CN101968843A - Computer operation locking device - Google Patents

Abstract

Translated fromChinese

本发明公开了一种计算机运行锁定装置，包括短距离无线控制模块、与短距离无线控制模块相连的MCU模块以及与MCU模块相连的PCI总线接口模块，其中短距离无线控制模块包括与MCU模块相连的机内主体以及与机内主体相连的机外主体。本发明防御措施好、安全性高。

The invention discloses a computer operation locking device, which comprises a short-distance wireless control module, an MCU module connected with the short-distance wireless control module, and a PCI bus interface module connected with the MCU module, wherein the short-distance wireless control module includes a short-distance wireless control module connected with the MCU module The inner body of the machine and the outer body connected with the inner body. The invention has good defense measures and high safety.

Description

Translated fromChinese

一种计算机运行锁定装置A lock device for running a computer

技术领域technical field

本发明涉及计算机单机信息的硬件安全防护领域，具体地说是一种基于短距离无线控制和PCI总线硬件中断的计算机运行锁定装置。The invention relates to the field of hardware safety protection of computer stand-alone information, in particular to a computer operation locking device based on short-distance wireless control and PCI bus hardware interruption.

背景技术Background technique

近年来，计算机和网络技术不断发展，PC机的使用越来越普及，随之带来的信息安全问题也越发泛滥。根据调查总结，不考虑网络因素，造成计算机数据丢失的主要原因是：人为窃取和篡改、计算机电磁辐射、计算机存储器硬件损坏等。针对人为窃取和篡改，目前市场上应对方案不多，比较被认可的有开机身份认证和文件权限设置。In recent years, with the continuous development of computer and network technology, the use of PCs has become more and more popular, and the problems of information security have also become more and more widespread. According to the survey conclusion, regardless of network factors, the main causes of computer data loss are: human theft and tampering, computer electromagnetic radiation, computer memory hardware damage, etc. For human theft and tampering, there are not many countermeasures on the market at present, and the more recognized ones include power-on identity authentication and file permission setting.

开机身份认证是通过输入使用者拥有的一些信息以认证使用者的身份和使用权限，从而达到隔离不明身份使用者的方法。目前通用的并且比较简单的方案是在系统启动前进行指纹识别或者输入开机密钥，符合后计算机才可以正常进入系统，并为用户分配一定的文件修改权限。但是此方案虽然简单，却容易通过DOS工具箱或安全模式被破解，安全性不高。Power-on identity authentication is a method of isolating unknown users by entering some information owned by the user to verify the user's identity and access rights. At present, the general and relatively simple solution is to perform fingerprint identification or enter the power-on key before the system starts, and the computer can enter the system normally only after it meets the requirements, and assign certain file modification permissions to the user. But although this scheme is simple, it is easy to be cracked through DOS toolbox or safe mode, and the security is not high.

文件权限设置包括系统自带的用户权限设置和文件加密软件。系统自带的用户权限设置是基于开机身份认证的，所以安全性受开机身份认证的限制不高。文件加密软件以某种特殊的算法改变原有的信息数据，使得未授权的用户即使获得了已加密的信号，但因不知解密的方法，仍然无法了解信息的内容。加密建立在对信息进行数学编码和解码的基础上，密钥存在被攻破的危险，所以加密软件的安全性也不高。File permission settings include the system's own user permission settings and file encryption software. The system's built-in user authority settings are based on power-on identity authentication, so security is not limited by power-on identity authentication. File encryption software uses a special algorithm to change the original information data, so that even if an unauthorized user obtains the encrypted signal, they still cannot understand the content of the information because they do not know the decryption method. Encryption is based on mathematical encoding and decoding of information, and the key is in danger of being compromised, so the security of encryption software is not high.

