Controllable one-way non-contact protective data transmission method and system

Abstract

The invention relates to the technical field of data transmission, and particularly provides a controllable one-way non-contact protective data transmission method and system, and the method comprises the following steps: compressing to-be-transmitted original digital data through a streaming data compression algorithm, and encrypting the compressed to-be-transmitted original digital data through a symmetric encryption algorithm to generate encrypted data; a two-dimensional image is generated from the encrypted data through a two-dimensional code encoding algorithm with an error correction function, and the two-dimensional image is sent to a receiving end by a display panel; capturing the optical signal through a camera at a receiving end, and generating a digital image; and performing two-dimensional code identification and decoding on the digital image, correcting the identified original data, and sequentially decrypting the original data through a symmetric decryption algorithm and decompressing the original data through a streaming data decompression algorithm to obtain reduced digital data. According to the controllable one-way non-contact protective data transmission method and system provided by the invention, complete physical isolation can be realized on the premise of meeting data exchange, real one-way transmission is realized, and the equipment cost is reduced.

Description

Technical Field

[0001] This invention relates to the field of data transmission technology, and in particular to a controllable, unidirectional, contactless, protective data transmission method and system. Background Technology

[0002] With the accelerated digitalization and networking of control systems, the demand for secure cross-domain data transmission has grown dramatically. To prevent the leakage of sensitive data in high-security networks or to avoid attacks from low-security networks penetrating the core network, the need for unidirectional transmission—allowing data only to flow from the source network to the target network and strictly prohibiting reverse transmission—is becoming increasingly urgent.

[0003] The relevant technologies primarily achieve unidirectional transmission through a combination of "bidirectional physical links + software / logic control," specifically falling into two categories: First, relying on traditional wired links such as Ethernet and fiber optics, data flow is limited through protocol layer configuration, software unidirectional forwarding, or hardware switching logic control. Second, high-performance security isolation equipment is used, employing a dual-module design of "forward transmission + reverse blocking" or a "store-and-forward" data transfer mode to simulate unidirectional functionality. However, both rely on bidirectional physical links or buses at the underlying level, making them vulnerable to electromagnetic interference, logic tampering, or side-channel attacks. "Soft control" cannot completely eliminate reverse risks. Furthermore, high-performance equipment suffers from high latency and large size, making it difficult to meet the needs of high-frequency, low-bandwidth, miniaturized, or mobile scenarios. Moreover, the complex hardware, high professional requirements for operation and maintenance, and high costs hinder large-scale deployment.

[0004] There are currently no effective solutions to the problems of difficulty in balancing physical isolation and data exchange, pseudo-unidirectional transmission, and high cost in related technologies. Summary of the Invention

[0005] The present invention provides a controllable unidirectional contactless protective data transmission method and system, which at least solves the problems of difficulty in balancing physical isolation and data exchange, pseudo-unidirectional transmission, and high cost in related technologies.

[0006] To achieve the above objectives, the present invention provides the following technical solution:

[0007] In a first aspect, the present invention provides a controllable unidirectional contactless protective data transmission method, comprising the following steps: compressing the original data to be transmitted using a streaming data compression algorithm, encrypting it using a symmetric encryption algorithm to generate encrypted data; converting the encrypted data into a two-dimensional image using a QR code encoding algorithm with error correction function, converting it into an optical signal by a display panel, and sending it to a receiving end; capturing the optical signal at the receiving end using a camera, converting the optical signal into a digital image, and preprocessing the digital image; performing QR code recognition and decoding on the preprocessed digital image, and using the error correction code embedded in the QR code to correct the recognized original data to obtain encrypted data at the receiving end; and sequentially decrypting the encrypted data at the receiving end using a symmetric decryption algorithm and decompressing it using a streaming data decompression algorithm to obtain restored data.

[0008] Preferably, before compressing the raw data to be transmitted using a streaming data compression algorithm, the method includes the following steps: obtaining the raw data to be transmitted from the application or service of the network where the sending end is located; and converting the raw data into a byte sequence using information exchange standard codes.

[0009] Preferably, the original data to be transmitted is compressed using a streaming data compression algorithm and then encrypted using a symmetric encryption algorithm to generate encrypted data. This includes the following steps: compressing the byte sequence obtained by converting the original data to be transmitted using a streaming data compression algorithm to obtain compressed data; padding the length of the compressed data to an integer multiple of the block length of the symmetric encryption algorithm; and encrypting the padded compressed data using a symmetric encryption algorithm to generate encrypted data.

