DTMB convergence media information screen data transmission gatekeeper system and use method thereof

Through the DTMB integrated media information screen data transmission gate system, one-way serial port encryption transmission technology and combined encryption algorithms are used to solve the problems of security and efficiency in the data transmission process and achieve highly secure and efficient data transmission.

CN119341798APending Publication Date: 2025-01-21XIAMEN WENGUANG MEDIA TECH CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202411424828.X
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-10-12
Publication Date
2025-01-21

AI Technical Summary

Technical Problem

The existing technology is difficult to achieve efficient transmission while ensuring data security. The network security of the integrated media information screen cannot be effectively guaranteed when facing the external network, data is susceptible to tampering or leaking, and integrity is difficult to guarantee.

Method used

The DTMB integrated media information screen data transmission gate system is adopted, and through one-way serial port encrypted transmission technology, combined encryption algorithms (such as RSA, AES, TEA) and protocols are used to ensure high security and efficient transmission of data during the transmission process.

Benefits of technology

It effectively prevents data from being tampered with or leaked during transmission, ensures the security and accurate transmission of data on the integrated media information screen, and achieves a high degree of data reliability and stability.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119341798A_ABST
    Figure CN119341798A_ABST
Patent Text Reader

Abstract

The invention discloses a DTMB convergence media information screen data transmission gatekeeper system and a use method thereof. The system comprises a sending end and a receiving end, the sending end sends encrypted data to the receiving end through a serial port sending module, and the receiving end receives the encrypted data through a serial port receiving module and carries out data decryption processing; wherein the sending end and the receiving end are connected in a one-way serial port transmission mode; and the encrypted data is encrypted and decrypted by adopting at least one or more of RSA, AES and TEA. According to the invention, the data can be efficiently transmitted while the security is ensured, the integrity of the data is ensured, the problem that the secure transmission of the data needs to be ensured when the data needs to be acquired from an external network is solved, and the method has high reliability and stability so as to cope with various emergencies.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the technical field of data transmission, and in particular to a DTMB integrated media information screen data transmission gateway system and a method for using the same. Background Art

[0002] In the process of content data transmission between the converged media information screen and the external network, data security and efficient transmission are crucial. However, the current traditional data transmission methods often find it difficult to achieve efficient transmission while ensuring data security. The converged media information screen directly faces the external network to provide interface services and obtain information. However, this method makes the converged media terminal completely exposed to the external network environment, resulting in the inability to effectively guarantee network security. In the direct data transmission process, there are many risks. Data is extremely susceptible to malicious tampering or accidental leakage, and its integrity is difficult to be effectively guaranteed. This may not only lead to the loss or error of important information, but also may cause a series of serious security issues, such as the system being attacked by hackers and Trojans, and the content published by the multimedia information screen being tampered with. These problems bring great obstacles and potential threats to the normal dissemination of converged media information and the development of related businesses. Summary of the invention

[0003] In view of this, the purpose of the present invention is to propose a DTMB integrated media information screen data transmission network gateway system, which can realize efficient data transmission while ensuring security and data integrity, solve the problem of needing to obtain data from the external network and ensuring the safe transmission of data, and has high reliability and stability to cope with various emergencies.

[0004] According to one aspect of the present invention, a DTMB integrated media information screen data transmission network gateway system is provided, including a sending end and a receiving end, the sending end sends encrypted data to the receiving end through a serial port sending module, and the receiving end receives the encrypted data through a serial port receiving module and performs data decryption processing; wherein the sending end and the receiving end are connected by a unidirectional serial port transmission mode;

[0005] as well as,

[0006] The encrypted data is encrypted and decrypted using at least one or more of RSA, AES, and TEA.

[0007] In the above technical solution, the DTMB integrated media information screen data transmission network gateway system provided by the solution adopts one-way serial port encryption transmission technology and uses a combination of encryption algorithms and protocols to achieve efficient transmission while ensuring high data security, effectively preventing data from being tampered with or leaked during transmission, and effectively ensuring the data security and accurate transmission of the integrated media information screen. This system adopts the physical isolation advantage of serial port communication: as a physical connection method, the serial port has a smaller exposure surface than the network connection. Coupled with the three hybrid encryption mechanisms of RSA, AES, and TEA, the possibility of data being attacked by network attacks during transmission is further reduced. Even if an attacker attempts to attack the serial port connection, it is difficult to crack the data protected by double encryption, adding multiple guarantees to the system security.

