Method, device and equipment for information board security control with bidirectional link security protection

Abstract

The present application provides a method, device and equipment for the security management and control of an information board with two-way link security protection. The method includes: sending a picture acquisition message to the information board control card, receiving a picture response message returned by the information board control card, the picture response message including the displayed picture of the information board display screen; performing a security check on the displayed picture to obtain a security check result; if the security check result indicates that there is abnormal information in the displayed picture, obtaining a first risk handling strategy corresponding to the information board display screen, and performing security processing on the displayed picture of the information board display screen based on the first risk handling strategy; sending a first heartbeat message to the security management and control entity, the first heartbeat message including the unique identifier of the information board and the picture abnormality data, so that the security management and control entity determines that there is abnormal information in the displayed picture of the information board display screen corresponding to the unique identifier based on the first heartbeat message. Through the solution of the present application, the security of the information board display screen can be improved.

Description

Technical Field

[0001] The present application relates to the field of network security technology, and in particular to a method, device and equipment for security management of an intelligence board with bidirectional link security protection. Background Art

[0002] Information boards are traffic information display devices based on LED (Light Emitting Diode) devices. They display video, images, and text. Operators can issue various notices and messages based on traffic, weather, and dispatch instructions. This effectively guides traffic flow, improves the network's transportation capacity, and provides drivers with safe and efficient driving services. An information dissemination entity (i.e., an information board publishing entity) is a device used to disseminate information within intelligent transportation systems. It disseminates comprehensive information such as traffic conditions, weather information, road conditions, and operational instructions to effectively guide traffic flow and ensure smooth traffic flow.

[0003] However, if the information publishing entity is compromised by an attacker, the attacker could potentially control the entity to publish abnormal information to the information board, which would then display the abnormal information on the information board. Alternatively, if the information board is compromised by an attacker, the attacker could also display abnormal information on the information board. Clearly, displaying abnormal information on the information board poses a significant security risk, and the information published on the information board poses security issues. Summary of the Invention

[0004] The present application provides a method for security management and control of an information board with bidirectional link security protection, wherein the information board includes an information board control card and an information board display screen, and the method is applied to a security monitoring entity, wherein the security monitoring entity and the information board control card are placed in the same chassis cabinet, and the method includes: sending a screen acquisition message to the information board control card, and receiving a screen response message returned by the information board control card, wherein the screen response message includes the displayed screen of the information board display screen; performing a security check on the displayed screen to obtain a security check result; if the security check result indicates that there is abnormal information in the displayed screen, obtaining a first risk handling strategy corresponding to the information board display screen, and performing security processing on the displayed screen of the information board display screen based on the first risk handling strategy; wherein the first risk handling strategy includes a background image replacement handling strategy, a screen off handling strategy, or an information board power-off handling strategy; sending a first heartbeat message to the security management and control entity, wherein the first heartbeat message includes the unique identifier of the information board and screen abnormality data, so that the security management and control entity determines, based on the first heartbeat message, that there is abnormal information in the displayed screen of the information board display screen corresponding to the unique identifier.

[0005] The present application provides a security management and control device for an information board with bidirectional link security protection, wherein the information board includes an information board control card and an information board display screen. The device is applied to a security monitoring entity, and the security monitoring entity and the information board control card are placed in the same chassis cabinet. The device includes: an acquisition module, configured to send a screen acquisition message to the information board control card and receive a screen response message returned by the information board control card, wherein the screen response message includes a displayed screen of the information board display screen; a detection module, configured to perform a security detection on the displayed screen to obtain a security detection result; a processing module, configured to obtain a first risk handling strategy corresponding to the information board display screen if the security detection result indicates that abnormal information exists in the displayed screen, and perform security processing on the displayed screen of the information board display screen based on the first risk handling strategy; wherein the first risk handling strategy includes a base map replacement handling strategy, a screen off handling strategy, or an information board power-off handling strategy; and a sending module, configured to send a first heartbeat message to the security management and control entity, wherein the first heartbeat message includes a unique identifier of the information board and screen abnormality data, so that the security management and control entity determines, based on the first heartbeat message, that abnormal information exists in the displayed screen of the information board display screen corresponding to the unique identifier.

[0006] The present application provides an electronic device, a processor and a machine-readable storage medium, wherein the machine-readable storage medium stores machine-executable instructions that can be executed by the processor; the processor is used to execute the machine-executable instructions to implement the above-mentioned example of the intelligence board security management method for bidirectional link security protection.

[0007] The present application provides a computer program product, which may include a computer program. When the computer program is executed by a processor, it implements the above-mentioned example of the intelligence board security management and control method for bidirectional link security protection.

[0008] The present application provides a machine-readable storage medium, which stores machine-executable instructions that can be executed by a processor; wherein the processor is used to execute the machine-executable instructions, and when the machine-executable instructions are executed, the intelligence board security management method for bidirectional link security protection of the above example is implemented.

[0009] As can be seen from the above technical solutions, in the embodiment of the present application, an additional security monitoring entity can be deployed separately for each information board. The security monitoring entity and the information board control card are placed in the same chassis cabinet, and the security monitoring entity is only used to perform security management and control on the information board. The security monitoring entity can periodically obtain the displayed image of the information board display screen. If there is abnormal information in the displayed image, the displayed image of the information board display screen is securely processed based on the first risk handling strategy. For example, the base image of the displayed image can be replaced, or the information board display screen can be turned off, or the information board can be powered off. In this way, the information board display screen is prevented from continuing to display abnormal information, thereby improving the security of the information board display screen, improving the security of information released by the information board, and solving the security problem of information released by the information board. BRIEF DESCRIPTION OF THE DRAWINGS

[0010] Figure 1 This is a flow chart of a method for controlling information board security with bidirectional link security protection in one embodiment of the present application;

[0011] Figure 2 It is a structural diagram of the information board security management and control system in one embodiment of the present application;

[0012] Figure 3 This is a structural diagram of a security control entity and a security monitoring entity in one embodiment of the present application;

[0013] Figure 4 This is a flow chart of a method for controlling information board security for bidirectional link security protection in one embodiment of the present application;

[0014] Figure 5 This is a flow chart of a method for controlling information board security for bidirectional link security protection in one embodiment of the present application;

[0015] Figure 6 This is a flow chart of a method for controlling information board security for bidirectional link security protection in one embodiment of the present application;

[0016] Figure 7 This is a flow chart of a method for controlling information board security for bidirectional link security protection in one embodiment of the present application;

[0017] Figure 8 This is a flow chart of a method for controlling information board security for bidirectional link security protection in one embodiment of the present application;

[0018] Figure 9A This is a structural diagram of an information board security control device for bidirectional link security protection in one embodiment of the present application;

[0019] Figure 9BIt is a hardware structure diagram of an electronic device in one embodiment of the present application. DETAILED DESCRIPTION

[0020] In the embodiment of the present application, a method for controlling the security of an information board with bidirectional link security protection is proposed. The information board may include an information board control card and an information board display screen. The method can be applied to a security monitoring entity. The security monitoring entity and the information board control card can be placed in the same chassis cabinet. For example, bidirectional link security protection means that the security monitoring entity and the security control entity interact to achieve security protection of the information board. Figure 1 FIG. 5 is a flow chart of the method, which includes:

[0021] Step 101: Send a picture acquisition message to the information board control card, and receive a picture response message returned by the information board control card. The picture response message may include the displayed picture of the information board display screen.

[0022] Step 102: Perform a security check on the displayed image to obtain a security check result.

[0023] Step 103: If the security detection result indicates that there is abnormal information in the displayed screen, obtain the first risk handling strategy corresponding to the information board display screen, and perform security processing on the displayed screen of the information board display screen based on the first risk handling strategy; wherein, the first risk handling strategy may include but is not limited to a background image replacement handling strategy, a screen off handling strategy, or an information board power off handling strategy.

[0024] Step 104: Send a first heartbeat message to the security management entity. The first heartbeat message may include the unique identifier of the information board and screen abnormality data, so that the security management entity can determine that there is abnormal information on the displayed screen of the information board display screen corresponding to the unique identifier based on the first heartbeat message.

[0025] Exemplarily, the physical environment information of the intelligence board control card can also be obtained. The physical environment information can include but is not limited to at least one of environmental parameters, the opening state of the chassis cabinet, and the power supply state. If the physical environment information includes environmental parameters, and the environmental parameters indicate that the temperature or humidity of the intelligence board control card is greater than a threshold value, a second heartbeat message can be sent to the security management and control entity. The second heartbeat message can include the unique identifier of the intelligence board and the environmental parameter abnormality data, so that the security management and control entity determines that there is an abnormality in the environment of the intelligence board control card corresponding to the unique identifier based on the second heartbeat message. If the physical environment information includes the opening state of the chassis cabinet, and the opening state indicates that the chassis cabinet is opened, a third heartbeat message can be sent to the security management and control entity. The third heartbeat message can include the unique identifier of the intelligence board and the chassis cabinet abnormality data, so that the security management and control entity determines that the chassis cabinet of the intelligence board control card corresponding to the unique identifier is opened based on the third heartbeat message. If the physical environment information includes the power supply status, and the power supply status indicates that the power supply in the chassis cabinet has been cut off, a fourth heartbeat message can be sent to the security management entity. The fourth heartbeat message can include the unique identifier of the intelligence board and the power supply abnormality data, so that the security management entity can determine based on the fourth heartbeat message that the power supply of the intelligence board control card corresponding to the unique identifier has been cut off.

[0026] Exemplarily, the validity period of the displayed image on the information board display screen can also be obtained; if the current time is not within the validity period, the second risk handling strategy corresponding to the information board display screen is obtained, and the displayed image on the information board display screen is securely handled based on the second risk handling strategy, the second risk handling strategy including a background image replacement handling strategy or a screen off handling strategy; a fifth heartbeat message is sent to the security management and control entity, the fifth heartbeat message including the unique identifier of the information board and validity period exception data, so that the security management and control entity determines, based on the fifth heartbeat message, that the displayed image on the information board display screen corresponding to the unique identifier is not within the validity period.

