Method, system and storage medium for encrypted storage of flight data

Abstract

The present application relates to the field of data encryption technology, and discloses an encrypted storage method, system and storage medium for flight data. The method comprises: compressing the encrypted data packet by a time series compression algorithm, a wavelet transform compression algorithm and a DCT compression algorithm, and performing redundancy check processing to obtain a coded data packet, the coded data packet containing a data frame with a predefined format; allocating storage space for the data frame in the coded data packet according to the data level to which it belongs, dividing the storage space into a fixed area and a dynamic area, and establishing a storage space mapping table to obtain a stored data packet; performing a cyclic redundancy check and integrity scan on the stored data packet, performing anomaly detection by comparing the storage mapping table, and performing data repair by encoding redundant information to obtain an encrypted and stored flight data packet. The present application realizes differentiated encrypted storage and dynamic space allocation, while ensuring the integrity and recoverability of the data.

Description

Technical Field

[0001] The present application relates to the field of data encryption, and in particular to an encryption storage method, system and storage medium for flight data. Background Art

[0002] With the rapid development of the civil aviation industry, the amount and type of data collected by flight data recorders are increasing. Existing flight data storage technologies mainly use a single encryption method to encrypt and store data, and use simple data compression and verification algorithms to process data. In terms of storage space management, most of them use a fixed partition storage method to store different types of data in pre-divided storage areas. At the same time, existing technologies also use a basic data integrity check mechanism to ensure data integrity through periodic scanning.

[0003] However, the existing technology has the following shortcomings: due to the use of a single encryption method, it is impossible to provide differentiated security protection for data of different importance; simple compression algorithms are difficult to effectively process multiple types of flight data, resulting in low storage efficiency; fixed partition storage methods lack flexibility and cannot dynamically adjust storage strategies according to the importance of data; basic data integrity check mechanisms are difficult to detect and repair data corruption in a timely manner, affecting data reliability. Summary of the invention

[0004] The present application provides a method, system and storage medium for encrypted storage of flight data, which are used to achieve differentiated encrypted storage and dynamic space allocation for flight data of different importance, while ensuring the integrity and recoverability of the data.

[0005] In a first aspect, the present application provides an encrypted storage method for flight data, the encrypted storage method for flight data comprising: preprocessing raw flight data collected by a flight data recorder to obtain a preprocessed data packet, the preprocessed data packet comprising a preprocessed flight parameter data block, a voice data block, a trajectory data block, and verification information;

[0006] Performing hierarchical classification processing on the preprocessed data packet, dividing the data into a key data layer, an important data layer and a common data layer, and classifying the data in each layer according to the data type to obtain a hierarchical classification data packet, wherein the hierarchical classification data packet includes a category identifier and a metadata description file;

[0007] Performing multi-level encryption processing on the hierarchical classification data packets using encryption algorithms of different strengths according to different data levels, generating encryption keys and performing dispersed storage to obtain encrypted data packets;

[0008] The encrypted data packet is compressed by a time series compression algorithm, a wavelet transform compression algorithm and a DCT compression algorithm, and redundancy check processing is performed by Reed-Solomon coding to obtain a coded data packet, wherein the coded data packet includes a data frame having a predefined format;

[0009] Allocating storage space for the data frames in the encoded data packets according to the data layers to which they belong, dividing the storage space into a fixed area and a dynamic area, and establishing a storage space mapping table to obtain stored data packets;

[0010] The stored data packet is subjected to a cyclic redundancy check and integrity scan, anomaly detection is performed by comparing the storage mapping table, and data repair is performed through the redundant information encoded by Reed-Solomon, so as to obtain an encrypted and stored flight data packet.

[0011] In a second aspect, the present application provides an encrypted storage system for flight data, the encrypted storage system for flight data comprising:

[0012] The acquisition module is used to pre-process the original flight data collected by the flight data recorder to obtain a pre-processed data packet, wherein the pre-processed data packet includes a pre-processed flight parameter data block, a voice data block, a trajectory data block and verification information;

[0013] A hierarchical module, used for performing hierarchical classification processing on the pre-processed data packet, dividing the data into a key data layer, an important data layer and a common data layer, and classifying the data in each layer according to the data type to obtain a hierarchical classification data packet, wherein the hierarchical classification data packet includes a category identifier and a metadata description file;

[0014] An encryption module is used to perform multi-level encryption processing on the hierarchical classification data packets using encryption algorithms of different strengths according to different data levels, generate encryption keys and perform dispersed storage to obtain encrypted data packets;

[0015] A compression module, used to compress the encrypted data packet by using a time series compression algorithm, a wavelet transform compression algorithm and a DCT compression algorithm, and perform redundancy check processing by using Reed-Solomon coding to obtain a coded data packet, wherein the coded data packet includes a data frame having a predefined format;

[0016] An allocation module, configured to allocate storage space for the data frames in the encoded data packets according to the data layers to which they belong, divide the storage space into a fixed area and a dynamic area, and establish a storage space mapping table to obtain stored data packets;

[0017] The scanning module is used to perform cyclic redundancy check and integrity scan on the stored data packets, perform anomaly detection by comparing the storage mapping table, and perform data repair through Reed-Solomon encoded redundant information to obtain encrypted and stored flight data packets.

[0018] In a third aspect, the present application provides a computer-readable storage medium, in which instructions are stored, which, when executed on a computer, enable the computer to execute the above-mentioned encryption storage method for flight data.

[0019] In the technical solution provided by the present application, the original flight data collected by the flight data recorder is preprocessed to generate a preprocessed data packet containing a flight parameter data block, a voice data block, a trajectory data block and verification information, thereby realizing standardized processing and preliminary verification of the data. The data is divided into a key data layer, an important data layer and a common data layer by hierarchical classification processing, and a category identifier and a metadata description file are generated, thereby improving the hierarchy and traceability of data management. By using encryption algorithms of different strengths for different data levels for multi-level encryption processing and performing key decentralized storage, data security is enhanced and the confidentiality of key data is guaranteed. The data is compressed by combining the time series compression algorithm, the wavelet transform compression algorithm and the DCT compression algorithm, and redundancy check processing is performed by Reed-Solomon coding, thereby improving storage efficiency while ensuring data integrity. By dividing the storage space into a fixed area and a dynamic area and establishing a storage space mapping table, flexible storage space management and fast data access are realized. Cyclic redundancy check and integrity scanning are performed on the stored data packets, and data repair is performed by combining the storage mapping table for anomaly detection and redundant information of Reed-Solomon coding, thereby ensuring data reliability and recoverability. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying any creative work.

