Abstract: The present invention discloses a shoreline structure and a construction method thereof, the structure includes a wave-absorbing submerged breakwater, a soil embankment, a shallow beach area, a deep-water ditch, and planting platforms. The wave-absorbing submerged breakwater includes a first gabion box and a first emergent plant on the top; the shallow beach area includes a third emergent plant; the deep-water ditch is located between the shallow beach area and the wave-absorbing submerged breakwater, and includes a submerged plant; planting platforms are dispersed within the deep-water ditch, and have a second emergent plant. The present invention dissipates the wind and waves on the shoreline slope through the wave-absorbing submerged breakwater, and the planting platforms are dotted in the deep-water ditch, creating wetland habitats alternating between deep and shallow water, and a near-shore waterfront wetland environment to purify and maintain the water quality of the lakes and reservoirs.

Abstract: The present invention discloses an external terminal protection device for data flow control and a corresponding protection system. The external terminal protection device includes: an interface control module, used for providing a plurality of data interfaces respectively connected to a protected host and one or more external devices; and a system control module, used for monitoring in real time a data transmission state of each data interface in the interface control module, and controlling the data flow of each data interface. The present invention realizes the functions of performing protocol filtering and auditing on various types of data flow without installing flow monitoring and security protection software on the protected host, and achieves the effects of low-latency network auditing and high-reliability protocol filtering, thereby comprehensively eliminating potential security hazards such as Trojan Horse virus implantation and flow anomaly that may be generated by the interfaces.

Abstract: The present invention discloses a hardware control logic based data forwarding control method and a corresponding data forwarding control system. The method includes: externally connecting a terminal protection device to a protected host, and taking over all the data interfaces of the protected host; and controlling by a hardware control logic in the terminal protection device the connection and/or disconnection of a physical circuit corresponding to data forwarding when an external device interacts data with the protected host via the terminal protection device, so as to control the data interaction between the external device and the protected host.

Abstract: The present invention discloses a hardware control logic based data forwarding control method and a corresponding data forwarding control system. The method includes: externally connecting a terminal protection device to a protected host, and taking over all the data interfaces of the protected host; and controlling by a hardware control logic in the terminal protection device the connection and/or disconnection of a physical circuit corresponding to data forwarding when an external device interacts data with the protected host via the terminal protection device, so as to control the data interaction between the external device and the protected host.

Abstract: The present invention provides an external terminal protection device and a corresponding protection system, the external terminal protection device including: an interface control module, used for providing an internal interface and an external interface, the internal interface being connected to a corresponding interface of a protected host, and the external interface being configured to access one or more external devices; and a system control module, used for connecting the interface control module, and controlling security authentication of the external devices accessed to the one or more external interfaces on the interface control module, so as to determine whether the external devices are licensed access devices. The present invention can protect the security of the protected host without installing security protection software on the protected host, thereby greatly reducing system security risks, and comprehensively eliminating the potential security hazards that may be generated by the interfaces.

Abstract: The present invention provides an external terminal protection device and a corresponding protection system, the external terminal protection device including: an interface control module, used for providing an internal interface and an external interface, the internal interface being connected to a corresponding interface of a protected host, and the external interface being configured to access one or more external devices; and a system control module, used for connecting the interface control module, and controlling security authentication of the external devices accessed to the one or more external interfaces on the interface control module, so as to determine whether the external devices are licensed access devices. The present invention can protect the security of the protected host without installing security protection software on the protected host, thereby greatly reducing system security risks, and comprehensively eliminating the potential security hazards that may be generated by the interfaces.

Abstract: The present invention discloses an external terminal protection device for data flow control and a corresponding protection system. The external terminal protection device includes: an interface control module, used for providing a plurality of data interfaces respectively connected to a protected host and one or more external devices; and a system control module, used for monitoring in real time a data transmission state of each data interface in the interface control module, and controlling the data flow of each data interface. The present invention realizes the functions of performing protocol filtering and auditing on various types of data flow without installing flow monitoring and security protection software on the protected host, and achieves the effects of low-latency network auditing and high-reliability protocol filtering, thereby comprehensively eliminating potential security hazards such as Trojan Horse virus implantation and flow anomaly that may be generated by the interfaces.