One-way information transmission method and device, electronic equipment and storage medium

Abstract

The invention discloses a one-way information transmission method and device, electronic equipment and a storage medium, relates to the technical field of information transmission, and mainly aims to realize low-cost one-way information transmission so as to reduce the operation cost of an enterprise. According to the main technical scheme, the method comprises the steps of obtaining to-be-transmitted target data of an intranet terminal; splitting the target data according to the type of the target data to obtain a plurality of target sub-data; encrypting each piece of target sub-data according to a preset encryption mode to obtain a plurality of pieces of target encrypted data; and outputting the plurality of target encrypted data on a display device of an intranet terminal in a preset display mode, so that an extranet terminal receiving device collects the target encrypted data.

Description

Technical Field

[0001] The present application relates to the field of communication transmission, and in particular to a one-way information transmission method, device, electronic device and storage medium. Background Art

[0002] In the digital age, information transmission has become an indispensable part of life and work, but many criminals use the two-way information interaction mechanism to sneak into the intranet of some enterprises and institutions to engage in illegal and criminal activities, such as stealing confidential information and snooping on business secrets. These behaviors have brought great risks to enterprises and institutions. Therefore, studying the method of one-way information transmission is of great practical significance for maintaining the security of the intranet of enterprises and institutions.

[0003] In the prior art, one-way information transmission is mainly carried out through network firewall technology. Network firewall technology uses physical isolation technology to isolate the public external network from the confidential internal network, and uses dedicated private protocols and equipment to transmit data to the external network in a one-way manner, blocking all potential attacks on the internal network and effectively preventing the leakage of confidential information.

[0004] However, in the process of transmitting information, the network gate technology is set at the junction of the public external network and the confidential internal network, and it has the status of a gateway. Once it goes down, data cannot be transmitted. Therefore, it is often necessary to configure multiple network gate devices for redundancy. However, network gate devices are expensive, which leads to a sharp increase in enterprise operating costs. Summary of the invention

[0005] In view of the above problems, the present disclosure proposes a one-way information transmission method, device, electronic device and storage medium, the main purpose of which is to achieve low-cost and secure one-way information transmission, thereby improving the security of information transmission.

[0006] In order to achieve the above objectives, the present disclosure mainly provides the following technical solutions:

[0007] In the first aspect, the present application discloses a one-way information transmission method, which is applied to the one-way display of information on an intranet terminal. The method includes: obtaining target data to be transmitted by the intranet terminal; splitting the target data according to the type of the target data to obtain multiple target sub-data; encrypting each target sub-data according to a preset encryption method to obtain multiple target encrypted data; outputting the multiple target encrypted data on the display device of the intranet terminal in a preset display method so that the external network terminal receiving device can collect the target encrypted data.

[0008] The one-way information transmission method provided in the first aspect of the present application is applied to the one-way display of information on an intranet terminal. First, the target data to be transmitted is obtained on the intranet terminal, and the target data is split according to different types to obtain multiple target sub-data. The multiple target encrypted data are sent on the display device in a preset display mode. Compared with the prior art, the present application completes the one-way information transmission only with the display device, and does not need to purchase expensive network gate equipment, saving the operating costs of the enterprise.

[0009] In some modified implementations of the first aspect of the present application, it is determined whether the type of target data is image data; if so, a cutting tool is called, and display parameters of a display device are obtained to configure cutting parameters of the cutting tool; the cutting tool is used to split the image data to obtain multiple target sub-data.

[0010] This embodiment first determines whether the type of target data is image data. If it is image data, the display parameters of the display device are obtained, the cutting parameters of the cutting tool are configured according to the display parameters, and finally the image data is split using the cutting tool to obtain multiple target sub-data. Since the target sub-data obtained in this way are cut by the cutting tool configured according to the display device parameters, they are well adapted to the display device, avoiding the problem of target sub-data loss caused by the display device being unable to display part of the target sub-data due to parameter restrictions, thereby improving the reliability of information transmission.

[0011] In some modified implementations of the first aspect of the present application, the obtained target sub-data are labeled according to the splitting order; the labeled target sub-data are encrypted according to a preset encryption method to obtain multiple target encrypted data.

[0012] In this embodiment, the target sub-data obtained are first marked according to the splitting order, and then the marked target sub-data are encrypted according to a preset encryption method to obtain multiple target encrypted data. Since the marked target sub-data are encrypted according to a preset encryption method to obtain multiple target encrypted data, the security of information transmission is improved.

[0013] In some modified implementations of the first aspect of the present application, a preset display method is determined according to the type of target data; a display request carrying the preset display method is sent to a display device of an intranet terminal; and based on the response information of the display request, multiple target encrypted data are sent to the display device and output for display in the preset display method.

[0014] This embodiment first determines the preset display mode according to the type of target data, then sends a display request carrying the preset display mode to the display device of the intranet terminal, and finally sends multiple target encrypted data to the display device according to the response information of the display request, and outputs the display in the preset display mode. Due to the interactive communication with the display device, an idle display device can be found, avoiding the problem of multiple target encrypted data being concentrated in one display device and queuing in the middle, causing communication congestion, and improving the transmission efficiency of information transmission.

[0015] In some modified implementations of the first aspect of the present application, when there are multiple display devices, it is determined whether the display request carries the target display device identifier; if so, the display request is sent to the target display device; if not, the target display device to which the display request is to be sent is determined according to the location information of the receiving device, and a prompt message is triggered to prompt manual determination of whether the target display device is correct.

