File secure transmission method, device and terminal

Abstract

The invention relates to a file secure transmission method and device and a terminal, and belongs to the technical field of communication. Comprising the steps of collecting and verifying user information, scanning a picture of a to-be-transmitted file after verification succeeds, obtaining a file serial number and file data, comparing the file serial number with a stored file serial number, and judging whether the to-be-transmitted file is a duplicate file or not; when the to-be-transmitted file is a duplicated file, performing re-scanning; when the to-be-transmitted file is not the duplicate file, storing the file data; wherein the file data is the remaining data after the first n bytes are deleted in the file to be transmitted; the file data is stored at the offset address of the file serial number, the calculation formula of the offset address is (file serial number-1) * m, and m is a specified megabyte; and after the storage is completed, reading the file data and decoding to check the integrity. According to the method, the risks of hacker attack, illegal data copying and sensitive information leakage can be reduced, and meanwhile, file transmission failures caused by network or storage medium problems are reduced.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a method, device and terminal for secure file transmission. Background Art

[0002] In today's information age, computer rooms and network systems are core facilities for data processing and storage, and their security is extremely important. In order to ensure a high level of security, most important institutions and enterprises adopt physical isolation strategies, combined with various types of network firewall systems, to build a strict protection system. This measure plays a key role in protecting the system from external attacks and illegal access, especially when maintaining an absolutely independent and secure network environment.

[0003] However, with the continuous advancement of technology and the increasing complexity of system requirements, system upgrades have become a necessary routine operation. In this process, the transmission of upgrade files has become an urgent problem to be solved. At present, common upgrade file transmission technologies mainly include two categories. The first category is network transmission, which connects a laptop to the network and uses a specific file transfer tool to achieve remote file transmission. Although this method improves the transmission efficiency to a certain extent, its security is difficult to guarantee. The corresponding port must be opened for the computer to access the network, which not only increases the risk of being attacked by hackers, but also may lead to the leakage of sensitive information, especially when connecting to an external network, the security risks are more prominent. The second category is media copying, using storage media such as USB interfaces to copy upgrade files from external devices to the target system. Although this method has certain advantages in ease of operation, its security cannot be ignored. The use of USB interfaces may not only introduce U disk viruses, but also pose a risk of illegal data copying, which brings additional burdens to supervision. In addition, both of the above methods have obvious limitations. In the network transmission method, once the network fails or cannot be connected, the upgrade work will not be able to proceed, thus affecting the normal operation and security of the system. In the media copy method, there is also the risk of upgrade failure due to damage or loss of the storage device or data errors during transmission. Summary of the invention

[0004] To this end, the technical problem to be solved by the present invention is to overcome the risks of being attacked by hackers, the risk of data being illegally copied, the leakage of sensitive information and the failure of file transmission caused by network or storage medium problems in the prior art.

[0005] In a first aspect, in order to solve the above technical problems, the present invention provides a method for secure file transmission, comprising: S101, collecting user information, and performing user identity authentication according to the user information; after successful authentication, starting to scan the image of the file to be transferred; S102, scanning the image to obtain a file number and file data, comparing the file number with a stored file number, and determining whether the file to be transmitted is a duplicate file; S103. When the file to be transmitted is the duplicate file, return to S102; when the file to be transmitted is not the duplicate file, store the file data; wherein the file data is the remaining data after deleting the first n bytes in the file to be transmitted, where n is an integer greater than zero; the file data is stored at the file sequence number offset address, and the calculation formula of the offset address is: (the file sequence number - 1) * m, where m is a specified megabyte; S104, after the storage is completed, the file data is read and decoded to verify the integrity. If the verification is successful, the file to be transmitted is successfully transmitted; if the verification fails, the file to be transmitted is discarded and the process returns to S102 until the verification is successful.

[0006] In one embodiment of the present invention, the file sequence number is the first n bytes received in the file to be transmitted, where n is an integer greater than zero.

[0007] In one embodiment of the present invention, the files to be transmitted include multiple first files of specified memory size and at most one second file, wherein the memory size of the second file is smaller than the specified memory size of the first file, and both the first file and the second file have corresponding pictures.

[0008] In one embodiment of the present invention, the determination of whether the file to be transmitted is a duplicate file includes determining the format of the file to be transmitted. If the format does not match, the process returns to S102.

