A highway information board content security examination system and an implementation method thereof

Abstract

The application discloses a highway information board content security examination system and an implementation method thereof, wherein a host computer sends a data packet to the information board to control the operation strategy and / or the publishing content of the information board; an all-in-one machine server sends a remote instruction to a security box to provide an examination service for the security box and receives an alarm feedback of the security box; the security box examines and processes the publishing content of a publishing frame sent by the host computer based on a preset examination standard according to the remote instruction of the all-in-one machine server; when the examination is passed, the publishing content is output to the information board; when the examination is not passed, an alarm feedback is sent to the all-in-one machine server according to the examination result; and the information board performs publishing content display processing according to the data packet of the host computer and the examination passing result of the security box. The application realizes effective examination of the publishing content through the module structure of the all-in-one machine server and the security box, and can be widely applied to the technical field of highway equipment management.

Description

Technical Field

[0001] This invention relates to the field of highway equipment management technology, and in particular to a highway information board content security review system and its implementation method. Background Technology

[0002] Traditional information display systems consist of only two parts: the information boards and the host computer software. On highways, a typical architecture involves multiple information boards connected to a host computer via Ethernet, forming a local area network (LAN). A common system architecture is as follows: Figure 1 As shown.

[0003] The host computer is typically a computer running a Windows operating system, on which the host computer software for the information board is run. This host computer software is responsible for user authentication, information board management and parameter configuration, and information board information dissemination.

[0004] A typical information display board consists of three main parts: a DC regulated power supply, an LED dot matrix, and a control board. The DC regulated power supply provides a stable power source for the equipment on the information display board. The LED dot matrix provides road traffic information to pedestrians or drivers; the brightness of the LED light sources and the spacing between the LED dot matrix units are typically selected based on the specific scenario. The control board's function is to scan and drive the LED screen, and it also integrates a communication interface, allowing administrators to configure parameters, publish information, and perform control operations on the information display board through the communication interface.

[0005] The host computer is equipped with the host computer software provided by the information board manufacturer. The feature of this software is that it allows users to easily publish text information to the information board through a UI interface.

[0006] The advantage of this network structure is that a single computer can control all information boards within the local area network. However, because the installation of information boards on-site is distributed, human error or failure to recognize host access may occur during actual use, leading to the display of incorrect information or even illegal information on the information boards, misleading drivers and passengers, and potentially causing adverse social impact. Therefore, it is essential to filter the data content of highway information boards. Summary of the Invention

[0007] The purpose of this invention is to provide a content security review system and implementation method for highway information boards, which can effectively review the content published on the information boards.

[0008] To achieve the above objectives, embodiments of the present invention provide a highway information sign content security review system, comprising:

[0009] The host computer is used to send data packets to the information board and control the information board's operating strategy and / or published content; wherein, the data packets include operation frames and publishing frames;

[0010] The all-in-one server is used to send remote commands to the security box, provide review services to the security box, and receive alarm feedback from the security box; wherein, the remote commands include login authentication service commands, text review service commands, whitelist update commands, model parameter update commands, security policy update commands, and program upgrade commands;

[0011] The security box is used to review the content of the publishing frame sent by the host computer based on preset review standards according to the remote instructions of the all-in-one machine server. When the review is passed, the published content is output to the information board. When the review fails, an alarm feedback is sent to the all-in-one machine server according to the review result. The alarm feedback includes alarm content or error content.

[0012] The information board is used to display content based on the data packets from the host computer and the review results of the security box.

[0013] Routers are used to provide Ethernet data exchange services for host computers, all-in-one servers, security boxes, and information boards.

[0014] As an improvement to the above solution, the host computer, the all-in-one server, and the information board are all connected to the router, and the security box is located between the information board and the router;

[0015] The information boards are distributed in a distributed manner. Each information board exchanges Ethernet data with the host computer and the all-in-one server through the router, and each information board is equipped with a security box.

[0016] As an improvement to the above solution, the step of reviewing the content of the publishing frame sent by the host computer based on the remote instructions of the all-in-one machine server and a preset review standard includes:

[0017] The operating mode of the security box is determined according to the remote instructions of the all-in-one machine server; wherein the operating mode includes a pass-through mode or an audit mode.

[0018] Retrieve the content of the published frame;

[0019] When the security box is in pass-through mode, it directly outputs the published content to the information board;

[0020] When the security box is in review mode, it reviews and processes the published content.

[0021] As an improvement to the above solution, the review process for the published content includes the following steps:

[0022] The published content is then subject to blacklist / whitelist checks;

[0023] If the result of the judgment is within the preset whitelist range, the review is deemed passed;

[0024] If the result indicates that the item falls within the preset blacklist range, the review is deemed unsuccessful.

[0025] When the judgment result is not within the range of the whitelist and the blacklist, the published content is reviewed by rules through a preset rule base;

[0026] When the published content meets the positive matching rules, it is determined to have passed the review;

[0027] If the published content meets the reverse matching rules, it is determined that the review will not be approved.

[0028] As an improvement to the above solution, the review and processing of the published content further includes the following steps:

[0029] When the published content cannot match the rules in the rule base, check the current network connection status between the security box and the all-in-one machine server.

[0030] When the network connection is normal, the published content is uploaded to the all-in-one machine server for review, and the review result is received from the all-in-one machine server.

[0031] When the network connection is abnormal, the published content will be reviewed locally using a deep neural network model.

[0032] As an improvement to the above solution, when the network connection is normal, the all-in-one machine server reviews the published content in the following ways: blacklist / whitelist judgment, rule review using a preset rule base, text review by a neural network model, and / or manual review.

[0033] As an improvement to the above solution, the security box is also used for:

[0034] When the published content passes the review, the whitelist scope is updated according to the published content;

[0035] When the published content fails the review, the blacklist scope is updated according to the published content;

[0036] When the number of strings in the whitelist and / or the blacklist exceeds a preset threshold, the LFU algorithm is used to eliminate strings whose usage frequency is lower than a preset frequency value.

[0037] As an improvement to the above solution, when the review fails, an alarm feedback is sent to the all-in-one machine server based on the review result; wherein, the alarm feedback includes alarm content or error content, specifically:

[0038] When the review fails, if the review result is a content warning, the alarm content is fed back to the all-in-one machine server according to the security policy; if the review result is a content error, the error content is fed back to the all-in-one machine server according to the security policy; and, take corresponding security actions, wherein the security actions include: intercepting the published content, outputting preset display information to the information board, sending a shutdown command to the information board, and / or powering off the information board.

[0039] This invention also provides a method for implementing a highway information sign content security review system, comprising the following steps:

[0040] The host computer sends data packets to the information board to control the information board's operating strategy and / or published content; wherein, the data packets include operation frames and publishing frames;

[0041] The all-in-one server sends remote commands to the security box to provide review services for the security box and receives alarm feedback from the security box; wherein, the remote commands include login authentication service commands, text review service commands, whitelist update commands, model parameter update commands, security policy update commands, and program upgrade commands;

[0042] The security box reviews the content of the publishing frame sent by the host computer based on the remote instructions of the all-in-one machine server and the preset review standards. When the review is passed, the published content is output to the information board. When the review fails, an alarm feedback is sent to the all-in-one machine server according to the review result. The alarm feedback includes alarm content or error content.

