Data transmission method and system across physical isolation network

Abstract

The invention discloses a data transmission method and system across a physical isolation network, and the method comprises the steps: sequentially displaying a data coding graph to a receiving end, and setting a verification region in a display range of the data coding graph, so that the receiving end can obtain data block information contained in the data coding graph based on the data coding graph; wherein different data coding graphs are displayed every time, a first identifier is arranged in a verification area of the data coding graphs displayed for odd number times, and a second identifier is arranged in a verification area of the data coding graphs displayed for even number times. Compared with the prior art, the data transmission method of the cross-physical isolation network provided by the invention ensures complete physical isolation; meanwhile, when the corresponding data codes are displayed, the corresponding check area gray values are set, so that the receiving end can distinguish repeated images and blurred images, and the purpose of accelerating the decoding efficiency of the receiving end is achieved.

Description

Technical Field

[0001] The present invention belongs to the field of network communication technology, and particularly relates to a data transmission method and system across physically isolated networks. Background Art

[0002] Data is the general term for all symbols that can be input into a computer and processed by a computer program. It is a general term for numbers, letters, symbols, analog quantities, etc. that are used to input into an electronic computer for processing and have certain meanings. Data transmission is to transmit data from a data source to a data terminal through one or more data links according to certain rules. Its main function is to realize information transmission and exchange between points. A good data transmission method can improve the real-time performance and reliability of data transmission.

[0003] A physically isolated network (Air-Gapped Network) is a security protection system that completely isolates the internal network from the external public network through physical means. It is widely used in high-security demand scenarios such as military, government, and finance to resist network attacks and data leakage risks. With the development of information technology, the disadvantages of the traditional method of transmitting data under physical isolation are gradually revealed: using the one-way gateway technology to transmit data between two classified networks, this technology does not meet the requirements of complete physical isolation; the imaging technology can fully meet the physical isolation requirements, but based on the Shannon theorem and the characteristics of the display, the collected images will have duplicate and blurred images, thus reducing the decoding speed. Therefore, in view of the above technical problems, it is necessary to provide a data transmission method and system across physically isolated networks.

[0004] The information disclosed in this background art section is only intended to enhance the overall understanding of the present invention and should not be regarded as an admission or any form of suggestion that this information constitutes the prior art already known to those of ordinary skill in the art. Summary of the Invention

[0005] The purpose of the present invention is to provide a data transmission method and system across physically isolated networks, which can realize fast and stable data transmission on the premise of strong physical isolation.

[0006] In order to achieve the above purpose, the technical solutions provided by a specific embodiment of the present invention are as follows:

[0007] In a first aspect, the present invention provides a data transmission method across physically isolated networks, which includes:

[0008] Dividing the data to be transmitted into multiple data blocks;

[0009] Generating a corresponding data coding graph for each of the data blocks, and the data coding graph can be recognized to obtain the data block information contained therein;

[0010] Successively display the data encoding graphics to the receiving end, and set a verification area within the display range of the data encoding graphics, so that the receiving end can obtain the data block information contained therein based on the data encoding graphics; wherein,

[0011] Each time a different data encoding graphic is displayed, a first identifier is set in the verification area of the data encoding graphic displayed an odd number of times, and a second identifier is set in the verification area of the data encoding graphic displayed an even number of times.

[0012] In one or more embodiments of the present invention, the first identifier is to fill the verification area with a first gray value;

[0013] The second identifier is to fill the verification area with a second gray value.

[0014] In one or more embodiments of the present invention, generating a corresponding data encoding graphic for each data block includes:

[0015] Number each data block based on the position of each data block in the data to be transmitted;

[0016] Perform CRC verification on each of the segmented data blocks, and attach the generated verification code to the tail of each data block;

[0017] Convert the data block with the verification code attached and the corresponding number of the data block into a data encoding graphic in a preset format.

[0018] In a second aspect, the present invention provides a data transmission method across physically isolated networks, which includes:

[0019] Sample the data encoding graphics displayed by the sending end to generate a sequence of sampled images;

[0020] Based on the identification information of the verification area, filter out duplicate images and / or blurred images in the sequence of sampled images;

[0021] Decode the sequence of sampled images after filtering out the duplicate images and / or blurred images, obtain the corresponding data block information, and reconstruct the data to be transmitted based on the data block information.

[0022] In one or more embodiments of the present invention, if the identification information is to fill the verification area of the data encoding graphic displayed an odd number of times with a first gray value; and fill the verification area of the data encoding graphic displayed an even number of times with a second gray value, then the filtering out of blurred images in the acquired images based on the identification information of the verification area includes:

[0023] Determine whether the sampled image is an image displayed an odd number of times or an image displayed an even number of times;

[0024] Obtain the gray values of each pixel row in the verification area of the sampled image.

[0025] If the sampled image is an image displayed an odd number of times and the gray values of the pixel rows in the verification area of the sampled image that exceed a preset value are not within a preset first gray interval, then screen out the sampled image.

[0026] If the sampled image is an image displayed an even number of times and the gray values of the pixel rows in the verification area of the sampled image that exceed a preset value are not within a preset second gray interval, then screen out the sampled image.

[0027] In one or more embodiments of the present invention, screening out duplicate images in the acquired images based on the gray values of the verification area includes:

[0028] Determine whether the sampled image is an image displayed an odd number of times or an image displayed an even number of times.