[0008] In some embodiments, the transmitting end further includes a system information synchronization module;

[0009] The system information synchronization module is used to synchronize various business data and configuration information of the internal system.

[0010] In the above technical solution, the system information synchronization module is used to obtain necessary data information from other systems online and provide the data to the DTMB integrated media information screen for display. It is the main data source for the data display area of ​​the DTMB integrated media information screen.

[0011] In some embodiments, the serial port sending module is also specifically used to: set the format and encryption method of the sent data; determine whether the data to be sent meets the set requirements, and send it if it does, otherwise adjust it; monitor the network status in real time during the sending process, and suspend sending and wait for resumption if an abnormality occurs.

[0012] In the above technical solution, by setting the format and encryption method of the sent data, it can be ensured that the data has a unified standard and structure during the transmission process, so that the receiving end can more easily parse and process the data. The receiving end can receive, verify and process the data differently according to different data formats. The advantages of this technical solution are: 1. Improve data quality: Ensure that the data to be sent meets the set requirements, which can reduce subsequent processing problems caused by incorrect or incomplete data formats. This provides a more reliable data foundation for encryption operations, making the encryption process smoother. 2. Enhance security coordination: Combined with subsequent encryption operations, this step further enhances the security of the data. Adjusting the data before sending to ensure that the data meets the encryption requirements can improve the effect and reliability of encryption.

[0013] In some embodiments, the format and encryption method of the sent data are set, specifically:

[0014] Set the format of sent data to JSON format;

[0015] AES is used to encrypt text information to be published on multimedia information screens; TEA is used to encrypt image information to be published on media information screens; AES keys, TEA keys and core data are encrypted using RSA;

[0016] Add a data packet header to the encrypted data and calculate the MD5 checksum of the added data.

[0017] In the above technical solution, the format of the sent data is set to JSON format in order to unify the standard and structure of the transmitted data. The TEA algorithm is used to encrypt the image data of the multimedia information screen, and the AES algorithm is used to encrypt the text data of the business system. In this way, targeted encryption can be performed according to the characteristics and importance of the data, achieving a balance between security and efficiency. Specifically, the text information of the business system often contains important text content, such as announcements, news, instructions, etc., which has a small amount of information and is generally more important. The AES algorithm can be used for encryption and decryption, which requires more system computing resources; and the image data is larger than the text data, and is more suitable for encryption and decryption using the TEA algorithm, which consumes less system computing resources than the AES algorithm.

[0018] Adding and calculating the MD5 checksum can be used to verify the integrity of the data, allowing the receiver to determine whether the data has been tampered with by comparing the MD5 checksum of the received data with the checksum provided by the sender.

[0019] In some embodiments, the serial port receiving module is further specifically used for:

[0020] Preliminarily verify the integrity and accuracy of the received data; determine whether the received data is complete and accurate, if so, store and process it, otherwise discard it and request retransmission;

[0021] Set decryption and decapsulation rules for received data, and perform decryption and decapsulation operations;

[0022] The data of decryption and decapsulation operations are stored in a classified manner.

[0023] In the above technical solution, the integrity and accuracy of the received data are preliminarily verified; it is determined whether the received data is complete and accurate, and if so, it is stored and processed, otherwise it is discarded and requested to be retransmitted, mainly to ensure the reliability and security of the data. Ensuring that the received data is complete and accurate is the basis for ensuring the normal operation of the system. During the data transmission process, data may be lost, damaged or incomplete due to various interferences, network problems or other factors. By preliminarily verifying the integrity and accuracy of the data, these problems can be discovered and handled in a timely manner, avoiding the use of erroneous or incomplete data for subsequent operations, thereby improving the reliability of the system. Setting the decryption and decapsulation rules for the received data can ensure that only legitimate recipients can correctly decrypt and process the data, which can improve the security of the system's transmitted data.

[0024] In some embodiments, the integrity and accuracy of the received data are initially verified; whether the received data is complete and accurate is determined, if so, it is stored and processed, otherwise it is discarded and retransmission is requested, specifically:

[0025] Initialize reception-related settings; start receiving data. During the receiving process, continuously monitor whether it has timed out through a timer; if it has timed out, immediately exit the current receiving loop, record the timeout error log, and perform corresponding error processing; if it has not timed out and data is received, add it to the receiving end's buffer.

