WO2016033819A1 - Computer - Google Patents

Abstract

Disclosed is a computer, comprising: a processor (24) provided with a first read enable end (241) and a first write enable end (242); a memory (21) provided with a second read enable end (211) and a second write enable end (212); a first manual switch (22) arranged between the first read enable end (241) and the second read enable end (211), the first manual switch (22) enabling the first read enable end (241) to be connected to or disconnected from the second read enable end (211) via manual control; a second manual switch (23) arranged between the first write enable end (242) and the second write enable end (212), the second manual switch (23) enabling the first write enable end (242) to be connected to or disconnected from the second write enable end (212) via manual control; a switch operation authorisation module (25) used for performing identity authentication on at least one user of the first manual switch (22) and the second manual switch (23), the switch operation authorisation module (25) releasing permission for performing disconnection or connection operations on the first manual switch (22) and the second manual switch (23) at the same time as identity authentication is passed. The described means further improve the security of data storage.

Description

Computer

[Technical Field]

The present invention relates to the field of computers, and in particular to a computer.

 【Background technique】

The write protection of traditional circuit storage devices is usually written and protected by the I/O port of the system CPU or the dedicated port of the controller. In this way, once the computer is infected with the Trojan virus, it is easy to infect the memory, so that the information of the memory is illegally modified, and even more so, the computer software cannot be run, and the system is paralyzed, causing serious consequences. In the prior art, when the user operating the memory does not need to perform authentication, any person can read and write the data stored in the memory, and the security is not high.

 [Summary of the Invention]

The technical problem to be solved by the present invention is to provide a computer capable of further improving the security of data storage.

In order to solve the above technical problem, the present invention provides a computer, comprising: a processor, comprising: a first read enable end for issuing a read enable signal under the control of the processor; the first write enable end, a write enable signal is issued under the control of the processor; the memory is provided with: a second read enable end connected to the first read enable end for receiving the read enable signal; the second write enable end, and the a write enable connection for receiving a write enable signal; a first manual switch disposed between the first read enable end and the second read enable end, the first manual switch being manually controlled to cause the first read enable The second end switch is connected between the first write enable end and the second write enable end, and the second manual switch is manually controlled to make the first a write enable end and a second write enable end are connected or disconnected; a switch operation authorization module, the switch operation authorization module is configured to perform identity authentication on at least one user of the first manual switch and the second manual switch When the identity authentication is passed at the same time, the switch operation authorization module is opened to the first manual opening. And operating permission to disconnect or connect with the second manual switch; wherein the processor further includes a plurality of first data transmission ends, the memory further includes a plurality of second data transmission ends respectively connected to the first data transmission end, the memory Set to be accessible by Internet users.

The first manual switch is manually controlled to connect the first read enable end and the second read enable end, and the processor issues a read enable signal through the first read enable end, so that the second read enable end Upon receiving the read enable signal, the processor reads data from the memory through the plurality of first data transmission terminals and the plurality of second data transmission terminals.

The second manual switch is manually controlled to connect the first write enable end and the second write enable end, and the processor issues a write enable signal through the first write enable end, so that the second write enable When the terminal receives the write enable signal, the processor writes data to the memory through the plurality of first data transmission ends and the plurality of second data transmission ends.

The first manual switch and the second manual switch are at least one of a wire switch, a knife switch and a push button switch.

The switch operation authorization module includes an electronic code lock and a box body, the electronic code lock is used to lock the box body, the first manual switch and the second manual switch are disposed in the box body, and the electronic code lock collects at least one user-provided identity information. When it is determined that the collected identity information is consistent with the pre-stored identity information, the identity authentication is passed, and the electronic password lock unlocks the box. When it is determined that the collected identity information is inconsistent with the pre-stored identity information, The identity authentication does not pass, and the electronic password lock remains locked to the cabinet.

The identity information includes at least one or a combination of user information and a password.

The password is at least one of a password, a fingerprint, a retina, and an iris.