[0027] Exemplarily, a first publishing message sent by the information publishing entity can also be received. The first publishing message may include but is not limited to the information content to be published, the target device characteristic value of the information publishing entity, and the unique identifier of the information board. Determine whether the target device characteristic value exists in the first white list; wherein, when the security control entity sends the device characteristic value of the normal information publishing entity to the security monitoring entity, the security monitoring entity records the device characteristic value of the normal information publishing entity in the first white list. If the target device characteristic value exists, determine whether the unique identifier of the information board is a built-in identifier of the security monitoring entity. If so, check whether the information content to be published is normal; wherein, the security monitoring entity has a built-in unique identifier of the information board connected to the security monitoring entity. If normal, send the information content to be published to the information board control card so that the information board control card displays the screen corresponding to the information content to be published on the information board display screen.

[0028] Exemplarily, verifying whether the content of the information to be published is normal may include, but is not limited to: if the information content to be published is image content or text content, using an OCR (Optical Character Recognition) recognition algorithm to verify whether the image content or text content is normal; or, using an AI (Artificial Intelligence) model to verify whether the image content or text content is normal; if the information content to be published is video content, sending the video content to a security control entity so that the security control entity verifies whether the video content is normal and obtains a verification result; receiving the verification result returned by the security control entity, the verification result indicating that the video content is normal, or the verification result indicating that the video content is abnormal.

[0029] For example, if the target device characteristic value does not exist in the first whitelist, or the unique identifier of the information board is not the built-in identifier of the security monitoring entity, or the content of the information to be published is abnormal, the information to be published is discarded. In addition, a sixth heartbeat message can be sent to the security management and control entity. The sixth heartbeat message can include the target device characteristic value of the information publishing entity, a screenshot of the information to be published, and publishing result information, and the publishing result information indicates whether the content is successfully published or failed to be published. If the information to be published is sent to the information board control card, the publishing result information can indicate that the content is successfully published; if the information to be published is discarded, the publishing result information can indicate that the content is failed to be published.

[0030] Exemplarily, a second release message sent by the security control entity may also be received. The second release message may include, but is not limited to, encrypted information content, the IP address of the security control entity, the IP address of the information publishing entity, and the unique identifier of the information board. The second release message may be sent by the security control entity after confirming that the information content to be published sent by the information publishing entity is normal, and the encrypted information content is obtained by encrypting the information content to be published. Then, a determination is made as to whether the IP address of the information publishing entity exists in the second whitelist. When the security control entity sends the IP address of the normal information publishing entity to the security monitoring entity, the security monitoring entity may record the IP address of the normal information publishing entity in the second whitelist. If the IP address of the information publishing entity exists, it may be determined whether the unique identifier of the information board is a built-in identifier of the security monitoring entity, and whether the IP address of the security control entity is a built-in IP address of the security monitoring entity. The security monitoring entity may have built-in the unique identifier of the information board connected to the security monitoring entity, as well as the IP address of the security control entity. If so, the encrypted information content may be decrypted to obtain the information content to be published. Then, the information content to be released is sent to the information board control card, so that the information board control card displays the picture corresponding to the information content to be released on the information board display screen.

[0031] As can be seen from the above technical solutions, in the embodiment of the present application, an additional security monitoring entity can be deployed separately for each information board. The security monitoring entity and the information board control card are placed in the same chassis cabinet, and the security monitoring entity is only used to perform security management and control on the information board. The security monitoring entity can periodically obtain the displayed image of the information board display screen. If there is abnormal information in the displayed image, the displayed image of the information board display screen is securely processed based on the first risk handling strategy. For example, the base image of the displayed image can be replaced, or the information board display screen can be turned off, or the information board can be powered off. In this way, the information board display screen is prevented from continuing to display abnormal information, thereby improving the security of the information board display screen, improving the security of information released by the information board, and solving the security problem of information released by the information board.

[0032] The above technical solutions of the embodiments of the present application are described below in conjunction with specific application scenarios.

[0033] In the embodiment of the present application, a method for security management and control of an information board with two-way link security protection is proposed, which can ensure the link security between the information board and the information publishing entity (i.e., the information board publishing entity), and perform abnormal monitoring of the environment in which the information board is located, thereby realizing security management and control of the information board with two-way link security protection and improving the security of the information board.

[0034] See also Figure 2The figure shows a structural diagram of the information board security management and control system. The information board security management and control system may include an information release entity (i.e., an information board release entity), a security management and control entity, a security monitoring entity, and an information board. The information board may include an information board control card and an information board display screen.

[0035] The information board is a traffic information display device that uses LED light-emitting devices as the basic display unit. The information board has the function of displaying videos, pictures and text. For example, the information board may include an information board control card and an information board display screen. The information board control card can receive the information content to be released sent by the information release entity, and control the information board display screen to display the picture corresponding to the information content to be released. The information board display screen is used to receive the picture information sent by the information board control card and display the picture. The information board display screen can be any type of display screen, such as a dual-color pure dot matrix screen, a composite screen, a full-color pure dot matrix screen, a light strip composite screen, a single or dual-color screen, etc. There is no restriction on the type of this information board display screen, as long as it can display the picture.

[0036] An information release entity (i.e., an information board release entity) is a device used for information release in an intelligent transportation system. The information release entity is used to release comprehensive information such as traffic conditions, weather information, road conditions, and operational instructions. In this embodiment, the information release entity can be divided into a first type of information release entity and a second type of information release entity. When the first type of information release entity sends the content of information to be released to the information board, the first type of information release entity can send the content of information to be released to the security control entity, and the security control entity sends the content of information to be released to the information board. For example, the first type of information release entity can be a personal computer, a server, a laptop computer, a smart phone, etc. When the second type of information release entity sends the content of information to be released to the information board, the second type of information release entity can directly send the content of information to be released to the information board, that is, the content of information to be released does not pass through the security control entity. The second type of information release entity can be a personal computer, a server, a laptop computer, a smart phone, etc.

[0037] Based on the information board and information publishing entities, the information board security management and control system can deploy security management and control entities. The number of security management and control entities can be one or more. The security management and control entity is connected to the first-class information publishing entity. The security management and control entity receives the information content to be published sent by the first-class information publishing entity, detects the information content to be published, detects the IP address of the first-class information publishing entity, and synchronizes the information content to be published that passes the detection to the security monitoring entity. The information content to be published that fails the detection is discarded to prevent abnormal content from being synchronized to the security monitoring entity.

[0038] Based on the information board and information release entities, the information board security management and control system can deploy security monitoring entities. There can be multiple security monitoring entities, and a separate security monitoring entity can be deployed for each information board. For example, if the information board security management and control system has 1,000 information boards, 1,000 security monitoring entities will need to be deployed, with each 1,000 security monitoring entities corresponding to each information board.

[0039] The security monitoring entity can receive pending information from the security control entity. It can also directly receive pending information from the second-category information publishing entity. The security monitoring entity can send the pending information to the information board control card, which then displays the corresponding image on the information board's display screen. Furthermore, the security monitoring entity can perceive the environmental safety status of the information board and report this data to the security control entity.

[0040] The security monitoring entity and the information board control card can be placed in the same chassis cabinet. For example, on the basis of placing the information board control card in the chassis cabinet, the security monitoring entity is also placed in the chassis cabinet, and the security monitoring entity is connected to the information board control card, and the information board control card is connected to the information board display screen.

[0041] On the basis of additional deployment of security control entities and security monitoring entities, see Figure 3 The figure shows a schematic diagram of the structure of the security control entity and the security monitoring entity. The security control entity can also be referred to as the same security control entity, and the security monitoring entity can also be referred to as the front-end security monitoring entity. For example, the security control entity may include but is not limited to a security management module, a security encryption and decryption module, a content detection module, and a security distribution module. The functions of each module can be found in the subsequent embodiments. In addition, the security monitoring entity may include but is not limited to a local detection module, an environmental perception module, a data receiving module, a heartbeat data transmission module, a risk management module, and a local encryption and decryption module. The functions of each module can be found in the subsequent embodiments.

[0042] In a possible implementation, for the process in which the first type of information publishing entity sends the information content to be published to the information board, the embodiment of the present application proposes a two-way link security protection information board security management method, see Figure 4 FIG. 5 is a flow chart of the method, which may include:

[0043] Step 401: The first type of information publishing entity sends information content to be published to the security management and control entity. The information content to be published may be picture content, text content, or video content.

[0044] For example, the information to be released may include traffic information, weather information, road conditions, operating instructions, etc. There is no restriction on the information to be released, and the information may be of any type.

[0045] In step 402, the security control entity verifies whether the content of the information to be published is normal. If so, the process proceeds to step 403. If not, the content of the information to be published is abnormal, the security control entity discards the content of the information to be published and prohibits sending the content of the information to be published to the security monitoring entity. For example, the security control entity includes a content detection module, which verifies whether the content of the information to be published is normal.

[0046] For example, if the information to be published is an image, an OCR recognition algorithm is used to verify whether the image content is normal. Alternatively, the image content can be verified using an AI model. For example, using an AI model to verify whether the image content is normal, the image content can be input into a trained AI model, and the AI ​​model processes the image content to obtain a verification result of the image content. There is no restriction on this processing process, and the verification result indicates that the image content is normal, or the verification result indicates that the image content is abnormal.

[0047] For example, if the information to be published is text, an OCR recognition algorithm is used to verify whether the text is normal. Alternatively, an AI model can be used to verify whether the text is normal. For example, using an OCR recognition algorithm to verify whether the text is normal, the text can be input into the OCR recognition algorithm, and the OCR recognition algorithm can identify whether the text contains abnormal information (such as illegal information). There are no restrictions on this recognition process. If the OCR recognition algorithm identifies abnormal information in the text, the text is determined to be abnormal. If the OCR recognition algorithm identifies no abnormal information in the text, the text is determined to be normal.

[0048] For example, if the information to be published is video content, the AI ​​model can be used to verify whether the video content is normal. For example, the video content can be input into a trained AI model, and the AI ​​model processes the video content to obtain a verification result of the video content. There is no restriction on this processing process, and the verification result can indicate that the video content is normal or abnormal.

[0049] Of course, the above are just a few examples of verifying whether the content of the information to be published is normal, and there is no limitation to this.

[0050] In step 403, the security control entity encrypts the information content to be published to obtain encrypted information content, and signs the encrypted information content to obtain first signature data of the encrypted information content. For example, the security control entity includes a security encryption and decryption module, which encrypts the information content to be published to obtain encrypted information content, and signs the encrypted information content to obtain first signature data.