发明内容Contents of the invention

发明目的：针对上述现有技术存在的问题和不足，本发明的目的是提供一种针对人为窃取和篡改数据的安全性高、安全防护措施好的计算机运行锁定装置。Purpose of the invention: Aiming at the problems and deficiencies in the above-mentioned prior art, the purpose of the present invention is to provide a computer operation locking device with high security and good security protection measures against artificial theft and tampering of data.

技术方案：为达到上述目的，本发明的技术方案为一种计算机运行锁定装置，包括短距离无线控制模块、与短距离无线控制模块相连的MCU模块(MCU(MicroControl Unit)中文名称为微控制单元，又称单片微型计算机(Single ChipMicrocomputer)或者单片机，是指随着大规模集成电路的出现及其发展，将计算机的CPU、RAM、ROM、定时计数器和多种I/O接口集成在一片芯片上，形成芯片级的计算机，为不同的应用场合做不同组合控制的常见存储器件)以及与MCU模块相连的PCI总线接口模块，其中短距离无线控制模块包括与MCU模块相连的机内主体以及与机内主体相连的机外主体。Technical solution: In order to achieve the above object, the technical solution of the present invention is a computer operation locking device, comprising a short-distance wireless control module, an MCU module (MCU (MicroControl Unit) Chinese name is a micro-control unit) connected to the short-distance wireless control module , also known as single-chip microcomputer (Single Chip Microcomputer) or single-chip microcomputer, refers to that with the emergence and development of large-scale integrated circuits, the computer's CPU, RAM, ROM, timing counters and various I/O interfaces are integrated into a chip On the basis of forming a chip-level computer, a common storage device for different combinations of controls for different applications) and a PCI bus interface module connected to the MCU module, the short-distance wireless control module includes an internal body connected to the MCU module and a The outer body to which the inner body is connected.

所述MCU模块与机内主体通过电平转换芯片MAX232(MAX232芯片是美信公司专门为电脑的RS-232标准串口设计的单电源电平转换芯片，使用+5v单电源供电)相连。The MCU module is connected to the main body in the machine through a level conversion chip MAX232 (the MAX232 chip is a single power level conversion chip specially designed by Maxim for the RS-232 standard serial port of a computer, and uses a +5v single power supply).

所述体内主体包括与电平转换芯片MAX232相接的串口蓝牙适配器。The main body in the body includes a serial Bluetooth adapter connected with a level conversion chip MAX232.

所述体外主体包括与体内主体相适配的合法用户手机以及与体内主体不相适配的非法用户手机。The body outside the body includes a legal user's mobile phone that is compatible with the body inside the body and an illegal user's mobile phone that is not compatible with the body inside the body.

所述PCI总线接口模块包括与MCU模块相接的PCI总线通用接口芯片以及与其相接的PCI总线插槽。The PCI bus interface module includes a PCI bus common interface chip connected with the MCU module and a PCI bus slot connected with it.

有益效果：本发明防御措施好、安全性高。Beneficial effects: the invention has good defense measures and high safety.

附图说明Description of drawings

图1为本发明整体结构框图；Fig. 1 is a block diagram of the overall structure of the present invention;

图2为本发明实际硬件构成框图；Fig. 2 is a block diagram of actual hardware of the present invention;

图3为单片机程序流程图；Fig. 3 is the flow chart of single-chip microcomputer program;

图4为电平转换芯片电路原理图；Fig. 4 is a circuit schematic diagram of a level conversion chip;

图5为CH365和PCI插槽电路原理图；Figure 5 is a schematic diagram of CH365 and PCI slot circuit;

图6为51单片机电路原理图。Figure 6 is a schematic diagram of the 51 microcontroller circuit.

具体实施方式Detailed ways

下面结合附图和具体实施例，进一步阐明本发明，应理解这些实施例仅用于说明本发明而不用于限制本发明的范围，在阅读了本发明之后，本领域技术人员对本发明的各种等价形式的修改均落于本申请所附权利要求所限定的范围。Below in conjunction with accompanying drawing and specific embodiment, further illustrate the present invention, should be understood that these embodiments are only for illustrating the present invention and are not intended to limit the scope of the present invention, after having read the present invention, those skilled in the art will understand various aspects of the present invention Modifications in equivalent forms all fall within the scope defined by the appended claims of this application.

