CN105786730A - Intelligent computer hardware port control device - Google Patents

Abstract

The invention relates to the technical field of local area network information security, in particular to an intelligent computer hardware port control device.The intelligent computer hardware port control device comprises a central server and at least one computer, wherein the central server and at least one computer jointly form an internal information network, a control device is connected at any computer, the central server comprises a checkout unit and a control unit, and each control device comprises an interface unit, a processing unit, a detecting unit, a distributing unit, a monitoring unit and a communicating unit.The intelligent computer hardware port control device can better improve the data security of the internal information network.

Description

Computer hardware port intelligent management and control device

technical field

The invention relates to the technical field of local area network information security, in particular to an intelligent management and control device for computer hardware ports.

Background technique

The popularity of the Internet has greatly increased the speed of information dissemination, but it has also brought serious hidden dangers to information security. For some enterprises or government agencies, in order to ensure higher security of information, it is common practice to form all the computers in use into an internal information network through one or several central servers. To a certain extent, this approach can better protect the security of information in the internal information network. However, the above-mentioned internal information network often inevitably needs to be connected to an external network (such as the Internet), which inevitably provides an interface for information leakage for the internal information network. In the prior art, there is a lack of a mechanism that can better protect information in a local area network such as an internal information network.

Contents of the invention

The content of the present invention is to provide an intelligent computer hardware port management and control device, which can overcome some or some defects of the prior art.

According to the computer hardware port intelligent management and control device of the present invention, it includes a central server and at least one computer, the central server and the at least one computer jointly form an internal information network, and any computer is connected to a management and control device; the central server includes a school An inspection unit and a control unit, and the management and control device includes an interface unit, a processing unit, a detection unit, a distribution unit, a monitoring unit and a communication unit;

The interface unit is used to realize the data interaction between the processing unit and the corresponding computer, the allocation unit is used to store the default IP address and distribute it to the corresponding computer under the control of the processing unit, and the detection unit is used to detect the actual IP address of the corresponding computer in real time and send it to the processing unit , the monitoring unit is used to monitor the process in the corresponding computer in real time and generate a process abnormal signal for sending to the processing unit when the corresponding computer runs any automatic program; when the actual IP address is different from the default IP address and when the processing unit receives the process When an abnormal signal occurs, an alarm signal is generated and sent to the central server through the interface unit and the corresponding computer and sent to the external device through the communication unit at the same time;

The verification unit is used to verify the IP address of the pre-access computer that is about to access the internal information network, and when the IP address is not any default IP address, reject the pre-access computer through the central server. access to the internal information network; the management and control device is used to receive the alarm signal, and lock the corresponding computer through the central server when receiving the alarm signal.

In the present invention, the allocation unit of the management and control device can assign a default IP address to the computer, and the detection unit in the management and control device can detect the actual IP address of the corresponding computer in real time. When the actual IP address is different from the default IP address, the management and control device can generate an alarm When the central server receives the alarm signal, it can lock the corresponding computer (that is, isolate the computer from the internal information network), so as to prevent the computer from accessing the external network through other network cards or smart phones. Network (such as the Internet), and then can preferably prevent the information in the internal information network from leaking from the computer.

In the present invention, the verification unit at the central server can verify the IP address of any pre-access computer that is about to access the internal information network, and when the IP address is not any default IP address, the The server refuses the pre-access computer to access the internal information network, thereby preferably denying unidentified computers from accessing the internal information network.

In addition to the above, the monitoring unit of the management and control device can also monitor the processes in the corresponding computer, so as to prevent criminals from stealing information in the internal information network by running Trojan horse programs.

The present invention can effectively improve the security management and control capability of computers in the internal information network (intranet), and can preferably eliminate hidden dangers of information security violations in the bud.

Preferably, the processing unit adopts a single-chip microcomputer.

In the present invention, the processing unit can adopt, for example, a single-chip microcomputer, so that the production cost of the present invention can be preferably reduced.

Preferably, the communication unit includes a wireless communication module.

In the present invention, the communication unit can include, for example, a wireless communication module, so that the alarm signal can preferably be sent to the external device in a wireless manner.

