Intrinsic safety transmission state setting method and related equipment of asynchronous optical communication system

By introducing the process of initial tight flow switching, key negotiation and work tight flow switching in the asynchronous optical communication system, the problem of endogenous security not being considered in the asynchronous optical communication system is solved, and the system's high security and stability are achieved.

CN114938276BActive Publication Date: 2025-04-29BEIJING UNIV OF POSTS & TELECOMM +2
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202210239064.1
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2022-03-11
Publication Date
2025-04-29
Estimated Expiration
2042-03-11

AI Technical Summary

Technical Problem

In the prior art, asynchronous optical communication systems do not consider endogenous security issues, resulting in safety hazards during transmission.

Method used

The synchronization and security of transmission states are ensured by introducing the processes of initial tight flow switching, key negotiation and working tight flow switching in the asynchronous optical communication system. Specific steps include initialization configuration, initial tight flow exchange, key negotiation and working tight flow exchange until the synchronization successful status value is received within the preset time.

Benefits of technology

The endogenous secure transmission status setting of the asynchronous optical communication system is realized, making the system have high security and stability, and avoiding the security risks that exist during the transmission process.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN114938276B_ABST
    Figure CN114938276B_ABST
Patent Text Reader

Abstract

The present application provides a method and related equipment for setting the intrinsic security transmission state of an asynchronous optical communication system. The asynchronous optical communication system includes a first transmission terminal and a second transmission terminal, wherein the first transmission terminal and the second transmission terminal are asynchronously transmitted with each other. The method includes: initializing and configuring the first transmission terminal and the second transmission terminal respectively; making the first transmission terminal generate a first dense stream and store it in the first transmission terminal dense stream buffer, making the second transmission terminal generate a second dense stream and store it in the second transmission terminal dense stream buffer; the first transmission terminal and the second transmission terminal perform initial dense stream switching; the first transmission terminal and the second transmission terminal perform key negotiation based on the initial dense stream exchange to generate a third dense stream and a fourth dense stream respectively; the first transmission terminal and the second transmission terminal perform working dense stream switching, and the asynchronous optical communication system completes the intrinsic security transmission state setting. This makes the asynchronous optical communication system have higher security and stability.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present application relates to the field of optical communication technology, and in particular to a method for setting an intrinsically safe transmission state of an asynchronous optical communication system and related equipment. Background Art

[0002] With the rapid development of integrated digital circuits and digital signal processors in recent years, as well as the increasingly urgent demand for high-speed wireless communications, the application of orthogonal frequency division multiplexing has developed rapidly.

[0003] Based on the above situation, in the existing technology, since orthogonal frequency division multiplexing (OFDM) has the advantages of high radio frequency utilization efficiency, strong anti-noise ability, and suitability for high-speed transmission, it is mainly used in digital audio, video broadcasting services, wireless local area network fields, 4G and 5G and other digital transmission and communication services, etc., it mainly focuses on the solution of synchronization problems, uplink problems and coding scheme problems, etc., and has not considered the problem of inherent security. Summary of the invention

[0004] In view of this, the purpose of the present application is to propose a method for setting an intrinsic safety transmission state of an asynchronous optical communication system and related equipment to solve the above technical problems.

[0005] Based on the above purpose, a first aspect of the present application provides a method for setting an intrinsic safety transmission state of an asynchronous optical communication system, wherein the asynchronous optical communication system includes a first transmission terminal and a second transmission terminal, wherein the first transmission terminal and the second transmission terminal are asynchronously transmitted with each other, and the method includes:

[0006] Initializing configuration of the first transmission terminal and the second transmission terminal respectively;

[0007] Instruct the first transmission terminal to generate a first dense flow, and store the first dense flow in a first initial dense flow buffer of the first transmission terminal; Instruct the second transmission terminal to generate a second dense flow, and store the second dense flow in a second initial dense flow buffer of the second transmission terminal;

[0008] In response to determining that the number of the first dense flows in the first initial dense flow buffer reaches a first storage threshold and the number of the second dense flows in the second initial dense flow buffer reaches a second storage threshold, the first transmission terminal and the second transmission terminal perform initial dense flow exchange;

[0009] Instruct the first transmission terminal and the second transmission terminal to perform key negotiation based on the initial secret stream exchange, generate a third secret stream and a fourth secret stream respectively, store the third secret stream into a first working secret stream buffer of the first transmission terminal, and store the fourth secret stream into a second working secret stream buffer of the second transmission terminal;

[0010] In response to determining that the number of the third dense streams in the first working dense stream buffer reaches the first storage threshold and the fourth dense stream in the second working dense stream buffer reaches the second storage threshold, the first transmission terminal and the second transmission terminal perform working dense stream exchange;

[0011] In response to the first transmission terminal receiving the first synchronization information sent by the second transmission terminal within a preset time, the second transmission terminal receiving the second synchronization information sent by the first transmission terminal, and the first synchronization information and the second synchronization information are both preset synchronization success status values, the asynchronous optical communication system completes the setting of the endogenous security transmission status.