[0021] Figure 1 A schematic diagram of an embodiment of a method for encrypting and storing flight data in an embodiment of the present application;

[0022] Figure 2 A schematic diagram of an embodiment of an encrypted storage system for flight data in an embodiment of the present application. DETAILED DESCRIPTION

[0023] Embodiments of the present application provide an encrypted storage method, system and storage medium for flight data. The terms "first", "second", "third", "fourth", etc. (if any) in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments described here can be implemented in an order other than that illustrated or described here. In addition, the terms "including" or "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0024] For ease of understanding, the specific process of the embodiment of the present application is described below. Figure 1 , an embodiment of the method for encrypted storage of flight data in the embodiment of the present application includes:

[0025] Step S101, preprocessing the original flight data collected by the flight data recorder to obtain a preprocessed data packet, the preprocessed data packet including a preprocessed flight parameter data block, a voice data block, a trajectory data block and verification information;

[0026] Step S102: hierarchical classification processing is performed on the preprocessed data packet, the data is divided into a key data layer, an important data layer and a common data layer, and classification is performed according to the data type in each layer to obtain a hierarchical classification data packet, the hierarchical classification data packet includes a category identifier and a metadata description file;

[0027] Step S103, performing multi-level encryption processing on the hierarchical classification data packets using encryption algorithms of different strengths according to different data levels, generating encryption keys and performing distributed storage to obtain encrypted data packets;

[0028] Step S104, compressing the encrypted data packet by using a time series compression algorithm, a wavelet transform compression algorithm and a DCT compression algorithm, and performing redundancy check processing by using Reed-Solomon coding to obtain a coded data packet, wherein the coded data packet includes a data frame having a predefined format;

[0029] Step S105, allocating storage space for the data frames in the encoded data packets according to the data layers to which they belong, dividing the storage space into a fixed area and a dynamic area, and establishing a storage space mapping table to obtain stored data packets;

[0030] Step S106, perform cyclic redundancy check and integrity scan on the stored data packet, perform anomaly detection by comparing the storage mapping table, and perform data repair through Reed-Solomon encoded redundant information to obtain an encrypted and stored flight data packet.

[0031] It is understandable that the execution subject of the present application may be an encrypted storage system for flight data, or a terminal or a server, which is not limited here. The present application embodiment is described by taking a server as the execution subject as an example.

[0032] Specifically, the original flight data is collected through the flight data recorder, and the original flight data includes flight parameter data, cockpit voice data and flight trajectory data. The collected original flight data is preprocessed. During the preprocessing process, the data format is first unified, and the data from different sources are unified into a standard format. For example, the speed unit in the flight parameter data is unified into kilometers per hour, the height unit is unified into meters, the voice data is unified into a WAV format with a sampling rate of 16kHz, and the trajectory data is unified into a longitude and latitude coordinate point sequence format. After the format is unified, damaged or incomplete data fragments are removed through integrity checks, and the data is timestamped to ensure that the timing relationship of all data is accurate. The data is preliminarily compressed through a differential coding algorithm, and an MD5 checksum is generated for subsequent integrity verification, and finally a preprocessed data packet is obtained. The preprocessed data packet contains the processed flight parameter data block, voice data block, trajectory data block and corresponding check information.

[0033] Next, the pre-processed data packets are hierarchically classified. First, they are divided into three levels according to the degree of impact of the data on flight safety: the key data layer includes parameters directly related to flight safety, such as flight altitude, speed, attitude angle, etc.; the important data layer includes engine parameters, navigation data, etc.; the ordinary data layer includes cabin environment parameters, etc. In each layer, they are classified according to the data type, such as dividing the data into different categories such as numerical type, waveform type, image type, etc. A unique category identifier is generated for each type of data, and a metadata description file is created to record the format, sampling rate and other feature information of the data to form a hierarchical classification data packet. Then, encryption algorithms of different strengths are used according to different data levels for multi-level encryption processing. The highest strength encryption strategy is adopted for the key data layer, first using AES-256 for symmetric encryption, then using RSA-4096 for asymmetric encryption, and finally adding a digital signature; AES-192 is used for symmetric encryption and adding a digital signature for the important data layer; AES-128 is used for basic encryption for the ordinary data layer. A unique encryption key is generated for each data block and stored in a decentralized manner, and parameter information such as the algorithm identifier, key identifier, and timestamp of the encryption process is recorded.

[0034] The encrypted data is compressed, and different compression algorithms are selected according to the data type: the time series compression algorithm is used for numerical data to remove redundant information by analyzing the time correlation of the data; the wavelet transform compression algorithm is used for waveform data, and the signal is decomposed into multiple scales using wavelet basis functions; the DCT compression algorithm is used for image data to convert the image data into the frequency domain for compression. After compression, redundant check information is added through Reed-Solomon coding, and Reed-Solomon coding realizes data error correction and recovery by adding check bits to the original data. The encoded data is encapsulated according to the predefined frame format, and each data frame contains fields such as frame header identification, data type identification, compression algorithm identification, and data length. The storage space is allocated for the data frames in the encoded data packet, and the storage space is divided into a fixed area and a dynamic area. The fixed area is used to store system key information such as encryption key fragments, metadata, etc.; the dynamic area adopts a priority-based dynamic allocation mechanism. In the dynamic area, a fixed proportion of storage space is reserved for the key data layer and updated in a cyclic overwriting manner. The storage space is dynamically allocated to the important data layer and the ordinary data layer according to the importance and timeliness of the data. A storage space mapping table is established to record the physical storage location, occupied space size and other information of each data frame, and a multi-copy mechanism is used to ensure the reliability of the mapping table.

[0035] Finally, integrity protection is performed on the stored data. A checksum is generated for each storage block through a cyclic redundancy check (CRC), and integrity scans are performed regularly to detect whether the data is lost or damaged by comparing the storage mapping table. For detected abnormal data, Reed-Solomon encoded redundant information is used for repair. If repair is not possible, the corresponding data is retrieved from the backup storage. Log information of all integrity checks and recovery operations is recorded, including check time, abnormality type, processing results, etc.

[0036] For example: During a certain flight, the flight data recorder collected flight altitude data. The original data was a sequence of altitude values ​​sampled every 100 milliseconds within 10 seconds, with a total of 100 sampling points. After the format was unified, the altitude units were uniformly converted to meters. Through the differential coding compression algorithm, the altitude difference between adjacent sampling points is recorded instead of the absolute altitude value, which significantly reduces the amount of data storage. Since the altitude data belongs to the key data layer, it is protected by dual encryption of AES-256 and RSA-4096. During the compression process, the data change trend is analyzed through the time series compression algorithm, and a lower sampling rate is used for the section with gentle changes, and the original sampling rate is maintained for the section with drastic changes, which further reduces the storage space occupied while ensuring data accuracy. Finally, redundant information is added through Reed-Solomon coding, so that even if part of the data is damaged, the original data can be restored through coding.

[0037] In the embodiment of the present application, the raw flight data collected by the flight data recorder is preprocessed to generate a preprocessed data packet containing a flight parameter data block, a voice data block, a trajectory data block and verification information, thereby achieving standardized processing and preliminary verification of the data. The data is divided into a key data layer, an important data layer and a common data layer by hierarchical classification processing, and a category identifier and a metadata description file are generated, thereby improving the hierarchy and traceability of data management. By using encryption algorithms of different strengths for different data levels for multi-level encryption processing, and performing key decentralized storage, data security is enhanced and the confidentiality of key data is guaranteed. The data is compressed by combining a time series compression algorithm, a wavelet transform compression algorithm and a DCT compression algorithm, and redundancy check processing is performed by Reed-Solomon coding, thereby improving storage efficiency while ensuring data integrity. By dividing the storage space into a fixed area and a dynamic area, and establishing a storage space mapping table, flexible storage space management and fast data access are achieved. Cyclic redundancy check and integrity scanning are performed on the stored data packets, and data repair is performed by combining anomaly detection and redundant information of Reed-Solomon coding in combination with the storage mapping table, thereby ensuring data reliability and recoverability.