[0026] In the buffer, it is continuously determined whether there is a preset end mark; if the end mark is detected, the data length is unpacked according to the data packet format, and compared with the remaining data length in the buffer to check whether it is sufficient;

[0027] If the remaining data length is sufficient, unpack the data content, decode it into a string according to the preset encoding rules, and unpack and verify it;

[0028] Check the end mark again; if all verifications are complete, deserialize the data packet and extract key information from it. If the verification is incomplete, discard the current data packet and record the verification error information.

[0029] In the above technical solution, the integrity and accuracy of data transmission can be guaranteed by checking the data length and end mark and the timeout retransmission mechanism. By checking the data length and end mark, it can be ensured that the received data is complete and there is no missing part. If the data is incomplete, it can be discovered and requested to be retransmitted in time, thereby ensuring the integrity of the data. By decoding the data and verifying it according to the preset encoding rules, it can be detected whether the data has been tampered with or an error has occurred. If the verification is incomplete or times out, it means that there may be a problem with the data, so the data packet is discarded to avoid using the wrong data for subsequent processing.

[0030] In some embodiments, decryption and decapsulation rules for received data are set, and decryption and decapsulation operations are performed, specifically:

[0031] Decrypt the data in the data packet using the rules corresponding to the sender, specifically:

[0032] Decrypt using the RSA algorithm to obtain the AES and / or TEA keys;

[0033] After the key is decrypted, the corresponding data is decrypted using the AES and / or TEA algorithms, and the core business data is decrypted using the RSA algorithm;

[0034] After decryption is completed, the decrypted data is parsed and processed according to the predetermined data format and rules to extract the valid information.

[0035] In the above technical solution, the decryption part has the following special processing:

[0036] 1. Collaborative decryption of multiple algorithms. Use the RSA algorithm to decrypt and obtain AES and / or TEA keys, making full use of the security of the RSA algorithm in asymmetric encryption to ensure the secure transmission and acquisition of keys. This method can prevent the key from being stolen during transmission, because the security of the RSA algorithm is based on mathematical problems and is difficult to crack. 2. Data classification processing. Different algorithms are used for decryption for different types of data. After the key decryption is completed, the AES and / or TEA algorithms are used to decrypt the corresponding data, and the RSA algorithm is used to decrypt the core business data. Based on system operation efficiency considerations, it is impossible for all graphic information and data to be encrypted using the RSA algorithm. The combination of multiple algorithms can provide different levels of security protection according to the characteristics and importance of the data, thereby improving the flexibility of decryption and the efficiency of encryption and decryption.

[0037] According to another aspect of the present invention, a method for using a DTMB converged media information screen data transmission network gateway system is provided, based on the above-mentioned DTMB converged media information screen data transmission network gateway system; the method comprises the following steps:

[0038] Encrypt the data using at least one or more of RSA, AES, and TEA;

[0039] The sender transmits the encrypted data to the receiver through a one-way transmission line;

[0040] The receiving end decrypts the data according to the data type.

[0041] In the above technical scheme, this method can fully consider the characteristics and importance of data while ensuring data security by formulating specific encryption methods for different types of transmission data, thus achieving a balance between security and efficiency, and reducing the resource consumption and cost of the system. Thanks to the one-way serial port transmission characteristics adopted by the system, the security of the system is guaranteed: the one-way flow of data in the network gate system limits potential attack paths. After adopting multiple encryption algorithms, the sender uses RSA to encrypt AES keys, TEA keys and core data of the business system. TEA and AES algorithms encrypt the graphic data of the multimedia information screen, and then transmit it through a one-way serial port. Attackers cannot send malicious data or instructions in reverse through the serial port. Even if they try to crack the encrypted data, they need to break through multiple encryption defense lines of RSA, AES, and TEA at the same time, which greatly reduces the risk of attacks from the receiving end. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0043] Figure 1 It is a connection diagram of an embodiment of a DTMB integrated media information screen data transmission network gateway system of the present invention;

[0044] Figure 2 It is a line sequence diagram of an embodiment of a DTMB integrated media information screen data transmission network gateway system of the present invention;

[0045] Figure 3 It is a flow chart of an embodiment of a method for using a DTMB integrated media information screen data transmission gateway system of the present invention. DETAILED DESCRIPTION

[0046] The present invention will be further described in detail below in conjunction with the accompanying drawings and examples. It is particularly noted that the following examples are only used to illustrate the present invention, but are not intended to limit the scope of the present invention. Similarly, the following examples are only partial embodiments of the present invention rather than all embodiments, and all other embodiments obtained by those of ordinary skill in the art without creative work are within the scope of protection of the present invention.

