which is applied to an external terminal protection device. As shown in FIG. 3, based on the second embodiment, a power acquisition circuit 301 of the third embodiment is connected to a dedicated power acquisition port 201 of a protected device 200 via an internal interface 102 of an external protection device 100, and the dedicated power acquisition port 201 is similarly connected to a power supply circuit in the protected device 200.
[0069] The internal interface of the external protection device 100 is an existing interface having a specific function, and is electrically connected to the protected device 200. The electrical continuity / non-continuity is controlled under the control of the internal control module of the external protection device 100, so that data input from the outside is accessed to the protected device 200 via the external protection device 100. The internal interface 102 is a general term for one or more interfaces, and may be a USB interface, a serial port, a network port, etc., and is itself connected to the internal power supply circuit of the protected device 200. Based on this, the present invention uses one interface (e.g., a USB interface) of the internal interfaces 102 as a dedicated power acquisition port 201, or adds an interface dedicated to connection to the dedicated power acquisition port 201 to be one of the internal interfaces 102. When one interface (e.g., a USB interface) of the internal interfaces 102 is used as the dedicated power acquisition port 201, the interface is used as a data exchange interface during normal operation of the external protection device, and when the power supply of the external protection device is cut off, the interface is supplied with power to a power cut monitoring device, thereby realizing sharing of the interface.
[0070] Unlike the other interfaces of the internal interface 102, the internal interface for connection to the power acquisition circuit 301 is connected to an automatic switch having a power interruption monitoring function, and the power supply directly controls the continuity / non-continuity, while the other internal interfaces usually have their continuity / non-continuity controlled by a dedicated interface control module.
[0071] Compared with Example 2, it can be seen that Example 3 increases the power interruption monitoring function without increasing the number of interfaces of the external protection device by sharing the interface and circuit, and further simplifies the circuit and hardware connection structure. In addition, if the connection cable of the external protection device connected to the interface of the protected device has a plug / unplug detection and alarm function, it also protects the connection cable of the dedicated power acquisition port.
[0072] Example 4 4 is a schematic diagram of a power interruption monitoring device according to a fourth embodiment of the present invention, which is applied to an external terminal protection device. As shown in FIG. 4, the power interruption monitoring device of this embodiment also includes a storage module 304 and a communication module 305. Both are connected to one end of the automatic switch as the power acquisition conduction module 302, as well as the alarm module 303. The storage module 304 is used to store status information of abnormal power interruption, and the communication module 305 is used to transmit the alarm message to an external receiving device.
[0073] The storage module 304 can be realized by any memory, such as a dual-port non-volatile memory, such as a RAM or a flash, or other general-purpose storage device. The abnormal power-off status information is information indicating an abnormal power-off of the external protection device 100. As described above, an abnormal power-off means a situation in which the external protection device 100 is powered off without a normal shutdown operation, such as unplugging the power inlet under a power-on state, cutting the power cord, or pressing and holding a switch to shut down, or cutting the internal circuit of the terminal protection device. In one embodiment, the abnormal power-off status information is a status record in which the operations of the protected device 200 and the external protection device 100 are inconsistent. That is, the information on the power-on / off state of the protected device and the operation status of the terminal protection device under two operation states (power on of the external terminal protection device, power off of the external protection device) is stored. When the power-off monitoring device is activated, an abnormal power-off event occurs in the external protection device 100, and the external protection device 100 successfully acquires power from the protected device 200, which indicates that the operation states of the two are inconsistent at this point. For example, a data bit "1" indicates a mismatch in operating status.
[0074] In a further embodiment, additional status information can be stored in the storage module, for example, the time when the inconsistency in the operating state occurs can be stored in the storage module, and an additional sensor can be added and the change in voltage or current when the power failure of the external protection device 100 occurs detected by the sensor can be recorded. This can effectively record the status information of the abnormal power failure and provide data support for subsequent power failure analysis. Preferably, the storage module 304 is a memory shared with other modules of the external protection device 100. In this case, the memory can be a shared memory that can be accessed by both the power failure monitoring module and the external protection device 100. Since the power failure monitoring module and the external protection device 100 operate mutually exclusive, when a shared memory is used, the simultaneous operation of the two systems does not affect the normal operation of the memory. Preferably, a dual-port memory device can be used, in which case control by an electronic switch is not required.
[0075] The communication module 305 is used to transmit the alarm message to an external receiving device. The external receiving device can be any device capable of receiving a message, such as a server in a control center, or a client of a staff member of the control center. The server is, for example, an authority management server of an external protection device. Specifically, the power interruption monitoring device can transmit an alarm message to a server or a client via the communication module. The communication module 305 is a device capable of communicating through conventional communication technologies, such as a wired network, a wireless network, Bluetooth, etc.
[0076] In a preferred embodiment of the present invention, the communication module 305 is a network communication module, and shares a MAC address and an IP address with the network communication module of the external protection device 100. That is, the communication module 305 of the power interruption monitoring device 300 and the communication module of the external protection device 100 more preferably share the MAC address and IP address of a network port, so that a shared network port design is adopted.
