Method and related equipment for securely transmitting multiple signal sources across a network

By synthesizing composite images in a low-security network and performing segmentation encoding in a high-security network, the problem of poor signal transmission resource expansion capability in multi-network fusion systems is solved, safe and efficient multi-channel signal source transmission is achieved, and system stability and security are improved.

CN120434062BActive Publication Date: 2025-09-12SHENZHEN TENDZONE INTELLIGENT TECH
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202510940699.8
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2025-07-09
Publication Date
2025-09-12
Estimated Expiration
2045-07-09

AI Technical Summary

Technical Problem

In a multi-network converged command system, existing technologies make it difficult to securely transmit multiple signal sources between high-security and low-security networks, resulting in poor resource expansion capabilities, high hardware costs, and display anomalies such as ghosting, black screens, or image interruptions during signal switching.

Method used

In a low-security network, multiple signal sources are combined into a composite image and transmitted to a high-security network via a unidirectional transmission link. The high-security network performs segmentation and encoding based on the received layout information and allows output after receiving the display completion signal. A display-ready double confirmation mechanism and a boundary buffer are introduced to ensure signal stability.

Benefits of technology

It realizes the secure transmission of multiple signal sources between physically isolated networks, reduces the number of hardware devices, reduces costs and deployment complexity, improves system stability and security, and avoids display anomalies during signal switching.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN120434062B_ABST
    Figure CN120434062B_ABST
Patent Text Reader

Abstract

The present invention discloses a method and related equipment for securely transmitting multiple signal sources across a network, wherein the method includes using a decoder to synthesize multiple signal sources into a composite picture according to a preset multi-picture layout; transmitting the composite picture to an encoder of a high-security level network via a unidirectional transmission link; sending picture layout information and identification of each signal source from a low-security level network to a high-security level network; the encoder of the high-security level network divides the composite picture and independently encodes each divided picture to generate a corresponding output code stream, but does not immediately provide services; when the low-security level network detects that each signal source has completed normal display in the corresponding area, it sends a display completion signaling via a control link; after receiving the display completion signaling, the high-security level network allows the corresponding output code stream to provide access services. The technical solution of the present invention aims to solve the technical problem of poor resource expansion capabilities corresponding to a single signal source in a single channel.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the field of network transmission technology, and in particular to a method for securely transmitting multiple signal sources across a network and related equipment. Background Art

[0002] In a multi-network converged command system, to ensure the physical isolation of networks with different confidentiality levels, one-way audio and video links are usually used for cross-network signal transmission. The signal source of the low-confidentiality network is output to the encoder of the high-confidentiality network through a decoder, and physically transmitted through links such as one-way optical fibers. Although this method meets the basic requirements of information security, since each signal source requires a set of decoders, encoders, and transmission links, the system is difficult to expand when faced with a large number of signal sources and the hardware cost is high. More importantly, since the high-density network cannot interact with the low-density network for control, when switching or loading a new signal source, it is difficult for the encoder to determine whether the picture has been completely refreshed in time, and it is very easy to have display anomalies such as ghosting, black screen, or screen flickering, affecting system stability and user experience. Summary of the Invention

[0003] The purpose of the embodiments of the present application is to propose a method and related equipment for securely transmitting multiple signal sources across a network, so as to solve the technical problem of poor resource expansion capability when transmitting one-way from a low-security level network to a high-security level network, where a single channel corresponds to a single signal source.

[0004] In order to solve the above technical problems, the present application provides a method for securely transmitting multiple signal sources across a network, which adopts the following technical solutions:

[0005] A method for securely transmitting multiple signal sources across a network, comprising the following steps:

[0006] In a low-security network, a decoder is used to combine multiple signal sources into a composite picture according to a preset multi-picture layout;

[0007] Transmitting the composite image to an encoder of a high-security network via a unidirectional transmission link;

[0008] The low-security network sends screen layout information and identification of each signal source to the high-security network via a one-way control link;

[0009] The encoder of the high-security network divides the composite image according to the received layout information and independently encodes each divided image to generate the corresponding output stream, but does not provide services immediately;

[0010] When the low-security network detects that each signal source has completed normal display in the corresponding area, it sends a display completion signaling through the control link;

[0011] After receiving the display completion signaling, the high-security network allows the corresponding output code stream to provide access services, realizing the secure transmission of multiple signal sources through a single channel.

