A UAV flight data return transmission system and method

Abstract

The present invention provides a system and method for transmitting drone flight data back to the field of communication technology. An intranet unit collects protocol data and file data from a command station, performs protocol conversion on the protocol data, and obtains UDP unicast data. A first one-way optical gate transmits the UDP unicast data and file data unidirectionally to an external network unit. The external network unit transmits the file data and UDP unicast data to a router. The router transmits the file data and UDP unicast data to a network server via a VPN tunnel. The command center restores the UDP unicast data to obtain protocol data, performs command control on the drone based on the protocol data, and stores the file data in the intranet. In this solution, a VPN tunnel is constructed and used to transmit protocol data and file data back to the command station. This ensures the return effect while reducing the return cost. By setting a one-way optical gate, the command station and the command center are physically isolated, preventing the return link from being illegally used.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a system and method for transmitting flight data of an unmanned aerial vehicle (UAV). Background Art

[0002] Currently, medium and large drones are widely used in emergency rescue, logistics, and other fields. When performing missions, the various data generated by medium and large drones during flight, such as position, speed, altitude, and environmental perception information, are of great value to mission execution, flight safety, and subsequent operations. Therefore, reliable data backhaul technology is needed to transmit this data to relevant systems in real time and stably to ensure the smooth progress of flight missions, improve mission execution accuracy, and provide a basis for subsequent flight decisions and mission optimization.

[0003] Prior art uses satellite links for flight data backhaul. This Ku-band transmission is susceptible to environmental factors such as weather, leading to signal attenuation, high bit error rates, and signal loss. This can lead to significant data transmission delays or signal interruptions. Furthermore, the use of satellites for routine transmission carries high fees, resulting in high costs for flight data backhaul. Furthermore, existing backhaul links are susceptible to unauthorized exploitation, resulting in unauthorized drone manipulation and security incidents.

[0004] In summary, how to transmit drone flight data while ensuring the return effect, reducing costs and ensuring link security is an urgent problem that needs to be solved. Summary of the Invention

[0005] In view of this, an embodiment of the present invention provides a system and method for transmitting UAV flight data back to achieve the purpose of transmitting UAV flight data back while ensuring the transmission effect, reducing costs and ensuring link security.

[0006] To achieve the above objectives, the embodiments of the present invention provide the following technical solutions:

[0007] A first aspect of an embodiment of the present invention discloses a backhaul system for UAV flight data, the system comprising: an intranet unit, an extranet unit, a first one-way optical switch, a router, an access concentrator, a network server, an AAA server, and a command and control center;

[0008] The intranet unit is connected to the first one-way optical gate and the UAV's command station, and the first one-way optical gate is connected to the external network unit; the router is connected to the access concentrator, and the network server is connected to the access concentrator and the AAA server respectively; the command center is connected to the network server and the enterprise intranet respectively;

[0009] The intranet unit is configured to collect protocol data of the drone from the command station in real time and file data of the drone archived by the command station; perform protocol conversion on the protocol data to obtain UDP unicast data; and transmit the UDP unicast data and the file data unidirectionally to the external network unit using the first unidirectional optical gate;

[0010] The external network unit is connected to the router and is used to transmit the file data and the UDP unicast data to the router;

[0011] The router is configured to establish a VPN tunnel between the access concentrator and the network server using the AAA server; and transmit the file data and the UDP unicast data to the network server through the VPN tunnel;

[0012] The command center is configured to receive the file data and the UDP unicast data; restore the UDP unicast data to obtain the protocol data, and perform command control on the drone based on the protocol data; and store the file data in the enterprise intranet.

[0013] Preferably, the intranet unit is further used for:

[0014] Using a preset regular expression rule library, the file data is subjected to file name legitimacy verification, and the file data is scanned for virus signatures using a ClamAV engine; if the file name legitimacy verification passes and no virus signature is detected, a first hash value is generated based on the file data and an encrypted hash algorithm; and a device fingerprint including the first hash value is added to the file data using a least significant bit steganography technique;

[0015] Accordingly, the external network unit is further used for:

[0016] Extract the first hash value from the file data, generate a second hash value using the file data and the encrypted hash algorithm, verify whether the first hash value and the second hash value are consistent, and if they are inconsistent, determine that the file data fails the integrity verification, and notify the intranet unit to resend the file data.

[0017] Preferably, the control center is further used to:

[0018] When the UDP unicast data and the file data transmitted by the external network unit are received, the device information of the external network unit is obtained, and whether the device information is pre-authorized device information is verified; if not, the UDP unicast data and the file data are deleted.