[0043] The information board displays and processes the published content based on the data packets from the host computer and the review results from the security box.

[0044] The router provides Ethernet data exchange services for the host computer, the all-in-one server, the security box, and the information board.

[0045] As an improvement to the above solution, the communication sub-thread of the host computer includes the following steps:

[0046] The data packet is parsed;

[0047] When the data packet is an operation frame, the operation frame is directly transmitted to the information board;

[0048] When the data packet is a publishing frame, the publishing frame is parsed to obtain the publishing content, and the publishing content is sent to the security box.

[0049] As an improvement to the above solution, the step of reviewing the content of the publishing frame sent by the host computer based on the remote instructions of the all-in-one machine server and preset review standards via the security box includes:

[0050] The operating mode of the security box is determined according to the remote instructions of the all-in-one machine server; wherein the operating mode includes a pass-through mode or an audit mode.

[0051] Retrieve the content of the published frame;

[0052] When the security box is in pass-through mode, it directly outputs the published content to the information board;

[0053] When the security box is in review mode, it reviews and processes the published content.

[0054] As an improvement to the above solution, the review process for the published content includes the following steps:

[0055] The whitelist is determined based on the published content. If the result is yes, the published content is output to the information board; otherwise, a deep neural network model is used for text review. The review results include content approval, content warning, and content error.

[0056] When the text review result is that the content passes, the published content is output to the information board;

[0057] When the text review result is a content warning, the alarm content is fed back to the all-in-one machine server according to the security policy;

[0058] When the text review results in an error, the error content is fed back to the all-in-one machine server according to the security policy.

[0059] As an improvement to the above solution, the review process for the published content includes the following steps:

[0060] The published content is then subject to blacklist / whitelist checks;

[0061] If the result of the judgment is within the preset whitelist range, the review is deemed passed;

[0062] If the result indicates that the application falls within the preset blacklist range, the review is deemed unsuccessful.

[0063] When the judgment result is not within the range of the whitelist and the blacklist, the published content is reviewed by rules through a preset rule base;

[0064] When the published content meets the positive matching rules, it is determined to have passed the review;

[0065] If the published content meets the reverse matching rules, it is determined that the review will not be approved.

[0066] As an improvement to the above solution, the review and processing of the published content further includes the following steps:

[0067] When the published content cannot match the rules in the rule base, check the current network connection status between the security box and the all-in-one machine server.

[0068] When the network connection is normal, the published content is uploaded to the all-in-one machine server for review, and the review result is received from the all-in-one machine server.

[0069] When the network connection is abnormal, the published content will be reviewed locally using a deep neural network model.

[0070] Compared with existing technologies, the highway information board content security review system and its implementation method disclosed in this invention, compared with the traditional information board publishing system, adds a modular structure of an all-in-one server and a security box. It adopts a method of remote cloud review by the all-in-one server and near-end review by the security box, combined with online and offline review mechanisms. Compared with existing technologies, this invention, based on the mechanism of multiple review methods of security box and all-in-one server, can understand the legality and compliance of information board publishing content at the semantic level, accurately identify and deal with illegal, irregular and inappropriate publishing content, improve the accuracy and automation level of review, reduce manual labor intensity, reduce maintenance workload, and ensure the effective and efficient interception of illegal information. The use of online and offline review methods ensures that illegal and irregular information can still be intercepted and processed even if the network is attacked and disconnected, thus achieving effective review of publishing content. Attached Figure Description

[0071] Figure 1 A schematic diagram of the existing information board publishing system;

[0072] Figure 2 A schematic diagram of the connection architecture of the security box provided in an embodiment of the present invention;

[0073] Figure 3 This is an architectural block diagram of a highway information sign content security review system provided in an embodiment of the present invention;

[0074] Figure 4 This is a schematic diagram of the structure of the security box provided in an embodiment of the present invention;

[0075] Figure 5 A schematic diagram of the workflow of the highway information board content security review system provided in this embodiment of the invention;

[0076] Figure 6 A schematic diagram of the rule base management process provided in an embodiment of the present invention;

[0077] Figure 7 A flowchart illustrating the steps of implementing the highway information sign content security review system provided in this embodiment of the invention;

[0078] Figure 8 A schematic diagram of the main program logic flow provided for an embodiment of the present invention;

[0079] Figure 9 This is a schematic diagram of the HTTP connection sub-thread process provided in an embodiment of the present invention;

[0080] Figure 10 This is a schematic diagram of the communication sub-thread process of the information board provided in an embodiment of the present invention;

[0081] Figure 11 This is a schematic diagram of the MQTT sub-thread process provided in an embodiment of the present invention;

[0082] Figure 12 This is a schematic diagram of the host computer communication sub-thread process provided in an embodiment of the present invention;

[0083] Figure 13 This is a schematic diagram of the audit subroutine provided in an embodiment of the present invention. Detailed Implementation

[0084] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0085] To address the problems existing in the prior art, this invention provides a highway information sign content security review system, comprising a host computer, an all-in-one server, a security box, information signs, and a router. (See also...) Figure 2 and Figure 3 , Figure 2 This is a schematic diagram of the connection architecture of the security box provided in an embodiment of the present invention. Figure 3 This is an architectural block diagram of a highway information sign content security review system provided in an embodiment of the present invention; wherein,

[0086] The host computer is used to send data packets to the information board and control the information board's operating strategy and / or published content; wherein, the data packets include operation frames and publishing frames;

[0087] The all-in-one server is used to send remote commands to the security box, provide review services to the security box, and receive alarm feedback from the security box; wherein, the remote commands include login authentication service commands, text review service commands, whitelist update commands, model parameter update commands, security policy update commands, and program upgrade commands;

[0088] The security box is used to review the content of the publishing frame sent by the host computer based on preset review standards according to the remote instructions of the all-in-one machine server. When the review is passed, the published content is output to the information board. When the review fails, an alarm feedback is sent to the all-in-one machine server according to the review result. The alarm feedback includes alarm content or error content.

[0089] The information board is used to display content based on the data packets from the host computer and the review results of the security box.

[0090] Routers are used to provide Ethernet data exchange services for host computers, all-in-one servers, security boxes, and information boards.

[0091] Optionally, the host computer, the all-in-one server, and the information board are all connected to the router, and the security box is located between the information board and the router; the information boards are distributed, and each information board exchanges Ethernet data with the host computer and the all-in-one server through the router, and each information board is equipped with a security box.