[0047] The present invention provides a DTMB integrated media information screen data transmission network gateway system, which can realize efficient data transmission while ensuring security and ensure the integrity of data, solve the problem of needing to obtain data from the external network and ensuring the secure transmission of data, and has high reliability and stability to cope with various emergencies.

[0048] Embodiment 1

[0049] See also Figure 1 , a DTMB integrated media information screen data transmission gateway system, can run on various PC terminals or MiniPC terminals. The system hardware is mainly composed of two terminal systems and a one-way serial port line between them. The external network terminal (sender, the same below) sends data, and the internal network terminal (receiver, the same below) receives data. The external network terminal sends data to the serial port B of the internal network terminal through serial port A. Among them, please connect the external network terminal and the internal network terminal using a one-way serial port transmission method; the connection line between the internal and external terminals is a one-way serial port line, and the serial port line sequence (RS232) is as follows Figure 2 The modules and specific operation steps of the two terminals are as follows:

[0050] (1) System information synchronization module

[0051] The system information synchronization module needs to be run on the external network terminal. The workflow of the system information synchronization module is: run the OA database synchronization.py file, and run the system information synchronization module. The system will open the PowerShell interface to automatically run the information synchronization program in the background to synchronize various business data and configuration information of the internal system.

[0052] The specific operation steps of this module are as follows:

[0053] 1.1 Open the OA system database.

[0054] 1.2 Determine whether there is a difference between the source data and the target data. If so, update it; otherwise, continue monitoring.

[0055] 1.3 If an error occurs during the update process, record the error message and try to resynchronize.

[0056] (2)Serial port sending module

[0057] The serial port sending module runs on the external network terminal. The serial port sending module workflow: double-click "send_com.py" to run the serial port sending module. The system will open the CMD interface and automatically run the serial port sending program in the background to transmit external network data. Before sending the data, the data is encrypted and encapsulated to ensure the security and integrity of the data. The specific operation steps of this module are as follows:

[0058] 2.1 Set the format and encryption method of the sent data.

[0059] 2.2 Determine whether the data to be sent meets the set requirements. If yes, send it; otherwise, make adjustments.

[0060] 2.3 Monitor the network status in real time during the sending process. If any abnormality occurs, suspend sending and wait for recovery.

[0061] Step 2.1 further includes,

[0062] 2.1.1 Set the format of the sent data to JSON format, where the key value pairs include: rawdata is used to store raw data, dbtable identifies the database table name, operation indicates the operation type (such as replacedb), scope determines the operation range (such as block), and identification indicates the sender's identity authentication information. Different encryption types are selected according to the type of data to be transmitted by the multimedia information screen and the degree of data confidentiality: AES encryption is used for text information to be published on the multimedia information screen; TEA encryption is used for image information to be published on the media information screen; RSA encryption is used for the core data of the business system. The data that needs to be encrypted by RAS mainly includes: AES keys, TEA keys and core data. algorithm_type indicates the encryption and decryption algorithm type, and records the number of data rows to be transmitted.

[0063] 2.1.2 Use multiple encryption algorithms for encryption. First, use the RSA algorithm to encrypt the AES key and TEA key. Then, for text content, use the AES algorithm to encrypt the data; for image information, use the TEA algorithm to encrypt; for core business data, the data volume is small and the criticality is high, and the RSA algorithm is directly used for encryption. Although the RSA algorithm has high computational complexity, it is suitable for high-security encryption of a small amount of critical data. In this step, according to the characteristics of the multimedia information screen, the network gate system can fully consider the characteristics and importance of the data while ensuring data security by formulating specific encryption methods for different types of transmission data, achieving a balance between security and efficiency, while reducing the resource consumption and cost of the system. The one-way serial port transmission characteristics adopted by this system ensure the security of the system: the one-way flow of data in the network gate system limits potential attack paths. After using multiple encryption algorithms, the sender uses RSA to encrypt the AES key, TEA key and core data of the business system, and the TEA and AES algorithms encrypt the graphic data of the multimedia information screen, and then transmit it through the one-way serial port. Attackers cannot send malicious data or commands in reverse through the serial port. Even if they try to crack encrypted data, they need to break through multiple encryption defenses such as RSA, AES, and TEA at the same time, which greatly reduces the risk of attacks from the receiving end.