In order to solve the above technical problem, the present invention provides a computer, comprising: a processor, comprising: a first read enable end for issuing a read enable signal under the control of the processor; the first write enable end, a write enable signal is issued under the control of the processor; the memory is provided with: a second read enable end connected to the first read enable end for receiving the read enable signal; the second write enable end, and the a write enable connection for receiving a write enable signal; a first manual switch disposed between the first read enable end and the second read enable end, the first manual switch being manually controlled to cause the first read enable The second end switch is connected between the first write enable end and the second write enable end, and the second manual switch is manually controlled to make the first a write enable end and a second write enable end are connected or disconnected; a switch operation authorization module, the switch operation authorization module is configured to perform identity authentication on at least one user of the first manual switch and the second manual switch When the identity authentication is passed at the same time, the switch operation authorization module is opened to the first manual opening. And a second manual switch for connecting or disconnecting operation rights.

The processor further includes a plurality of first data transmission ends, and the memory further includes a plurality of second data transmission ends respectively connected to the first data transmission end.

The first manual switch is manually controlled to connect the first read enable end and the second read enable end, and the processor issues a read enable signal through the first read enable end, so that the second read enable end Upon receiving the read enable signal, the processor reads data from the memory through the plurality of first data transmission terminals and the plurality of second data transmission terminals.

The second manual switch is manually controlled to connect the first write enable end and the second write enable end, and the processor issues a write enable signal through the first write enable end, so that the second write enable When the terminal receives the write enable signal, the processor writes data to the memory through the plurality of first data transmission ends and the plurality of second data transmission ends.

Among them, the memory is set to be accessible by Internet users.

The first manual switch and the second manual switch are at least one of a wire switch, a knife switch and a push button switch.

The switch operation authorization module includes an electronic code lock and a box body, the electronic code lock is used to lock the box body, the first manual switch and the second manual switch are disposed in the box body, and the electronic code lock collects at least one user-provided identity information. When it is determined that the collected identity information is consistent with the pre-stored identity information, the identity authentication is passed, and the electronic password lock unlocks the box. When it is determined that the collected identity information is inconsistent with the pre-stored identity information, The identity authentication does not pass, and the electronic password lock remains locked to the cabinet.

The identity information includes at least one or a combination of user information and a password.

The password is at least one of a password, a fingerprint, a retina, and an iris.

Through the above solution, the invention has the beneficial effects that: by providing a first read enable end through the processor for issuing a read enable signal under the control of the processor; the first write enable end is used to be issued under the control of the processor Writing an enable signal; the memory is provided with a second read enable terminal coupled to the first read enable terminal for receiving the read enable signal; and a second write enable terminal coupled to the first write enable terminal for receiving the write The first manual switch is disposed between the first read enable end and the second read enable end, and the first manual switch is manually controlled to connect the first read enable end and the second read enable end. Or disconnected; the second manual switch is disposed between the first write enable end and the second write enable end, and the second manual switch is manually controlled to enable the first write enable end and the second write enable end Connecting or disconnecting; the switch operation authorization module is configured to perform identity authentication on at least one user of the first manual switch and the second manual switch, and when the identity authentication is simultaneously passed, the switch operation authorization module is opened to the first manual switch Operation permission to disconnect or connect with the second manual switch, Further improve the security of data storage.

 [Description of the Drawings]

1 is a schematic structural view of a computer according to a first embodiment of the present invention;

2 is a schematic structural diagram of a computer according to a second embodiment of the present invention;

Figure 3 is a block diagram showing the structure of a computer according to a third embodiment of the present invention;

4 is a flow chart showing a network intrusion detection method of a computer according to a first embodiment of the present invention.