[0092] Specifically, the core function of this invention is as follows: during the process of the host computer sending data packets to the information board, an all-in-one server and a security box are added to perform the review of the published content. On the embedded computer or single-board computer hardware, the main control process of content security review is completed, including communication management with the host computer, communication management with the variable information board, management of network online status, switching between online and offline operation modes as appropriate, adopting different working modes such as transparent transmission mode, review mode or maintenance mode according to management instructions, decrypting and decoding the publishing commands and control commands issued by the host computer, encrypting and encoding the command responses uploaded by the information board, calling the all-in-one server or local content review logic to perform content review, querying the publishing status of the information board, and automatically triggering corresponding alarm feedback and security actions according to status changes.

[0093] Preferably, the step of reviewing the content of the publishing frame sent by the host computer based on the remote instructions of the all-in-one machine server and a preset review standard includes:

[0094] The operating mode of the security box is determined according to the remote instructions of the all-in-one machine server; wherein the operating mode includes a pass-through mode or an audit mode.

[0095] Retrieve the content of the published frame;

[0096] When the security box is in pass-through mode, it directly outputs the published content to the information board;

[0097] When the security box is in review mode, it reviews and processes the published content.

[0098] Specifically, the security box offers three configurable modes: transparent transmission, review, and maintenance. In transparent transmission mode, the security box does not process the data streams sent from the host computer or uploaded to the intelligence board, forwarding them verbatim between the host computer and the intelligence board. In review mode, the security box performs content review on the data streams sent from the host computer, including blacklist / whitelist review and rule base review. Combining online and offline review mechanisms, this effectively improves the accuracy of information review and ensures timely interception of illegal information. In maintenance mode, maintenance personnel monitor the system's working status, outputting the original data sent from the cloud system, content review processing results, the original data streams uploaded to the intelligence board, and intelligence board working status query commands and results at the maintenance port.

[0099] In a preferred embodiment, the review process for the published content includes the following steps:

[0100] The published content is then subject to blacklist / whitelist checks;

[0101] If the result of the judgment is within the preset whitelist range, the review is deemed passed;

[0102] If the result indicates that the application falls within the preset blacklist range, the review is deemed unsuccessful.

[0103] When the judgment result is not within the range of the whitelist and the blacklist, the published content is reviewed by rules through a preset rule base;

[0104] When the published content meets the positive matching rules, it is determined to have passed the review;

[0105] If the published content meets the reverse matching rules, it is determined that the review will not be approved.

[0106] When the published content cannot match the rules in the rule base, check the current network connection status between the security box and the all-in-one machine server.

[0107] When the network connection is normal, the published content is uploaded to the all-in-one machine server for review, and the review result is received from the all-in-one machine server.

[0108] When the network connection is abnormal, the published content will be reviewed locally using a deep neural network model.

[0109] Preferably, the security box is further used for:

[0110] When the published content passes the review, the whitelist scope is updated according to the published content;

[0111] When the published content fails the review, the blacklist scope is updated according to the published content;

[0112] When the number of strings in the whitelist and / or the blacklist exceeds a preset threshold, the LFU algorithm is used to eliminate strings whose usage frequency is lower than a preset frequency value.

[0113] Preferably, when the review fails, an alarm feedback is sent to the all-in-one machine server based on the review result; wherein, the alarm feedback includes alarm content or error content, specifically:

[0114] When the review fails, if the review result is a content warning, the alarm content is fed back to the all-in-one machine server according to the security policy; if the review result is a content error, the error content is fed back to the all-in-one machine server according to the security policy; and, take corresponding security actions, wherein the security actions include: intercepting the published content, outputting preset display information to the information board, sending a shutdown command to the information board, and / or powering off the information board.

[0115] Specifically, the present invention explains the principles of content censorship through specific embodiments, as follows:

[0116] See Figures 4 to 5 , Figure 4 This is a schematic diagram of the structure of the security box provided in an embodiment of the present invention. Figure 5This is a schematic diagram of the workflow of a highway information board content security review system provided in an embodiment of the present invention. The security box includes an information processing module, a basic service management module, and ARM architecture hardware. The main information processing module calls functions such as the protocol parsing module, content review module, and security action module to complete the overall business process. Specifically, the main information processing module includes a content review service management and invocation module, a communication management module, and a protocol parsing module.

[0117] The content review service management and invocation module is used to execute content review functions. Content review is the core function of the security box. By configuring the review service, the security box can remotely invoke the cloud review service interface (i.e., connect to the all-in-one server for online review) through the online content security review unit, or invoke local content review logic through the offline content security review unit. The two seamlessly switch between online and offline states to ensure uninterrupted review service. Keyword-based content review primarily uses blacklists and whitelists for text information review, supplemented by a rule-based review mechanism. The completed rules and network model parameters support online synchronous updates and remote upgrades.

[0118] In the process of determining whether the published content is blacklisted or whitelisted, the whitelist refers to rules that are 100% compliant and is maintained by the whitelist management unit in the security box. The blacklist refers to rules that are 100% non-compliant and is maintained by the blacklist management unit in the security box.

[0119] It should be noted that when the blacklist and whitelist are initially established, the initial list is empty or has a small number of pre-set lists. When the security box is powered on, it sends an incremental list retrieval request to the all-in-one server and receives the incremental blacklist and whitelist (after a specified date).

[0120] Furthermore, each time the security box queries the online / offline content review interface for a compliance value of a text string, if the returned compliance value falls within the normal content range, the security box adds this text string to the whitelist and sends it to the intelligence release board. When the number of whitelists in the security box becomes too large, infrequently used whitelist strings are removed according to the LFU algorithm. Similarly, blacklists are added or deleted in the same way.

[0121] Furthermore, after the security box checks the received published content against blacklists and whitelists, it uses a rule base for rule review of published content that is not on either the whitelist or blacklist. See also Figure 6This is a schematic diagram of the rule base management process provided in an embodiment of the present invention. The difference between rule review and blacklist / whitelist review is that blacklist / whitelist reviews provide precise review of the invention content, while rule review provides fuzzy review of the published content. The preset rule base is pre-configured with various rules, such as whether the beginning or end strings of the published content meet specific text content requirements or whether the published content meets specific format requirements, to determine whether the corresponding rules are met. The rules include forward matching rules and reverse matching rules. When a forward matching rule is met, the review is deemed passed; when a reverse matching rule is met, the review is deemed failed.

[0122] Furthermore, after reviewing the published content according to the rules, the security box will conduct online or offline content security reviews for published content that does not match the rules in the rule base.

[0123] In the first scenario, when the security box determines that the connection with the all-in-one machine server is stable, it remotely calls the cloud review service interface through the online content security review unit to send the published content to the all-in-one machine server for review and receives the review results. For example, if the cloud review returns a compliance value greater than or equal to the threshold, a text message is sent to the intelligence release board; if the compliance value is less than the threshold, an alarm is triggered and security actions are executed.

[0124] Preferably, when the network connection is normal, the all-in-one machine server reviews the published content in the following ways: blacklist / whitelist judgment, rule review using a preset rule base, text review by a neural network model, and / or manual review.