如图1和图2所示，一种计算机运行锁定装置，包括短距离无线控制模块1，短距离无线控制模块1包括机内主体4以及与其相连的机外主体5，体内主体4包括与电平转换芯片MAX232相接的串口蓝牙适配器，体外主体5包括与体内主体4相适配的合法用户手机以及与体内主体4不相适配的非法用户手机。在体内主体4上接有电平转换芯片MAX232，在电平转换芯片MAX232上接有MCU模块2，在MCU模块2上接有PCI总线接口模块3，PCI总线接口模块3包括与MCU模块2相接的PCI总线通用接口芯片以及与其相接的PCI总线插槽。As shown in Figures 1 and 2, a computer operation locking device includes a short-distancewireless control module 1. The short-distancewireless control module 1 includes aninternal body 4 and anexternal body 5 connected thereto. The serial port bluetooth adapter connected with the flat switching chip MAX232, thebody 5 outside the body includes a mobile phone of a legal user compatible with thebody 4 inside the body and an illegal user mobile phone not compatible with thebody 4 inside the body. Themain body 4 in the body is connected with a level conversion chip MAX232, the level conversion chip MAX232 is connected with anMCU module 2, and theMCU module 2 is connected with a PCIbus interface module 3, and the PCIbus interface module 3 includes The connected PCI bus general interface chip and the connected PCI bus slot.

短距离无线控制模块负责监控合法用户的状态，在本发明中我们用蓝牙身份识别技术实现，也可以用射频卡技术或红外遥控技术等实现。分为主体和载体，其中主体在机箱内部，按一定周期发送搜索载体蓝牙的信号并根据返回信息为MCU提供状态信号；载体携带用户的信息，在本发明中为用户手机中集成的蓝牙设备，载体在接收到主体发送的搜索信号后给出返回信息作为主体的判断依据。蓝牙串口适配器与手机蓝牙进行配对连接，蓝牙系统的链路管理负责连接、建立和拆除链路并进行安全控制。根据蓝牙规范，蓝牙主体设备(即蓝牙适配器)采用“心跳”技术对用户信息载体(即手机蓝牙)进行监控管理，主体每隔一定周期发送搜索信息给载体，如果该载体接收到搜索信息并给出响应，则主体蓝牙适配器自动判定链路建立，并返回连接建立的状态信号给MCU，如果该载体在一定时间内无响应，主体蓝牙适配器自动判定链路断开，并返回连接断开的状态信号给MCU。由此实现实时、自动的监控。The short-distance wireless control module is responsible for monitoring the status of legal users. In the present invention, we use bluetooth identification technology to realize it, and can also use radio frequency card technology or infrared remote control technology to realize it. It is divided into a main body and a carrier, wherein the main body is inside the chassis, sends a signal to search for the carrier bluetooth at a certain period and provides a status signal for the MCU according to the returned information; After receiving the search signal sent by the subject, the carrier gives the returned information as the judgment basis of the subject. The Bluetooth serial port adapter is paired and connected with the Bluetooth of the mobile phone, and the link management of the Bluetooth system is responsible for connecting, establishing and tearing down the link and performing security control. According to the Bluetooth specification, the Bluetooth main device (that is, the Bluetooth adapter) uses the "heartbeat" technology to monitor and manage the user information carrier (that is, the mobile phone Bluetooth). The main body sends search information to the carrier at regular intervals. If the carrier receives the search information and gives If there is no response, the main Bluetooth adapter automatically determines that the link is established, and returns a status signal of connection establishment to the MCU. If the carrier does not respond within a certain period of time, the main Bluetooth adapter automatically determines that the link is disconnected, and returns to the disconnected state Signal to MCU. This enables real-time, automatic monitoring.