 【detailed description】

Please refer to FIG. 1. FIG. 1 is a schematic structural diagram of a computer according to a first embodiment of the present invention. As shown in FIG. 1, the computer 10 includes a memory 11, a first manual switch 12, a second manual switch 13, and a processor 14. The processor 14 is provided with a first read enable terminal 141 and a first write enable terminal 142. The first read enable terminal 141 is configured to issue a read enable signal under the control of the processor 14, and the first write enable terminal 142 is configured to issue a write enable signal under the control of the processor 14. The memory 11 is provided with a second read enable terminal 111 and a second write enable terminal 112. The second read enable terminal 111 is coupled to the first read enable terminal 141 for receiving a read enable signal, and the second write enable terminal 112 is coupled to the first write enable terminal 142 for receiving a write enable signal. The first manual switch 12 is disposed between the first read enable end 141 and the second read enable end 111. The first manual switch 12 is manually controlled to enable the first read enable end 141 and the second read enable end 111. Connect or disconnect. The second manual switch 13 is disposed between the first write enable terminal 142 and the second write enable terminal 112. The second manual switch 13 is manually controlled to enable the first write enable terminal 142 and the second write enable terminal. Connect or disconnect between 112. The processor 14 further includes a plurality of first data transmission terminals 143, and the memory 11 further includes a plurality of second data transmission terminals 113 connected to the first data transmission terminals 143, respectively.

In the embodiment of the present invention, the computer 10 may further include a second memory (not shown) identical to the memory 11, and the second memory is a backup memory of the memory 11 for backing up data of the memory. A manual switch is provided between the read enable end of the second memory and the read enable end of the processor 14 and between the write enable end of the second memory and the write enable end of the processor 14 for connection. The data data transmission end of the second memory is also directly connected to the data transmission end of the processor for data transmission. When the memory 11 is in normal use, the memory 11 is set to be accessible by Internet users, while the second memory is set to be inaccessible to Internet users. When the memory 11 is damaged or cannot be used normally, the computer 10 can automatically switch to the second memory directly for normal reading and writing of data.

In the embodiment of the present invention, the first manual switch 12 is manually controlled to connect the first read enable terminal 141 and the second read enable terminal 111, and the processor 14 issues a read enable by the first read enable terminal 141. The energy signal is such that when the second read enable terminal 111 receives the read enable signal, the processor 14 reads data from the memory 11 through the plurality of first data transfer terminals 143 and the plurality of second data transfer terminals 113. The second manual switch 13 is manually controlled to connect the first write enable terminal 142 and the second write enable terminal 112, and the processor 14 issues a write enable signal through the first write enable terminal 142, so that the second When the write enable terminal 112 receives the write enable signal, the processor 14 writes data to the memory 11 through the plurality of first data transfer terminals 143 and the plurality of second data transfer terminals 113. The first manual switch 12 and the second manual switch 13 are at least one of a wire switch, a knife switch, or a push button switch. In the embodiment of the present invention, by manually operating the first manual switch 12 and the second manual switch 13 to separately control the read and write operations of the processor 14 on the memory 11, the data in the memory 11 can be effectively prevented from being illegally modified, and the data is guaranteed. Storage security.

Figure 2 is a block diagram showing the structure of a computer in accordance with a second embodiment of the present invention. Figure 2 As shown, the computer 20 includes: a memory 21, a first manual switch 22, a second manual switch 23, a processor 24 and the switch operation authorization module 25. The processor 24 is provided with a first read enable terminal 241 and a first write enable terminal 242. The first read enable terminal 241 is configured to issue a read enable signal under the control of the processor 24, and the first write enable terminal 242 is configured to issue a write enable signal under the control of the processor 24. The memory 21 is provided with a second read enable terminal 211 and a second write enable terminal 212. The second read enable terminal 211 is coupled to the first read enable terminal 241 for receiving a read enable signal. The second write enable terminal 212 is coupled to the first write enable terminal 412 for receiving a write enable signal. The first manual switch 22 is disposed between the first read enable terminal 241 and the second read enable terminal 211. The first manual switch 22 is manually controlled to enable the first read enable terminal 241 and the second read enable terminal 211. Connect or disconnect. The second manual switch 23 is disposed between the first write enable terminal 242 and the second write enable terminal 212. The second manual switch 23 is manually controlled to cause the first write enable terminal 242 and the second write enable terminal. Connect or disconnect between 212. The switch operation authorization module 25 is configured to perform identity authentication on at least one user of the first manual switch 22 and the second manual switch 23. When the identity authentication is passed, the switch operation authorization module 25 is opened to the first manual switch 22 and the first The second manual switch 23 performs the operation authority of disconnecting or connecting.

