Disclosure of Invention
The invention aims to provide a server, which can realize the limitation of data access through an embedded microcomputer module which is low in price and can be embedded into the server when a server system (particularly a small-sized server system) is constructed so as to ensure the data security, does not need to purchase a router which is high in price and large in size or a core switch with a routing function, and greatly reduces the use cost of the server.
In order to solve the above technical problem, the present invention provides a server, including:
the server body is used for carrying out data interaction with the client and executing data processing service;
and the embedded microcomputer module is respectively connected with the server body and the data network port, is pre-installed with a router system, and is used for communicating the data network port to the server body only when a client side for accessing data of the server body through the data network port meets a preset access rule.
Preferably, the preset access rule is specifically:
the specified identity parameter in the access control list ACL of the user;
wherein, the embedded microcomputer module only allows the client with the designated identity parameter to access the data of the server body.
Preferably, the specified identity parameter is at least one of an IP address, a port number, and a network protocol type.
Preferably, the server further comprises:
the first alarm module is connected with the server body;
the server ontology is further configured to:
and when the embedded microcomputer module is monitored not to be in place, controlling the first alarm module to alarm.
Preferably, the embedded microcomputer module is an MOC card.
Preferably, the server further comprises:
the communication module is respectively connected with the server body and the embedded microcomputer module;
the second alarm module is connected with the server body;
the server body is further used for acquiring the health monitoring data of the embedded microcomputer module and controlling the second alarm module to alarm when the health monitoring data is abnormal.
Preferably, the communication module is an I2C communication bus.
Preferably, the server further comprises:
the radiator is arranged on the embedded microcomputer module and connected with the server body;
the health monitoring data is a temperature value;
the server body is also used for carrying out closed-loop control on the temperature value through the radiator.
Preferably, the heat sink is an original heat sink of the server body.
Preferably, the second alarm module is an audible and visual alarm.
The invention provides a server, which realizes the purpose of identity verification of a client sending data access by considering that an embedded microcomputer module can be respectively connected with the server and a data network port and obtains the function of a router through a pre-installed router system, so that a client can realize the limitation of data access through the embedded microcomputer module which is low in price and can be embedded into the server when constructing a server system (especially a small server system) to ensure data safety, and the use cost of the server is reduced to a great extent without purchasing a high-price and large-size router or a core switch with a routing function.
Detailed Description
The core of the invention is to provide a server, which can realize the limitation of data access through an embedded microcomputer module which has low price and can be embedded in the server when a server system (especially a small-sized server system) is constructed so as to ensure the data security, and a router which has high price and large volume or a core switch with a routing function does not need to be purchased, thereby greatly reducing the use cost of the server.
In order to make the objects, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, but not all, embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
Referring to fig. 1, fig. 1 is a schematic structural diagram of a server provided in the present invention, where the server includes:
the server body 1 is used for performing data interaction with the client and executing data processing service;
the embedded microcomputer module 2 is respectively connected with the server body 1 and the data network port, is pre-installed with a router system, and is used for communicating the data network port to the server body 1 only when a client end which accesses data from the server body 1 through the data network port meets a preset access rule.
Specifically, in view of the technical problems in the background art, it is also considered that the embedded microcomputer module 2 may be connected to the server and the data network port, respectively, and may obtain the function of the router by pre-installing the router system, so as to achieve the purpose of performing the authentication on the client that sends the data access, and therefore, the router system is pre-installed in the embedded microcomputer module 2 connected to the server body 1, so that the client that accesses the server body 1 through the data network port may be authenticated through the embedded microcomputer module 2, and thus, it is not necessary to install the router or the core switch in the network link of the server to achieve the function of limiting the data access, on one hand, the occupied space of the server system may be reduced, and on the other hand, the cost may be saved.
Specifically, the server body 1 may be various types of servers, and the embodiment of the present invention is not limited herein.
The pre-installed router system can select an open-source router system, and a function with a fixed value meeting the market demand is added on the basis of the open-source router system.
Specifically, in order to ensure the data security of the server body 1, access restriction may be performed on the client that sends out the data access by autonomously setting an access rule in advance, and the access rule may be specifically set to be of various types according to the requirements.
The data network port is communicated to the server body 1, whether the access data is intercepted or not is actually the result, when the preset access rule is met, the embedded microcomputer module 2 can not intercept the access data, and when the preset access rule is not met, the embedded microcomputer module 2 can intercept the access data.
The invention provides a server, which realizes the purpose of identity verification of a client sending data access by considering that an embedded microcomputer module can be respectively connected with the server and a data network port and obtains the function of a router through a pre-installed router system, so that a client can realize the limitation of data access through the embedded microcomputer module which is low in price and can be embedded into the server when constructing a server system (especially a small server system) to ensure data safety, and the use cost of the server is reduced to a great extent without purchasing a high-price and large-size router or a core switch with a routing function.
For better explaining the embodiment of the present invention, please refer to fig. 2, fig. 2 is a schematic structural diagram of another server provided by the present invention, and on the basis of the above embodiment:
as a preferred embodiment, the preset access rule is specifically:
the specified identity parameter in the access control list ACL of the user;
the embedded microcomputer module 2 only allows the client with the designated identity parameter to access the data of the server body 1.
