Power interruption monitoring device, method and external protection device

Abstract

An object of the present invention is to provide a power interruption monitoring device, method, and external protection device. [Solution] The power interruption monitoring device is used to monitor and issue an alarm for an abnormal power interruption of an external protection device, and comprises a power acquisition circuit, a power acquisition conduction module, and an alarm module, the power acquisition circuit is used to connect the power interruption monitoring device to a dedicated power acquisition port, and the dedicated power acquisition port is not connected to a power supply circuit of the external protection device, the power acquisition conduction module is used to monitor whether an abnormal power interruption has occurred in the external protection device, and when an abnormal power interruption has occurred, makes the power acquisition circuit conductive so that the power interruption monitoring device can acquire power via the dedicated power acquisition port and start up, and the alarm module is used to send an alarm message when the power interruption monitoring device starts up. The present invention uses a mutually exclusive power supply design to enable the dedicated power acquisition port to be conductive and operate when the external protection device is abnormally powered off, thereby effectively preventing security problems caused by power interruption of the external protection device.

Description

Technical Field

[0001] The present invention belongs to the technical field of device security protection, and particularly relates to a power-off monitoring device and method for an external protection device, and a corresponding external protection device.

Background Art

[0002] In recent years, with the development of computer and network technologies, the popularity of networks has advanced significantly. While people enjoy the convenience brought by the network, they also face new threats to network security and data security. Common threats include the intrusion of malicious code, virus / Trojan horse infection, DDoS attacks, information theft by hackers, unauthorized access, impersonation of legitimate users, destruction of data integrity, interference with the normal operation of the system, spread of viruses using the network, man-in-the-middle attacks, and the like.

[0003] To solve network security or data security problems, there are many technical means such as installing and using network security products such as black / white lists, traffic control software, firewalls, antivirus measures, and intrusion detection systems on hosts. However, even with the above measures, various security incidents occur frequently. According to statistics, 70% of security incidents are caused by the illegal use of major resources such as hosts by internal personnel, and only 30% of the actual threats come from the outside. Since internal personnel lack security awareness when using hosts and are behind the firewall, access to various external devices is not standardized, and virus or Trojan horse backdoors are embedded, which may lead to data leakage, virus infection, system crashes, and even network paralysis. In addition, incorrect operations or intentional destruction of the system may also cause adverse effects and significant losses.

[0004] In addition, in the case of some special devices, such as hosts equipped with special software control, engineering workstations / operator stations in specific industrial fields, there may be no suitable security protection software on the market, or installing security software may easily cause compatibility problems with the existing software on the host, and may further affect performance. Note that after the production operation of these engineering workstations or operator station hosts, the operating system is basically not upgraded, and even after installing security software, the software version and malicious code library are often not updated in a timely manner, resulting in a decline in the security protection effect and efficiency.

[0005] Therefore, in the prior art, an external terminal protection device (also called an external protection device) and a corresponding protection system (Patent Document 1) for solving the above problems are disclosed. The external protection device (External Protective Device, EPD) takes over each interface of the protected device (Protected Device, PD), and enables an external device that needs to access various interfaces of the protected device to access it as long as it is connected to the external protection device, so as to achieve the purpose of protecting the protected device without installing security protection software on the protected device. However, since the external protection device and the protected device are each independently powered, there is a possibility that a malicious user may cut off the power supply of the external protection device to avoid the protected device from being safely monitored and achieve the purpose of destroying the protected device.

Prior Art Documents

Patent Documents

[0006]

Patent Document 1

Patent Document 2

SUMMARY OF THE INVENTION

PROBLEMS TO BE SOLVED BY THE INVENTION

[0007] Therefore, in order to improve the safety of the device to be protected, how to monitor the abnormal power-off of the external protection device and notify it with an alarm even under the power-off state has become an urgent problem. The main object of the present invention is to provide a power-off monitoring device, a power-off monitoring method, and a corresponding external protection device to at least partially solve the above technical problems.

MEANS FOR SOLVING THE PROBLEMS

[0008] To achieve the above object, as a first aspect of the present invention, there is proposed a power-off monitoring device for monitoring and alarming an abnormal power-off of an external protection device that is electrically connected to a device to be protected and takes over the input / output functions of the device to be protected to prevent unauthorized data transfer of the device to be protected. The power-off monitoring device includes a power acquisition circuit, a power acquisition conduction module, and an alarm module. The power acquisition circuit is used to connect the power-off monitoring device to a dedicated power acquisition port, and the dedicated power acquisition port is not connected to the power supply circuit of the external protection device. The power acquisition conduction module monitors whether an abnormal power-off has occurred in the external protection device. When the occurrence of an abnormal power-off is detected, the power acquisition conduction module conducts the power acquisition circuit so that the power-off monitoring device can acquire power through the dedicated power acquisition port and start up. The alarm module is used to transmit an alarm message at the startup of the power-off monitoring device.

[0009] According to a preferred embodiment of the present invention, the dedicated power acquisition port is provided by the power supply circuit of the device to be protected.