[0029] If there are multiple consecutive images displayed an odd number of times, then only retain the sampled image among the multiple images displayed an odd number of times with the smallest absolute value of the difference between the gray value of the verification area and the first gray value.

[0030] If there are multiple consecutive images displayed an even number of times, then only retain the sampled image among the multiple images displayed an even number of times with the smallest absolute value of the difference between the gray value of the verification area and the second gray value.

[0031] In one or more embodiments of the present invention, determining whether the sampled image is an image displayed an odd number of times or an image displayed an even number of times includes:

[0032] Obtain the average gray value of the verification area of each sampled image.

[0033] If the average gray value is within a preset third gray interval, then the sampled image is an image displayed an odd number of times.

[0034] If the average gray value is within a preset fourth gray interval, then the sampled image is an image displayed an even number of times.

[0035] In one or more embodiments of the present invention, reconstructing the data to be transmitted based on the data block information includes:

[0036] Decode the sequence of sampled images after screening out duplicate images and / or blurred images to obtain the data block information included in the data coding graphics in each sampled image.

[0037] Sort the data block information based on the data block numbers, and merge the data block information into the data to be transmitted.

[0038] In one or more embodiments of the present invention, the method further includes:

[0039] Traverse each data block obtained by decoding, and perform CRC check on the information of each data block that does not contain the check code;

[0040] If the generated check code is consistent with the check code carried by the corresponding data block, the data of this data block is complete;

[0041] If the generated check code is inconsistent with the check code carried by the corresponding data block, the data of this data block is missing, and report the label of this data block and the alarm signal.

[0042] In one or more embodiments of the present invention, the method further:

[0043] The sampling frequency of the receiving end is greater than or equal to twice the switching frequency of each of the data encoding graphics displayed by the sending end.

[0044] In a third aspect, the present invention provides a data transmission system across a physically isolated network, which is applied to the data transmission method across the physically isolated network, and includes:

[0045] A splitting module, configured to split the data to be transmitted into multiple data blocks;

[0046] A generating module, configured to generate a corresponding data encoding graphic for each of the data blocks, and the data encoding graphic can be recognized to obtain the data block information contained therein;

[0047] A display module, configured to sequentially display the data encoding graphics to the receiving end, and set a check area within the display range of the data encoding graphics, so that the receiving end can obtain the data block information contained therein based on the data encoding graphics; wherein,

[0048] Each time a different data encoding graphic is displayed, a first identifier is set in the check area of the data encoding graphic displayed an odd number of times, and a second identifier is set in the check area of the data encoding graphic displayed an even number of times.

[0049] In a fourth aspect, the present invention provides another data transmission system across a physically isolated network, which is applied to the data transmission method across the physically isolated network, and includes:

[0050] An acquisition module, configured to sample the data encoding graphics displayed by the sending end to generate a sequence of sampled images;

[0051] A screening module, configured to screen out duplicate images and / or blurred images in the sequence of sampled images based on the identification information of the check area;

[0052] A reconstruction module, configured to decode the sampled image sequence after removing the duplicate images and / or blurred images, obtain corresponding data block information, and reconstruct the data to be transmitted based on the data block information.

[0053] Compared with the prior art, the data transmission method across physically isolated networks provided by the present invention uses the method of data encoding graphics for data communication between the interconnected network and the classified network, ensuring complete physical isolation; at the same time, when displaying the corresponding data encoding, the gray value of the corresponding verification area is set, so that the receiving end can distinguish duplicate images and blurred images, thereby achieving the purpose of accelerating the decoding efficiency of the receiving end. BRIEF DESCRIPTION OF THE DRAWINGS

[0054] In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings required for use in the description of the embodiments or the prior art. Obviously, the drawings in the following description are only some embodiments recorded in the present invention. For those of ordinary skill in the art, without creative efforts, other drawings can also be obtained based on these drawings.

[0055] Figure 1 It is a schematic diagram of a data transmission scenario across physically isolated networks in an embodiment of the present invention;

[0056] Figure 2 It is a schematic flowchart of a data transmission method across physically isolated networks in an embodiment of the present invention;

[0057] Figure 3 It is a schematic flowchart of a data transmission method across physically isolated networks in another embodiment of the present invention;

[0058] Figure 4 It is a structural block diagram of a data transmission system across physically isolated networks in an embodiment of the present invention;

[0059] Figure 5 It is a structural block diagram of a data transmission system across physically isolated networks in another embodiment of the present invention;

[0060] Figure 6 It is a structural block diagram of an electronic device in an embodiment of the present invention;

[0061] Figure 7 It is a schematic diagram of a data encoding graphic displayed for the nth time in a specific embodiment of the present invention;

[0062] Figure 8 It is a schematic diagram of a data encoding graphic displayed for the (n + 1)th time in a specific embodiment of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0063] To enable those skilled in the art to better understand the technical solutions in the present invention, the following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

[0064] Unless otherwise clearly stated, throughout the specification and claims, the term "comprising" or its variations such as "including" or "having" etc. will be understood to include the stated elements or components, without excluding other elements or other components.

