One-way data transmission method and device based on frame synchronization and feedback mechanism

Abstract

The invention relates to the technical field of information storage, information input, data transmission and the like, in particular to a one-way data transmission method and device based on frame synchronization and a feedback mechanism. A frame number is distributed for a data frame in a non-trust area, each data frame and the frame number of the data frame are coded in an image frame, image frame data are displayed on a display screen, the frame number of the image frame is transmitted to the trust area through a frame synchronous transmission channel, and a trust area end receives the frame number and then controls a high-speed camera to photograph the display screen at the non-trust area end. Therefore, image frame data transmitted by a non-trust area end is sampled, and a data processor unit at the inner end of a trust area recovers a data frame and a frame number transmitted by each image frame and then calculates data integrity verification data of the recovered data frame and the frame number so as to judge whether the data frame is successfully transmitted or not. According to the invention, the reliability and safety of data transmission are improved.

Description

Technical Field

[0001] The present invention relates to the technical fields of information storage, information input, data transmission, etc., and in particular to a unidirectional data transmission method and device based on frame synchronization and feedback mechanism. Background Art

[0002] Existing one-way physical isolation devices do not establish physical backup between the two networks, and usually use a simulated artificial data "copying" method. This method is inefficient, especially when dealing with large amounts of data or high-frequency transmission requirements. In addition, due to the lack of a real-time feedback mechanism, existing devices require additional processing and verification steps during data transmission, which will significantly increase the delay of data transmission, especially in scenarios where real-time data transmission is required, and it is difficult to meet real-time requirements. In addition, due to design limitations, existing one-way physical isolation devices usually do not have a "handshake" confirmation function, which makes it impossible to detect and repair transmission errors in a timely manner during data transmission, which may cause data loss or transmission errors. Finally, existing devices mostly use a "2+1" model (internal network host, external network host, one-way imported isolation component). This fixed model is difficult to adapt to complex network environments and voice application requirements, especially when facing multi-node, multi-path data transmission scenarios, and the scalability is obviously insufficient.

[0003] Therefore, existing technologies and equipment have obvious problems in terms of data transmission efficiency, real-time performance, reliability, etc. Summary of the invention

[0004] In view of the above-mentioned deficiencies in the prior art, the technical problem to be solved by the present invention is to provide a unidirectional data transmission method based on frame synchronization and feedback mechanism which can improve the efficiency, real-time performance and reliability of device data transmission.

[0005] In order to solve the above technical problems, the present invention adopts the following technical solution: a one-way data transmission method based on frame synchronization and feedback mechanism, a dual-channel data transmission mechanism for realizing data transmission from an untrusted zone to a trusted zone, comprising the following steps:

[0006] a. At the non-trust zone end, the service data is divided into multiple data frames F i Each data frame to be transmitted is assigned a unique frame number S i ;

[0007] b. Each data frame F in step a i and its frame number S i Encoded in an image frame I i and displayed on the image display device, and the image frame I is transmitted through the frame synchronization transmission channel i The frame number S i Transfer from the untrusted zone to the trusted zone;

[0008] c. Establish a service data channel through the image display device and the image acquisition device, and receive the frame number S at the trust zone end i After that, verify the frame number S i Is it correct? If the frame number S i If the image acquisition device is controlled to take a photo of the information shown by the image display device, the image frame I displayed by the image display device can be synchronously acquired. i ' data; otherwise, re-verify whether the frame number Si is correct. If the verification exceeds the specified threshold, the image frame will not be sampled and the frame image will be discarded;

[0009] d. The trust zone end data processor unit restores the image frame I i 'Transmitted data frame F i ' and frame number S i ′, and calculate the data integrity check data C i ′;

[0010] e. Compare data integrity and verify data C i and data integrity check data C i ', if they are the same, the transmission is successful, if they are different, repeat the above steps and retransmit.

[0011] Further, in step b, an image frame encoding algorithm is used to encode each data frame F i and its frame number S i Embedded into an image frame I i , the image frame I i Contains complete data information.

[0012] Furthermore, the data processing unit in step d restores the image frame I by an image recognition method. i ', data frame F i ' and frame number S i ′, and calculate the data integrity check data C i ′.

[0013] Furthermore, the image display device in step b uses a display screen, the frame synchronization transmission channel in step c uses infrared communication, and the image acquisition device in step d uses a camera, and the trust zone triggers the camera to shoot after receiving the synchronization information.