[0010] Preferably, generating a two-dimensional image from the encrypted data using a QR code encoding algorithm with error correction functionality includes the following steps: encoding the encrypted data in binary form into a base-64 encoding string; splitting the binary data bitstream obtained by converting the encoding string into multiple equal-length data blocks according to the QR code encoding algorithm standard; calculating a 32-bit error correction code for each data block using the Reed-Solomon error correction algorithm; and filling the concatenated data obtained by concatenating each data block with the corresponding error correction code into the corresponding pixel module in the pixel matrix according to the path specified by the QR code encoding, until all data is filled into the pixel matrix to obtain a two-dimensional image.

[0011] Preferably, after the light signal is captured by the camera at the receiving end and converted into a digital image, the digital image is preprocessed, including the following steps: capturing the light signal by the camera at the receiving end; wherein the capture frame rate of the camera is not lower than the refresh rate of the display panel; converting the light signal into a discrete electrical signal by the image sensor built into the camera; converting the discrete electrical signal into a digital image by the analog-to-digital converter module built into the camera; preprocessing the digital image to generate a digital image that conforms to the QR code decoding standard; wherein the preprocessing includes at least one of grayscale conversion, binarization, and perspective correction.

[0012] Preferably, the process of performing QR code recognition and decoding on the preprocessed digital image, and correcting the recognized original data using the error correction code embedded in the QR code to obtain encrypted data at the receiving end, includes the following steps: identifying each pixel module in the preprocessed digital image using a QR code decoding algorithm to obtain each binary data; concatenating the binary data to obtain an encoded data bitstream; wherein, the encoded data bitstream includes: original data blocks and error correction codes; converting the original data in the encoded data bitstream into a string to obtain an encoded string at the receiving end; performing error detection and correction on the encoded string at the receiving end based on the error correction codes in the encoded data bitstream to obtain corrected data; and restoring the corrected data to binary encrypted data at the receiving end using a base-64 decoding algorithm.

[0013] Preferably, the method of identifying each pixel module in the preprocessed digital image using a QR code decoding algorithm to obtain each binary data includes the following steps: identifying the positioning features of the preprocessed digital image using a QR code decoding algorithm, wherein the positioning features include: position detection patterns and timing patterns; reading each pixel module in the digital image line by line according to the set path in the QR code decoding algorithm; extracting the binary values ​​of each pixel module to obtain each binary data; wherein the binary values ​​in the pixel module are determined based on the pixel color in the pixel module.

[0014] Preferably, the encrypted data at the receiving end is decrypted sequentially using a symmetric decryption algorithm and a streaming data decompression algorithm to obtain restored data, comprising the following steps: decrypting the encrypted data at the receiving end using a symmetric decryption algorithm to obtain decrypted data; wherein the symmetric decryption algorithm matches the symmetric encryption algorithm, and the decryption key is the same as the encryption key; identifying and removing padding data in the decrypted data that corresponds to the padding standard used during encryption to obtain compressed data at the receiving end; decompressing the compressed data at the receiving end using a streaming data decompression algorithm to obtain a restored byte sequence; and converting the restored byte sequence to obtain restored data.

[0015] Preferably, after obtaining the restored data, the method further includes the following steps: verifying the consistency of the restored data with the original data using a checksum; if the verification is successful, sending the restored data to the application module of the receiving end; if the verification fails, discarding the restored data or temporarily replacing it with locally cached historical valid data, and recording an error log.

[0016] In another aspect, the present invention provides a controllable unidirectional contactless protective data transmission system, comprising: a transmitting end processing module, used to compress the raw data to be transmitted using a streaming data compression algorithm, encrypt it using a symmetric encryption algorithm to generate encrypted data, and generate a two-dimensional image from the encrypted data using a QR code encoding algorithm with error correction function; a data sending module, including a display panel; the display panel is connected to the transmitting end processing module, used to convert the two-dimensional image into an optical signal and send it to a receiving end; a data receiving module, including a camera; the camera is used to capture the optical signal and convert the optical signal into a digital image; a receiving end processing module, connected to the data receiving module, used to preprocess the digital image, perform QR code recognition and decoding on the preprocessed digital image, and use the error correction code embedded in the QR code to correct the recognized raw data to obtain the receiving end encrypted data; and a data restoration module, connected to the receiving end processing module, used to decrypt the receiving end encrypted data sequentially using a symmetric decryption algorithm and a streaming data compression algorithm to obtain restored data.