[0125] Specifically, the all-in-one server is also equipped with corresponding blacklist / whitelist review mechanisms, rule review mechanisms, and neural network model review mechanisms. These mechanisms are the same as the security box's review mechanism, all of which adopt a layer-by-layer review approach. Content that the machine cannot judge is submitted for manual review.

[0126] It should be noted that the workload of submitting all-in-one server applications for manual review should be controlled to less than 10% of the total review workload.

[0127] In the second scenario, when the security box determines that it has lost connection with the all-in-one server, it invokes the offline content review service interface to conduct a review through the offline content security review unit. This offline content security review unit uses a trained neural network model to review the text and calculate the confidence level that the published content is not illegal or in violation of regulations. When the offline review returns a confidence level greater than or equal to a threshold, text information is sent to the intelligence release board; when the confidence level is less than the threshold, an alarm is triggered and security actions are executed.

[0128] When the security box periodically checks the status of the information board's publication and the information published in the cloud system, if content review detects any violations, it automatically triggers corresponding security actions based on the level of violation, issuing warnings and alarms: for general violations, actions include blocking publication and publishing pre-set information; for severe violations, actions include blacking out the screen, resetting, and powering off. After the violation is revoked and the alarm is cleared, a recovery action is performed to restore the information board to normal working status. The level of violation is set by parameters and updated remotely.

[0129] The communication management module is used to perform communication management functions between the security box and the cloud system (i.e., the all-in-one server), as well as communication management functions between the security box and the information board.

[0130] The communication channel between the cloud system and the security box primarily uses a fiber optic network, supplemented by a wireless network. A TCP / IP network protocol stack runs on this network, employing a client / server (C / S) model for data communication. The cloud system acts as the server, and the security box acts as the client. The cloud system listens for connection requests from the security box on a designated port and manages the security box's session connections, cleaning up unresponsive security boxes in real time. The security box initiates and maintains a TCP / IP connection with the cloud system, sending heartbeat messages to keep the connection active. On the TCP / IP connection, both the cloud system and the security box can send and receive data simultaneously, achieving full-duplex communication.

[0131] The communication channel between the security box and the intelligence board control board is a serial port or Ethernet, employing a master-slave half-duplex communication structure. The security box is the master station, and the intelligence board is the slave station. Communication between the devices is controlled by information frames sent by the master station. When using the TCP / IP network protocol stack and a client / server (C / S) mode for data communication, the intelligence board acts as the server, and the security box acts as the client.

[0132] The communication management module is also used to perform network online status management functions. The security box sends heartbeat information to maintain its connection with the cloud system. When an abnormal network disconnection is detected, it immediately initiates a reconnection attempt. During the disconnection, the terminal enters offline working mode, during which published content calls local review functions to perform simple model calculations and inferences. After the network is restored, the security box re-enters online working mode and calls remote content review services.

[0133] The communication management module is also used to manage the working modes of the security box, including transparent transmission mode, audit mode, and maintenance mode.

[0134] Given the varying communication protocols used by different vendors for their information boards, the protocol parsing module performs protocol parsing. This module operates in environments requiring protocol parsing, such as security boxes and cloud environments. Its primary function is to parse Protocol Data Units (PDUs). The general format of a command frame consists of seven parts: start-of-frame character, slave address field, master address field, control code (command code), data field, checksum, and end-of-frame character. Each part comprises several bytes. Similarly, the general format of a response frame also consists of seven parts: start-of-frame character, slave address field, master address field, frame type (response code), data field, checksum, and end-of-frame character. Each part also comprises several bytes. Ultimately, the protocol parsing module provides a vendor-specific, province-wide unified information board communication protocol. Each vendor implements its products according to this unified protocol.

[0135] In addition, the basic service modules configured in the security box include a terminal maintenance management unit, an HTTPS / MQTT service client management unit, an information board message sending server unit, and an NTP time synchronization unit. The terminal maintenance management unit is responsible for sending the security box's system operating status, CPU, MEM, STORAGE, log records, and other information to the terminal remote management system of the online information board content recognition system. The HTTPS / MQTT service client management unit is used to interact with the server-side services of the online information board content recognition system, calling server-side services, receiving server-side information notifications, and downloading server-side files or parameters. The information board message sending server unit manages the sending and receiving of information board messages. The NTP time synchronization unit provides terminal time synchronization functionality based on the NTP service.

[0136] The entire system's content review process is as follows: Figure 5 As shown, the host computer publishes information to the security box, which then performs protocol analysis and extracts the published information. It reviews each program list item against blacklists and whitelists and uses the rule base for judgment. Content that cannot be matched in the rule base is uploaded to the all-in-one server for review. The all-in-one server submits content that the machine cannot judge to manual review. The security box intercepts and issues alarms for the published content that passes the review according to preset strategies, and sends the published content that fails the review to the information board for publication.

[0137] The technical means of the embodiments of the present invention have the following beneficial effects:

[0138] The entire system employs a combination of cloud-based remote review via an all-in-one server and near-end review via a security box for content review. This, along with online and offline review mechanisms, allows the system to understand the legality and compliance of information board content at the semantic level. It accurately identifies and handles illegal, irregular, and inappropriate content, improving review accuracy and automation, reducing manual labor, minimizing maintenance workload, and ensuring effective and efficient interception of illegal information. The combined online and offline review approach ensures that illegal and irregular information can still be intercepted and processed even when the network is down due to an illegal attack, achieving effective review of published content.

[0139] On the other hand, embodiments of the present invention provide an implementation method for a highway information sign content security review system, referring to... Figure 7 This includes the following steps:

[0140] The host computer sends data packets to the information board to control the information board's operating strategy and / or published content; wherein, the data packets include operation frames and publishing frames;

[0141] The all-in-one server sends remote commands to the security box to provide review services for the security box and receives alarm feedback from the security box; wherein, the remote commands include login authentication service commands, text review service commands, whitelist update commands, model parameter update commands, security policy update commands, and program upgrade commands;

[0142] The security box reviews the content of the publishing frame sent by the host computer based on the remote instructions of the all-in-one machine server and the preset review standards. When the review is passed, the published content is output to the information board. When the review fails, an alarm feedback is sent to the all-in-one machine server according to the review result. The alarm feedback includes alarm content or error content.

[0143] The information board displays and processes the published content based on the data packets from the host computer and the review results from the security box; wherein, the router provides Ethernet data exchange services for the host computer, the all-in-one server, the security box, and the information board.

[0144] Optionally, the communication sub-thread of the host computer includes the following steps:

[0145] The data packet is parsed;

[0146] When the data packet is an operation frame, the operation frame is directly transmitted to the information board;

[0147] When the data packet is a publishing frame, the publishing frame is parsed to obtain the publishing content, and the publishing content is sent to the security box.

[0148] Optionally, the step of reviewing the content of the publishing frame sent by the host computer based on the remote instructions of the all-in-one machine server and preset review standards via the security box includes:

[0149] The operating mode of the security box is determined according to the remote instructions of the all-in-one machine server; wherein the operating mode includes a pass-through mode or an audit mode.

