A data transmission verification method suitable for shipboard equipment

Abstract

The application discloses a data transmission verification method suitable for shipborne devices, wherein a first shipborne device obtains a device group number of a second shipborne device; if the device group number of the second shipborne device is consistent with that of the first shipborne device, the verification is successful, data transmission is started, otherwise, the verification fails, and the following process a or / and process b is entered; a. coordinate positioning verification; if the satellite positioning difference of the two shipborne devices is within a preset range, the verification is successful, the first shipborne device performs limited transmission to the second shipborne device; if the satellite positioning difference is not within the preset range, the verification fails, and the transmission process is terminated or process b is performed; b. online verification. Through the data transmission verification method, the data security can be improved, the transmission is started after the device group relationship of the two shipborne devices is verified, and the safe transmission of the data in the device group is ensured.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of verification methods, and in particular to a data transmission verification method suitable for shipborne equipment. BACKGROUND

[0002] In order to ensure the safety of ship navigation, shipborne equipment is required to be equipped for navigation and navigation, and common shipborne equipment includes electronic chart system, electronic chart display and information system, ship radar system, satellite compass, sonar detector, Beidou satellite positioning navigator, fish finder, ship automatic identification system, shipborne radio navigation receiver, navigation warning receiver, etc.

[0003] Shipborne equipment can work alone or share and backup data through data interface as needed. There is a data transmission requirement between different devices, for example, the satellite compass and the Beidou satellite positioning instrument need to synchronize the current satellite positioning information of the ship to the electronic chart system and the electronic chart display and information system to realize real-time display of the ship positioning on the electronic chart. There is also a data transmission requirement between the same devices, for example, according to the IEC standard requirements, some shipborne equipment related to ship driving safety need to be equipped with a backup machine, and the main machine and the backup machine share backup data in real time to ensure that when the main machine fails, the backup machine can be used instead, without affecting the normal driving of the ship.

[0004] Most of the existing shipborne equipment uses open data transmission protocol to transmit data, and lacks data verification method, which reduces the difficulty of data transmission, but also increases the risk of data leakage and illegal data source. And shipborne equipment usually works in offline environment without network, so it is difficult to perform device group permission verification, and cannot verify permission data transmission according to the actual device situation. Taking the electronic chart display and information system (Electronic Chart Display and Information System, hereinafter referred to as ECDIS) as an example, according to the international standard requirements, the ship should be equipped with ECDIS backup machine, and the backup machine is used to take over the work of chart display and ship navigation when the ECDIS main machine fails or cannot be used normally. After the ECDIS main machine and the backup machine are connected and matched, a series of data synchronization is required, and the data content includes navigation plan, chart annotation and navigation data. Among them, navigation data is usually a paid data, which is only allowed to share data between the main machine and the backup machine, such as using open protocol to transmit navigation data, which will exist the risk of data leakage of sharing navigation data to irrelevant ECDIS equipment, and infringing the copyright of data issuing institution. A verification method is needed to protect the safety of data transmission. SUMMARY

[0005] The purpose of the present application is to disclose a data transmission verification method suitable for shipborne equipment, to improve the safety of data transmission between shipborne equipment.

[0006] To achieve the above object, the present application adopts the following technical solution: a data transmission verification method suitable for shipborne devices, the shipborne devices comprising a plurality of first shipborne devices and second shipborne devices, the first shipborne devices and the second shipborne devices being provided with device group numbers, the first shipborne devices being in data connection with the second shipborne devices, before the first shipborne devices perform data transmission to the second shipborne devices, the following steps of data transmission verification are performed:

[0007] The first shipborne device obtains the device group number of the second shipborne device, if the device group number of the second shipborne device is consistent with the device group number of the first shipborne device, the verification is successful, and the data transmission is started, otherwise, the verification fails, and the following process a or / and process b is entered.

[0008] a. Positioning coordinate verification

[0009] The first shipborne device and the second shipborne device respectively obtain satellite positioning coordinates, the second shipborne device sends the satellite positioning coordinates to the first shipborne device, the first shipborne device calculates the difference of the satellite positioning coordinates, if the satellite positioning difference is within a preset range, the verification is successful, then the first shipborne device performs restricted transmission to the second shipborne device, if the satellite positioning difference is not within the preset range, the verification fails, then the transmission process is terminated or process b is performed.