[0038] In a specific embodiment, the process of executing step S101 may specifically include the following steps:

[0039] (1) Performing data segmentation processing on the original flight data collected by the flight data recorder using a data segmentation algorithm based on a time window to obtain segmented data groups, and performing format standardization processing on the segmented data groups to obtain standardized data groups;

[0040] (2) Performing integrity verification on the standardized data group using a hash check algorithm to obtain an integrity verification data group, and performing timestamp alignment processing on the integrity verification data group using a time reference synchronization algorithm to obtain a time synchronization data group;

[0041] (3) Performing preliminary compression processing on the time synchronization data group according to the data type by using the differential coding algorithm to obtain a compressed data group, and generating a data check code for the compressed data group by using the MD5 algorithm to obtain a check data group;

[0042] (4) classifying and arranging the flight parameter data in the verification data group by using a parameter classification algorithm to obtain a flight parameter data block, and classifying and arranging the voice data in the verification data group by using an audio segmentation algorithm to obtain a voice data block;

[0043] (5) Optimizing the trajectory data in the verification data group by using a trajectory smoothing algorithm to obtain a trajectory data block, and generating verification information based on the flight parameter data block, the voice data block, and the trajectory data block;

[0044] (6) Encapsulate the flight parameter data block, voice data block, trajectory data block and verification information to obtain a preprocessed data packet.

[0045] Specifically, the collected raw flight data is processed based on a data segmentation algorithm based on a time window. The data segmentation algorithm based on a time window divides the continuous data stream into multiple time periods by setting a window of fixed time length. For the data collected by the flight data recorder, 10 minutes is set as a time window to divide the raw data into data blocks of multiple time periods. In each time window, the flight parameter data, voice data and trajectory data are processed separately to form a segmented data group. The segmented data group is format standardized to convert different types of data into a unified standard format. The speed unit in the flight parameter data is uniformly converted to kilometers per hour, the altitude unit is unified to meters, and the temperature unit is unified to degrees Celsius; the voice data is uniformly converted to WAV format with a sampling rate of 16kHz and a quantization accuracy of 16 bits; the trajectory data is uniformly converted to the longitude and latitude format under the WGS84 coordinate system to obtain a standardized data group.

[0046] The integrity of the standardized data group is verified by the hash check algorithm. The hash check algorithm detects whether the data is complete by calculating the hash value of the data block. The SHA-256 hash value is calculated for each data block, and the hash value is bound to the data block for storage for subsequent data integrity verification. The data that passes the integrity verification forms an integrity verification data group. Subsequently, the time base synchronization algorithm is used to align the timestamps of the integrity verification data group. The time base synchronization algorithm ensures the accuracy of the timing relationship between different types of data by unifying the timestamps of all data to the Coordinated Universal Time (UTC) standard, and obtains a time synchronization data group. Differential coding algorithms are used to perform preliminary compression on various types of data in the time synchronization data group. The differential coding algorithm replaces the original value by recording the difference between adjacent data points, and has a good compression effect on data sequences that change slowly. For example, for flight altitude data, the absolute altitude value at each time point is not directly stored, but the altitude change value between adjacent sampling points is stored, which significantly reduces the amount of data storage. The compressed data forms a compressed data group, and then the MD5 algorithm is used to generate a 32-bit check code for the compressed data group to verify the integrity and consistency of the data, and obtain a check data group.

[0047] The flight parameter data in the verification data group are classified and sorted by the parameter classification algorithm. The parameter classification algorithm divides the data into multiple categories according to the physical meaning and purpose of the parameters, such as attitude parameter class, power parameter class, navigation parameter class, etc. Each type of parameter data is organized in a fixed format, including fields such as parameter identification, value, unit, timestamp, etc., to form a flight parameter data block. At the same time, the voice data is classified and sorted by the audio segmentation algorithm. The audio segmentation algorithm divides the continuous voice stream into multiple voice segments according to voice features and time intervals. Each voice segment contains information such as start and end time, sampling rate, data length, etc., to form a voice data block. The trajectory data in the verification data group is optimized by the trajectory smoothing algorithm. The trajectory smoothing algorithm uses the sliding average method to eliminate noise and jitter in the trajectory data and retain the true flight trajectory characteristics. The smoothed trajectory point sequence forms a trajectory data block. According to the generated flight parameter data block, voice data block and trajectory data block, verification information containing information such as data block size, time range, integrity check value, etc. is generated. Finally, the flight parameter data block, voice data block, trajectory data block and verification information are uniformly packaged, and necessary header information and index structure are added to form a preprocessing data packet.

[0048] For example, during a flight, the flight data recorder collects 100 flight parameters per second, including flight altitude, airspeed, attitude angle and other data. Taking altitude data as an example, the original data sampling rate is 10Hz and the recording unit is feet. First, the data is segmented into 10-minute windows through the time window algorithm, and each window contains 6,000 sampling points. Then the format is standardized, and the altitude unit is converted from feet to meters. The converted data is hashed with a SHA-256 hash value to ensure data integrity. When aligning timestamps, the time base of all data is unified to UTC time. When using differential coding compression, the height difference between adjacent sampling points is calculated. For example, the original height data within 10 seconds is [10000, 10002, 10005, 10006, 10008, 10007, 10009, 10011, 10012, 10015] meters. After differential coding, it becomes [10000, 2, 3, 1, 2, -1, 2, 2, 1, 3], which greatly reduces the amount of data storage. The height data is classified into the attitude parameter category through the parameter classification algorithm, and the flight trajectory is smoothed by the trajectory smoothing algorithm. Finally, all processed data are packaged in a unified format to form a pre-processed data packet containing complete structured information.

[0049] In a specific embodiment, the process of executing step S102 may specifically include the following steps:

[0050] (1) Performing importance assessment on the flight parameter data blocks in the pre-processed data packet according to the degree of relevance to flight safety, obtaining importance assessment results, and dividing the flight parameter data into a key data layer, an important data layer, and a common data layer according to the importance assessment results, to obtain hierarchical division data;

[0051] (2) performing voice information classification processing on the voice data blocks in the preprocessing data packet to obtain a voice information classification result, and dividing the voice data into corresponding data layers according to the voice information classification result to obtain classified voice data;

[0052] (3) Performing trajectory feature analysis on the trajectory data blocks in the preprocessed data packet to obtain trajectory feature analysis results, and dividing the trajectory data into corresponding data layers according to the trajectory feature analysis results to obtain hierarchical trajectory data;

[0053] (4) classifying and organizing the hierarchical data, the hierarchical voice data, and the hierarchical trajectory data according to the data type in each data layer to obtain type classification data, and generating a unique category identifier for the type classification data to obtain identification classification data;

[0054] (5) Describe the format, sampling rate and data characteristics of each type of data in the identification classification data to obtain a metadata description file, and package and organize the identification classification data and metadata description file to obtain a hierarchical classification data package.