[0016] In this embodiment, there are multiple display devices. First, it is determined whether the display request carries the target display device identifier. If so, the display request is sent to the target display device. If not, the target display device is determined based on the location information of the receiving device, and a manual check is prompted. When the display request is faced with packet loss, resulting in the display request not containing the target display device identifier, a prompt is triggered, and then a manual check is prompted to determine the display device, thereby improving the accuracy of information transmission.

[0017] In some modified implementations of the first aspect of the present application, multiple target encrypted data are sent to a display device of an intranet terminal in a random order for output and display. In this embodiment, since multiple target encrypted data are sent to a display device of an intranet terminal in a random order for output and display, the security of information transmission is improved.

[0018] In the second aspect, the present application discloses a one-way information transmission method, which is applied to the one-way reception of information by an external network terminal, and the method includes: monitoring whether the target encrypted data to be received is displayed on the display device of the internal network terminal; if so, collecting image information containing multiple target encrypted data; parsing the image information and determining the decryption method of the target encrypted data; decrypting the target encrypted data using the decryption method to obtain multiple target sub-data; processing the multiple target sub-data according to a preset combination method to obtain the target data.

[0019] The one-way information transmission method provided in the second aspect of the present application is applied to the one-way reception of information by an external network terminal. First, it is determined whether the target encrypted data to be received is displayed on the display device of the monitoring internal network terminal. If it is displayed, the image information containing multiple target encrypted data is collected, the image information is parsed and the decryption method of the target encrypted data is determined. The target encrypted data is decrypted using the decryption method to obtain multiple target sub-data, and the multiple target sub-data are processed in a preset combination method to obtain the target data. Compared with the prior art, the present application completes the one-way information reception by only collecting image information, and does not need to purchase expensive network gateway equipment, saving the operating costs of the enterprise.

[0020] In some modified implementations of the second aspect of the present application, display images of the display device are collected at preset time intervals; by comparing image information of consecutive display images, an initial display image and an end display image of the display target encrypted data are determined.

[0021] This embodiment first collects display images of the display device at preset time intervals, and determines the initial display image and the end display image of the display target encrypted data by comparing the image information of the continuous display images. This embodiment can monitor whether the display device of the intranet terminal displays the target encrypted data to be received.

[0022] In some modified implementations of the second aspect of the present application, it is detected whether the image data of multiple display images including an initial display image and an ending display image are the same; if they are the same, target encryption data is collected based on the initial display image; if they are not the same, target encryption data is collected from each of the multiple display images.

[0023] This embodiment detects whether the image data of multiple display images including an initial display image and an ending display image are the same, and then determines whether the information contained in the multiple display images is consistent. If they are consistent, only one display image is collected; if they are inconsistent, all display images are collected, thereby improving the efficiency of collecting images of encrypted information of the collection target.

[0024] In some modified implementations of the second aspect of the present application, multiple preset recognition technologies are used to parse image information to determine whether the target encrypted data is successfully recognized, and different recognition technologies are used to identify corresponding types of data; the decryption method of the target encrypted data is determined based on the type corresponding to the recognition of the successfully recognized preset recognition technology.

[0025] This embodiment firstly uses a plurality of preset recognition technologies to analyze the image information, and after identifying the target encrypted data type, uses the corresponding recognition technology to decrypt the different target encrypted data types. This embodiment can determine the decryption method of the target encrypted data through the image information.

[0026] In some modified implementations of the second aspect of the present application, annotation information corresponding to each target sub-data is extracted, and the annotation information is used to mark the splitting order of splitting the target data into multiple target sub-data; multiple target sub-data are combined according to the annotation information to obtain the target data.

[0027] This embodiment first extracts the labeling information corresponding to each target sub-data, the labeling information is used to mark the splitting order of splitting the target data into multiple target sub-data, and then combines the multiple target sub-data according to the extracted labeling information to obtain the target data. This embodiment can combine multiple target sub-data together to obtain the target data.

[0028] In a third aspect, the present disclosure provides a one-way information transmission device, which includes: an acquisition module, used to acquire target data to be transmitted by an intranet terminal; a segmentation module, used to split the target data according to the type of the target data to obtain multiple target sub-data; an encryption module, used to encrypt each target sub-data according to a preset encryption method to obtain multiple target encrypted data; a display module, used to output multiple target encrypted data in a preset display method on a display device of the intranet terminal, so that an external network terminal receiving device can collect the target encrypted data.

[0029] The one-way information transmission device provided in the third aspect of the present application has a similar technical effect to the one-way information transmission method provided in the first aspect.

[0030] In a fourth aspect, the present disclosure provides a one-way information transmission device, which includes: a monitoring module, used to monitor whether the target encrypted data to be received is displayed on the display device of the intranet terminal; a collection module, used to display the target encrypted data to be received on the display device, and collect image information containing multiple target encrypted data; a parsing module, used to parse the image information and determine the decryption method of the target encrypted data; a decryption module, used to decrypt the target encrypted data using the decryption method to obtain multiple target sub-data; a combination module, used to process the multiple target sub-data according to a preset combination method to obtain the target data.

[0031] The one-way information transmission device provided in the fourth aspect of the present application has a similar technical effect to the one-way information transmission method provided in the second aspect.

[0032] The fifth aspect of the present application provides a transmission system, which is composed of an information display device and an information receiving device. The information display device is configured in an intranet, and is used to obtain target data that the intranet terminal needs to transmit to the external network, and display the target data to the information receiving device in a preset display mode, specifically performing the one-way information transmission method of the first aspect;

[0033] The information receiving device is configured in the external network and is arranged relative to the information display device, and is used to obtain the encrypted target data from the information display device and decrypt it and output it, specifically executing the one-way information transmission method of the second aspect.