[0014] Furthermore, the data frame is divided to divide the service data D into multiple data frames F i , the size of each data frame is S F Bytes, the total size of business data is S D Bytes, the total number of data frames is: Where N is the number of data frames, Indicates rounding up.

[0015] Furthermore, the frame number is assigned, and each data frame F i Assigned a frame number S i , increasing continuously from 1 to N, the frame number is passed through S i =i where i=1, 2, ..., N is generated.

[0016] Furthermore, the data frame F i and frame number S i , encoded into image frame I i The method is: use a specific encoding algorithm to convert the data frame F i Embedded into image frame I i In the low-bit pixels of , each pixel embeds L bits of data, and the total amount of data that can be embedded in the image frame is:

[0017]

[0018] Frame number embedding: embed the frame number S i Embedded into image frame I i The specified position is usually the image frame I i The metadata area of ​​​​the

[0019] Generate image frame I using hash function i The integrity check data C i , the calculation formula is as follows:

[0020] H(·):C i =H(I i ).

[0021] Furthermore, the frame synchronization transmission channel transmits the frame sequence number S through the physical channel. i and data integrity check data C i , calculated using the following formula:

[0022] T i ={S i , C i}

[0023] Among them, T i It is a data packet transmitted through the frame synchronization transmission channel.

[0024] Furthermore, the trust zone receives and processes data, synchronously samples and decodes image frames. i After that, the display screen in the non-trusted area is synchronously sampled to capture image frame I i ′;

[0025] Decode data frame: From image frame I i ′ extract the data frame Fi ' and frame number S i ′;

[0026] Verify data integrity by comparing received data C i and the regenerated data integrity check data C i ′;

[0027] Verify data integrity: C′ i =H(I′ i );

[0028] If C i =C i ′, the data is considered complete, if not equal, it needs to be retransmitted.

[0029] A unidirectional data transmission device based on the frame synchronization and feedback mechanism of the above method comprises:

[0030] Untrusted area, which includes the display screen and infrared transmitter;

[0031] Trust zone, the trust zone includes the camera and the infrared receiving head, the infrared transmitting head and the infrared receiving head form a frame number I i Transmission channel from the untrusted zone to the trusted zone;

[0032] Frame synchronization transmission channel: used to transmit frame sequence number S i From untrusted zone to trusted zone;

[0033] Trust zone end data processor unit: Use image recognition method to restore data frame F i ', frame number S i ′ and data integrity check data C i ′ and verify the integrity of the data.

[0034] In summary, the present invention has the following beneficial effects:

[0035] (1) Use a dual-channel transmission mechanism, that is, use a frame synchronization data channel based on frame synchronization high-speed infrared codec transceiver technology and a business data channel through a high-speed display screen and a high-speed camera. Associate each frame number in the transmission with the image frame data transmitted through the business data transmission channel with the same "frame number", complete the data integrity check data verification of the frame synchronization transmission channel, realize the frame synchronization feedback mechanism, and confirm the correctness of the data transmission of the business data transmission channel.

[0036] (2) The untrusted zone correctly sends and displays the image frame data. The data processor unit at the untrusted zone notifies the data processor unit at the trusted zone to take a photo and sample the image frame data through the frame sequence number transmitted through the frame synchronization transmission channel. In this synchronization mode, the data processor unit at the trusted zone only needs to take a photo and sample once for each image frame transmitted by the untrusted zone to correctly sample the image frame data sent by the external network, and finally recognize and restore each data frame sent by the untrusted zone. This method can solve the problem that the data processor unit at the trusted zone needs to take more than one photo and sample for each image frame transmitted by the untrusted zone before it can correctly recognize and restore the image frame data transmitted by the external network, thereby greatly improving the transmission efficiency.

[0037] (3) In the data transmission method based on frame synchronization, the kernel thread of the data processor unit of the trusted end receives the frame sequence number and data integrity verification data and then takes a photo to sample the image frame displayed by the untrusted end, ensuring that the trusted end can correctly sample each image frame data transmitted by the untrusted end. The method based on frame synchronization can effectively eliminate the file reading and writing behavior of the untrusted end from occupying resources, thereby improving the robustness and stability of data transmission.