[0064] 2.1.3 Add a data packet header to the encrypted data, which contains the data version number, sender and receiver identification information. At the same time, calculate and add the MD5 checksum of the data to verify the integrity and accuracy of the data.

[0065] The format of the sent data is set to JSON format in order to unify the standards and structures of the transmitted data. The TEA algorithm is used to encrypt the image data of the multimedia information screen, and the AES algorithm is used to encrypt the text data of the business system. In this way, targeted encryption can be performed according to the characteristics and importance of the data, achieving a balance between security and efficiency. Specifically, the text information of the business system often contains important text content, such as announcements, news, instructions, etc., which has less information and is generally more important. The AES algorithm can be used for encryption and decryption, which consumes more system computing resources; and the image data is larger than the text data, so it is more suitable to use the TEA algorithm for encryption and decryption, which consumes less system computing resources than the AES algorithm. Adding and calculating the MD5 checksum can be used to verify the integrity of the data, so that the receiver can compare the MD5 checksum of the received data with the checksum provided by the sender to determine whether the data has been tampered with.

[0066] (3)Serial port receiving module

[0067] The serial port receiving module runs on the intranet terminal. The serial port receiving module workflow: double-click "recv_com.py" to run the serial port receiving module. The system will open the CMD interface and automatically run the serial port receiving program in the background to receive data sent by the serial port sending module in the intranet. The specific operation steps of this module are as follows:

[0068] 3.1 Receive the data sent from the serial port and preliminarily verify the integrity and accuracy of the data. Determine whether the received data is complete and accurate. If it is, store and process it. Otherwise, discard it and request retransmission.

[0069] 3.2 Set the decryption and decapsulation rules for the received data, and perform the decryption and decapsulation operations.

[0070] 3.3 Categorize and store the received data for subsequent use.

[0071] Step 3.1 further comprises:

[0072] 3.1.1 Initialize the receiving related settings, including setting the timeout threshold, creating a buffer, etc. Start receiving data. During the receiving process, the timer continuously monitors whether it has timed out. If it has timed out, immediately exit the current receiving loop, record the timeout error log, notify the relevant modules, and perform corresponding error processing. If it has not timed out and data is received, it will be added to the buffer.

[0073] 3.1.2 In the buffer, continue to determine whether there is a preset end mark. If the end mark is detected, unpack the data length according to the data packet format and compare it with the remaining data length in the buffer to check whether it is sufficient.

[0074] 3.1.3 If the remaining data length is sufficient, unpack the data content and decode it into a string according to the preset encoding rules. Then unpack the checksum.

[0075] 3.1.4 Finally, check the end tag again. If all checks are complete, deserialize the data packet and extract key information from it, such as rawdata for obtaining original data, dbtable for confirming the database table name, operation for specifying the operation type (such as replacedb), and scope for determining the operation scope (such as block). At the same time, obtain and record the number of rows of record data affected.

[0076] 3.1.5 If the verification is incomplete, discard the current data packet and record the verification error information for subsequent troubleshooting.

[0077] Step 3.2 further includes:

[0078] 3.2.1 Verify the legitimacy of the data based on the version information and identification information of the sender and receiver in the deserialized data packet header. Then, decrypt using the rules corresponding to the sender based on the algorithm_type key-value pair in the data packet. First, use the RSA algorithm to decrypt and obtain the AES and TEA keys. After the key decryption is completed, use the AES or TEA algorithm to decrypt the corresponding image and text data according to the instructions in algorithm_type, and use the RSA algorithm to decrypt the core business data.

[0079] 3.2.2 After decryption is completed, the decrypted data is parsed and processed according to the predetermined data format and rules to extract valid information, such as performing corresponding subsequent operations according to the type of operation, storing the data in the corresponding database table, or performing other data processing processes, and recording and feedback the processing results.