[0034] On the other hand, the present disclosure further provides a storage medium, which is used to store a computer program, wherein when the computer program is running, the device where the storage medium is located is controlled to execute the one-way information transmission method of the first aspect mentioned above.

[0035] On the other hand, the present disclosure also provides an electronic device, which includes at least one processor, and at least one memory and a bus connected to the processor; wherein the processor and the memory communicate with each other through the bus; the processor is used to call program instructions in the memory to execute the one-way information transmission method of the first aspect as described above.

[0036] The above description is only an overview of the technical solution of the present disclosure. In order to more clearly understand the technical means of the present disclosure, it can be implemented according to the contents of the specification. In order to make the above and other purposes, features and advantages of the present disclosure more obvious and easy to understand, the specific implementation methods of the present disclosure are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] Various other advantages and benefits will become apparent to those of ordinary skill in the art by reading the detailed description of the preferred embodiments below. The accompanying drawings are only for the purpose of illustrating the preferred embodiments and are not to be considered as limiting the present disclosure. Moreover, the same reference symbols are used throughout the drawings to represent the same components. In the accompanying drawings: Several embodiments of the present application are shown in an exemplary and non-limiting manner, and the same or corresponding reference numerals represent the same or corresponding parts, wherein:

[0038] Figure 1 The process diagram of the one-way information transmission method in the embodiment of the present application is as follows Figure 1 ;

[0039] Figure 2 The process diagram of the one-way information transmission method in the embodiment of the present application is as follows Figure 2 ;

[0040] Figure 3 The process diagram of the one-way information transmission method in the embodiment of the present application is as follows Figure 3 ;

[0041] Figure 4 The process diagram of the one-way information transmission method in the embodiment of the present application is as follows Figure 4 ;

[0042] Figure 5 The structure of the one-way information transmission device in the embodiment of the present application is shown in FIG. Figure 1;

[0043] Figure 6 The structure of the one-way information transmission device in the embodiment of the present application is shown in FIG. Figure 2 ;

[0044] Figure 7 The structure of the one-way information transmission device in the embodiment of the present application is shown in FIG. Figure 3 ;

[0045] Figure 8 The structure of the one-way information transmission device in the embodiment of the present application is shown in FIG. Figure 4 ;

[0046] Fig. 9 Schematic diagram of a one-way information transmission system in an embodiment of the present application. DETAILED DESCRIPTION

[0047] The exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments described herein. On the contrary, these embodiments are provided in order to enable a more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

[0048] It should be noted that, unless otherwise specified, the technical terms or scientific terms used in this application should have the common meanings understood by technicians in the field to which this application belongs.

[0049] In the digital age, information transmission has become an indispensable part of life and work, but many criminals use the two-way information interaction mechanism to sneak into the intranet of some enterprises and institutions to engage in illegal and criminal activities, such as stealing confidential information and snooping on business secrets. These behaviors have brought great risks to enterprises and institutions. Therefore, studying the method of one-way information transmission is of great practical significance for maintaining the security of the intranet of enterprises and institutions.

[0050] A network gatekeeper is a modern network security isolation device based on one-way information transmission technology. It uses physical isolation technology to isolate the public external network from the confidential internal network, and uses a dedicated private protocol and channel to transmit data to the internal network in a one-way manner, blocking all potential attacks on the internal network, and can also effectively prevent the leakage of confidential information. However, for the external network end of the network gatekeeper, the control and analysis of network access traffic is still very important. The network gatekeeper can control the traffic and restrict access to users according to the access resources to avoid network congestion and possible destructive behaviors. In the process of transmitting information, the network gatekeeper technology is set at the junction of the public external network and the confidential internal network, and has the status of a gateway. Once it goes down, data cannot be transmitted, so it is often necessary to configure multiple network gatekeeper devices as redundancy. The network gatekeeper devices are expensive, which leads to a sharp increase in enterprise operating costs. Therefore, finding a new method for secure information transmission is a problem worth considering.

[0051] In view of this, the present application provides a new one-way information transmission method, which does not need to use the network gate technology to realize the one-way information transmission between the internal and external networks. The present application only uses common and inexpensive display equipment and image acquisition equipment to complete the one-way information transmission, and does not need to purchase expensive network gate equipment, so it not only saves the operating costs of the enterprise, but also improves the security of information transmission.

[0052] Figure 1 The process diagram of the one-way information transmission method in the embodiment of the present application is as follows Figure 1 , see Figure 1 As shown, the method is applied to one-way information display of an intranet terminal, and may include:

[0053] S11: Obtain target data to be transmitted by the intranet terminal.

[0054] Acquiring target data may refer to receiving target data sent from a computer device on the intranet of a government, enterprise or institution through a program interface, or may refer to target data directly input by staff of a government, enterprise or institution, and is not limited here.

[0055] Target data refers to any information that can be displayed by an image, such as strings, text, codes, pictures, etc.

[0056] The intranet terminal here can refer to computer equipment in the intranet of government, enterprises and institutions, or it can refer to computer equipment in the intranet of scientific research institutes, and there is no limitation here.

[0057] S12: Split the target data according to the type of the target data to obtain a plurality of target sub-data.

[0058] Read the content of the target data, determine the type of the target data according to the content of the target data, and select a splitting method to split the target data according to the type of the target data to obtain multiple target sub-data. For example: if the target data type is text information, you can set a word limit and split the target data according to the word limit; if the target type is picture information, you can set a size range of the target sub-data and use the cutting tool to cut it within the set size range; if the target data is audio and video information, you can set an audio and video time interval and cut the audio and video information according to the time interval.