[0150] Retrieve the content of the published frame;

[0151] When the security box is in pass-through mode, it directly outputs the published content to the information board;

[0152] When the security box is in review mode, it reviews and processes the published content.

[0153] Optionally, the review process for the published content includes the following steps:

[0154] The whitelist is determined based on the published content. If the result is yes, the published content is output to the information board; otherwise, a deep neural network model is used for text review. The review results include content approval, content warning, and content error.

[0155] When the text review result is that the content passes, the published content is output to the information board;

[0156] When the text review result is a content warning, the alarm content is fed back to the all-in-one machine server according to the security policy;

[0157] When the text review results in an error, the error content is fed back to the all-in-one machine server according to the security policy.

[0158] As a more preferred implementation, the review process for the published content includes the following steps:

[0159] The published content is then subject to blacklist / whitelist checks;

[0160] If the result of the judgment is within the preset whitelist range, the review is deemed passed;

[0161] If the result indicates that the application falls within the preset blacklist range, the review is deemed unsuccessful.

[0162] When the judgment result is not within the range of the whitelist and the blacklist, the published content is reviewed by rules through a preset rule base;

[0163] When the published content meets the positive matching rules, it is determined to have passed the review;

[0164] If the published content meets the reverse matching rules, it is determined that the review will not be approved.

[0165] When the published content cannot match the rules in the rule base, check the current network connection status between the security box and the all-in-one machine server.

[0166] When the network connection is normal, the published content is uploaded to the all-in-one machine server for review, and the review result is received from the all-in-one machine server.

[0167] When the network connection is abnormal, the published content will be reviewed locally using a deep neural network model.

[0168] Preferably, when the network connection is normal, the all-in-one machine server reviews the published content in the following ways: blacklist / whitelist judgment, rule review using a preset rule base, text review by a neural network model, and / or manual review.

[0169] Preferably, the method further includes:

[0170] When the published content passes the review, the security box updates the whitelist range based on the published content; when the published content fails the review, the blacklist range updates the blacklist range based on the published content; and when the number of strings in the whitelist and / or the blacklist exceeds a preset threshold, the LFU algorithm is used to eliminate strings whose usage frequency is lower than a preset frequency value.

[0171] Preferably, when the review fails, an alarm feedback is sent to the all-in-one machine server based on the review result; wherein, the alarm feedback includes alarm content or error content, specifically:

[0172] When the review fails, if the review result is a content warning, the alarm content is fed back to the all-in-one machine server according to the security policy; if the review result is a content error, the error content is fed back to the all-in-one machine server according to the security policy; and, take corresponding security actions, wherein the security actions include: intercepting the published content, outputting preset display information to the information board, sending a shutdown command to the information board, and / or powering off the information board.

[0173] It should be noted that the implementation method of the highway information board content security review system provided in this embodiment of the invention is the same as all the process steps performed by the highway information board content security review system in the above embodiment. The working principles and beneficial effects of the two correspond one-to-one, so they will not be described again.

[0174] The following describes in detail the implementation principle of the content security review of the highway information board of the present invention:

[0175] First, it should be noted that traditional information display systems have a simple structure consisting of a host computer and an information display board. The advantage is its simplicity and ease of use; the disadvantage is that on highways, if criminals exploit security vulnerabilities to access an unauthorized computer and install the host computer software for the information display system, they can arbitrarily post incorrect or inappropriate information on the information display board.

[0176] To fully explain the implementation principle of the present invention, the relevant technical problems solved by the present invention will first be described:

[0177] Review issues

[0178] I. AI Algorithms

[0179] The security box's CPU is based on the ARM architecture and supports the Ubuntu system. It supports custom kernels and software installation and uninstallation via the "apt" software.

[0180] It can run Python 3.7 and supports the two mainstream neural network frameworks, Tensorflow and PyTorch. It can run numerous AI models based on these two frameworks. Currently, there are many open-source solutions for Chinese character recognition in the PyTorch software ecosystem. This product has sufficient CPU and storage space to run BERT and ENNIE, two neural network models with good Chinese character recognition performance.

[0181] II. Reviewing historical queries

[0182] The security box has built-in storage and supports TF card expansion. It supports a MySQL database; information reviewed by the box is added to a whitelist. The whitelist is stored in the box's internal database. The MySQL database interface is user-friendly, offering query and write functions. Third-party software is also available to log in to the box's database on a Windows computer and view relevant data through a UI.

[0183] III. Supports online and offline modes

[0184] In online mode, the review function is implemented on an all-in-one server within the local area network. This server uses an x86 architecture and can run industry-leading AI models. Furthermore, there are abundant network resources for neural network algorithms based on the x86 platform, and many universities and research institutions conduct research on it, making it relatively easy to find solutions.

[0185] When the device cannot establish a connection with the all-in-one server on the local area network, it automatically operates in offline review mode. The model on the device may not have a higher recognition rate than the model on the all-in-one server, and the review process may take longer. However, the offline review mode also uses a local DNN model, and after collecting on-site datasets and training the model, the recognition rate can be greater than 80%.

[0186] Remote debugging and maintenance

[0187] I. Upload of running status

[0188] The devices periodically upload their system status to the all-in-one server. Administrators can then monitor the status of each device through the server.

[0189] II. Remote Login Interface

[0190] Currently, remote login uses SSH. With SSH, you can operate devices via command line and transfer files using the SCP protocol.

[0191] III. Remote Control Commands

[0192] Once the device and the all-in-one server are connected, the device operates in online mode. Administrators can perform operations such as whitelist synchronization, DNN model updates, security policy synchronization, and software upgrades via the MQTT protocol.

[0193] Stability issues

[0194] I. Temperature Range

[0195] This product has an industrial-grade temperature range. All electronic components within the board are selected for their wide industrial temperature range and sourced from compliant suppliers. The operating temperature range is 25°C to 75°C, meeting the needs of most indoor and outdoor information board text verification applications in my country. The product has undergone high-temperature and low-temperature testing using compliant testing instruments, demonstrating its ability to operate stably within its operating range for extended periods.

[0196] II. Watchdog

[0197] This product has two watchdog times to ensure the device does not crash.

[0198] Firstly, it supports a built-in watchdog timer in the CPU. The CPU uses an embedded ARM chip architecture and has a watchdog timer. When the device operates in harsh environments, such as unstable power supply, high-frequency interference, strong vibration, external impact, or lightning strike, causing the board to crash, the chip has a built-in restart mechanism.

[0199] Meanwhile, on the hardware side, an external watchdog chip is used for stable and reliable operation. When the external watchdog chip detects that a certain pin of the CPU on the board is not generating a stable PWM wave, it determines that the CPU has crashed. It then drives the CPU's reset signal to reset the board.

