One-way data transmission method and device based on frame synchronization and feedback mechanism

Abstract

The present invention relates to the technical fields of information storage, information input, data transmission, etc., and in particular to a one-way data transmission method and device based on frame synchronization and feedback mechanism. 𝑖 Assign a frame number 𝑆 𝑖 , each data frame 𝐹 𝑖 and its frame number 𝑆 𝑖 Encoded in an image frame 𝐼 𝑖 In the image frame 𝐼 𝑖 The data is displayed on the display, and the image frame 𝐼 𝑖 The frame number 𝑆 𝑖 The data is transmitted to the trusted zone via a frame synchronization transmission channel. After receiving the data, the trusted zone end controls the speed camera to take a picture of the display screen at the untrusted zone end, thereby sampling the image frame data transmitted by the untrusted zone end. The data processor unit at the trusted zone end recovers the data frame and frame sequence number of each image frame transmission and then calculates the data integrity check data of the recovered data frame and frame sequence number to determine whether the data frame transmission is successful. The present invention improves the reliability and security of data transmission.

Description

Technical Field

[0001] The present invention relates to the technical fields of information storage, information input, data transmission, and the like, and in particular to a one-way data transmission method and device based on frame synchronization and feedback mechanism. Background Art

[0002] Existing one-way physical isolation devices do not establish physical backup between the two networks, and usually use a method of simulating manual data "copying". This method is inefficient, especially when dealing with large amounts of data or high-frequency transmission needs. In addition, due to the lack of a real-time feedback mechanism, existing devices require additional processing and verification steps during the data transmission process, which significantly increases the delay of data transmission. Especially in scenarios where real-time data transmission is required, it is difficult to meet real-time requirements. In addition, due to design limitations, existing one-way physical isolation devices usually do not have a "handshake" confirmation function, which makes it impossible to detect and repair transmission errors in a timely manner during the data transmission process, which may cause data loss or transmission errors. Finally, existing devices mostly use a "2+1" model (internal network host, external network host, one-way imported isolation component). This fixed model is difficult to adapt to complex network environments and voice application requirements, especially when facing multi-node, multi-path data transmission scenarios, and its scalability is obviously insufficient.

[0003] Therefore, existing technologies and equipment have obvious problems in data transmission efficiency, real-time performance, reliability, etc. Summary of the Invention

[0004] In view of the above-mentioned deficiencies in the prior art, the technical problem to be solved by the present invention is to provide a unidirectional data transmission method based on frame synchronization and feedback mechanism that can improve the efficiency, real-time performance and reliability of device data transmission.

[0005] To solve the above technical problems, the present invention adopts the following technical solution: a one-way data transmission method based on frame synchronization and feedback mechanism, which is a dual-channel data transmission mechanism for realizing data transmission from an untrusted zone to a trusted zone, including the following steps:

[0006] a. At the non-trust zone end, the business data is divided into multiple data frames F i , each data frame to be transmitted is assigned a unique frame sequence number S i ;

[0007] b. Each data frame F in step a i and its frame number S i Encoded in an image frame I i and displayed on the image display device, and the image frame I is transmitted through the frame synchronization transmission channel i Frame number S i and data integrity check data Ci Transfer from the untrusted zone to the trusted zone;

[0008] c. Use the image display device in the non-trusted zone and the image acquisition device in the trusted zone to establish a service data channel, and receive the frame sequence number S at the trusted zone end. i After that, verify the frame number S i Is it correct? If the frame number S i If the image acquisition device receives the image frame I shown by the image display device, i Sampling is performed and the sampled image frame I is obtained through the service data channel i 'Transmission from the non-trusted zone to the trusted zone; otherwise re-verify the frame sequence number S i Is it correct? Verify that the threshold is exceeded and the image frame I is not correct. i Sampling is performed and the image frame I is discarded i ;

[0009] d. The trust zone end data processor unit restores the image frame I i 'Transmitted data frame F i ' and frame number S i ′, and calculate the data integrity check data C i ';

[0010] e. Compare data integrity and verify data C i and data integrity check data C i ', if they are the same, the transmission is successful; if they are different, repeat the above steps and retransmit.