[0059] The types of target data include, but are not limited to: text information, image information, audio information, video information, etc.

[0060] S13: Encrypt each target sub-data according to a preset encryption method to obtain multiple target encrypted data.

[0061] If the target sub-data type is text information, a one-time pad algorithm is used for encryption to obtain multiple target encrypted data; if the target sub-data type is picture information, an Advanced Encryption Standard (AES) algorithm is used for encryption to obtain multiple target encrypted data; if the target sub-data type is audio information, a symmetric encryption algorithm is used for encryption to obtain multiple target encrypted data; if the target sub-data type is video information, an asymmetric encryption algorithm is used for encryption to obtain multiple target encrypted data.

[0062] S14: Outputting a plurality of target encrypted data in a preset display mode on a display device of the intranet terminal so that a receiving device of the extranet terminal can collect the target encrypted data.

[0063] On the LED display screen, multiple target encrypted data are played in sequence according to the order of splitting, and the same time is assigned to each target encrypted data. Alternatively, on the LED display screen, target encrypted data are played in sequence according to the order of splitting and different importance, and different time is assigned to each target encrypted data. Alternatively, on the LED display screen, multiple target encrypted data are played in sequence according to a pre-agreed order or a random order.

[0064] The display device here may refer to an LED display screen or a holographic projection device, which is not limited here.

[0065] The external network terminal receiving device here may refer to an image sensor or a CCD camera, which is not limited here.

[0066] In steps S11-S14, the target data to be transmitted is first obtained at the intranet terminal, the target data is split according to different types to obtain multiple target sub-data, and the multiple target encrypted data are sent on the display device in a preset display mode. Compared with the prior art, this embodiment completes the one-way information transmission only with the display device, not only does not need to purchase expensive network gate devices, but also because the information is encrypted in a preset encryption mode, the security of information transmission is improved.

[0067] Figure 2 The process diagram of the one-way information transmission method in the embodiment of the present application is as follows Figure 2 , see Figure 2 As shown, the method is applied to the one-way display of information on the intranet terminal. Figure 1 The method for unidirectional information transmission is further described in an embodiment for a specific scenario. The method includes:

[0068] S21: Receive target data through a program interface and detect the data type of the target data.

[0069] The staff of government agencies and enterprises and institutions input the target data with confidentiality level into the intranet terminal through the program interface. The intranet terminal detects the content of the received target data and determines the type of the received target data.

[0070] S22: Determine whether the type of the target data is image data, if not, execute step S23, if yes, execute step S24.

[0071] It is determined whether the type of the target data is image data according to the content of the target data.

[0072] The types of target data include: text information, picture information, audio information, video information, etc.

[0073] S23: Determine the data type of the target data, and perform corresponding processing according to different data types.

[0074] If the data type of the target data is text data, set a word limit and split the target data according to the word limit; if the data type of the target data is video data and audio data, set a time interval and split the target data according to the time interval.

[0075] S24: calling a cutting tool and obtaining display parameters of a display device to configure cutting parameters of the cutting tool.

[0076] The display parameters of the display device can be set in advance, such as the length, width, resolution, etc. of the LED display screen, and the length and width of the cutting parameters of the cutting tool are set to integer multiples of the length and width of the display device parameters.

[0077] The snipping tool may refer to Inpant or Snagit, which is not limited here.

[0078] Display parameters of the display device, including: width, length, resolution, etc. of the display device screen.

[0079] Cutting parameters include: width, length, resolution, etc. of the cut graphics.

[0080] S25: Use a cutting tool to split the image data to obtain multiple target sub-data.

[0081] In steps S22-S25, firstly, it is determined whether the type of the target data is image data. If it is image data, the display parameters of the display device are obtained, and the cutting parameters of the cutting tool are configured according to the display parameters. Finally, the cutting tool is used to split the image data to obtain multiple target sub-data. Since the target sub-data obtained in this way are cut by the cutting tool configured according to the display device parameters, they are well adapted to the display device, avoiding the problem of target sub-data loss caused by the display device being unable to display part of the target sub-data due to parameter restrictions, thereby improving the reliability of information transmission.

[0082] S26: Label the obtained target sub-data according to the splitting order.

[0083] The target sub-data are sorted in ascending order using Arabic numerals according to the order before and after the splitting, or the key points of the content in each target sub-data are marked according to the order before and after the splitting.

[0084] S27: Encrypt the marked target sub-data according to a preset encryption method to obtain a plurality of target encrypted data.

[0085] If the target sub-data type is text information, a one-time pad algorithm is used for encryption to obtain multiple target encrypted data; if the target sub-data type is picture information, an Advanced Encryption Standard (AES) algorithm is used for encryption to obtain multiple target encrypted data; if the target sub-data type is audio information, a symmetric encryption algorithm is used for encryption to obtain multiple target encrypted data; if the target sub-data type is video information, an asymmetric encryption algorithm is used for encryption to obtain multiple target encrypted data.

[0086] In steps S26-S27, the target sub-data obtained are firstly marked according to the splitting order, and then the marked target sub-data are encrypted according to the preset encryption method to obtain multiple target encrypted data. Since the marked target sub-data are encrypted according to the preset encryption method to obtain multiple target encrypted data, the security of information transmission is improved.

[0087] S28: Determine a preset display method according to the type of target data.