[0065] The current mainstream cross-physical isolation network data exchange technology is mainly based on the intermediate medium ferry mechanism, and realizes the information interaction between physically isolated networks through an indirect transmission method without direct network connection. The typical implementation schemes can be divided into two categories: one is the air gap device based on the principle of unidirectional laser transmission, which uses optoelectronic conversion technology to achieve the physical unidirectional flow of data; the other uses mobile storage media such as dedicated security USB flash drives, and completes the transfer of data through manual review processes. However, in-depth analysis shows that there are significant limitations in the existing technology system: although the air gap device has the characteristic of unidirectional transmission, there is still a theoretical possibility of reverse communication in its physical layer, which essentially belongs to the category of "quasi-physical isolation" technology and is difficult to meet the network isolation requirements in high-security scenarios; while the mobile media ferry scheme relies heavily on manual operation links, there are not only security risks such as media loss and operation errors, but also the transmission efficiency and reliability are difficult to guarantee due to the lack of an automated transmission mechanism, and it also faces management challenges such as difficult audit and traceability.

[0066] The inventor of the present invention discovered the main drawbacks of the existing technology and proposed a new technical implementation idea based on the drawbacks of the existing technology: encoding the data to be transmitted into corresponding graphic information and displaying it to the receiving end. The receiving end can collect the graphic information and decode it to obtain the corresponding data to be transmitted, realizing true strong physical isolation. At the same time, due to the physical isolation at both ends, it is impossible to set a synchronous clock. Therefore, during the sampling process at the receiving end, a large number of repeated images or blurred images will appear in the sampled image sequence, resulting in a decrease in the decoding speed. The present invention adds a verification area within the display range, and by discriminating the verification area instead of judging the encoded graphics, it can quickly screen out repeated images and blurred images, improving the decoding efficiency.

[0067] Please refer to Figure 1, which shows a schematic diagram of an application scenario of the data transmission method across physically isolated networks provided by the present invention under an embodiment. This scenario specifically includes: an encoding processing unit 101, a decoding processing unit 102, and a user terminal 103.

[0068] It should be noted that there are an encoding processing unit 101, a decoding processing unit 102, and a user terminal 103. The encoding processing unit 101 and the decoding processing unit 102 are in a physically isolated state. The encoding processing unit 101 and the decoding processing unit 102 can be respectively configured with a user terminal 103 having a communication connection therewith, for providing an interface to configure parameters such as encoding strategies, decoding strategies, preset capacities, etc. necessary for implementing the present invention, as well as other operations such as file virus scanning, data compression, data segmentation, data verification, data encryption, etc.

[0069] Among them, the encoding processing unit 101 includes a network interface, an encoding processor, and an image display device. Taking the example of transmitting data from the Internet side to the classified network side. The network interface transmits the data to be transmitted to the encoding processor for structured encoding, converting the data stream into several data encoding graphics with self-checking characteristics. The image display device periodically displays the data encoding graphics to the receiving end according to a preset refresh period, and configures the check regions of adjacent data encoding graphics with different gray values, facilitating the receiving end to screen out blurred images and duplicate images.

[0070] Similarly, the decoding processing unit 102 includes a network interface, a decoding processor, and an image receiving device. The image receiving device can collect the data encoding graphics displayed by the above-mentioned image display device. And further screen out blurred images and duplicate images in the sampled image sequence based on the decoding processor. Decode and splice the screened sequence to reconstruct the data to be transmitted, realizing data transmission across physically isolated networks.

[0071] It should also be noted that there should be an optical path between the encoding processing unit 101 and the decoding processing unit 102, so that the decoding processing unit 102 can receive and display the data encoding graphics of the encoding processing unit 101. And it can be understood that the communication network extended by the communication connection between the user terminal 103 and the encoding processing unit 101 or the decoding processing unit 102 can include various connection types, including but not limited to: wired connection, wireless connection, or fiber optic cable connection, etc. At the same time, this communication network can be a local area network, a metropolitan area network, a wide area network, or any combination of the three.

[0072] The user terminal 103 may be installed with a computer software program that matches the data transmission method across physically isolated networks provided by this method; the user terminal 103 may include, but is not limited to, portable electronic devices such as desktop computers (PCs), desktop computers, smart phones, handheld computers, tablet computers, personal digital assistants (PDAs), etc. or wearable electronic devices, and the embodiments of the present invention do not limit the above content.

[0073] It should also be noted that the data transmission method across physically isolated networks in the embodiments of the present invention can be applied to the data transmission system across physically isolated networks in the embodiments of the present invention. The data transmission system across physically isolated networks can be configured in a terminal. The terminal may include, but is not limited to, a PC (Personal Computer), a PDA (tablet computer), a smart phone, a smart wearable device, etc.

[0074] Please refer to Figure 2 As shown, it is a schematic flowchart of the data transmission method across physically isolated networks implemented by the sending end in an embodiment of the present invention. The data transmission method across physically isolated networks specifically includes the following steps:

[0075] S201: Split the data to be transmitted into multiple data blocks;

[0076] It should be noted that in the present invention, the data encoding pattern as the data transmission medium, its effective data capacity is restricted by multiple technical parameters. Specifically, the physical characteristics of the encoding structure, the technical limitations of the standard specifications, and the actual requirements of the application scenario together constitute a three-dimensional constraint system for data carrying capacity. Taking a typical encoding form as an example: the storage capacity of a QR code is exponentially positively correlated with the dimension of the module matrix, and at the same time, different encoding modes will also result in significant differences in the data volume; while the data density of a one-dimensional barcode is strictly restricted by the number of bar and space combinations per unit length and its overall physical size.