[0051] For example, a symmetric encryption algorithm may be used to encrypt the information content to be published to obtain encrypted information content, or an asymmetric encryption algorithm may be used to encrypt the information content to be published to obtain encrypted information content, without any restriction on the encryption algorithm. For example, the security encryption and decryption module may be a hardware cryptographic module, which encrypts the information content to be published to obtain encrypted information content, or a software cryptographic module, which encrypts the information content to be published to obtain encrypted information content, without any restriction on the type of security encryption and decryption module.

[0052] For example, a hash algorithm (such as MD5, SHA-1, SHA-256, HMAC-SHA256, or other hash algorithms) may be used to sign the encrypted information content to obtain first signature data of the encrypted information content.

[0053] Step 404: The security control entity sends a second release message to the security monitoring entity, and the security monitoring entity receives the second release message sent by the security control entity. The second release message may include, but is not limited to, at least one of the following: encrypted information content, first signature data for the encrypted information content, the IP address of the security control entity, the IP address of the information publishing entity (i.e., the IP address of the first type of information publishing entity), the unique identifier of the information board, the validity period of the information content to be published, and the publishing source method.

[0054] Exemplarily, the first type of information publishing entity sends the information content to be published to the security management entity, the security management entity encrypts the information content to be published (such as picture content, text content or video content) to obtain encrypted information content, and signs the encrypted information content to obtain first signature data.

[0055] The security control entity may send a second release message to the security monitoring entity. This second release message may carry the entire encrypted content. Alternatively, the security control entity may send multiple second release messages to the security monitoring entity. Each second release message may carry a portion of the encrypted content. The portion of the encrypted content is referred to as a to-be-distributed content group. The to-be-distributed content groups carried by the multiple second release messages may constitute the entire encrypted content.

[0056] For example, when the security control entity sends a second release message to the security monitoring entity, the second release message may also include the IP address of the security control entity and the IP address of the information publishing entity. For example, if the information publishing entity is a first-class information publishing entity, an entity that publishes information content to be published, the security control entity may add the IP address of the information publishing entity to the second release message. Furthermore, the security control entity may also add its own IP address to the second release message.

[0057] For example, when the security management and control entity sends a second release message to the security monitoring entity, the second release message may also include the unique identifier of the information board. For example, if it is necessary to display the screen corresponding to the information content to be released on information board A, the security management and control entity may add the unique identifier of information board A to the second release message, and the unique identifier of information board A may be the IP address of information board A.

[0058] Exemplarily, when the security control entity sends a second release message to the security monitoring entity, the second release message may also include the validity period of the information content to be released. The function of the validity period is that when the information board displays the screen corresponding to the information content to be released, the screen corresponding to the information content to be released is displayed within the validity period, and the screen corresponding to the information content to be released is not displayed outside the validity period.

[0059] Exemplarily, when the security control entity sends a second release message to the security monitoring entity, the second release message may further include a release source method, and the release source method may be a fixed release source method or a non-fixed release source method. The fixed release source method means that the first type of information release entity sends the information content to be released to the security monitoring entity through the security control entity, while the non-fixed release source method means that the second type of information release entity sends the information content to be released directly to the security monitoring entity without going through the security control entity.

[0060] When the security control entity sends the second publishing message to the security monitoring entity, the publishing source mode carried in the second publishing message may be a fixed publishing source mode, that is, the information content to be published is sent through the security control entity.

[0061] For example, the security management entity may include a security distribution module, which may send the second release message to the security monitoring entity. For example, the security monitoring entity may include a data receiving module, which may receive the second release message sent by the security management entity.

[0062] Step 405: The security monitoring entity determines the publishing source mode in the second publishing message. If the publishing source mode is a fixed publishing source mode, step 406 can be executed. If the publishing source mode is a non-fixed publishing source mode, the Figure 5The process is not limited to this process.

[0063] Step 406: The security monitoring entity determines whether the IP address of the information publishing entity exists in the second whitelist.

[0064] If so, that is, the second whitelist contains the IP address of the information publishing entity, step 407 may be executed.

[0065] If not, that is, the second whitelist does not contain the IP address of the information publishing entity, step 410 may be executed.

[0066] For example, for each legitimate information publishing entity (i.e., a trusted information publishing entity, i.e., an entity capable of sending information to the information board), if the legitimate information publishing entity is a Category 1 information publishing entity, the security control entity can obtain the legitimate information publishing entity's IP address. For example, the legitimate information publishing entity can send a registration message to the security control entity, which includes the legitimate information publishing entity's IP address and identity information. If the security control entity determines that the legitimate information publishing entity's identity is trustworthy based on the identity information, the legitimate information publishing entity's IP address is obtained from the registration message.

[0067] The security control entity then sends a registration message to the security monitoring entity. This registration message includes the IP address of the legitimate information publishing entity. That is, the security control entity sends the IP address of the legitimate information publishing entity to the security monitoring entity via the registration message. After receiving the registration message, the security monitoring entity can record the IP address of the legitimate information publishing entity in a second whitelist. This second whitelist, also known as the IP whitelist of trusted information board publishing sources, is used to record the IP addresses of all legitimate information publishing entities.

[0068] For each abnormal information publishing entity (i.e., an untrusted information publishing entity), the abnormal information publishing entity will not send a registration message to the security control entity, so that the second whitelist will not record the abnormal information publishing entity's IP address. Alternatively, even if the abnormal information publishing entity sends a registration message to the security control entity, the registration message will not carry the correct identity information, that is, the security control entity determines that the identity of the abnormal information publishing entity is untrusted, so the second whitelist will not record the abnormal information publishing entity's IP address.

[0069] From the above, it can be seen that the security monitoring entity can maintain a second whitelist, and the second whitelist is used to record the IP addresses of all normal information publishing entities (ie, first-category information publishing entities).

[0070] In step 406, the security monitoring entity can obtain the IP address of the information publishing entity from the second release message and determine whether the IP address of the information publishing entity exists in the second whitelist. If so, it indicates that the information publishing entity is a normal information publishing entity (i.e., a trusted information publishing entity). If not, it indicates that the information publishing entity is an abnormal information publishing entity (i.e., an untrusted information publishing entity).

[0071] Step 407: The security monitoring entity determines whether the IP address of the security management and control entity is the built-in IP address of the security monitoring entity. If yes, step 408 may be executed; if not, step 410 may be executed.

[0072] Exemplarily, the security monitoring entity may pre-configure the IP address of the security control entity, indicating that the security monitoring entity can only be managed by the security control entity, and not by other security control entities. For example, the security monitoring entity may be an industrial control box, and the IP address of the security control entity has been pre-configured when the security monitoring entity leaves the factory. Alternatively, the security control entity may also pre-send the IP address of the security control entity to the security monitoring entity, and the security monitoring entity pre-configures the IP address of the security control entity. For the sake of convenience, the IP address of the security control entity pre-configured by the security monitoring entity is called a built-in IP address, and the built-in IP address is the IP address of the security control entity built into the security monitoring entity.

[0073] In step 407, the security monitoring entity may obtain the IP address of the security control entity from the second publishing message and determine whether the IP address of the security control entity is a built-in IP address of the security monitoring entity. If so, it indicates that the security monitoring entity can be managed by the security control entity corresponding to the IP address; if not, it indicates that the security monitoring entity is not managed by the security control entity corresponding to the IP address.

[0074] Step 408: The security monitoring entity determines whether the unique identifier of the information board is a built-in identifier of the security monitoring entity. If yes, step 409 may be executed; if not, step 410 may be executed.

[0075] For example, the security monitoring entity can pre-configure the unique identifier of the information board to which the security monitoring entity is connected (such as the IP address of the information board), indicating that the security monitoring entity can only manage this information board and not other information boards. For example, the unique identifier of the information board is pre-configured when the security monitoring entity leaves the factory. Alternatively, the information board can also pre-send the unique identifier of the information board to the security monitoring entity, and the security monitoring entity can pre-configure the unique identifier of the information board. For ease of distinction, the unique identifier of the information board pre-configured by the security monitoring entity can be called a built-in identifier.

[0076] In step 408, the security monitoring entity may obtain the unique identifier of the information board from the second release message and determine whether the unique identifier of the information board is a built-in identifier of the security monitoring entity. If so, the security monitoring entity can manage the information board corresponding to the unique identifier; if not, the security monitoring entity cannot manage the information board corresponding to the unique identifier.

[0077] Step 409: The security monitoring entity decrypts the encrypted information content to obtain the information content to be released, and sends the information content to be released to the information board control card, so that the information board control card displays the picture corresponding to the information content to be released on the information board display screen, completing a one-way secure release of the information board content.

[0078] Exemplarily, the security monitoring entity may obtain the encrypted content and the first signature data of the encrypted content from the second release message, and sign the encrypted content to obtain the second signature data of the encrypted content. If the second signature data differs from the first signature data, it indicates that the encrypted content has been tampered with. Therefore, the security monitoring entity discards the encrypted content (i.e., discards the content to be released) and no longer displays the image corresponding to the content to be released on the information board display screen.

[0079] If the second signature data is identical to the first signature data, it indicates that the encrypted information content has not been tampered with. Therefore, the security monitoring entity decrypts the encrypted information content to obtain the information content to be released.

[0080] For example, the security monitoring entity includes a local encryption and decryption module, which signs the encrypted information content to obtain second signature data of the encrypted information content. If the second signature data is the same as the first signature data, the local encryption and decryption module decrypts the encrypted information content to obtain the information content to be released.

[0081] For example, if the second signature data is identical to the first signature data, the security monitoring entity may also obtain the validity period of the information content to be published from the second publication message and store the validity period of the information content to be published. Based on this, the information board control card displays the image corresponding to the information content to be published on the information board display screen during the validity period, and does not display the image corresponding to the information content to be published outside the validity period.

[0082] Step 410: If the IP address of the information publishing entity does not exist in the second whitelist, or the IP address of the security control entity is not the built-in IP address of the security monitoring entity, or the unique identifier of the information board is not the built-in identifier of the security monitoring entity, or the second signature data is different from the first signature data, the security monitoring entity discards the information content to be published (encrypted information content). In this way, the information content to be published is not sent to the information board control card, and the screen corresponding to the information content to be published is not displayed on the information board display screen.

[0083] It can be seen from the above technical solution that in the embodiment of the present application, the security management and control entity and the security monitoring entity can establish a two-way link security channel to ensure the security of the fixed publishing source sending information to the information board. By accurately pushing <the IP address of the security management and control entity, the IP address of the information publishing entity, the unique identifier of the information board, the content of the information to be published (encrypted information content and first label data), the validity period of the content of the information to be published, and the publishing source method>, two-way secure sending can be quickly achieved, ensuring the safety and reliability of the entire information board during the information publishing process, thereby solving the security problem of information publishing on the information board.