[0011] Furthermore, in step b, an image frame encoding algorithm is used to encode each data frame F i and its frame number S i Embedded into an image frame I i , the image frame I i Contains complete data information.

[0012] Furthermore, the data processing unit in step d restores the image frame I by an image recognition method. i ', data frame F i ' and frame number S i ′, and calculate the data integrity check data C i ′.

[0013] Furthermore, the frame synchronization transmission channel in step b adopts infrared communication, the image display device in step c adopts a display screen, and the image acquisition device in step c adopts a camera. After the trust zone receives the synchronization information, it triggers the camera to shoot.

[0014] Furthermore, data frame division is performed to divide the service data D into multiple data frames F. i, the size of each data frame is S F Bytes, the total size of business data is S D Bytes, the total number of data frames is: Where N is the number of data frames, Indicates rounding up.

[0015] Furthermore, the frame number is assigned, and each data frame F i Assigned a frame number S i , increasing continuously from 1 to N, the frame number is passed through S i =i where i=1, 2, ..., N is generated.

[0016] Furthermore, the data frame F i and frame number S i , encoded into image frame I i The method is: use the encoding algorithm to convert the data frame F i Embedded into image frame I i In the low-order pixels of , each pixel embeds L bits of data, and the total amount of data that can be embedded in the image frame is:

[0017] Among them, S embedded Indicates the total amount of data after L bits of data are embedded in an image frame with a resolution of W*H pixels; W represents the number of horizontal pixels in the image; H represents the number of vertical pixels in the image; L is the number of L bits of data embedded in each pixel;

[0018] Frame number embedding: embed the frame number S i Embedded into image frame I i The metadata area;

[0019] Generate image frame I using hash function i Integrity check data C i , the calculation formula is as follows:

[0020] H(·):C i =H(I i ).

[0021] Furthermore, the frame synchronization transmission channel transmits the frame sequence number S through the physical channel. i and data integrity check data C i , calculated using the following formula:

[0022] T i ={S i , C i}, where Ti is the data packet transmitted through the frame synchronization transmission channel.

[0023] Furthermore, the trust zone receives and processes data, and synchronizes sampling and image frame decoding. i Then, the display screen in the non-trusted area is sampled synchronously to capture the image frame I i ';

[0024] Decode data frame: from image frame I i ′ extract the data frame F i ' and frame number S i ';

[0025] Verify data integrity by comparing received data C i and the regenerated data integrity check data C i ';

[0026] Verify data integrity: C′ i =H(I′ i );

[0027] If C i =C i ′, the data is considered complete, if not equal, it needs to be retransmitted.

[0028] A unidirectional data transmission device with a frame synchronization and feedback mechanism based on the above method includes:

[0029] Untrusted area, which includes the display screen and infrared transmitter;

[0030] Trust zone, the trust zone includes the camera and the infrared receiving head, the infrared transmitting head and the infrared receiving head form the frame number I i Transmission channel from the untrusted zone to the trusted zone;

[0031] Frame synchronization transmission channel: used to transmit frame sequence number S i From the untrusted zone to the trusted zone;

[0032] Trust zone end data processor unit: Use image recognition method to restore data frame F i ', frame number S i ′ and data integrity check data C i ′ and verify the integrity of the data.

[0033] In summary, the present invention has the following beneficial effects:

[0034] (1) Use a dual-channel transmission mechanism, that is, use a frame synchronization data channel based on frame synchronization high-speed infrared codec transceiver technology and a high-speed display screen and high-speed camera to establish a business data channel. Each frame sequence number in the transmission is associated with the image frame data transmitted by the business data transmission channel with the same "frame sequence number", complete the data integrity check data verification of the frame synchronization transmission channel, realize the frame synchronization feedback mechanism, and confirm the correctness of the data transmission of the business data transmission channel.