[0017] Compared with the prior art, the above-described technical solution of the present invention has the following advantages:

[0018] This invention provides a controllable, unidirectional, contactless, protective data transmission method and system. The original data to be transmitted is converted into a two-dimensional image. This image is then converted into an optical signal via a display panel and sent unidirectionally to a camera. Employing an optical display-visual acquisition channel, this method physically ensures that data can only flow from the sender to the receiver, completely avoiding electrical reverse communication paths and enabling physical cross-network unidirectional transmission. Furthermore, this invention utilizes an algorithm combining compression, encryption, and error-correcting QR code encoding to ensure the security, controllability, and integrity of data transmission, effectively preventing information leakage. Under low bandwidth conditions, increasing the camera's refresh rate can meet the real-time requirements of high-frequency, low-data scenarios. Moreover, this invention uses a display panel and camera as data transmission components, eliminating the need for dedicated network hardware. It can be customized for various scenarios, offering good economic efficiency and promotional value, and solving the problems of difficulty in balancing physical isolation and data exchange, pseudo-unidirectional transmission, and high cost in related technologies. Attached Figure Description

[0019] To more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the accompanying drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are merely some embodiments of the present invention, and those skilled in the art can obtain other embodiments based on these drawings without creative effort.

[0020] Figure 1 This is a flowchart illustrating a controllable unidirectional contactless protective data transmission method according to an embodiment of the present invention.

[0021] Figure 2 This is a schematic diagram of a controllable unidirectional contactless protective data transmission system according to an embodiment of the present invention.

[0022] Figure 3 This is a schematic diagram of the data processing flow of the transmitting end of a controllable unidirectional contactless protective data transmission system according to an embodiment of the present invention.

[0023] Figure 4 This is a schematic diagram of the receiving end data processing flow of a controllable unidirectional contactless protective data transmission system according to an embodiment of the present invention.

[0024] Figure 5 This is a schematic diagram of the structure of the electronic device created by this invention. Detailed Implementation

[0025] Embodiments of the present invention will now be described in more detail with reference to the accompanying drawings. While some embodiments of the present invention are shown in the drawings, it should be understood that the present invention can be implemented in various forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided to provide a more thorough and complete understanding of the present invention. It should be understood that the drawings and embodiments of the present invention are for illustrative purposes only and are not intended to limit the scope of protection of the present invention.

[0026] In related technologies, cross-network data transmission typically relies on wired communication methods, including Ethernet, Fibre Channel, and serial communication. While these methods are mature and reliable, their physical layers are all built upon a bidirectional electrical signal transmission mechanism using a conductive medium, inherently possessing bidirectional conduction characteristics. This structure dictates that regardless of how the communication direction is defined at the upper-layer protocol level, the underlying physical signals are always at risk of being reverse-engineered or logically bypassed.

[0027] Some related technologies employ high-performance security isolation devices to block reverse transmission. However, the underlying layer still relies on bidirectional physical links or buses.

[0028] Therefore, the unidirectional transmission method in related technologies has the following drawbacks:

[0029] (1) Limitations of Physical Conductivity and Cross-Network Risks: Cable-based transmission systems transmit electrical signals bidirectionally through conductors. In a single-network environment, this design enables efficient communication. However, when applied to cross-network transmission, this bidirectional conduction characteristic introduces serious security vulnerabilities. Attackers can interfere with the link in the reverse direction or steal data through electromagnetic interference, line coupling, or protocol injection, thereby compromising the security isolation of the network boundary. Even if a unidirectional control procedure is adopted in the logical layer (such as allowing only data packets in a specific direction to pass through), there is still a possibility of electrical signal backflow at the lower layer. Therefore, this type of "soft control" method cannot achieve truly secure unidirectional transmission at the physical layer.

[0030] (2) Cost and adaptability limitations: Mature high-performance security isolation devices, while fully functional, are designed to provide high-bandwidth data exchange for core network nodes. These devices integrate complex protocol analysis, content filtering, and intrusion detection modules, resulting in high costs and demanding maintenance requirements. This model is unsustainable in miniaturized or budget-friendly scenarios, significantly limiting the wider application of security isolation technology. It also falls short in terms of cost and applicability in miniaturized secure transmission scenarios.