[0009] In a second aspect, in order to solve the above technical problems, the present invention provides a file security transmission device, comprising: The user information collection module is used to perform user identity authentication based on the user information; after successful authentication, it starts scanning the image of the file to be transferred; The file management module is used to scan the image, obtain the file number and file data, compare the file number with the stored file number, and determine whether the file to be transmitted is a duplicate file; when the file to be transmitted is the duplicate file, rescan the image; when the file to be transmitted is not the duplicate file, store the file data; wherein the file data is the remaining data after deleting the first n bytes in the file to be transmitted, n is an integer greater than zero; the file data is stored at the file number offset address, and the calculation formula of the offset address is: (the file number-1)*m, m is a specified megabyte; after the storage is completed, the file data is read and decoded to verify the integrity. If the verification is successful, the file to be transmitted is successfully transmitted; if the verification fails, the file to be transmitted is discarded and the image is scanned again until the verification is successful.

[0010] In one embodiment of the present invention, the file management module includes a memory, a network interface and a core board; the memory is used to store the file data and encoding and decoding temporary files; the network interface is used to connect to the intranet; the core board is used to process data, control communication and connect to the user information collection module.

[0011] In one embodiment of the present invention, the file management module uses the Libcimbar development tool to read, decode, verify and integrate the file data in the image.

[0012] In one embodiment of the present invention, the file security transmission device adopts a PAD structure to increase a network port.

[0013] In a third aspect, in order to solve the above technical problem, the present invention provides a file security transmission terminal, including the above-mentioned file security transmission device.

[0014] In a fourth aspect, in order to solve the above-mentioned technical problem, the present invention provides an energy facility, including the above-mentioned file security transmission terminal.

[0015] The above technical solution of the present invention has the following beneficial effects compared with the prior art: (1) The present invention provides a method, device and terminal for secure file transmission, which strictly guarantees the security of upgrade and maintenance operations by first collecting and verifying user information and then scanning file images. At the same time, it integrates physical isolation technology and non-contact passive transmission mechanism, fundamentally eliminating the risk of information leakage that may be caused by data copying operations. Furthermore, the method of the present invention supports file transfer in a network-free environment, significantly reducing the possibility of network ports being attacked and illegally invaded. In addition, the present invention also has the ability to intelligently parse and split files, and automatically recombine and decode after the transmission is completed, thereby ensuring the integrity and accuracy of the data during the transmission process.

[0016] (2) The present invention integrates the encoding and decoding technology of Libcimbar and uses the camera to upload files, so that file transmission and system upgrade can be completed without relying on network communication. This method greatly broadens the application scope of file transmission and ensures the smooth transmission of key files and data even in environments where network connection is limited or unavailable. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to make the content of the present invention more clearly understood, the present invention is further described in detail below according to specific embodiments of the present invention in conjunction with the accompanying drawings, wherein Figure 1 A flowchart of a method for secure file transmission in a preferred embodiment of the present invention; Figure 2 A flowchart of file storage in a method for secure file transmission in a preferred embodiment of the present invention; Figure 3 This is a structural diagram of a file security transmission device in a preferred embodiment of the present invention; Figure 4 This is a diagram of user file uploading interaction in a file security transmission device in a preferred embodiment of the present invention. DETAILED DESCRIPTION

[0018] The present invention is further described below in conjunction with the accompanying drawings and specific embodiments so that those skilled in the art can better understand the present invention and implement it, but the embodiments are not intended to limit the present invention.

[0019] Embodiment 1

[0020] Reference Figure 1 As shown, an embodiment of the present invention provides a method for secure file transmission, comprising: S101, collecting user information, and performing user identity authentication based on the user information; after successful authentication, starting to scan the image of the file to be transferred; S102, scanning the image to obtain a file number and file data, comparing the file number with the stored file number to determine whether the file to be transferred is a duplicate file; S103. When the file to be transmitted is a duplicate file, return to S102; when the file to be transmitted is not a duplicate file, store the file data; wherein the file data is the remaining data after deleting the first n bytes in the file to be transmitted, where n is an integer greater than zero; the file data is stored at the file sequence number offset address, and the calculation formula of the offset address is: (file sequence number-1)*m, where m is a specified megabyte; S104, after the storage is completed, the file data is read and decoded to verify the integrity. If the verification is successful, the file to be transmitted is successfully transmitted; if the verification fails, the file to be transmitted is discarded and returns to S102 until the verification is successful.

[0021] A method for secure file transmission provided by an embodiment of the present invention ensures the security of upgrade and maintenance operations by first collecting and verifying user information and then performing file transmission. At the same time, physical isolation and non-contact passive transmission technology are adopted to effectively prevent data leakage caused by copying operations. In addition, the present invention supports non-network file transmission, reducing the risk of network port attacks and intrusions. Files can also be parsed and segmented, and reassembled and decoded after transmission to ensure the integrity and accuracy of the data. This design effectively reduces the risk of hacker attacks, illegal data copying and sensitive information leakage, while reducing file transmission failures caused by network or storage medium problems.