[0035] (2) The untrusted zone correctly sends and displays the image frame data. The untrusted zone data processor unit notifies the trusted zone data processor unit of the frame sequence number transmitted through the frame synchronization transmission channel to take a photo and sample the image frame data. In this synchronization mode, the trusted zone data processor unit only needs to take a photo and sample once for each image frame transmitted by the untrusted zone to correctly sample the image frame data sent by the external network end, thereby ultimately identifying and recovering each data frame sent by the untrusted zone. This method can solve the problem that the trusted zone data processor unit needs to take multiple photos and samples for each image frame transmitted by the untrusted zone end before it can correctly identify and recover the image frame data transmitted by the external network end, thereby greatly improving transmission efficiency.

[0036] (3) In the data transmission method based on frame synchronization, the kernel thread of the data processor unit of the trusted end receives the frame sequence number and data integrity verification data, and then takes a photo to sample the image frame displayed by the untrusted end, ensuring that the trusted end can correctly sample each image frame data transmitted by the untrusted end. The method based on frame synchronization can effectively eliminate the file reading and writing behavior of the untrusted end from occupying resources, thereby improving the robustness and stability of data transmission.

[0037] (4) In a data transmission method based on frame synchronization, the frame sequence number of the frame synchronization transmission channel corresponds to the frame sequence number built into the service data image frame. After receiving the frame sequence number of the frame synchronization transmission channel, the data processor unit at the trust zone end samples the image frame data displayed at the non-trust zone end. The method of synchronously receiving the image frame data, buffering and storing the image frame data, and then decoding and restoring the image frame data can eliminate the impact of reading and writing files in the trust zone on processor resource usage and data recovery at the intranet end. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] Figure 1 Schematic diagram of data transmission from the non-trusted zone to the trusted zone.

[0039] The accompanying figures are described as follows: 1. non-trusted zone; 2. trusted zone; 3. camera; 4. display screen; 5. infrared transmitter; 6. infrared receiver; 7. frame synchronization transmission channel. DETAILED DESCRIPTION

[0040] The present invention will be further described in detail below with reference to the embodiments.

[0041] Example 1:

[0042] The one-way data transmission method based on frame synchronization and feedback mechanism, the high-speed data transmission mechanism is divided by data frame group: in the untrusted area 1, the business data to be transmitted is divided into multiple data frame groups, each of which F i Assign a unique frame number S i The frame number S i Used to identify data frame F i To achieve data transmission from untrusted zone 1 to trusted zone 2, the following steps are included:

[0043] a. At the non-trust zone end, each data frame F to be transmitted i Assign a unique frame number S i .

[0044] b. Each data frame F in step a i and its frame number S i Encoded in an image frame I i and displayed on the image display device, and the image frame I is transmitted through the frame synchronization transmission channel 7 i Frame number S i and data integrity check data C i Transfer from untrusted zone 1 to trusted zone 2.

[0045] c. Use the image display device in the non-trusted zone 1 and the image acquisition device in the trusted zone 2 to establish a service data channel, and receive the frame number S at the trusted zone end. i After that, verify the frame number S i Is it correct? If the frame number S i If the image acquisition device receives the image frame I shown by the image display device, i Sampling is performed and the sampled image frame I is obtained through the service data channel i 'Transmission from untrusted zone 1 to trusted zone 2; otherwise, re-verify whether the frame sequence number Si is correct. If the verification exceeds the specified threshold, the image frame I is not i Sampling is performed and the image frame I is discarded i ;.

[0046] d. The trust zone end data processor unit restores each image frame I by an image recognition method i ' information, including data frame F i ' and frame number S i ′, and calculate the data integrity check data C i ′.