[0012] In a possible implementation, the multi-screen layout includes a four-split screen or a nine-split screen, and the low-security level network controls each signal source to be displayed in a designated screen area, and loads the screens in sequence according to the layout order.

[0013] In one possible implementation, the step of sending a display completion signaling via a control link after the low security level network detects that each signal source has completed normal display in the corresponding area specifically includes:

[0014] After the signal source is loaded initially, the low-security network sends the first-stage pre-confirmation signaling to the high-security network.

[0015] After the high-security network receives the pre-confirmation signaling, the corresponding encoder enters the cache state and temporarily suspends providing output services;

[0016] The low-security level network continues to monitor the complete display status of each signal source within the layout area;

[0017] After confirming that all signal sources are stable and without abnormalities in their respective areas, the final confirmation signaling of the second phase is sent.

[0018] In one possible implementation, the encoder of the high-security network performs image continuity detection on at least three frames of the service picture before receiving the final confirmation signaling, and starts the encoding output service of the signal source only when three consecutive frames are stable and valid.

[0019] In one possible implementation, after receiving the composite image, the encoder of the high-security network configures an independent boundary buffer for each segmented area to temporarily store the boundary image frame when the signal source switches, thereby preventing ghosting or black screen caused by image switching.

[0020] In a possible implementation, after a new signal source switches in, the boundary buffer needs to complete buffering of no less than three frames of images, and the image content must be continuously valid before the corresponding picture can be included in the encoding process and access services can be provided.

[0021] In order to solve the above technical problems, the present application also provides a system for securely transmitting multiple signal sources across a network, which adopts the following technical solutions:

[0022] A system for securely transmitting multiple signal sources across a network, comprising:

[0023] A synthesis module is used to synthesize multiple signal sources into a composite picture frame according to a preset multi-picture layout using a decoder in a low-security network;

[0024] A transmission module, configured to transmit the composite image to an encoder of a high-security network via a unidirectional transmission link;

[0025] A sending module is used to send screen layout information and identification of each signal source from a low-security level network to a high-security level network via a unidirectional control link;

[0026] A segmentation module is used to segment the composite image according to the received layout information in the encoder of the high-security network, and independently encode each segmented image to generate a corresponding output stream, but does not provide services immediately;

[0027] The completion module is used to send a display completion signaling through the control link after the low security level network detects that each signal source has completed normal display in the corresponding area;

[0028] The access module is used to allow the corresponding output code stream to provide access services after receiving the display completion signaling in a high-security network, thereby realizing the secure transmission of multiple signal sources through a single channel.

[0029] In order to solve the above technical problems, the embodiment of the present application further provides a computer device, which adopts the following technical solution:

[0030] A computer device includes a memory and a processor, wherein the memory stores computer-readable instructions, and when the processor executes the computer-readable instructions, the steps of the method for securely transmitting multiple signal sources across a network are implemented.

[0031] In order to solve the above technical problems, the embodiment of the present application further provides a computer-readable storage medium, which adopts the following technical solution:

[0032] A computer-readable storage medium stores computer-readable instructions, which, when executed by a processor, implement the steps of the method for securely transmitting multiple signal sources across a network.

[0033] Compared with the prior art, the embodiments of the present application have the following beneficial effects:

[0034] This application discloses a method for securely transmitting multiple signal sources across a network. This method combines multiple signal sources into a single composite frame on a low-security network and transmits it via a single channel to a high-security network. The frame is then segmented and independently encoded on the high-security network, allowing output only after receiving a display completion signal. This method achieves the goal of securely transmitting multiple signal sources across physically isolated, cross-security networks. This method significantly reduces the number of decoders, encoders, and one-way transmission links required, effectively lowering system hardware costs and deployment complexity. Furthermore, signaling control ensures that the signal switching process is perceptible and manageable, improving system stability and security. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] In order to more clearly illustrate the solutions in this application, a brief introduction will be given below to the drawings required for use in the description of the embodiments of this application. Obviously, the drawings described below are some embodiments of this application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0036] Figure 1 is a flow chart of an embodiment of a method for securely transmitting multiple signal sources across a network according to the present application;

[0037] Figure 2 This is a structural diagram of an embodiment of a system for securely transmitting multiple signal sources across a network according to the present application;

[0038] Figure 3 It is a structural diagram of an embodiment of a computer device according to the present application. DETAILED DESCRIPTION

[0039] In order to make the purpose, technical solutions and advantages of this application more clearly understood, the present application is further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain this application and are not intended to limit this application.