[0010] According to a preferred embodiment of the present invention, the power acquisition conduction module includes an automatic switch whose control terminal is connected to the power supply circuit of the external protection device. When the power supply circuit of the external protection device is operating normally, the automatic switch opens the power acquisition circuit. When an abnormal power failure occurs in the power supply circuit of the external protection device, the automatic switch closes the power acquisition circuit.

[0011] According to a preferred embodiment of the present invention, it further includes a storage module for storing status information of abnormal power failure.

[0012] According to a preferred embodiment of the present invention, the storage module is a memory shared with other modules of the external protection device.

[0013] According to a preferred embodiment of the present invention, it further includes a communication module for transmitting the alarm message to an external receiving device, and a main control module for determining whether an abnormal power failure state has occurred based on the operating state of the power acquisition conduction module and issuing a command to the alarm module based on the determination result.

[0014] According to a preferred embodiment of the present invention, the communication module shares the MAC address and IP address with the communication module of the external protection device.

[0015] To achieve the above object, as a second aspect of the present invention, there is proposed a power failure monitoring method for monitoring and alarming abnormal power failure of an external protection device that is electrically connected to a device to be protected and takes over the input / output functions of the device to be protected to prevent unauthorized data transfer of the device to be protected. The method includes the following steps. The step of preparing a dedicated power acquisition port not connected to the power supply circuit of the external protection device, and Monitoring whether an abnormal power failure has occurred in the external protection device, and when an abnormal power failure is monitored, turning on the power acquisition mode from the dedicated power acquisition port and notifying by alarm.

[0016] According to a preferred embodiment of the present invention, the dedicated power acquisition port is provided by the power supply circuit of the device to be protected.

[0017] According to a preferred embodiment of the present invention, the method further includes obtaining power from the dedicated power acquisition port in order to store status information of an abnormal power outage.

[0018] According to a preferred embodiment of the present invention, the method further includes obtaining power from the dedicated power acquisition port in order to transmit an alarm message to an external receiving device.

[0019] To achieve the above object, as a third aspect of the present invention, there is proposed an external protection device that is electrically connected to a device to be protected and takes over the input / output functions of the device to be protected, thereby preventing unauthorized data transfer of the device to be protected. The external protection device includes the above-described power outage monitoring device for monitoring and alarming an abnormal power outage of the external protection device.

[0020] According to a preferred embodiment of the present invention, the power outage monitoring device is mounted inside the housing of the external protection device.

[0021] According to a preferred embodiment of the present invention, the dedicated power acquisition port of the power outage monitoring device is provided by the USB port of the device to be protected.

Advantages of the Invention

[0022] Compared with the prior art, the present invention has at least the following advantageous effects.

[0023] (1) According to the present invention, due to the mutually exclusive power supply design, when the external protection device is abnormally powered off, the dedicated power acquisition port can be conducted and operated, so that security problems caused by the power outage of the external protection device can be effectively prevented.

[0024] (2) By providing a storage module, the power failure monitoring device of the present invention can effectively record the status information of abnormal power failures and provide data support for subsequent power failure analysis.

[0025] (3) In the present invention, since the power failure monitoring module of the external protection device uses mutually exclusive power supply with other modules, a shared storage module can be used, and the normal operation of the memory is not affected by the simultaneous operation of two systems. Moreover, when using a dual-port memory device, control by an electronic switch is not required.

[0026] (4) In the present invention, the communication module provided in the power failure monitoring device can transmit an alarm message to an external device such as a server even when the power supply of the external protection device fails, thereby realizing effective and timely monitoring.

Brief Description of the Drawings

[0027]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Modes for Carrying Out the Invention

[0028] To make the objectives, technical means, and advantages of the present invention clearer, the present invention will be described in more detail below with reference to specific embodiments and the accompanying drawings.

[0029] Regarding monitoring the abnormal power-off of an External Protective Device (EPD) in the prior art and being able to give an alarm even in the power-off state, thereby improving the safety of the device to be protected and preventing the problem of avoiding the protection mechanism due to the power-off of the external protective device, the present invention proposes a solution means, namely, a power-off monitoring device, a corresponding power-off monitoring method, and an external protective device.

[0030] The abnormal power-off referred to in the present invention means a situation where the terminal protection device is powered off without a normal shutdown operation. For example, pulling out the power inlet under the power-on state, cutting the power cord, or long-pressing the switch to shut down, or cutting the internal circuit of the terminal protection device, etc.

[0031] The power-off monitoring device and method in the present invention are specialized for monitoring and alarming the abnormal power-off of the external protective device. The external protective device is electrically connected to the device to be protected and takes over the input / output functions of the device to be protected, thereby preventing unauthorized data transfer of the device to be protected.

[0032] The power-off monitoring device proposed by the present invention includes at least a power acquisition circuit, a power acquisition conduction module, and an alarm module. The power acquisition circuit is used to connect the power-off monitoring device to a dedicated power acquisition port, and the dedicated power acquisition port is not connected to the power supply circuit of the external protective device. The power acquisition conduction module monitors whether an abnormal power-off has occurred in the external protective device. When the occurrence of an abnormal power-off is detected, it is used to conduct the power acquisition circuit so that the power-off monitoring device can obtain power through the dedicated power acquisition port and start up. The alarm module is used to send an alarm message when the power-off monitoring device starts up.