[0055] Specifically, the importance of the flight parameter data blocks is evaluated according to the degree of relevance to flight safety. The evaluation process is based on the functional attributes of the flight parameters and the degree of impact on flight safety, and the parameters are divided into three levels: the parameters that directly affect flight safety are divided into the key data layer, including core flight parameters such as flight altitude, airspeed, attitude angle, and engine speed; the parameters that indirectly affect flight safety are divided into the important data layer, including auxiliary flight parameters such as fuel volume, hydraulic pressure, and cabin air pressure; the parameters that have a small impact on flight safety are divided into the ordinary data layer, including environmental parameters such as cabin temperature and entertainment system status. When the voice data blocks in the pre-processed data packets are graded for voice information, they are graded based on the importance and urgency of the voice content. By analyzing the voice signal to identify keywords and tone features, the voice communication data in the cockpit is graded: voice data containing keywords such as "emergency", "fault", and "abnormal" are divided into the key data layer; daily flight operation instructions and air traffic control communications are divided into the important data layer; ordinary conversations and broadcast information between crew members are divided into the ordinary data layer. The voice grading process fully considers the impact of the voice content on flight safety.

[0056] When analyzing the trajectory characteristics of the trajectory data blocks in the preprocessed data packets, the focus is on analyzing the changing characteristics of the flight trajectory. By calculating the velocity, acceleration, steering angle and other parameters of the trajectory points, the key nodes in the flight trajectory are identified: the trajectory data of key flight stages such as takeoff, landing, and turning are divided into the key data layer; the trajectory data of standard waypoints in the cruise stage are divided into the important data layer; the routine trajectory points in the normal cruise stage are divided into the ordinary data layer. The classification of trajectory data ensures that the trajectory information of the key flight stage is protected first. The hierarchical data, hierarchical voice data and hierarchical trajectory data are classified and organized in their respective data layers. In the key data layer, the data is subdivided into types such as numerical type, waveform type and image type: numerical data includes the specific numerical values ​​of flight parameters; waveform data includes the audio waveform of voice communication; image data includes the spatial distribution map of trajectory points. A unique category identifier is generated for each type of data. The identifier contains information such as data hierarchy, data type, and acquisition time to form structured identification classification data.

[0057] The various features of the identification classification data are described in detail to generate a metadata description file. The metadata description file records the format specifications of the data: the unit system and accuracy requirements of numerical data; the sampling rate and quantization bit number of waveform data; the coordinate system and accuracy level of image data. At the same time, the statistical characteristics of the data, such as numerical range, mean, variance and other statistics, are recorded to facilitate subsequent data processing and analysis. Finally, the identification classification data and metadata description files are integrated and packaged to form a complete hierarchical classification data package.

[0058] For example, in a flight of a civil airliner, the preprocessed data packet contains 1 hour of flight data. The flight parameter data includes: airspeed data (sampling rate 10Hz), attitude angle data (sampling rate 20Hz), engine parameters (sampling rate 5Hz), etc. The importance of airspeed data is evaluated, and since airspeed is directly related to flight safety, it is classified into the key data layer. For the pitch angle data in the attitude angle data, the record shows that the value range is [-5°, +8°] within 10 minutes, and the standard deviation is 2.3°, which is classified as the key data layer. The call content of "Engine No. 1 Fire Alarm" is recognized in the voice data, and the voice data (lasting 15 seconds, sampling rate 16kHz) is immediately classified into the key data layer. The trajectory data analysis shows that during the landing approach phase, the flight altitude dropped from 3000 meters to landing, and this segment of trajectory data (including 300 trajectory points) is classified into the key data layer. Generate category identifiers for these data, such as the identifier of airspeed data is "KN001_SPD_20231122_1015" (indicating key layer numerical data_airspeed_date_time). Record in the metadata description file: airspeed data format is 16-bit integer, unit is km / h, sampling rate is 10Hz, valid value range is [200,900]; voice data format is 16-bit PCM, sampling rate is 16kHz; track point format is double-precision floating point number, using WGS84 coordinate system.

[0059] In a specific embodiment, the process of executing step S103 may specifically include the following steps:

[0060] (1) Performing symmetric encryption processing on the key data layer data in the hierarchical classification data packet using the AES-256 algorithm to obtain symmetric encrypted data, and performing asymmetric encryption processing on the symmetric encrypted data using the RSA-4096 algorithm to obtain key layer encrypted data;

[0061] (2) Performing symmetric encryption processing on the important data layer data in the hierarchical classification data packet using the AES-192 algorithm to obtain the important layer encrypted data, and generating a digital signature for the important layer encrypted data to obtain the important layer data with signature;

[0062] (3) Performing basic encryption processing on the common data layer data in the hierarchical classification data packet using the AES-128 algorithm to obtain common layer encrypted data, and combining the key layer encrypted data, the important layer data with signature, and the common layer encrypted data to obtain multi-level encrypted data;

[0063] (4) Generate a unique encryption key for each data block in the multi-level encrypted data to obtain an encryption key set, and perform decentralized storage processing on the encryption key set to obtain decentralized stored key information;

[0064] (5) The encryption algorithm identifier, key identifier, and encryption timestamp of the multi-level encrypted data are recorded to obtain encryption parameter information, and the multi-level encrypted data and encryption parameter information are packaged to obtain an encrypted data packet.

[0065] Specifically, the key data layer data in the hierarchical classification data packet is encrypted with the highest strength. The AES-256 algorithm is used for symmetric encryption. AES-256 uses a 256-bit key length and encrypts the data through multiple rounds of substitution and replacement operations. After the symmetric encryption is completed, the RSA-4096 algorithm is used for asymmetric encryption. RSA-4096 uses a 4096-bit public key and private key pair. The public key is used for encryption and the private key is used for decryption. Double encryption ensures the security of key data. The key layer encrypted data is formed by double-layer encrypted key data. Medium-strength encryption protection is used for the important data layer in the hierarchical classification data packet. The AES-192 algorithm is used for symmetric encryption. AES-192 uses a 192-bit key length. The encryption strength is between AES-256 and AES-128, which is suitable for the security requirements of the important data layer. The encrypted data generates signature information through the digital signature algorithm. The digital signature uses the private key to encrypt the hash value of the data to ensure the integrity and non-repudiation of the data, forming the important layer data with signature.

[0066] Basic strength encryption protection is used for the common data layer data in the hierarchical classification data packet. The AES-128 algorithm is used for encryption. AES-128 uses a 128-bit key length to provide basic data protection capabilities. The key layer encrypted data, the important layer data with signatures, and the common layer encrypted data are combined in a unified format to form multi-level encrypted data, maintaining the hierarchical structure of data with different security levels. A unique encryption key is generated for each data block in the multi-level encrypted data. The key generation uses a random number generator to ensure the randomness and uniqueness of the key. For the AES encryption key, 256-bit, 192-bit, and 128-bit random keys are generated respectively; for RSA encryption, a 4096-bit public and private key pair is generated. The generated keys form an encryption key set, and a key distributed storage strategy is adopted to divide the key into multiple parts and store them in different physical locations to improve the security of the key.

[0067] Record detailed encryption parameter information for multi-level encrypted data, including the type of encryption algorithm used (such as AES-256, RSA-4096, etc.), key identifier (used to index the corresponding key), encryption timestamp (record the exact time of the encryption operation), etc. Pack and integrate multi-level encrypted data and encryption parameter information to form a complete encrypted data package for subsequent storage and decryption operations.