[0040] refer to Figure 1 , shows a flow chart of an embodiment of a method for securely transmitting multiple signal sources across a network according to the present application. The method for securely transmitting multiple signal sources across a network comprises the following steps:

[0041] Step S101: In a low security level network, a decoder is used to synthesize multiple signal sources into a composite picture according to a preset multi-picture layout.

[0042] In this embodiment, the electronic device on which the method for securely transmitting multiple signal sources across a network is running can send or receive data via a wired connection or a wireless connection. It should be noted that the above-mentioned wireless connection method may include but is not limited to 3G / 4G / 5G connection, WiFi connection, Bluetooth connection, WiMAX connection, Zigbee connection, UWB (ultrawideband) connection, and other wireless connection methods currently known or to be developed in the future.

[0043] In this embodiment, in actual multi-network command systems, low-density networks often connect to multiple real-time signal sources from diverse sources, such as city surveillance cameras, emergency broadcast footage, and ground troop imagery. Traditional approaches require establishing separate transmission links for each signal source, rapidly increasing the number of devices. This step uses a low-density network decoder to decode multiple signal sources and then splice them together using a 2×2, 3×3, or other pattern to form a composite frame. This significantly increases the amount of information carried by a single frame and lays the foundation for channel multiplexing. This synthesis operation is typically performed by a multi-image management chip (such as a frame combiner) with low-latency output capabilities.

[0044] Step S102: transmitting the composite image to an encoder of a high-security network via a unidirectional transmission link.

[0045] In this embodiment, since the high-density network is located in a confidential area, a physical unidirectional link must be used for transmission, such as a unidirectional fiber optic transmission device (data diode). In this step, only the spliced ​​composite video frame is transmitted to the high-density network in the original frame format, without carrying any control instructions and involving any return operations, thereby ensuring that the system meets the network security requirement of "one-way irreversibility from low density to high density". During this process, the high-density side cannot actively initiate image confirmation and can only passively receive image data.

[0046] Step S103: The low security level network sends the screen layout information and the identifiers of each signal source to the high security level network via a unidirectional control link.

[0047] In this embodiment, because the image stitching order and signal source position may change dynamically, the high-density encoder must rely on additional control information to correctly understand the structure of the composite image. To this end, if security policies permit, an independent unidirectional control link (such as a serial port with a signal isolation module) is deployed. Only JSON-formatted layout parameters (such as split-screen type and image coordinates) and signal source ID are sent from the low-density to the high-density, achieving structured, machine-parseable signaling. This mechanism is often used in "non-interactive synchronous control" scenarios and can be considered an image-based "metadata push."

[0048] In step S104, the encoder of the high security level network divides the composite picture according to the received layout information, and independently encodes each divided picture to generate a corresponding output stream, but does not immediately provide service.

[0049] In this embodiment, on the high-density side, after receiving a complete composite frame, the encoder accurately divides the frame into regions based on the layout information and independently encodes each segmented region using either the H.264 or H.265 encoder. During this process, the encoder "restores" the spliced ​​image into multiple logically independent output streams, providing an interface for subsequent system calls on demand. However, to prevent services from being pushed before the image is stabilized, these streams are not immediately output to the business system in this step, but instead enter a "waiting for ready" state.

[0050] Step S105: When the low security level network detects that each signal source has completed normal display in the corresponding area, it sends a display completion signaling via the control link.

[0051] In this embodiment, when stitching images, each signal source may experience signal loading delays, frame asynchrony, and black screen waiting. Without a confirmation mechanism, this can easily cause the high-density side to prematurely call up unfinished images. To address this, this method introduces a "dual confirmation mechanism for display readiness": the low-density side must detect display characteristics such as whether each sub-image is continuously refreshed, the image is not blank, and the brightness is stable. Only after all areas meet these requirements will a "display complete" signal be uniformly pushed through the control link. This mechanism ensures that all output images are "trusted and valid images" and prevents "image ghosting" from entering the high-density system.