[0019] Preferably, the control center includes: a central server, a first switch, a second one-way optical gate and a plurality of control computers;

[0020] The central server is connected to the network server, the first switch and the second one-way optical gate are connected to the central server, the accusation computer is connected to the first switch, and the second one-way optical gate is connected to the enterprise intranet;

[0021] The central server is used to receive the UDP unicast data and the file data, and restore the UDP unicast data to obtain the protocol data; transmit the file data and the protocol data to each of the command computers through the first switch, so that each of the command computers can perform command control on the drone based on the file data; and transmit the file data to the enterprise intranet through the second one-way optical gate for storage.

[0022] Preferably, the router is specifically used for:

[0023] An access request is sent to the access concentrator, so that the access concentrator sends a tunnel establishment request to the network server. The network server uses the AAA server to authenticate the tunnel establishment request. When the authentication is passed, it is determined that the VPN tunnel between the access concentrator and the network server is established. The file data and the UDP unicast data are transmitted to the network server through the VPN tunnel.

[0024] Preferably, the system further comprises: a video data collector and a monitoring center; the video data collector is connected to the onboard video source in the command station via an HDMI interface, and the video data collector is connected to a first network video recorder in the command station via a network port; the first network video recorder stores historical field video data;

[0025] The video data collector is connected to the router and is used to collect real-time airborne video data of the UAV from the airborne video source; collect the historical field video data from the network video recorder; and transmit the real-time airborne video data and the historical field video data to the router;

[0026] Accordingly, the router is further configured to:

[0027] transmitting the real-time onboard video data and the historical off-site video data to the network server via the VPN tunnel;

[0028] The monitoring center is connected to the network server and the enterprise intranet respectively, and is used to store the real-time airborne video data and the historical field video data; display the real-time airborne video data in real time; when receiving a playback instruction input by the user, replay the historical field video data; and transmit the real-time airborne video data to the enterprise intranet for storage.

[0029] Preferably, the monitoring center includes: a second switch, a display device, a second network video recorder, a streaming media server and a third one-way optical switch;

[0030] The second switch is connected to the network server, the display device, the second network video recorder and the streaming server are connected to the second switch, and the third one-way optical gate is connected to the streaming server and the enterprise intranet respectively;

[0031] The streaming media server is configured to store the real-time airborne video data forwarded by the second switch; transmit the real-time airborne video data to the display device through the second switch for display; and transmit the real-time airborne video data unidirectionally to the enterprise intranet through the third unidirectional optical switch for storage;

[0032] The second network video recorder is used to store the historical field video data forwarded through the second switch; when receiving a playback instruction input by the user, the historical field video data is transmitted to the display device through the second switch for playback.

[0033] Preferably, the system further comprises: one or more control balls deployed in the outfield;

[0034] A wireless network unit is provided in the control ball, for collecting real-time outdoor video data of the drone during take-off and landing, and encrypting the real-time outdoor video data; the encrypted real-time outdoor video data is transmitted to the second network video recorder through the wireless network unit and the second switch;

[0035] Accordingly, the second network video recorder is further used for:

[0036] The encrypted real-time outdoor video data is decrypted and stored; and the decrypted real-time outdoor video data is transmitted to the display device through the second switch for real-time display.

[0037] Preferably, the system further comprises: a portable box; the frame of the portable box has a thickness of 2.5 mm, the frame of the portable box is made of magnesium-aluminum alloy, and a filling layer with a damping coefficient greater than or equal to 0.7 is provided in the frame of the portable box; a plurality of universal wheels are provided at the bottom of the portable box;

[0038] The internal network unit, the external network unit and the first one-way optical shutter are arranged inside the portable box;

[0039] The portable box is provided with a temperature control system for controlling the temperature inside the portable box to be within the range of -20°C to 55°C;

[0040] The portable box is provided with a power supply system, which is provided with a 220V AC input interface, a 48V DC input interface and a battery pack for providing power to the internal network unit, the external network unit and the temperature control system.

[0041] A second aspect of an embodiment of the present invention discloses a method for transmitting flight data of a drone, the method comprising:

[0042] Using the intranet unit to collect the protocol data of the drone from the command station in real time, collecting the file data of the drone archived by the command station, performing protocol conversion on the protocol data to obtain UDP unicast data;

[0043] Utilizing a first unidirectional optical switch to unidirectionally transmit the UDP unicast data and the file data to an external network unit;

[0044] Utilizing the external network unit to transmit the file data and the UDP unicast data to a router;

[0045] The router uses the AAA server to establish a VPN tunnel between the access concentrator and the network server;

[0046] transmitting the file data and the UDP unicast data to the network server through the VPN tunnel;

[0047] The command center receives the file data and the UDP unicast data from the network server, restores the UDP unicast data to obtain the protocol data, performs command control on the drone based on the protocol data, and stores the file data in the enterprise intranet.