[0077] In the typical scenario implemented by the present invention, the scale of the data to be transmitted usually exceeds the maximum theoretical payload of a single encoding medium. Given that different encoding types and their subclasses (such as QR version, Code128 type, etc.) have different payload characteristics, this solution proposes a dynamic block splitting strategy: first, analyze the technical specification parameters of the target encoding pattern, and then perform adaptive block splitting on the original data according to its maximum effective payload. The data volume of each data block formed by splitting should be less than or equal to the maximum payload that the encoding pattern can store valid data, and finally generate a set of data blocks that meet the carrier capacity limit.

[0078] It should also be noted that, based on different implementation scenarios, a security redundancy space, error correction codes, etc. can also be added to the data encoding graphics. Therefore, it is difficult to quantify the capacity of the encoding graphics for storing valid data, and dynamic adjustment needs to be made according to the actual situation. The embodiments of the present invention do not specifically limit the splitting method of the data to be transmitted and the sizes of the respective data blocks after splitting.

[0079] S202: Generate corresponding data encoding graphics for each of the data blocks, and the data encoding graphics can be recognized to obtain the data block information contained therein;

[0080] It should be noted that the data encoding graphics described in the present invention may include, but are not limited to: traditional barcodes (one-dimensional codes), two-dimensional codes, or emerging data encoding graphics such as PDF417 two-dimensional barcodes, Han Xin codes, color encoding graphics, etc. The data encoding graphics adopted can be dynamically adjusted based on actual requirements, and the embodiments of the present invention do not limit this.

[0081] For example, for the data to be transmitted with a large volume and requiring attachment of corresponding digital signatures or encrypted information, a stacked two-dimensional barcode PDF417 can be used; for the situation where there are many Chinese characters in the data to be transmitted, a Han Xin code can be used, which supports Chinese optimization, has a higher efficiency in directly encoding Chinese characters than QR codes, and has a capacity about 30% higher than QR codes under the same area.

[0082] In an exemplary embodiment of the present invention, after selecting the type of encoding graphics, generating corresponding data encoding graphics for each of the data blocks further includes: numbering each of the data blocks based on the positions of the respective data blocks in the data to be transmitted; performing CRC verification on each of the split data blocks, and attaching the generated verification code to the tails of the respective data blocks; converting the data blocks with attached verification codes and the corresponding numbers of the data blocks into data encoding graphics in a preset format.

[0083] Among them, implementing unique identifier marking for the data blocks according to their positions in the data to be transmitted enables the receiving end to achieve intelligent sorting of the data blocks after decoding, thereby accurately reconstructing the topological structure of the data to be transmitted. Secondly, in the application scenario of generating a large number of data encoding graphics, if there is a lack of an effective serialization management mechanism, it will force the transmission process to maintain strict timing consistency, and any minor order deviation will cause the data recombination algorithm at the receiving end to fail. Moreover, this mechanism provides important support for fault diagnosis. When a data block verification fails or a transmission packet is lost, the system can quickly locate the faulty node with the help of the numbering system, avoiding the resource waste problem caused by the forced start of full-scale data retransmission due to the inability to trace the source in the traditional solution.

[0084] On the other hand, CRC, or Cyclic Redundancy Check, is a method of calculating a set of verification codes based on data to verify whether the data has been changed or transmitted incorrectly during transmission. Before encoding the data, the CRC verification method can be used to calculate the verification code of the corresponding data block, and the verification code is attached to the data block. The receiving end verifies the data block information other than the verification code again. If the obtained verification code is consistent with the verification code attached to the data block information, it can be proved that the data block information is not lost during the transmission process. The integrity of data transmission is guaranteed.

[0085] S203: displaying the data coding graph to the receiving end in sequence, and setting a verification area within the display range of the data coding graph, so that the receiving end can obtain the data block information contained in the data coding graph based on the data coding graph;

[0086] It should be noted that, in one embodiment, the data coding graphic displayed each time is different and a first mark is set in the check area of ​​the data coding graphic displayed odd times, and a second mark is set in the check area of ​​the data coding graphic displayed even times.

[0087] It is understandable that the first identifier should be different from the second identifier, and the degree of difference between the two is positively correlated with the accuracy of the receiving end in screening out duplicate images and blurred images. Since the intuitive appearance differences between different data encoding graphics are small, it is difficult to distinguish the encoding graphics themselves. The purpose of setting the first identifier and the second identifier is to make it easier for the receiving end to distinguish between two adjacent data encoding images. The first identifier and the second identifier may include but are not limited to: graphics, fill colors, letters, numbers, etc., or any combination of the above contents, and the embodiments of the present invention are not limited to this.

[0088] Preferably, to facilitate the identification of the receiving end, the first mark is set to fill the check area with a first gray value; the second mark is set to fill the check area with a second gray value. Further, to make it easier to distinguish adjacent coded images, the first gray value and the second gray value can be set to 255 and the other to 0 to form a larger difference.