[0088] The multiple target encrypted data are sent to the display device of the intranet terminal in a random order for output display. Since the multiple target encrypted data are sent to the display device of the intranet terminal in a random order for output display, the security of information transmission is improved.

[0089] S29: Sending a presentation request carrying a preset presentation mode to the presentation device of the intranet terminal.

[0090] Send a display request message to the display device of the intranet terminal, the display request message includes preset display mode information, and notifies the display device that the display will be performed on its screen.

[0091] If there are multiple display devices, step S29 can be performed by referring to the following method:

[0092] S291: Determine whether the display request carries the target display device identifier. If so, execute S292; if not, execute S293.

[0093] After receiving the display request, the display device parses the content of the display request to determine whether the content contains the target display device identifier.

[0094] The target display device identifier may refer to information that can uniquely identify the target display device, which is not limited here.

[0095] S292: Send a presentation request to the target presentation device.

[0096] Send display request information to the target display device through the program interface.

[0097] S293: Determine the target display device to which the display request is to be sent according to the location information of the receiving device, and trigger prompt information to manually determine whether the target display device is correct.

[0098] The target display device to which the display request is to be sent is determined according to the spatial coordinates of the receiving device, and an alarm is triggered to remind the staff to manually determine whether the target display device is correct.

[0099] In steps S291-S293, it is first determined whether the display request carries the target display device identifier. If so, the display request is sent to the target display device. If not, the target display device is determined based on the location information of the receiving device, and a manual check is prompted. When the display request is faced with packet loss, resulting in the display request not containing the target display device identifier, a prompt is triggered, and then a manual check is prompted to determine the display device, thereby improving the accuracy of information transmission.

[0100] S30: According to the response information of the display request, the multiple target encrypted data are sent to the display device, and output for display in a preset display mode.

[0101] According to the response status of the display device to the display request, multiple target encrypted data are sent to the display device through the program interface and displayed in a preset display mode.

[0102] In steps S28-S30, the preset display mode is first determined according to the type of target data, and then a display request carrying the preset display mode is sent to the display device of the intranet terminal. Finally, according to the response information of the display request, multiple target encrypted data are sent to the display device and output for display in the preset display mode. Due to the interactive communication with the display device, an idle display device can be found, avoiding the problem of multiple target encrypted data being concentrated in one display device and queuing in the middle, causing communication congestion, and improving the transmission efficiency of information transmission.

[0103] Figure 3 The process diagram of the one-way information transmission method in the embodiment of the present application is as follows Figure 3 , see Figure 3 As shown, the method is applied to the one-way reception of information by an external network terminal. Figure 1 The intranet terminal shown corresponds to the display device of the intranet terminal, which is arranged relative to the display device of the intranet terminal to ensure that the data content displayed by the display device can be collected. The method specifically includes:

[0104] S31: Monitor whether the target encrypted data to be received is displayed on the display device of the intranet terminal. If so, execute S32; if not, do not execute any action.

[0105] A visual sensor is arranged at a position covered by vision. If the display device emits light, it is determined that the display device is to display the target encrypted data to be received.

[0106] The display device here may refer to an LED display screen or a holographic projection device, which is not limited here.

[0107] The target encrypted data here refers to the target encrypted data displayed on the display device of the intranet terminal.

[0108] S32: Collect image information containing multiple target encrypted data.

[0109] Use a camera to take a picture of the displayed content. Or use a scanning device to scan and record the screen content.

[0110] S33: Analyze the image information and determine the decryption method of the target encrypted data.

[0111] The image is scanned using OCR recognition technology to obtain image information, or the image is scanned using QR code recognition technology to obtain image information.

[0112] S34: Decrypt the target encrypted data using a decryption method to obtain a plurality of target sub-data.

[0113] If the target encrypted data type is text information, a one-time pad decryption algorithm is used to decrypt it to obtain multiple target sub-data; if the target encrypted data type is picture information, an AES decryption algorithm is used to decrypt it to obtain multiple target sub-data; if the target encrypted data type is audio information, a symmetric decryption algorithm is used to decrypt it to obtain multiple target sub-data; if the target encrypted data type is video information, an asymmetric decryption algorithm is used to decrypt it to obtain multiple target sub-data.

[0114] S35: Process the multiple target sub-data in a preset combination manner to obtain target data.

[0115] Combine multiple target sub-data in the order in which they are split in the intranet terminal, or combine multiple target sub-data in a pre-agreed order.

[0116] In steps S31-S35, it is first determined whether the target encrypted data to be received is displayed on the display device of the monitoring intranet terminal. If it is displayed, the image information containing multiple target encrypted data is collected, the image information is parsed and the decryption method of the target encrypted data is determined, the target encrypted data is decrypted using the decryption method to obtain multiple target sub-data, and the multiple target sub-data are processed according to a preset combination method to obtain the target data. Compared with the prior art, this embodiment completes the one-way information reception by only collecting image information, does not need to purchase expensive network gateway equipment, and saves the operating costs of the enterprise.

[0117] Figure 4 The process diagram of the one-way information transmission method in the embodiment of the present application is as follows Figure 4 , see Figure 4 As shown, the method is applied to one-way reception of information by an external network terminal, and the method may further include:

[0118] S41: Capturing display images of the display device at preset time intervals.

[0119] The time interval is set within the range of five minutes to ten minutes, and the display images on the display device are collected according to the set time interval.

[0120] Step S41 can be performed by referring to the following method:

[0121] S411: Detect whether the image data of multiple display images including the initial display image and the end display image are the same. If they are the same, execute S412; if they are different, execute S413.