[0068] For example, when processing the data of a certain flight, the critical data layer contains a 10-minute flight altitude data with a data size of 1MB. First, the data is symmetrically encrypted using AES-256 to generate a 256-bit random key "8F2A...E9B4" (in hexadecimal), and the encrypted data is symmetrically encrypted. Then, the symmetrically encrypted data is re-encrypted using the public key of RSA-4096 (4096 bits in length) to form the key layer encrypted data. For the engine parameter data (500KB) in the important data layer, the AES-192 algorithm and the 192-bit key "6D3C...A7F1" are used for encryption, and the private key is used to generate a digital signature. The cabin temperature data (100KB) in the ordinary data layer is encrypted using the AES-128 algorithm and the 128-bit key "4B2E...C8D5". All key information is divided into 3 parts and stored in different storage areas. The encryption parameter information records the following information: algorithm identifier "AES256_RSA4096", key identifier "KEY_20231122_001", encryption time "2023-11-22 10:15:30.000", etc. The final encrypted data packet contains all encrypted data and complete parameter information.

[0069] In a specific embodiment, the process of executing step S104 may specifically include the following steps:

[0070] (1) compressing the numerical data in the encrypted data packet by using a time series compression algorithm to obtain compressed numerical data, and compressing the waveform data in the encrypted data packet by using a wavelet transform compression algorithm to obtain compressed waveform data;

[0071] (2) compressing the image data in the encrypted data packet using a DCT compression algorithm to obtain compressed image data, and merging the compressed numerical data, compressed waveform data, and compressed image data to obtain a compressed data group;

[0072] (3) The compressed data group is processed into blocks by Reed-Solomon coding to obtain coded data blocks, and error correction check bits are added to the coded data blocks to obtain check-coded blocks;

[0073] (4) Encapsulate the checksum-coded block according to a predefined frame format, add a frame header identifier, a data type identifier, a compression algorithm identifier, and data length information to obtain a formatted data frame, and add a checksum to the formatted data frame to obtain a complete data frame;

[0074] (5) The complete data frame is grouped and packaged to obtain a coded data packet, and redundant check information is generated for the coded data packet through Reed-Solomon encoding to obtain a data frame with a predefined format.

[0075] Specifically, the numerical data (such as flight altitude, speed and other parameters) in the encrypted data packet are compressed by the time series compression algorithm. The time series compression algorithm is based on the time correlation characteristics of the data. By analyzing the change trend of adjacent data points, a lower sampling rate is used for the data segment with gentle changes, and the original sampling rate is maintained for the data segment with drastic changes. At the same time, the wavelet transform compression algorithm is used for the waveform data (such as cockpit voice, engine noise, etc.) in the encrypted data packet. The wavelet transform decomposes the signal into different frequency components, retains the main frequency components and discards the secondary components to achieve data compression. The image data (such as radar echo images, meteorological images, etc.) in the encrypted data packet is processed by the DCT (discrete cosine transform) compression algorithm. The DCT algorithm converts the image data from the spatial domain to the frequency domain, and achieves compression by removing high-frequency coefficients while maintaining the main features of the image. The compressed numerical data, waveform data and image data are merged according to a unified format specification to form a structured compressed data group.

[0076] Reed-Solomon coding is used to process the compressed data group in blocks. Reed-Solomon coding is an effective error correction coding technology that divides data into blocks of fixed size and adds redundant check bits to each data block. The number of check bits determines the error correction capability of the code, which can usually recover partially damaged data. After adding error correction check bits to each data block, a check-coded block with error correction capability is formed. The check-coded block is encapsulated in a data frame and necessary frame header information is added. The frame header contains fields such as the frame start identifier (used to identify the start of the data frame), the data type identifier (to distinguish different types of data), the compression algorithm identifier used (used to select the algorithm during decompression), and the data length information (indicating the length of the actual data). To ensure the integrity of the data frame, the check code is calculated and added to the entire formatted data frame to form a complete data frame.

[0077] The complete data frame is packaged according to the predefined grouping rules to form a coded data packet. Reed-Solomon encoding is used again on the coded data packet to generate additional redundant check information to provide packet-level error correction capabilities. Finally, a data frame with a standard format is formed, which contains complete data content and protection mechanisms.

[0078] For example, when processing 10 minutes of flight data during a flight, the original data includes: flight altitude data (sampling rate 10Hz, a total of 6000 sampling points), engine noise waveform (sampling rate 44.1kHz, duration 10 minutes) and weather radar image (resolution 1024×1024 pixels). Time series compression is applied to the flight altitude data. Analysis shows that the altitude change during the stable cruise phase (about 8 minutes) does not exceed ±10 meters. The sampling rate of this data segment is reduced to 1Hz, while the original sampling rate of the take-off and landing phases (1 minute each) is maintained. The number of data points after compression is reduced to 1080. The engine noise waveform is decomposed into 4 scales through wavelet transform, the highest frequency component is removed, the main sound features are retained, and the compression ratio reaches 4:1. After the radar image is transformed through DCT, 20% of the low-frequency coefficients are retained, and the compression ratio reaches 5:1. After Reed-Solomon encoding, 32 bytes of check bits are added to every 512 bytes of data, and the data frame format is: 4-byte frame header identifier + 2-byte type identifier + 2-byte algorithm identifier + 4-byte data length + data body + 4-byte check code. The final data frame size is about 25% of the original data, and it has the ability to correct 8-byte burst errors.

[0079] In a specific embodiment, the process of executing step S105 may specifically include the following steps:

[0080] (1) Performing space requirement analysis on the data frames in the encoded data packets, calculating the storage capacity required for each data level, obtaining space requirement data, and dividing the storage device into a fixed area for storing system key information and a dynamic area for storing dynamic data, obtaining divided area information;

[0081] (2) A fixed proportion of storage space is reserved for the data frames of the key data layer in the dynamic area to obtain a key data reserved space, and a cyclic overwriting and updating mechanism is set for the key data reserved space to obtain a cyclic storage area;

[0082] (3) Performing timeliness analysis on the data frames of the important data layer and the common data layer to obtain data timeliness results, and dynamically allocating storage space in the dynamic area according to the data timeliness results to obtain dynamically allocated space;

[0083] (4) Establishing an index structure for the encryption key shards and metadata in the fixed area to obtain a fixed area index table, and establishing a data block index for the circular storage area and the dynamically allocated space to obtain a dynamic area index table;

[0084] (5) The fixed area index table and the dynamic area index table are merged to generate a storage space mapping table to obtain mapping relationship data, and multiple copies of the mapping relationship data are created to obtain backup mapping data;

[0085] (6) Record the physical locations of the data frames stored in the circular storage area and the dynamically allocated space to obtain location record data, and integrate and package the location record data and the backup mapping data to obtain a stored data packet.