[0077] Example 5 FIG. 5 is a schematic diagram of a power interruption monitoring device according to a fifth embodiment of the present invention, which is applied to an external terminal protection device. As shown in FIG. 5, the power interruption monitoring device 300 of this embodiment includes a main control module 306 having a data processing function, which is realized by, for example, a microcontroller (MCU), a single board computer (SBC), or a programmable logic controller (PLC). The alarm module 303, the memory module 304, and the communication module 305 are all connected to the main control module 306 so as to operate under the control of the main control module 306. The main control module 306 is connected to one end of the automatic switch as the power acquisition conduction module 302, so that it can determine whether an abnormal power interruption state has occurred through the conduction state of the automatic switch, and issue a command to the alarm module based on the determination result.
[0078] In addition, since the main control module 306 has a data processing function, more predetermined functions can be executed through the main control module 306. For example, when the main control module 306 is powered on, it can control the alarm mode of the alarm module 303, it can control the status information recorded in the memory module 304, and it can control where and what type of alarm message the communication module 305 sends.
[0079] This embodiment is a specific configuration of an external terminal protection device. As shown in Fig. 5, the external protection device 100 includes a system control board 106 and an interface control board, and the system control board 106 is electrically connected to the interface control board.
[0080] Both the external interface 101 and the internal interface 102 are disposed on an interface control board. A system control board 106 controls security authentication of external devices connected to one or more external interfaces on the interface control board. The interface control board includes an AD collection module 105 and a switching chip 104, and also includes a storage module 304 shared with the power interruption monitoring device of the present invention. The AD collection module 105 detects the state of each interface, and the switching chip 104 is responsible for communication between the protected host, the external protection device, and the external device (remote control center). Each interface connection hardware on the interface control board supports two control modes corresponding to two functions in using a USB device, namely, importing and exporting USB data, and directly connecting a USB device.
[0081] For the respective modules of the external protection device 100, the connection method of the components, and the functions realized therein, please refer to related prior art documents such as Patent Document 2. Therefore, detailed description thereof will be omitted here.
[0082] In a preferred embodiment, the main control module 306 can be designed and implemented using a single-chip microcomputer, and supports an Ethernet interface; the communication module 305 is implemented by a shared network port; and the inside is designed with two separate systems, one system is connected to the internal interface of the external protection device and used to implement normal business logic; and the other system is connected to the main control module 306 of the power interruption monitoring device 300 and used by the power interruption monitoring device 300 to report an abnormal power interruption operating status to an external device (server side) via a network; the interface control board and the power interruption monitoring device operate mutually exclusively, so that the simultaneous operation of the two systems will not affect the normal communication of the network port of the internal interface of the interface control board.
[0083] In order to prevent the occurrence of abnormal situations anticipated by switches or other security devices using the same shared network port and different Ethernet MAC addresses, the power interruption monitoring device supports a clone function for the IP and MAC addresses of the network port, thereby ensuring consistency between the external communication IP and MAC addresses of the power interruption monitoring device and external protection device 100.
[0084] More preferably, when the interface control board finds an abnormal state of the network port, it updates the device's operating status stored in the memory on the interface control board, and clears the device's abnormal state after the reporting is successful, in order to prevent a user from maliciously pulling out the network cable of the network port to prevent the user from blocking the reporting of the situation. Still referring to Fig. 6, in this embodiment 5, the protected device and the external protection device are connected to the port that needs to be protected through the connection cable, and the external protection device is connected to the server through the communication module 305 (network interface), receives control commands and strategies from the server through the network, and reports the operating status and log data to the server through the network.
[0085] Example 6 6 is a flow chart of a power interruption monitoring method according to an embodiment of the present invention, which is used to monitor and issue an alarm for abnormal power interruption of an external protection device.
[0086] As shown in Figure 6, after the protected device is powered on, the external protection device detects the interface voltage state of the protected device through the connection cable between the protected device and the external protection device, and determines the power on / off state of the protected device based on this.
[0087] When the external protection device 100 is also in a power-on state, its internal system control board 106 cuts off the power supply to the power interruption monitoring device 300 through the power detection port 103 of the interface control board and the automatic switch as the power acquisition conduction module 302, and the alarm module 303, main control module 306, etc. connected to the automatic switch of the power interruption monitoring device 300 are in a non-operating state. The external protection device 100 checks whether there is abnormal status information in the shared memory module 304, and the memory module 304 is designed to record the discrepancy information of the operation status of the power interruption monitoring device 300 and the external protection device 100. If it is found that there is record information of discrepancy of the operation status, the external protection device 100 will report to the server through the network and prohibit the use of the related functions of the external protection device 100 until the server returns a report success. After the report is completed, the external protection device 100 will wait for the server control command and operation strategy.