[0122] S412: Collect target encryption data based on the initial display image.

[0123] S413: Collect target encrypted data from multiple display images respectively.

[0124] In steps S411-S413, it is detected whether the image data of multiple display images including the initial display image and the end display image are the same, and then it is determined whether the information contained in the multiple display images is consistent. If they are consistent, only one display image is collected; if they are inconsistent, all display images are collected, thereby improving the efficiency of collecting images of the target encrypted information.

[0125] S42: Determine an initial display image and an end display image of the display target encrypted data by comparing image information of consecutive display images.

[0126] Take the image feature points of each continuous display image, and compare the images based on whether the feature points are consistent. When the feature points are consistent, the display image obtained at this time is the end display image. When the feature points start to change, the display image obtained at this time is the initial display image.

[0127] In steps S41-S42, firstly, display images of the display device are collected at preset time intervals, and the initial display image and the end display image of the display target encrypted data are determined by comparing the image information of the continuous display images. This embodiment can monitor whether the display device of the intranet terminal displays the target encrypted data to be received.

[0128] S43: Collect image information containing multiple target encrypted data.

[0129] S44: Analyze image information using multiple preset recognition technologies.

[0130] S45: Determine whether the target encrypted data is successfully identified. Different identification technologies are used to identify corresponding types of data. If successful, execute step S46; if unsuccessful, execute step S47.

[0131] S46: Determine a decryption method for the target encrypted data according to the type of identification corresponding to the successfully identified preset identification technology.

[0132] S47: Issue an alarm to prompt manual inspection.

[0133] In steps S44-S47, the image information is first analyzed using a plurality of preset recognition technologies, and after the target encrypted data type is identified, the corresponding recognition technologies are used to decrypt the different target encrypted data types. This embodiment can determine the decryption method of the target encrypted data through the image information.

[0134] S48: Decrypt the target encrypted data using a decryption method to obtain a plurality of target sub-data.

[0135] S49: Extracting the labeling information corresponding to each target sub-data.

[0136] The annotation information here is used to mark the splitting order of splitting the target data into multiple target sub-data.

[0137] S50: Combining multiple target sub-data according to the annotation information to obtain target data.

[0138] In steps S47-S50, firstly, the annotation information corresponding to each target sub-data is extracted, and the annotation information is used to mark the splitting order of splitting the target data into multiple target sub-data, and then the multiple target sub-data are combined according to the extracted annotation information to obtain the target data. In this embodiment, multiple target sub-data can be combined together to obtain the target data.

[0139] Figure 5 Schematic diagram of a device for one-way information transmission in an embodiment of the present application Figure 1 , see Figure 5 As shown, the device may include: an acquisition module 51, a segmentation module 52, an encryption module 53, and a display module 54. The acquisition module 51, the segmentation module 52, the encryption module 53, and the display module 54 are connected in sequence.

[0140] An acquisition module 51 is used to acquire target data to be transmitted by an intranet terminal;

[0141] A segmentation module 52 is used to split the target data according to the type of the target data to obtain multiple target sub-data;

[0142] The encryption module 53 is used to encrypt each target sub-data according to a preset encryption method to obtain multiple target encrypted data;

[0143] The display module 54 is used to output a plurality of target encrypted data in a preset display mode on the display device of the intranet terminal so that the receiving device of the extranet terminal can collect the target encrypted data.

[0144] Figure 6 Schematic diagram of a device for one-way information transmission in an embodiment of the present application Figure 2 , see Figure 6 As shown, the device may include: a data type monitoring module 61, a picture data determination module 62, a different data processing module 63, a call cutting module 64, a picture splitting module 65, a sub-data marking module 66, an encrypted data module 67, a determination display module 68, a display request module 69, and an output display module 70. Among them, the data type monitoring module 61, the picture data determination module 62, the call cutting module 64, the picture splitting module 65, the sub-data marking module 66, the encrypted data module 67, the determination display module 68, the display request module 69, and the output display module 70 are connected in sequence, and the data type monitoring module 61, the picture data determination module 62, the different data processing module 63, the sub-data marking module 66, the encrypted data module 67, the determination display module 68, the display request module 69, and the output display module 70 are connected in sequence.

[0145] The data type monitoring module 61 is used to receive target data through a program interface and detect the data type of the target data.

[0146] The image data determination module 62 is used to determine whether the type of target data is image data.

[0147] The different data processing modules 63 are used to determine the data type of the target data and perform corresponding processing according to different data types.

[0148] The calling cutting module 64 is used to call a cutting tool and obtain display parameters of a display device to configure cutting parameters of the cutting tool.

[0149] The image splitting module 65 is used to split the image data using a cutting tool to obtain multiple target sub-data.

[0150] The sub-data labeling module 66 is used to label the obtained target sub-data according to the splitting order.

[0151] The encryption data module 67 is used to encrypt the marked target sub-data according to a preset encryption method to obtain a plurality of target encrypted data.

[0152] The display determination module 68 is used to determine a preset display mode according to the type of target data.

[0153] The display request module 69 sends a display request carrying a preset display mode to the display device of the intranet terminal. The display request module 69 includes: a device identification unit 691, a display request unit 692, and a trigger prompt information unit 693, wherein the device identification unit 691 and the display request unit 692 are connected, and the device identification unit 691 and the trigger prompt information unit 693 are connected.

[0154] The device identification determination unit 691 is used to determine whether the display request carries a target display device identification.

[0155] The presentation request generating unit 692 is configured to send a presentation request to a target presentation device.