[0200] Installation issues

[0201] I. Dimensions

[0202] Currently, information boards are characterized by large outdoor screens with relatively large pixel spacing, resulting in large font sizes. They also utilize bright LED beads to significantly extend the visible range. As the visible range increases, the size of the LED beads also increases, leading to increased power consumption and a larger required DC switching power supply. Therefore, the back of the LED bead panel on information boards often houses a large power supply unit.

[0203] Information boards typically consist of high-temperature plastic and high-brightness LEDs on the front, while the back casing completely encloses the device, leading out communication and power cables. Disassembling the information board casing reveals the LED driver control board and switching power supply inside.

[0204] The security box of this invention may be slightly larger than the LED driver control board, but its size is still moderate compared to the information board, allowing it to be installed inside the information board along with the control board. Currently, the bare circuit board size of the security box can be made comparable to that of the control board, facilitating its embedding within the information board's casing.

[0205] II. Power Supply

[0206] This product also uses a wide-temperature power input and consumes no more than 50W. Through evaluation or by upgrading the power module, the power supply for this box can be provided by the switching power supply within the information board, eliminating the need for an additional power module.

[0207] III. Information Publishing Interface

[0208] Reference Figure 2 The security box features dual network ports and dual serial ports, allowing it to be connected to the intelligence dissemination system regardless of whether the intelligence board uses a serial or network port. It acts as a "middleman," performing authentication and verification functions. Therefore, the intelligence board still has two cables: a power cable and a communication cable, for easy installation.

[0209] The intelligence board security box is a small host based on the ARM architecture that can run a customized version of Ubuntu. It has the advantages of small size, low power consumption, matching metal casing, easy installation, computing power, and the ability to run AI models.

[0210] The security box has a metal casing, and now ARM-based embedded boards can be made smaller and consume less power than traditional x86-based boards.

[0211] Cybersecurity issues

[0212] I. Identity Verification

[0213] The communication between the device and the all-in-one server uses HTTP and MQTT protocols. During HTTP communication, each packet carries a unique device token. Similarly, MQTT communication with the all-in-one server uses a username and password, allowing administrators to monitor the data and command flow within the system.

[0214] II. Access Control

[0215] Currently, the default remote management method for users to log in to the device is SSH. While basic, it's simple. The Ubuntu operating system for embedded ARM devices comes with SSH software pre-installed. Users can modify the username and password for login. It's recommended to use a password of at least 8 characters, using both uppercase and lowercase letters and numbers, and even including English symbols to increase the difficulty of brute-force attacks.

[0216] III. Security Audit

[0217] The device uses the Ubuntu system, which can support security auditing functions by installing software. This allows the system to store historical data such as user login records, usage logs, and commands entered in the command line, which can then be accessed by administrators.

[0218] The implementation principle of the highway information board content security review of the present invention will be described in detail below with reference to the accompanying drawings and specific embodiments. This description should not be construed as a limitation of the present invention.

[0219] This invention adds a security box to each information board without altering the existing system's wiring. The system block diagram is as follows: Figure 3 As shown in the diagram, the system includes a host computer, router, all-in-one server, information board, and information board security box. Network cables and power cables are omitted from the system block diagram. Arrows indicate data flow.

[0220] There are various manufacturers of information boards, but they generally communicate with the host computer via serial port or Ethernet port. Their features include a large LED dot matrix screen, a built-in power conversion module, and a control board. They can display information published by the host computer on the screen.

[0221] The host computer is generally a Windows operating system. The software provided by information display board manufacturers usually runs on Windows. Therefore, a host computer will have different software installed to be compatible with different manufacturers' information display boards. However, they all communicate via serial port or Ethernet, according to the communication protocols of different manufacturers' information display boards, to send published information or control commands to the information display board.

[0222] The security box is an embedded board based on a quad-core ARM CPU, running the Linux operating system. Its moderate size allows it to be installed inside the information board enclosure or the rear control cabinet.

[0223] In this system, the main functions of the all-in-one server are to provide login authentication services for the security boxes, provide high-precision text review services, receive alarm information from the boxes, provide remote whitelist update services for the boxes, provide security policy update services, provide remote DNN model update services, and provide remote update services for the box-related software.

[0224] In addition to the modules mentioned above, there is also a router. The router provides Ethernet data exchange services to the aforementioned devices.

[0225] Hardware design of embedded ARM boards

[0226] The hardware design of this invention adopts a development approach of purchasing a core board and developing a custom baseboard. The core board module manufacturer provides the corresponding Linux SDK, which is then used for secondary development to match the baseboard hardware. This is a development method adapted to the ARM chip development ecosystem: chip manufacturers provide chips and their SDKs, module manufacturers provide chip-based modules and their SDKs, and product developers provide consumers with products that meet their needs. Core Board

[0227] The processing chip uses a domestically produced quad-core CPU based on the ARM core. The CPU currently used is a domestically produced chip, which ensures both domestic support and a relatively stable supply. The CPU frequency is 1.5GHz, guaranteeing the model inference speed.

[0228] The memory is LPDDR4, at least 2GB, to ensure that it can load commonly used Chinese character recognition models such as BERT or ERNIE and perform inference calculations.

[0229] The system has at least 8GB of storage to hold a trimmed-down Linux operating system and program files written for information board review applications. Additionally, the baseboard has a built-in TF card slot, allowing users to insert and reboot the board, which will automatically mount the TF card to provide extra storage space. This provides a basic guarantee for data caching and viewing historical operational data.

[0230] It has a USB interface, which is provided for data transfer via USB flash drive in offline scenarios to prevent the spread of internet viruses.

[0231] A reset button is provided, and the reset signal can be routed outside the information board when necessary, reducing the number of times people need to climb the information board gantry.

[0232] It includes interfaces for a 4G module, 4G antenna, and SIM card slot. Providing this wireless communication interface is one effective solution to reduce network cabling complexity for future upgrades and modifications.

[0233] The indicator lights include communication indicator lights, power indicator lights, and operating status indicator lights. The main function of these indicator lights is to help on-site inspectors observe the operating status of the equipment. Using indicator lights also facilitates troubleshooting.

[0234] The core board as a whole can achieve industrial-grade wide temperature range, that is, the operating temperature is 25 degrees Celsius to 75 degrees Celsius.

[0235] Base plate design

[0236] The baseboard design process mainly involves electronic engineers designing schematics, designing PCBs, prototyping PCBs, soldering prototypes, debugging hardware functions, debugging software functions, and conducting stability tests.

[0237] The baseboard schematic can be referenced from the reference schematic provided by the module manufacturer. This avoids chip compatibility issues. The selected core board has dual Ethernet ports: 100M Ethernet and 1000M Ethernet. When designing the network ports on the baseboard, simply use the chips selected from the reference schematic. Since the provided SDK is already compatible with the relevant network ports, any network port failures are due to hardware issues.

[0238] The current scenario requires dual serial ports. If the core board doesn't have enough serial ports—for example, only one debug serial port plus one extra communication serial port—it needs to be expanded using a USB-to-serial chip. The domestically produced CH340 chip can be used. With this chip, during kernel adaptation, you only need to compile the relevant driver into the kernel and then recompile the kernel. This will add a " / dev / ttyUSB*" USB-to-serial device, and its usage is the same as the native serial port " / dev / ttyS*".