[0048] Based on the above-mentioned embodiment of the present invention, a system and method for transmitting UAV flight data are provided, the system includes: an intranet unit, an extranet unit, a first one-way optical gate, a router, an access concentrator, a network server, an AAA server and a command center; the intranet unit is connected to the first one-way optical gate and the command station of the UAV, and the first one-way optical gate is connected to the extranet unit; the router is connected to the access concentrator, and the network server is respectively connected to the access concentrator and the AAA server; the command center is respectively connected to the network server and the enterprise intranet; the intranet unit is used to collect the protocol data of the UAV from the command station in real time, and collect the file data of the UAV archived by the command station; the protocol data is converted into a protocol, and the protocol data is obtained. to UDP unicast data; use the first one-way optical gate to unidirectionally transmit the UDP unicast data and the file data to the external network unit; the external network unit is connected to the router, and is used to transmit the file data and the UDP unicast data to the router; the router is used to use the AAA server to establish a VPN tunnel between the access concentrator and the network server; the file data and the UDP unicast data are transmitted to the network server through the VPN tunnel; the command center is used to receive the file data and the UDP unicast data; restore the UDP unicast data to obtain the protocol data, and perform command control on the drone based on the protocol data; and store the file data in the enterprise intranet. In this solution, a VPN tunnel is constructed, and the VPN tunnel is used to return the protocol data and file data, which reduces the return cost while ensuring the return effect. By setting a one-way optical gate, the command station and the command center become two physically isolated networks, preventing the return link from being illegally used. BRIEF DESCRIPTION OF THE DRAWINGS

[0049] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are merely embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying any creative work.

[0050] Figure 1 This is an architecture diagram of a UAV flight data return system disclosed in an embodiment of the present invention;

[0051] Figure 2 This is an architecture diagram of another UAV flight data return system disclosed in an embodiment of the present invention;

[0052] Figure 3 This is a flow chart of a method for transmitting UAV flight data disclosed in an embodiment of the present invention;

[0053] Among them, the intranet unit is 1, the extranet unit is 2, the first one-way optical gate is 3, the router is 4, the access concentrator is 5, the network server is 6, the AAA server is 7, the command center is 8, the monitoring center is 9, the video data collector is 10, the central server is 81, the first switch is 82, the second one-way optical gate is 83, the command computer is 84, the second switch is 91, the display device is 92, the second network video recorder is 93, the streaming media server is 94, and the third one-way optical gate is 95. DETAILED DESCRIPTION

[0054] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of the present invention.

[0055] In this application, the terms "comprises," "comprising," or any other variations thereof are intended to encompass non-exclusive inclusion, such that a process, method, article, or apparatus that includes a list of elements includes not only those elements but also other elements not explicitly listed, or elements inherent to such process, method, article, or apparatus. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not preclude the presence of additional identical elements in the process, method, article, or apparatus that includes the element.

[0056] As can be seen from the background, conventional flight data transmission is achieved via satellite links. This Ku-band transmission of flight data via satellite is susceptible to environmental factors such as weather, leading to signal attenuation, high bit error rates, and signal loss. This can lead to significant data transmission delays or signal interruptions. Furthermore, the use of satellites for routine transmission carries high fees, resulting in high costs for flight data transmission. Furthermore, existing return links are susceptible to unauthorized exploitation, resulting in unauthorized drone manipulation and security incidents.

[0057] In summary, how to transmit drone flight data while ensuring the return effect, reducing costs and ensuring link security is an urgent problem that needs to be solved.

[0058] Therefore, an embodiment of the present invention discloses a backhaul system and method for drone flight data. In this solution, a VPN tunnel is constructed, and the VPN tunnel is used to backhaul protocol data and file data, thereby reducing the backhaul cost while ensuring the backhaul effect. By setting a one-way optical gate, the command station and the command center become two physically isolated networks, preventing the backhaul link from being illegally used.

[0059] like Figure 1 As shown, this is an architecture diagram of a return transmission system for drone flight data disclosed in an embodiment of the present invention, including: an intranet unit 1, an extranet unit 2, a first one-way optical gate 3, a router 4, an access concentrator 5, a network server 6, an AAA server 7 and a command and control center 8.

[0060] The intranet unit 1 is connected to the first one-way optical gate 3 and the command station of the drone, and the first one-way optical gate 3 is connected to the external network unit 2; the router 4 is connected to the access concentrator 5, and the network server 6 is connected to the access concentrator 5 and the AAA server 7 respectively; the command center 8 is connected to the network server 6 and the enterprise intranet respectively.

[0061] Preferably, a firewall is provided between the intranet unit 1 and the charging station, and between the extranet unit 2 and the router 4 .

[0062] In this application, the role of a firewall is to monitor and control incoming and outgoing data, allowing or blocking specific data according to preset security rules.