[0010] The restricted transmission is only allowed within a preset valid time; once the positioning coordinate verification exceeds the preset valid time, the positioning coordinate verification needs to be performed again.

[0011] b. Online verification

[0012] The online verification comprises the following steps:

[0013] b1: The first shipborne device generates a temporary encryption value, and obtains the unique identification of the second shipborne device.

[0014] b2: The first shipborne device forwards the unique identification of the first shipborne device, the unique identification of the second shipborne device and the encryption value to the server through the mobile terminal for verification.

[0015] b3: The first shipborne device is provided with a verification result input interface, the verification result input interface receives the verification secret key of the server forwarded by the mobile terminal, the verification secret key is encrypted with the encryption value as a parameter, the first shipborne device decrypts the verification secret key with the encryption value as a parameter and obtains implicit information, the implicit information comprises the verification result identification returned by the server according to the grouping of the shipborne devices and the unique identification of the two shipborne devices to be verified.

[0016] b4: the first shipborne device resolves the implicit information obtained in step S03, such as the check result in the implicit message, and if the check result is identified as passed and the unique identifiers of the two shipborne devices that pass the check are consistent with the unique identifiers of the first shipborne device and the second shipborne device that need to perform data transmission, the verification is successful, and the data transmission is started, otherwise, the verification fails, and the transmission process is terminated.

[0017] Preferably, the first shipborne device encrypts the data packet to be transmitted using the device group number as a parameter, and the second shipborne device decrypts the received data packet using the device group number as a parameter; when the two shipborne devices belong to the same device group, the verification is successful, and the second shipborne device can decrypt the data packet, and then the data transmission is directly performed; if the second shipborne device cannot decrypt the data packet, i.e., the device group numbers are inconsistent, the verification fails.

[0018] In step b2, the first shipborne device forwards the unique identifier of the first shipborne device, the unique identifier of the second shipborne device, and the encryption value to the server through the mobile terminal, which is achieved by: composing a bit string with the unique identifier of the first shipborne device, the unique identifier of the second shipborne device, and the encryption value, and generating a two-dimensional code with the bit string information, and the mobile terminal obtains the unique identifier of the first shipborne device, the unique identifier of the second shipborne device, and the encryption value by scanning and analyzing the code, and forwards them to the server.

[0019] In another way, in step b2, the first shipborne device sends the unique identifier of the first shipborne device, the unique identifier of the second shipborne device, and the encryption value to the server through the mobile terminal, which is achieved by: accessing an interactive page provided by the server through the mobile terminal, and sending the unique identifier of the first shipborne device, the unique identifier of the second shipborne device, and the encryption value to the server through the interactive page.

[0020] Preferably, the first shipborne device transmits data to the second shipborne device through a multicast mode, and the transmitted data is encrypted by a secret key that can only be recognized by the second shipborne device; the first shipborne device transmits the encrypted data to the second shipborne device, and the encryption mode includes complete encryption or partial encryption; when the partial encryption mode is used, the index in the data is encrypted and replaced.

[0021] Further, in step b1, the first shipborne device obtains the unique identifier of the second shipborne device by: the first shipborne device and the second shipborne device periodically send heartbeat information including the current time and the unique identifier of the local machine to a multicast address, the first shipborne device obtains the heartbeat information of the second shipborne device from the multicast address, and obtains the unique identifier of the second shipborne device by analysis.

[0022] Preferably, the first shipboard device destroys the encryption value after decrypting the check secret key and obtaining the implicit information with the encryption value as a parameter; and the mobile terminal is connected with the service end data through internet communication, telephone communication, wireless communication or satellite communication.

[0023] Further, the first shipboard device determines whether data transmission check has been performed within a valid period before data transmission to the second shipboard device, and if data transmission check has been performed, directly performs data transmission; if data transmission check has not been performed within the limited period, performs data transmission check according to the steps.