In the embodiment of the present invention, the computer 20 may further include a second memory (not shown) identical to the memory 21, and the second memory is a backup memory of the memory 21 for backing up data of the memory. A manual switch is provided between the read enable end of the second memory and the read enable end of the processor 24 and between the write enable end of the second memory and the write enable end of the processor 24, respectively. The data data transmission end of the second memory is also directly connected to the data transmission end of the processor for data transmission. When the memory 21 is in normal use, the memory 21 is set to be accessible by an Internet user, and the second memory is set to be inaccessible to Internet users. When the memory 21 is damaged or cannot be used normally, the computer 20 can automatically switch to the second memory to perform normal reading and writing of data. At this time, the switch operation authorization module 25 is also required to be respectively disposed on the read enable end of the second memory. Authenticating at least one user with a manual switch between the read enable end of the processor 24 and the write enable end of the second memory and the write enable end of the processor 24, and when the identity authentication is passed, The switch operation authorization module 25 opens the operation authority for disconnecting or connecting the two manual switches.

In the embodiment of the present invention, the processor 24 further includes a plurality of first data transmission ends 243, and the memory 24 further includes a plurality of second data transmission ends 213 respectively connected to the first data transmission end 243. The first manual switch 22 is manually controlled to connect the first read enable terminal 241 and the second read enable terminal 211, and the processor 24 issues a read enable signal through the first read enable terminal 241, so that the second read When the enable terminal 211 receives the read enable signal, the processor 24 reads data from the memory 24 through the plurality of first data transfer terminals 243 and the plurality of second data transfer terminals 313. The second manual switch 23 is manually controlled to connect the first write enable terminal 242 and the second write enable terminal 212, and the processor 24 issues a write enable signal through the first write enable terminal 242, so that the second When the write enable terminal 212 receives the write enable signal, the processor 24 writes data to the memory 21 through the plurality of first data transfer terminals 243 and the plurality of second data transfer terminals 213. The first manual switch 22 and the second manual switch 23 are at least one of a wire pull switch, a knife switch and a push button switch. Thus, at least one user of the first manual switch 22 and the second manual switch 23 is authenticated by the switch operation authorization module 25, and when the identity authentication is passed, the switch operation authorization module 25 is opened to the first manual switch 22 and The operation permission of the second manual switch 23 to open or connect can further prevent the data of the memory 21 from being illegally modified, thereby further ensuring the security of data storage.

The switch operation authorization module 25 includes an electronic code lock 251 and a box 252. The electronic code lock 251 is used to lock the box 252. The first manual switch 22 and the second manual switch 23 are disposed in the box 252. The electronic code lock 251 collects at least one user-provided identity information and performs identity authentication. When it is determined that the collected identity information is consistent with the pre-stored identity information, the identity authentication is passed, and the electronic password lock 251 unlocks the box 252, and when it is determined that the collected identity information is inconsistent with the pre-stored identity information, The identity authentication fails, and the electronic code lock 251 remains locked to the box 252. The identity information includes at least one of user information or a password. That is, the identity information may include only user information or a password, and may also include user information and a password corresponding to the user information. User information can be obtained by swiping a smart card. The user information may be the number of the smart card, the user's job number or other identity information related to the user's personal. The password is at least one of a password, a fingerprint, a retina, and an iris. When the identity information includes the user information and the password corresponding to the user information, the electronic password lock 251 first collects the user information provided by the user and performs authentication, and collects the password corresponding to the user information and authenticates after the user information is authenticated. If the electronic code lock 251 passes the user information and the corresponding password authentication, the electronic code lock 251 unlocks the box 252.