[0052] Step S106: After receiving the display completion signaling, the high security level network allows the corresponding output code stream to provide access services, thereby achieving secure transmission of multiple signal sources through a single channel.

[0053] In this embodiment, after confirming that all images are fully displayed, the high-density network's multi-channel encoder officially marks the waiting stream as "accessible," making it available for access by various business systems. This ensures that multiple signals, while physically isolated and non-interactive, are securely and efficiently delivered to the target network via a single physical link. This not only effectively reduces the number of devices deployed, but also eliminates the risk of visual glitches caused by signal synchronization issues.

[0054] This application achieves the goal of securely transmitting multiple signal sources between physically isolated, cross-security networks by combining multiple signal sources into a single composite image on the low-security network side and transmitting it to the high-security network via a single channel. The image is then segmented and independently encoded on the high-security side, and output is allowed only after receiving a display completion signal. This not only significantly reduces the number of required decoders, encoders, and one-way transmission links, effectively lowering system hardware costs and deployment complexity, but also ensures that the signal switching process is perceptible and manageable through signaling control, thereby improving system stability and security.

[0055] In some optional implementations of this embodiment, the multi-screen layout includes a four-split screen or a nine-split screen, and the low-security level network controls each signal source to be displayed in a designated screen area, and loads the screens in sequence according to the layout order.

[0056] In this embodiment, in actual deployment, to ensure a balance between image resolution, processing complexity, and bandwidth resources, the system prioritizes 2×2 (four-split screen) or 3×3 (nine-split screen) as standard layouts for spliced ​​displays. These layouts offer excellent visibility and encoding compatibility, making them suitable for scenarios such as conventional combat command screens, centralized multi-site monitoring screens, and joint mission video aggregation. During system initialization or configuration, the system selects the current layout format through the user interface or a preset template. This layout information is embedded as metadata in control signaling and transmitted to the high-density network. To enable the high-density encoder to accurately restore the image position of each signal source, the low-density network controls the coordinate area of ​​each signal source in the composite image to be fixed and clear. For example, in a nine-split screen, signal source 1 is assigned to row 1, column 1 (top left corner), and signal source 5 is assigned to row 2, column 2 (center of the screen). These mappings are fully transmitted through control signaling. Control is provided by the decoding manager, which binds each signal source to a designated rendering buffer area based on the configuration, and uses multi-threaded or GPU rendering technology to ensure real-time performance. In real-world scenarios, image data from various signal sources may originate from different protocols or networks, resulting in varying loading speeds. If all of the data is loaded onto the screen at once, it can easily lead to overall delays or even a black screen due to a single channel being blocked. To address this, this method introduces a "loading mechanism based on layout order." This mechanism enables decoding and display of each signal source sequentially over a low-density network, following the layout order (e.g., left to right, top to bottom).

[0057] This application introduces standardized multi-screen layout modes such as four-split screen and nine-split screen, and stipulates that signal sources are loaded sequentially in their respective areas according to the layout order, thereby enhancing the system's scheduling order and processing predictability. This multi-screen layout solution not only fully utilizes the spatial resources of the composite screen, enabling a single channel to carry multiple signals, but also provides a clear regional mapping basis for image segmentation and subsequent processing on the high-density side, thereby improving the accuracy and automation of segmentation coding.

[0058] In some optional implementations of this embodiment, the step of sending a display completion signaling via a control link after the low security level network detects that each signal source has completed normal display in the corresponding area specifically includes:

[0059] After the signal source is loaded initially, the low-security network sends the first-stage pre-confirmation signaling to the high-security network.

[0060] After the high-security network receives the pre-confirmation signaling, the corresponding encoder enters the cache state and temporarily suspends providing output services;

[0061] The low-security level network continues to monitor the complete display status of each signal source within the layout area;

[0062] After confirming that all signal sources are stable and without abnormalities in their respective areas, the final confirmation signaling of the second phase is sent.