[0063] The intranet unit 1 is used to collect the protocol data of the drone from the command station in real time, and collect the file data of the drone archived by the command station; perform protocol conversion on the protocol data to obtain UDP unicast data; and use the first unidirectional optical gate 3 to transmit the UDP unicast data and file data unidirectionally to the external network unit 2.

[0064] The drone's command and control station consists of multiple data receiving devices, a DM (Device Management) host, and multiple command and control station-level computers. Intranet unit 1 connects to the DM host via a switch in the command and control station, collecting protocol data and file data from the DM host.

[0065] It should be noted that the protocol data includes UDP multicast data and TCP composite data, and the file data is a Dat format file that supports storage in the enterprise intranet and is obtained by standardized encapsulation of the DM host of the command station.

[0066] The protocol data includes: real-time position of the drone, flight time, flight altitude, airspeed, ground speed, navigation mode, heading angle, pressure altitude, pitch angle, roll angle, total fuel level, number of routes, waypoint data, etc. The file data includes structured information such as flight parameters and sensor data.

[0067] The one-way optical shutter is an isolation device based on the unidirectional nature of light, used to achieve unidirectional data transmission. A first one-way optical shutter 3 is installed between the intranet unit 1 and the external network unit 2, so that data can only be transmitted one-way from the intranet unit 1 to the external network unit 2, achieving physical isolation. Since the intranet unit 1 is connected to the command station and the external network unit 2 is connected to the command center 8, physical isolation is achieved between the command station and the command center 8, thereby achieving the security requirement of preventing the drone from being controlled via the backhaul link under any circumstances.

[0068] It should be noted that since the one-way optical gate currently only supports one-way transmission of file data, it cannot realize one-way transmission of UDP multicast data and TCP composite data. Therefore, it is necessary to perform protocol conversion on the two received protocol data and convert them into UDP unicast data to realize one-way data transmission through the one-way optical gate.

[0069] During the protocol conversion process, UDP multicast data and TCP composite data are decoupled and converted to UDP unicast using the RFC 6347 standard to obtain UDP unicast data.

[0070] In the case of limited transmission flow, the command center 8 needs to control the drone based on the protocol data, as the protocol data is highly real-time. Therefore, when using the first one-way optical gate 3 to unidirectionally transmit UDP unicast data and file data to the external network unit 2, the UDP unicast data is transmitted unidirectionally first, followed by the file data. This implements a priority scheduling mechanism to ensure real-time transmission of protocol data.

[0071] In one embodiment, in order to ensure the reliability of unidirectional transmission of file data, the file data is fragmented using a file fragmentation algorithm, and each fragment is then transmitted unidirectionally to the external network unit 2 in sequence, and the external network unit 2 restores the file data based on each fragment.

[0072] In one embodiment, since file data is easily illegally used and easily lost during transmission, the intranet unit 1 performs security pre-processing on the file data.

[0073] During the security preprocessing process, the file name legitimacy is verified using a preset regular expression rule library, and the file data is scanned for virus features using the ClamAV engine. If the file name legitimacy verification passes and no virus features are found, a first hash value is generated based on the file data and an encrypted hash algorithm (such as the SHA-256 algorithm). LSB (Least Significant Bit) steganography technology is used to add a device fingerprint containing the first hash value to the file data.

[0074] Among them, when the file data is transmitted to the external network unit 2, the external network unit 2 performs file data integrity verification based on the first hash value, that is, the external network unit 2 extracts the first hash value from the file data, uses the file data and the encrypted hash algorithm to generate a second hash value, and verifies whether the first hash value and the second hash value are consistent. If they are inconsistent, it is determined that the file data has failed the integrity verification, and the internal network unit 1 is notified to resend the file data.

[0075] The external network unit 2 is connected to the router 4 and is used to transmit file data and UDP unicast data to the router 4 .

[0076] It is understandable that the intranet unit 1 will give priority to sending UDP unicast data. After receiving the UDP unicast data, the extranet unit 2 will first send the UDP unicast data to the control center 8 through the router 4 without waiting for the file data.

[0077] It should be noted that in order to ensure the security of data transmission, the external network unit 2 applies for authorization from the control center 8 in advance. After the authorization is passed, the control center 8 records the device information of the external network unit 2. If it is not authorized, the control center 8 will discard any data transmitted by the external network unit 2.

[0078] The router 4 is configured to establish a VPN tunnel between the access concentrator 5 and the network server 6 using the AAA server 7; and transmit the file data and UDP unicast data to the network server 6 through the VPN tunnel.

[0079] During the process of establishing the VPN tunnel, the router 4 sends an access request to the access concentrator 5, so that the access concentrator 5 sends a tunnel establishment request to the network server 6. The network server 6 uses the AAA server 7 to authenticate the tunnel establishment request. When the authentication is passed, it is determined that the VPN tunnel between the access concentrator 5 and the network server 6 is established.