[0031] (3) The implementation dilemma and pseudo-unidirectionality of unidirectional transmission: It relies on bidirectional link technology for software simulation to realize information exchange between networks and support low bandwidth or high frequency data synchronization. However, the physical underlying channel of the software-defined "unidirectional" or "semi-unidirectional" link is bidirectional, and there is still a risk of being attacked or bypassed. It is impossible to achieve complete and irreversible isolation at the physical level. Once an attacker uses underlying driver vulnerabilities or hardware loop interference, they may break through the logic restrictions to achieve data backflow or control command injection, thereby causing potential security risks.

[0032] In summary, the technical approach represented by physical conduction, when addressing the widespread demand for miniaturized, low-cost, and highly secure isolated transmission, reveals the core contradictions of "incomplete isolation, high cost, and pseudo-unidirectionality."

[0033] In order to achieve complete physical isolation and true one-way transmission while satisfying data exchange requirements, and to reduce equipment costs, the embodiments of this invention provide a controllable one-way contactless protective data transmission method and system.

[0034] Among them, such as Figure 1 As shown, the embodiment of the present invention provides a controllable unidirectional contactless protective data transmission method, including the following steps S1 to S5.

[0035] Step S1: The original data to be transmitted is compressed using a streaming data compression algorithm and then encrypted using a symmetric encryption algorithm to generate encrypted data.

[0036] Step S2: The encrypted data is converted into a two-dimensional image by a QR code encoding algorithm with error correction function, and then sent to the receiving end by the display panel as an optical signal.

[0037] Step S3: At the receiving end, the light signal is captured by the camera and converted into a digital image, and then the digital image is preprocessed.

[0038] Step S4: Perform QR code recognition and decoding on the preprocessed digital image, and use the error correction code embedded in the QR code to correct the recognized original data to obtain encrypted data at the receiving end.

[0039] Step S5: The encrypted data received is decrypted by a symmetric decryption algorithm and decompressed by a streaming data compression algorithm to obtain the restored data.

[0040] Specifically, the raw data to be transmitted typically originates from IoT terminal devices (such as sensor devices, industrial control equipment), computers and terminal storage systems (local storage media, servers), or databases. The raw data type can be plain text data, numerical data, binary data, or multimedia data, etc.

[0041] Streaming data compression algorithms are algorithms capable of dynamically and segment-wise compressing continuously generated data streams (such as real-time sensor data, audio streams, etc.). The streaming data compression algorithm in this invention analyzes the redundancy of adjacent data in the data stream (such as repeated bytes, numerical variation patterns, etc.), dynamically generates encoding rules (such as replacing frequently occurring long data blocks with short codes, recording numerical differences rather than complete values), and performs segment-wise encoding conversion on the data, reducing the total number of bytes while preserving the original information, thus achieving compression.

[0042] The streaming data compression algorithm in the embodiments of this invention can be the Deflate algorithm, the LZ77 algorithm (Lempel-Ziv 1977 compression algorithm), the LZ78 algorithm (Lempel-Ziv 1978 compression algorithm), the LZO algorithm (Lempel-Ziv-Oberhumer algorithm), the Snappy algorithm, etc.

[0043] Furthermore, the preferred streaming data compression algorithm in this embodiment of the invention is the Deflate algorithm, which can be used across platforms without additional adaptation. By combining LZ77 with Huffman coding, the transmission volume of common data such as text, logs, and sensor data can be effectively reduced to lower bandwidth consumption, while avoiding high computational overhead. It also supports streaming processing that compresses data while receiving it, with controllable memory usage, low latency, and seamless integration with subsequent encryption, encoding, and other transmission stages, meeting the needs of real-time data transmission.

[0044] Symmetric encryption algorithms are encryption techniques that use the same secret key for both encryption and decryption. During encryption, the key is used to convert plaintext (such as compressed original data) into unordered ciphertext. During decryption, the same key is used to restore the ciphertext to plaintext. Examples include: AES (Advanced Encryption Standard), DES (Data Encryption Standard), 3DES (Triple Data Encryption Standard), SM4 (SM4 Block Cipher Algorithm), Blowfish algorithm, etc.