[0033] The dedicated power acquisition port may be any power acquisition port that can supply power not connected to the power supply circuit of the external protection device. However, as a preferred embodiment, the dedicated power acquisition port is connected to the power supply circuit of the device to be protected. When a user attempts to illegally access the device to be protected, the power supply of the device to be protected needs to be normal for data reading, writing, or transmission. Therefore, connecting the dedicated power acquisition port to the power supply circuit of the device to be protected is a more reliable choice.

[0034] As one embodiment, the dedicated power acquisition port is provided by the interface of the external protection device connected to the external protection device. In this way, on the one hand, the connection cable and the hardware structure can be simplified. On the other hand, when the connection cable of the external protection device connected to the interface of the device to be protected has a plugging and unplugging detection and alarm function, the function of protecting the connection cable of the dedicated power acquisition port also works.

[0035] As another embodiment, the dedicated power acquisition port of the power-off monitoring device is provided by the USB interface of the device to be protected. Power supply can be realized with the conventional 5V USB interface. The power-off monitoring device is connected to the USB port of the device to be protected through a power acquisition circuit. In addition to using physical reinforcement methods for the USB connection cable between the device to be protected and the power-off monitoring device, it is also possible to realize the monitoring of the plugging and unplugging of the connection cable through the voltage monitoring of the USB connection.

[0036] The power acquisition conduction module may include an automatic switch connected to the power supply circuit of the external protection device, and the automatic switch is realized by, for example, a relay. When the power supply circuit of the external protection device is operating normally, the automatic switch opens the power acquisition circuit. When an abnormal power cut occurs in the power supply circuit of the external protection device, the automatic switch closes the power acquisition circuit. For example, a relay is provided in the power supply circuit of the external protection device. When the power supply circuit of the external protection device is supplying power normally, the relay is closed to control the power supply circuit of the power cut monitoring device to be turned off. When the power supply circuit of the external protection device is powered off, the relay does not close and turns on the power supply circuit of the power cut monitoring device.

[0037] The automatic switch of the power acquisition conduction module detects, for example, whether the voltage difference between the power supply terminal (VCC) and the ground (GND) of the power supply circuit of the external protection device is lower than a set voltage threshold, and determines that the external protection device has been abnormally powered off.

[0038] It can be seen that the power cut monitoring device of the present invention and other operation modules of the external protection device do not supply power simultaneously, which is also called mutually exclusive power supply or mutually exclusive operation mode. That is, when other modules in the external protection device are normally powered, the power of the power cut monitoring module drops. When other modules in the external protection device are abnormally powered off, the power cut monitoring device is triggered and activated to give an alarm.

[0039] Therefore, when the external protection device is abnormally powered off, the present invention can conduct and operate through a dedicated power acquisition port, effectively preventing security problems caused by the power cut of the external protection device.

[0040] As a preferred embodiment, the power failure monitoring device includes a main control module with a data processing function realized by, for example, a microcontroller (MCU), a single board computer (SBC), or a programmable logic controller (PLC). The main control module determines whether an abnormal power failure state has occurred based on the operating state of the power acquisition conduction module (relay), and can issue a command to the alarm module based on the determination result.

[0041] As a preferred embodiment, the alarm module can issue an alarm based on the determination and command of the main control module. The alarm methods include, for example, alarm sounds, alarm lights, and / or blinking of the display screen.

[0042] As a preferred embodiment, the power failure monitoring device further includes a storage module for storing the status information of abnormal power failures. The status information includes the power failure time, the number of abnormal power failures, and device information. The storage module can be realized by various memories such as RAM or non-volatile memory (EPROM), preferably dual-port non-volatile memory, and more preferably flash memory. By providing the storage module, the status information of abnormal power failures can be effectively recorded, providing data support for subsequent power failure analysis.

[0043] As a preferred embodiment, the storage module is shared with other modules of the external protection device. For example, the storage module can be connected to both the power failure monitoring device and the control module of the external protection device at the same time. Since the power failure monitoring device and other operation modules of the external protection device are not powered simultaneously, the storage module can write information through the control of the power failure monitoring device and the external protection device respectively. Since the power failure monitoring device and the external protection device are powered and operate mutually exclusively, the storage module can use a single port or a dual port, and the normal operation of the memory is not affected by the simultaneous operation of two systems, and an electronic switch for controlling the conduction of different circuits is no longer required.

[0044] According to a preferred embodiment of the present invention, the power failure monitoring device further includes a communication module for transmitting the alarm message to an external receiving device. For example, the external receiving device is a server or a client of a control center, such as an authority management server, a staff client, etc. Specifically, the power failure monitoring device can transmit an alarm message to a management server via the communication module. The communication module is a device that can communicate through conventional communication technologies, such as a wired network, a wireless network, Bluetooth (registered trademark), etc.

[0045] According to a preferred embodiment of the present invention, the communication module is a network communication module that shares a MAC address and an IP address with the network communication module of the external protection device. That is, the communication module of the power failure monitoring device and the communication module of the external protection device preferably share the MAC address and the IP address of the network port, so a shared network port design is adopted.