[0012] A second aspect of the present application provides a device for setting an intrinsic safety transmission state of an asynchronous optical communication system, comprising:

[0013] An initial configuration module, configured to respectively perform initial configuration on the first transmission terminal and the second transmission terminal;

[0014] A first processing module is configured to enable the first transmission terminal to generate a first dense flow, and store the first dense flow in a first initial dense flow buffer of the first transmission terminal, enable the second transmission terminal to generate a second dense flow, and store the second dense flow in a second initial dense flow buffer of the second transmission terminal;

[0015] a second processing module, configured to, in response to determining that the number of the first dense flows in the first initial dense flow buffer reaches a first storage threshold and the number of the second dense flows in the second initial dense flow buffer reaches a second storage threshold, the first transmission terminal and the second transmission terminal perform initial dense flow exchange;

[0016] A third processing module is configured to enable the first transmission terminal and the second transmission terminal to perform key negotiation based on the initial secret stream exchange, generate a third secret stream and a fourth secret stream respectively, and store the third secret stream into a first working secret stream buffer of the first transmission terminal, and store the fourth secret stream into a second working secret stream buffer of the second transmission terminal;

[0017] a fourth processing module, configured to, in response to determining that the number of the third dense stream in the first working dense stream buffer reaches the first storage threshold and the fourth dense stream in the second working dense stream buffer reaches the second storage threshold, the first transmission terminal and the second transmission terminal perform working dense stream exchange;

[0018] The fifth processing module is configured to complete the setting of the endogenous security transmission status of the asynchronous optical communication system in response to the first transmission terminal receiving the first synchronization information sent by the second transmission terminal, the second transmission terminal receiving the second synchronization information sent by the first transmission terminal, and the first synchronization information and the second synchronization information are both preset synchronization success status values ​​within a preset time.

[0019] A third aspect of the present application provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the method described in the first aspect when executing the program.

[0020] From the above description, it can be seen that the method and related equipment for setting the intrinsic security transmission state of the asynchronous optical communication system provided by the present application, after the asynchronous optical communication system is initialized and configured, starts the initial dense stream switching, key negotiation and working dense stream switching, thereby realizing the synchronization of the transmission state through two dense stream switches, and the asynchronous optical communication system completes the intrinsic security transmission state setting, so that the asynchronous optical communication system has higher security and stability. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] In order to more clearly illustrate the technical solutions in the present application or related technologies, the drawings required for use in the embodiments or related technical descriptions are briefly introduced below. Obviously, the drawings described below are only embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0022] Figure 1 A flowchart of a method for setting an intrinsic secure transmission state of an asynchronous optical communication system according to an embodiment of the present application;

[0023] Figure 2 A schematic diagram of a method for setting an intrinsic secure transmission state of an asynchronous optical communication system according to an embodiment of the present application;

[0024] Figure 3 A schematic diagram of the structure of a device for setting an intrinsic secure transmission state of an asynchronous optical communication system according to an embodiment of the present application;

[0025] Figure 4 A schematic diagram of an electronic device according to an embodiment of the present application. DETAILED DESCRIPTION

[0026] In order to make the objectives, technical solutions and advantages of the present application more clearly understood, the present application is further described in detail below in combination with specific embodiments and with reference to the accompanying drawings.

[0027] It should be noted that, unless otherwise defined, the technical terms or scientific terms used in the embodiments of the present application should be the usual meanings understood by people with ordinary skills in the field to which the present application belongs. The "first", "second" and similar words used in the embodiments of the present application do not represent any order, quantity or importance, but are only used to distinguish different components. "Including" or "comprising" and similar words mean that the elements or objects appearing in front of the word cover the elements or objects listed after the word and their equivalents, without excluding other elements or objects. "Connect" or "connected" and similar words are not limited to physical or mechanical connections, but can include electrical connections, whether direct or indirect. "Up", "down", "left", "right" and the like are only used to indicate relative positional relationships. When the absolute position of the described object changes, the relative positional relationship may also change accordingly.

[0028] Intrinsic security has not been considered in the relevant technologies, and no technology for setting transmission status based on intrinsic security has been designed.

[0029] The embodiment of the present application provides a method for setting the intrinsic security transmission state of an asynchronous optical communication system. After the initial configuration, the initial secret stream switching, key negotiation and working secret stream switching are performed to ensure that data is not transmitted when the line is not ready. After the initial secret stream switching, the communication of the key negotiation channel is started. Data can only be transmitted after the key of the working secret stream is negotiated and starts working, that is, it is ensured that data transmission and decryption can be performed only when everything is ready. The asynchronous optical communication system completes the intrinsic security transmission state setting in this way, so that the asynchronous optical communication system has higher security and stability.

[0030] like Figure 1 As shown, the asynchronous optical communication system of this embodiment includes a first transmission terminal and a second transmission terminal, wherein the first transmission terminal and the second transmission terminal are asynchronously transmitted to each other, and the method includes:

[0031] Step 101: Initialize and configure the first transmission terminal and the second transmission terminal respectively.

[0032] In this step, after each part of the configuration is completed, the indicator light will light up to indicate that the configuration is complete, or prompt to increase the internal register. If it times out, a warning will be issued, which can quickly and accurately identify whether the first transmission terminal and the second transmission terminal have reached the startup conditions.

[0033] The asynchronous optical communication system is based on the asynchronous OFDM system (Orthogonal Frequency Division Multiplexing), which divides the channel into several orthogonal sub-channels, converts the high-speed data signal into parallel low-speed sub-data streams, and modulates them for transmission on each sub-channel. The orthogonal signals can be separated by using correlation technology at the receiving end, which can reduce the mutual interference between sub-channels. The signal bandwidth on each sub-channel is smaller than the correlation bandwidth of the channel, so each sub-channel can be regarded as flat fading, thereby eliminating inter-symbol interference. Since the bandwidth of each sub-channel is only a small part of the original channel bandwidth, channel equalization becomes relatively easy.

[0034] Step 102, instruct the first transmission terminal to generate a first dense flow, and store the first dense flow in a first initial dense flow buffer of the first transmission terminal, instruct the second transmission terminal to generate a second dense flow, and store the second dense flow in a second initial dense flow buffer of the second transmission terminal.