[0084] In a possible implementation, for the process in which the second type of information publishing entity sends the information content to be published to the information board, the embodiment of the present application proposes a two-way link security protection information board security management method, see Figure 5 FIG. 5 is a flow chart of the method, which may include:

[0085] Step 501: The second-category information publishing entity sends a first publishing message to the security monitoring entity, and the security monitoring entity receives the first publishing message sent by the second-category information publishing entity. The first publishing message may include, but is not limited to, at least one of the following: information content to be published, a target device characteristic value of the second-category information publishing entity, a unique identifier of the information board, and the validity period of the information content to be published.

[0086] For example, when the second-category information publishing entity sends a first publishing message to the security monitoring entity, the first publishing message may include information content to be published, which may be unencrypted information. The information content to be published may include, but is not limited to, image content, text content, or video content.

[0087] For example, when the second-category information publishing entity sends a first publishing message to the security monitoring entity, the first publishing message may also include a target device characteristic value of the second-category information publishing entity. The target device characteristic value may include the device serial number and / or device model of the second-category information publishing entity. For example, the device serial number and device model may be used as the target device characteristic value, or the target device characteristic value may be obtained by performing a calculation on the device serial number and device model. There is no restriction on the type of the target device characteristic value.

[0088] For example, when the second-category information publishing entity sends a first publishing message to the security monitoring entity, the first publishing message may also include the unique identifier of the information board. For example, if it is necessary to display the screen corresponding to the information content to be released on information board A, the second-category information publishing entity may add the unique identifier of information board A to the first publishing message, and the unique identifier of information board A may be the IP address of information board A.

[0089] Exemplarily, when the second-category information publishing entity sends a first publishing message to the security monitoring entity, the first publishing message may also include the validity period of the information content to be released. The function of the validity period is that when the information board displays the screen corresponding to the information content to be released, the screen corresponding to the information content to be released is displayed within the validity period, and the screen corresponding to the information content to be released is not displayed outside the validity period.

[0090] For example, when the second-category information publishing entity sends a first publishing message to the security monitoring entity, the first publishing message also includes a publishing source method, and the publishing source method is a non-fixed publishing source method. The second-category information publishing entity directly sends the information content to be published to the security monitoring entity without going through the security control entity.

[0091] Step 502: The security monitoring entity determines whether the target device characteristic value exists in the first whitelist.

[0092] If so, that is, the target device characteristic value exists in the first whitelist, step 503 may be executed.

[0093] If not, that is, the first whitelist does not contain the target device characteristic value, step 506 may be executed.

[0094] Exemplarily, the security monitoring entity can determine the publishing source mode in the first publishing message. If the publishing source mode is a non-fixed publishing source mode, it can be determined whether the target device feature value exists in the first whitelist. If the publishing source mode is a fixed publishing source mode, it can be used Figure 4 Process as shown.

[0095] For example, for each normal information publishing entity (i.e., a trusted information publishing entity, i.e., an information publishing entity capable of sending information content to be published to the information board), if the normal information publishing entity is a second-category information publishing entity, the security management and control entity can obtain the device characteristic value of the normal information publishing entity (such as the device serial number and / or device model of the second-category information publishing entity). For example, the normal information publishing entity can send a registration message to the security management and control entity, where the registration message includes the device characteristic value and identity information of the normal information publishing entity. If the security management and control entity determines that the identity of the normal information publishing entity is trustworthy based on the identity information, the device characteristic value of the normal information publishing entity is obtained from the registration message.

[0096] The security control entity then sends a registration message to the security monitoring entity. The registration message includes the device characteristic values ​​of the normal information publishing entity. That is, the security control entity sends the device characteristic values ​​of the normal information publishing entity to the security monitoring entity via the registration message. After receiving the registration message, the security monitoring entity records the device characteristic values ​​of the normal information publishing entity in a first whitelist. The first whitelist, also known as the characteristic value whitelist of trusted information board publishing sources, is used to record the device characteristic values ​​of all normal information publishing entities.

[0097] For each abnormal information publishing entity (i.e., an untrusted information publishing entity), the abnormal information publishing entity will not send a registration message to the security control entity, so that the first whitelist will not record the device characteristic value of the abnormal information publishing entity. Alternatively, even if the abnormal information publishing entity sends a registration message to the security control entity, the registration message will not carry the correct identity information. In other words, the security control entity has determined that the identity of the abnormal information publishing entity is untrusted, so the first whitelist will not record the device characteristic value of the abnormal information publishing entity.

[0098] From the above, it can be seen that the security monitoring entity can maintain a first whitelist, and the first whitelist is used to record the device characteristic values ​​of all normal information publishing entities (ie, second-category information publishing entities).

[0099] In step 502, the security monitoring entity may obtain the target device characteristic value of the information publishing entity from the first publication message and determine whether the target device characteristic value exists in the first whitelist. If so, it indicates that the information publishing entity is a normal information publishing entity (i.e., a trusted information publishing entity). If not, it indicates that the information publishing entity is an abnormal information publishing entity (i.e., an untrusted information publishing entity).

[0100] Step 503: The security monitoring entity determines whether the unique identifier of the information board is a built-in identifier of the security monitoring entity. If yes, step 504 may be executed; if not, step 506 may be executed.

[0101] For example, the security monitoring entity may pre-configure the unique identifier of the information board to which it is connected (e.g., the IP address of the information board). For example, the unique identifier of the information board may be pre-configured when the security monitoring entity leaves the factory. Alternatively, the information board may pre-transmit its unique identifier to the security monitoring entity, which then pre-configures the unique identifier. For ease of distinction, the unique identifier of the information board pre-configured by the security monitoring entity may be referred to as a built-in identifier.

[0102] In step 503, the security monitoring entity may obtain the unique identifier of the information board from the first publishing message, and determine whether the unique identifier of the information board is a built-in identifier of the security monitoring entity.

[0103] In step 504, the security monitoring entity verifies whether the content of the information to be published is normal. If so, step 505 is executed. If not, step 506 is executed. For example, the security monitoring entity may include a local detection module that obtains the content of the information to be published from the first publish message and verifies whether the content of the information to be published is normal.

[0104] For example, if the information to be published is an image, an OCR recognition algorithm is used to verify whether the image content is normal. Alternatively, an AI model is used to verify whether the image content is normal. For example, the image content is input into a trained AI model, and the AI ​​model processes the image content to obtain a verification result of the image content. The verification result indicates that the image content is normal, or the verification result indicates that the image content is abnormal.

[0105] For example, if the information to be published is text, an OCR recognition algorithm is used to verify whether the text is normal. Alternatively, an AI model can be used to verify whether the text is normal. For example, the text is input into an OCR recognition algorithm, and the OCR recognition algorithm is used to identify whether there is any abnormal information in the text. If the OCR recognition algorithm identifies abnormal information in the text, it can be determined that the text is abnormal. If it identifies no abnormal information in the text, it can be determined that the text is normal.

[0106] For example, if the information content to be released is video content, the security monitoring entity can send the video content to the security management and control entity, and the security management and control entity will verify whether the video content is normal and obtain a verification result. For example, the security management and control entity verifies whether the video content is normal through an AI model. For example, the video content can be input into a trained AI model, and the video content can be processed by the AI ​​model to obtain a verification result of the video content. The verification result can indicate that the video content is normal, or the verification result can indicate that the video content is abnormal. Then, the security monitoring entity can receive the verification result returned by the security management and control entity, and the verification result indicates that the video content is normal, or the verification result indicates that the video content is abnormal.

[0107] For example, if the information content to be released is picture content or text content, the security monitoring entity uses the local detection module to perform security detection on the picture content or text content. If the detection result indicates that the content is normal, step 505 is executed; if the detection result indicates that the content is abnormal, step 506 is executed.

[0108] If the information content to be released is video content, it will take up a lot of computing resources. Based on this, the security monitoring entity itself does not perform security checks on the video content. The security monitoring entity may include a heartbeat data sending module. The security monitoring entity establishes a data security channel with the security management module of the security control entity through the heartbeat data sending module. The security monitoring entity transmits the video content to the security control entity through the data security channel, and the security control entity performs security checks on the video content. The security control entity sends the test results to the security monitoring entity through the data security channel. If the test result indicates that the content is normal, step 505 is executed. If the test result indicates that the content is abnormal, step 506 is executed.

[0109] Step 505: The security monitoring entity sends the information content to be released to the information board control card, so that the information board control card displays the picture corresponding to the information content to be released on the information board display screen.

[0110] For example, the security monitoring entity may also obtain the validity period of the information content to be released from the first release message and store the validity period of the information content to be released. Based on this, during the validity period, the information board control card displays the image corresponding to the information content to be released on the information board display screen. Outside the validity period, the information board control card does not display the image corresponding to the information content to be released on the information board display screen.

[0111] Step 506: If the target device characteristic value does not exist in the first whitelist, or the unique identifier of the information board is not the built-in identifier of the security monitoring entity, or the content of the information to be released is abnormal, the security monitoring entity discards the content of the information to be released. In this way, the security monitoring entity does not send the content of the information to be released to the information board control card, nor does it display the screen corresponding to the content of the information to be released on the information board display screen.

[0112] Exemplarily, the security monitoring entity may send the sixth heartbeat message to the security control entity. For example, the security monitoring entity establishes a data security channel with the security management module of the security control entity through the heartbeat data sending module, and the security monitoring entity sends the sixth heartbeat message to the security control entity through the data security channel.

[0113] The sixth heartbeat message may include the target device characteristic value of the information publishing entity. Based on this target device characteristic value, the security management entity learns that the information publishing entity corresponding to the target device characteristic value sends the information content to be published to the security monitoring entity, that is, it learns which information publishing entity sends the information content to be published.

[0114] The sixth heartbeat message may include a screenshot of the information content to be released. Based on the screenshot, the security management and control entity obtains the screenshot of the information content to be released, that is, obtains the content of the information to be released.