[0089] Furthermore, the display interval of adjacent graphics can be determined based on the sampling frequency of the receiving end. In order to avoid the receiving end missing some coded graphics due to too fast refresh, resulting in missing data packets, it is preferred to set the image sampling rate of the receiving end to be no less than twice the image switching rate of the sending end. At the same time, a preset starting image can be selectively displayed before displaying the data coding graphics, and a preset ending image can be displayed after all the coded graphics are displayed. In this way, if there is no starting image or ending image in the sampling sequence of the receiving end, it can be considered that there is data loss, and there is no need to waste computing resources.

[0090] In an exemplary embodiment of the present invention, the image switching frequency of the sending end can be coupled with the screen frame rate of the sending end. That is, each frame displays different data encoding graphics. The check area of odd frames is set as the first identifier, and the check area of even frames is set as the second identifier. By adjusting the display frame rate of the screen, the switching frequency of the displayed data encoding graphics is controlled.

[0091] It should also be noted that if there are a large number of generated data encoding graphics, multiple of the data encoding graphics can be displayed at the same time. As Figures 7 - 8 shown in an embodiment of the present invention, it is a schematic diagram of the data encoding graphics displayed for the nth and the (n + 1)th times. Among them, the background area is used as the check area. The first identifier is set to fill the check area with black, and the second identifier is set to fill the check area with white. 28 two-dimensional codes are displayed each time.

[0092] Please refer to Figure 3 shown, it is a schematic flowchart of the receiving end implementing the data transmission method across a physically isolated network in an embodiment of the present invention. The data transmission method across a physically isolated network specifically includes the following steps:

[0093] S301: Sample the data encoding graphics displayed at the sending end to generate a sequence of sampled images;

[0094] The present invention does not limit the selection of the sampling device at the receiving end, which may include but is not limited to: cameras, video cameras, high-speed cameras, etc. It only needs to ensure that the sampling device can perform continuous image sampling.

[0095] It should be particularly noted that in the application scenario of this technical solution, the receiving end and the sending end are in a strong physical isolation state, which causes the system to be unable to achieve dynamic adaptation of the sampling frequency through a dual-end clock synchronization mechanism; in addition, even if the frequency parameters of the transceiver are theoretically the same, it is still difficult to eliminate the phase deviation between the image display and the sampling timing. Based on the above constraints, to ensure that the receiving end can completely capture all data encoding graphics, based on the Shannon sampling theorem, the image sampling rate of the system at the receiving end must be no less than twice the image switching rate of the sending end.

[0096] S302: Based on the identification information of the check area, filter out duplicate images and / or blurred images in the sequence of sampled images;

[0097] It is understandable that, based on the above sampling principle, there must be a situation where the same data coding graphic is sampled multiple times; at the same time, if sampling is performed at the moment when the sending end switches the image, it is impossible to sample an effective and clear coding graphic. That is, there are repeated images and blurred images in the sampled image sequence. If the coding information is identified to distinguish the repeated images and blurred images, a large amount of computing resources will be consumed. Based on this, the present invention creatively sets a check area for each transmitted data coding graphic, so that the receiving end can screen out repeated images and blurred images based on the check area.

[0098] Specifically, the verification area of ​​each sampled image in the sampling sequence is traversed. If the identification information of the verification area is a combination of the first identification and the second identification, or the identification information of the verification area can be split into the first identification and the second identification at the same time, then the sampled image is a fuzzy image. Such images are often difficult to identify and decode, and to obtain valid data block information therein, so they need to be eliminated in the sampling graphic sequence;

[0099] On the other hand, since the identification information of adjacent data coding graphics displayed by the transmitting end is different, if the continuous multiple sampling image check areas are all the first identification or the second identification, then the multiple sampling images are repeated images of the same data coding graphic. In order to reduce redundant operations at the decoding end, only the highest definition of the repeated images is retained in the sampling image sequence.

[0100] In an exemplary embodiment, if the identification information is to fill the check area of ​​the data coding graphic displayed an odd number of times with a first grayscale value; and to fill the check area of ​​the data coding graphic displayed an even number of times with a second grayscale value, then the screening out of blurred images in the captured image based on the identification information of the check area includes: judging whether the sampled image is an image displayed an odd number of times or an image displayed an even number of times; obtaining the grayscale values ​​of each pixel row in the check area of ​​the sampled image, if the sampled image is an image displayed an odd number of times and the grayscale values ​​of the pixel rows in the check area of ​​the sampled image that exceed a preset value are not in a preset first grayscale interval, then screening out the sampled image; if the sampled image is an image displayed an even number of times and the grayscale values ​​of the pixel rows in the check area of ​​the sampled image that exceed a preset value are not in a preset second grayscale interval, then screening out the sampled image.

[0101] In actual application, the greater the difference between the first grayscale value and the second grayscale value, the less difficult it is to identify. Therefore, preferably, the first grayscale value and the second grayscale value are set, one is 0 (black) and the other is 255 (white).

[0102] It should be noted that during the process of automated image screening, it is usually necessary to first determine whether the current sampled image belongs to the data coding pattern displayed an odd number of times at the sending end or the data coding pattern displayed an even number of times. Furthermore, it is determined whether there is any blurring or duplication in the verification area of the current sampled image.