[0046] The present invention also discloses a power failure monitoring method for monitoring and alarming an abnormal power failure of an external protection device that is electrically connected to a device to be protected and takes over the input / output functions of the device to be protected to prevent unauthorized data transfer of the device to be protected. The method includes the steps of preparing a dedicated power acquisition port not connected to the power supply circuit of the external protection device and monitoring whether an abnormal power failure has occurred in the external protection device. When an abnormal power failure is monitored, the power acquisition mode from the dedicated power acquisition port is turned on and an alarm is given.

[0047] As a preferred embodiment, power is obtained from the dedicated power acquisition port to store status information of an abnormal power failure. As another preferred embodiment, power is obtained from the dedicated power acquisition port to transmit an alarm message to an external receiving device.

[0048] Preferably, when an abnormal power outage is detected, the stored operation status information of the device is updated, changed to status information indicating "abnormal power outage", and an alarm message is reported. In order to prevent the user from maliciously disconnecting the communication line to block the report, it can be set to clear the status information of the "abnormal power outage" after receiving a confirmation message of successful reporting.

[0049] The present invention also proposes an external protection device that is electrically connected to a device to be protected and takes over the input / output functions of the device to be protected, thereby preventing unauthorized data transfer of the device to be protected. The external protection device further includes the above-described power outage monitoring device for monitoring and alarming abnormal power outages of the external protection device.

[0050] The power outage monitoring device can operate as an external device of the external protection device. As a preferred embodiment, the power outage monitoring device is installed inside the housing of the external protection device. In other words, the power outage monitoring device can operate independently, but since it can be installed inside the housing as an additional device of the external protection device, the possibility of the power outage monitoring device being maliciously powered off is reduced, the security protection performance is improved, and the device structure is also simplified.

[0051] As described above, the dedicated power acquisition port of the power outage monitoring device is provided by the USB port of the device to be protected. Therefore, the circuit of the power outage monitoring device for connecting to the dedicated power acquisition port can be integrated into the connection interface between the external protection device and the device to be protected.

[0052] Hereinafter, exemplary embodiments will be described in detail with reference to the accompanying drawings. Although exemplary embodiments of the present invention are shown in the drawings, it should be understood that the present invention may be implemented in various forms and should not be construed as limited to the examples described herein. Conversely, these implementation examples are provided to more fully understand the content of the present invention and comprehensively convey the scope of the present invention to those skilled in the art.

[0053] As used herein, the term "and / or" is merely an associative relationship for describing related elements, indicating that three relationships can exist. For example, "A and / or B" can indicate three situations: A exists alone, A and B exist simultaneously, and B exists alone. Also, as used herein, the symbol " / " usually indicates that the related elements before and after are in an "or" relationship.

Embodiment

[0054] (Embodiment 1) FIG. 1 is a schematic configuration diagram of a power-off monitoring device according to Embodiment 1 of the present invention applied to an external terminal protection device. As shown in FIG. 1, the power-off monitoring device 300 is used to monitor and alarm an abnormal power-off of the external protection device 100. The external protection device 100 is connected to a corresponding interface of the device under protection 200 via an internal interface 102 and accesses one or more external devices via an external interface 101. The internal interface 102 and the external interface 101 may be one or more. In the figure, only blocks are used to schematically show the connection relationship of the interfaces, and the actual type and number of interfaces may vary according to specific application scenarios.

[0055] As shown in FIG. 1, the external protection device 100 and the device under protection 200 are each powered by their respective power supplies. The external protection device 100 is electrically connected to the device under protection 200 via an internal interface. When an external device needs to access the device under protection, it needs to be connected to one or more external interfaces 101 of the external protection device 100, access the device under protection 200 under the security control of the external protection device 100, take over the input / output function of the device under protection, and prevent unauthorized data transfer of the device under protection. The configuration and operation method of the external protection device 100 can use any configuration or method of the prior art and are not limited in the present invention.

[0056] Furthermore, in Embodiment 1, the power failure monitoring device 300 includes a power acquisition circuit 301, a power acquisition conduction module 302, and an alarm module 303. The power acquisition circuit 301 is used to connect the power failure monitoring device 300 to the dedicated power acquisition port 201, and the dedicated power acquisition port 201 is connected to the power supply circuit within the device under protection 200. It should be noted that when power is supplied to both the external protection device 100 and the device under protection 200 and they are operating normally, the power acquisition circuit 301 is open, so the alarm module 303 within the power failure monitoring device 300 does not operate.

[0057] The power acquisition conduction module 302 is located within the external protection device 100, monitors whether an abnormal power failure has occurred in the external protection device 100, conducts the power acquisition circuit 301 when an abnormal power failure is detected, and the power failure monitoring device 300 is activated by obtaining power from the dedicated power acquisition port 201. The alarm module 303 transmits an alarm message when the power failure monitoring device 300 is activated. The power failure monitoring device 300 in this embodiment uses a power supply design that is mutually exclusive with other operation modules of the external protection device 100. When the external protection device 100 has an abnormal power failure, the dedicated power acquisition port 201 can be conducted and operated. It has been found that security problems caused by the power failure of the external protection device 100 can be effectively prevented.

