One-way information security transmission system and method based on physical isolation and image transmission technology

Abstract

The invention discloses a one-way information security transmission system and method based on physical isolation and image transmission technologies, and aims to solve the information transmission security problem caused by the fact that a traditional security isolation device is attacked by hackers due to communication strategy configuration errors or existence of software and hardware backdoors. According to the invention, by disconnecting the physical connection between the production control region and the management information region, the one-way isolated transmission of information is realized by using the image transmission and comparison technology; the system comprises a production control region communication device, a special display, a first information capturing camera, a second information capturing camera and a management information region communication device, image data on the special display is transmitted to the management information large area through the first information capturing camera, and real-time monitoring and data comparison are performed by the second information capturing camera, so that the safety and reliability of information transmission are ensured; according to the method, the network security threat to equipment in a production control region is eliminated from the source, the overall security protection level of a power system is improved, and the application range is wide.

Description

Technical Field

[0001] The present invention relates to the technical field of power system network security protection, and in particular to a one-way information security transmission system and method based on physical isolation and image transmission technology. Background Art

[0002] In the field of power system network security protection, with the rapid development of information technology, the requirements for power system information security are increasing. The existing power system network is usually divided into a production control area and a management information area. The information transmission between the two areas must meet the strict security requirements of one-way isolation. To achieve this goal, a safety isolation device is usually used as an information transmission intermediary between the two areas. The device is configured with a communication strategy to ensure the network security of information transmission.

[0003] The core architecture and basic principles of existing technologies: As a key information security device, the safety isolation device is deployed between the production control area and the management information area to achieve one-way data transmission and isolation. Its basic principle is to disconnect the direct connection between the two areas by physical or logical means, and use specific communication protocols and strategies to allow one-way transmission of necessary data information from the production control area to the management information area.

[0004] Working Mode: In the prior art, the data information generated by the equipment in the production control area is first sent to the safety isolation device. The safety isolation device performs necessary processing (such as encryption, formatting, etc.) on the data according to the preset communication strategy, and then forwards it to the management information area. After the data received by the management information area is parsed, it is provided for monitoring, analysis or further processing by the management personnel. During the whole process, the data flow is one-way and is strictly controlled by the safety isolation device.

[0005] Defects and shortcomings of existing technology: Although the existing technology has met the requirements of power system network security protection to a certain extent, there are still obvious defects and shortcomings. First, when the communication strategy on the safety isolation device is configured incorrectly, it may cause information transmission to violate the principle of one-way isolation, thereby causing security risks. Secondly, if the safety isolation device itself has software and hardware backdoors or vulnerabilities and is controlled by hackers, it may cause isolation failure and fail to meet the requirements of data transmission and network security. These problems seriously threaten the stable operation and information security of the power system.

[0006] In summary, although the existing technology has solved the problem of power system network security protection to a certain extent, it still has many shortcomings and potential risks. Therefore, it is necessary to develop a safer and more reliable information transmission system to completely solve these problems. Summary of the invention

[0007] The technical problem to be solved by the present invention is to provide a one-way information security transmission system and method based on physical isolation and image transmission technology to solve the security problem existing in the information transmission process between the production control area and the management information area in the field of power system network security protection.

[0008] In order to solve the above technical problems, the technical solution adopted by the present invention is: a one-way information security transmission system based on physical isolation and image transmission technology, comprising: Production control area communication device: used to collect information from production control area equipment and convert the information into image data with a unique frame time stamp; Special display: connected to the production control area communication device, used to display the image data sent by the production control area communication device frame by frame; The first information capture camera is installed at a position capable of capturing the screen of the dedicated display, connected to the management information large area communication device, and used to transmit the captured screen of the dedicated display to the management information large area communication device; Management information area communication device: used to receive the picture transmitted by the first information capture camera, identify and parse the data, and then send it to the management information area; The second information capture camera is installed in parallel with the first information capture camera, both are aimed at the dedicated display, and are connected to the production control area communication device, and are used to transmit the captured dedicated display screen back to the production control area communication device for real-time monitoring and data comparison; Cable: used to connect the above devices to achieve signal transmission.