[0115] The sixth heartbeat message may include release result information. If the security monitoring entity sends the information content to be released to the information board control card so that the information board control card displays the image corresponding to the information content to be released on the information board display screen, the release result information indicates that the content was successfully released, and the security management and control entity learns based on the release result information that the image corresponding to the information content to be released has been displayed on the information board display screen. If the security monitoring entity discards the information content to be released, that is, the security monitoring entity does not send the information content to be released to the information board control card, the release result information indicates that the content release failed, and the security management and control entity learns based on the release result information that the image corresponding to the information content to be released has not been displayed on the information board display screen.

[0116] To sum up, regardless of whether the content is released successfully or failed, the security monitoring entity sends the sixth heartbeat message to the security management entity. The sixth heartbeat message may include the target device characteristic value, release result information, and a screenshot of the information content to be released. The security management entity completes the recording of the release results.

[0117] As can be seen from the above technical solutions, in the embodiments of the present application, the security of information sent to the information board by non-fixed publishing sources can be ensured. By accurately pushing the <target device characteristic value of the information publishing entity, the unique identifier of the information board, the content of the information to be published, and the validity period of the information content to be published>, two-way secure transmission can be quickly achieved, ensuring the safety and reliability of the entire information board during the information publishing process, and solving the security problem of information released by the information board. It can ensure the data release of non-fixed publishing sources. If the released content is a video, security detection can be performed using the security control entity to reduce the detection pressure of the security monitoring entity. At the same time, the detection link is safe and reliable, ensuring the safety and reliability of the sent content, and ensuring the security of information released by non-fixed publishing sources.

[0118] In a possible implementation, a security management method for an information board with bidirectional link security protection is proposed in the embodiment of the present application for monitoring the displayed image of the information board display screen by the security monitoring entity. Figure 6 FIG. 5 is a flow chart of the method, which may include:

[0119] Step 601: The security monitoring entity obtains the displayed image of the information board display screen. For example, the security monitoring entity may periodically (regularly) obtain the displayed image of the information board display screen.

[0120] For example, the security monitoring entity can send a screen acquisition message to the information board control card. After receiving the screen acquisition message, the information board control card obtains the displayed screen on the information board display screen, such as by taking a screenshot of the displayed screen on the information board display screen. The information board control card sends a screen response message to the security monitoring entity, and the security monitoring entity receives a screen response message returned by the information board control card. The screen response message may include the displayed screen on the information board display screen.

[0121] Step 602: The security monitoring entity performs a security check on the displayed image to obtain a security check result.

[0122] For example, the security monitoring entity can input the displayed image into a trained AI model, and use the AI ​​model to perform a security check on the displayed image to obtain a security check result for the displayed image. The security check result indicates whether the displayed image contains abnormal information or does not contain abnormal information. Of course, other methods can also be used to perform security checks on the displayed image, and this detection method is not limited.

[0123] Step 603: If the security detection result indicates that the displayed screen has abnormal information, the security monitoring entity obtains the first risk handling strategy corresponding to the information board display screen. If the security detection result indicates that the displayed screen has no abnormal information, wait for the next acquisition cycle and re-acquire the displayed screen of the information board display screen.

[0124] Exemplarily, the security monitoring entity and the security control entity may establish a data security channel, and the security control entity sends a security policy to the security monitoring entity through the data security channel. The security policy may include a first risk handling policy, and the security monitoring entity stores the first risk handling policy.

[0125] For example, the first risk handling strategy may include but is not limited to a base map replacement handling strategy, a screen off handling strategy, or an information board power off handling strategy, and there is no restriction on this first risk handling strategy.

[0126] On this basis, in step 603, if the security detection result indicates that abnormal information exists in the displayed image, the security monitoring entity can obtain the stored first risk handling strategy.

[0127] Step 604: The security monitoring entity performs security processing on the displayed image of the information board display screen based on the first risk handling strategy. For example, if the first risk handling strategy is a base map replacement handling strategy, the displayed image of the information board display screen is replaced with the base map, that is, the base map is displayed through the information board display screen. The base map can be a configured default image, which is a safe image, and there is no restriction on this base map. Alternatively, if the first risk handling strategy is a screen-off handling strategy, the information board display screen is subjected to screen-off processing, that is, the image is no longer displayed. Alternatively, if the first risk handling strategy is a power-off handling strategy for the information board, the information board display screen is powered off, or the information board display screen and the information board control card are powered off.

[0128] Exemplarily, the security monitoring entity may include a risk handling module and a local detection module. The risk handling module periodically obtains the displayed image of the information board display screen, and the local detection module performs a security detection on the displayed image to obtain a security detection result. If the security detection result indicates that there is abnormal information in the displayed image, the risk handling module obtains the first risk handling strategy corresponding to the information board display screen, and the risk handling module performs security processing on the displayed image of the information board display screen based on the first risk handling strategy.

[0129] Step 605: The security monitoring entity sends a first heartbeat message to the security management entity. The first heartbeat message may include a unique identifier of the information board (such as the IP address of the information board) and screen abnormality data. The screen abnormality data indicates that there is abnormal information on the displayed screen of the information board display screen.

[0130] Exemplarily, the security monitoring entity includes a heartbeat data sending module, and the security control entity includes a security management module. A data security channel can be established between the heartbeat data sending module and the security management module, and the security monitoring entity can send a first heartbeat message to the security control entity through the data security channel.

[0131] Step 606: After receiving the first heartbeat message, the security management entity obtains the unique identifier and screen abnormality data of the information board from the first heartbeat message, and determines that there is abnormal information on the displayed screen of the information board display screen corresponding to the unique identifier based on the unique identifier and screen abnormality data.

[0132] For example, since the screen anomaly data is used to indicate that an abnormality exists in the displayed screen, the security management and control entity determines that an abnormality exists in the displayed screen of the information board display screen based on the screen anomaly data. Based on the unique identifier of the information board, the security management and control entity knows which information board display screen (i.e., the information board display screen corresponding to the unique identifier) ​​has abnormal information in the displayed screen. In summary, based on the first heartbeat message, the security management and control entity can grasp the abnormal situation of the information board. The security management and control entity can also notify the operation and maintenance personnel through email, text message, or pop-up alert to quickly deal with the abnormal situation.

[0133] It can be seen from the above technical solutions that the security management entity can timely control the security information of the information board, avoid the risk of the information board itself being tampered with by other contacts, and improve the reverse security of the information board.

[0134] In a possible implementation, for the process in which the security monitoring entity monitors the validity period of the displayed image, a security management method for an information board with bidirectional link security protection is proposed in the embodiment of the present application. Figure 7 FIG. 5 is a flow chart of the method, which may include:

[0135] Step 701: The security monitoring entity obtains the validity period of the displayed image on the information board display screen. For example, the security monitoring entity may periodically (regularly) obtain the validity period of the displayed image on the information board display screen.

[0136] For example, after obtaining the validity period of the information to be released from the first or second release message, the security monitoring entity stores the validity period of the information to be released. Based on this, the security monitoring entity obtains the validity period of the displayed image on the information board (i.e., the displayed image corresponding to the information to be released).

[0137] Step 702: If the current time is not within the validity period of the displayed image, the security monitoring entity obtains the second risk management strategy corresponding to the information board display screen. If the current time is within the validity period of the displayed image, the security monitoring entity waits for the next acquisition cycle and re-acquires the validity period of the displayed image.

[0138] Exemplarily, the security monitoring entity and the security control entity can establish a secure data channel. The security control entity transmits a security policy to the security monitoring entity via the secure data channel. The security policy may include a second risk management policy, which is then stored by the security monitoring entity. For example, the second risk management policy may include, but is not limited to, a basemap replacement policy or a screen-off policy, and there are no restrictions on such second risk management policies. Based on this, in step 702, if the current time is not within the validity period of the displayed image, the security monitoring entity may retrieve the stored second risk management policy.

[0139] In step 703, the security monitoring entity performs security processing on the displayed image on the information board screen based on the second risk management strategy. For example, if the second risk management strategy is a base image replacement strategy, the displayed image on the information board screen is replaced with the base image, i.e., the base image is displayed on the information board screen. If the second risk management strategy is a screen-off strategy, the information board screen is turned off.

[0140] For example, by securely processing the displayed images on the information board display screen, it is possible to prevent outdated information from affecting relevant personnel viewing the information on the information board (such as vehicles traveling on the highway).

[0141] Step 704: The security monitoring entity sends a fifth heartbeat message to the security management entity. The fifth heartbeat message may include the unique identifier of the information board (such as the IP address of the information board) and validity period exception data. The validity period exception data may indicate that there is an exception in the validity period of the displayed image on the information board display screen.

[0142] Exemplarily, a data security channel may be established between the security monitoring entity and the security management and control entity, and the security monitoring entity may send the fifth heartbeat message to the security management and control entity through the data security channel.

[0143] Exemplarily, the security monitoring entity may include a risk handling module, which periodically obtains the validity period of the displayed image on the information board display screen, obtains the second risk handling strategy, and performs security processing on the displayed image based on the second risk handling strategy.

[0144] Step 705: After receiving the fifth heartbeat message, the security management entity obtains the unique identifier and validity exception data of the information board from the fifth heartbeat message, and based on the unique identifier and validity exception data of the information board, determines that the displayed image on the information board display screen corresponding to the unique identifier is not within the validity period.

[0145] For example, because the validity period anomaly data indicates an anomaly in the validity period of the displayed image, the security management and control entity determines, based on the validity period anomaly data, that the displayed image on the information board display screen is not within the validity period. Based on the information board's unique identifier, the security management and control entity determines which information board display screen (i.e., the information board display screen corresponding to the unique identifier) ​​has a displayed image that is not within the validity period. In summary, based on the fifth heartbeat message, the security management and control entity can grasp the abnormal situation of the information board. The security management and control entity can notify operations and maintenance personnel via email, text message, or pop-up alert to quickly address the abnormal situation.

[0146] It can be seen from the above technical solutions that the security management entity can timely control the security information of the information board, avoid the risk caused by the displayed image of the information board not being valid, and improve the reverse security of the information board.

[0147] In one possible implementation, a security monitoring entity monitors the physical environment information of the information board control card, and an information board security management and control method with bidirectional link security protection is proposed in the embodiment of the present application. Figure 8 FIG. 5 is a flow chart of the method, which may include:

[0148] Step 801: The security monitoring entity obtains the physical environment information of the intelligence board control card. The physical environment information may include but is not limited to at least one of environmental parameters, the opening state of the chassis cabinet, and the power supply state.

[0149] For example, the security monitoring entity may include an environment perception module, through which the security monitoring entity perceives the environment in which the information board control card is located and obtains the physical environment information of the information board control card.