[0063] In this embodiment, in a multi-network isolation system, the inability to establish a backhaul link makes it difficult to directly determine whether the signal is truly "ready" from the high-density network. Therefore, after initially loading the signal source, the low-density network proactively sends a pre-confirmation signal to inform the high-density network that the signal source has begun loading, but may not be fully completed. This allows the high-density encoder to enter a cache preparation state, pre-allocating image buffer resources and pre-loading screen segmentation parameters in preparation for actual output. However, this also strictly controls external output to prevent the risk of image sticking, black screens, or incorrect images being accessed. During actual display, signal sources may experience anomalies such as decoding delays, packet loss, or temporary screen distortion. To ensure 100% usability of the on-screen image, the low-density network continuously checks the content stability of each split-screen area, using algorithms such as frame consistency comparison and brightness / contrast fluctuation monitoring. Only when the image content of all partitions is stable and correct for several consecutive frames is the batch of signal sources considered "fully ready." Once all images are deemed stable, the low-density network sends a final confirmation signal via the control link, acting as an authorization signal to trigger the high-density encoder to officially output the corresponding bitstream. The encoder then pushes the processed images from its cache to the backend access system, ensuring the frontend signal is both visible and accurate.

[0064] This application significantly improves the accuracy and security of cross-network signal scheduling by establishing a "two-stage display confirmation mechanism" and introducing a two-step control signaling process of pre-confirmation and final confirmation. The pre-confirmation stage allows the high-density side to prepare the encoding buffer in advance to avoid output bursts; the final confirmation ensures that the access service is activated only after each screen has been stably displayed, thereby preventing false triggering and misbroadcasting caused by loading delays or display anomalies. This is particularly critical in scenarios where there is a lack of backhaul capabilities, improving system reliability.

[0065] In some optional implementations of this embodiment, the encoder of the high-security network performs image continuity detection on no less than three frames of the service picture before receiving the final confirmation signaling, and only starts the encoding output service for the signal source when three consecutive frames of pictures are stable and valid.

[0066] In this embodiment, although the high-density encoder has completed screen segmentation and buffering preparation before the final confirmation signal is triggered, the signal source content cannot be immediately considered stable and reliable. Therefore, this method stipulates that before initiating external services, at least three consecutive frames of image validity must be checked. Validity criteria may include, but are not limited to: the pixel change rate between image frames is below a set threshold; there is no obvious image misalignment, frame loss, or mosaic artifacts; and color and edge consistency is maintained within a tolerance range.

[0067] This application enhances the system's ability to distinguish the difference between the "apparent completion of loading" and "actual stable display" of the signal source through the image continuity detection mechanism, adding a safety filtering barrier from the image content level, avoiding the ghosting, frame skipping or mosaic problems caused by false positive confirmation, and is especially suitable for scenarios with high reliability requirements.

[0068] In some optional implementations of this embodiment, after receiving the composite picture, the encoder of the high-security network configures an independent boundary buffer for each segmented area to temporarily store the boundary image frame when the signal source switches, thereby preventing ghosting or black screen caused by picture switching.

[0069] In this embodiment, because each segmented area may load or switch at different times, traditional encoding methods may cause image edge flickering, black borders, and misalignment due to insufficient buffering or uneven frame connection, thus affecting the overall visual quality of the final output. To this end, this method sets a separate boundary buffer for each segmented area to: temporarily store edge data in the image frame; perform buffer compensation and image transition before and after signal source switching; and ensure that the image content is continuous and uninterrupted at the edges of the segmented blocks.

[0070] This application configures an independent boundary buffer for each screen segment on the high-density encoder side, temporarily caching edge image frames when the signal source switches, effectively resolving image ghosting, black screens, or tearing caused by screen changes. This boundary buffer mechanism is particularly suitable for systems with high requirements for screen fusion, such as large-screen splicing and multi-screen linkage. It can significantly improve the smoothness of screen transitions and the user viewing experience, while avoiding subsequent problems such as misjudgment and misoperation caused by improper image seam processing.

[0071] In some optional implementations of this embodiment, after a new signal source switches in, the boundary buffer must complete buffering of no less than three frames of images, and the image content must be continuously valid before the corresponding picture can be included in the encoding process and access services can be provided.