[0239] The TF card and 4G communication module can be found in the reference baseboard schematic diagram.

[0240] As for the PCB design, the most important thing is to adapt it to the casing. It may not be compatible with the screw holes of different information boards, but it can be designed as a metal casing first. The advantages of a metal casing are that it is rigid, pressure-resistant, and has good heat dissipation.

[0241] To adapt to various temperature scenarios in China, the baseboard design needs to consider a wide operating temperature range. The module adopts an industrial-grade wide-temperature range. To achieve industrial-grade temperature specifications, all chips and electronic components on the module must meet industrial-grade wide-temperature requirements. Furthermore, after undergoing high and low temperature testing by the module manufacturer, the module itself can be labeled as an industrial-grade module for sale. The self-developed baseboard for this product must also ensure that the minimum operating temperature of electronic components and related chips is less than 25 degrees Celsius and the maximum operating temperature is greater than 75 degrees Celsius, guaranteeing that the overall operating temperature of the device is also between 25 and 75 degrees Celsius.

[0242] Software design:

[0243] Main program logic

[0244] The main program logic flow is as follows Figure 8 As shown, the main program primarily includes several parts: configuring program parameters via the TF card, reading parameters, and initializing various sub-processes. Configurable parameters include the information board communication interface, the host computer communication interface, the HTTP server address and port, the MQTT server address and parameters, the box's working mode, the device serial number (SN), and the account and password.

[0245] The communication interface of the information board can be configured as either a network port or a serial port. The network port configuration parameters mainly include the IP address, port number, and whether the corresponding network port on the board is "eth0" or "eth1". The serial port configuration parameters mainly include the serial port name, baud rate, data bits, stop bits, and parity bits.

[0246] The configurable parameters of the host computer communication interface are similar to those of the information board.

[0247] The information board security box can be configured to operate in two modes: transparent transmission mode and review mode.

[0248] The HTTP server address and port are mainly used for HTTP data interaction with the all-in-one machine server.

[0249] The MQTT server address and parameters are mainly used to receive whitelist update commands, DNN model update commands, security policy update commands, and program update commands from the integrated machine server.

[0250] The device serial number, account, and password of the box are used for authentication when connecting to the server.

[0251] HTTP connection sub-thread

[0252] The HTTP connection sub-thread process is as follows: Figure 9 As shown, the data interaction between the device and the server is mainly HTTP communication. Currently, the HTTP services supported by the all-in-one server include login authentication, review service call, alarm reporting, whitelist update, security policy update, DNN model update, and program upgrade.

[0253] However, calling the API requires the device to first establish a connection with the HTTP server. Regularly checking the HTTP server's connection status helps the program determine whether to use online or offline review mode.

[0254] Information board communication sub-thread

[0255] Information board communication sub-thread such as Figure 10 As shown, if the information board uses network interface communication, it is generally a TCP server. The security box needs to establish a TCP client connection with the information board. Therefore, it is necessary to periodically check whether the connection between the two sides is normal.

[0256] MQTT child thread

[0257] MQTT child thread, such as Figure 11 As shown, an MQTT server runs on the all-in-one machine server, and the devices establish connections with the MQTT server as MQTT clients. The topic sent by the server to the devices is "dr / request". The topic of the devices' replies to the server is "dr / response". The MQTT server also uses username and password authentication, providing a certain level of security. Each device subscribed to the topic can receive the data packets sent by the server, facilitating batch updates. The sent command data packets contain the device's serial number (SN) key, allowing devices to check whether they belong to the device executing the command data packet.

[0258] The remote commands sent from the server to the device via MQTT mainly include whitelist synchronization, DNN parameter and model updates, security policy push, and upgrade push. These are primarily used for remote updates.

[0259] Host computer communication sub-thread

[0260] The host computer communication sub-thread process is as follows: Figure 12As shown, the host computer communication sub-thread and the intelligence board communication sub-thread have common parameters. During the operation of this program, it will call the socket established with the intelligence board to transmit the data sent by the host computer through the socket or send it to the intelligence board after processing.

[0261] All data packets sent from the host computer are filtered and divided into operation frames and release frames. This program, based on a pre-written data parsing program, determines if a data packet is an operation frame and then transmits it to the information board without processing. If the sent data packet is determined to be a release frame, the release content is parsed, and the program proceeds to the review subroutine. The review subroutine flow is as follows: Figure 13 As shown, in the review subroutine, if it is in pass-through mode, the published content will be pass-through to the information board.

[0262] However, the review process is divided into offline and online modes. In offline mode, the review procedure is executed by the device. In online mode, the review procedure is executed by the all-in-one server. The unified review process involves determining whether the published content exists in the whitelist; if not, a DNN model is used for text review.

[0263] Based on the output of the DNN model's text review, the results are categorized into three types: content approved, content alert, and content error. The device outputs alert content according to the security policy. For example, when the "content error" security policy is set to "shut down," if the published content contains errors, the security box will send a "shut down" command to the information board, controlling the information board to "shut down."

[0264] Strengthen security protection

[0265] This hardware device runs a Linux operating system and comes with the "apt" application management software. Users can enhance security by installing open-source security auditing software.

[0266] In addition, HTTP and MQTT communication are configured with authentication methods and include the device's unique serial number, which allows administrators to monitor the communication data flow and service status.

[0267] Trimming Linux system images

[0268] By utilizing the Linux SDK provided by the module manufacturer and adding the Ubuntu root filesystem (rootfs), the operating system image required for embedded ARM boards can be generated on an Ubuntu computer. The Linux SDK mainly includes three parts: the bootloader source code for the ARM board, the kernel source code, and the Ubuntu root filesystem (rootfs). Depending on the software used, the kernel can be reconfigured, unused software removed, and a streamlined system image can be recompiled.

[0269] At the same time, the root file system running on the board is Ubuntu, which comes with the apt software management tool. You can install or uninstall software packages as needed, further customize the system, and increase the hardware space and CPU computing space available for necessary business operations.

[0270] In summary, compared with the prior art, the present invention has the following outstanding advantages:

[0271] First, the algorithm is integrated into the hardware. Installing the text review hardware does not affect existing wiring, making it easy to deploy and maintain. The text review system is modular; if text review is not needed, the module can be left uninstalled. If it is needed, the hardware wiring is completed, and the configuration is modified according to the actual deployment, after which the functional modules will operate.

[0272] Secondly, incorporating text review into the traditional information dissemination system can ensure that every publication undergoes review.

[0273] Third, the software uses a DNN model, which has a good recognition rate.

[0274] Fourth, the text review equipment supports a remote maintenance interface. Once installed, subsequent maintenance is simple and can be performed remotely.