[0022] Specifically, in the process of scanning the file to be transmitted to storage, an image parsing tool is required. The Libcimbar development tool provides a novel data transmission mode, which uses a camera to capture and transmit specially encoded image information without the need for a network or Bluetooth connection. In addition, the tool is written in C++ and relies on high-performance graphics processing libraries such as OpenCV and GLFW. Its built-in encoder can generate dynamic animations similar to QR codes. Users only need to install the corresponding decoding application on their mobile phones to scan and receive the transmitted data through the camera. In view of the significant advantages of Libcimbar in data transmission, the embodiment of the present invention uses its encoding and decoding technology to achieve file transmission. Considering that this development tool has limitations on the memory size of the file to be transmitted. Therefore, before scanning the file to be transmitted, it is necessary to segment the larger file to be transmitted. Specifically, the file to be transmitted is segmented into multiple first files of a specified memory size and at most one second file, wherein the size of the second file is smaller than the specified memory size of the first file, and each first file and second file has a corresponding picture. The picture can be a barcode, a QR code, or other recognizable form.

[0023] Exemplarily, if the Libcimbar development tool supports a maximum of 30M files, for a 60M file to be transmitted, the file to be transmitted needs to be divided into multiple file segments less than or equal to 30M, and the specified value for segmentation can be selected as 30M. So the file to be transmitted is divided into two 30M first files, and there is no second file. Each first file has a corresponding picture. Among them, after the image is segmented, the file integrity verification can be performed, and the verification method can be: calculate the checksum of the original file before segmentation, and then recalculate the checksum after the file is merged, and compare whether the two are consistent to ensure that the file has not been tampered with during the segmentation and transmission process. It should be noted that since the core of the embodiment of the present invention is the file security transmission method, and the segmentation of the file to be transmitted and the generation of scanned pictures are not the focus of the embodiment of the present invention, they are not described in detail here.

[0024] Further, refer to Figure 2 , the prepared files to be transferred are transferred, and the steps from scanning to storing the files to be transferred are: S201, start scanning of file images.

[0025] S202: After scanning the file, determine the file format. If the file format does not match, prompt the user to rescan and return to step S201, wherein step S102 includes step S201.

[0026] S203. When the file format meets the requirements, the file is checked to determine whether it is a duplicate file. If it is detected that the scanned file is duplicated, the user is prompted to rescan and return to step S201. If the scanned file is not duplicated, it is stored. The method for determining whether the file is duplicated is based on the file serial number, which is the first 2 bytes of the received file data to be transmitted. The actual storage content of the file is the data after removing the 2-byte serial number, which is stored at the corresponding serial number offset address. The calculation formula of the offset address is: (file serial number-1)*30M.

[0027] S204: Determine whether the scanning of the entire file has been completed. If not, continue scanning and uploading the remaining file portion.

[0028] S205: After the upload operation is completed, the file integrity check is performed. If the integrity check fails, the file is discarded and the user is prompted to check the scanning process or rescan.

[0029] Through steps S201 to S205, the accuracy and integrity of the file scanning, storage and uploading process can be ensured, while improving user experience and system efficiency. Among them, in step S203, the file sequence number is usually the first n bytes received in the file to be transmitted, the value of n is preferably 2, and the value of m is preferably 30M. There are multiple options for determining whether the entire file scan has been completed in step S204. For example, in the process of segmenting the file to be transmitted, multiple first files whose sizes meet the specified requirements will be generated first, and then a second file whose memory size is smaller than the specified memory size of the first file may be generated. In order to ensure the integrity of the file, the file will be scanned in sequence, that is, the corresponding pictures will be scanned continuously to reconstruct the complete file content. Once the second file is scanned, it is considered that the scanning work of the entire file has been completed, which can ensure the data integrity and readiness of the file before transmission. For another example, the operator is allowed to determine whether the file scan has been completed according to the actual situation. This method provides greater flexibility, especially when dealing with complex or non-standardized files, manual judgment can make up for the limitations that may exist in the automated process. Operators can decide when to stop scanning based on the specific content of the document, scan quality, and any abnormalities to ensure the integrity and accuracy of the document.

[0030] For example, if the Libcimbar development tool supports a maximum of 30M files and needs to transfer a 65M file to be transferred, the file to be transferred has been divided into two 30M first files and one 5M second file. Each first file and second file has a corresponding image. In the process of sequentially scanning file images, when the 5M second file, i.e. the smallest file, is scanned, it can be determined as the last file.