由于目前市场上大部分手机都集成了蓝牙通讯功能，且考虑到手机蓝牙地址都是唯一的，以手机蓝牙作为用户信息载体具有可识别性，所以我们不再配备另外的蓝牙信号载体，而是使用计算机合法操作者的手机蓝牙作为载体设备提供用户的身份信息。Since most mobile phones currently on the market have integrated Bluetooth communication functions, and considering that the Bluetooth address of the mobile phone is unique, it is identifiable to use the mobile phone Bluetooth as the user information carrier, so we no longer equip another Bluetooth signal carrier, but Use the bluetooth of the mobile phone of the legal operator of the computer as the carrier device to provide the user's identity information.

计算机终端的串口蓝牙适配器作为主体设备，会主动搜索已记忆配对的蓝牙设备并进行配对以提供用户身份信息。串口蓝牙适配器由蓝牙核心模块和底板构成。基于Class 2的BCO4蓝牙核心模块采用CSR(Cambridge Silicon Radio)公司的BlueCore4-External蓝牙芯片，完全遵循蓝牙系统的数据和音频连接。采用UART主设备接口，最高支持3Mbps的数据速率。模块和设备固件完全兼容蓝牙规范V2.0。集成了底板的蓝牙模块可以通过RS232串口和单片机通信，并为单片机提供状态信息，完成身份认证过程。The serial port Bluetooth adapter of the computer terminal, as the main device, will actively search for the paired Bluetooth devices that have been memorized and paired to provide user identity information. The serial Bluetooth adapter consists of a Bluetooth core module and a backplane. The BCO4 Bluetooth core module based onClass 2 adopts the BlueCore4-External Bluetooth chip of CSR (Cambridge Silicon Radio), which completely follows the data and audio connection of the Bluetooth system. It adopts UART master device interface and supports a data rate of up to 3Mbps. The module and device firmware are fully compatible with Bluetooth specification V2.0. The Bluetooth module integrated with the backplane can communicate with the single-chip microcomputer through the RS232 serial port, and provide status information for the single-chip microcomputer to complete the identity authentication process.

考虑到金属机箱有屏蔽作用，为了蓝牙模块的主体和载体可以更好地通信，建议在蓝牙核心模块上外接天线，可以拉到机箱外接收发送信号。Considering the shielding effect of the metal case, in order to better communicate between the main body and the carrier of the Bluetooth module, it is recommended to connect an external antenna to the Bluetooth core module, which can be pulled out of the case to receive and send signals.

PCI总线接口模块主要负责将MCU发来的状态信号转化为符合复杂的PCI总线协议的硬件中断请求信号，并通过PCI总线设备不断向计算机发送硬件中断达到占用CPU从而锁住计算机的目的，为了简化设计需要使用PCI总线通用接口芯片为核心芯片，比如PCI9052或CH365，在此作品中我们使用了CH365。The PCI bus interface module is mainly responsible for converting the status signal sent by the MCU into a hardware interrupt request signal conforming to the complex PCI bus protocol, and continuously sending hardware interrupts to the computer through the PCI bus device to occupy the CPU and lock the computer. The design needs to use the PCI bus general interface chip as the core chip, such as PCI9052 or CH365, and we use CH365 in this work.