[0045] Step S1, provided in the embodiments of this invention, compresses the original data to be transmitted using a streaming data compression algorithm and then encrypts it using a symmetric encryption algorithm to generate encrypted data. This is a core prerequisite for the optical signal-QR code transmission link. Compression can significantly reduce the data volume, avoiding the generation of QR codes that are too dense and difficult to recognize due to excessive data volume. At the same time, it reduces the transmission time of the optical signal and the computing power burden of camera capture and decoding, adapting to the limited data carrying capacity of a single frame of QR code. Encryption transforms the compressed data into unordered ciphertext, preventing the original information from being leaked after the optical signal or captured QR code image is intercepted. Furthermore, the "processing while transmitting" of streaming compression can match the real-time generation characteristics of the original streaming data and the rhythm of continuous QR code generation. The high-speed characteristics of symmetric encryption do not affect the link efficiency, ultimately providing a guarantee for decompression and data restoration. This supports efficient, secure, and reliable transmission throughout the entire process in terms of efficiency, security, and link adaptability.

[0046] In step S2, the QR code encoding algorithm with error correction function refers to an algorithm that, when encoding data into a QR code image, embeds redundant error correction codes so that even if some areas of the QR code are contaminated, damaged, or blurred, the complete data can still be restored through the error correction codes. The core is to improve the QR code's anti-interference ability in physical transmission (such as optical signal attenuation and image noise).

[0047] QR code encoding algorithms with error correction capabilities include: QR code (Quick Response Code), Data Matrix, Aztec Code, PDF417 (Portable Data File 417), etc. In this embodiment of the invention, the preferred QR code encoding algorithm with error correction capability is QR code. This algorithm can adapt to the interference levels of different transmission environments, supports multiple data types such as text and binary, has a fast decoding speed, and is natively supported by mainstream devices worldwide (mobile phones, cameras, barcode scanners), exhibiting extremely strong compatibility and high compatibility with display panel output, camera capture, and decoding correction processes.

[0048] The process of generating a two-dimensional image from encrypted data using a QR code encoding algorithm with error correction capabilities includes: first, encoding and converting the encrypted data, and dividing it into data blocks according to QR code encoding rules; then, calculating and embedding redundant error correction codes according to a preset error correction level, and combining them with the data blocks to form complete encoded information; next, distributing the encoded information into a two-dimensional grid according to the matrix structure of the QR code, and representing the encoded information with black and white pixels, ultimately generating a QR code image containing encrypted data and error correction codes, ensuring that even if the image is damaged, the encrypted data can be restored through the error correction codes.

[0049] Display panels include liquid crystal display panels, organic light-emitting display panels, LED (Light-Emitting Diode) display panels, and e-ink screens for special applications.

[0050] This invention utilizes a display panel as a carrier of optical signals, stably displaying QR code images and converting them into continuous optical signals that can be captured by a camera, thus achieving the conversion from "physical image to optical signal." Furthermore, the display panel exhibits strong adaptability—small-sized panels (such as mobile phone screens or built-in LCD modules) can meet the needs of short-distance transmission between portable devices, while large-sized industrial-grade panels can adapt to long-distance, high-brightness environments for optical signal transmission. It can also dynamically refresh the QR code image according to the data transmission rhythm, highly matching the encrypted data output and camera capture process, ensuring the stability and continuity of optical signal transmission. This makes it the core hardware support connecting "QR code encoding" and "optical signal reception."

[0051] In step S2 provided by the present invention, the error correction code embedded in the QR code provides a basis for subsequent decoding correction and can resist interference such as image pollution and blurring during transmission; the display panel converts the QR code image into a stable light signal, which is compatible with the hardware characteristics captured by the camera. At the same time, the dynamically refreshed image can match the streaming transmission rhythm of encrypted data, providing a reliable carrier for the physical transmission of data from the encrypted state to the receiving end in the whole link, ensuring the continuity of transmission and anti-interference capability.

[0052] In step S3, the receiving end is located in the target network and is responsible for parsing, decrypting and reconstructing the image signal.

[0053] The camera is located at the receiving end, forming a contactless transmission channel with the display panel at the transmitting end. It transmits signals through a spatial optical path and has natural unidirectionality and electromagnetic isolation.

[0054] Cameras are equipped with light-sensing elements, such as CMOS (Complementary Metal-Oxide-Semiconductor) and CCD (Charge-Coupled Device), which can accurately capture the light signals emitted by the display panel (the black and white pixels of the QR code correspond to different light intensities), and can adapt to digital images with different distances and dynamic refresh rates through lens focusing and frame rate adjustment.