[0150] For example, the environmental parameters may include, but are not limited to, the temperature and / or humidity of the information board control card. For example, a temperature sensor may be deployed on the information board control card to measure the temperature of the information board control card, thereby allowing the security monitoring entity to obtain the temperature of the information board control card. A humidity sensor may also be deployed on the information board control card to measure the humidity of the information board control card, thereby allowing the security monitoring entity to obtain the humidity of the information board control card.

[0151] For example, the information board control card can be placed in a chassis cabinet. On the basis of additionally deploying a security monitoring entity, the security monitoring entity and the information board control card can be placed in the same chassis cabinet. The security monitoring entity can obtain the open state of the chassis cabinet, and the open state indicates that the chassis cabinet is open or the chassis cabinet is closed. Obviously, when the security monitoring entity and the information board control card are placed in the same chassis cabinet, the chassis cabinet needs to be in a closed state. Once the open state indicates that the chassis cabinet is open, it means that the chassis cabinet has been opened abnormally, and the security monitoring entity and / or the information board control card in the chassis cabinet may be lost.

[0152] For example, in addition to deploying the security monitoring entity and the information board control card in the chassis cabinet, a power supply can also be placed in the chassis cabinet to supply power to the security monitoring entity, the information board control card, and the information board display screen. If the power supply in the chassis cabinet suddenly loses power, it will no longer be able to supply power to the security monitoring entity, the information board control card, and the information board display screen. Based on this, the security monitoring entity can obtain the power supply status in the chassis cabinet. The power supply status can indicate that the power supply in the chassis cabinet has been disconnected, so that the power supply can no longer supply power to the security monitoring entity, the information board control card, and the information board display screen; or, the power supply status can indicate that the power supply in the chassis cabinet has not been disconnected, so that the power supply can continue to supply power to the security monitoring entity, the information board control card, and the information board display screen.

[0153] Step 802: If the physical environment information includes environmental parameters, and the environmental parameters indicate that the temperature or humidity of the information board control card is greater than a threshold (e.g., the temperature is greater than a preset temperature threshold, or the humidity is greater than a preset humidity threshold), the security monitoring entity sends a second heartbeat message to the security management and control entity. The second heartbeat message may include the unique identifier of the information board (e.g., the IP address of the information board) and environmental parameter abnormality data. The environmental parameter abnormality data may indicate that the temperature or humidity of the information board control card is greater than the threshold. If the environmental parameters indicate that the temperature and humidity of the information board control card are not greater than the threshold, the security monitoring entity refrains from sending the second heartbeat message to the security management and control entity and waits for the next cycle to continue acquiring environmental parameters.

[0154] Exemplarily, a data security channel may be established between the security monitoring entity and the security management and control entity, and the security monitoring entity may send the second heartbeat message to the security management and control entity through the data security channel.

[0155] Step 803: After receiving the second heartbeat message, the security management entity obtains the unique identifier of the information board and the abnormal environmental parameter data from the second heartbeat message, and determines that there is an abnormality in the environment of the information board control card corresponding to the unique identifier based on the unique identifier and the abnormal environmental parameter data.

[0156] For example, since the abnormal environmental parameter data indicates that there is an abnormality in the environment of the information board control card (such as the temperature or humidity of the information board control card is greater than the threshold), the security management and control entity determines that there is an abnormality in the environment of the information board control card based on the abnormal environmental parameter data. Based on the unique identifier of the information board, the security management and control entity knows which information board control card (that is, the information board control card corresponding to the unique identifier) ​​has an abnormal environment. In summary, based on the second heartbeat message, the security management and control entity can grasp the abnormal situation of the information board (such as abnormal temperature or humidity). The security management and control entity can notify the operation and maintenance personnel through email, text message or pop-up alarm to quickly deal with the abnormal situation and quickly locate the security problem.

[0157] Step 804: If the physical environment information includes the chassis cabinet's open status, and the open status indicates that the chassis cabinet is open, the security monitoring entity sends a third heartbeat message to the security management and control entity. The third heartbeat message may include the unique identifier of the intelligence board and chassis cabinet abnormality data. The chassis cabinet abnormality data may indicate that the chassis cabinet where the intelligence board control card is located is abnormally open. If the open status indicates that the chassis cabinet is closed, the third heartbeat message is prohibited from being sent to the security management and control entity, and the chassis cabinet open status is continuously acquired in the next cycle.

[0158] Exemplarily, a data security channel may be established between the security monitoring entity and the security management and control entity, and the security monitoring entity may send the third heartbeat message to the security management and control entity through the data security channel.

[0159] Step 805: After receiving the third heartbeat message, the security management entity obtains the unique identifier of the intelligence board and the chassis cabinet abnormality data from the third heartbeat message, and determines whether the chassis cabinet of the intelligence board control card corresponding to the unique identifier is opened (i.e., abnormally opened) based on the unique identifier of the intelligence board and the chassis cabinet abnormality data.

[0160] For example, because the chassis abnormality data indicates that the chassis of the information board control card is abnormally opened, the security management and control entity determines, based on the chassis abnormality data, that the chassis of the information board control card is abnormally opened. Based on the unique identifier of the information board, the security management and control entity determines which information board control card (i.e., the information board control card corresponding to the unique identifier) ​​has its chassis abnormally opened. In summary, based on the third heartbeat message, the security management and control entity can understand the abnormality of the information board (e.g., the abnormal opening of the chassis).

[0161] The security control entity can also notify operation and maintenance personnel through email, text messages or pop-up alerts to quickly deal with abnormal situations, thereby quickly locating security issues.

[0162] Step 806: If the physical environment information includes power supply status, and the power supply status indicates that the power supply in the chassis cabinet is off, the security monitoring entity sends a fourth heartbeat message to the security management and control entity. The fourth heartbeat message may include the unique identifier of the information board and power supply anomaly data. The power supply anomaly data may indicate that the power supply in the chassis cabinet is off. If the power supply status indicates that the power supply in the chassis cabinet is not off, the fourth heartbeat message is prohibited from being sent to the security management and control entity, and the power supply status is continued to be obtained in the next cycle.

[0163] Exemplarily, a data security channel may be established between the security monitoring entity and the security management and control entity, and the security monitoring entity may send the fourth heartbeat message to the security management and control entity through the data security channel.

[0164] Step 807: After the security management entity receives the fourth heartbeat message, it obtains the unique identifier and power anomaly data of the intelligence board from the fourth heartbeat message, and based on the unique identifier and power anomaly data of the intelligence board, determines that the power supply of the intelligence board control card corresponding to the unique identifier has been cut off, that is, the power supply in the chassis cabinet has been cut off.

[0165] For example, because the power anomaly data indicates that the power supply in the chassis cabinet has been cut off, the security management and control entity determines that the power supply in the chassis cabinet has been cut off based on the power anomaly data. Based on the unique identifier of the information board, the security management and control entity knows which information board control card (i.e., the information board control card corresponding to the unique identifier) ​​has the power supply in the chassis cabinet cut off. In summary, the security management and control entity can grasp the abnormal situation of the information board (such as the power supply has been cut off). The security management and control entity can also notify the operation and maintenance personnel to quickly deal with the abnormal situation through email, text message, or pop-up alarm, thereby quickly locating the security issue.

[0166] For example, when the power supply in the chassis cabinet is suddenly cut off, in order to enable the security monitoring entity to send the fourth heartbeat message to the security management entity, that is, to be able to send the fourth heartbeat message in time when the power supply is suddenly cut off, the security monitoring entity can have a built-in capacitor storage module, and the capacitor storage module can provide power to the security monitoring entity after the power supply is cut off, so that the security monitoring entity can continue to work for a period of time, such as 30 seconds to 1 minute.

[0167] In this way, when the power is suddenly cut off, based on the power provided by the capacitor storage module, the security monitoring entity can also send a fourth heartbeat message to the security management entity, so that the security management entity knows that the power of the intelligence board control card has been cut off, avoiding the security risks caused by the security management entity being unaware of the power outage.

[0168] It can be seen from the above technical solutions that the security management and control entity can timely control the security information of the information board, avoid the risks caused by environmental anomalies of the information board, and improve the reverse security of the information board.

[0169] As can be seen from the above technical solutions, in the embodiment of the present application, a two-way link audit is performed by a security monitoring entity and a security control entity. The data issued by the information publishing entity is audited by the security control entity first. At the same time, the published content is encrypted through the link. In combination with the fact that the security monitoring entity can only audit text and pictures, the video audit is completed through reverse transmission and direct audit methods, and the state of the environment in which the security monitoring entity is located is sensed to provide timely warnings. The connection between the security monitoring entity and the security control entity is achieved through a heartbeat mechanism, and abnormalities of the information board are discovered in a timely manner. In order to avoid the impact of power outages, the security monitoring entity adds a capacitor storage mechanism, which can quickly locate abnormalities in the environment where the information board is located and notify the security control entity for detection and discovery. The security control entity can receive the heartbeat information, alarm information and content information to be detected by the security monitoring entity. The security monitoring entity can monitor the safety of the physical environment in which it is located, such as temperature, humidity, cabinet door opening and abnormal power outage, complete the reporting of the environment, and ensure the two-way security of the information publishing link. The security management and control entity and the security monitoring entity establish a two-way link security channel, which can ensure the security of information sent to the intelligence board by fixed and non-fixed publishing sources. At the same time, it can quickly locate physical environment anomalies and abnormal information of validity period, and can quickly realize two-way secure transmission.

[0170] Based on the same application concept as the above method, an information board security control device with bidirectional link security protection is proposed in the embodiment of the present application. The information board includes an information board control card and an information board display screen. The device is applied to a security monitoring entity. The security monitoring entity and the information board control card are placed in the same chassis cabinet. Figure 9A FIG. 1 is a schematic structural diagram of the device, which includes:

[0171] The acquisition module 911 is used to send a picture acquisition message to the information board control card and receive a picture response message returned by the information board control card, wherein the picture response message includes the displayed picture of the information board display screen;

[0172] A detection module 912 is configured to perform a security detection on the displayed image to obtain a security detection result;

[0173] Processing module 913 is configured to, if the security detection result indicates that the displayed image contains abnormal information, obtain a first risk handling strategy corresponding to the information board display screen, and perform security processing on the displayed image on the information board display screen based on the first risk handling strategy; wherein the first risk handling strategy includes a base image replacement handling strategy, a screen off handling strategy, or an information board power off handling strategy;

[0174] The sending module 914 is used to send a first heartbeat message to the security management entity, wherein the first heartbeat message includes the unique identifier of the information board and screen abnormality data, so that the security management entity can determine, based on the first heartbeat message, that there is abnormal information on the displayed screen of the information board display screen corresponding to the unique identifier.