[0058] As described above, the dedicated power acquisition port 201 of this Example 1 is connected to the power supply circuit within the device 200 to be protected. However, the present invention is not limited thereto. One of the objects of the present invention is to prevent a problem that effective security control cannot be performed when the external protection device 100 is abnormally powered off. Therefore, the dedicated power acquisition port 201 of the power-off monitoring device 300 of the present invention is connected to a safer power supply circuit without being connected to the power supply circuit of the external protection device. This safer power supply circuit may be, for example, a backup power supply, a backup battery, a wireless power supply, or other safe power supply devices. The dedicated power acquisition port 201 in this embodiment is provided by the power supply circuit of the device 200 to be protected, which is a more reliable choice. The advantage is that when a user attempts to illegally intrude into the device to be protected, the power supply of the device to be protected must be normal for data reading, writing, or transmission.

[0059] FIG. 1 only schematically shows the dedicated power acquisition port 201 of the device 200 to be protected according to Example 1. The dedicated power acquisition port 201 can be any contact on the power supply circuit of the device to be protected, but more preferably, it is a contact that does not substantially affect the internal circuit structure of the device to be protected. The dedicated power acquisition port can be a direct circuit pin or can utilize each conventional port pin capable of supplying power, such as a USB interface or a serial port connected to the power supply circuit.

[0060] In this Example 1, the power acquisition conduction module 302 includes an automatic switch connected to the power detection port 103 of the external protection device 100, and the automatic switch is realized by, for example, a relay. The power detection port 103 is a contact on the power supply circuit (not shown) of the external protection device 100, and the electrical performance (for example, voltage change) of the contact is directly related to the presence or absence of power-off of the external protection device 100, but is not limited to a specific connection position. For example, it can be directly connected to the output end of the power supply, or can be connected to various interfaces directly related to the power supply, such as a USB port or a serial port.

[0061] The automatic switch of this Example 1 includes a control terminal and two connection terminals. The control terminal is electrically connected to the power supply detection port 103, and the two connection terminals are respectively connected to the dedicated power acquisition port 201 and the alarm module 303. When the power supply detection port 103 connected to the control terminal has a high voltage higher than the threshold value (indicating that the power supply of the external protection device 100 is normally supplied), the automatic switch is in the off state. When the power supply detection port 103 connected to the control terminal has a low voltage lower than the threshold value (indicating that the power supply of the external protection device 100 has stopped), the automatic switch automatically switches to the on state. Therefore, the power acquisition conduction module 302 monitors whether an abnormal power cut occurs in the external protection device 100, and when the occurrence of an abnormal power cut is detected, it conducts the power acquisition circuit 301 so that the alarm module 303 can be powered. In this way, the power cut monitoring device 300 obtains power from the dedicated power acquisition port 201 and starts up.

[0062] In this Example 1, the alarm module 303 issues an alarm message when the power cut monitoring device 300 starts up, that is, when the automatic switch automatically switches to the on state, the alarm module 303 issues an alarm message immediately after obtaining power. The present invention is not limited to the method of transmitting the alarm message, and includes various methods of transmitting alarm messages using sound, light, and electricity as media, such as sounding an alarm sound, warning light, power transmission, and sending a message to a specific terminal. As an embodiment, the alarm module 303 includes a speaker and an LED lamp, and automatically sounds a warning sound and / or emits a warning light when power is conducted.

[0063] As another embodiment, since the dedicated power acquisition port 201 also includes a terminal / pin of the message input end, the dedicated power acquisition port 201 can also receive a message transmitted by the power-off monitoring device 300 when the power-off monitoring device 300 is started up. Therefore, the alarm module 303 may include a signal generation module. When the alarm module 303 is energized, a specific alarm message is transmitted to the dedicated power acquisition port 201 so that the protected device 200 can issue a specific alarm after receiving the alarm message. For example, the alarm issued by the alarm device provided in the protected device 200 itself, such as an alarm sound, the flashing of a display screen, etc.

[0064] In Embodiment 1, since the automatic switches of the alarm module 303 and the power acquisition conduction module 302 are both arranged outside the external protection device 100, both can be constructed as independent devices having a housing. One end of the device is connected to the dedicated power acquisition port 201 (such as a USB interface) of the protected device, and the other end is connected to the power detection port 103 (which is also a USB port, for example) of the external protection device 100. It can be seen that this embodiment realizes the addition of an additional power-off detection device based on the existing external protection device and facilitates the upgrade of the existing external protection device to a device having an abnormal power-off protection function.

[0065] (Embodiment 2) Figure 2 is a schematic configuration diagram of the power-off monitoring device according to Embodiment 2 of the present invention applied to an external terminal protection device. As shown in Figure 2, different from Embodiment 1, the automatic switches of the alarm module 303 and the power acquisition conduction module 302 in Embodiment 2 are both arranged inside the external protection device 100. In other words, the power-off monitoring device 300 according to Embodiment 2 is installed in the housing of the external protection device 100. The power acquisition circuit 301 can be connected to the dedicated power acquisition port 201 of the device under protection 200 through the interface of the external protection device 100. Similarly, the dedicated power acquisition port 201 is connected to the power supply circuit in the device under protection 200. The interface of the external protection device 100 through which the power acquisition circuit 301 borrows assistance can be a dedicated power interface, or data interfaces such as a serial port and a USB port can also be used.