[0055] The optimization processing of digital images captured by the camera mainly includes: image cropping (removing irrelevant edge areas and focusing on the QR code subject), grayscale conversion (converting color images to black and white grayscale to simplify data volume), noise reduction (eliminating image noise, such as speckled pixels caused by light interference, through Gaussian filtering, median filtering, etc.), binarization (converting grayscale images to pure black and white binary images, enhancing the contrast of black and white pixels in the QR code, and eliminating blurred transition areas), and tilt correction (adjusting the image angle to horizontal by recognizing the QR code positioning pattern to solve the distortion caused by shooting tilt). This can effectively reduce interference from changes in light, shooting angle deviation, image noise, etc., providing a clear and standardized digital image foundation for QR code decoding.

[0056] In step S4, QR code recognition and decoding of the preprocessed digital image refers to locating the QR code area in the image through an algorithm, extracting the encoded information (0 / 1 sequence corresponding to black and white pixels), and restoring it to the original encrypted data according to the QR code encoding rules (such as data block division and format information parsing). The core is to convert the QR code in image form into processable digital information.

[0057] The process of correcting the original data using embedded error correction codes in QR codes is as follows: During decoding, the algorithm first separates the data block and the corresponding error correction code from the extracted encoded information; it then uses a verification algorithm (such as Syndrome calculation) to detect whether there are errors in the data block (such as bit flipping caused by image blur); if the error is within the error correction level range (such as H level which can correct 30% of errors), the algorithm calculates and replaces the erroneous bits according to the correspondence between the error correction code and the error position, and finally restores the complete and correct encrypted data at the receiving end. This ensures that even if the preprocessed image still has slight damage or noise, the original encrypted information can be recovered through the error correction mechanism, providing reliable input for subsequent decryption steps.

[0058] Step S4 provided in the embodiments of the present invention extracts encoded information by recognizing QR code features, and then uses embedded error correction codes to correct errors caused by transmission interference (such as optical signal attenuation and image noise), ensuring that even if the image is slightly damaged or blurred, the complete encrypted data of the receiving end can be recovered, providing accurate and reliable input for decryption and decompression. It is a key link connecting optical signal reception and data restoration, ensuring the accurate conversion of data from physical transmission to digital information throughout the entire link.

[0059] The symmetric decryption algorithm in step S5 is the reverse process of the symmetric encryption algorithm. It uses the same decryption key as the encryption key used during encryption to restore the encrypted data at the receiving end to the compressed original data stream according to the corresponding encryption mode. The core is to remove the encryption protection and restore the readability of the compressed data.

[0060] Streaming data decompression algorithms are the reverse operation of streaming compression algorithms. By parsing the encoding rules in compressed data (such as LZ77 repeat sequence markers and Huffman coding tables), they gradually restore the original uncompressed data stream and eliminate redundant encoding introduced by the compression process.

[0061] The process of obtaining the restored data in step S5 is as follows: First, the encrypted data output in step S4 is decrypted using a symmetric decryption algorithm to obtain a compressed data stream; then, the compressed data stream is input into a streaming decompression algorithm, and the data is parsed in reverse according to the encoding logic during compression to gradually restore redundant data information; finally, after decompression, restored data that is completely consistent with the original data sent from the sending end is obtained, completing the full-link restoration from encrypted data to original data and realizing the complete transmission of data.

[0062] Step S5 provided in the embodiments of the present invention removes encryption protection through the decryption process and restores the availability of the compressed data stream; the decompression process eliminates redundant data encoding and completely restores the original information. Together, the two complete the final closed loop of the entire link, ensuring that after processing through compression, encryption, optical signal transmission, image recognition and other links, the data can be accurately and securely restored to the initial state, realizing the complete flow of original data → transmission processing → restored data, and ensuring the final effectiveness and data integrity of the entire transmission scheme.

[0063] The controllable unidirectional contactless protective data transmission method provided by the present invention converts the original data to be transmitted into a two-dimensional image. After the two-dimensional image is converted into an optical signal by the display panel, it is sent unidirectionally to the camera. It adopts an optical display-visual acquisition channel, which ensures from a physical principle that the data can only flow from the sending end to the receiving end, completely avoiding the electrical reverse communication path, and can realize physical cross-network unidirectional transmission.