PCI总线发送的高频硬件中断请求之所以能高百分比占用CPU从而锁住计算机是因为PCI总线允许实现中断共享即所有的PCI卡都在PCI总线上共享同一个中断。目前市场上的显卡都是PCI卡形式，插在计算机PCI express卡槽里，而CPU为显卡分配的中断号是16，处于高优先级，显卡驱动中包含有对显卡中断请求的响应程序。根据PCI中断指导法，在PCI插槽中插入任何一个新的设备，windows会自动给该设备分配16号中断。设备发出模拟显卡的中断请求，CPU根据中断号判断，跳转到显卡的中断响应程序执行。由于显卡中断的高优先级，PCI总线的硬件中断请求都能得到CPU的响应从而占用CPU；显卡驱动为计算机中已有部分，设备不需要再做出复杂的驱动，仅需要简单的设备识别驱动，避免了软件部分带来的隐患。The reason why the high-frequency hardware interrupt requests sent by the PCI bus can occupy a high percentage of the CPU and lock the computer is because the PCI bus allows interrupt sharing, that is, all PCI cards share the same interrupt on the PCI bus. At present, the graphics cards on the market are in the form of PCI cards, which are inserted into the PCI express card slot of the computer, and the interrupt number assigned by the CPU to the graphics card is 16, which is at a high priority. The graphics card driver includes a response program to the graphics card interrupt request. According to the PCI interrupt guidance method, when any new device is inserted into the PCI slot, windows will automatically assign the No. 16 interrupt to the device. The device sends out the interrupt request of the analog graphics card, and the CPU judges according to the interrupt number, and jumps to the interrupt response program of the graphics card for execution. Due to the high priority of the graphics card interrupt, the hardware interrupt request of the PCI bus can get the response of the CPU and occupy the CPU; the graphics card driver is an existing part of the computer, and the device does not need to make a complicated driver, only a simple device identification driver is needed , to avoid the hidden dangers brought by the software part.

本发明只用到通用接口芯片CH365的本地中断功能，根据其配置要求，数据线D3应配以4K7电阻下拉到地。其他信号线如地址线及IOP、MEM_wr线等可以悬空不连。由于CH365属于高频芯片，应考虑数字信号阻抗匹配。同时应在VCC与GND之间加电源退偶电容加以滤波，稳定电源信号避免干扰。The present invention only uses the local interrupt function of the general interface chip CH365, and according to its configuration requirements, the data line D3 should be pulled down to the ground with a 4K7 resistor. Other signal lines such as address lines, IOP, MEM_wr lines, etc. can be left unconnected. Since CH365 is a high-frequency chip, digital signal impedance matching should be considered. At the same time, a power decoupling capacitor should be added between VCC and GND for filtering to stabilize the power signal and avoid interference.

如图3所示，MCU处理模块负责提供设置模式和工作模式，在此作品中由简单方便的51单片机作为核心芯片，也可以根据不同的使用要求选择其他单片机芯片。首次使用之前或需要更改合法用户信息时，用户需要首先选择设置模式，并在计算机不远处打开手机蓝牙，MCU控制计算机终端串口蓝牙适配器查询周围的新用户蓝牙信息并进行存储和配对；设置完成之后，在工作模式，根据已经存储配对的用户蓝牙地址，MCU控制蓝牙适配器按一定周期搜索合法用户的蓝牙载体，并根据短距离无线控制模块返回的连接状态信号，向PCI总线接口发送状态信号。As shown in Figure 3, the MCU processing module is responsible for providing the setting mode and working mode. In this work, the simple and convenient 51 single-chip microcomputer is used as the core chip, and other single-chip microcomputer chips can also be selected according to different usage requirements. Before using for the first time or when you need to change the legal user information, the user needs to select the setting mode first, and turn on the Bluetooth of the mobile phone not far from the computer. The MCU controls the computer terminal serial port Bluetooth adapter to query the Bluetooth information of new users around and store and pair it; the setting is completed Afterwards, in the working mode, according to the user's Bluetooth address that has been paired, the MCU controls the Bluetooth adapter to search for the legal user's Bluetooth carrier in a certain period, and sends a status signal to the PCI bus interface according to the connection status signal returned by the short-distance wireless control module.

如图4所示，MAX232是一款将CMOS电平标准与串口电平标准进行转换的芯片。在本系统中实现的是单片机与串口蓝牙适配器的连接，并通过串口232的Vcc脚和GND脚由单片机为串口蓝牙适配器供电。As shown in Figure 4, MAX232 is a chip that converts the CMOS level standard and the serial port level standard. What is realized in this system is the connection between the single-chip microcomputer and the serial port Bluetooth adapter, and the serial port Bluetooth adapter is powered by the single-chip microcomputer through the Vcc pin and the GND pin of theserial port 232.