[0024] Preferably, after the step b4 verification succeeds, the device group number of the second shipboard device is updated to be consistent with the device group number of the first shipboard device, and data transmission is started.

[0025] Preferably, in the positioning coordinate check process, when the positioning coordinate check exceeds the preset valid time, if the difference of the rechecked positioning coordinates is not within the preset range, the transmission data is locked and cannot be transmitted and copied.

[0026] The present application has the following advantages:

[0027] 1. The data transmission check method of the present application can improve data security, and transmission is started after the device group relationship of two shipboard devices is verified to ensure the safe transmission of data within the device group.

[0028] 2. The safety of multi-device network data transmission can be ensured, and when the first shipboard device transmits data, the unique identifier of the second shipboard device is added as a parameter to ensure that the transmission data can only be recognized and parsed by the corresponding device. In the case of multiple device networking, data security can be further ensured to ensure that data can only be received and recognized by devices in the same device group.

[0029] 3. The present application sets up a multi-step check method, and through device group check and positioning coordinate check, when the device group check fails, the positioning coordinate check is performed, and when the satellite positioning coordinate difference of the two devices is within the preset range (i.e. when it is determined that the two devices are on the same ship), time-limited transmission is allowed, which can ensure that when the main machine fails, the standby machine can be used instead, without affecting the normal sailing of the ship.

[0030] 4. The check secret key itself is encrypted by a temporary encryption value, and the temporary encryption value is destroyed after use, which ensures that the check secret key can only be used once and increases data security.

[0031] 5. The data is forwarded by the mobile terminal, and combined with the encryption check technology, offline check of the first shipboard device and the second shipboard device can be realized.

[0032] 6. Due to the large amount of data to be synchronized, using full encryption may result in low transmission efficiency. Considering the characteristics of the data, this invention employs a partial encryption method, encrypting only the indexes, thus ensuring data security while improving transmission efficiency. Attached Figure Description

[0033] Figure 1 This is a flowchart illustrating the present invention.

[0034] Figure 2 This is a flowchart of Example 1.

[0035] Figure 3 This is an interface diagram displayed on the mobile terminal after obtaining the verification key in an embodiment of the present invention. Detailed Implementation

[0036] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention. It should be noted that, unless otherwise specified, the embodiments and features in the embodiments of this application can be arbitrarily combined with each other.

[0037] The technical solution of the present invention will be further described below with reference to the accompanying drawings and specific embodiments.

[0038] This invention discloses a data transmission verification method applicable to shipboard equipment, which includes several first shipboard devices and second shipboard devices. In an embodiment of this invention, the first shipboard device is an ECDIS (Electronic Chart Display and Information System) main unit, and the second shipboard device can be a backup ECDIS unit. The ECDIS main unit and the ECDIS backup unit are connected via a network LAN port.

[0039] The server-side equipment group database stores information about different equipment groups. For example, the server-side equipment database stores equipment group number 001, which includes two ECDIS devices. The ID numbers (or device serial numbers) of the two ECDIS devices are 12345 and 12346, respectively. These two ECDIS devices are used as the main ECDIS device and the backup ECDIS device for ship A, and belong to the same equipment group.

[0040] To prevent the ECDIS device host of the ship A from malfunctioning or being unable to be normally used, the ECDIS device backup needs to be ready to take over the chart display and ship navigation at any time. The ECDIS device host and the ECDIS device backup are connected through a network LAN port and keep data connection.

[0041] As shown in Figure 1 The basic idea of the present application is to first perform offline device group number verification. The first shipborne device and the second shipborne device are each provided with a device group number. The first shipborne device is in data connection with the second shipborne device. The first shipborne device obtains the device group number of the second shipborne device. If the device group number of the second shipborne device is consistent with the device group number of the first shipborne device, the device group number verification passes, which indicates that the first shipborne device and the second shipborne device are the same device group devices that have been recorded, and then the verification succeeds, and data transmission can be directly performed. Otherwise, the verification fails.