[0035] In this step, during the operation of the asynchronous optical communication system, if a power-on reset occurs or the main program sends a reset command to the encryption card, the encryption card returns a state, and the encryption card indication state is set to 1 to indicate that the encryption card is started normally, and the encryption card indication state is set to 0 to indicate that the encryption card fails to start normally. When the main program detects that the encryption card indication state is 0, the asynchronous optical communication system is in the initial state after initialization configuration, and when the main program detects that the encryption card indication state is 1, it is considered that the asynchronous optical communication system has been in a state where the first dense stream and the second dense stream have been generated and stored, and subsequent operations can be started.

[0036] Step 103, in response to determining that the number of the first dense flows in the first initial dense flow buffer reaches a first storage threshold and the number of the second dense flows in the second initial dense flow buffer reaches a second storage threshold, the first transmission terminal and the second transmission terminal perform initial dense flow exchange.

[0037] In this step, the first transmission terminal and the second transmission terminal receive feedback messages from each other to reflect whether the first storage threshold of the initial dense flow buffer of the first transmission terminal and the second storage threshold of the initial dense flow buffer of the second transmission terminal are reached. The initial dense flow switching is performed through the first transmission terminal and the second transmission terminal, integrating communication and confidentiality, not relying on external encrypted transmission, avoiding interception of signals from any point in the transmission line and decryption, and cracking of communication content, so that the information has an inherent security and anti-interception function that does not rely on additional keys, and can effectively resist external spectral eavesdropping intrusion attacks.

[0038] If no feedback message is received in each feedback link for a long time, the asynchronous optical communication system issues a timeout warning and returns to the state where the initialization configuration is completed, and regenerates the first dense flow and the second dense flow.

[0039] Step 104, instructs the first transmission terminal and the second transmission terminal to perform key negotiation based on the initial secret stream exchange, generate a third secret stream and a fourth secret stream respectively, and store the third secret stream into the first working secret stream buffer of the first transmission terminal, and store the fourth secret stream into the second working secret stream buffer of the second transmission terminal.

[0040] In this step, the first transmission terminal and the second transmission terminal generate a third secret stream and a fourth secret stream by performing key negotiation, which integrates communication and confidentiality, does not rely on additional external negotiation processes, and is a secure optical communication method that completely provides endogenous protection for information transmission by the asynchronous optical communication system itself, integrating communication and confidentiality, and merging transmission and protection.

[0041] Step 105, in response to determining that the number of the third dense streams in the first working dense stream buffer reaches the first storage threshold and the fourth dense stream in the second working dense stream buffer reaches the second storage threshold, the first transmission terminal and the second transmission terminal exchange working dense streams.

[0042] In this step, the first transmission terminal and the second transmission terminal receive mutual feedback messages, such as Figure 2 As shown, the second transmission terminal receives RX dense stream data ready = 1 sent by the first transmission terminal and the first transmission terminal receives RX dense stream data ready = 1 sent by the second transmission terminal, which respectively indicate that the first storage threshold of the working dense stream buffer of the first transmission terminal and the second storage threshold of the working dense stream buffer of the second transmission terminal are reached. By switching the working dense stream, it does not rely on external additional encrypted transmission, avoids intercepting signals from any point of the transmission line and decrypting them, and cracking the communication content, so that the information realizes the anti-interception function with inherent security and does not rely on additional keys, and can effectively resist the spectral eavesdropping intrusion attack from the outside.

[0043] Step 106, in response to the first transmission terminal receiving the first synchronization information sent by the second transmission terminal within a preset time, the second transmission terminal receiving the second synchronization information sent by the first transmission terminal, and the first synchronization information and the second synchronization information are both preset synchronization success status values, the asynchronous optical communication system completes the setting of the endogenous security transmission status.

[0044] In this step, after the working dense stream is switched, data can be transmitted only after the working states of the first transmission terminal and the second transmission terminal are synchronized by the first synchronization information and the second synchronization information, that is, it is ensured that data transmission and decryption can be performed only when everything is ready, so that the system has higher security and stability.

[0045] If no synchronous feedback message is received within a timeout period, a timeout warning is issued and the state of initialization configuration completion is returned to regenerate the first dense stream and the second dense stream.

[0046] In the above scheme, the asynchronous optical communication system is configured after initialization, and the initialization configuration is used to feedback the status of the first transmission terminal and the second transmission terminal to determine the working status of the first transmission terminal and the second transmission terminal, so as to quickly and accurately identify whether the first transmission terminal and the second transmission terminal have reached the start-up conditions and whether synchronization is completed. In each process of initial dense stream switching, key negotiation and working dense stream switching, the messages fed back by the first transmission terminal and the second transmission terminal are continuously received, so that the working status of the first transmission terminal and the second transmission terminal are synchronized, ensuring that data is not transmitted when the line is not ready, starting the communication of the key negotiation channel after the initial dense stream switching, and data can only be transmitted after the working dense stream is switched and starts working, that is, ensuring that data can be transmitted and decrypted only when everything is ready, thereby completing the setting of the endogenous secure transmission status of the asynchronous optical communication system, making the asynchronous optical communication system have higher security and stability, and at the same time, it does not rely on additional external negotiation processes, and the asynchronous optical communication system itself provides a secure optical communication mode for endogenous protection of information transmission, integrating communication and confidentiality, and integrating transmission and protection.

[0047] In some embodiments, the first transmission terminal includes a first transmitting end and a first receiving end, and the second transmission terminal includes a second transmitting end and a second receiving end;

[0048] Step 101 specifically includes:

[0049] Instruct the first transmitting end to electrically load the first FPGA, and perform a first clock chip configuration, a first DAC chip configuration, and a first FPGA line clock configuration;

[0050] Instruct the first receiving end to electrically load the second FPGA, and perform a second clock chip configuration, a first ADC chip configuration, and a second FPGA line clock configuration;

[0051] Instruct the second transmitting end to electrically load the third FPGA, and perform third clock chip configuration, second DAC chip configuration, and third FPGA line clock configuration;

[0052] The second receiving end is instructed to electrically record the fourth FPGA, and perform a fourth clock chip configuration, a second ADC chip configuration, and a fourth FPGA line clock configuration.