In the embodiment of the present invention, the electronic password lock 251 can collect identity information provided by a user and perform identity authentication. When the electronic password lock 251 completes identity authentication and the identity authentication passes, the identity information provided for the first user is completed. Verification. If the verification of the operation of the memory 21 only requires the identity information provided by a single user to complete the verification, if the smart card is lost by someone else and/or the password is known by others, it is easy for others to operate the first manual switch 22 and the Two manual switches 23 to make the processor 24 performs a read or write operation on the memory 21, which makes the security performance low; and it is easy to verify the user information and/or password of a single user to make the client performing the authentication arbitrarily. In view of this, the switch operation authorization module 25 can also verify the identity information provided by two or more users. Specifically, the identity information provided by the different users is verified at least three times, and the electronic password lock 251 collects the identity information provided by the second user and performs verification, and obtains a first when the identity information provided by the second user is verified correctly. The identity information provided by the three users is verified. Therefore, at least the identity information provided by two different users needs to be verified and verified to be correct before the first manual switch 22 and the second manual switch 23 are operated. When the identity information provided by three different users is verified, the order of the identity information provided by the three users may be limited, that is, the identity information provided by the user must be verified first, and then the identity information provided by the user is verified. Finally, verify which user provides the identity information; or the order of the identity verification provided by the three users may be limited, that is, only the identity information provided by the three users needs to be verified, regardless of the three The order in which the user-provided identity information is verified. Of course, in other embodiments of the present invention, more user-provided identity information may be verified, which is not limited herein. The user who operates the first manual switch 22 and the second manual switch 23 may be one of the three users, or may be other users than the three users, and is not limited herein. Thus, after the identity information provided by two or more users is verified and the electronic password lock 251 is released, the security of the cabinet 252 is unlocked, and the security performance can be improved, and at the same time, two or more users are required to provide the security information. Identity information, wherein any one of the user operations on the first manual switch 22 and the second manual switch 23 at least needs to be supervised by at least one other user, that is, any one of the users cannot be free to the first manual The switch 22 and the second manual switch 23 operate to further improve the security of data storage.

The switch operation authorization module 25 and the first manual switch 22 and the second manual switch 23 are independent components of the processor 24, independent of the processor. The impact of 24 is also immune to external influences such as network viruses and Trojans.

In the embodiment of the present invention, at least one user of the first manual switch 22 and the second manual switch 23 is authenticated by the switch operation authorization module 25, and when the identity authentication is passed, the switch operation authorization module 25 is opened. The operation authority of the first manual switch 22 and the second manual switch 23 to open or connect can further prevent the data of the memory 21 from being illegally modified, thereby further improving the security of data storage.

Figure 3 is a block diagram showing the structure of a computer in accordance with a third embodiment of the present invention. As shown in FIG. 3, the computer 30 includes: a memory 31, a first manual switch 32, a second manual switch 33, and a processor. 34. The switch operation authorization module 35 and the image memory 36. The processor 34 is provided with a first read enable terminal 341 and a first write enable terminal 342. The first read enable terminal 341 is for issuing a read enable signal under the control of the processor 34, and the first write enable terminal 342 is configured to issue a write enable signal under the control of the processor 34. The memory 31 is provided with a second read enable terminal 311 and a second write enable terminal 312. The second read enable terminal 311 is connected to the first read enable terminal 341 for receiving the read enable signal, and the second write enable terminal 312 is coupled to the first write enable terminal 342 for receiving the write enable signal. The first manual switch 32 is disposed between the first read enable end 341 and the second read enable end 311. The first manual switch 32 is configured to manually control the first read enable end 341 and the second read enable end 311. Connect or disconnect. The second manual switch 33 is disposed between the first write enable terminal 342 and the second write enable terminal 312, and the second manual switch 32 is manually controlled to cause the first write enable terminal 342 and the second write enable terminal. Connect or disconnect between 312. The mirror memory 36 is a mirror image of the memory 31. The mirror memory 36 includes a third read enable terminal 361 and a third write enable terminal 362. The third read enable terminal 361 is directly connected to the first read enable terminal 341 for receiving the read enable signal, and the third write enable terminal 362 is directly connected to the first write enable terminal 342 for receiving write enable. signal. The switch operation authorization module 35 is configured to perform identity authentication on at least one user of the first manual switch 32 and the second manual switch 33. When the identity authentication is passed, the switch operation authorization module 35 is opened to the first manual switch 32 and the first The second manual switch 33 performs the operation permission to disconnect or connect.