[0080] The access concentrator 5 is an L2TP access concentrator, and the network server 6 is an L2TP network server.

[0081] Preferably, the router 4 can be a 5G industrial router.

[0082] An AAA server 7 is a network security device that manages user authentication, authorization, and accounting. AAA stands for Authentication, Authorization, and Accounting. It provides a comprehensive access management solution by ensuring only authorized users can access network resources, defining the resources and services users can access, and tracking user usage of network resources.

[0083] In the embodiment of the present invention, file data and UDP unicast data are transmitted to the network server 6 through the VPN tunnel, which can realize encrypted transmission of data while taking into account low cost, transmission speed and security.

[0084] The command center 8 is used to receive file data and UDP unicast data; restore the UDP unicast data to obtain protocol data, and control the drone based on the protocol data; and store the file data in the enterprise intranet.

[0085] Specifically, the control center 8 includes: a central server 81 , a first switch 82 , a second one-way optical gate 83 and a plurality of control computers 84 .

[0086] The central server 81 is connected to the network server 6, the first switch 82 and the second one-way optical gate 83. The control computer 84 is connected to the first switch 82 and the second one-way optical gate 83 is connected to the enterprise intranet.

[0087] Preferably, a firewall is provided between the network server 6 and the first switch 82 .

[0088] The central server 81 is used to receive UDP unicast data and file data, and restore the UDP unicast data to obtain protocol data; transmit the file data and protocol data to each command computer 84 through the first switch 82, so that each command computer 84 can control the drone based on the file data; and transmit the file data to the enterprise intranet through the second one-way optical gate 83 for storage.

[0089] The second one-way optical shutter 83 is used to prevent data leakage in the enterprise intranet.

[0090] It should be noted that the central server 81 is installed with an application system to support the management of three members. In addition to the three members, the system also plans two different roles: business administrator and business personnel.

[0091] The three members are responsible for account creation, permission setting, and auditing usage. The system administrator is responsible for CA certificate management and key updates (RSA-2048); the security administrator develops audit policies (including log retention and abnormal behavior detection); and the audit administrator implements operation tracing (supporting time range retrieval and operation type filtering).

[0092] Business administrators can manage and authorize external network units 2 through the application system. The application system allows business administrators to maintain device information for authorized external network units 2, including querying and deleting them. Business personnel, as field users, can easily configure external network units 2. Business administrators can also use the application system to view and analyze data traffic received by the central server 81.

[0093] In one embodiment, the central server 81 can perform integrity and security checks on the received data.

[0094] In one embodiment, a first firewall is provided between the external network unit 2 and the router 4, and a second firewall is provided between the network server 6 and the central server 81. When the distance is sufficiently close, the first firewall and the second firewall are connected by wire, forming a wired network between the external network unit 2 and the central server 81. The external network unit 2 transmits UDP unicast data and file data to the central server 81 via the wired network. Wired networks have advantages in transmission stability and security.

[0095] The embodiment of the present invention further discloses a portable box, which is specifically as follows:

[0096] The thickness of the frame of the portable box is 2.5 mm, the material of the frame of the portable box is magnesium-aluminum alloy, and a filling layer with a damping coefficient greater than or equal to 0.7 is provided in the frame of the portable box; a plurality of universal wheels are provided at the bottom of the portable box.

[0097] A 19-inch standard rack (depth: 600 mm) is provided inside the portable box, with at least four expansion slots reserved, so that the intranet unit 1, the extranet unit 2 and the first one-way optical shutter 3 are arranged inside the portable box.

[0098] A temperature control system is provided inside the portable box for controlling the temperature inside the portable box to be within the range of -20°C to 55°C.

[0099] The portable box is provided with a power supply system, which is provided with a 220V AC input interface, a 48V DC input interface and a battery pack for providing power to the intranet unit 1, the extranet unit 2 and the temperature control system.

[0100] Based on the above-mentioned embodiment of the present invention, a return data system for drone flight data is disclosed. In this solution, a VPN tunnel is constructed, and the VPN tunnel is used to return protocol data and file data, thereby reducing the return cost while ensuring the return effect. By setting a one-way optical gate, the command station and the command center become two physically isolated networks, preventing the return link from being illegally used.

[0101] like Figure 2FIG. 1 is a diagram showing an architecture of another UAV flight data transmission system disclosed in an embodiment of the present invention.

[0102] The embodiment of the present invention Figure 1 On the basis of the corresponding embodiment, a monitoring center 9 and a video data collector 10 are added.

[0103] The video data collector 10 is connected to the airborne video source in the charging station through the HDMI interface, and the video data collector 10 is connected to the first network video recorder in the charging station through the network port; the first network video recorder stores historical field video data.