[0053] In this step, when the asynchronous optical communication system starts working, the first transmitting end and the first receiving end of the first transmission terminal, the second transmitting end and the second receiving end of the second transmission terminal respectively perform their own initialization configuration work. After each part is completed, the indicator light lights up to indicate that the configuration is completed, or to indicate that the internal register is increased. If the timeout is exceeded, a warning is issued. When the system confirms that the clock configuration has been completed, the first transmission terminal and the second transmission terminal receive each other's feedback status, such as Figure 2 As shown, the data contained in data packet 1 is a receiving end dense stream preparation signal, a receiving end clock synchronization locking signal, a transmitting end synchronization switching signal, a receiving end frame structure locking signal, and a receiving end CP locking signal. Based on the data of data packet 1, the clock is locked to 0, the CP is locked to 0, and the frame structure is locked to 0, that is, initialization is completed, wherein TX represents the first transmitting end of the first transmission terminal and the second transmitting end of the second transmission terminal, and RX represents the first receiving end of the first transmission terminal and the second receiving end of the second transmission terminal.

[0054] In some embodiments, step 102 specifically includes:

[0055] Instruct the first transmission terminal to read a first random number, and use the first random number as a first key of the first transmission terminal;

[0056] Encrypting the first secret stream by using the first key, and storing the encrypted first secret stream in the first initial secret stream buffer;

[0057] At the same time, the second transmission terminal is instructed to read a second random number, and the second random number is used as a second key of the second transmission terminal;

[0058] The second secret stream is encrypted by using the second key, and the encrypted second secret stream is stored in the second initial secret stream buffer.

[0059] In this step, the first random number and the second random number are automatically generated by the asynchronous optical communication system, the first transmission terminal reads the first random number as the first key, generates the first dense stream according to the dense stream generator of the first transmission terminal, and encrypts the first dense stream by the first key. This stage occupies a dense stream generator and a dense stream buffer of the first transmission terminal. The second transmission terminal reads the second random number, uses the second random number as the second key of the second transmission terminal, generates the second dense stream according to the dense stream generator of the second transmission terminal, and encrypts the second dense stream by the second key. This stage occupies a dense stream generator and a dense stream buffer of the second transmission terminal.

[0060] In some embodiments, step 103 specifically includes:

[0061] The first countdown information preset by the first transmission terminal is sent to the second transmission terminal, and the second countdown information preset by the second transmission terminal is sent to the first transmission terminal, and the first key and the second key are exchanged based on the first countdown information and the second countdown information.

[0062] In this step, two unsynchronized devices complete asynchronous communication by transmitting data through a timing mechanism or other techniques, such as Figure 2 As shown, the first transmission terminal sends the preset first countdown information (the countdown of the TX synchronous switching register of the first transmission terminal) to the second terminal, and the second terminal sends the preset second countdown information (the countdown of the TX synchronous switching register of the second transmission terminal) to the first transmission terminal. The first countdown information and the second countdown information are kept consistent, so that the first transmission terminal sends its own feedback information (data packet 2) to the second transmission terminal and the second transmission terminal sends its own feedback information to the first transmission terminal to maintain synchronization. When the information feedback by data packet 2 is clock lock = 1, CP lock = 1, frame structure lock = 1 and dense stream synchronization lock = 0 and is maintained for a period of time, the initial dense stream switching process is entered. It should be noted that the judgment of this state is that since there is no FEC (Forward Error Correction) in the overhead, the change of a flag bit needs to appear in three consecutive frames and be the same to change. It can also be implemented by using the data redundancy voting method, such as three flag bits represent a state, and three out of two votes. In addition, it does not rely on an independent external key distribution path, and can simultaneously realize secure transmission and key negotiation based on a unified channel.

[0063] In some embodiments, step 104 specifically includes:

[0064] Instruct the first transmission terminal to send a first key negotiation instruction to the second transmission terminal, and instruct the second transmission terminal to send a second key negotiation instruction to the first transmission terminal;

[0065] Performing key negotiation with the first transmission terminal and the second transmission terminal to obtain a first negotiated key of the first transmission terminal and a second negotiated key of the second transmission terminal;

[0066] Instructing the first transmission terminal dense stream generator to generate the third dense stream, encrypting the third dense stream using the first negotiated key, and storing the third dense stream in the first working dense stream buffer;

[0067] The fourth dense stream is generated by the second transmission terminal dense stream generator, the fourth dense stream is encrypted by the second negotiated key, and the fourth dense stream is stored in the second working dense stream buffer.

[0068] In this step, after the first transmission terminal and the second transmission terminal perform the initial dense stream switching, the first transmission terminal feeds back its own dense stream synchronization state to the second transmission terminal, and the second transmission terminal feeds back its own dense stream synchronization state to the first transmission terminal. The dense stream synchronization state is analyzed by the first transmission terminal and the second transmission terminal, and after determining that the synchronization is successful, the first transmission terminal sends a first key negotiation instruction, and the second transmission terminal sends a second key negotiation instruction. This is a secure optical communication method that does not rely on additional external negotiation processes and completely provides endogenous protection for information transmission by the asynchronous optical communication system itself, integrating communication and confidentiality, and merging transmission and protection.

[0069] In some embodiments, step 105 specifically includes:

[0070] The third countdown information preset by the first transmission terminal is sent to the second transmission terminal, the fourth countdown information preset by the second transmission terminal is sent to the first transmission terminal, and the first negotiated key and the second negotiated key are exchanged based on the third countdown information and the fourth countdown information.