Specifically, an Access-List (ACL) function of the router may be implemented on the embedded microcomputer module 2 pre-installed with the router system, and based on the corresponding designated identity parameter in the ACL function, Access restriction may be performed on the client accessing the server body 1 by determining various types of identity parameters.
Of course, besides the ACL, the embedded microcomputer module 2 pre-installed with the router system may also implement functions of other various routers, such as NAT (Network Address Translation), and the like, and the embodiment of the present invention is not limited herein.
As a preferred embodiment, the specified identity parameter is at least one of an IP address, a port number, and a network protocol type.
Specifically, the IP address, the port number, and the network protocol type are all identity parameters that are necessary for the client to perform data access, so that data access restriction through at least one of the identity parameters can achieve very good restriction accuracy.
The port number may be of various types, for example, may be 1 to 65535, and the like, and the embodiment of the present invention is not limited herein.
As a preferred embodiment, the server further comprises:
the first alarm module 3 is connected with the server body 1;
the server body 1 is further configured to:
and when the embedded microcomputer module 2 is monitored not to be in place, the first alarm module 3 is controlled to alarm.
Specifically, in consideration of the importance of the embedded microcomputer module 2 listed above to the normal operation of the server, the embedded microcomputer module 2 needs to be kept in place continuously, in order to find out the out-of-place condition of the embedded microcomputer module 2 in time, in the present application, the server body 1 can monitor the in-place condition of the embedded microcomputer module 2, and when the out-of-place condition of the embedded microcomputer module 2 is monitored, the first alarm module 3 can be controlled to alarm, so that the embedded microcomputer module 2 can be overhauled in time and recovered to be normal as soon as possible, and the server body 1 is ensured to recover to normal operation as soon as possible.
The first alarm module 3 may be of various types, for example, may be a buzzer or the like, and the embodiment of the present invention is not limited herein.
Specifically, the in-place mode of the embedded microcomputer module 2 may be various, for example, the in-place mode may be determined according to whether a response signal sent by the embedded microcomputer module 2 is available, and the like.
As a preferred embodiment, the embedded microcomputer module 2 is an MOC card.
Specifically, the MOC card has the advantages of small volume, low price, long service life and the like.
Of course, besides the MOC card, the embedded microcomputer module 2 may be of other types, and the embodiment of the present invention is not limited herein.
As a preferred embodiment, the server further comprises:
a communication module 4 respectively connected with the server body 1 and the embedded microcomputer module 2;
the second alarm module 5 is connected with the server body 1;
the server body 1 is further configured to acquire health monitoring data of the embedded microcomputer module 2 and control the second alarm module 5 to alarm when the health monitoring data is abnormal.
Considering that the embedded microcomputer module 2 can detect the health condition of itself to obtain various types of health monitoring data, in order to better ensure that the embedded microcomputer module 2 continuously and normally works, the server body 1 can also control the alarm to give an alarm when the health data of the embedded microcomputer module 2 is abnormal, so that the abnormal condition of the embedded microcomputer module 2 can be timely eliminated by a worker, and the normal operation of the server is further ensured.
As a preferred embodiment, the communication module 4 is an I2C communication bus.
Specifically, the I2C communication bus has the advantages of high stability, low cost, long service life and the like.
Of course, besides the I2C communication bus, the communication module 4 may be of other types, and the embodiment of the present invention is not limited herein.
As a preferred embodiment, the server further comprises:
a radiator 6 arranged on the embedded microcomputer module 2 and connected with the server body 1;
the health monitoring data is a temperature value;
the server body 1 is also used for closed-loop control of the temperature value through the radiator 6.
Specifically, considering that the temperature of the working environment has a great influence on the stable and efficient operation of the electronic device, in the embodiment of the present invention, the server body 1 may further perform closed-loop adjustment and control on the temperature value through the heat sink 6 on the basis of monitoring the temperature value of the embedded microcomputer module 2, so that the embedded microcomputer module 2 has a stable working temperature, and the working stability of the embedded microcomputer module 2 can be further improved.
The heat sink 6 may be of various types, for example, an air cooling system or a water cooling system, and the embodiment of the present invention is not limited herein.
In a preferred embodiment, the heat sink 6 is the heat sink 6 that is originally provided in the server body 1.
Specifically, in order to reduce the cost, the heat sink 6 may be the heat sink 6 originally provided in the server body 1.
Of course, the heat sink 6 may be additionally added to the heat sink 6, and the embodiment of the present invention is not limited herein.
In a preferred embodiment, the second alarm module 5 is an audible and visual alarm.
Specifically, the audible and visual alarm has the advantages of good alarm effect, simple structure, low cost and the like.
Of course, the second alarm module 5 may be of various types other than the audible and visual alarm, and the embodiment of the present invention is not limited herein.
The embodiments in the present description are described in a progressive manner, each embodiment focuses on differences from other embodiments, and the same and similar parts among the embodiments are referred to each other. It is further noted that, in the present specification, relational terms such as first and second, and the like are used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other identical elements in a process, method, article, or apparatus that comprises the element.
The previous description of the disclosed embodiments is provided to enable any person skilled in the art to make or use the present invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined herein may be applied to other embodiments without departing from the spirit or scope of the invention. Thus, the present invention is not intended to be limited to the embodiments shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.