[0104] The command and control station is an existing ground command and control station, which includes an airborne video source and a first network video recorder.

[0105] The video data collector 10 is connected to the router 4 and is used to collect real-time airborne video data of the drone from the airborne video source; collect historical field video data from the network video recorder; and transmit the real-time airborne video data and historical field video data to the router 4.

[0106] The real-time airborne video data may be video data collected by an airborne camera on the UAV, and the historical field video data may be UAV take-off and landing video data collected in the past and stored in the first network video recorder.

[0107] In this embodiment of the present invention, the video data collector 10 is deployed to efficiently collect flight video data. The device supports an HDMI interface, ensuring compatibility with various video sources and high-quality video data acquisition. Furthermore, by interfacing with the API protocol of a network video recorder (NVR), the device utilizes an RJ45 network port to seamlessly capture video data stored in the NVR. This process not only improves data acquisition efficiency but also ensures data isolation and security.

[0108] The video data collector 10 has a built-in workstation with a pre-installed Windows 7 operating system for viewing the collected video data (real-time airborne video data and historical field video data).

[0109] Specifically, the built-in workstation of the video data collector 10 is installed with an OBS client, which can collect real-time airborne video data.

[0110] Correspondingly, the router 4 is further configured to transmit the real-time onboard video data and the historical off-site video data to the network server 6 via the VPN tunnel.

[0111] The monitoring center 9 is connected to the network server 6 and the enterprise intranet respectively, and is used to store real-time airborne video data and historical field video data; display real-time airborne video data in real time; when receiving a playback instruction input by the user, replay the historical field video data; and transmit the real-time airborne video data to the enterprise intranet for storage.

[0112] Specifically, the monitoring center 9 includes: a second switch 91, a display device 92, a second network video recorder 93, a streaming media server 94 and a third one-way optical gate 95;

[0113] The second switch is connected to the network server 6, the display device 92, the second network video recorder 93 and the streaming server 94 are connected to the second switch 91, and the third one-way optical gate 95 is connected to the streaming server 94 and the enterprise intranet respectively.

[0114] The streaming media server 94 is used to store the real-time onboard video data forwarded by the second switch 91; transmit the real-time onboard video data to the display device 92 through the second switch 91 for display; and transmit the real-time onboard video data unidirectionally to the enterprise intranet through the third one-way optical gate 95 for storage.

[0115] It can be understood that after the real-time airborne video data is transmitted back to the specified directory in the streaming media server 94, the workstation of the streaming media server 94 automatically transmits the data in the directory to the third one-way optical gate 95, and uses the third one-way optical gate 95 to transmit the data in one direction to a specific server in the enterprise intranet; a mobile hard disk containing data brought back manually from the outside can also be connected to the streaming media server 94 through the USB port, and the data to be imported into the enterprise intranet can be copied to the specified directory of the streaming media server and transmitted to the enterprise intranet. The one-way optical gate provides isolation between the internal and external networks, ensuring the security and integrity of the data.

[0116] The second network video recorder 93 is used to store the historical outdoor video data forwarded through the second switch 91; when receiving a playback instruction input by the user, the historical outdoor video data is transmitted to the display device 92 through the second switch 91 for playback.

[0117] It is understandable that a client is installed in the display device, and the user can obtain corresponding video data from the streaming server 94 and the second network video recorder 93 through the client and the second switch 91 for playback.

[0118] In an embodiment of the present invention, a plurality of control balls 11 deployed in the outdoor area are further included. A wireless network unit is set in the control ball 11 for collecting real-time outdoor video data of the drone during take-off and landing, and encrypting the real-time outdoor video data; the encrypted real-time outdoor video data is transmitted to the second network video recorder through the wireless network unit and the second switch.

[0119] Accordingly, the second network video recorder 93 is further used for:

[0120] The encrypted real-time outdoor video data is decrypted and stored; the decrypted real-time outdoor video data is transmitted to the display device 92 through the second switch 91 for real-time display.

[0121] It should be noted that the surveillance cameras deployed around the airport are designed to operate in high-altitude and cold environments, supporting operating temperatures of -20 to 60 degrees Celsius and IP66 compliance. Considering both daytime and nighttime filming, the device supports infrared fill light; the filming environment is far from the aircraft, and supports 25x zoom. Due to the lack of outdoor power supply, the device comes with a built-in battery that supports 8 hours of filming. The surveillance camera supports a tripod and can be fixed with a tripod, supporting filming in wind speeds of level 8. The captured images are automatically encrypted and transmitted back to the second network video recorder 93 via the built-in wireless network unit for storage and distribution.