[0080] Based on the above embodiments, the present invention has the following advantages:

[0081] 1. The DTMB integrated media information screen data transmission network gateway system provided by the present invention adopts one-way serial port encryption transmission technology and utilizes specific algorithms and protocols to achieve efficient transmission while ensuring high data security, effectively preventing data from being tampered with or leaked during transmission, and effectively ensuring the data security and accurate transmission of the integrated media information screen.

[0082] 2. According to the characteristics of the multimedia information screen, the network gate system formulates specific encryption methods for different types of transmission data. Under the premise of ensuring data security, it can fully consider the characteristics and importance of the data, achieve a balance between security and efficiency, and reduce the system's resource consumption and costs.

[0083] 3. The one-way serial port transmission feature adopted by this system ensures the security of the system: the one-way data flow of the network gate system limits the potential attack path. After adopting multiple encryption algorithms, the sender uses RSA to encrypt AES keys, TEA keys and core data of the business system. TEA and AES algorithms encrypt the graphic data of the multimedia information screen, and then transmit it through the one-way serial port. Attackers cannot send malicious data or instructions in reverse through the serial port. Even if they try to crack the encrypted data, they need to break through the RSA, AES, and TEA encryption defense lines at the same time, which greatly reduces the risk of attacks from the receiving end.

[0084] 4. This system uses the physical isolation advantage of serial communication: As a physical connection method, the serial port has a smaller exposure surface than the network connection. Coupled with the three hybrid encryption mechanisms of RSA, AES, and TEA, the possibility of data being attacked by network attacks during transmission is further reduced. Even if an attacker attempts to attack the serial port connection, it is difficult to crack the data protected by double encryption, which adds multiple protections to the system security.

[0085] Embodiment 2

[0086] See also Figure 3 , a method for using a DTMB integrated media information screen data transmission network gateway system, based on a DTMB integrated media information screen data transmission network gateway system described in one of the embodiments; the method comprises the following steps:

[0087] S1. Encrypt the data by using at least one or more of RSA, AES, and TEA;

[0088] S2, the sending end transmits the encrypted data to the receiving end through a unidirectional transmission line;

[0089] S3. The receiving end decrypts the data according to the data type.

[0090] In the above technical scheme, in order to better use the above method, the present application proposes a method for using the DTMB integrated media information screen data transmission gateway system. Each step corresponds to each terminal or module of the method described in one of the embodiments. The specific principles have been described above and will not be repeated here.

[0091] In this embodiment, the data is encrypted by at least one or more of RSA, AES, and TEA. Specifically:

[0092] AES is used to encrypt text information to be published on multimedia information screens; TEA is used to encrypt image information to be published on media information screens; AES keys, TEA keys and core data are encrypted using RSA;

[0093] In this embodiment, the receiving end encrypts and decrypts the data according to the data type, specifically:

[0094] Decrypt using the RSA algorithm to obtain the AES and / or TEA keys;

[0095] After the key is decrypted, the AES and / or TEA algorithms are used to decrypt the corresponding data, and the RSA algorithm is used to decrypt the core business data.

[0096] In this embodiment, according to the characteristics of the multimedia information screen, this method can fully consider the characteristics and importance of the data under the premise of ensuring data security by formulating specific encryption methods for different types of transmission data, achieve a balance between security and efficiency, and reduce the resource consumption and cost of the system. Thanks to the one-way serial port transmission characteristics adopted by the system, the security of the system is guaranteed: the one-way flow of data in the network gate system limits potential attack paths. After adopting multiple encryption algorithms, the sender uses RSA to encrypt AES keys, TEA keys and core data of the business system. TEA and AES algorithms encrypt the graphic data of the multimedia information screen, and then transmit it through a one-way serial port. Attackers cannot send malicious data or instructions in reverse through the serial port. Even if they try to crack the encrypted data, they need to break through multiple encryption lines of RSA, AES, and TEA at the same time, which greatly reduces the risk of attacks from the receiving end.

[0097] The above descriptions are only some embodiments of the present invention, and are not intended to limit the protection scope of the present invention. Any equivalent device or equivalent process transformation made using the contents of the present invention specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present invention.