In the embodiment of the present invention, the memory 31 is set to be accessible by an Internet user, and the mirror memory 36 is set to be inaccessible to Internet users. The processor 34 further includes a plurality of first data transmission ends 343. The memory 32 further includes a plurality of second data transmission ends 313 respectively connected to the first data transmission end 343. The mirror memory 36 further includes a first data transmission end 343. A plurality of third data transmission ends 363 are connected.

In the embodiment of the present invention, the first manual switch 32 is manually controlled to connect the first read enable terminal 341 and the second read enable terminal 311, and the processor 34 issues a read enable through the first read enable terminal 341. The signal is such that when the second read enable terminal 311 and the third read enable terminal 361 receive the read enable signal, the processor 34 passes the plurality of first data transfer terminals 343 and the plurality of second data transfer terminals 313 from the memory 31. The data is read, and data is read from the mirror memory 36 through the plurality of first data transfer terminals 343 and the plurality of third data transfer terminals 363. The first manual switch 32 is manually controlled to disconnect the first read enable terminal 341 and the second read enable terminal 311, and the processor 34 issues a read enable signal through the first read enable terminal 341, so that only the third When the read enable terminal 361 receives the read enable signal, the processor 34 reads data from the image memory 36 through the plurality of first data transfer terminals 341 and the plurality of third data transfer terminals 361.

The second manual switch 33 is manually controlled to connect the first write enable terminal 342 and the second write enable terminal 312, and the processor 34 issues a write enable signal through the first write enable terminal 342, so that the second write When the enable terminal 312 and the third write enable terminal 362 receive the write enable signal, the processor 34 writes data to the memory 31 through the plurality of first data transfer terminals 343 and the plurality of second data transfer terminals 313, and passes the data. The plurality of first data transfer terminals 343 and the plurality of third data transfer terminals 363 write data to the mirror memory 36. The second manual switch 33 is manually controlled to disconnect the first write enable terminal 342 and the second write enable terminal 312, and the processor 34 issues a write enable signal through the first write enable terminal 342, so that only the first When the write enable 362 receives the write enable signal, the processor 34 writes data to the mirror memory 36 through the plurality of first data transfer terminals 343 and the plurality of third data transfer terminals 363. Thus, when the computer 30 is connected to the Internet, the second manual switch 33 is manually controlled to disconnect between the first write enable terminal 342 and the second write enable terminal 312. When the computer 30 is invaded by the network, the image memory 36 is The stored data is changed in accordance with the write enable signal issued by the processor 34, and the data stored in the memory 31 is not actually changed. The computer 30 further includes a comparison module (not shown). The comparison module compares the data in the memory 31 with the image memory 36. If the two are inconsistent, it is determined that the computer 30 is invaded by the network, thus preventing the memory 31 from being subjected to illegal network intrusion. .

In the embodiment of the present invention, the computer 30 may further include a second memory (not shown) identical to the memory 31, and the second memory is a backup memory of the memory 31 for backing up data of the memory. A manual switch is provided between the read enable end of the second memory and the read enable end of the processor 34 and between the write enable end of the second memory and the write enable end of the processor 34, respectively. The data data transmission end of the second memory is also directly connected to the data transmission end of the processor for data transmission. When the memory 31 is in normal use, the memory 31 is set to be accessible by an Internet user, and the second memory is set to be inaccessible to an Internet user. When the memory 31 is damaged or cannot be used normally, the computer 30 can automatically switch to the second memory directly for normal reading and writing of data, and the mirror memory 36 is automatically switched to mirror the modeling memory. At this time, the switch operation authorization module 35 is also required to be respectively disposed between the read enable end of the second memory and the read enable end of the processor 34 and the write enable end of the second memory and the write of the processor 34. At least one user of the manual switch between the energy terminals performs identity authentication, and when the identity authentication passes, the switch operation authorization module 35 opens the operation authority for disconnecting or connecting the two manual switches.