[0066] In this Embodiment 2, the alarm module 303 can be realized by using the alarm devices of the external protection device 100 itself, such as speakers, LED lights, etc.

[0067] In this embodiment, it can be seen that the power-off monitoring device 300 is not implemented as an independent device, but is realized as a module included in the power-off monitoring device 300. In this way, the power-off monitoring device 300 can be realized by improving the hardware configuration inside the external protection device 100 without adding an independent device, and the wiring method becomes simpler.

[0068] (Embodiment 3) Figure 3 is a schematic configuration diagram of the power-off monitoring device according to Embodiment 3 of the present invention applied to an external terminal protection device. As shown in Figure 3, based on Embodiment 2, the power acquisition circuit 301 in Embodiment 3 is connected to the dedicated power acquisition port 201 of the device under protection 200 through the internal interface 102 of the external protection device 100. Similarly, the dedicated power acquisition port 201 is connected to the power supply circuit in the device under protection 200.

[0069] The internal interface of the external protection device 100 is an existing interface with specific functions, which is electrically connected to the device 200 to be protected. Under the control of the internal control module of the external protection device 100, conduction and non - conduction are controlled, so that the data input from the outside can access the device 200 to be protected via the external protection device 100. The internal interface 102 is a general term for one or more interfaces, which can be a USB interface, a serial port, a network port, etc., and is itself connected to the internal power supply circuit of the device 200 to be protected. Therefore, based on this, the present invention can use one of the internal interfaces 102 (for example, the USB interface) as the dedicated power acquisition port 201, or add an interface dedicated to connecting to the dedicated power acquisition port 201 to make it one of the internal interfaces 102. When using one of the internal interfaces 102 (for example, the USB interface) as the dedicated power acquisition port 201, this interface is used as the normal - time data exchange interface of the external protection device. When the external protection device is powered off, it supplies power to the power - off monitoring device to realize the sharing of the interface.

[0070] Different from the other interfaces of the internal interface 102, the internal interface for connecting to the power acquisition circuit 301 is connected to an automatic switch with a power - off monitoring function, and the power directly controls conduction and non - conduction, while the other internal interfaces are usually controlled for conduction and non - conduction by a dedicated interface control module.

[0071] Compared with Embodiment 2, it can be seen that in this Embodiment 3, by sharing the interface and the circuit, the power - off monitoring function can be increased without increasing the number of interfaces of the external protection device, and the connection structure of the circuit and the hardware can be further simplified. In addition, when the connection cable of the external protection device connected to the interface of the device to be protected has a plug - in detection and alarm function, the function of protecting the connection cable of the dedicated power acquisition port also works.

[0072] (Example 4) FIG. 4 is a schematic configuration diagram of a power-off monitoring device according to Example 4 of the present invention applied to an external terminal protection device. As shown in FIG. 4, the power-off monitoring device of this example also includes a storage module 304 and a communication module 305. Both are connected to one end of an automatic switch as a power acquisition conduction module 302 in the same manner as the alarm module 303. The storage module 304 is used to store status information of abnormal power-off, and the communication module 305 is used to transmit the alarm message to an external receiving device.

[0073] The storage module 304 can be realized by any memory such as a dual-port non-volatile memory such as RAM or flash, or other general-purpose storage devices. The status information of abnormal power-off is information indicating an abnormal power-off of the external protection device 100. As described above, an abnormal power-off means a situation where the external protection device 100 is powered off without a normal shutdown operation. For example, pulling out the power inlet under the power-on state, cutting the power cord, or long-pressing the switch to shut down, or cutting the internal circuit of the terminal protection device. In one embodiment, the status information of abnormal power-off is a status record in which the operations of the protected device 200 and the external protection device 100 do not match. That is, the power-on / off state of the protected device and the operation status information of the terminal protection device under two operating states (power-on of the external terminal protection device, power-off of the external protection device) are stored. When the power-off monitoring device is activated, an abnormal power-off event occurs in the external protection device 100, and power is successfully obtained from the protected device 200, that is, at this time, it indicates that the operating states of the two do not match. For example, the data bit "1" indicates a mismatch in the operating state.

[0074] As a further embodiment, additional status information can also be stored in the memory module. For example, the memory module can store the occurrence time of the operation state mismatch. Further, additional sensors can be added and the voltage or current change situation when the power supply of the external protection device 100 is cut off detected by the sensors can be recorded. Thereby, the status information of abnormal power supply cut-off can be effectively recorded, providing data support for subsequent power supply cut-off analysis. Preferably, the memory module 304 is a memory shared with other modules of the external protection device 100. At this time, the memory may be a shared memory that can be accessed by both the power supply cut-off monitoring module and the external protection device 100. Since the power supply cut-off monitoring module and the external protection device 100 operate mutually exclusively, when using a shared memory, the normal operation of the memory will not be affected by the simultaneous operation of the two systems. Preferably, a dual-port memory device can be used, in which case control by an electronic switch is not required.

[0075] The communication module 305 is used to transmit the alarm message to an external receiving device. The external receiving device can be any device capable of receiving the message, such as a server in a control center or a client of a staff member in the control center, for example. The server is, for example, an authority management server of the external protection device. Specifically, the power supply cut-off monitoring device can transmit the alarm message to the server or the client via the communication module. The communication module 305 is a device capable of communicating through conventional communication technologies, such as a wired network, a wireless network, Bluetooth (registered trademark), etc.