Claims

1. A DTMB integrated media information screen data transmission network gateway system, characterized in that: It includes a sending end and a receiving end, the sending end sends encrypted data to the receiving end through a serial port sending module, and the receiving end receives the encrypted data through a serial port receiving module and performs data decryption processing; wherein the sending end and the receiving end are connected by a one-way serial port transmission mode; as well as, The encrypted data is encrypted and decrypted using at least one or more of RSA, AES, and TEA.

2. A DTMB media convergence information screen data transmission network gateway system as claimed in claim 1, characterized in that: The transmitting end also includes a system information synchronization module; The system information synchronization module is used to synchronize various business data and configuration information of the internal system.

3. A DTMB integrated media information screen data transmission network gateway system as claimed in claim 1, characterized in that: The serial port sending module is also specifically used to: set the format and encryption method of the sent data; determine whether the data to be sent meets the set requirements, and send it if it does, otherwise adjust it; monitor the network status in real time during the sending process, and suspend the sending and wait for resumption if an abnormality occurs.

4. A DTMB media convergence information screen data transmission network gateway system as claimed in claim 3, characterized in that: Set the format and encryption method of the sent data, specifically: Set the format of sent data to JSON format; AES is used to encrypt text information to be published on multimedia information screens; TEA is used to encrypt image information to be published on media information screens; AES keys, TEA keys and core data are encrypted using RSA; Add a data packet header to the encrypted data and calculate the MD5 checksum of the added data.

5. A DTMB media convergence information screen data transmission network gateway system as claimed in claim 4, characterized in that: The serial port receiving module is further specifically used for: Preliminarily verify the integrity and accuracy of the received data; determine whether the received data is complete and accurate, if so, store and process it, otherwise discard it and request retransmission; Set decryption and decapsulation rules for received data, and perform decryption and decapsulation operations; The data of decryption and decapsulation operations are stored in a classified manner.

6. A DTMB media convergence information screen data transmission network gateway system as claimed in claim 5, characterized in that: Preliminarily verify the integrity and accuracy of the received data; determine whether the received data is complete and accurate, store and process it if it is, otherwise discard it and request retransmission, specifically: Initialize the receiving related settings; start receiving data. During the receiving process, the timer continuously monitors whether it has timed out. If it has timed out, immediately exit the current receiving cycle, record the timeout error log, and perform corresponding error processing; If it has not timed out and data is received, it is added to the receiving end's buffer. In the buffer, it is continuously determined whether there is a preset end mark; if the end mark is detected, the data length is unpacked according to the data packet format, and compared with the remaining data length in the buffer to check whether it is sufficient; If the remaining data length is sufficient, unpack the data content, decode it into a string according to the preset encoding rules, and unpack and verify it; Check the end mark again; if all verifications are complete, deserialize the data packet and extract key information from it. If the verification is incomplete, discard the current data packet and record the verification error information.

7. A DTMB media convergence information screen data transmission network gateway system as claimed in claim 5, characterized in that: Set the decryption and decapsulation rules for received data and perform decryption and decapsulation operations, specifically: Decrypt the data in the data packet using the rules corresponding to the sender, specifically: Decrypt using the RSA algorithm to obtain the AES and / or TEA keys; After the key is decrypted, the corresponding data is decrypted using the AES and / or TEA algorithms, and the core business data is decrypted using the RSA algorithm; After decryption is completed, the decrypted data is parsed and processed according to the predetermined data format and rules to extract the valid information.

8. A method for using a DTMB integrated media information screen data transmission network gateway system, characterized in that: A DTMB integrated media information screen data transmission gateway system based on any one of claims 1 to 7; the method comprises the following steps: Encrypt the data using at least one or more of RSA, AES, and TEA; The sender transmits the encrypted data to the receiver through a one-way transmission line; The receiving end decrypts the data according to the data type.

9. A method of use according to claim 8, characterized in that: The data is encrypted by at least one or more of RSA, AES, and TEA, specifically: AES is used to encrypt text information to be published on multimedia information screens; TEA is used to encrypt image information to be published on media information screens; AES keys, TEA keys and core data are encrypted using RSA; 10. A method of use according to claim 8, characterized in that: The receiving end encrypts and decrypts the data according to the data type, specifically: Decrypt using the RSA algorithm to obtain the AES and / or TEA keys; After the key decryption is completed, the AES and / or TEA algorithms are used to decrypt the corresponding data, and the RSA algorithm is used to decrypt the core business data.