[0071] In this step, two asynchronous devices complete asynchronous communication by transmitting data through a timing mechanism or other technologies. The first transmission terminal sends its own pre-set third countdown information to the second transmission terminal, and the second transmission terminal sends its own pre-set fourth countdown information to the first transmission terminal. The first transmission terminal and the second transmission terminal perform analysis, and the third countdown information and the fourth countdown information are kept consistent, so that the working dense flow switching performed by the first transmission terminal and the second transmission terminal respectively remains synchronized.

[0072] In some embodiments, after step 102, the method further includes:

[0073] In response to the first transmission terminal receiving the first inquiry frame structure data packet sent by the second transmission terminal, sending a first feedback frame structure data packet to the second transmission terminal;

[0074] In response to the second transmission terminal receiving the second inquiry frame structure data packet sent by the first transmission terminal, a second feedback frame structure data packet is sent to the first transmission terminal.

[0075] In this step, the time interval between two characters in asynchronous communication is not fixed, while the time interval between bits in a character is fixed. Basically, the sender can transmit data at any time, and the receiver must be ready to receive the information when it arrives. In asynchronous communication, the data sender and receiver divide the data into small data packets for transmission, such as Figure 2 As shown in Figure 1, Data Packet 1 and Data Packet 2, the sender can start sending characters at any time, so it must add markers at the beginning and end of each character, that is, add start bits and stop bits. This string of information starting with a start bit and ending with a stop bit is called a frame. The "start-stop" mode of transmission means that for each new character, the transmission starts from the beginning, eliminating any timing differences that may have occurred during the previous transmission.

[0076] In some embodiments, in response to not receiving the first synchronization information and the second synchronization information within a preset time or the first synchronization information and / or the second synchronization information being a preset synchronization failure status value, the first transmission terminal is re-generated a new first dense stream and the second transmission terminal is re-generated a new second dense stream.

[0077] In this step, the first synchronization information and the second synchronization information are synchronization feedback messages. If the first synchronization information and the second synchronization information are not received due to timeout, or synchronization failure occurs in the first synchronization information and the second synchronization information, the message is returned to enable the first transmission terminal to regenerate a new first dense stream and the second transmission terminal to regenerate a new second dense stream, so that data transmission remains synchronized.

[0078] It should be noted that the method of the embodiment of the present application can be performed by a single device, such as a computer or server. The method of this embodiment can also be applied to a distributed scenario and completed by multiple devices cooperating with each other. In the case of such a distributed scenario, one of the multiple devices can only perform one or more steps in the method of the embodiment of the present application, and the multiple devices will interact with each other to complete the described method.

[0079] It should be noted that the above describes some embodiments of the present application. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in an order different from that in the above embodiments and still achieve the desired results. In addition, the processes depicted in the accompanying drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0080] Based on the same inventive concept, corresponding to any of the above-mentioned embodiment methods, the present application also provides an intrinsic safety transmission state setting device for an asynchronous optical communication system.

[0081] refer to Figure 3 , the device for setting the intrinsic safety transmission state of the asynchronous optical communication system comprises:

[0082] An initial configuration module 301 is configured to respectively perform initialization configuration on the first transmission terminal and the second transmission terminal;

[0083] The first processing module 302 is configured to enable the first transmission terminal to generate a first dense flow, and store the first dense flow in a first initial dense flow buffer of the first transmission terminal, enable the second transmission terminal to generate a second dense flow, and store the second dense flow in a second initial dense flow buffer of the second transmission terminal;

[0084] The second processing module 303 is configured to, in response to determining that the number of the first dense flows in the first initial dense flow buffer reaches a first storage threshold and the number of the second dense flows in the second initial dense flow buffer reaches a second storage threshold, the first transmission terminal and the second transmission terminal perform initial dense flow exchange;

[0085] The third processing module 304 is configured to enable the first transmission terminal and the second transmission terminal to perform key negotiation based on the initial secret stream exchange, generate a third secret stream and a fourth secret stream respectively, and store the third secret stream into a first working secret stream buffer of the first transmission terminal, and store the fourth secret stream into a second working secret stream buffer of the second transmission terminal;

[0086] The fourth processing module 305 is configured to, in response to determining that the number of the third dense streams in the first working dense stream buffer reaches the first storage threshold and the fourth dense stream in the second working dense stream buffer reaches the second storage threshold, the first transmission terminal and the second transmission terminal perform working dense stream exchange;

[0087] The fifth processing module 306 is configured to complete the setting of the endogenous security transmission status in response to the first transmission terminal receiving the first synchronization information sent by the second transmission terminal, the second transmission terminal receiving the second synchronization information sent by the first transmission terminal, and the first synchronization information and the second synchronization information are both preset synchronization success status values, in response to the first transmission terminal receiving the first synchronization information sent by the second transmission terminal, and the second synchronization information is both preset synchronization success status values.

[0088] In some embodiments, the first transmission terminal includes a first transmitting end and a first receiving end, and the second transmission terminal includes a second transmitting end and a second receiving end;

[0089] The initial configuration module 301 is specifically configured as follows:

[0090] Instruct the first transmitting end to electrically load the first FPGA, and perform a first clock chip configuration, a first DAC chip configuration, and a first FPGA line clock configuration;

[0091] Instruct the first receiving end to electrically load the second FPGA, and perform a second clock chip configuration, a first ADC chip configuration, and a second FPGA line clock configuration;

[0092] Instruct the second transmitting end to electrically load the third FPGA, and perform third clock chip configuration, second DAC chip configuration, and third FPGA line clock configuration;

[0093] The second receiving end is instructed to electrically record the fourth FPGA, and perform a fourth clock chip configuration, a second ADC chip configuration, and a fourth FPGA line clock configuration.