[0042] Specifically, the method of device group number verification can be that the first shipborne device uses the device group number of the device as a parameter to encrypt the data packet to be transmitted, and the second shipborne device uses the device group number of the device as a parameter to decrypt the received data packet. When the second shipborne device can decrypt the data packet, it indicates that the device group numbers are consistent, the verification succeeds, and then data transmission is directly performed. If the second shipborne device cannot decrypt the data packet, it indicates that the device group numbers are inconsistent, and the verification fails.

[0043] If the offline device group number verification does not pass, positioning coordinate verification or online verification needs to be performed. Generally, offline positioning coordinate verification is first performed, such as in Embodiment Two. If the offline positioning coordinate verification does not pass, online verification can be performed. When the network communication state with the server is good, online verification can also be directly performed, such as in Embodiment One.

[0044] Embodiment One

[0045] This embodiment discloses a specific process of online verification.

[0046] As shown in Figure 2 Before the ECDIS device host transmits data to the ECDIS device backup, the following steps of data transmission verification are performed.

[0047] b1: The first shipborne device generates a temporary encryption value and obtains the unique identifier of the second shipborne device.

[0048] The unique identifier of the shipborne device can be the ID number (device number) of the shipborne device or a unique code issued by the server.

[0049] The method for the first shipborne device to obtain the unique identifier of the second shipborne device is that the first shipborne device and the second shipborne device periodically send heartbeat information including the current time and the local unique identifier to a multicast address, the first shipborne device obtains the heartbeat information of the second shipborne device from the multicast address, and the unique identifier of the second shipborne device is parsed and obtained.

[0050] In the embodiment, the unique identifier of the shipborne device is an ID number, the ECDIS device host periodically sends heartbeat information to a multicast address, the heartbeat information includes the current time 2022 / 09 / 13 15:00 and the ID number: 12345, the ECDIS device backup periodically (for example, every 30 seconds) sends the current heartbeat information to the multicast address, such as the current time 2022 / 09 / 13 15:00 and the ID number: 12346. The ECDIS device host obtains the ID number of the ECDIS device backup through the heartbeat information sent by the ECDIS device backup. The ECDIS device host generates a temporary encryption value, which can be a random number.

[0051] b2: The first shipborne device forwards the unique identifier of the first shipborne device, the unique identifier of the second shipborne device and the encryption value to the server through the mobile terminal for verification.

[0052] The application is suitable for offline verification. When the first shipborne device works in an offline environment without network and cannot be directly connected with the server, offline verification is performed through the mobile terminal.

[0053] The mobile terminal can be a smart phone or a tablet computer. The mobile terminal can be connected with the server through internet communication, telephone communication, wireless communication or satellite communication.

[0054] In the embodiment, the ECDIS device host generates a two-dimensional code by combining the ID number of the ECDIS device host, the ID number of the ECDIS device backup and the encryption value into a bit string.

[0055] When the mobile terminal is a smart phone, the smart phone scans the two-dimensional code to parse and obtain the ID number of the ECDIS device host, the ID number of the ECDIS device backup and the encryption value, and forwards them to the server through the cellular network: the mobile terminal accesses the interactive page provided by the server, and sends the unique identifier of the first shipborne device, the unique identifier of the second shipborne device and the encryption value to the server through the interactive page.

[0056] If the cellular network signal of the smart phone is weak at this time, the user can also call the server by telephone or send a message, and inform the server of the ID number of the ECDIS device host, the ID number of the ECDIS device backup and the encryption value by calling the telephone of the server. Or the user sends the ID number of the ECDIS device host, the ID number of the ECDIS device backup and the encryption value to the server by sending a message.

[0057] b3: The first shipborne device is provided with a verification result input interface, through which the verification key of the server forwarded by the mobile terminal is received, the verification key is encrypted with the encrypted value as a parameter, and the first shipborne device decrypts the verification key with the encrypted value as a parameter and obtains the implicit information.