[0072] This embodiment clarifies the buffer usage criteria and the threshold for inclusion in the encoding process: after a new signal source enters a split-screen area, the system must complete the buffering process for at least three frames. These three frames must be valid images with continuous content, no edge drift, and stable brightness and color. Only after the buffering is satisfied will the sub-area be allowed to enter formal encoding and provide access services to external systems. This mechanism can be considered a "micro-readiness confirmation" and is complementary to the aforementioned dual confirmation mechanism: the former provides system-level screen scheduling confirmation, while the latter provides regional-level switching quality assurance.

[0073] This application requires that at least three frames of valid image content be continuously buffered after a new signal source is switched in before it can be formally included in the encoding process. This "advance after image stabilization" mechanism helps to establish a buffer zone or transition period during the source switching process, which can not only alleviate the impact of sudden image changes on the codec, but also prevent the erroneous output of "half-frame" or "dirty frame" images. It is particularly practical and technologically advanced in multi-task signal scheduling scenarios with sudden and rapid switching.

[0074] The embodiments of the present application can acquire and process relevant data based on artificial intelligence technology. Artificial intelligence (AI) refers to the theories, methods, techniques, and application systems that use digital computers or machines controlled by digital computers to simulate, extend, and expand human intelligence, perceive the environment, acquire knowledge, and use that knowledge to achieve optimal results.

[0075] Fundamental AI technologies generally include sensors, dedicated AI chips, cloud computing, distributed storage, big data processing, operating / interaction systems, and mechatronics. AI software technologies primarily encompass computer vision, robotics, biometrics, speech processing, natural language processing, and machine learning / deep learning.

[0076] Those skilled in the art will appreciate that all or part of the processes in the above-described method embodiments can be implemented by instructing related hardware using computer-readable instructions. The computer-readable instructions can be stored in a computer-readable storage medium. When executed, the program can include the processes in the above-described method embodiments. The aforementioned storage medium can be a non-volatile storage medium such as a magnetic disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM).

[0077] It should be understood that although the steps in the flowcharts of the accompanying drawings are shown in sequence as indicated by the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some of the steps in the flowcharts of the accompanying drawings may include multiple sub-steps or multiple stages, and these sub-steps or stages are not necessarily executed at the same time, but can be executed at different times, and their execution order is not necessarily sequential, but can be executed in turn or alternately with other steps or at least a portion of the sub-steps or stages of other steps.

[0078] Further references Figure 2 , as a response to the above Figure 1 The present application provides an embodiment of a system for securely transmitting multiple signal sources across a network. Figure 1 Corresponding to the method embodiment shown, the system can be specifically applied to various electronic devices.

[0079] like Figure 2 As shown, the system 200 for securely transmitting multiple signal sources across a network according to this embodiment includes: a synthesis module 201, a transmission module 202, a sending module 203, a segmentation module 204, a completion module 205, and an access module 206.

[0080] The synthesis module 201 is used to synthesize multiple signal sources into a composite picture frame according to a preset multi-picture layout using a decoder in a low security level network;

[0081] A transmission module 202 is configured to transmit the composite image to an encoder of a high security level network via a unidirectional transmission link;

[0082] The sending module 203 is used to send the screen layout information and each signal source identifier from the low security level network to the high security level network via a unidirectional control link;

[0083] A segmentation module 204 is configured to segment the composite image according to the received layout information at an encoder in a high security level network, and to independently encode each segmented image to generate a corresponding output stream, but without providing immediate service;

[0084] The completion module 205 is configured to send a display completion signaling via a control link after the low security level network detects that each signal source has completed normal display in the corresponding area;

[0085] The access module 206 is used to allow the corresponding output code stream to provide access services after receiving the display completion signaling in the high-security network, so as to realize the secure transmission of multiple signal sources through a single channel.

[0086] The system for securely transmitting multiple signal sources across a network provided by an embodiment of the present invention can implement all the processes of the method for securely transmitting multiple signal sources across a network in the above-mentioned embodiment. The functions of each module in the device and the technical effects achieved are respectively the same as the functions and technical effects achieved by the method for securely transmitting multiple signal sources across a network in the above-mentioned embodiment, and will not be repeated here.