When the computer 30 is connected to the Internet, the manual switch is manually controlled to disconnect the write enable 342 of the second memory from the write enable 312 of the processor 34. When the computer 30 is compromised by the network, the data stored in the mirror memory 36 is changed in accordance with the write enable signal issued by the processor 34, and the data stored in the second memory is not actually changed. The comparison module compares the data in the second memory with the image memory 36. If the two are inconsistent, it is determined that the computer 30 is invaded by the network. This also prevents the second memory from being subjected to illegal network intrusion.

In the embodiment of the present invention, the data in the memory 31 can also define a part of the data to be read and written by the manual control of the first manual switch 32 and the second manual switch 33. Specifically, the portion of the data in the memory 31 can be written or read by operating the first manual switch 32 or the second manual switch 33 only after the authentication of the authorization module 35 is operated by the switch and the authentication is passed. It can prevent illegal network intrusion.

4 is a flow chart showing a network intrusion detection method of a computer according to a first embodiment of the present invention. As shown in FIG. 4, the network intrusion detection method of the computer 30 includes:

Step S10: The setting memory 31 is set to be accessible by an Internet user, and the mirror memory 36 is set to be inaccessible to Internet users.

The specific structure of the computer 30 is shown in FIG. 3. The mirror memory 36 is a mirror image of the memory 31.

Step S11: The second manual switch 33 is manually controlled to disconnect between the first write enable terminal 342 and the second write enable terminal 312; compare the data in the memory 31 with the image memory 36, if the two are inconsistent, Then, it is judged that the computer 30 is invaded by the network. If the two are consistent, it is judged that the computer 30 is not invaded by the network.

In summary, the present invention is provided with a first read enable terminal for issuing a read enable signal under the control of the processor; and a first write enable terminal for issuing a write enable signal under the control of the processor; The second read enable end of the memory is connected to the first read enable end for receiving the read enable signal; the second write enable end is connected to the first write enable end for receiving the write enable signal; a manual switch is disposed between the first read enable end and the second read enable end, and the first manual switch is manually controlled to connect or disconnect between the first read enable end and the second read enable end; The second manual switch is disposed between the first write enable end and the second write enable end, and the second manual switch is manually controlled to connect or disconnect the first write enable end and the second write enable end. The switch operation authorization module is configured to perform identity authentication on at least one user of the first manual switch and the second manual switch, and when the identity authentication is simultaneously passed, the switch operation authorization module is opened to the first manual switch and the second manual The operation permission of the switch to disconnect or connect can further improve the security of data storage. Sex.

The above is only the embodiment of the present invention, and is not intended to limit the scope of the invention, and the equivalent structure or equivalent process transformation of the present invention and the contents of the drawings may be directly or indirectly applied to other related technologies. The fields are all included in the scope of patent protection of the present invention.

Claims (16)