[0047] e. Compare and verify data integrity check data Ci and data integrity check data C i ', if they are the same, the transmission is successful, if they are different, repeat the above step b.

[0048] Example 2:

[0049] The untrusted area 1 includes a display screen 4 and an infrared ray transmitter 5 .

[0050] Trust zone 2, trust zone 2 includes a camera 3 and an infrared receiving head 6.

[0051] Frame synchronization transmission channel 7: used to transmit frame sequence number S i From untrusted zone 1 to trusted zone 2.

[0052] Trust zone end data processor unit: used for image recognition method to recover data frame F i ', frame number S i ′ and data integrity check data C i ′ and verify the integrity of the data.

[0053] A unidirectional data transmission method based on frame synchronization and feedback mechanism is characterized in that, in order to realize a dual-channel data transmission mechanism for data transmission from an untrusted zone to a trusted zone, the method includes the following steps:

[0054] a. At the non-trust zone end, the business data is divided into multiple data frames F i , each data frame F to be transmitted i Assign a unique frame number S i .

[0055] b. Each data frame F in step a i and its frame number S i Encoded in an image frame I i In the image frame I i Contains data frame F i , frame number S i and data integrity check data C i , and displayed on the image display device, the image frame I is transmitted through the frame synchronization transmission channel i Frame number S i and data integrity check data C i Transfer from the untrusted zone to the trusted zone.

[0056] c. Use the image display device in the non-trusted zone 1 and the image acquisition device in the trusted zone 2 to establish a service data channel, and receive the frame number S at the trusted zone end. i After that, verify the frame number S i Is it correct? If the frame number S i If the image acquisition device receives the image frame I shown by the image display device,i Sampling is performed and the sampled image frame I is obtained through the service data channel i 'Transmission from untrusted zone 1 to trusted zone 2; otherwise, re-verify whether the frame sequence number Si is correct. If the verification exceeds the specified threshold, the image frame I is not i Sampling is performed and the image frame I is discarded i ;

[0057] The frame synchronization transmission channel 7 in step b uses infrared communication, the image display device in step c uses the display screen 4, and the image acquisition device in step c uses the camera 3. After the trust zone 2 receives the synchronization information, it triggers the camera 3 to shoot.

[0058] Image frame encoding: Use the encoding algorithm to encode each data frame F i and its frame number S i Embedded into an image frame I i Through this encoding process, the image frame I i Contains complete data information while maintaining the refresh rate of the display screen 4 to facilitate synchronous shooting of the camera 3. Image frame I i Contains data frame F i , frame number S i and data integrity check data C i .

[0059] Frame synchronization transmission channel 7: In addition to the transmission of image frames, the independent frame synchronization channel 7 is used to transmit the frame sequence number S i This channel is implemented through infrared communication, ensuring that the trust zone 2 can receive the synchronization information and trigger the shooting operation of the camera 3.

[0060] d. The trust zone end data processor unit restores the image frame I i 'Transmitted data frame F i ' and frame number S i ′, and calculate the data integrity check data C i ′.

[0061] e. Compare data integrity and verify data C i and data integrity check data C i ', if they are the same, the transmission is successful; if they are different, repeat the above steps and retransmit.

[0062] Based on the one-way data transmission method based on frame synchronization and feedback mechanism of embodiment 1 and embodiment 2, in step b, an image frame encoding algorithm is used to encode each data frame F i and its frame number S i Embedded into an image frame I i , the image frame I i Contains complete data information.

[0063] The frame synchronization transmission channel in step b transmits the frame sequence number S i , the data processing unit in step d restores the image frame I i ′, data frame F i ' and frame number S i ′, and calculate the data integrity check data C i ', compare the data integrity check data C according to step e i and data integrity check data C i ′, verify the accuracy of data transmission.

[0064] This involves operations such as data frame division, frame number allocation, image frame encoding, frame number embedding, frame synchronization transmission and decoding.