[0009] In a preferred embodiment, the production control area communication device also includes a data comparison module, which is used to compare the data after identifying and parsing the picture information returned by the second information capture camera with the information of the same frame time stamp previously sent to the first information capture camera, and issue an alarm signal if inconsistency is found.

[0010] In a preferred solution, the image data with a unique frame time stamp is generated by converting the information of the production control area equipment into a visual image and attaching a time stamp.

[0011] In a preferred solution, the installation position, angle and focal length of the first information capturing camera and the second information capturing camera are calibrated to ensure that all the image contents on the dedicated display can be captured accurately and synchronously.

[0012] In a preferred solution, the transmission system disconnects the direct physical connection between the production control area and the management information area equipment by means of physical isolation, thereby enhancing the network security protection capability.

[0013] In a preferred solution, the management information area communication device also includes a data analysis module and an output interface, the data analysis module is used to analyze the image data transmitted by the first information capture camera to extract original information, and the output interface is used to output the analyzed data to the management information area.

[0014] In a preferred solution, the transmission system further comprises an alarm device, and when the data comparison module of the production control area communication device finds that the data is inconsistent, an audible and visual alarm is issued through the alarm device.

[0015] The method for information security transmission by a one-way information security transmission system based on physical isolation and image transmission technology is to use any one of the above-mentioned one-way information security transmission systems based on physical isolation and image transmission technology to perform information transmission and verification, and the method comprises the following steps: Step 1: Information collection and sending; The production control area communication device collects the information of the production control area equipment regularly or in real time, processes and marks the frame time, and then sends it to the dedicated display for display in the form of images; Step 2: Image capture and transmission; Step 3: Information analysis and verification.

[0016] In the preferred solution, the specific steps of Step 2 image capture and transmission are as follows: Step 2.1: The first information capture camera captures the image on the dedicated display and transmits it to the management information regional communication device in real time; Step 2.2: The second information capture camera simultaneously captures the same image and transmits it back to the production control area communication device.

[0017] In the preferred solution, the specific steps of Step 3 information analysis and verification are as follows: Step 3.1: The management information area communication device receives the image of the first information capture camera, parses the original data through image recognition technology, and completes the one-way information transmission from the production control area to the management information area; Step 3.2: The production control area communication device receives the image from the second information capture camera, analyzes it in the same way, and compares the analyzed data with the information of the same frame time stamp previously sent to the first information capture camera; if the comparison results are consistent, it indicates that the information transmission is correct; if they are inconsistent, an alarm is immediately issued to indicate that there may be an abnormality in the system.

[0018] The one-way information security transmission system based on physical isolation and image transmission technology provided by the present invention has the following beneficial effects: 1. The present invention solves the security problem existing in the information transmission process between the production control area and the management information area in the field of power system network security protection; 2. The technical solution of the present invention completely disconnects the direct connection between the production control area and the management information area equipment by means of physical isolation, thereby effectively avoiding potential attacks on the production control area equipment by hackers through software and hardware backdoors; 3. The present invention ensures the accuracy and reliability of information transmission through the dual verification mechanism of the first information capture camera and the second information capture camera, providing a more solid guarantee for the security protection of the power system network; 4. The present invention disconnects the physical connection between the production control area and the management information area equipment, and uses image transmission and image recognition technology to achieve one-way transmission of information. This physical isolation implementation method is relatively rare in the prior art and has significant novelty; 5. Two parallel information capture cameras (a first information capture camera and a second information capture camera) are arranged in the system of the present invention, wherein the first information capture camera is used to transmit the captured dedicated display screen to the management information area, and the second information capture camera is used to transmit the screen back to the production control area for real-time monitoring and comparison. This double verification mechanism ensures the accuracy and reliability of information transmission and has significant innovation; 6. The frame time stamp comparison technology of the present invention is that the production control area communication device will mark each frame of data with a unique frame time stamp when sending information, and compare it after receiving the picture information returned by the second information capture camera. This frame time stamp comparison technology can timely discover and correct errors in the transmission process, thereby improving the security and stability of the system; 7. The system of the present invention is also highly flexible and scalable, and can adjust the camera configuration and transmission parameters according to actual needs. It is applicable to a variety of complex network environments and provides a strong guarantee for information security in the fields of power and other key infrastructure; 8. The present invention also integrates advanced encryption and decryption modules to ensure the security of data transmission and effectively resist external threats; at the same time, the system supports remote monitoring and intelligent diagnosis, and operation and maintenance personnel can respond and solve problems quickly, further improving operation and maintenance efficiency and user experience. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] The present invention will be further described below in conjunction with the accompanying drawings and implementation examples: Figure 1 The figure is a working principle diagram of the transmission method of the present invention. DETAILED DESCRIPTION