[0156] The prompt information triggering unit 693 is used to determine the target display device to which the display request is to be sent according to the location information of the receiving device, and trigger prompt information to prompt the user to manually determine whether the target display device is correct.

[0157] The output display module 70 is used to send a plurality of target encrypted data to the display device according to the response information of the display request, and output the data in a preset display mode.

[0158] Figure 7 Schematic diagram of a device for one-way information transmission in an embodiment of the present application Figure 3 , see Figure 7 As shown, the device may include: a monitoring module 71, a collection module 72, a parsing module 73, a decryption module 74, and a combination module 75. The monitoring module 71, the collection module 72, the parsing module 73, the decryption module 74, and the combination module 75 are connected in sequence.

[0159] A monitoring module 71, used to monitor whether the display device of the intranet terminal displays the target encrypted data to be received;

[0160] The acquisition module 72 is used to display the target encrypted data to be received and to acquire image information containing multiple target encrypted data;

[0161] The parsing module 73 is used to parse the image information and determine the decryption method of the target encrypted data;

[0162] A decryption module 74, used to decrypt the target encrypted data using a decryption method to obtain a plurality of target sub-data;

[0163] The combination module 75 is used to process multiple target sub-data in a preset combination mode to obtain target data.

[0164] Figure 8 Schematic diagram of a device for one-way information transmission in an embodiment of the present application Figure 4 , see Figure 8As shown, the device may include: a module for collecting and displaying images 81, a module for comparing image information 82, a module for collecting encrypted images 83, a module for analyzing images 84, a module for judging successful identification 85, a module for determining a decryption method 86, a module for issuing an alarm 87, a module for decrypting data 88, a module for extracting annotation information 89, and a module for combining data 90. The module for collecting and displaying images 81, the module for comparing image information 82, the module for collecting encrypted images 83, the module for analyzing images 84, the module for judging successful identification 85, the module for determining a decryption method 86, the module for decrypting data 88, the module for extracting annotation information 89, and the module for combining data 90 are connected in sequence, and the module for collecting and displaying images 81, the module for comparing image information 82, the module for collecting encrypted images 83, the module for analyzing images 84, the module for judging successful identification 85, and the module for issuing an alarm 87 are connected in sequence.

[0165] The display image acquisition module 81 is used to acquire display images of the display device at preset time intervals. The display image acquisition module 81 includes: a data detection unit 811, an encrypted data acquisition unit 812, and a data acquisition unit 813, wherein the data detection unit 811 and the encrypted data acquisition unit 812 are connected, and the data detection unit 811 and the data acquisition unit 813 are connected.

[0166] The data identical detection unit 811 is used to detect whether the image data of a plurality of display images including the initial display image and the end display image are identical.

[0167] The encrypted data collecting unit 812 is used to collect the target encrypted data based on the initial display image.

[0168] The data collecting unit 813 is used to collect target encrypted data from multiple display images respectively.

[0169] The image information comparison module 82 is used to determine the initial display image and the end display image of the display target encrypted data by comparing the image information of the continuous display images.

[0170] The encrypted image acquisition module 83 is used to acquire image information containing multiple target encrypted data.

[0171] The image analysis module 84 is used to analyze image information using a variety of preset recognition technologies.

[0172] The successful identification judging module 85 is used to judge whether the target encrypted data is successfully identified.

[0173] The module for determining the decryption method 86 is used to determine the decryption method of the target encrypted data according to the type of identification corresponding to the preset identification technology that has been successfully identified.

[0174] The alarm module 87 is used to issue an alarm to remind manual inspection.

[0175] The decryption data module 88 is used to decrypt the target encrypted data using a decryption method to obtain a plurality of target sub-data.

[0176] The annotation information extraction module 89 is used to extract the annotation information corresponding to each target sub-data.

[0177] The data combination module 90 is used to combine multiple target sub-data according to the annotation information to obtain target data.

[0178] It should be noted here that the description of the above device embodiment is similar to the description of the above method embodiment, and has similar beneficial effects as the method embodiment. For technical details not disclosed in the device embodiment of the present application, please refer to the description of the method embodiment of the present application for understanding.

[0179] Furthermore, the present disclosure also provides a one-way information transmission system. Fig. 9 As shown, the transmission system consists of information display equipment and information receiving equipment. The transmission system includes:

[0180] The information display device is configured in the intranet, and is used to obtain the target data that the intranet terminal needs to transmit to the external network, and display the target data to the information receiving device in a preset display mode. Figure 1-2 The one-way information transmission method;

[0181] The information receiving device is configured on the external network and is arranged relative to the information display device, and is used to obtain the encrypted target data from the information display device and decrypt it and output it. Specifically, the above Figure 3-4 The one-way information transmission method.

[0182] Furthermore, the embodiment of the present disclosure also provides a processor, the processor is used to run a program, wherein the program executes the above Figure 1-4 The one-way information transmission method described in .

[0183] Furthermore, the embodiment of the present disclosure also provides a storage medium, wherein the storage medium is used to store a computer program, wherein when the computer program is running, the device where the storage medium is located is controlled to execute the above Figure 1-4 The one-way information transmission method described in .

[0184] Furthermore, the present disclosure also provides a computer program product, which, when executed on a data processing device, is suitable for executing a program for initiating the method steps of the unidirectional information transmission as described above.

[0185] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0186] It is understandable that the related features in the above methods and systems can be referenced to each other. In addition, the "first", "second" and the like in the above embodiments are used to distinguish the embodiments, and do not represent the advantages and disadvantages of the embodiments.