[0058] Further explained as follows:

[0059] In this step, the server checks the grouping of the shipborne devices in the ship A in the device group database according to the ECDIS device host ID number and the ECDIS device backup host ID number sent by the ECDIS device host. If the received information is that the ECDIS device host (ID number: 12345) and the ECDIS device backup host (ID number: 12346) are the same device group after comparison, the verification is successful, the verification result identifier is passed, the server forms a bit string with the verification result identifier and the two ID numbers, takes the bit string as the implicit information, encrypts the verification key with the encrypted value as a parameter, and sends it to the mobile terminal. The encryption method can be SM4 encryption, and the encrypted value is a 128-bit random number.

[0060] In another case, if a non-legal ECDIS device backup host (ID number: 12347) is connected with the ECDIS device host before, the server receives the information that the ECDIS device host (ID number: 12345) and the ECDIS device backup host (ID number: 12347) are not the same device group after comparison, the verification fails, the verification result identifier is not passed, the server forms an implicit information with the verification result identifier, encrypts the verification key with the encrypted value as a parameter, and sends it to the mobile terminal.

[0061] As shown in Figure 3 , the user obtains the verification key through the mobile terminal, and the user inputs the verification key into the verification result input interface of the ECDIS device host. The ECDIS device host receives the verification key through the verification result input interface. The ECDIS device host decrypts the verification key with the encrypted value as a parameter and obtains the implicit information, which includes the verification result identifier returned by the server according to the grouping of the shipborne devices and the unique identifiers of the two shipborne devices verified.

[0062] b4: The first shipborne device parses the implicit information obtained in step S03. If the verification result identifier in the implicit message is passed, and the unique identifiers of the two shipborne devices verified are consistent with the unique identifier of the first shipborne device and the unique identifier of the second shipborne device which need to perform data transmission, the verification is successful, the encrypted value is destroyed, the data transmission is started, otherwise the verification fails, the encrypted value is destroyed, and the process is terminated.

[0063] In this embodiment, the ECDIS device host parses the implicit information, and obtains a check result. If the check result is passed, the ID numbers of the two shipborne devices currently connected are checked again to see whether they are the ECDIS device host (ID number: 12345) and the ECDIS device backup (ID number: 12346) in the implicit information. If the comparison is consistent, the verification is successful, and the data transmission can be started. If the check result is not passed, the verification fails, and the data transmission between the ECDIS device host and the ECDIS device backup currently connected is terminated. After the verification, the encryption value is destroyed, so that the same serial number can be used only once and cannot be reused.

[0064] The purpose of comparing the ID numbers of the two shipborne devices again with the actual transmitted data is to prevent the influence of artificial fraud on the verification in step S02. That is, when the user sends the ECDIS device host ID number and the ECDIS device backup ID number through the smart phone, there is a possibility that the ECDIS device backup ID number sent is intentionally made inconsistent with the ID number of the ECDIS device backup actually connected. When this situation occurs, the unique identification of the two shipborne devices in the implicit information will be inconsistent with the ID number of the ECDIS device backup that needs to perform data transmission when the verification is checked again in this step, the verification fails, and the process is terminated.

[0065] The data transmission mode of the ECDIS device host and the ECDIS device backup after the verification can be as follows:

[0066] 1. The ECDIS device host transmits data to the ECDIS device backup in a multicast mode, and the transmitted data is encrypted by a secret key (such as the ECDIS device backup ID) that can only be recognized by the ECDIS device backup.

[0067] 2. The data transmitted by the ECDIS device host to the ECDIS device backup is encrypted in an AES symmetric encryption mode, and the secret key of the AES symmetric encryption is generated by taking the ECDIS device backup ID as a parameter.

[0068] 3. The ECDIS device host transmits the navigation data in a partial encryption mode, such as a session encryption mode. Taking vector graph data as an example, the vector graph file includes an index class (Index Class). The index class is used to record the type of the vector graph, the belonging layer, the rendering parameter and the like, and the index class in the vector graph file is encrypted and replaced. The vector graph file cannot be parsed and used by other devices.

[0069] Embodiment Two

[0070] This embodiment discloses a process of checking a positioning coordinate.

[0071] The first shipborne device and the second shipborne device acquire satellite positioning coordinates respectively. The second shipborne device sends the satellite positioning coordinates to the first shipborne device. The first shipborne device calculates the difference of the satellite positioning coordinates, and if the satellite positioning difference is within a preset range, it is verified to be successful, and the first shipborne device performs restricted transmission to the second shipborne device; if the satellite positioning difference is not within the preset range, it is verified to be failed, and the transmission process is terminated.