如图5所示，CH365为PCI协议通用接口芯片，支持低电平有效的中断请求，如果数据线D3连接下拉电阻，则工作模式设定为启用中断功能，SYS_EX引脚复用为INT_REQ，作为本地中断请求输入引脚。当INT_REQ引脚检测到低电平后，CH365的中断激活状态位(即芯片控制寄存器的位2)自动设置为1，CH365通过PCI_INTA引脚向PCI总线申请中断。此时即使INT_REQ引脚再恢复为高电平，CH365依然保持在中断激活状态，直到PC机的CH365中断服务程序将CH365的中断激活状态位清除为0。但是，如果清除中断激活状态位后INT_REQ引脚仍然检测到低电平，则CH365再次进入中断激活状态。如果PC机程序以软件方式将CH365的中断激活状态位设置为1，也可以使CH365进入中断激活状态，从而向PCI总线申请中断。这样的软件中断与由外部INT_REQ低电平导致的硬件中断具有完全相同的特性，可以用于测试CH365的中断功能。CH365可以有效的支持本地硬件中断，通过简单的配置即可实现可控性本地中断请求，大大简化了我们的开发过程。As shown in Figure 5, CH365 is a general-purpose interface chip for the PCI protocol, which supports low-level active interrupt requests. If the data line D3 is connected to a pull-down resistor, the working mode is set to enable the interrupt function, and the SYS_EX pin is multiplexed as INT_REQ, as Local interrupt request input pin. When the INT_REQ pin detects a low level, the interrupt activation status bit of the CH365 (that is, thebit 2 of the chip control register) is automatically set to 1, and the CH365 applies for an interrupt to the PCI bus through the PCI_INTA pin. At this time, even if the INT_REQ pin returns to high level again, CH365 remains in the interrupt active state until the CH365 interrupt service program of the PC clears the interrupt active state bit of CH365 to 0. However, if the INT_REQ pin still detects a low level after clearing the interrupt active status bit, CH365 will enter the interrupt active status again. If the PC program sets the interrupt active state bit of CH365 to 1 by software, it can also make CH365 enter the interrupt active state, so as to apply for an interrupt to the PCI bus. Such software interrupt has exactly the same characteristics as the hardware interrupt caused by external INT_REQ low level, and can be used to test the interrupt function of CH365. CH365 can effectively support local hardware interrupts, and controllable local interrupt requests can be realized through simple configuration, which greatly simplifies our development process.

如图6所示，51单片机为系统的控制核心，通过MAX232芯片跟串口通信，单片机的P3.0脚为串口信息发送脚，P3.1脚为串口信息接收脚，为方便随时检查单片机和串口之间的通信是否正常进行，我们在发送脚和接收脚上都接有指示灯，每当信息发送和接收时对应的指示灯会闪亮。As shown in Figure 6, the 51 single-chip microcomputer is the control core of the system. It communicates with the serial port through the MAX232 chip. The P3.0 pin of the single-chip microcomputer is the serial port information sending pin, and the P3.1 pin is the serial port information receiving pin. Whether the communication between them is normal, we have indicator lights on both the sending pin and the receiving pin, and the corresponding indicator light will flash whenever the information is sent and received.

本发明使用时，在设置状态下，合法的新用户在计算机附近打开手机蓝牙，基于PCI设备中断的计算机硬件安全防护模块会主动搜索周围的蓝牙信息，并提出连接建立请求，手机用户输入正确的PIN码之后配对连接建立，计算机端蓝牙适配器在建立连接后自动存储已配对的蓝牙信息，为工作状体提供载体蓝牙信息。When the present invention is used, in the setting state, a legal new user turns on the bluetooth of the mobile phone near the computer, and the computer hardware security protection module based on PCI device interruption will actively search for the surrounding bluetooth information, and propose a connection establishment request, and the mobile phone user inputs the correct After the PIN code, the pairing connection is established, and the computer-side Bluetooth adapter automatically stores the paired Bluetooth information after the connection is established, and provides carrier Bluetooth information for the working body.