[0031] Embodiment 2

[0032] Based on the same inventive concept, this embodiment provides a file security transmission device, and its principle of solving the problem is similar to the file security transmission method provided in Example 1, and the repeated parts are not repeated here.

[0033] Reference Figure 3 and Figure 4 As shown, this embodiment provides a file security transmission device, including: The user information collection module is used to perform user identity authentication based on user information; after successful authentication, it starts scanning the image of the file to be transferred; The file management module is used to scan the image, obtain the file number and file data, compare the file number with the stored file number, and determine whether the file to be transmitted is a duplicate file; when the file to be transmitted is a duplicate file, the image is rescanned; when the file to be transmitted is not a duplicate file, the file data is stored; wherein the file data is the remaining data after deleting the first n bytes in the file to be transmitted, n is an integer greater than zero; the file data is stored at the file number offset address, and the calculation formula of the offset address is: (file number-1)*m, m is the specified megabyte; after the storage is completed, the file data is read and decoded to verify the integrity. If the verification is successful, the file to be transmitted is successfully transmitted; if the verification fails, the file to be transmitted is discarded and the image is scanned again until the verification is successful.

[0034] The file security transmission device provided in this embodiment adopts a modular design, including a core board and peripheral devices, wherein the peripheral devices include a display panel, a camera, a memory and a network interface (a network interface may also be referred to as a communication interface), and the file management module includes a memory, a network interface and a core board. The memory is used to store file data and encode and decode temporary files; the network interface is used to connect to the intranet; and the core board is used to process data, control communication and connect to the user information collection module.

[0035] Specifically, the display panel is the display of the file security transmission device, preferably configured as a 6-inch touch screen, and the camera uses a standard on-board model. The network interface is specially designed to access the internal LAN to ensure that the device is physically isolated from the external network as an independent unit of the intranet. The core board, as the brain of the device, is responsible for data processing, communication control, and connection with components such as the camera; and the operating system and application programs all run on this core board. When selecting a core board, factors such as its performance, compatibility, electromagnetic compatibility, power management, interface design, heat dissipation design, scalability, reliability, durability, cost-effectiveness, and supplier support can be considered to ensure that the core board can meet the needs of the transmission device and ensure the stability and reliability of the system.

[0036] Through the above design, the file secure transmission device can provide users with an efficient, stable and user-friendly transmission device interaction experience. Specifically, the interaction process of using the file secure transmission device provided by this embodiment includes the following steps: Step 1: The user starts the file transfer program through the touch screen to prepare for system upgrade.

[0037] Step 2: After the program is started, the touch screen first guides the user to perform identity authentication. Here, the program connects with the organization's internal office automation authentication system (the organization's internal office automation authentication system can be referred to as the OA authentication system) to ensure the security and effectiveness of the authentication process.

[0038] Step 3: The touch screen prompts the user to start the facial recognition authentication process. The user points to the camera so that the system can collect facial information. The system performs permission authentication based on the facial image collected by the camera. If the authentication is successful, the user will be allowed to transfer files.

[0039] Step 4: After successful authentication, the touch screen will prompt the user to scan the file. The user points the QR code of the prepared file to be transferred to the camera, starts scanning and waits for the file to be uploaded. The file to be transferred includes multiple first files of a specified memory size and at most one second file.

[0040] Step 5: The file management module includes a file management program, which uses the Libcimbar development tool to read the scanned image content, which can be a QR code, and the image content is file data. At the same time, the program decodes, verifies and integrates the read content to ensure the accuracy and integrity of the file.

[0041] Step 6: Once the file upload is complete, the touch screen will prompt the user that the file upload is successful. According to the prompt on the touch screen, the user can start the system upgrade process.

[0042] Through these designs and processes, the file transfer device described in this embodiment can provide users with an efficient, stable and user-friendly interactive experience, meeting their needs in data transmission and communication.

[0043] Furthermore, the file security transmission device provided in this embodiment is a multifunctional product integrating an industrial control screen and a camera, and its appearance structure adopts a PAD structure design to facilitate the addition of a network interface. The following are precautions for installing and using this device: (1) Select a location that is easy to maintain to install the device, and adjust the camera angle to ensure that it is aimed at an area with sufficient light and a wide field of view so that the image within the monitoring range can be clearly captured.

[0044] (2) Connect the network interface (network port) to the network cable, access the internal network, and set a predefined maintenance IP address to facilitate system maintenance and operation.

[0045] (3) Turn off the camera when not in use to reduce energy consumption.