[0087] To solve the above technical problems, the present application also provides a computer device. Figure 3 , Figure 3 This is a basic structural block diagram of the computer device in this embodiment.

[0088] The computer device 3 includes a memory 31, a processor 32, and a network interface 33 that are interconnected through a system bus. It should be noted that the figure only shows a computer device 3 with components 31-33, but it should be understood that it is not required to implement all the components shown, and more or fewer components can be implemented instead. Among them, those skilled in the art can understand that the computer device here is a device that can automatically perform numerical calculations and / or information processing according to pre-set or stored instructions, and its hardware includes but is not limited to microprocessors, application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), digital signal processors (DSPs), embedded devices, etc.

[0089] The computer device may be a desktop computer, notebook computer, PDA, cloud server, etc. The computer device may interact with the user via a keyboard, mouse, remote control, touchpad, or voice control device.

[0090] The memory 31 includes at least one type of readable storage medium, including flash memory, a hard disk, a multimedia card, card-type memory (e.g., SD or DX memory), random access memory (RAM), static random access memory (SRAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), programmable read-only memory (PROM), magnetic storage, a magnetic disk, an optical disk, etc. In some embodiments, the memory 31 may be an internal storage unit of the computer device 3, such as the hard disk or internal memory of the computer device 3. In other embodiments, the memory 31 may also be an external storage device of the computer device 3, such as a plug-in hard disk, a Smart Media Card (SMC), a Secure Digital (SD) card, a flash memory card, etc. Of course, the memory 31 may also include both the internal storage unit of the computer device 3 and its external storage devices. In this embodiment, the memory 31 is generally used to store the operating system and various application software installed on the computer device 3, such as computer-readable instructions for a method for securely transmitting multiple signal sources across a network. In addition, the memory 31 can also be used to temporarily store various types of data that have been output or are to be output.

[0091] In some embodiments, the processor 32 may be a central processing unit (CPU), a controller, a microcontroller, a microprocessor, or other data processing chip. The processor 32 is typically used to control the overall operation of the computer device 3. In this embodiment, the processor 32 is used to execute computer-readable instructions or process data stored in the memory 31, such as computer-readable instructions for executing the method for securely transmitting multiple signal sources across a network.

[0092] The network interface 33 may include a wireless network interface or a wired network interface. The network interface 33 is generally used to establish a communication connection between the computer device 3 and other electronic devices.

[0093] The computer device provided in this application achieves the goal of securely transmitting multiple signal sources between physically isolated, cross-security networks by combining multiple signal sources into a single composite image on the low-security network side and transmitting it to the high-security network via a single channel. The image is then segmented and independently encoded on the high-security side, and output is permitted only after receiving a display completion signal. This not only significantly reduces the number of required decoders, encoders, and one-way transmission links, effectively lowering system hardware costs and deployment complexity, but also ensures that the signal switching process is perceptible and manageable through signaling control, thereby improving system stability and security.

[0094] The present application also provides another embodiment, namely, providing a computer-readable storage medium, which stores computer-readable instructions, and the computer-readable instructions can be executed by at least one processor to enable the at least one processor to perform the steps of the method for securely transmitting multiple signal sources across a network as described above.

[0095] The computer-readable storage medium provided in this application achieves the goal of securely transmitting multiple signal sources between physically isolated, cross-security networks by combining multiple signal sources into a single composite image on the low-security network side and transmitting it to the high-security network via a single channel. The image is then segmented and independently encoded on the high-security side, and output is permitted only after receiving a display completion signal. This significantly reduces the number of required decoders, encoders, and one-way transmission links, effectively lowering system hardware costs and deployment complexity. Furthermore, signaling control ensures that the signal switching process is perceptible and manageable, improving system stability and security.

[0096] Through the description of the above embodiments, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus the necessary general hardware platform. Of course, they can also be implemented by hardware, but in many cases the former is a better embodiment. Based on this understanding, the technical solution of this application, or the part that contributes to the existing technology, can be embodied in the form of a software product. This computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), and includes a number of instructions for enabling a terminal device (which can be a mobile phone, computer, server, air conditioner, or network device, etc.) to execute the methods described in each embodiment of this application.