[0038] (4) In the data transmission method based on frame synchronization, the frame sequence number of the frame synchronization transmission channel and the frame sequence number built into the business data image frame are correspondingly associated. After receiving the frame sequence number of the frame synchronization transmission channel, the data processor unit at the trust zone end will take a photo to sample the image frame data displayed at the non-trust zone end. The method of synchronously receiving the image frame data, buffering and storing the image frame data, and then decoding and restoring the image frame data can eliminate the influence of the trusted zone file reading and writing on the processor resource occupation and the data recovery at the intranet end. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] Figure 1 Schematic diagram of data transmission from the untrusted zone to the trusted zone.

[0040] The accompanying drawings are described as follows: 1. non-trusted zone; 2. trusted zone; 3. camera; 4. display screen; 5. infrared transmitter; 6. infrared receiver; 7. frame synchronization transmission channel. DETAILED DESCRIPTION

[0041] The present invention is further described in detail below in conjunction with embodiments.

[0042] Embodiment 1:

[0043] The one-way data transmission method based on frame synchronization and feedback mechanism, the high-speed data transmission mechanism is divided by data frame group: in the untrusted area 1, the business data to be transmitted is divided into multiple data frame groups, each of which is F i Assign a unique frame number S i The frame number S iUsed to identify data frame F i To achieve data transmission from untrusted zone 1 to trusted zone 2, the following steps are included:

[0044] a. At the non-trust zone end, each data frame F to be transmitted i Assign a unique frame number S i .

[0045] b. Each data frame F in step a i and its frame number S i Encoded in an image frame I i and displayed on the image display device, and the image frame I is transmitted through the frame synchronization transmission channel 7 i The frame number S i Transfer from untrusted zone 1 to trusted zone 2.

[0046] c. Use the image display device and the image acquisition device to establish a business data channel, and receive the frame number S at the trust zone end i After that, verify the frame number S i Is it correct? If the frame number S i If the image acquisition device is controlled to take a photo of the information shown by the image display device, the image frame I displayed by the business data channel is synchronously acquired. i ' data; otherwise, re-verify whether the frame number Si is correct. If the verification exceeds the specified threshold, the image frame I i Take a photo and sample it, and discard the frame image.

[0047] d. The trust zone end data processor unit restores each image frame I through an image recognition method i ' information, including data frame F i ' and frame number S i ′, and calculate the data integrity check data C i ′.

[0048] e. Compare and verify data integrity and check data C i and data integrity check data C i ', if they are the same, the transmission is successful, if they are different, repeat the above step b.

[0049] Embodiment 2:

[0050] The untrusted zone 1 includes a display screen 4 and an infrared emitting head 5 .

[0051] Trust zone 2, trust zone 2 includes a camera 3 and an infrared receiving head 6.

[0052] Frame synchronization transmission channel 7: used to transmit frame sequence number S i From untrusted zone 1 to trusted zone 2.

[0053] Trust zone end data processor unit: used for image recognition method to recover data frame F i ', frame number S i ′ and data integrity check data C i ′ and verify the integrity of the data.

[0054] The one-way data transmission method based on frame synchronization and feedback mechanism is characterized in that, in order to realize a dual-channel data transmission mechanism for data transmission from an untrusted zone to a trusted zone, the method comprises the following steps:

[0055] a. At the non-trust zone end, the service data is divided into multiple data frames F i , each data frame F to be transmitted i Assign a unique frame number S i .

[0056] b. Each data frame F in step a i and its frame number S i Encoded in an image frame I i In the image frame I i Contains data frame F i , frame number S i and data integrity check data C i , and displayed on the image display device, the image frame I is transmitted through the frame synchronization transmission channel i The frame number S i Transfer from the untrusted zone to the trusted zone.

[0057] c. Use the image display device and the image acquisition device to establish a business data channel, and receive the frame number S at the trust zone end i After that, verify the frame number S i Is it correct? If the frame number S i If the image acquisition device is controlled to take a photo of the information shown by the image display device, the image frame I displayed by the business data channel is synchronously acquired. i ' data, otherwise re-verify whether the frame sequence number Si is correct. If the verification exceeds the specified threshold, the image frame I i Take a photo and sample it, and discard the frame image.

[0058] The image display device in step b uses display screen 4, the frame synchronization transmission channel 7 in step c uses infrared communication, and the image acquisition device in step d uses camera 3. After the trust zone 2 receives the synchronization information, it triggers the camera 3 to shoot.

[0059] Image frame encoding: Use a specific encoding algorithm to encode each data frame F i and its frame number S i Embedded into an image frame Ii Through this encoding process, the image frame I i Contains complete data information while maintaining the refresh rate of the display screen 4 to facilitate synchronous shooting of the camera 3. Image frame I i Contains data frame F i , frame number S i and data integrity check data C i .