[0072] The restricted transmission is only allowed within a preset valid time; once the positioning coordinate verification exceeds the preset valid time, the positioning coordinate verification needs to be performed again, and if the positioning coordinate difference is not within the preset range during the re-verification, the transmission data is locked and cannot be transmitted and copied.

[0073] The purpose of the positioning coordinate verification in this embodiment is that when the ship is sailing at sea and cannot communicate with the server, if the host machine fails, the backup machine on the same ship cannot be used to replace the host machine, which will affect the normal use of the ship. The positioning coordinate verification is used to enable the backup machine on the same ship to normally replace the host machine, so as to ensure the normal driving of the ship at sea when it is offline.

[0074] After the positioning coordinate verification is successful, when the communication state with the server is good, online verification can also be performed according to the process of embodiment one. After the online verification is successful, the device group number of the second shipborne device is updated to the device group number of the first shipborne device, so that synchronization is not required again after verification.

[0075] Embodiment three

[0076] The difference between this embodiment and embodiment one is that a determination is performed before the data transmission verification, that is, whether the data transmission verification has been performed within a valid period. If the data transmission verification has been performed, the data transmission is directly performed; if the data transmission verification has not been performed within the limited period, the data transmission verification is performed according to the method of embodiment one or embodiment two.

[0077] The advantage of the determination is that there may be an interval in the data transmission process, or an interruption occurs in the data transmission process. When the data transmission is performed again, if the verification needs to be performed again through steps b1-b4, the number of verifications is increased, and unnecessary cumbersome processes are generated.

[0078] Therefore, in this embodiment, a verification valid period is set, for example, the verification valid period is three days. Before the ECDIS device host machine performs data transmission to the ECDIS device backup machine within three days, it is determined whether the data transmission verification has been performed within the valid period. If the data transmission verification has been performed within the valid period, the data transmission is directly performed without re-verification.

[0079] The above examples are only used to illustrate the technical solutions of the present application but not limit the present application, and the present application is described in detail only with reference to the preferred embodiments. It should be understood by those of ordinary skill in the art that the technical solutions of the present application can be modified or equivalently replaced without departing from the spirit and scope of the technical solutions of the present application, and all should be covered in the scope of the claims of the present application.

Claims

1. A data transmission verification method suitable for use between shipboard devices, the shipboard devices comprising a plurality of first shipboard devices and second shipboard devices, the first shipboard devices and second shipboard devices each being provided with a device group number, the first shipboard devices being in data connection with the second shipboard devices, characterized in that: The first shipborne device performs the following data transmission verification before transmitting data to the second shipborne device: The first shipborne device obtains the device group number of the second shipborne device. If the device group number of the second shipborne device is consistent with the device group number of the first shipborne device, the verification is successful, and the data transmission is started. Otherwise, the verification fails, and the following process a or / and process b is entered. a. Positioning coordinate verification The first shipborne device and the second shipborne device obtain satellite positioning coordinates respectively. The second shipborne device sends the satellite positioning coordinates to the first shipborne device. The first shipborne device calculates the difference of the satellite positioning coordinates. If the satellite positioning difference is within a preset range, the verification is successful, and the first shipborne device performs restricted transmission to the second shipborne device. If the satellite positioning difference is not within the preset range, the verification fails, and the transmission process is terminated or process b is performed. The restricted transmission is only allowed within a preset valid time. Once the positioning coordinate verification exceeds the preset valid time, the positioning coordinate verification needs to be performed again. b. Online verification The online verification includes the following steps: b1: The first shipborne device generates a temporary encryption value and obtains the unique identifier of the second shipborne device. b2: The first shipborne device forwards the unique identifier of the first shipborne device, the unique identifier of the second shipborne device, and the encryption value to the server through the mobile terminal for verification. b3: The first shipborne device is provided with a verification result input interface. The verification result input interface receives the verification key of the server forwarded by the mobile terminal. The verification key is encrypted with the encryption value as a parameter. The first shipborne device decrypts the verification key with the encryption value as a parameter and obtains implicit information. The implicit information includes the verification result identifier returned by the server according to the grouping of the shipborne devices and the unique identifiers of the two shipborne devices being verified. b4: The first shipborne device analyzes the implicit information obtained in step b3. If the verification result identifier in the implicit message is passed, and the unique identifiers of the two shipborne devices being verified are consistent with the unique identifiers of the first shipborne device and the second shipborne device that need to perform data transmission, the verification is successful, and the data transmission is started. Otherwise, the verification fails, and the transmission process is terminated.