[0103] Continuing with the above embodiment, determining whether the sampled image is an image displayed an odd number of times or an image displayed an even number of times includes: obtaining the gray-scale average value of the verification area of each sampled image; if the gray-scale average value is within a preset third gray-scale interval, then the sampled image is an image displayed an odd number of times; if the gray-scale average value is within a preset fourth gray-scale interval, then the sampled image is an image displayed an even number of times. Optionally, the third gray-scale interval and the fourth gray-scale interval should be able to cover all possible gray-scale values that may appear in the verification area.

[0104] For example, in a specific embodiment, setting the first gray-scale value to 0 and the second gray-scale value to 255, the third gray-scale interval can be set to [0, 127]; the fourth gray-scale interval is set to (127, 255]. If the gray-scale average value of the verification area of the sampled image is within the third gray-scale interval, then it is the data coding pattern displayed an odd number of times at the sending end; similarly, if the gray-scale average value of the verification area of the sampled image is within the fourth gray-scale interval, then it is the data coding pattern displayed an even number of times at the sending end.

[0105] Furthermore, in the case of using the gray-scale value of the verification area as the identification information, the gray-scale average value of the verification area of a blurred image cannot accurately determine whether the sampled image is blurred. It can be understood that the verification area can be regarded as composed of multiple pixel rows. Therefore, in the embodiment of the present invention, the gray-scale detection of each pixel row in the verification area is performed. Pixel rows with gray-scale values greater than the preset value do not meet the requirements of the verification area corresponding to the data coding image of this time, and the current sampled image is regarded as a blurred pattern. The gray-scale value of a pixel row refers to the gray-scale average value of each pixel point in that pixel row.

[0106] For example, setting the first gray-scale interval to [0, 45] and the preset value to 32, for the sampled image of the data coding pattern displayed an odd number of times, if the gray-scale value of each pixel row in the verification area is greater than 45, it is considered not to meet the requirements. If more than 32 rows do not meet the requirements, it is determined that the sampled image is a blurred image and should be deleted from the sampled image queue.

[0107] Further, following the above exemplary embodiments, screening out duplicate images in the acquired images based on the gray values of the verification regions includes: determining whether the sampled image is an image displayed an odd number of times or an image displayed an even number of times; if there are multiple consecutive images displayed an odd number of times, only retain the sampled image with the smallest absolute value of the difference between the gray value of the verification region and the first gray value among the multiple images displayed an odd number of times; if there are multiple consecutive images displayed an even number of times, only retain the sampled image with the smallest absolute value of the difference between the gray value of the verification region and the second gray value among the multiple images displayed an even number of times. It can be understood that the gray value of the verification region refers to the average gray value of the verification region, and the smaller the absolute value of the difference between this average value and the first gray value / second gray value, the clearer the current sampled image is.

[0108] S303: Decode the sampled image sequence after screening out the duplicate images and / or blurred images, obtain the corresponding data block information, and reconstruct the data to be transmitted based on the data block information.

[0109] Reconstructing the data to be transmitted based on the data block information includes: decoding the sampled image sequence after screening out duplicate images and / or blurred images to obtain the data block information contained in the data encoding patterns in each sampled image; sorting the data block information based on the data block numbers, and merging the data block information into the data to be transmitted.

[0110] In an embodiment, the method further includes: traversing each data block obtained by decoding, and respectively performing CRC verification on each data block information that does not contain a check code; if the generated check code is consistent with the check code carried by the corresponding data block, the data in this data block is complete; if the generated check code is inconsistent with the check code carried by the corresponding data block, the data in this data block is missing, and report the label of this data block and an alarm signal.

[0111] To more clearly illustrate the data transmission method across physically isolated networks provided by the present invention, the following is a complete display of the implementation steps of the present invention in a specific implementation process:

[0112] First, the sending end places the file in a set path (local path or network path), and the software automatically scans, sorts the files under the path according to rules such as time or size, and then reads the files in sequence. After performing virus detection on the read files, the read files are data-compressed to reduce the data volume. The compressed data is the data to be transmitted, and it needs to be divided into multiple data blocks according to the QR code capacity at a fixed length. The divided data blocks are CRC32-verified, and the generated check code is appended to the end of the data block. Subsequently, the data block containing the check code is AES-encrypted to generate ciphertext. The ciphertext is used to generate a QR code. According to the number of QR code frames, the background is white for odd numbers and black for even numbers, and it is displayed.

[0113] A high-speed camera is set at the receiving end to collect and display images in real time, and it is judged whether the image is a duplicate or blurred image according to the background of the collected image. The two-dimensional code is decoded to generate a ciphertext data block, and the ciphertext data block is decrypted into a plaintext data block. The data block without the check code is CRC32-checked and compared with the tail check code. If the integrity of the data block is correct, the data blocks are merged into a complete data block, and the complete data block is used to generate a file (compressed file), and the file is further decompressed and saved. Thus, the data transmission across the physically isolated network is completed.

[0114] Please refer to Figure 4 As shown, based on the same inventive concept as the aforementioned data transmission method across the physically isolated network, in an embodiment of the present invention, a data transmission system 400 across the physically isolated network is provided, which includes: a splitting module 401, a generating module 402, and a displaying module 403.

[0115] Specifically, the splitting module 401 is used to split the data to be transmitted into multiple data blocks; the generating module 402 is used to generate corresponding data encoding graphics for each of the data blocks, and the data encoding graphics can be recognized to obtain the data block information contained therein; the displaying module 403 is used to sequentially display the data encoding graphics to the receiving end, and a verification area is set within the display range of the data encoding graphics, so that the receiving end can obtain the data block information contained therein based on the data encoding graphics.