 A computer characterized by comprising: Processor with: a first read enable terminal for issuing a read enable signal under control of the processor; a first write enable terminal for issuing a write enable signal under control of the processor; Memory with:  a second read enable terminal, coupled to the first read enable terminal, for receiving the read enable signal; a second write enable terminal coupled to the first write enable terminal for receiving the write enable signal; a first manual switch disposed between the first read enable end and the second read enable end, the first manual switch being manually controlled to cause the first read enable end and the second Connect or disconnect between the read enable terminals; a second manual switch disposed between the first write enable end and the second write enable end, the second manual switch being manually controlled to cause the first write enable end and the Connecting or disconnecting the second write enable terminals; a switch operation authorization module, configured to perform identity authentication on at least one user of the first manual switch and the second manual switch, and when the identity authentication is simultaneously passed, the switch operation authorization The module is open to operate the disconnection or connection of the first manual switch and the second manual switch; The processor further includes a plurality of first data transmission ends, the memory further includes a plurality of second data transmission ends respectively connected to the first data transmission end, the memory being configured to be accessible by an Internet user . The computer according to claim 1, wherein the first manual switch is manually controlled to connect the first read enable end and the second read enable end, and the processor passes The first read enable end issues the read enable signal, so that when the second read enable end receives the read enable signal, the processor passes the plurality of first data transmission ends and The plurality of second data transmission terminals read data from the memory. The computer according to claim 1, wherein the second manual switch is manually controlled to connect the first write enable end and the second write enable end, and the processor Sending, by the first write enable end, the write enable signal, when the second write enable end receives the write enable signal, the processor passes the plurality of first data transmission ends And the plurality of second data transmission ends write data to the memory. The computer according to claim 1, wherein the first manual switch and the second manual switch are at least one of a wire switch, a knife switch, and a push button switch. The computer according to claim 1, wherein said switch operation authorization module comprises an electronic code lock and a case, said electronic code lock is for locking said case, said first manual switch and said The second manual switch is disposed in the box, and the electronic password lock collects at least one identity information provided by the user, and when it is determined that the collected identity information is consistent with the pre-stored identity information, the identity authentication is passed. The electronic code lock unlocks the box. When it is determined that the collected identity information is inconsistent with the pre-stored identity information, the identity authentication fails, and the electronic code lock remains locked to the box. The computer of claim 5 wherein said identity information comprises at least one or a combination of user information, passwords.  The computer of claim 6, wherein the password is at least one of a password, a fingerprint, a retina, and an iris. A computer characterized by comprising: Processor with: a first read enable terminal for issuing a read enable signal under control of the processor; a first write enable terminal for issuing a write enable signal under control of the processor; Memory with:  a second read enable terminal, coupled to the first read enable terminal, for receiving the read enable signal; a second write enable terminal coupled to the first write enable terminal for receiving the write enable signal; a first manual switch disposed between the first read enable end and the second read enable end, the first manual switch being manually controlled to cause the first read enable end and the second Connect or disconnect between the read enable terminals; a second manual switch disposed between the first write enable end and the second write enable end, the second manual switch being manually controlled to cause the first write enable end and the Connecting or disconnecting the second write enable terminals; a switch operation authorization module, configured to perform identity authentication on at least one user of the first manual switch and the second manual switch, and when the identity authentication is simultaneously passed, the switch operation authorization The module opens an operation authority for disconnecting or connecting the first manual switch and the second manual switch. The computer according to claim 8, wherein the processor further comprises a plurality of first data transmission terminals, the memory further comprising a plurality of second data transmission ends respectively connected to the first data transmission end . The computer according to claim 9, wherein the first manual switch is manually controlled to connect the first read enable end and the second read enable end, and the processor passes The first read enable end issues the read enable signal, so that when the second read enable end receives the read enable signal, the processor passes the plurality of first data transmission ends and The plurality of second data transmission terminals read data from the memory. The computer according to claim 9, wherein the second manual switch is manually controlled to connect the first write enable end and the second write enable end, and the processor Sending, by the first write enable end, the write enable signal, when the second write enable end receives the write enable signal, the processor passes the plurality of first data transmission ends And the plurality of second data transmission ends write data to the memory. The computer of claim 8 wherein said memory is configured to be accessible by an Internet user. The computer of claim 8, wherein the first manual switch and the second manual switch are at least one of a wire switch, a knife switch, and a push button switch. The computer according to claim 8, wherein said switch operation authorization module comprises an electronic code lock and a case, said electronic code lock is for locking said case, said first manual switch and said The second manual switch is disposed in the box, and the electronic password lock collects at least one identity information provided by the user, and when it is determined that the collected identity information is consistent with the pre-stored identity information, the identity authentication is passed. The electronic code lock unlocks the box. When it is determined that the collected identity information is inconsistent with the pre-stored identity information, the identity authentication fails, and the electronic code lock remains locked to the box. The computer of claim 14, wherein the identity information comprises at least one or a combination of user information, a password. The computer according to claim 15, wherein the password is at least one of a password, a fingerprint, a retina, and an iris.