[0122] Based on the above-mentioned embodiment of the present invention, a drone flight data return system is disclosed. By deploying a video data collector, compatibility with various video sources and high-quality video data collection are ensured. In addition, the video data will then be securely and stably transmitted back to the headquarters through a VPN tunnel, greatly improving the speed and reliability of data transmission while ensuring low costs.

[0123] like Figure 3 FIG. 1 is a flow chart of a method for transmitting UAV flight data according to an embodiment of the present invention, which is applied to any UAV flight data transmission system according to the above-mentioned embodiment of the present invention, and includes the following steps:

[0124] Step S501: Use the intranet unit to collect the protocol data of the drone from the command station in real time, collect the file data of the drone archived by the command station, perform protocol conversion on the protocol data, and obtain UDP unicast data.

[0125] Step S502: using a first unidirectional optical switch to unidirectionally transmit UDP unicast data and file data to an external network unit.

[0126] Step S503: Utilize the external network unit to transmit the file data and UDP unicast data to the router.

[0127] Step S504: The router uses the AAA server to establish a VPN tunnel between the access concentrator and the network server.

[0128] It is understandable that if a pre-established VPN tunnel already exists between the access concentrator and the network server, step S504 is skipped and step S505 is executed.

[0129] Step S505: Transmit the file data and UDP unicast data to the network server through the VPN tunnel.

[0130] Step S506: The command center receives the file data and UDP unicast data from the network server, restores the UDP unicast data to obtain protocol data, controls the drone based on the protocol data, and stores the file data in the enterprise intranet.

[0131] It should be noted that, for the explanation of steps S501 to S506 , reference can be made to the above-mentioned embodiment of the present invention, which will not be repeated here.

[0132] Based on the above-mentioned embodiment of the present invention, a method for returning UAV flight data is disclosed. In this solution, a VPN tunnel is constructed, and the VPN tunnel is used to return protocol data and file data, thereby reducing the return cost while ensuring the return effect. By setting a one-way optical gate, the command station and the command center become two physically isolated networks, preventing the return link from being illegally used.

[0133] Each embodiment in this specification is described in a progressive manner. The same or similar parts between the embodiments can be referred to each other. Each embodiment focuses on the differences from other embodiments. In particular, for system or system embodiments, since they are basically similar to method embodiments, the description is relatively simple. For relevant parts, refer to the partial description of the method embodiment. The system and system embodiments described above are merely schematic, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules can be selected according to actual needs to achieve the purpose of the solution of this embodiment. A person of ordinary skill in the art can understand and implement it without expending creative work.

[0134] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the above description has generally described the components and steps of each example according to their functions. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of the present invention.

[0135] The above description of the disclosed embodiments is intended to enable one skilled in the art to implement or use the present invention. Various modifications to these embodiments will be readily apparent to one skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention is not limited to the embodiments shown herein but is intended to conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A UAV flight data return system, characterized in that: The system includes: an intranet unit, an extranet unit, a first one-way optical switch, a router, an access concentrator, a network server, an AAA server and a command center; The intranet unit is connected to the first one-way optical gate and the drone's command station, and the first one-way optical gate is connected to the external network unit; the router is connected to the access concentrator, and the network server is connected to the access concentrator and the AAA server respectively; the command center is connected to the external network unit, the network server, and the enterprise intranet respectively; The intranet unit is configured to collect protocol data of the drone from the command station in real time and file data of the drone archived by the command station; perform protocol conversion on the protocol data to obtain UDP unicast data; and transmit the UDP unicast data and the file data unidirectionally to the external network unit using the first unidirectional optical gate; The external network unit is connected to the router and is used to transmit the file data and the UDP unicast data to the router; The router is configured to establish a VPN tunnel between the access concentrator and the network server using the AAA server; and transmit the file data and the UDP unicast data to the network server through the VPN tunnel; The command center is configured to receive the file data and the UDP unicast data; restore the UDP unicast data to obtain the protocol data, and perform command control on the drone based on the protocol data; and store the file data in the enterprise intranet.

2. The system according to claim 1, wherein: The intranet unit is further configured to: Using a preset regular expression rule library to verify the file name legitimacy of the file data, and using the ClamAV engine to scan the file data for virus features; If the file name passes the validity verification and no virus signature is scanned, a first hash value is generated based on the file data and the encrypted hash algorithm; and a device fingerprint including the first hash value is added to the file data using the least significant bit steganography technology; Accordingly, the external network unit is further used for: Extract the first hash value from the file data, generate a second hash value using the file data and the encrypted hash algorithm, verify whether the first hash value and the second hash value are consistent, and if they are inconsistent, determine that the file data fails the integrity verification, and notify the intranet unit to resend the file data.

3. The system according to claim 1, wherein: The control center is also used to: When the UDP unicast data and the file data transmitted by the external network unit are received, the device information of the external network unit is obtained, and whether the device information is pre-authorized device information is verified; if not, the UDP unicast data and the file data are deleted.