在工作状态，合法用户携带手机蓝牙离开计算机5米左右或者主动关闭蓝牙后1分钟内CPU使用率达到100％(由processexplorer1204测定硬件中断CPU使用率65％以上)，计算机完全卡死；合法用户走近计算机并且打开手机蓝牙后，15S内计算机恢复正常工作。计算机卡死后即使强制关机后重启，也会被迫停留在开机界面处卡死，因为在正常进入windows系统之前计算机已经开始为PCI板卡供电，PCI板卡供电后不断发送高频硬件中断请求，使计算机无法正常启动进入windows系统，直到配对的蓝牙载体被搜索到并建立连接。In the working state, if the legal user carries the bluetooth of the mobile phone away from the computer for about 5 meters or actively turns off the bluetooth within 1 minute, the CPU usage reaches 100% (the hardware interrupt CPU usage is more than 65% as measured by processexplorer1204), the computer is completely stuck; the legal user walks away After approaching the computer and turning on the Bluetooth of the mobile phone, the computer will resume normal operation within 15 seconds. After the computer is stuck, even if it is forced to shut down and then restarted, it will be forced to stay at the boot interface, because the computer has started to supply power to the PCI board before entering the Windows system normally, and the PCI board will continue to send high-frequency hardware interrupt requests after power supply , so that the computer cannot normally start into the windows system until the paired Bluetooth carrier is searched and established a connection.

Claims (5)

Translated fromChinese

1.一种计算机运行锁定装置，其特征在于：该装置包括短距离无线控制模块(1)、与短距离无线控制模块(1)相连的MCU模块(2)以及与MCU模块(2)相连的PCI总线接口模块(3)，其中短距离无线控制模块(1)包括与MCU模块(3)相连的机内主体(4)以及与机内主体(4)相连的机外主体(5)。1. A computer operation locking device is characterized in that: the device comprises a short-distance wireless control module (1), an MCU module (2) connected to the short-distance wireless control module (1) and a MCU module (2) connected to each other The PCI bus interface module (3), wherein the short-distance wireless control module (1) includes an internal body (4) connected to the MCU module (3) and an external body (5) connected to the internal body (4).2.根据权利要求1所述一种计算机运行锁定装置，其特征在于：所述MCU模块(2)与机内主体(4)通过电平转换芯片MAX232相连。2. A computer operation locking device according to claim 1, characterized in that: the MCU module (2) is connected to the main body (4) in the machine through a level conversion chip MAX232.3.根据权利要求1或2所述一种计算机运行锁定装置，其特征在于：所述体内主体(4)包括与电平转换芯片MAX232相接的串口蓝牙适配器。3. A computer running locking device according to claim 1 or 2, characterized in that: the body (4) in the body includes a serial port Bluetooth adapter connected with a level conversion chip MAX232.4.根据权利要求1所述一种计算机运行锁定装置，其特征在于：所述体外主体(5)包括与体内主体(4)相适配的合法用户手机以及与体内主体(4)不相适配的非法用户手机。4. A computer operation locking device according to claim 1, characterized in that: the external body (5) includes a mobile phone of a legitimate user that is compatible with the internal body (4) and an incompatible mobile phone with the internal body (4). The mobile phone of an illegal user.5.根据权利要求1所述一种计算机运行锁定装置，其特征在于：所述PCI总线接口模块(3)包括与MCU模块(2)相接的PCI总线通用接口芯片以及与其相接的PCI总线插槽。5. a kind of computer operation locking device according to claim 1, is characterized in that: described PCI bus interface module (3) comprises the PCI bus universal interface chip that joins with MCU module (2) and the PCI bus that joins with it slot.

Images