[0094] In some embodiments, the first processing module 302 is specifically configured to:

[0095] Instruct the first transmission terminal to read a first random number, and use the first random number as a first key of the first transmission terminal;

[0096] Encrypting the first secret stream by using the first key, and storing the encrypted first secret stream in the first initial secret stream buffer;

[0097] At the same time, the second transmission terminal is instructed to read a second random number, and the second random number is used as a second key of the second transmission terminal;

[0098] The second secret stream is encrypted by using the second key, and the encrypted second secret stream is stored in the second initial secret stream buffer.

[0099] In some embodiments, the second processing module 303 is specifically configured to:

[0100] The first countdown information preset by the first transmission terminal is sent to the second transmission terminal, and the second countdown information preset by the second transmission terminal is sent to the first transmission terminal, and the first key and the second key are exchanged based on the first countdown information and the second countdown information.

[0101] In some embodiments, the third processing module 304 is specifically configured to:

[0102] Instruct the first transmission terminal to send a first key negotiation instruction to the second transmission terminal, and instruct the second transmission terminal to send a second key negotiation instruction to the first transmission terminal;

[0103] Performing key negotiation with the first transmission terminal and the second transmission terminal to obtain a first negotiated key of the first transmission terminal and a second negotiated key of the second transmission terminal;

[0104] Instructing the first transmission terminal dense stream generator to generate the third dense stream, encrypting the third dense stream using the first negotiated key, and storing the third dense stream in the first working dense stream buffer;

[0105] The fourth dense stream is generated by the second transmission terminal dense stream generator, the fourth dense stream is encrypted by the second negotiated key, and the fourth dense stream is stored in the second working dense stream buffer.

[0106] In some embodiments, the fourth processing module 305 is specifically configured to:

[0107] The third countdown information preset by the first transmission terminal is sent to the second transmission terminal, the fourth countdown information preset by the second transmission terminal is sent to the first transmission terminal, and the first negotiated key and the second negotiated key are exchanged based on the third countdown information and the fourth countdown information.

[0108] In some embodiments, the device for setting an intrinsic safety transmission state of the asynchronous optical communication system further includes a frame structure data packet transmission module configured to:

[0109] In response to the first transmission terminal receiving the first inquiry frame structure data packet sent by the second transmission terminal, sending a first feedback frame structure data packet to the second transmission terminal;

[0110] In response to the second transmission terminal receiving the second inquiry frame structure data packet sent by the first transmission terminal, a second feedback frame structure data packet is sent to the first transmission terminal.

[0111] In some embodiments, the device for setting an intrinsic safety transmission state of the asynchronous optical communication system further includes a synchronization query module configured to:

[0112] In response to not receiving the first synchronization information and the second synchronization information within a preset time or the first synchronization information and / or the second synchronization information being a preset synchronization failure status value, the first transmission terminal is again instructed to generate a new first dense stream and the second transmission terminal is again instructed to generate a new second dense stream.

[0113] For the convenience of description, the above device is described in terms of functions divided into various modules. Of course, when implementing the present application, the functions of each module can be implemented in the same or multiple software and / or hardware.

[0114] The device of the above embodiment is used to implement the corresponding method for setting the intrinsic safety transmission state of the asynchronous optical communication system in any of the above embodiments, and has the beneficial effects of the corresponding method embodiment, which will not be repeated here.

[0115] Based on the same inventive concept, corresponding to any of the above-mentioned embodiments and methods, the present application also provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the method for setting the intrinsic security transmission state of the asynchronous optical communication system described in any of the above embodiments is implemented.

[0116] Figure 4 A more specific schematic diagram of the hardware structure of an electronic device provided in this embodiment is shown, and the device may include: a processor 1010, a memory 1020, an input / output interface 1030, a communication interface 1040, and a bus 1050. The processor 1010, the memory 1020, the input / output interface 1030, and the communication interface 1040 are connected to each other through the bus 1050 in the device.

[0117] The processor 1010 can be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of this specification.

[0118] The memory 1020 may be implemented in the form of ROM (Read Only Memory), RAM (Random Access Memory), static storage device, dynamic storage device, etc. The memory 1020 may store an operating system and other application programs. When the technical solutions provided in the embodiments of this specification are implemented by software or firmware, the relevant program codes are stored in the memory 1020 and are called and executed by the processor 1010.

[0119] The input / output interface 1030 is used to connect the input / output module to realize information input and output. The input / output module can be configured in the device as a component (not shown in the figure), or it can be externally connected to the device to provide corresponding functions. The input device may include a keyboard, a mouse, a touch screen, a microphone, various sensors, etc., and the output device may include a display, a speaker, a vibrator, an indicator light, etc.

[0120] The communication interface 1040 is used to connect a communication module (not shown) to realize communication interaction between the device and other devices. The communication module can realize communication through a wired mode (such as USB, network cable, etc.) or a wireless mode (such as mobile network, WIFI, Bluetooth, etc.).

[0121] The bus 1050 includes a path that transmits information between the various components of the device (eg, the processor 1010, the memory 1020, the input / output interface 1030, and the communication interface 1040).

[0122] It should be noted that, although the above device only shows the processor 1010, the memory 1020, the input / output interface 1030, the communication interface 1040 and the bus 1050, in the specific implementation process, the device may also include other components necessary for normal operation. In addition, it can be understood by those skilled in the art that the above device may also only include the components necessary for implementing the embodiments of the present specification, and does not necessarily include all the components shown in the figure.

[0123] The electronic device of the above embodiment is used to implement the corresponding method for setting the intrinsic safety transmission state of the asynchronous optical communication system in any of the above embodiments, and has the beneficial effects of the corresponding method embodiment, which will not be repeated here.