[0060] Frame synchronization transmission channel 7: In addition to the transmission of image frames, the independent frame synchronization channel 7 is used to transmit the frame sequence number S i This channel is implemented through infrared communication, ensuring that the trust zone 2 can receive the synchronization information and trigger the shooting operation of the camera 3.

[0061] d. The trust zone end data processor unit restores the image frame I i 'Transmitted data frame F i ' and frame number S i ′, and calculate the data integrity check data C i ′.

[0062] e. Compare data integrity and verify data C i and data integrity check data C i ', if they are the same, the transmission is successful, if they are different, repeat the above steps and retransmit.

[0063] Based on the one-way data transmission method based on frame synchronization and feedback mechanism of embodiment 1 and embodiment 2, in step b, an image frame encoding algorithm is used to encode each data frame F i and its frame number S i Embedded into an image frame I i , the image frame I i Contains complete data information.

[0064] The frame synchronization transmission channel transmission frame number S in step b i , the data processing unit in step d restores the image frame I i ′, data frame F i ' and frame number S i ′, and calculate the data integrity check data C i ', compare the data integrity check data C according to step e i and data integrity check data C i ′, verify the accuracy of data transmission.

[0065] This involves operations such as data frame division, frame number allocation, image frame encoding, frame number embedding, frame synchronization transmission and decoding.

[0066] Data frame division: divide the service data D into multiple data frames F i , the size of each data frame is S F Bytes, the total size of business data is S D Bytes, the total number of data frames is: Where N is the number of data frames, Indicates rounding up.

[0067] Frame number allocation, each data frame F i Assigned a frame number S i , increasing continuously from 1 to N, the frame number is passed through S i =i where i=1, 2, ..., N is generated.

[0068] Image frame encoding, data frame F i and frame number S i Encoded into an image frame I i , image frame format, assuming that the resolution of the image frame is W×H pixels, the color depth of each pixel is B bits, and the total size of the image frame is S I :S I =W×H×Bbits; the data frame F i and frame number S i , the method of encoding into the image frame is: using a specific encoding algorithm, the data frame F i Embedded into image frame I i In the low-bit pixels of , each pixel embeds L bits of data, and the total amount of data that can be embedded in the image frame is:

[0069]

[0070] Frame number embedding: embed the frame number S i Embedded into image frame I i The specified location of the image frame is usually a metadata area or a specific pixel area;

[0071] Verification data generates integrity verification data C of the image frame i , used to verify the integrity of the data later, using the hash function H(·): C i =H(I i ) Generate image frame I i The integrity check data C i .

[0072] Frame synchronization transmission channel 7, frame sequence number S is transmitted through the physical channel i Sum check data C i , calculated using the following formula:

[0073] T i ={S i, C i}

[0074] Among them, T i It is a data packet transmitted through the frame synchronization transmission channel.

[0075] Data reception and processing in trust zone 2, synchronous sampling and image frame decoding. Camera 3 in trust zone 2 receives T i After that, the display screen 4 of the untrusted area 1 is synchronously sampled to capture the image frame I i ′;

[0076] Decode data frame: From image frame I i ′ extract the data frame F i ' and frame number S i ′;

[0077] By comparing the received verification data C i and the regenerated calibration data C i ′;

[0078] Verify data integrity: C′ i =H(I′ i );

[0079] If C i =C i ′, the data is considered complete, if not equal, it needs to be retransmitted.

[0080] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included in the protection scope of the present invention.

Claims

1. A one-way data transmission method based on frame synchronization and feedback mechanism, characterized in that: In order to realize the dual-channel data transmission mechanism for data transmission from the untrusted zone (1) to the trusted zone (2), the following steps are included: a. At the non-trust zone end, the service data is divided into multiple data frames F i , each data frame F to be transmitted i Assign a unique frame number S i ; b. Each data frame F in step a i and its frame number S i Encoded in an image frame I i In the image frame I i Contains data frame F i , frame number S i and data integrity check data C i , and displayed on the image display device, the image frame I is transmitted through the frame synchronization transmission channel (7) i The frame number S i Transfer from the untrusted zone (1) to the trusted zone (2); c. Use the image display device and the image acquisition device to establish a business data channel, and receive the frame number S at the trust zone end i After that, verify the frame number S i Is it correct? If the frame number S i If the image acquisition device is controlled to take a photo of the information shown by the image display device, the image frame I displayed by the business data channel is synchronously acquired. i ' data; otherwise, re-verify whether the frame number Si is correct. If the verification exceeds the specified threshold, the image frame I i Take a photo and sample it, and discard the frame image; d. The trust zone end data processor unit restores the image frame I i 'Transmitted data frame F i ' and frame number S i ′, and calculate the data integrity check data C i ′; e. Compare data integrity and verify data C i and data integrity check data C i ', if they are the same, the transmission is successful, if they are different, repeat the above steps and retransmit.