[0088] When the external protection device 100 is in a power-off state, power is supplied from the dedicated power acquisition port 201 of the protected device due to the conduction of the power acquisition circuit 301 and the power acquisition continuity module 302, and the alarm module 303 and the main control module 306 connected to the automatic switch of the power interruption monitoring device 300 are in an operating state. The main control module 306 checks for abnormal operation status information (status record information of mismatch of operation status) in the storage module 304. If abnormal operation status information is found, the main control module 306 controls the communication module 305 to notify the server of all status record information of the mismatch of the operation status of the protected device and the external protection device 100, and records the current mismatch of the operation status in the storage module 304. When the server returns a successful report, the notified record is deleted. If the report fails, the report failure record is updated in the storage module 304.
[0089] The above specific embodiments further explain the objectives, technical means, and advantageous effects of the present invention, but it will be understood that the present invention is not inherently related to a specific computer, virtual device, or electronic device, and can be realized in various general-purpose devices. The above are only specific examples of the present invention, and are not intended to limit the present invention. Modifications, equivalent replacements, improvements, etc. made without departing from the spirit and principles of the present invention are also included in the protection scope of the present invention. [Explanation of symbols]
[0090] 100 External protection devices 101 External Interface 102 Internal Interface 103 Power Detect Port 104 Switching Chip 105 AD Collection Module 106 System Control Board 200 Protected Equipment 201 Dedicated power acquisition port 300 Power failure monitoring device 301 Power acquisition circuit 302 Power Acquisition Conduction Module 303 Alarm Module 303 Alarm Module 304 Memory Module 305 Communication Module 306 Control Module
Claims
1. A power interruption monitoring device for monitoring and issuing a warning of an abnormal power interruption of an external protection device that is electrically connected to a protection target device and takes over an input / output function of the protection target device to prevent unauthorized data transfer of the protection target device, The power interruption monitoring device comprises a power acquisition circuit, a power acquisition conduction module, and an alarm module, the power acquisition circuit is used to connect the power interruption monitoring device to a dedicated power acquisition port, and the dedicated power acquisition port is not connected to a power supply circuit of the external protection device; the power acquisition conduction module is used to monitor whether an abnormal power interruption has occurred in the external protection device, and when an abnormal power interruption is detected, to make the power acquisition circuit conductive so that the power interruption monitoring device can acquire power via a dedicated power acquisition port and start up; The alarm module is used to send an alarm message at the start of the power interruption monitoring device. A power interruption monitoring device comprising:
2. 2. The power interruption monitoring device according to claim 1, wherein the dedicated power acquisition port is provided by a power supply circuit of the protected device.
3. The power acquisition conduction module includes an automatic switch whose control end is connected to a power supply circuit of the external protection device; When the power supply circuit of the external protection device is operating normally, the automatic switch opens the power acquisition circuit, and when an abnormal power interruption occurs in the power supply circuit of the external protection device, the automatic switch closes the power acquisition circuit.
2. The power interruption monitoring device according to claim 1.
4. 2. The power interruption monitoring device of claim 1, further comprising a storage module for storing abnormal power interruption status information.
5. 5. The power interruption monitoring device according to claim 4, wherein the storage module is a memory shared with other modules of the external protection device.
6. a communication module for transmitting the alert message to an external receiving device; a main control module for determining whether an abnormal power interruption state has occurred based on the operation state of the power acquisition conduction module, and issuing a command to the alarm module based on the determination result; The power interruption monitoring device according to claim 1 , further comprising:
7. 7. The power interruption monitoring device according to claim 6, wherein the communication module shares a MAC address and an IP address with the communication module of the external protection device.
8. A power interruption monitoring method for monitoring and issuing a warning of an abnormal power interruption of an external protection device that is electrically connected to a protected device and takes over an input / output function of the protected device to prevent unauthorized data transfer of the protected device, providing a dedicated power acquisition port that is not connected to a power supply circuit of the external protection device; monitoring whether an abnormal power interruption occurs in the external protection device, and when an abnormal power interruption is detected, turning on a power acquisition mode from the dedicated power acquisition port and notifying by an alarm; A power interruption monitoring method comprising:
9. 9. The method of claim 8, wherein the dedicated power acquisition port is provided by a power supply circuit of the protected device.
10. 9. The method of claim 8, further comprising the step of obtaining power from the dedicated power obtaining port for storing abnormal power failure status information.
11. 9. The power interruption monitoring method of claim 8, further comprising the step of obtaining power from the dedicated power obtaining port for transmitting an alarm message to an external receiving device.
12. An external protection device that is electrically connected to a protection target device and takes over an input / output function of the protection target device to prevent unauthorized data transfer of the protection target device, An external protection device comprising the power interruption monitoring device according to any one of claims 1 to 7 for monitoring and issuing an alarm for an abnormal power interruption in the external protection device.
13. 13. The external protection device according to claim 12, wherein the power interruption monitoring device is mounted inside a housing of the external protection device.
14. 13. The external protection device of claim 12, wherein the dedicated power acquisition port of the power interruption monitoring device is provided by a USB port of the protected device.
Citation Information
Patent Citations
Method and device for protecting serial port connector of commercial unit
CN103368007A
Information processor
JP2011186662A
External terminal protection device and protection system
JP2021522616A
External connection type terminal protection device and protection system
WO2020087781A1