[0086] Specifically, the space requirement analysis is performed on the data frames in the encoded data packets. The required storage capacity is calculated by counting the data volume and data growth rate of each data layer. The storage device is divided into two main areas: the fixed area is used to store system key information, such as encryption key shards, metadata, etc.; the dynamic area is used to store flight data generated in real time. The fixed area occupies 20% of the total storage space, and the dynamic area occupies 80%. When reserving storage space for data frames in the critical data layer, 30% of the space in the dynamic area is allocated as critical data reserved space. A cyclic overwrite update mechanism is set up. When the reserved space occupancy reaches the threshold, the earliest data is cyclically overwritten in chronological order to ensure continuous recording of critical data. The circular storage area adopts a ring buffer structure, and uses read and write pointers to mark the access location of the data.

[0087] Perform timeliness analysis on data frames of important data layers and common data layers. According to the life cycle and access frequency of data, divide data into hot data (frequently accessed in the last 24 hours), warm data (may be accessed in the last 7 days), and cold data (seldom accessed for long-term storage). In the dynamic area, allocate 40% of the space for hot data, 20% for warm data, and 10% for cold data to achieve dynamic allocation of storage space. Establish an index structure in the fixed area to manage encryption key shards and metadata. Use B+ tree structure to organize indexes, and each index item contains key identification, shard location, access rights and other information. At the same time, establish data block indexes for the circular storage area and dynamically allocated space, record the starting position, size, data type and other information of the data block, and form a complete dynamic area index table.

[0088] The fixed area index table and the dynamic area index table are combined to generate a unified storage space mapping table. The mapping table adopts a hierarchical structure. The first layer records the area type and range, and the second layer records the detailed location information of the data block. To ensure the reliability of the mapping table, three complete copies are created and stored in different physical locations. Damage to any one copy will not affect the normal operation of the system. The physical location information of all stored data frames is recorded in detail. The location record of each data frame contains information such as storage area identification, starting address, and data length. The location record data is integrated with the backup mapping data to form a complete stored data packet, ensuring reliable storage and fast access to data.

[0089] For example, when processing the flight data of a certain passenger plane for one hour, the size of the encoded data packet is 2GB. The space requirement analysis shows that the key data layer (including flight parameters, key communication records, etc.) requires 600MB of storage space, the important data layer (including engine data, navigation data, etc.) requires 900MB of storage space, and the general data layer (including environmental parameters, general status information, etc.) requires 500MB of storage space. In the 8GB storage device, 1.6GB is divided as a fixed area and 6.4GB is divided as a dynamic area. In the dynamic area, 1.92GB (30%) is reserved for the cyclic storage of key data. When the storage capacity reaches 1.72GB (90%), the cyclic overwrite mechanism is triggered. In the important data layer, the engine data has an access frequency of 3 times per minute in the last 2 hours, which is divided into hot data and allocated to the front position of the dynamic area. The fixed area index table records the location information of 128 key shards, and the dynamic area index table contains indexes of about 10,000 data blocks. The mapping table size is 10MB, and a copy is saved in each of three different physical areas. The final location record table shows that all 2GB of data is stored in about 15,000 non-contiguous physical blocks, with an average size of 140KB per physical block.

[0090] In a specific embodiment, the process of executing step S106 may specifically include the following steps:

[0091] (1) Performing cyclic redundancy check processing on the data blocks in the stored data packets to obtain check result data, and comparing the check result data with the original check code to obtain a check comparison result;

[0092] (2) Performing a data integrity scan on the stored data packets according to the physical location recorded in the storage space mapping table to obtain an integrity scan result, and performing a matching analysis between the integrity scan result and the storage space mapping table to obtain an abnormal data record;

[0093] (3) The data blocks in the abnormal data record are restored by using the redundant information encoded by Reed-Solomon to obtain restored data blocks, and the data validity of the restored data blocks is verified to obtain verification result data;

[0094] (4) Mark the data blocks that cannot be repaired in the verification result data to obtain the data mark to be repaired, and retrieve the corresponding data from the backup storage according to the data mark to be repaired to obtain the backup supplementary data;

[0095] (5) Integrate the restored data blocks and the backup supplementary data, update the storage space mapping table, obtain the repaired data packet, and confirm the integrity of the repaired data packet to obtain the encrypted and stored flight data packet.

[0096] Specifically, a cyclic redundancy check (CRC) is performed on each data block in the stored data packet. The CRC algorithm generates a checksum through division operation, calculates the CRC-32 value of the data block, and obtains 32-bit check result data. The check result data is compared bit by bit with the original checksum generated when the data block is stored to generate a check comparison result, and the data block with a check error is identified. According to the physical location recorded in the storage space mapping table, the stored data packet is scanned for data integrity. The scanning process checks whether the starting position, length, end mark and other information of each data block are complete. The scan result is matched and analyzed with the information recorded in the storage space mapping table to check whether the actual storage status of the data block is consistent with the mapping table record. Through matching analysis, the lost, damaged or misplaced data blocks are identified and abnormal data records are generated.

[0097] For the data blocks in the abnormal data records, the Reed-Solomon redundant coding information added during data storage is used to restore the data. Reed-Solomon coding can detect and correct a certain number of errors by adding redundant symbols to the original data. For example, using the (255,223) Reed-Solomon code, adding 32 bytes of check symbols to each 223-byte data block can correct up to 16 bytes of burst errors. The restored data blocks are verified for data validity, and the data format, value range, time sequence, etc. are checked to see if they are reasonable, and verification result data is generated. For the data blocks in the verification result data that cannot be repaired after Reed-Solomon decoding, a to-be-repaired mark is added. The to-be-repaired mark contains information such as the identifier, damage type, and damage location of the data block. According to the to-be-repaired data mark, the corresponding complete data is retrieved from the backup storage, and the corresponding backup data is retrieved as a supplement to ensure the integrity of the data.

[0098] The successfully restored data blocks and the supplementary data retrieved from the backup storage are integrated and processed to construct a complete data set. The location information and status mark of the corresponding data blocks in the storage space mapping table are updated to ensure the accuracy of the mapping relationship. The integrity of the integrated repair data packet is confirmed to verify whether all data has been restored completely, and finally an encrypted and stored flight data packet is generated.

[0099] For example, when performing an integrity check on a 2GB data packet of a certain flight, it was found that the CRC-32 check value of data block A5F8 (storage location: 0x2000-0x2FFF, size: 4KB) was 0xE7B4D2C1, which did not match the original check code 0xE7B4D2C0, indicating that there was a single-bit error in the data. The integrity scan showed that data block B3A1 (storage location: 0x5000-0x5FFF) was marked as stored, but the data could not be read at the actual location, so it was determined to be data lost. Data block #A5F8 contained engine speed data, which was encoded using Reed-Solomon (255,223). The error in the 1876th byte was corrected through decoding. Data block #B3A1 contained cabin pressure records, which could not be repaired through Reed-Solomon encoding. A repair mark "REPAIR_B3A1_LOST" was added, and the complete data (4KB) of the corresponding time period was retrieved from the backup storage for supplementation. The final repaired data is confirmed to be complete, the CRC checks of all data blocks are correct, and the status of A5F8 and B3A1 in the storage mapping table is updated to "repaired", completing the data recovery process.