[0020] The technical solution of the present invention is further described below in conjunction with the accompanying drawings and embodiments: Example 1 like Figure 1 As shown, the one-way information security transmission system based on physical isolation and image transmission technology includes: Production control area communication device: used to collect information from production control area equipment and convert the information into image data with a unique frame time stamp; Special display: connected to the production control area communication device, used to display the image data sent by the production control area communication device frame by frame; The first information capture camera is installed at a position capable of capturing the screen of the dedicated display, connected to the management information large area communication device, and used to transmit the captured screen of the dedicated display to the management information large area communication device; Management information area communication device: used to receive the picture transmitted by the first information capture camera, identify and parse the data, and then send it to the management information area; The second information capture camera is installed in parallel with the first information capture camera, both are aimed at the dedicated display, and are connected to the production control area communication device, and are used to transmit the captured dedicated display screen back to the production control area communication device for real-time monitoring and data comparison; Cable: used to connect the above devices to achieve signal transmission.

[0021] In this embodiment, the production control area communication device also includes a data comparison module, which is used to compare the data after the picture information returned by the second information capture camera is identified and parsed with the information with the same frame time stamp previously sent to the first information capture camera, and an alarm signal is issued if inconsistency is found.

[0022] Furthermore, the image data with a unique frame time stamp is generated by converting the information of the production control area equipment into a visual image and attaching a time stamp.

[0023] Furthermore, the installation position, angle and focal length of the first information capturing camera and the second information capturing camera are calibrated to ensure that all the image contents on the dedicated display can be captured accurately and synchronously.

[0024] Furthermore, the transmission system disconnects the direct physical connection between the production control area and the management information area equipment by means of physical isolation, thereby enhancing the network security protection capability.

[0025] Furthermore, the management information area communication device also includes a data analysis module and an output interface, the data analysis module is used to analyze the image data transmitted by the first information capture camera to extract original information, and the output interface is used to output the analyzed data to the management information area.

[0026] Furthermore, the transmission system also includes an alarm device, and when the data comparison module of the production control area communication device finds that the data is inconsistent, an audible and visual alarm is issued through the alarm device.

[0027] Example 2 In another preferred embodiment, based on the above embodiment 1, Figure 1 As shown, the method for information security transmission by a one-way information security transmission system based on physical isolation and image transmission technology is to use any one of the above-mentioned one-way information security transmission systems based on physical isolation and image transmission technology to perform information transmission and verification, and the method comprises the following steps: Step 1: Information collection and sending; The production control area communication device collects the information of the production control area equipment regularly or in real time, processes and marks the frame time, and then sends it to the dedicated display for display in the form of images; Step 2: Image capture and transmission; Step 3: Information analysis and verification.

[0028] Furthermore, the specific steps of Step 2 image capture and transmission are as follows: Step 2.1: The first information capture camera captures the image on the dedicated display and transmits it to the management information regional communication device in real time; Step 2.2: The second information capture camera simultaneously captures the same image and transmits it back to the production control area communication device.