2. The method for data transmission verification between shipboard devices according to claim 1, characterized in that: The first shipborne device encrypts the data packet to be transmitted using the device group number of the device as a parameter. The second shipborne device decrypts the received data packet using the device group number of the device as a parameter. When the two shipborne devices belong to the same device group, the device group numbers are consistent, the verification is successful, and the second shipborne device can decrypt the data packet, so the data transmission is directly performed. If the second shipborne device cannot decrypt the data packet, the device group numbers are inconsistent, and the verification fails.

3. The method for data transmission verification between shipboard devices according to claim 1, wherein, In step b2, the first shipborne device forwards the unique identifier of the first shipborne device, the unique identifier of the second shipborne device, and the encryption value to the server through the mobile terminal. The unique identification of the first shipborne device, the unique identification of the second shipborne device, and the encryption value are combined into a bit string, and a two-dimensional code with the bit string information is generated, and the mobile terminal obtains the unique identification of the first shipborne device, the unique identification of the second shipborne device, and the encryption value by scanning and analyzing the code, and forwards them to the server.

4. The data transmission verification method suitable for shipborne devices according to claim 1, characterized in that: In step b2, the first shipborne device sends the unique identification of the first shipborne device, the unique identification of the second shipborne device, and the encryption value to the server through the mobile terminal in the following manner: The mobile terminal accesses the interactive page provided by the server, and sends the unique identification of the first shipborne device, the unique identification of the second shipborne device, and the encryption value to the server through the interactive page.

5. The method for data transmission verification between shipboard devices according to claim 1, characterized in that: The first shipborne device transmits data to the second shipborne device through multicast, and the transmitted data is encrypted by a secret key that can only be recognized by the second shipborne device. The first shipborne device transmits the encrypted data to the second shipborne device, and the encryption method includes full encryption or partial encryption; when partial encryption is used, the index in the data is encrypted and replaced.

6. The data transmission verification method suitable for shipborne devices according to claim 1, characterized in that: In step b1, the first shipborne device obtains the unique identification of the second shipborne device in the following manner: the first shipborne device and the second shipborne device periodically send heartbeat information including the current time and the unique identification of the local device to the multicast address, and the first shipborne device obtains the heartbeat information of the second shipborne device from the multicast address and analyzes to obtain the unique identification of the second shipborne device.

7. The data transmission verification method suitable for shipborne devices according to claim 1, characterized in that: After the first shipborne device decrypts the verification secret key with the encryption value as a parameter and obtains the implicit information, the encryption value is destroyed; The mobile terminal is connected to the server data through internet communication, telephone communication, wireless communication, or satellite communication.

8. The data transmission verification method suitable for shipborne devices according to claim 1, characterized in that: Before the first shipborne device transmits data to the second shipborne device, it first determines whether data transmission verification has been performed within the valid period, if it has been performed, it directly transmits data, if it has not been performed within the limited period, it performs data transmission verification according to the steps.

9. The data transmission verification method suitable for shipborne devices according to claim 1, characterized in that: After step b4 verification is successful, the device group number of the second shipborne device is updated to be consistent with the device group number of the first shipborne device, and data transmission begins.

10. The method for data transmission verification between shipboard devices according to claim 1, characterized in that: In the positioning coordinate verification process, when the positioning coordinate verification exceeds the preset valid time, and the re-verified positioning coordinate difference is not within the preset range, the transmitted data is locked and cannot be transmitted or copied.

Images