[0187] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the above-described systems, systems and units can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0188] The algorithms and displays provided herein are not inherently related to any particular computer, virtual system or other device. Various general purpose systems may also be used together with the teachings based thereon. According to the above description, it is apparent that the structure required for constructing such systems is. In addition, the present disclosure is not directed to any particular programming language either. It should be understood that various programming languages ​​may be utilized to implement the disclosure described herein, and the description of the specific languages ​​above is intended to disclose the best mode of implementation of the present disclosure.

[0189] In addition, the memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM, and the memory includes at least one memory chip.

[0190] Those skilled in the art will appreciate that the embodiments of the present disclosure may be provided as methods, systems, or computer program products. Therefore, the present disclosure may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present disclosure may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0191] The present disclosure is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present disclosure. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A system that specifies the functions of a box or multiple boxes.

[0192] These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer-readable memory produce a product including an instruction system, which is implemented in the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0193] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0194] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0195] The memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0196] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0197] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0198] It will be appreciated by those skilled in the art that the embodiments of the present disclosure may be provided as methods, systems or computer program products. Therefore, the present disclosure may take the form of a complete hardware embodiment, a complete software embodiment or an embodiment combining software and hardware. Moreover, the present disclosure may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0199] The above are only embodiments of the present disclosure and are not intended to limit the present disclosure. For those skilled in the art, the present disclosure may have various modifications and variations. Any modification, equivalent substitution, improvement, etc. made within the spirit and principle of the present disclosure shall be included in the scope of the claims of the present disclosure.

Claims

1. A one-way information transmission method, characterized in that: The method for one-way display of information applied to an intranet terminal includes: Acquire target data to be transmitted by the intranet terminal; Splitting the target data according to the type of the target data to obtain a plurality of target sub-data; Encrypt each target sub-data according to a preset encryption method to obtain multiple target encrypted data; The multiple target encrypted data are outputted in a preset display mode on the display device of the intranet terminal so that the target encrypted data can be collected by the receiving device of the external network terminal.

2. The method according to claim 1, characterized in that The target data is split according to the type of the target data to obtain multiple target sub-data, including: Determine whether the type of the target data is image data; If yes, calling the cutting tool and obtaining the display parameters of the display device to configure the cutting parameters of the cutting tool; The image data is split using the cutting tool to obtain a plurality of target sub-data.

3. The method according to claim 1 or 2, characterized in that: Each target sub-data is encrypted according to a preset encryption method to obtain multiple target encrypted data, including: Marking the obtained target sub-data according to the splitting order; The marked target sub-data are encrypted according to a preset encryption method to obtain a plurality of target encrypted data.

4. The method according to claim 1, characterized in that: Outputting the plurality of target encrypted data in a preset display mode on a display device of an intranet terminal includes: Determining a preset display method according to the type of the target data; Sending a display request carrying the preset display mode to the display device of the intranet terminal; According to the response information of the display request, the multiple target encrypted data are sent to the display device and output for display in a preset display mode.

5. A method for transmitting one-way information, characterized in that: Applied to one-way reception of information by an external network terminal, the method comprises: Monitor whether the target encrypted data to be received is displayed on the display device of the intranet terminal; If yes, collecting image information containing multiple target encrypted data; parsing the image information and determining a decryption method for the target encrypted data; Decrypting the target encrypted data using the decryption method to obtain a plurality of target sub-data; Process multiple target sub-data in a preset combination mode to obtain target data.

6. The method according to claim 5, characterized in that Monitor whether the target encrypted data to be received is displayed on the display device of the intranet terminal, including: Acquiring display images of the display device at preset time intervals; By comparing the image information of the continuous display images, an initial display image and an end display image for displaying the target encrypted data are determined.

7. The method according to claim 6, characterized in that The collecting of image information containing a plurality of target encrypted data comprises: detecting whether image data of a plurality of display images including an initial display image and an end display image are the same; If they are the same, collecting target encrypted data based on the initial display image; If they are not the same, the target encrypted data is collected from multiple display images respectively.

8. A device for one-way information transmission, characterized in that: The device comprises: An acquisition module, used for acquiring target data to be transmitted by the intranet terminal; A segmentation module, used for splitting the target data according to the type of the target data to obtain a plurality of target sub-data; An encryption module, used to encrypt each target sub-data according to a preset encryption method to obtain multiple target encrypted data; The display module is used to output the multiple target encrypted data in a preset display mode on the display device of the intranet terminal so that the external network terminal receiving device can collect the target encrypted data.

9. A device for one-way information transmission, characterized in that: The device comprises: A monitoring module, used to monitor whether the display device of the intranet terminal displays the target encrypted data to be received; A collection module, used for displaying the target encrypted data to be received on the display device, and collecting image information containing a plurality of the target encrypted data; A parsing module, used for parsing the image information and determining a decryption method for the target encrypted data; A decryption module, used to decrypt the target encrypted data using the decryption method to obtain a plurality of target sub-data; The combination module is used to process multiple target sub-data in a preset combination mode to obtain target data.

10. A one-way information transmission system, characterized in that: The one-way information transmission system at least includes: an information display device and an information receiving device; The information display device is configured in the intranet, and is used to obtain target data that the intranet terminal needs to transmit to the external network, and display the target data to the information receiving device in a preset display mode, specifically performing the one-way information transmission method according to any one of claims 1 to 4; The information receiving device is configured in the external network and is arranged relative to the information display device, and is used to obtain the encrypted target data from the information display device and decrypt and output it, specifically executing the one-way information transmission method described in any one of claims 5-7.

Images