[0100] The above describes the encryption storage method for flight data in the embodiment of the present application. The following describes the encryption storage system for flight data in the embodiment of the present application. Figure 2 , an embodiment of the encrypted storage system for flight data in the embodiment of the present application includes:

[0101] The acquisition module 201 is used to pre-process the original flight data collected by the flight data recorder to obtain a pre-processed data packet, wherein the pre-processed data packet includes a pre-processed flight parameter data block, a voice data block, a trajectory data block and verification information;

[0102] The hierarchical module 202 is used to perform hierarchical classification processing on the pre-processed data packet, divide the data into a key data layer, an important data layer and a common data layer, and classify the data in each layer according to the data type to obtain a hierarchical classification data packet, wherein the hierarchical classification data packet includes a category identifier and a metadata description file;

[0103] The encryption module 203 is used to perform multi-level encryption processing on the hierarchical classification data packet using encryption algorithms of different strengths according to different data levels, generate encryption keys and perform dispersed storage to obtain encrypted data packets;

[0104] The compression module 204 is used to compress the encrypted data packet by using a time series compression algorithm, a wavelet transform compression algorithm and a DCT compression algorithm, and perform redundancy check processing by using Reed-Solomon coding to obtain a coded data packet, wherein the coded data packet includes a data frame having a predefined format;

[0105] The allocation module 205 is used to allocate storage space for the data frames in the encoded data packets according to the data layers to which they belong, divide the storage space into a fixed area and a dynamic area, and establish a storage space mapping table to obtain stored data packets;

[0106] The scanning module 206 is used to perform cyclic redundancy check and integrity scan on the stored data packets, perform anomaly detection by comparing the storage mapping table, and perform data repair through Reed-Solomon encoded redundant information to obtain encrypted and stored flight data packets.

[0107] Through the cooperation of the above components, the original flight data collected by the flight data recorder is preprocessed to generate preprocessed data packets containing flight parameter data blocks, voice data blocks, trajectory data blocks and verification information, thus achieving standardized processing and preliminary verification of data. The data is divided into key data layer, important data layer and ordinary data layer by hierarchical classification processing, and category identifiers and metadata description files are generated, which improves the hierarchy and traceability of data management. By using different encryption algorithms of different strengths for different data levels and distributing the key storage, data security is enhanced and the confidentiality of key data is guaranteed. The data is compressed by combining the time series compression algorithm, wavelet transform compression algorithm and DCT compression algorithm, and redundancy check processing is performed by Reed-Solomon coding, which improves storage efficiency while ensuring data integrity. By dividing the storage space into fixed areas and dynamic areas and establishing a storage space mapping table, flexible storage space management and fast data access are achieved. Cyclic redundancy check and integrity scanning are performed on the stored data packets, and data repair is performed by combining the storage mapping table for anomaly detection and Reed-Solomon coded redundant information to ensure data reliability and recoverability.

[0108] The present application also provides a computer-readable storage medium, which may be a non-volatile computer-readable storage medium or a volatile computer-readable storage medium. Instructions are stored in the computer-readable storage medium. When the instructions are executed on a computer, the computer executes the steps of the method for encrypting and storing flight data.

[0109] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the above-described systems, systems and units can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0110] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk and other media that can store program codes.

[0111] As described above, the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A method for encrypted storage of flight data, characterized in that: The encrypted storage method for flight data includes: Preprocessing the original flight data collected by the flight data recorder to obtain a preprocessed data packet, wherein the preprocessed data packet includes a preprocessed flight parameter data block, a voice data block, a trajectory data block, and verification information; Performing hierarchical classification processing on the preprocessed data packet, dividing the data into a key data layer, an important data layer and a common data layer, and classifying the data in each layer according to the data type to obtain a hierarchical classification data packet, wherein the hierarchical classification data packet includes a category identifier and a metadata description file; Performing multi-level encryption processing on the hierarchical classification data packets using encryption algorithms of different strengths according to different data levels, generating encryption keys and performing dispersed storage to obtain encrypted data packets; The encrypted data packet is compressed by a time series compression algorithm, a wavelet transform compression algorithm and a DCT compression algorithm, and redundancy check processing is performed by Reed-Solomon coding to obtain a coded data packet, wherein the coded data packet includes a data frame having a predefined format; Allocating storage space for the data frames in the encoded data packets according to the data layers to which they belong, dividing the storage space into a fixed area and a dynamic area, and establishing a storage space mapping table to obtain stored data packets; The stored data packet is subjected to a cyclic redundancy check and integrity scan, anomaly detection is performed by comparing the storage mapping table, and data repair is performed through the redundant information encoded by Reed-Solomon, so as to obtain an encrypted and stored flight data packet.

2. The method for encrypted storage of flight data according to claim 1, characterized in that: The raw flight data collected by the flight data recorder is preprocessed to obtain a preprocessed data packet, wherein the preprocessed data packet contains a preprocessed flight parameter data block, a voice data block, a trajectory data block and verification information, including: Performing data segmentation processing on the original flight data collected by the flight data recorder by using a data segmentation algorithm based on a time window to obtain a segmented data group, and performing format standardization processing on the segmented data group to obtain a standardized data group; Performing integrity verification on the standardized data group through a hash check algorithm to obtain an integrity verification data group, and performing timestamp alignment processing on the integrity verification data group through a time reference synchronization algorithm to obtain a time synchronization data group; Performing preliminary compression processing on the time synchronization data group according to the data type by using a differential coding algorithm to obtain a compressed data group, and generating a data check code for the compressed data group by using an MD5 algorithm to obtain a check data group; Classifying and arranging the flight parameter data in the verification data group by a parameter classification algorithm to obtain a flight parameter data block, and classifying and arranging the voice data in the verification data group by an audio segmentation algorithm to obtain a voice data block; The trajectory data in the verification data group is optimized by a trajectory smoothing algorithm to obtain a trajectory data block, and verification information is generated according to the flight parameter data block, the voice data block and the trajectory data block; The flight parameter data block, the voice data block, the trajectory data block and the verification information are data packaged to obtain a pre-processed data packet.

3. The method for encrypted storage of flight data according to claim 1, characterized in that: The pre-processed data packet is subjected to hierarchical classification processing, the data is divided into a key data layer, an important data layer and a common data layer, and classified according to the data type in each layer to obtain a hierarchical classification data packet, the hierarchical classification data packet includes a category identifier and a metadata description file, including: Performing importance assessment on the flight parameter data blocks in the pre-processed data packet according to the degree of relevance to flight safety to obtain an importance assessment result, and dividing the flight parameter data into a key data layer, an important data layer and a common data layer according to the importance assessment result to obtain hierarchical division data; Performing voice information classification processing on the voice data blocks in the preprocessed data packets to obtain voice information classification results, and dividing the voice data into corresponding data layers according to the voice information classification results to obtain classified voice data; Performing trajectory feature analysis on the trajectory data blocks in the preprocessed data packet to obtain trajectory feature analysis results, and dividing the trajectory data into corresponding data layers according to the trajectory feature analysis results to obtain hierarchical trajectory data; Classifying and organizing the hierarchical division data, the hierarchical voice data, and the hierarchical trajectory data according to data types in each data layer to obtain type classification data, and generating a unique category identifier for the type classification data to obtain identification classification data; The formats, sampling rates and data characteristics of various types of data in the identification classification data are described to obtain a metadata description file, and the identification classification data and the metadata description file are packaged and collated to obtain a hierarchical classification data packet.