[0065] Data frame division, dividing the business data D into multiple data frames F i , the size of each data frame is S F Bytes, the total size of business data is S D Bytes, the total number of data frames is: Where N is the number of data frames, Indicates rounding up.

[0066] Frame number assignment, each data frame F i Assigned a frame number S i , increasing continuously from 1 to N, the frame number is passed through S i =i where i=1, 2, ..., N is generated.

[0067] Image frame encoding, data frame F i and frame number S i Encoded into an image frame I i , image frame format, assuming that the resolution of the image frame is W×H pixels, the color depth of each pixel is B bits, and the total size of the image frame is S I :S I =W×H×Bbits; the data frame F i and frame number S i , the method of encoding into the image frame is: using the encoding algorithm, the data frame F i Embedded into image frame I i In the low-order pixels of , each pixel embeds L bits of data, and the total amount of data that can be embedded in the image frame is:

[0068] Among them, S embedded Indicates the total amount of data after L-bit data is embedded in an image frame with a resolution of W*H pixels; W represents the number of horizontal pixels in the image; H represents the number of vertical pixels in the image; and L is the L-bit data embedded in each pixel.

[0069] Frame number embedding: embed the frame number S i Embedded into image frame I i metadata area or a specific pixel area;

[0070] Verification data generates integrity verification data C of the image frame i , used to subsequently verify the integrity of the data, using the hash function H(·): C i =H(I i ) Generate image frame I i Integrity check data C i .

[0071] Frame synchronization transmission channel 7, transmits frame sequence number S through the physical channel i Sum check data C i , calculated using the following formula:

[0072] T i ={S i , C i}, where T i It is a data packet transmitted through the frame synchronization transmission channel.

[0073] Trust zone 2 data reception and processing, synchronous sampling and image frame decoding Trust zone 2 camera 3 receives T i After that, the display screen 4 of the non-trusted area 1 is synchronously sampled to capture the image frame I i ';

[0074] Decode data frame: from image frame I i ′ extract the data frame F i ' and frame number S i ';

[0075] By comparing the received verification data C i and the regenerated calibration data C i ';

[0076] Verify data integrity: C′ i =H(I′ i );

[0077] If C i =C i ′, the data is considered complete, if not equal, it needs to be retransmitted.

[0078] The above description is only a preferred embodiment of the present invention and does not limit the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A one-way data transmission method based on frame synchronization and feedback mechanism, characterized in that: To realize a dual-channel data transmission mechanism for data transmission from an untrusted zone (1) to a trusted zone (2), the following steps are included: a. At the non-trust zone end, the business data is divided into multiple data frames F i , each data frame F to be transmitted i Assign a unique frame number S i ; b. Each data frame F in step a i and its frame number S i Encoded in an image frame I i In the image frame I i Contains data frame F i , frame number S i and data integrity check data C i , and displayed on the image display device, the image frame I is transmitted through the frame synchronization transmission channel (7) i Frame number S i and data integrity check data C i Transfer from the untrusted zone (1) to the trusted zone (2); c. Use the image display device in the non-trusted zone (1) and the image acquisition device in the trusted zone (2) to establish a service data channel, and receive the frame sequence number S at the trusted zone end. i After that, verify the frame number S i Is it correct? If the frame number S i If the image acquisition device receives the image frame I shown by the image display device, i Sampling is performed and the sampled image frame I is obtained through the service data channel i 'Transmission from the non-trust zone (1) to the trust zone (2); otherwise, re-verify whether the frame sequence number Si is correct. If the verification exceeds the specified threshold, the image frame I is not i Sampling is performed and the image frame I is discarded i ; d. The trust zone end data processor unit restores the image frame I i 'Transmitted data frame F i ' and frame number S i ′, and calculate the data integrity check data C i '; e. Compare data integrity and verify data C i and data integrity check data C i ', if they are the same, the transmission is successful; if they are different, repeat the above steps and retransmit.