[0116] Please refer to Figure 5 As shown, based on the same inventive concept as the aforementioned data transmission method across the physically isolated network, in an embodiment of the present invention, a data transmission system 500 across the physically isolated network is provided, which includes: a collecting module 501, a screening module 502, and a reconstructing module 503.

[0117] Specifically, the collecting module 501 is used to sample the data encoding graphics displayed at the sending end to generate a sequence of sampled images; the screening module 502 is used to screen out duplicate images and / or blurred images in the sequence of sampled images based on the identification information of the verification area; the reconstructing module 503 is used to decode the sequence of sampled images after screening out the duplicate images and / or blurred images to obtain the corresponding data block information, and reconstruct the data to be transmitted based on the data block information.

[0118] Please refer to Figure 6As shown in the figure, an embodiment of the present invention further provides an electronic device 600, which includes at least one processor 601, a memory 602 (such as a non-volatile memory), a memory 603, and a communication interface 604, and at least one processor 601, the memory 602, the memory 603, and the communication interface 604 are connected together via an internal bus 605. The at least one processor 601 is configured to call at least one program instruction stored or encoded in the memory 602, so that the at least one processor 601 executes various operations and functions of the data transmission method across physically isolated networks described in various embodiments of this specification.

[0119] In the embodiments of this specification, the electronic device 600 may include but is not limited to: personal computers, server computers, workstations, desktop computers, laptop computers, notebook computers, mobile electronic devices, smart phones, tablet computers, cellular phones, personal digital assistants (PDAs), handheld devices, messaging devices, wearable electronic devices, consumer electronic devices, and so on.

[0120] An embodiment of the present invention further provides a computer-readable medium, on which computer-executable instructions are carried. When the computer-executable instructions are executed by a processor, they can be used to implement various operations and functions of the data transmission method across physically isolated networks described in various embodiments of this specification.

[0121] The computer-readable medium in the present invention may be a computer-readable signal medium, a computer-readable storage medium, or any combination of the two. The computer-readable storage medium may, for example, be but is not limited to an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the above. More specific examples of the computer-readable storage medium may include but are not limited to: an electrical connection having one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present invention, the computer-readable storage medium may be any tangible medium that contains or stores a program, which can be used by or in conjunction with an instruction execution system, apparatus, or device.

[0122] In the present invention, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries computer-readable program code. Such a propagated data signal may take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the foregoing. A computer-readable signal medium may also be any computer-readable medium other than a computer-readable storage medium, which can send, propagate, or transmit a program for use by or in connection with an instruction execution system, apparatus, or device. The program code contained on the computer-readable medium may be transmitted using any appropriate medium, including but not limited to: wireless, wire, optical fiber, RF, etc., or any suitable combination of the foregoing.

[0123] Those skilled in the art will appreciate that the embodiments of the present invention may be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0124] The present invention is described with reference to the flowcharts and / or block diagrams of methods, apparatuses, systems, and computer program products according to embodiments of the present invention. It should be understood that each flow and / or block in the flowcharts and / or block diagrams, and combinations of flows and / or blocks in the flowcharts and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, such that the instructions executed by the processor of the computer or other programmable data processing device produce means for implementing the functions specified in Figure 1 one or more of the flows or multiple flows and / or blocks Figure 1 one or more of the blocks or multiple blocks.

[0125] The foregoing description of specific exemplary embodiments of the present invention is for purposes of illustration and exemplification. These descriptions are not intended to limit the present invention to the precise forms disclosed, and it is apparent that many changes and variations are possible in light of the above teachings. The purpose of selecting and describing the exemplary embodiments is to explain the specific principles of the present invention and its practical applications, thereby enabling those skilled in the art to implement and utilize the various different exemplary embodiments of the present invention, as well as various different selections and changes. The scope of the present invention is intended to be defined by the claims and their equivalents.

[0126] For those skilled in the art, it is obvious that the present invention is not limited to the details of the above-described exemplary embodiments, and the present invention can be implemented in other specific forms without departing from the spirit or basic characteristics of the present invention. Therefore, in any regard, the embodiments should be regarded as exemplary and non-limiting. The scope of the present invention is defined by the appended claims rather than the above description. Therefore, all changes falling within the meaning and scope of the equivalent elements of the claims are intended to be embraced within the present invention. Any reference signs in the claims should not be construed as limiting the claims involved.

[0127] In addition, it should be understood that although this specification is described in terms of embodiments, not every embodiment only contains an independent technical solution. This narrative manner of the specification is only for clarity. Those skilled in the art should regard the specification as a whole, and the technical solutions in each embodiment can also be appropriately combined to form other embodiments that can be understood by those skilled in the art.

Claims

1. A data transmission method across physically isolated networks, characterized in that, Including: Dividing the data to be transmitted into multiple data blocks; Generating corresponding data encoding graphics for each of the data blocks, where the data encoding graphics can be recognized to obtain the data block information contained therein; Sequentially presenting the data encoding graphics to the receiving end, and setting a verification area within the display range of the data encoding graphics, so that the receiving end can obtain the data block information contained therein based on the data encoding graphics; wherein, Each presented data encoding graphic is different, and a first identifier is set in the verification area of the data encoding graphics presented an odd number of times, and a second identifier is set in the verification area of the data encoding graphics presented an even number of times.