[0076] In a preferred embodiment of the present invention, the communication module 305 is a network communication module that shares the MAC address and IP address with the network communication module of the external protection device 100. That is, the communication module 305 of the power supply cut-off monitoring device 300 and the communication module of the external protection device 100 preferably share the MAC address and IP address of the network port, so a shared network port design is adopted.

[0077] (Example 5) FIG. 5 is a schematic configuration diagram of a power failure monitoring device according to Example 5 of the present invention applied to an external terminal protection device. As shown in FIG. 5, the power failure monitoring device 300 of this example includes a main control module 306 having a data processing function realized by, for example, a microcontroller (MCU), a single board computer (SBC), or a programmable logic controller (PLC). The alarm module 303, the storage module 304, and the communication module 305 are all connected to the main control module 306 so as to operate under the control of the main control module 306. Since the main control module 306 is connected to one end of an automatic switch as a power acquisition conduction module 302, it is possible to determine whether an abnormal power failure state has occurred through the conduction state of the automatic switch, and issue a command to the alarm module based on the determination result.

[0078] Furthermore, since the main control module 306 has a data processing function, more predetermined functions can be executed through the main control module 306. For example, when the main control module 306 is powered on, it can control the alarm mode of the alarm module 303, control the status information recorded in the storage module 304, and also control where and what type of warning message the communication module 305 transmits.

[0079] This example implements the specific configuration of the external terminal protection device. As shown in FIG. 5, the external protection device 100 includes a system control board 106 and an interface control board, and the system control board 106 is electrically connected to the interface control board.

[0080] Both the external interface 101 and the internal interface 102 are arranged on the interface control board. The system control board 106 controls the security authentication of external devices connected to one or more external interfaces on the interface control board. Note that the interface control board includes an AD collection module 105, a switching chip 104, and also includes a storage module 304 shared with the power-off monitoring device of the present invention. The AD collection module 105 detects the state of each interface, and the switching chip 104 is responsible for the communication between the protected host, the external protection device, and the external device (remote control center). Each interface connection hardware of the interface control board supports two control modes corresponding to the import and export of USB data, which are two functions in the use of USB devices, and the direct connection of USB devices respectively.

[0081] For the connection method and functions realized by each module and component of the external protection device 100, please refer to the relevant documents of the prior art, such as Patent Document 2. Therefore, the detailed description thereof is omitted here.

[0082] As a preferred embodiment, the main control module 306 can be designed and realized using a single-chip microcomputer, supports an Ethernet interface, the communication module 305 is realized by a shared network port, and the internal uses a design divided into two systems. One system is connected to the internal interface of the external protection device and is used to realize normal business logic. One system is connected to the main control module 306 of the power-off monitoring device 300 and is used for the power-off monitoring device 300 to report the abnormal power-off operation state to an external device (server side) through the network. Since the interface control board and the power-off monitoring device operate mutually exclusively, the simultaneous operation of the two systems will not affect the normal communication of the network port of the internal interface of the interface control board.

[0083] The communication module uses the same shared network port and supports the cloning function of the IP and MAC addresses of the network port to prevent the occurrence of abnormal situations assumed by switches or other security devices with different Ethernet MAC addresses. In this way, the consistency of the external communication IP and MAC addresses between the power-off monitoring device and the external protection device 100 is ensured.

[0084] More preferably, to prevent a user from maliciously unplugging the network cable of the network port to prevent situation reporting, when the interface control board discovers an abnormal state of the network port, it updates the operating state of the device stored in the memory on the interface control board and clears the abnormal state of the device after the reporting is successful. Continuing to refer to FIG. 6, in this Embodiment 5, the device to be protected and the external protection device need to be connected to the ports that need to be protected via a connection cable. The external protection device is connected to the server via the communication module 305 (network interface), receives control commands and strategies from the server via the network, and reports the operating state and log data to the server via the network.

[0085] (Embodiment 6) FIG. 6 is a flowchart of a power-off monitoring method according to an embodiment of the present invention. The power-off monitoring method is used to monitor and alarm abnormal power-off of an external protection device.

[0086] As shown in FIG. 6, after the device to be protected is powered on, the external protection device detects the interface voltage state of the device to be protected through the connection cable between the device to be protected and the external protection device, and determines the power-on / off state of the device to be protected based on this.

[0087] When the external protection device 100 is also in the powered-on state, the internal system control board 106 thereof cuts off the power supply to the power-off monitoring device 300 via the power detection port 103 of the interface control board and the automatic switch as the power acquisition conduction module 302, and the alarm module 303, main control module 306, etc. connected to the automatic switch of the power-off monitoring device 300 are in a non-operating state. The external protection device 100 checks whether there is abnormal status information in the shared memory module 304, and the memory module 304 is designed to record the mismatch information of the operating states of the power-off monitoring device 300 and the external protection device 100. If it is found that there is record information of the operating state mismatch, the external protection device 100 reports to the server via the network and prohibits the use of related functions of the external protection device 100 until a reporting success is returned from the server. After the reporting is completed, the external protection device 100 will wait for the server control command and operation strategy.