2. The one-way data transmission method based on frame synchronization and feedback mechanism according to claim 1, characterized in that: In step b, use the image frame encoding algorithm to convert each data frame F i and its frame number S i Embedded into an image frame I i , the image frame I i Contains complete data information.

3. The one-way data transmission method based on frame synchronization and feedback mechanism according to claim 2, characterized in that: The data processing unit in step d restores the image frame I by an image recognition method. i ', data frame F i ' and frame number S i ′, and calculate the data integrity check data C i ′.

4. The one-way data transmission method based on frame synchronization and feedback mechanism according to claim 3, characterized in that: The frame synchronization transmission channel (7) in step b adopts infrared communication, the image display device in step c adopts a display screen (4), the image acquisition device in step c adopts a camera (3), and the trust zone triggers the camera to shoot after receiving the synchronization information.

5. The one-way data transmission method based on frame synchronization and feedback mechanism according to claim 1, characterized in that: Data frame division, dividing the business data D into multiple data frames F i , the size of each data frame is S F Bytes, the total size of business data is S D Bytes, the total number of data frames is: Where N is the number of data frames, Indicates rounding up.

6. The one-way data transmission method based on frame synchronization and feedback mechanism according to claim 1, characterized in that: Frame number assignment, each data frame F i Assigned a frame number S i , increasing continuously from 1 to N, the frame number is passed through S i =i where i=1, 2, ..., N is generated.

7. The one-way data transmission method based on frame synchronization and feedback mechanism according to claim 3, characterized in that: The data frame F i and frame number S i , encoded into image frame I i The method is: use the encoding algorithm to convert the data frame F i Embedded into image frame I i In the low-order pixels of , each pixel embeds L bits of data, and the total amount of data that can be embedded in the image frame is: Among them, S embedded Indicates the total amount of data after L bits of data are embedded in an image frame with a resolution of W*H pixels; W represents the number of horizontal pixels in the image; H represents the number of vertical pixels in the image; L is the number of L bits of data embedded in each pixel; Frame number embedding: embed the frame number S i Embedded into image frame I i The metadata area; Generate image frame I using hash function i Integrity check data C i , the calculation formula is as follows: H(·):C i =H(I i )。 8. The one-way data transmission method based on frame synchronization and feedback mechanism according to claim 7, characterized in that: Frame synchronization transmission channel (7), transmits frame sequence number S through physical channel i and data integrity check data C i , calculated using the following formula: T i ={S i , C i }, where Ti is the data packet transmitted through the frame synchronization transmission channel.

9. The one-way data transmission method based on frame synchronization and feedback mechanism according to claim 4, characterized in that: Trust zone (2) data reception and processing, synchronous sampling and image frame decoding Trust zone (2) camera receives T i Then, the display screen (4) of the non-trusted area (1) is sampled synchronously to capture the image frame I i '; Decode data frame: from image frame I i ′ extract the data frame F i ' and frame number S i '; Verify data integrity by comparing received data C i and the regenerated data integrity check data C i '; Verify data integrity: C′ i =H(I′ i ); If C i =C i ′, the data is considered complete, if not equal, it needs to be retransmitted.

10. A unidirectional data transmission device based on frame synchronization and feedback mechanism for implementing any one of claims 1 to 9, characterized in that: include: An untrusted area (1), the untrusted area (1) includes a display screen (4) and an infrared emitting head (5); The trust zone (2) includes a camera (3) and an infrared receiving head (6), and the infrared transmitting head (5) and the infrared receiving head (6) form a frame synchronization transmission channel (7) from the non-trust zone (1) to the trust zone (2); Frame synchronization transmission channel (7): used to transmit frame sequence number S i and data integrity check data C i From the untrusted zone (1) to the trusted zone (2); Trust zone end data processor unit: Use image recognition method to restore data frame F i ', frame number S i ′ and data integrity check data C i ′ and verify the integrity of the data.

Images