[0275] The above is a detailed description of the preferred embodiments of the present invention, but the present invention is not limited to the embodiments described. Those skilled in the art can make various equivalent modifications or substitutions without departing from the spirit of the present invention, and these equivalent modifications or substitutions are all included within the scope defined by the claims of this application.

Claims

1. A highway sign content security inspection system characterized by comprising: The application relates to a data display system, which comprises the following parts: a host computer, which is used for sending data packets to an information board, controlling the operation strategy and / or publishing content of the information board; wherein the data packets comprise operation frames and publishing frames; an all-in-one server, which is used for sending remote instructions to a security box, providing review services for the security box, and receiving alarm feedback from the security box; wherein the remote instructions comprise login authentication service instructions, text review service instructions, white list updating instructions, model parameter updating instructions, security policy updating instructions and program upgrading instructions; the security box, which is used for reviewing and processing the publishing content of the publishing frames sent by the host computer based on preset review standards according to the remote instructions of the all-in-one server; when the review is passed, the publishing content is output to the information board; when the review is not passed, alarm feedback is sent to the all-in-one server according to the review result; wherein the alarm feedback comprises alarm content or error content; the information board, which is used for publishing content display processing according to the data packets of the host computer and the review passing result of the security box; a router, which is used for providing Ethernet data exchange services for the host computer, the all-in-one server, the security box and the information board.

2. The highway sign content security review system of claim 1, wherein, The host computer, the all-in-one server and the information board are connected with the router, the security box is arranged between the information board and the router and is located at the proximal end of the information board; The information boards are arranged in a distributed mode, each information board is connected with the host computer and the all-in-one server through the router to realize Ethernet data exchange services, and each information board is provided with a security box.

3. The highway sign content security review system of claim 1, wherein, The review processing of the publishing content of the publishing frames sent by the host computer based on preset review standards according to the remote instructions of the all-in-one server comprises the following steps: determining the operation mode of the security box according to the remote instructions of the all-in-one server; wherein the operation mode comprises a transparent mode or a review mode; obtaining the publishing content of the publishing frames; when the security box is in the transparent mode, directly outputting the publishing content to the information board; when the security box is in the review mode, reviewing and processing the publishing content.

4. The highway sign content security review system of claim 3, wherein, The review processing of the publishing content comprises the following steps: judging the publishing content according to the white list and the black list; when the judgment result is within the preset white list range, the review is passed; when the judgment result is within the preset black list range, the review is not passed; when the judgment result is not within the white list range and the black list range, the publishing content is subjected to rule review through a preset rule library; when the publishing content meets the positive matching rule, the review is passed; when the publishing content meets the reverse matching rule, the review is not passed; when the publishing content cannot be matched with the rules in the rule library, checking the network connection state between the security box and the all-in-one server; when the network connection state is normal, uploading the publishing content to the all-in-one server for review and receiving the review result sent by the all-in-one server; When the network connection state is abnormal, the publishing content is subjected to a text review by a local deep neural network model.

5. The highway sign content security review system of claim 4, wherein, When the network connection state is normal, the server of the all-in-one machine reviews the publishing content in the following manners: black and white list judgment, rule review by using a preset rule library, text review by a neural network model, and / or manual review.

6. The highway sign content security review system of claim 4, wherein, The security box is further used for: When the publishing content passes the review, updating the white list range according to the publishing content; When the publishing content fails the review, updating the black list range according to the publishing content; When the number of strings in the white list and / or the black list is greater than a preset number threshold, using an LFU algorithm to eliminate strings with a usage frequency lower than a preset frequency value.

7. The highway sign content security review system according to any one of claims 1 to 6, wherein When the review fails, sending an alarm feedback to the server of the all-in-one machine according to the review result; wherein the alarm feedback includes alarm content or error content, and specifically: When the review fails, if the review result is content warning, feeding back the alarm content to the server of the all-in-one machine according to the security policy, and if the review result is content error, feeding back the error content to the server of the all-in-one machine according to the security policy; and taking corresponding security actions, wherein the security actions include: intercepting the publishing content, outputting preset display information to the information board, sending a shutdown instruction to the information board, and / or performing a power-off action on the information board.

8. An implementation method of a highway signboard content security review system, characterized by, The method comprises the following steps: sending a data packet to the information board by the host computer to control the operation strategy and / or the publishing content of the information board; wherein the data packet includes an operation frame and a publishing frame; sending a remote instruction to the security box by the server of the all-in-one machine to provide review services for the security box and receive alarm feedback from the security box; wherein the remote instruction includes a login authentication service instruction, a text review service instruction, a white list update instruction, a model parameter update instruction, a security policy update instruction, and a program upgrade instruction; reviewing and processing the publishing content of the publishing frame sent by the host computer based on a preset review standard by the security box according to the remote instruction of the server of the all-in-one machine; when the review passes, outputting the publishing content to the information board, and when the review fails, sending an alarm feedback to the server of the all-in-one machine according to the review result; wherein the alarm feedback includes alarm content or error content; displaying and processing the publishing content by the information board according to the data packet of the host computer and the review pass result of the security box; The host computer provides Ethernet data exchange services for the host computer, the server of the all-in-one machine, the security box, and the information board through a router.

9. The method of claim 8, wherein the method further comprises: determining whether the content of the message is safe for the motorway sign; and if the content is not safe, then modifying the content of the message to make it safe for the motorway sign. The communication sub-thread of the host computer comprises the following steps: performing data analysis on the data packet; when the data packet is an operation frame, directly transmitting the operation frame to the information board; when the data packet is a publishing frame, performing content analysis on the publishing frame to obtain the publishing content, and sending the publishing content to the security box.

10. The method of claim 8, wherein the method further comprises: determining whether the content of the message is safe for the motorway sign; and if the content is not safe, then modifying the content of the message to make it safe for the motorway sign. The reviewing and processing of the publishing content of the publishing frame sent by the host computer based on a preset review standard by the security box according to the remote instruction of the server of the all-in-one machine comprises: According to a remote instruction of an all-in-one server, a running mode of the security box is determined; wherein the running mode comprises a transparent mode or an examination mode; Obtaining a publishing content of a publishing frame; When the security box is in the transparent mode, the publishing content is directly output to an intelligence board; When the security box is in the examination mode, the publishing content is subjected to examination processing; The examination processing of the publishing content comprises the following steps: The publishing content is subjected to a judgment of a white list and a black list; When the judgment result is within a preset white list range, it is determined that the examination is passed; When the judgment result is within a preset black list range, it is determined that the examination is failed; When the judgment result is not within the white list and the black list range, the publishing content is subjected to rule examination through a preset rule base; When the publishing content meets a positive matching rule, it is determined that the examination is passed; When the publishing content meets a negative matching rule, it is determined that the examination is failed; When the publishing content cannot be matched with a rule in the rule base, a network connection state between the security box and the all-in-one server is checked; When the network connection state is normal, the publishing content is uploaded to the all-in-one server for examination, and an examination result issued by the all-in-one server is received; When the network connection state is abnormal, the publishing content is subjected to text examination through a local deep neural network model.

Images