4. The system according to claim 1, wherein: The control center includes: a central server, a first switch, a second one-way optical gate and a plurality of control computers; The central server is connected to the network server, the first switch and the second one-way optical gate are connected to the central server, the accusation computer is connected to the first switch, and the second one-way optical gate is connected to the enterprise intranet; The central server is used to receive the UDP unicast data and the file data, and restore the UDP unicast data to obtain the protocol data; transmit the file data and the protocol data to each of the command computers through the first switch, so that each of the command computers can perform command control on the drone based on the file data; and transmit the file data to the enterprise intranet through the second one-way optical gate for storage.

5. The system according to claim 1, wherein: The router is specifically configured to: Sending an access request to the access concentrator, so that the access concentrator sends a tunnel establishment request to the network server, and the network server authenticates the tunnel establishment request using the AAA server. When the authentication is successful, it is determined that the VPN tunnel between the access concentrator and the network server is established; The file data and the UDP unicast data are transmitted to the network server through the VPN tunnel.

6. The system according to claim 1, wherein: The system further comprises: a video data collector and a monitoring center; the video data collector is connected to the onboard video source in the command station via an HDMI interface, and the video data collector is connected to a first network video recorder in the command station via a network port; the first network video recorder stores historical field video data; The video data collector is connected to the router and is used to collect real-time airborne video data of the UAV from the airborne video source; collect the historical field video data from the network video recorder; and transmit the real-time airborne video data and the historical field video data to the router; Accordingly, the router is further configured to: transmitting the real-time onboard video data and the historical off-site video data to the network server via the VPN tunnel; The monitoring center is connected to the network server and the enterprise intranet respectively, and is used to store the real-time airborne video data and the historical field video data; display the real-time airborne video data in real time; when receiving a playback instruction input by the user, replay the historical field video data; and transmit the real-time airborne video data to the enterprise intranet for storage.

7. The system according to claim 6, characterized in that The monitoring center includes: a second switch, a display device, a second network video recorder, a streaming media server and a third one-way optical switch; The second switch is connected to the network server, the display device, the second network video recorder and the streaming server are connected to the second switch, and the third one-way optical gate is connected to the streaming server and the enterprise intranet respectively; The streaming media server is configured to store the real-time airborne video data forwarded by the second switch; transmit the real-time airborne video data to the display device through the second switch for display; and transmit the real-time airborne video data unidirectionally to the enterprise intranet through the third unidirectional optical switch for storage; The second network video recorder is used to store the historical field video data forwarded through the second switch; when receiving a playback instruction input by the user, the historical field video data is transmitted to the display device through the second switch for playback.

8. The system according to claim 7, characterized in that The system further includes: one or more control balls deployed in the outfield; A wireless network unit is provided in the control ball, for collecting real-time outdoor video data of the drone during take-off and landing, and encrypting the real-time outdoor video data; the encrypted real-time outdoor video data is transmitted to the second network video recorder through the wireless network unit and the second switch; Accordingly, the second network video recorder is further used for: The encrypted real-time outdoor video data is decrypted and stored; and the decrypted real-time outdoor video data is transmitted to the display device through the second switch for real-time display.

9. The system according to any one of claims 1 to 8, characterized in that: The system further includes: a portable box; the frame of the portable box has a thickness of 2.5 mm, is made of a magnesium-aluminum alloy, and is provided with a filling layer having a damping coefficient greater than or equal to 0.7; and a plurality of universal wheels are provided at the bottom of the portable box; The internal network unit, the external network unit and the first one-way optical shutter are arranged inside the portable box; The portable box is provided with a temperature control system for controlling the temperature inside the portable box to be within the range of -20°C to 55°C; The portable box is provided with a power supply system, which is provided with a 220V AC input interface, a 48V DC input interface and a battery pack for providing power to the internal network unit, the external network unit and the temperature control system.

10. A method for transmitting UAV flight data, characterized in that: The method comprises: Using the intranet unit to collect the protocol data of the drone from the command station in real time, collecting the file data of the drone archived by the command station, performing protocol conversion on the protocol data to obtain UDP unicast data; Utilizing a first unidirectional optical switch to unidirectionally transmit the UDP unicast data and the file data to an external network unit; Utilizing the external network unit to transmit the file data and the UDP unicast data to a router; The router uses the AAA server to establish a VPN tunnel between the access concentrator and the network server; transmitting the file data and the UDP unicast data to the network server through the VPN tunnel; The command center receives the file data and the UDP unicast data from the network server, restores the UDP unicast data to obtain the protocol data, performs command control on the drone based on the protocol data, and stores the file data in the enterprise intranet.

Images