[0088] When the external protection device 100 is in the power-off state, power is supplied from the dedicated power acquisition port 201 of the device under protection through the conduction of the power acquisition circuit 301 and the power acquisition conduction module 302, and the alarm module 303, main control module 306, etc. connected to the automatic switch of the power-off monitoring device 300 are in the operating state. The main control module 306 checks for abnormal operation status information (status record information of the operating state mismatch) in the memory module 304. If it is found that there is abnormal operation status information, the main control module 306 controls the communication module 305 to report all the status record information of the operating state mismatch of the device under protection and the external protection device 100 to the server, records the current operating state mismatch situation in the memory module 304, and deletes the reported record when a reporting success is returned from the server. If the reporting fails, the reporting failure record is updated in the memory module 304.

[0089] The above specific embodiments further elaborate on the object, technical means, and advantageous effects of the present invention. However, it should be understood that the present invention is not essentially related to a specific computer, virtual device, or electronic device, and the present invention can be implemented with various general-purpose devices. The above are only specific examples of the present invention and are not intended to limit the present invention. Modifications, substitutions by equivalents, improvements, etc., made without departing from the spirit and principle of the present invention are also included in the protection scope of the present invention.

Description of Reference Numerals

[0090] 100 External protection device 101 External interface 102 Internal interface 103 Power detection port 104 Switching chip 105 AD acquisition module 106 System control board 200 Device to be protected 201 Dedicated power acquisition port 300 Power-off monitoring device 301 Power acquisition circuit 302 Power acquisition conduction module 303 Alarm module 303 Alarm module 304 Memory module 305 Communication module 306 Control module

Claims

1. A power interruption monitoring device that is electrically connected to a protected device and takes over input / output functions of the protected device to monitor and issue a warning for an abnormal power interruption of an external protection device that prevents unauthorized data transfer of the protected device, the power interruption monitoring device comprises a power acquisition circuit, a power acquisition continuity module, and an alarm module, the power acquisition circuit is used to connect the power interruption monitoring device to a dedicated power acquisition port, and the dedicated power acquisition port is not connected to a power supply circuit of the external protection device; the power acquisition conduction module is used to monitor whether an abnormal power interruption has occurred in the external protection device, and when an abnormal power interruption has occurred, to conduct the power acquisition circuit so that the power interruption monitoring device can acquire power through a dedicated power acquisition port and start up; The alarm module is used to send an alarm message at the start of the power interruption monitoring device. A power interruption monitoring device characterized by:

2. 2. The power interruption monitoring device according to claim 1, wherein the dedicated power acquisition port is provided by a power supply circuit of the device to be protected.

3. The power acquisition conduction module includes an automatic switch whose control end is connected to the power supply circuit of the external protection device; When the power supply circuit of the external protection device is operating normally, the automatic switch opens the power acquisition circuit, and when an abnormal power interruption occurs in the power supply circuit of the external protection device, the automatic switch closes the power acquisition circuit.

2. The power interruption monitoring device according to claim 1.

4. 2. The power interruption monitoring device according to claim 1, further comprising a storage module for storing status information of abnormal power interruptions.

5. 5. The power interruption monitoring device according to claim 4, wherein the storage module is a memory shared with other modules of the external protection device.

6. a communication module for transmitting the alert message to an external receiving device; a main control module for determining whether an abnormal power interruption state has occurred based on the operating state of the power acquisition conduction module, and issuing a command to the alarm module based on the determination result; The power interruption monitoring device according to claim 1 , further comprising:

7. 7. The power interruption monitoring device according to claim 6, wherein the communication module shares a MAC address and an IP address with the communication module of the external protection device.

8. A power interruption monitoring method for monitoring and issuing an alarm for an abnormal power interruption of an external protection device that is electrically connected to a protection target device and takes over an input / output function of the protection target device to prevent unauthorized data transfer of the protection target device, providing a dedicated power acquisition port that is not connected to a power supply circuit of the external protection device; monitoring whether an abnormal power interruption has occurred in the external protection device, and if an abnormal power interruption is detected, turning on a power acquisition mode from the dedicated power acquisition port and issuing an alarm; A power interruption monitoring method comprising:

9. 9. The power interruption monitoring method according to claim 8, wherein the dedicated power acquisition port is provided by a power supply circuit of the device to be protected.

10. 9. The power interruption monitoring method of claim 8, further comprising the step of acquiring power from the dedicated power acquisition port for storing abnormal power interruption status information.

11. 9. The power interruption monitoring method of claim 8, further comprising the step of obtaining power from the dedicated power obtaining port for transmitting an alarm message to an external receiving device.

12. An external protection device that is electrically connected to a protection target device and takes over input / output functions of the protection target device to prevent unauthorized data transfer of the protection target device, An external protection device comprising the power interruption monitoring device according to any one of claims 1 to 7 for monitoring and issuing an alarm for an abnormal power interruption in the external protection device.

13. 13. The external protection device according to claim 12, wherein the power interruption monitoring device is mounted inside a housing of the external protection device.

14. 13. The external protection device according to claim 12, wherein the dedicated power acquisition port of the power interruption monitoring device is provided by a USB port of the protected device.

Images