2. The one-way data transmission method based on frame synchronization and feedback mechanism according to claim 1, characterized in that: In step b, an image frame encoding algorithm is used to encode each data frame F i and its frame number S i Embedded into an image frame I i , the image frame I i Contains complete data information.

3. The one-way data transmission method based on frame synchronization and feedback mechanism according to claim 2, characterized in that: The data processing unit in step d restores the image frame I by an image recognition method. i ', data frame F i ' and frame number S i ′, and calculate the data integrity check data C i ′.

4. The one-way data transmission method based on frame synchronization and feedback mechanism according to claim 3 is characterized in that: The image display device in step b uses a display screen (4), the frame synchronization transmission channel (7) in step c uses infrared communication, and the image acquisition device in step d uses a camera (3), and the trust zone triggers the camera to shoot after receiving the synchronization information.

5. The one-way data transmission method based on frame synchronization and feedback mechanism according to claim 1, characterized in that: Data frame division: divide the service data D into multiple data frames F i , the size of each data frame is S F Bytes, the total size of business data is S D Bytes, the total number of data frames is: Where N is the number of data frames, Indicates rounding up.

6. The one-way data transmission method based on frame synchronization and feedback mechanism according to claim 1, characterized in that: Frame number allocation, each data frame F i Assigned a frame number S i , increasing continuously from 1 to N, the frame number is passed through S i =i where i=1, 2, ..., N is generated.

7. The one-way data transmission method based on frame synchronization and feedback mechanism according to claim 3, characterized in that: The data frame F i and frame number S i , encoded into image frame I i The method is: use a specific encoding algorithm to convert the data frame F i Embedded into image frame I i In the low-bit pixels of , each pixel embeds L bits of data, and the total amount of data that can be embedded in the image frame is: Frame number embedding: embed the frame number S i Embedded into image frame I i The specified position is usually the image frame I i Metadata area of ​​​​the image frame I is generated using a hash function i The integrity check data C i , the calculation formula is as follows: H(·):C i =H(I i )。 8. The one-way data transmission method based on frame synchronization and feedback mechanism according to claim 3, characterized in that: Frame synchronization transmission channel (7), which transmits the frame sequence number S through the physical channel i and data integrity check data C i , calculated using the following formula: T i ={S i ,C i } Among them, T i It is a data packet transmitted through the frame synchronization transmission channel.

9. The one-way data transmission method based on frame synchronization and feedback mechanism according to claim 4, characterized in that: Data reception and processing in trust zone (2), synchronous sampling and image frame decoding The camera in trust zone (2) receives T i Then, the display screen (4) of the non-trusted area (1) is synchronously sampled to capture the image frame I i ′; Decode data frame: From image frame I i ′ extract the data frame F i ' and frame number S i ′; Verify data integrity by comparing received data C i and the regenerated data integrity check data C i ′; Verify data integrity: C′ i =H(I′ i ); If C i =C i ′, the data is considered complete, if not equal, it needs to be retransmitted.

10. A device for a one-way data transmission method based on frame synchronization and feedback mechanism according to any one of claims 1 to 9, characterized in that: include: An untrusted zone (1), the untrusted zone (1) comprising a display screen (4) and an infrared emitting head (5); A trust zone (2), the trust zone (2) includes a camera (3) and an infrared receiving head (6), the infrared transmitting head (5) and the infrared receiving head (6) form a frame synchronization transmission channel (7) from the untrusted zone (1) to the trust zone (2); Frame synchronization transmission channel (7): used to transmit the frame sequence number S i and data integrity check data C i From the untrusted zone (1) to the trusted zone (2); Trust zone end data processor unit: Use image recognition method to restore data frame F i ', frame number S i ′ and data integrity check data C i ′ and verify the integrity of the data.

Images