[0029] Furthermore, the specific steps of the Step 3 information parsing and verification are as follows: Step 3.1: The management information area communication device receives the image of the first information capture camera, parses the original data through image recognition technology, and completes the one-way information transmission from the production control area to the management information area; Step 3.2: The production control area communication device receives the image from the second information capture camera, analyzes it in the same way, and compares the analyzed data with the information of the same frame time stamp previously sent to the first information capture camera; if the comparison results are consistent, it indicates that the information transmission is correct; if they are inconsistent, an alarm is immediately issued to indicate that there may be an abnormality in the system.

[0030] Example 3 In another preferred embodiment, based on the above-mentioned embodiments 1 and 2, the one-way information security transmission system and method based on physical isolation and image transmission technology proposed by the present invention is intended to solve the risk of communication strategy configuration errors and software and hardware backdoors being attacked by hackers in traditional security isolation devices in power system network security protection. The following is a specific implementation method of the present invention: 1. System composition and connection The system of the present invention is mainly composed of the following parts: a production control area communication device, a special display, two information capture cameras (a first information capture camera and a second information capture camera), a management information area communication device, and matching cables connecting these devices.

[0031] Production control area communication device: This device is responsible for collecting information from production control area equipment, processing the collected information, and marking it with a unique frame time stamp. It then converts the processed information into an image data format and sends it to a dedicated display via a cable for display.

[0032] Dedicated display: Based on the image data sent by the production control area communication device, the dedicated display displays this information frame by frame. The design of the display needs to ensure the clarity and stability of the image display so that the camera can capture it accurately.

[0033] The first information capture camera and the second information capture camera: First information capture camera: The installation position is opposite to the dedicated display to ensure that the image on the dedicated display can be fully captured. The first information capture camera is connected to the management information regional communication device through a cable to transmit the captured image to the management information regional communication device in real time.

[0034] Second information capture camera: Installed in parallel with the first information capture camera, also aimed at the dedicated display. The second information capture camera is connected to the production control area communication device through a cable, and transmits the captured image back to the production control area communication device for real-time monitoring and comparison.

[0035] Management information area communication device: receives image data from the first information capture camera, restores the image data to original production control area information through built-in image recognition and analysis algorithms, and sends this information to the management information area.

[0036] 2. Information Transmission and Verification Process 1. Information collection and transmission: The communication device of the production control area collects the information of the equipment in the production control area regularly or in real time, processes it and marks the frame time, and then sends it to the dedicated display for display in the form of an image.

[0037] 2. Image capture and transmission: The first information capture camera captures the image on the dedicated display and transmits it to the management information large area communication device in real time; The second information capture camera simultaneously captures the same image and transmits it back to the production control area communication device.

[0038] 3. Information analysis and verification: The management information area communication device receives the image of the first information capture camera, parses the original data through image recognition technology, and completes the one-way information transmission from the production control area to the management information area.

[0039] The production control area communication device receives the image from the second information capture camera, analyzes it in the same way, and compares the analyzed data with the information of the same frame time stamp previously sent to the first information capture camera. If the comparison results are consistent, it means that the information transmission is correct; if they are inconsistent, an alarm is immediately issued, indicating that there may be an abnormality in the system.

[0040] 3. Analysis of differences in technical features Compared with the prior art, the core difference of the present invention is that it adopts a combination of physical isolation and image transmission, completely disconnecting the direct physical connection between the production control area and the management information area, thereby fundamentally eliminating the risk of hackers attacking through software and hardware backdoors. At the same time, through the setting of the second information capture camera, real-time monitoring and verification of the information transmission process is achieved, further improving the security and reliability of information transmission. The present invention effectively solves the problems existing in traditional safety isolation devices through innovative physical isolation and image transmission technology, and provides a new solution for power system network security protection.