[0124] Based on the same inventive concept, corresponding to any of the above-mentioned embodiment methods, the present application also provides a non-transitory computer-readable storage medium, wherein the non-transitory computer-readable storage medium stores computer instructions, and the computer instructions are used to enable the computer to execute the method for setting the intrinsic security transmission state of the asynchronous optical communication system as described in any of the above embodiments.

[0125] The computer-readable medium of this embodiment includes permanent and non-permanent, removable and non-removable media, and information storage can be implemented by any method or technology. Information can be computer-readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, read-only compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device.

[0126] The computer instructions stored in the storage medium of the above embodiment are used to enable the computer to execute the method for setting the intrinsic security transmission state of the asynchronous optical communication system as described in any of the above embodiments, and have the beneficial effects of the corresponding method embodiments, which will not be repeated here.

[0127] Those skilled in the art should understand that the discussion of any of the above embodiments is merely illustrative and is not intended to imply that the scope of the present application (including the claims) is limited to these examples. In line with the concept of the present application, the technical features in the above embodiments or different embodiments may be combined, the steps may be implemented in any order, and there are many other variations of the different aspects of the embodiments of the present application as described above, which are not provided in detail for the sake of simplicity.

[0128] In addition, to simplify the description and discussion, and in order not to make the embodiments of the present application difficult to understand, the known power supply / ground connection with the integrated circuit (IC) chip and other components may or may not be shown in the provided drawings. In addition, the device can be shown in the form of a block diagram to avoid making the embodiments of the present application difficult to understand, and this also takes into account the fact that the details of the implementation of these block diagram devices are highly dependent on the platform to be implemented in the embodiments of the present application (that is, these details should be fully within the scope of understanding of those skilled in the art). In the case of elaborating specific details (e.g., circuits) to describe exemplary embodiments of the present application, it is obvious to those skilled in the art that the embodiments of the present application can be implemented without these specific details or when these specific details are changed. Therefore, these descriptions should be considered to be illustrative rather than restrictive.

[0129] Although the present application has been described in conjunction with specific embodiments of the present application, many replacements, modifications and variations of these embodiments will be apparent to those skilled in the art from the foregoing description. For example, other memory architectures (e.g., dynamic RAM (DRAM)) may use the embodiments discussed.

[0130] The embodiments of the present application are intended to cover all such substitutions, modifications and variations that fall within the broad scope of the appended claims. Therefore, any omissions, modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the embodiments of the present application should be included in the scope of protection of the present application.

Claims

1. A method for setting an intrinsically safe transmission state of an asynchronous optical communication system, characterized in that: The asynchronous optical communication system comprises a first transmission terminal and a second transmission terminal, wherein the first transmission terminal and the second transmission terminal are in asynchronous transmission with each other, and the method comprises: Initializing configuration of the first transmission terminal and the second transmission terminal respectively; Instruct the first transmission terminal to generate a first dense flow, and store the first dense flow in a first initial dense flow buffer of the first transmission terminal; Instruct the second transmission terminal to generate a second dense flow, and store the second dense flow in a second initial dense flow buffer of the second transmission terminal; In response to determining that the number of the first dense flows in the first initial dense flow buffer reaches a first storage threshold and the number of the second dense flows in the second initial dense flow buffer reaches a second storage threshold, the first transmission terminal and the second transmission terminal perform initial dense flow exchange; Instruct the first transmission terminal and the second transmission terminal to perform key negotiation based on the initial secret stream exchange, generate a third secret stream and a fourth secret stream respectively, store the third secret stream into a first working secret stream buffer of the first transmission terminal, and store the fourth secret stream into a second working secret stream buffer of the second transmission terminal; In response to determining that the number of the third dense streams in the first working dense stream buffer reaches the first storage threshold and the fourth dense stream in the second working dense stream buffer reaches the second storage threshold, the first transmission terminal and the second transmission terminal perform working dense stream exchange; In response to the first transmission terminal receiving the first synchronization information sent by the second transmission terminal within a preset time, the second transmission terminal receiving the second synchronization information sent by the first transmission terminal, and the first synchronization information and the second synchronization information are both preset synchronization success state values, the asynchronous optical communication system completes the setting of the endogenous security transmission state; The step of causing the first transmission terminal to generate a first dense flow and storing the first dense flow in a first initial dense flow buffer of the first transmission terminal, causing the second transmission terminal to generate a second dense flow and storing the second dense flow in a second initial dense flow buffer of the second transmission terminal specifically includes: Instruct the first transmission terminal to read a first random number, and use the first random number as a first key of the first transmission terminal; Encrypting the first secret stream by using the first key, and storing the encrypted first secret stream in the first initial secret stream buffer; At the same time, the second transmission terminal is instructed to read a second random number, and the second random number is used as a second key of the second transmission terminal; encrypting the second secret stream by using the second key, and storing the encrypted second secret stream into the second initial secret stream buffer; The first transmission terminal and the second transmission terminal perform initial dense flow exchange, specifically including: Sending first countdown information preset by the first transmission terminal to the second transmission terminal, sending second countdown information preset by the second transmission terminal to the first transmission terminal, and exchanging the first key with the second key based on the first countdown information and the second countdown information; The first transmission terminal and the second transmission terminal perform working dense flow exchange, specifically including: The third countdown information preset by the first transmission terminal is sent to the second transmission terminal, the fourth countdown information preset by the second transmission terminal is sent to the first transmission terminal, and the first negotiated key and the second negotiated key are exchanged based on the third countdown information and the fourth countdown information.