[0097] The above are only preferred embodiments of the present application and are not intended to limit the present application. Any modifications, equivalent replacements, and improvements made within the spirit and principles of the present application should be included in the scope of protection of the present application.

Claims

1. A method for securely transmitting multiple signal sources across a network, characterized in that: The steps include: In a low-security network, a decoder is used to combine multiple signal sources into a composite picture according to a preset multi-picture layout; Transmitting the composite image to an encoder of a high-security network via a unidirectional transmission link; The low-security network sends screen layout information and identification of each signal source to the high-security network via a one-way control link; The encoder of the high-security network divides the composite image according to the received layout information and independently encodes each divided image to generate the corresponding output stream, but does not provide services immediately; When the low-security network detects that each signal source has completed normal display in the corresponding area, it sends a display completion signaling through the control link; After receiving the display completion signaling, the high-security network allows the corresponding output code stream to provide access services, realizing the secure transmission of multiple signal sources through a single channel.

2. The method for securely transmitting multiple signal sources across a network according to claim 1, characterized in that: The multi-screen layout includes a four-split screen or a nine-split screen. The low-security level network controls each signal source to be displayed in a designated screen area, and loads the screens in sequence according to the layout order.

3. The method for securely transmitting multiple signal sources across a network according to claim 1, characterized in that: The step of sending a display completion signaling via a control link after the low security level network detects that each signal source has completed normal display in the corresponding area specifically includes: After the signal source is loaded initially, the low-security network sends the first-stage pre-confirmation signaling to the high-security network. After the high-security network receives the pre-confirmation signaling, the corresponding encoder enters the cache state and temporarily suspends providing output services; The low-security level network continues to monitor the complete display status of each signal source within the layout area; After confirming that all signal sources are stable and without abnormalities in their respective areas, the final confirmation signaling of the second phase is sent.

4. The method for securely transmitting multiple signal sources across a network according to claim 3, characterized in that: Before receiving the final confirmation signaling, the encoder of the high-security network will perform image continuity detection on no less than three frames of the service picture, and will only start the encoding output service of the signal source when three consecutive frames of pictures are stable and valid.

5. The method for securely transmitting multiple signal sources across a network according to claim 1, characterized in that: After receiving the composite image, the encoder of the high-security network configures an independent boundary buffer for each segmented area to temporarily store the boundary image frame when the signal source switches, preventing ghosting or black screen caused by screen switching.

6. The method for securely transmitting multiple signal sources across a network according to claim 5, characterized in that: After a new signal source switches in, the boundary buffer must complete buffering of no less than three frames of images, and the image content must be continuously valid before the corresponding picture can be included in the encoding process and access services can be provided.

7. A system for securely transmitting multiple signal sources across a network, characterized in that: include: A synthesis module is used to synthesize multiple signal sources into a composite picture frame according to a preset multi-picture layout using a decoder in a low-security network; A transmission module, configured to transmit the composite image to an encoder of a high-security network via a unidirectional transmission link; A sending module is used to send screen layout information and identification of each signal source from a low-security level network to a high-security level network via a unidirectional control link; A segmentation module is used to segment the composite image according to the received layout information in the encoder of the high-security network, and independently encode each segmented image to generate a corresponding output stream, but does not provide services immediately; The completion module is used to send a display completion signaling through the control link after the low security level network detects that each signal source has completed normal display in the corresponding area; The access module is used to allow the corresponding output code stream to provide access services after receiving the display completion signaling in a high-security network, thereby realizing the secure transmission of multiple signal sources through a single channel.

8. A computer device, characterized in that: The method comprises a memory and a processor, wherein the memory stores computer-readable instructions, and when the processor executes the computer-readable instructions, the method realizes the steps of the method for securely transmitting multiple signal sources across a network according to any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that The computer-readable storage medium stores computer-readable instructions, which, when executed by a processor, implement the steps of the method for securely transmitting multiple signal sources across a network according to any one of claims 1 to 6.

Citation Information

Patent Citations

  • Network security protection method and system

    CN117879970A

  • System and method for digitally fingerprinting phishing actors

    US20210160280A1