[0041] In the preferred scheme, the production control area communication device also includes a data comparison module, which is used to compare the data after identifying and parsing the picture information returned by the second information capture camera with the information of the same frame time stamp previously sent to the first information capture camera, and if inconsistency is found, an alarm signal is issued; the above settings effectively improve the monitoring accuracy and abnormal response speed of the production process, ensure the accuracy and real-time nature of the production data, and provide a solid technical guarantee for production safety and efficiency.

[0042] In the preferred solution, the image data with a unique frame time stamp is generated by converting the information of the production control area equipment into a visual image and attaching a timestamp; the above settings ensure the accuracy and traceability of the data during transmission; at the same time, the solution also introduces data encryption technology to encrypt the image data, further improving the security of data transmission.

[0043] In the preferred scheme, the installation position, angle and focal length of the first information capture camera and the second information capture camera are calibrated to ensure that all the screen contents on the dedicated display can be captured accurately and synchronously; the above settings also include intelligent image recognition technology, which can analyze the captured images in real time, automatically filter out redundant information, improve the accuracy and efficiency of information extraction, and lay a solid foundation for subsequent data processing and analysis.

[0044] In the preferred solution, the transmission system disconnects the direct physical connection between the production control area and the management information area equipment through physical isolation, thereby enhancing network security protection capabilities; the above settings also introduce advanced encryption technology and access control strategies to ensure the confidentiality, integrity and availability of data during transmission, further strengthening the network security defense line and safeguarding the digital transformation of enterprises.

[0045] In a preferred solution, the management information area communication device also includes a data analysis module and an output interface. The data analysis module is used to analyze the image data transmitted by the first information capture camera to extract the original information, and the output interface is used to output the analyzed data to the management information area. The above settings ensure the efficient flow of data from capture to processing, realize the seamless connection between real-time monitoring and data analysis, provide timely and accurate data support for the management information area, and further improve management efficiency and decision-making quality.

[0046] In the preferred solution, the transmission system also includes an alarm device. When the data comparison module of the production control area communication device finds that the data is inconsistent, an audible and visual alarm is issued through the alarm device. The above settings can effectively improve the monitoring and emergency response capabilities of the production process, ensure timely discovery and processing of data anomalies, and ensure production safety and efficiency. At the same time, the solution also takes into account the data backup and recovery mechanism to ensure the security and integrity of the data.

[0047] In summary, the present invention provides a one-way information security transmission system and method based on physical isolation and image transmission technology, which solves the security problems existing in the information transmission process between the production control area and the management information area in the field of power system network security protection in the prior art; compared with the prior art, the core difference of the present invention lies in the use of a combination of physical isolation and image transmission to completely disconnect the direct physical connection between the production control area and the management information area, thereby fundamentally eliminating the risk of hacker attacks through software and hardware backdoors; at the same time, through the setting of a second information capture camera, real-time monitoring and verification of the information transmission process is achieved, further improving the security and reliability of information transmission; the solution of the present invention not only effectively solves the problems of communication strategy configuration errors or software and hardware backdoors being attacked by hackers that may exist in traditional safety isolation devices, but also ensures information transmission through physical isolation and dual camera verification mechanisms. The security and reliability of this technical solution are significantly creative in the field of power system network security protection; the implementation of the present invention can fundamentally eliminate the network security threat to the production control area equipment and improve the security protection level of the entire power system; at the same time, through the real-time monitoring and comparison mechanism, the system can timely discover and correct errors in the transmission process to ensure the accuracy and integrity of the information. This technical effect is difficult to achieve in the prior art, which reflects the creativity of the present invention; although the present invention is mainly used in the field of power system network security protection, its technical solution and ideas can also be extended to other fields that require high-security information transmission, such as finance, military, etc.; the proposal of the present invention marks a major breakthrough in network security protection technology, and provides strong support for building a more secure and reliable information transmission environment. It is expected to play an important role in more key areas in the future and promote the continuous progress and innovation of information security protection technology.