[0046] This embodiment uses a camera to collect pictures for file transfer. This method does not rely on a specific security network and is not limited by the transmission distance. It provides greater flexibility while ensuring the security of data transmission. In addition, this method avoids the physical contact of the traditional USB interface, effectively preventing the spread of USB viruses and the risk of data leakage. By integrating the encoding and decoding technology of Libcimbar, the camera can upload files without relying on network communication to complete file transmission and system upgrades. This design method greatly broadens the application scope of file transmission, and ensures the smooth transmission of key files and data even in an environment where network connection is limited or unavailable.

[0047] Embodiment 3

[0048] An embodiment of the present invention provides a file security transmission terminal, including the file security transmission device described in the second embodiment.

[0049] Embodiment 4

[0050] An embodiment of the present invention provides an energy facility, including a secure file transmission terminal as described in the third embodiment.

[0051] In the description of the present specification and the appended claims, the terms "first", "second", etc. are only used to distinguish descriptions and should not be understood as indicating or implying relative importance. It should also be understood that although the terms "first", "second", etc. are used in the text to describe various elements in some embodiments of the present invention, these elements should not be limited by these terms. These terms are only used to distinguish one element from another element.

[0052] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0053] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0054] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0055] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0056] Obviously, the above embodiments are merely examples for clear explanation and are not intended to limit the implementation methods. For those skilled in the art, other different forms of changes or modifications can be made based on the above description. It is not necessary and impossible to list all the implementation methods here. The obvious changes or modifications derived from these are still within the protection scope of the invention.

Claims

1. A method for secure file transmission, characterized in that: include: S101, collecting user information, and performing user identity authentication based on the user information; After successful verification, the image scanning of the file to be transferred begins; S102, scanning the image to obtain a file number and file data, comparing the file number with a stored file number, and determining whether the file to be transmitted is a duplicate file; S103. When the file to be transmitted is the duplicate file, return to S102; when the file to be transmitted is not the duplicate file, store the file data; wherein the file data is the remaining data after deleting the first n bytes in the file to be transmitted, where n is an integer greater than zero; the file data is stored at the file sequence number offset address, and the calculation formula of the offset address is: (the file sequence number - 1) * m, where m is a specified megabyte; S104, after the storage is completed, the file data is read and decoded to verify the integrity. If the verification is successful, the file to be transmitted is successfully transmitted; if the verification fails, the file to be transmitted is discarded and the process returns to S102 until the verification is successful.

2. A method for secure file transmission according to claim 1, characterized in that: The file sequence number is the first n bytes received in the file to be transmitted, where n is an integer greater than zero.

3. A method for secure file transmission according to claim 1, characterized in that: The files to be transmitted include multiple first files of specified memory sizes and at most one second file, wherein the memory size of the second file is smaller than the specified memory size of the first file, and both the first file and the second file have corresponding pictures.

4. A method for secure file transmission according to claim 1, characterized in that: Before determining whether the file to be transmitted is a duplicate file, the format of the file to be transmitted is determined. If the format does not match, the process returns to S102.

5. A file security transmission device, characterized in that: include: A user information collection module, used to perform user identity authentication based on the user information; After successful verification, the image scanning of the file to be transferred begins; A file management module, used to scan the image, obtain a file number and file data, compare the file number with the stored file number, and determine whether the file to be transmitted is a duplicate file; When the file to be transmitted is the duplicate file, rescanning the picture; When the file to be transmitted is not the duplicate file, the file data is stored; wherein the file data is the remaining data after deleting the first n bytes in the file to be transmitted, where n is an integer greater than zero; the file data is stored at the file sequence number offset address, and the calculation formula of the offset address is: (the file sequence number - 1) * m, where m is a specified megabyte; after the storage is completed, the file data is read and decoded to verify the integrity. If the verification is successful, the file to be transmitted is successfully transmitted; if the verification fails, the file to be transmitted is discarded and the image is scanned again until the verification is successful.

6. A file security transmission device according to claim 5, characterized in that: The file management module includes a memory, a network interface and a core board; the memory is used to store the file data and encode and decode temporary files; the network interface is used to connect to the intranet; the core board is used to process data, control communication and connect to the user information collection module.

7. A file security transmission device according to claim 5, characterized in that: The file management module uses the Libcimbar development tool to read, decode, verify and integrate the file data in the image.

8. A file security transmission device according to claim 5, characterized in that: The file security transmission device adopts a PAD structure to increase a network port.

9. A file security transmission terminal, characterized in that: A file security transmission device comprising the device described in any one of claims 5 to 8.

10. An energy facility, characterized in that: A secure file transmission terminal comprising the method described in claim 9.

Images