2. The data transmission across physically isolated networks according to claim 1, wherein The first identifier is filling the verification area with a first gray value; The second identifier is filling the verification area with a second gray value.

3. The data transmission across a physically isolated network according to claim 1, wherein The generating corresponding data encoding graphics for each of the data blocks includes: Numbering each of the data blocks based on the positions of the data blocks in the data to be transmitted; Performing CRC verification on each of the divided data blocks, and attaching the generated verification code to the tail of each of the data blocks; Converting the data blocks with attached verification codes and the corresponding numbers of the data blocks into data encoding graphics in a preset format.

4. A data transmission method across physically isolated networks, characterized in that, Including: Sampling the data encoding graphics presented by the sending end to generate a sequence of sampled images; Based on the identification information of the preset verification area, screening out duplicate images and / or blurred images in the sequence of sampled images; Decoding the sequence of sampled images after screening out the duplicate images and / or blurred images to obtain the corresponding data block information, and reconstructing the data to be transmitted based on the data block information.

5. The data transmission method across physically isolated networks according to claim 4, wherein If the identification information is filling the verification area of the data encoding graphics presented an odd number of times with a first gray value; filling the verification area of the data encoding graphics presented an even number of times with a second gray value, then the screening out blurred images in the collected images based on the identification information of the verification area includes: Judging whether the sampled image is an image presented an odd number of times or an image presented an even number of times; Obtaining the gray values of each pixel row in the verification area of the sampled image, If the sampled image is an image presented an odd number of times and the gray values of the pixel rows in the verification area of the sampled image exceeding a preset value are not within a preset first gray interval, then screening out the sampled image; If the sampled image is an image presented an even number of times and the gray values of the pixel rows in the verification area of the sampled image exceeding a preset value are not within a preset second gray interval, then screening out the sampled image.

6. The data transmission method across physically isolated networks according to claim 5, wherein The screening out duplicate images in the collected images based on the gray values of the verification area includes: Judging whether the sampled image is an image presented an odd number of times or an image presented an even number of times; If there are multiple consecutively presented images an odd number of times, then only retaining the sampled image with the smallest absolute value of the difference between the gray value of the verification area and the first gray value among the multiple consecutively presented images an odd number of times; If there are multiple consecutively presented images an even number of times, then only retaining the sampled image with the smallest absolute value of the difference between the gray value of the verification area and the second gray value among the multiple consecutively presented images an even number of times.

7. The data transmission method across physically isolated networks according to claim 6, wherein Judging whether the sampled image is an image presented an odd number of times or an image presented an even number of times includes: Obtain the gray - scale mean value of each of the sampling image verification regions; If the gray - scale mean value is within a preset third gray - scale interval, the sampling image is an image displayed an odd number of times; If the gray - scale mean value is within a preset fourth gray - scale interval, the sampling image is an image displayed an even number of times.

8. The data transmission method across physically isolated networks according to claim 4, characterized in that, The reconstructing the data to be transmitted based on the data block information includes: Decode the sampling image sequence after screening out duplicate images and / or blurred images, and obtain the data block information included in the data - encoding graphics in each of the sampling images; Sort each of the data block information based on the data block number, and merge each of the data block information into the data to be transmitted.

9. The data transmission method across physically isolated networks according to claim 8, wherein The method further includes: Traverse each of the decoded data blocks, and perform CRC verification on each of the data block information that does not contain a check code; If the generated check code is consistent with the check code carried by the corresponding data block, the data of this data block is complete; If the generated check code is inconsistent with the check code carried by the corresponding data block, the data of this data block is missing, and report the label of this data block and an alarm signal.

10. The data transmission method across physically isolated networks according to claim 4, wherein The method also: The sampling frequency at the receiving end is greater than or equal to twice the switching frequency of the sending end for displaying each of the data - encoding graphics.

11. A data transmission system across physically isolated networks, which is applied to the data transmission method across physically isolated networks according to any one of claims 1-3, and is characterized in that, Includes: A splitting module, configured to split the data to be transmitted into multiple data blocks; A generating module, configured to generate corresponding data - encoding graphics for each of the data blocks, and the data - encoding graphics can be recognized to obtain the data block information included therein; A displaying module, configured to sequentially display the data - encoding graphics to the receiving end, and set a verification region within the display range of the data - encoding graphics, so that the receiving end can obtain the data block information included therein based on the data - encoding graphics; wherein, Each time a different data - encoding graphic is displayed, a first identifier is set in the verification region of the data - encoding graphic displayed an odd number of times, and a second identifier is set in the verification region of the data - encoding graphic displayed an even number of times.

12. A data transmission system across physically isolated networks, which is applied to the data transmission method across physically isolated networks according to any one of claims 4-10, and is characterized in that, Includes: An acquisition module, configured to sample the data - encoding graphics displayed by the sending end to generate a sampling image sequence; A screening module, configured to screen out duplicate images and / or blurred images in the sampling image sequence based on the identification information of the verification region; A reconstruction module, configured to decode the sampling image sequence after screening out the duplicate images and / or blurred images, obtain the corresponding data block information, and reconstruct the data to be transmitted based on the data block information.

Images