Claims

1. A one-way information security transmission system based on physical isolation and image transmission technology, characterized in that: include: Production control area communication device: used to collect information from production control area equipment and convert the information into image data with a unique frame time stamp; Special display: connected to the production control area communication device, used to display the image data sent by the production control area communication device frame by frame; The first information capture camera is installed at a position capable of capturing the screen of the dedicated display, connected to the management information large area communication device, and used to transmit the captured screen of the dedicated display to the management information large area communication device; Management information area communication device: used to receive the picture transmitted by the first information capture camera, identify and parse the data, and then send it to the management information area; The second information capture camera is installed in parallel with the first information capture camera, both are aimed at the dedicated display, and are connected to the production control area communication device, and are used to transmit the captured dedicated display screen back to the production control area communication device for real-time monitoring and data comparison; Cable: used to connect the above devices to achieve signal transmission.

2. According to claim 1, the one-way information security transmission system based on physical isolation and image transmission technology is characterized in that: The production control area communication device also includes a data comparison module, which is used to compare the data after the picture information returned by the second information capture camera is recognized and parsed with the information of the same frame time stamp previously sent to the first information capture camera, and an alarm signal is issued if inconsistency is found.

3. The one-way information security transmission system based on physical isolation and image transmission technology according to claim 2 is characterized in that: The image data with a unique frame time stamp is generated by converting information of equipment in a production control area into a visual image and attaching a time stamp.

4. The one-way information security transmission system based on physical isolation and image transmission technology according to claim 3 is characterized in that: The installation positions, angles and focal lengths of the first information capturing camera and the second information capturing camera are calibrated to ensure that all image contents on the dedicated display can be captured accurately and synchronously.

5. The one-way information security transmission system based on physical isolation and image transmission technology according to claim 4 is characterized in that: The transmission system disconnects the direct physical connection between the production control area and the management information area equipment by means of physical isolation, thereby enhancing the network security protection capability.

6. The one-way information security transmission system based on physical isolation and image transmission technology according to claim 5 is characterized in that: The management information large area communication device also includes a data analysis module and an output interface. The data analysis module is used to analyze the image data transmitted by the first information capture camera to extract original information. The output interface is used to output the analyzed data to the management information large area.

7. The one-way information security transmission system based on physical isolation and image transmission technology according to claim 6 is characterized in that: The transmission system also includes an alarm device, and when the data comparison module of the production control area communication device finds that the data is inconsistent, an audible and visual alarm is issued through the alarm device.

8. A method for information security transmission using a one-way information security transmission system based on physical isolation and image transmission technology, comprising: using the one-way information security transmission system based on physical isolation and image transmission technology as claimed in any one of claims 1 to 7 to perform information transmission and verification, characterized in that: The method comprises the following steps: Step 1: Information collection and sending; The production control area communication device collects the information of the production control area equipment regularly or in real time, processes and marks the frame time, and then sends it to the dedicated display for display in the form of images; Step 2: Image capture and transmission; Step 3: Information analysis and verification.

9. The one-way information security transmission method based on physical isolation and image transmission technology according to claim 8 is characterized in that: The specific steps of Step 2 image capture and transmission are as follows: Step 2.1: The first information capture camera captures the image on the dedicated display and transmits it to the management information regional communication device in real time; Step 2.2: The second information capture camera simultaneously captures the same image and transmits it back to the production control area communication device.

10. The one-way information security transmission method based on physical isolation and image transmission technology according to claim 8 is characterized in that: The specific steps of Step 3 information parsing and verification are as follows: Step 3.1: The management information area communication device receives the image of the first information capture camera, parses the original data through image recognition technology, and completes the one-way information transmission from the production control area to the management information area; Step 3.2: The production control area communication device receives the image from the second information capture camera, analyzes it in the same way, and compares the analyzed data with the information of the same frame time stamp previously sent to the first information capture camera; if the comparison results are consistent, it indicates that the information transmission is correct; if they are inconsistent, an alarm is immediately issued to indicate that there may be an abnormality in the system.

Images