[0175] Exemplarily, the acquisition module 911 is further configured to acquire physical environment information of the information board control card, the physical environment information including at least one of environmental parameters, the opening state of the chassis, and the power supply state. The sending module 914 is further configured to send a second heartbeat message to the security management entity if the physical environment information includes the environmental parameters, and the environmental parameters indicate that the temperature or humidity of the information board control card is greater than a threshold value, the second heartbeat message including the unique identifier of the information board and environmental parameter abnormality data, so that the security management entity determines, based on the second heartbeat message, that an abnormality exists in the environment of the information board control card corresponding to the unique identifier. The sending module 914 is further configured to send a third heartbeat message to the security management entity if the physical environment information includes the opening state of the chassis, and the opening state indicates that the chassis is opened, the third heartbeat message including the unique identifier of the information board and chassis abnormality data, so that the security management entity determines, based on the third heartbeat message, that the chassis of the information board control card corresponding to the unique identifier is opened. The sending module 914 is also used to send a fourth heartbeat message to the security management entity if the physical environment information includes the power supply status, and the power supply status indicates that the power supply in the chassis cabinet has been cut off. The fourth heartbeat message includes the unique identifier of the intelligence board and power supply abnormality data, so that the security management entity determines that the power supply of the intelligence board control card corresponding to the unique identifier has been cut off based on the fourth heartbeat message.

[0176] Exemplarily, the acquisition module 911 is also used to obtain the validity period of the displayed image of the information board display screen; the processing module 913 is also used to obtain the second risk handling strategy corresponding to the information board display screen if the current time is not within the validity period, and perform security processing on the displayed image of the information board display screen based on the second risk handling strategy; wherein the second risk handling strategy includes a background map replacement handling strategy or a screen off handling strategy; the sending module 914 is also used to send a fifth heartbeat message to the security management entity, and the fifth heartbeat message includes the unique identifier of the information board and validity period exception data, so that the security management entity determines that the displayed image of the information board display screen corresponding to the unique identifier is not within the validity period based on the fifth heartbeat message.

[0177] Exemplarily, the acquisition module 911 is also used to receive a first publishing message sent by an information publishing entity, wherein the first publishing message includes the information content to be published, the target device characteristic value of the information publishing entity, and the unique identifier of the information board; the processing module 913 is also used to determine whether the target device characteristic value exists in the first white list; wherein, when the security management entity sends the device characteristic value of the normal information publishing entity to the security monitoring entity, the security monitoring entity records the device characteristic value of the normal information publishing entity in the first white list; if the target device characteristic value exists, then determine whether the unique identifier of the information board is a built-in identifier of the security monitoring entity, and if so, check whether the information content to be published is normal; wherein, the security monitoring entity has a built-in unique identifier of the information board connected to the security monitoring entity; the sending module 914 is also used to send the information content to be published to the information board control card if the information content to be published is normal, so that the information board control card displays the screen corresponding to the information content to be published on the information board display screen.

[0178] Exemplarily, when the processing module 913 verifies whether the content of the information to be released is normal, it is specifically used to: if the information content to be released is picture content or text content, then use the OCR recognition algorithm to verify whether the picture content or text content is normal; or, verify whether the picture content or text content is normal through the AI ​​model; if the information content to be released is video content, then send the video content to the security control entity, so that the security control entity verifies whether the video content is normal and obtains a verification result; receive the verification result returned by the security control entity, the verification result indicates that the video content is normal, or the verification result indicates that the video content is abnormal.

[0179] Exemplarily, the processing module 913 is also used to discard the information content to be published if the target device characteristic value does not exist in the first whitelist, or the unique identifier of the information board is not the built-in identifier of the security monitoring entity, or the content of the information to be published is abnormal; the sending module 914 is also used to send a sixth heartbeat message to the security management entity, the sixth heartbeat message includes the target device characteristic value of the information publishing entity, a screenshot of the information content to be published and publishing result information, the publishing result information indicates that the content is published successfully or the content fails to be published; wherein, if the information content to be published is sent to the information board control card, the publishing result information indicates that the content is published successfully; if the information content to be published is discarded, the publishing result information indicates that the content fails to be published.

[0180] Exemplarily, the acquisition module 911 is further used to receive a second publishing message sent by the security control entity, the second publishing message including the encrypted information content, the IP address of the security control entity, the IP address of the information publishing entity, and the unique identifier of the information board; wherein, the second publishing message is sent by the security control entity after determining that the information content to be published sent by the information publishing entity is normal, and the encrypted information content is obtained by encrypting the information content to be published; the processing module 913 is further used to determine whether the IP address of the information publishing entity exists in the second white list; when the security control entity sends the IP address of the normal information publishing entity to the security monitoring entity, the security monitoring entity records it in the second white list. The IP address of the normal information publishing entity; if the IP address of the information publishing entity exists, then determine whether the unique identifier of the information board is the built-in identifier of the security monitoring entity, and whether the IP address of the security management and control entity is the built-in IP address of the security monitoring entity; the security monitoring entity has a built-in unique identifier of the information board connected to the security monitoring entity, and a built-in IP address of the security management and control entity; if so, decrypt the encrypted information content to obtain the information content to be released; the sending module 914 is also used to send the information content to be released to the information board control card, so that the information board control card displays the picture corresponding to the information content to be released on the information board display screen.

[0181] Based on the same application concept as the above method, the embodiment of the present application proposes an electronic device (such as a security monitoring entity), see Figure 9B As shown, it includes a processor 921 and a machine-readable storage medium 922, and the machine-readable storage medium 922 stores machine-executable instructions that can be executed by the processor 921; the processor 921 is used to execute the machine-executable instructions to implement the intelligence board security management method for bidirectional link security protection disclosed in the above example.

[0182] Based on the same application concept as the above method, an embodiment of the present application also provides a machine-readable storage medium, on which a number of computer instructions are stored. When the computer instructions are executed by a processor, the information board security management method for bidirectional link security protection disclosed in the above example of the present application can be implemented. The above-mentioned machine-readable storage medium can be any electronic, magnetic, optical or other physical storage device, which can contain or store information, such as executable instructions, data, etc. For example, the machine-readable storage medium can be: RAM (Random Access Memory), volatile memory, non-volatile memory, flash memory, storage drive (such as hard disk drive), solid state drive, any type of storage disk (such as optical disk, DVD, etc.), or similar storage medium, or a combination thereof.

[0183] Based on the same application concept as the above method, an embodiment of the present application also provides a computer program product, which may include a computer program. When the computer program is executed by a processor, it implements the information board security management method for bidirectional link security protection disclosed in the above example of the present application.

[0184] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may take the form of a fully hardware embodiment, a fully software embodiment, or an embodiment combining software and hardware. Furthermore, the embodiments of the present application may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code. The foregoing is merely an embodiment of the present application and is not intended to limit the present application. Various modifications and variations are possible for those skilled in the art. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present application shall be included within the scope of the claims of the present application.

Claims

1. A method for information board security management and control with bidirectional link security protection, characterized in that: The information board includes an information board control card and an information board display screen. The method is applied to a security monitoring entity, and the security monitoring entity and the information board control card are placed in the same chassis cabinet. The method includes: Send a screen acquisition message to the information board control card, and receive a screen response message returned by the information board control card, the screen response message including the displayed screen of the information board display screen; perform a security check on the displayed screen to obtain a security check result; if the security check result indicates that there is abnormal information in the displayed screen, obtain the first risk handling strategy corresponding to the information board display screen, and perform security processing on the displayed screen of the information board display screen based on the first risk handling strategy; wherein the first risk handling strategy includes a base map replacement handling strategy, a screen off handling strategy, or an information board power-off handling strategy; send a first heartbeat message to the security management and control entity, the first heartbeat message including the unique identifier of the information board and screen abnormality data, so that the security management and control entity determines that there is abnormal information in the displayed screen of the information board display screen corresponding to the unique identifier based on the first heartbeat message; wherein, receiving a second publishing message sent by the security control entity, the second publishing message includes encrypted information content, the IP address of the security control entity, the IP address of the first type of information publishing entity, and the unique identifier of the information board; wherein, the second publishing message is sent after the security control entity determines that the information content to be published sent by the first type of information publishing entity is normal, and the encrypted information content is obtained by encrypting the information content to be published; judging whether the IP address of the first type of information publishing entity exists in the second white list; wherein, when the security control entity sends the IP address of the normal information publishing entity to the security monitoring entity, the security monitoring entity records the IP address of the normal information publishing entity in the second white list address; if there is an IP address of the first type of information publishing entity, then determine whether the unique identifier of the information board is the built-in identifier of the security monitoring entity, and whether the IP address of the security management and control entity is the built-in IP address of the security monitoring entity; wherein, the security monitoring entity is pre-configured with the unique identifier of the information board connected to the security monitoring entity when it leaves the factory, and the security monitoring entity is pre-configured with the IP address of the security management and control entity when it leaves the factory; if so, decrypt the encrypted information content to obtain the information content to be released; send the information content to be released to the information board control card, so that the information board control card displays the picture corresponding to the information content to be released on the information board display screen; Among them, when the first type of information publishing entity sends the information content to be released to the information board, the first type of information publishing entity sends the information content to be released to the security control entity, and the security control entity sends the information content to be released to the information board.

2. The method according to claim 1, characterized in that The method further comprises: Acquire physical environment information of the intelligence board control card, the physical environment information including at least one of environmental parameters, an opening state of the chassis cabinet, and a power supply state; If the physical environment information includes environmental parameters, and the environmental parameters indicate that the temperature or humidity of the information board control card is greater than a threshold, a second heartbeat message is sent to the security management and control entity, where the second heartbeat message includes the unique identifier of the information board and environmental parameter abnormality data, so that the security management and control entity determines, based on the second heartbeat message, that an abnormality exists in the environment of the information board control card corresponding to the unique identifier; If the physical environment information includes the opening state of the chassis cabinet, and the opening state indicates that the chassis cabinet is opened, a third heartbeat message is sent to the security management and control entity, where the third heartbeat message includes the unique identifier of the information board and the chassis cabinet abnormality data, so that the security management and control entity determines, based on the third heartbeat message, that the chassis cabinet of the information board control card corresponding to the unique identifier is opened; If the physical environment information includes the power supply status, and the power supply status indicates that the power supply in the chassis cabinet has been cut off, a fourth heartbeat message is sent to the security management entity, and the fourth heartbeat message includes the unique identifier of the intelligence board and the power supply abnormality data, so that the security management entity determines that the power supply of the intelligence board control card corresponding to the unique identifier has been cut off based on the fourth heartbeat message.