4. The method for encrypted storage of flight data according to claim 1, characterized in that: The hierarchical classification data packets are subjected to multi-level encryption processing using encryption algorithms of different strengths according to different data levels, encryption keys are generated and stored in a dispersed manner, and encrypted data packets are obtained, including: Performing symmetric encryption processing on the key data layer data in the hierarchical classification data packet by using the AES-256 algorithm to obtain symmetric encrypted data, and performing asymmetric encryption processing on the symmetric encrypted data by using the RSA-4096 algorithm to obtain key layer encrypted data; Performing symmetric encryption processing on the important data layer data in the hierarchical classification data packet by using the AES-192 algorithm to obtain important layer encrypted data, and generating a digital signature for the important layer encrypted data to obtain important layer data with a signature; Performing basic encryption processing on the common data layer data in the hierarchical classification data packet by using the AES-128 algorithm to obtain common layer encrypted data, and combining the key layer encrypted data, the important layer data with signature and the common layer encrypted data to obtain multi-level encrypted data; Generate a unique encryption key for each data block in the multi-level encrypted data to obtain an encryption key set, and perform decentralized storage processing on the encryption key set to obtain decentralized stored key information; The encryption algorithm identifier, key identifier and encryption timestamp of the multi-level encrypted data are recorded to obtain encryption parameter information, and the multi-level encrypted data and the encryption parameter information are packaged to obtain an encrypted data packet.

5. The method for encrypted storage of flight data according to claim 1, characterized in that: The encrypted data packet is compressed by a time series compression algorithm, a wavelet transform compression algorithm and a DCT compression algorithm, and redundancy check processing is performed by Reed-Solomon coding to obtain a coded data packet, wherein the coded data packet contains a data frame with a predefined format, including: Compressing the numerical data in the encrypted data packet by a time series compression algorithm to obtain compressed numerical data, and compressing the waveform data in the encrypted data packet by a wavelet transform compression algorithm to obtain compressed waveform data; Compressing the image data in the encrypted data packet by using a DCT compression algorithm to obtain compressed image data, and merging the compressed numerical data, the compressed waveform data and the compressed image data to obtain a compressed data group; Performing data block processing on the compressed data group through Reed-Solomon coding to obtain coded data blocks, and adding error correction check bits to the coded data blocks to obtain check-coded blocks; Data encapsulation is performed on the checksum-coded block according to a predefined frame format, a frame header identifier, a data type identifier, a compression algorithm identifier and data length information are added to obtain a formatted data frame, and a checksum is added to the formatted data frame to obtain a complete data frame; The complete data frame is grouped and packaged to obtain a coded data packet, and redundant check information is generated for the coded data packet through Reed-Solomon coding to obtain a data frame with a predefined format.

6. The method for encrypted storage of flight data according to claim 1, characterized in that: The step of allocating storage space for the data frames in the encoded data packets according to the data levels to which they belong, dividing the storage space into a fixed area and a dynamic area, and establishing a storage space mapping table to obtain the stored data packets includes: Performing space requirement analysis on the data frames in the encoded data packets, calculating the storage capacity required for each data level, obtaining space requirement data, and dividing the storage device into a fixed area for storing key system information and a dynamic area for storing dynamic data, obtaining divided area information; Reserving a fixed proportion of storage space for the data frames of the key data layer in the dynamic area to obtain a key data reserved space, and setting a cyclic overwriting and updating mechanism for the key data reserved space to obtain a cyclic storage area; Performing timeliness analysis on the data frames of the important data layer and the common data layer to obtain a data timeliness result, and dynamically allocating storage space in the dynamic area according to the data timeliness result to obtain a dynamically allocated space; Establishing an index structure for the encryption key fragments and metadata in the fixed area to obtain a fixed area index table, and establishing a data block index for the circular storage area and the dynamically allocated space to obtain a dynamic area index table; The fixed area index table and the dynamic area index table are merged to generate a storage space mapping table to obtain mapping relationship data, and multiple copies of the mapping relationship data are created to obtain backup mapping data; The physical positions of the data frames stored in the circular storage area and the dynamically allocated space are recorded to obtain position record data, and the position record data and the backup mapping data are integrated and packaged to obtain a stored data packet.

7. The method for encrypted storage of flight data according to claim 1, characterized in that: The method of performing cyclic redundancy check and integrity scanning on the stored data packet, performing abnormality detection by comparing the storage mapping table, and performing data repair by using redundant information encoded by Reed-Solomon to obtain an encrypted and stored flight data packet includes: Performing cyclic redundancy check processing on the data blocks in the stored data packets to obtain check result data, and comparing the check result data with the original check code to obtain a check comparison result; Performing a data integrity scan on the stored data packet according to the physical location recorded in the storage space mapping table to obtain an integrity scan result, and performing matching analysis on the integrity scan result and the storage space mapping table to obtain an abnormal data record; Performing data restoration on the data block in the abnormal data record by using redundant information encoded by Reed-Solomon to obtain a restored data block, and performing data validity verification on the restored data block to obtain verification result data; Marking the data blocks that cannot be repaired in the verification result data to obtain a data mark to be repaired, and retrieving corresponding data from the backup storage according to the data mark to be repaired to obtain backup supplementary data; The restored data block and the backup supplementary data are integrated and processed, the storage space mapping table is updated to obtain a repaired data packet, and the integrity of the repaired data packet is confirmed to obtain an encrypted and stored flight data packet.

8. An encrypted storage system for flight data, used to implement the encrypted storage method for flight data as claimed in any one of claims 1 to 7, characterized in that: The encrypted storage system for flight data includes: The acquisition module is used to pre-process the original flight data collected by the flight data recorder to obtain a pre-processed data packet, wherein the pre-processed data packet includes a pre-processed flight parameter data block, a voice data block, a trajectory data block and verification information; A hierarchical module, used for performing hierarchical classification processing on the pre-processed data packet, dividing the data into a key data layer, an important data layer and a common data layer, and classifying the data in each layer according to the data type to obtain a hierarchical classification data packet, wherein the hierarchical classification data packet includes a category identifier and a metadata description file; An encryption module is used to perform multi-level encryption processing on the hierarchical classification data packets using encryption algorithms of different strengths according to different data levels, generate encryption keys and perform dispersed storage to obtain encrypted data packets; A compression module, used to compress the encrypted data packet by using a time series compression algorithm, a wavelet transform compression algorithm and a DCT compression algorithm, and perform redundancy check processing by using Reed-Solomon coding to obtain a coded data packet, wherein the coded data packet includes a data frame having a predefined format; An allocation module, configured to allocate storage space for the data frames in the encoded data packets according to the data layers to which they belong, divide the storage space into a fixed area and a dynamic area, and establish a storage space mapping table to obtain stored data packets; The scanning module is used to perform cyclic redundancy check and integrity scan on the stored data packets, perform anomaly detection by comparing the storage mapping table, and perform data repair through Reed-Solomon encoded redundant information to obtain encrypted and stored flight data packets.

9. A computer-readable storage medium having instructions stored thereon, characterized in that: When the instructions are executed by a processor, the method for encrypted storage of flight data as described in any one of claims 1 to 7 is implemented.

Images