2. The method according to claim 1, characterized in that The first transmission terminal includes a first transmitting end and a first receiving end, and the second transmission terminal includes a second transmitting end and a second receiving end; The initializing configuration of the first transmission terminal and the second transmission terminal respectively specifically includes: Instruct the first transmitting end to electrically load the first FPGA, and perform a first clock chip configuration, a first DAC chip configuration, and a first FPGA line clock configuration; Instruct the first receiving end to electrically load the second FPGA, and perform a second clock chip configuration, a first ADC chip configuration, and a second FPGA line clock configuration; Instruct the second transmitting end to electrically load the third FPGA, and perform third clock chip configuration, second DAC chip configuration, and third FPGA line clock configuration; The second receiving end is instructed to electrically record the fourth FPGA, and perform a fourth clock chip configuration, a second ADC chip configuration, and a fourth FPGA line clock configuration.

3. The method according to claim 1, characterized in that The step of causing the first transmission terminal and the second transmission terminal to perform key negotiation based on the initial secret stream exchange, respectively generating a third secret stream and a fourth secret stream, and storing the third secret stream in a first working secret stream buffer of the first transmission terminal, and storing the fourth secret stream in a second working secret stream buffer of the second transmission terminal specifically includes: Instruct the first transmission terminal to send a first key negotiation instruction to the second transmission terminal, and instruct the second transmission terminal to send a second key negotiation instruction to the first transmission terminal; Performing key negotiation with the first transmission terminal and the second transmission terminal to obtain a first negotiated key of the first transmission terminal and a second negotiated key of the second transmission terminal; Instructing the first transmission terminal dense stream generator to generate the third dense stream, encrypting the third dense stream using the first negotiated key, and storing the third dense stream in the first working dense stream buffer; The fourth dense stream is generated by the second transmission terminal dense stream generator, the fourth dense stream is encrypted by the second negotiated key, and the fourth dense stream is stored in the second working dense stream buffer.

4. The method according to claim 1, characterized in that After causing the first transmission terminal to generate a first dense flow and storing the first dense flow in a first initial dense flow buffer of the first transmission terminal, causing the second transmission terminal to generate a second dense flow and storing the second dense flow in a second initial dense flow buffer of the second transmission terminal, the method further includes: In response to the first transmission terminal receiving the first inquiry frame structure data packet sent by the second transmission terminal, sending a first feedback frame structure data packet to the second transmission terminal; In response to the second transmission terminal receiving the second inquiry frame structure data packet sent by the first transmission terminal, a second feedback frame structure data packet is sent to the first transmission terminal.

5. The method according to claim 1, characterized in that Also includes: In response to not receiving the first synchronization information and the second synchronization information within a preset time or the first synchronization information and / or the second synchronization information being a preset synchronization failure status value, the first transmission terminal is again instructed to generate a new first dense stream and the second transmission terminal is again instructed to generate a new second dense stream.

6. A device for setting an intrinsically safe transmission state of an asynchronous optical communication system, characterized in that: include: An initial configuration module, configured to respectively perform initial configuration on the first transmission terminal and the second transmission terminal; A first processing module is configured to enable the first transmission terminal to generate a first dense flow, and store the first dense flow in a first initial dense flow buffer of the first transmission terminal, enable the second transmission terminal to generate a second dense flow, and store the second dense flow in a second initial dense flow buffer of the second transmission terminal; The step of causing the first transmission terminal to generate a first dense stream and storing the first dense stream in a first initial dense stream buffer of the first transmission terminal, causing the second transmission terminal to generate a second dense stream and storing the second dense stream in a second initial dense stream buffer of the second transmission terminal, is used to cause the first transmission terminal to read a first random number and use the first random number as a first key of the first transmission terminal; Encrypt the first secret stream by using the first key, and store the encrypted first secret stream in the first initial secret stream buffer; at the same time, instruct the second transmission terminal to read a second random number, and use the second random number as a second secret key of the second transmission terminal; encrypting the second secret stream by using the second key, and storing the encrypted second secret stream into the second initial secret stream buffer; a second processing module, configured to, in response to determining that the number of the first dense flows in the first initial dense flow buffer reaches a first storage threshold and the number of the second dense flows in the second initial dense flow buffer reaches a second storage threshold, the first transmission terminal and the second transmission terminal perform initial dense flow exchange; The first transmission terminal and the second transmission terminal perform an initial secret stream exchange, for sending first countdown information preset by the first transmission terminal to the second transmission terminal, sending second countdown information preset by the second transmission terminal to the first transmission terminal, and exchanging the first key with the second key based on the first countdown information and the second countdown information; A third processing module is configured to enable the first transmission terminal and the second transmission terminal to perform key negotiation based on the initial secret stream exchange, generate a third secret stream and a fourth secret stream respectively, and store the third secret stream into a first working secret stream buffer of the first transmission terminal, and store the fourth secret stream into a second working secret stream buffer of the second transmission terminal; a fourth processing module, configured to, in response to determining that the number of the third dense stream in the first working dense stream buffer reaches the first storage threshold and the fourth dense stream in the second working dense stream buffer reaches the second storage threshold, the first transmission terminal and the second transmission terminal perform working dense stream exchange; The first transmission terminal and the second transmission terminal perform working secret stream exchange, for sending third countdown information preset by the first transmission terminal to the second transmission terminal, sending fourth countdown information preset by the second transmission terminal to the first transmission terminal, and exchanging the first negotiated key with the second negotiated key based on the third countdown information and the fourth countdown information; The fifth processing module is configured to complete the setting of the endogenous security transmission status of the asynchronous optical communication system in response to the first transmission terminal receiving the first synchronization information sent by the second transmission terminal, the second transmission terminal receiving the second synchronization information sent by the first transmission terminal, and the first synchronization information and the second synchronization information are both preset synchronization success status values ​​within a preset time.

7. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the program, the method according to any one of claims 1 to 5 is implemented.

Citation Information

Patent Citations

  • Multimedia data encryption and decryption method and device

    CN106161383A

  • Comprehensive protection method for resisting side channel and fault attacks based on threshold technology

    CN111224770A