Preferably, the external device includes a mobile phone.

In the present invention, the external device can include, for example, a mobile phone, so that the manager can receive the alarm signal in real time.

Description of drawings

Fig. 1 is the structural block diagram of the computer hardware port intelligent management and control device in embodiment 1;

FIG. 2 is a schematic diagram of the system architecture of the computer hardware port intelligent management and control device in Embodiment 1.

detailed description

In order to further understand the content of the present invention, the present invention will be described in detail in conjunction with the accompanying drawings and embodiments. It should be understood that the examples are only for explaining the present invention and not for limiting it.

Example 1

As shown in Figures 1 and 2, this embodiment provides a computer hardware port intelligent management and control device, which includes a central server and at least one computer, the central server and the at least one computer jointly form an internal information network, any computer Each place is connected with a management and control device; the central server includes a verification unit and a control unit, and the management and control device includes an interface unit, a processing unit, a detection unit, a distribution unit, a monitoring unit and a communication unit.

The interface unit is used to realize the data interaction between the processing unit and the corresponding computer, the allocation unit is used to store the default IP address and distribute it to the corresponding computer under the control of the processing unit, and the detection unit is used to detect the actual IP address of the corresponding computer in real time and send it to the processing unit , the monitoring unit is used to monitor the process in the corresponding computer in real time and generate a process abnormal signal for sending to the processing unit when the corresponding computer runs any automatic program; when the actual IP address is different from the default IP address and when the processing unit receives the process When an abnormal signal occurs, an alarm signal is generated and simultaneously sent to the central server via the interface unit and the corresponding computer and sent to the external device via the communication unit.

The verification unit is used to verify the IP address of the pre-access computer that is about to access the internal information network, and when the IP address is not any default IP address, reject the pre-access computer through the central server. access to the internal information network; the management and control device is used to receive the alarm signal, and lock the corresponding computer through the central server when receiving the alarm signal.

In this embodiment, the processing unit adopts a single chip microcomputer, the communication unit includes a wireless communication module, and the external device includes a mobile phone. Wherein, the wireless communication module can send the alarm signal to the mobile phone in the form of a short message.

The present invention and its implementations have been schematically described above, and the description is not restrictive. What is shown in the drawings is only one of the implementations of the present invention, and the actual structure is not limited thereto. Therefore, if a person of ordinary skill in the art is inspired by it, without departing from the inventive concept of the present invention, without creatively designing a structure and an embodiment similar to the technical solution, it shall fall within the scope of protection of the present invention .

Claims (4)

1. The computer hardware port intelligent management and control device is characterized in that: it includes a central server and at least one computer, the central server and the at least one computer jointly form an internal information network, and any computer is connected to a management and control device; the central server includes A verification unit and a control unit, and the management and control device includes an interface unit, a processing unit, a detection unit, a distribution unit, a monitoring unit and a communication unit; The interface unit is used to realize the data interaction between the processing unit and the corresponding computer, the allocation unit is used to store the default IP address and distribute it to the corresponding computer under the control of the processing unit, and the detection unit is used to detect the actual IP address of the corresponding computer in real time and send it to the processing unit , the monitoring unit is used to monitor the process in the corresponding computer in real time and generate a process abnormal signal for sending to the processing unit when the corresponding computer runs any automatic program; when the actual IP address is different from the default IP address and when the processing unit receives the process When an abnormal signal occurs, an alarm signal is generated and sent to the central server through the interface unit and the corresponding computer and sent to the external device through the communication unit at the same time; The verification unit is used to verify the IP address of the pre-access computer that is about to access the internal information network, and when the IP address is not any default IP address, reject the pre-access computer through the central server. access to the internal information network; the management and control device is used to receive the alarm signal, and lock the corresponding computer through the central server when receiving the alarm signal. 2. The computer hardware port intelligent management and control device according to claim 1, wherein the processing unit is a single-chip microcomputer. 3. The computer hardware port intelligent management and control device according to claim 1, wherein the communication unit includes a wireless communication module. 4. The computer hardware port intelligent management and control device according to claim 1, wherein the external device includes a mobile phone.