3. The method according to claim 1, characterized in that The method further comprises: Obtaining the validity period of the displayed image on the information board display screen; If the current time is not within the validity period, obtaining a second risk handling strategy corresponding to the information board display screen, and performing security processing on the displayed image of the information board display screen based on the second risk handling strategy, wherein the second risk handling strategy includes a base map replacement handling strategy or a screen off handling strategy; A fifth heartbeat message is sent to the security management entity, wherein the fifth heartbeat message includes the unique identifier of the information board and validity period exception data, so that the security management entity determines, based on the fifth heartbeat message, that the displayed image on the information board display screen corresponding to the unique identifier is not within the validity period.

4. The method according to any one of claims 1 to 3, characterized in that The method further comprises: receiving a first publishing message sent by a second-category information publishing entity, wherein the first publishing message includes information content to be published, a target device characteristic value of the second-category information publishing entity, and a unique identifier of the information board; Determine whether the target device characteristic value exists in the first whitelist; wherein, when the security management entity sends the device characteristic value of the normal information publishing entity to the security monitoring entity, the security monitoring entity records the device characteristic value of the normal information publishing entity in the first whitelist; If the target device characteristic value exists, determining whether the unique identifier of the information board is a built-in identifier of the security monitoring entity, and if so, verifying whether the content of the information to be published is normal; wherein the security monitoring entity has built-in the unique identifier of the information board connected to the security monitoring entity; If normal, the information content to be released is sent to the information board control card, so that the information board control card displays the picture corresponding to the information content to be released on the information board display screen; Among them, when the second type of information publishing entity sends the information content to be released to the information board, the second type of information publishing entity directly sends the information content to be released to the information board, and the information content to be released does not pass through the security control entity.

5. The method according to claim 4, characterized in that The checking whether the content of the information to be published is normal includes: If the information to be published is a picture or text content, an optical character recognition (OCR) algorithm is used to verify whether the picture or text content is normal; or an artificial intelligence (AI) model is used to verify whether the picture or text content is normal; If the information content to be published is video content, sending the video content to the security control entity so that the security control entity verifies whether the video content is normal and obtains a verification result; A verification result returned by the security management and control entity is received, where the verification result indicates that the video content is normal, or the verification result indicates that the video content is abnormal.

6. The method according to claim 4, characterized in that The method further includes: if the target device characteristic value does not exist in the first whitelist, or the unique identifier of the information board is not a built-in identifier of the security monitoring entity, or the content of the information to be published is abnormal, discarding the content of the information to be published; The method also includes: sending a sixth heartbeat message to the security management entity, the sixth heartbeat message including the target device characteristic value of the information publishing entity, a screenshot of the information content to be published, and publishing result information, the publishing result information indicating that the content is successfully published or the content fails to be published; wherein, if the information content to be published is sent to the information board control card, the publishing result information indicates that the content is successfully published; if the information content to be published is discarded, the publishing result information indicates that the content fails to be published.

7. A security control device for an information board with bidirectional link security protection, characterized in that: The information board includes an information board control card and an information board display screen. The device is applied to a security monitoring entity. The security monitoring entity and the information board control card are placed in the same chassis cabinet. The device includes: An acquisition module is used to send a picture acquisition message to the information board control card and receive a picture response message returned by the information board control card, wherein the picture response message includes the displayed picture of the information board display screen; A detection module, configured to perform a security detection on the displayed image to obtain a security detection result; a processing module configured to obtain a first risk handling strategy corresponding to the information board display screen if the security detection result indicates that abnormal information exists in the displayed image, and perform security processing on the displayed image of the information board display screen based on the first risk handling strategy; wherein the first risk handling strategy includes a base image replacement handling strategy, a screen off handling strategy, or an information board power off handling strategy; a sending module, configured to send a first heartbeat message to a security management and control entity, wherein the first heartbeat message includes a unique identifier of the information board and screen abnormality data, so that the security management and control entity determines, based on the first heartbeat message, that abnormal information exists on a displayed screen of the information board display screen corresponding to the unique identifier; Wherein, the acquisition module is further used to receive a second publishing message sent by the security control entity, the second publishing message including the encrypted information content, the IP address of the security control entity, the IP address of the first type of information publishing entity, and the unique identifier of the information board; wherein, the second publishing message is sent by the security control entity after determining that the information content to be published sent by the first type of information publishing entity is normal, and the encrypted information content is obtained by encrypting the information content to be published; the processing module is further used to determine whether the IP address of the first type of information publishing entity exists in the second whitelist; wherein, when the security control entity sends the IP address of the normal information publishing entity to the security monitoring entity, the security monitoring entity records the normal information publishing entity in the second whitelist. The IP address of the entity; if there is an IP address of the first type of information publishing entity, then determine whether the unique identifier of the information board is the built-in identifier of the security monitoring entity, and whether the IP address of the security management and control entity is the built-in IP address of the security monitoring entity; wherein, the security monitoring entity is pre-configured with the unique identifier of the information board connected to the security monitoring entity when it leaves the factory, and the security monitoring entity is pre-configured with the IP address of the security management and control entity when it leaves the factory; if so, decrypt the encrypted information content to obtain the information content to be released; the sending module is also used to send the information content to be released to the information board control card, so that the information board control card displays the picture corresponding to the information content to be released on the information board display screen; Among them, when the first type of information publishing entity sends the information content to be released to the information board, the first type of information publishing entity sends the information content to be released to the security control entity, and the security control entity sends the information content to be released to the information board.

8. The device according to claim 7, It is characterized by: Wherein, the acquisition module is further used to acquire the physical environment information of the intelligence board control card, and the physical environment information includes at least one of the environmental parameters, the opening state of the chassis cabinet and the power supply state; the sending module is further used to send a second heartbeat message to the security management entity if the physical environment information includes the environmental parameters, and the environmental parameters indicate that the temperature or humidity of the intelligence board control card is greater than a threshold value, and the second heartbeat message includes the unique identifier of the intelligence board and the abnormal environmental parameter data, so that the security management entity determines that there is an abnormality in the environment of the intelligence board control card corresponding to the unique identifier based on the second heartbeat message; the sending module is further used to send a second heartbeat message to the security management entity if the physical environment information includes the opening state of the chassis cabinet, and if the opening state indicates that the chassis cabinet is opened, a third heartbeat message is sent to the security management and control entity, the third heartbeat message including the unique identifier of the information board and the chassis cabinet abnormality data, so that the security management and control entity determines that the chassis cabinet of the information board control card corresponding to the unique identifier is opened based on the third heartbeat message; the sending module is further used to, if the physical environment information includes the power supply status, and the power supply status indicates that the power supply in the chassis cabinet is powered off, send a fourth heartbeat message to the security management and control entity, the fourth heartbeat message including the unique identifier of the information board and the power abnormality data, so that the security management and control entity determines that the power supply of the information board control card corresponding to the unique identifier is powered off based on the fourth heartbeat message; Wherein, the acquisition module is further used to obtain the validity period of the displayed image of the information board display screen; the processing module is further used to obtain the second risk handling strategy corresponding to the information board display screen if the current time is not within the validity period, and perform security processing on the displayed image of the information board display screen based on the second risk handling strategy; wherein, the second risk handling strategy includes a background image replacement handling strategy or a screen off handling strategy; the sending module is further used to send a fifth heartbeat message to the security management and control entity, and the fifth heartbeat message includes the unique identifier of the information board and validity period exception data, so that the security management and control entity determines that the displayed image of the information board display screen corresponding to the unique identifier is not within the validity period based on the fifth heartbeat message; The acquisition module is further configured to receive a first release message sent by a second-category information publishing entity, the first release message including information content to be released, a target device characteristic value of the second-category information publishing entity, and a unique identifier of an information board; the processing module is further configured to determine whether the target device characteristic value exists in a first whitelist; when the security control entity sends the device characteristic value of a normal information publishing entity to the security monitoring entity, the security monitoring entity records the device characteristic value of the normal information publishing entity in the first whitelist; if the target device characteristic value exists, determining whether the unique identifier of the information board is a built-in identifier of the security monitoring entity, and if so, verifying whether the information content to be released is normal; the security monitoring entity has a built-in unique identifier of the information board connected to the security monitoring entity; the sending module is further configured to, if the information content to be released is normal, send the information content to be released to the information board control card, so that the information board control card displays a screen corresponding to the information content to be released on the information board display screen; when the second-category information publishing entity sends the information content to be released to the information board, the second-category information publishing entity directly sends the information content to the information board, without passing through the security control entity; Among them, when the processing module verifies whether the content of the information to be released is normal, it is specifically used to: if the information content to be released is picture content or text content, then use optical character recognition (OCR) recognition algorithm to verify whether the picture content or text content is normal; or, use artificial intelligence (AI) model to verify whether the picture content or text content is normal; if the information content to be released is video content, then send the video content to the security management entity, so that the security management entity verifies whether the video content is normal and obtains a verification result; receive the verification result returned by the security management entity, the verification result indicates that the video content is normal, or the verification result indicates that the video content is abnormal; Wherein, the processing module is also used to discard the information content to be released if the target device characteristic value does not exist in the first whitelist, or the unique identifier of the information board is not the built-in identifier of the security monitoring entity, or the content of the information to be released is abnormal; the sending module is also used to send a sixth heartbeat message to the security management and control entity, and the sixth heartbeat message includes the target device characteristic value of the information publishing entity, a screenshot of the information content to be released and the release result information, and the release result information indicates that the content is successfully released or the content fails to be released; wherein, if the information content to be released is sent to the information board control card, the release result information indicates that the content is successfully released; if the information content to be released is discarded, the release result information indicates that the content fails to be released.

9. An electronic device, characterized in that: include: a processor and a machine-readable storage medium storing machine-executable instructions capable of being executed by the processor; The processor is configured to execute machine-executable instructions to implement the method according to any one of claims 1 to 6.

Images