[0064] Meanwhile, this invention also ensures the security, controllability, and integrity of data transmission through an algorithm that combines compression, encryption, and error-correcting QR code encoding, effectively preventing information leakage. Under low bandwidth conditions, increasing the camera's refresh rate can meet the real-time requirements of high-frequency, low-data scenarios.

[0065] Secondly, this invention uses a display panel and a camera as data transmission components, eliminating the need for dedicated network hardware. It can be customized to suit various scenarios, offering good economic efficiency and promotional value. It can solve the problems of difficulty in balancing physical isolation and data exchange, pseudo-unidirectional transmission, and high cost in related technologies.

[0066] Furthermore, prior to step S1 in the present invention embodiment, the method preferably includes the following steps: obtaining the original data to be transmitted from the application or service of the network where the sending end is located; and converting the original data into a byte sequence through the information exchange standard code.

[0067] The sending end is located in the source network and includes the data acquisition and visual encoding processes.

[0068] The raw data originates from specific applications or services in the network environment where the sending end is located (e.g., equipment temperature / pressure data output by sensor monitoring systems in industrial scenarios, text / image files to be sent by social software in consumer scenarios, business report data exported by ERP (Enterprise Resource Planning) systems in enterprise scenarios, etc.). The initial data to be transmitted is extracted from these applications or services through data interfaces (such as file reading paths). This data may be different types of digital information such as text, numerical values, images, and audio.

[0069] Because raw data types are diverse, direct transmission can easily lead to processing errors due to inconsistent formats. Therefore, it is necessary to follow common information exchange standard codes, such as ASCII (American Standard Code for Information Interchange), Unicode, and binary encoding, to uniformly convert different types of raw data into a sequence of bytes (i.e., a byte stream). This conversion removes the data's dependence on specific application formats, making it a standardized data form that computers can uniformly recognize and process, thus preparing it for subsequent steps S1 (streaming compression and symmetric encryption).

[0070] Further, step S1 of this embodiment preferably includes the following steps: compressing the byte sequence obtained by converting the original data to be transmitted using a streaming data compression algorithm to obtain compressed data; padding the length of the compressed data to an integer multiple of the block length of the symmetric encryption algorithm; and encrypting the padded compressed data using a symmetric encryption algorithm to generate encrypted data.

[0071] Specifically, in a preferred embodiment of the present invention, the original data is converted into a byte sequence using ASCII codes, thereby unifying the original data of different formats.

[0072] The preferred symmetric encryption algorithm in the embodiments of this invention is AES-128-CBC (Advanced Encryption Standard with a 128-bit key in Cipher Block Chaining mode). Its advantages are: AES-128 is an internationally recognized security algorithm with a sufficient key length to resist current mainstream attacks; CBC (Cipher Block Chaining) mode introduces an initialization vector (IV) to prevent identical plaintext from generating identical ciphertext, further enhancing its anti-cracking capabilities; the 128-bit key offers fast encryption and decryption speeds and low computational overhead, adapting to the real-time requirements of data transmission scenarios; and CBC mode has strong compatibility, natively supported by mainstream programming languages ​​and systems without requiring additional development or adaptation. It can also efficiently integrate with Deflate compression, QR code encoding, and other processes, ensuring a balance between data transmission security and efficiency.

[0073] The essence of encryption algorithms is to encrypt data in fixed-size blocks—for example, the standard block length of the AES algorithm is 128 bits (i.e., 16 bytes). During encryption, the input data is split into multiple 16-byte blocks, and the same encryption logic (such as round transformation, obfuscation diffusion, etc.) is performed on each block. Finally, all encrypted blocks are concatenated to obtain the result.

[0074] Therefore, before encrypting the data, the length of the compressed data needs to be padded to an integer multiple of the block length of the symmetric encryption algorithm to meet the data length requirements of the symmetric encryption algorithm.

[0075] Furthermore, in the embodiments of the present invention, the PKCS#7 (Public-Key Cryptography Standards Number 7) algorithm is preferably used to adapt to the requirements of the AES-128-CBC algorithm, and the compressed data is padded to an integer multiple of 16 bytes.

[0076] Furthermore, step S2, which generates a two-dimensional image from the encrypted data using a QR code encoding algorithm with error correction capabilities, includes steps S21 to S24.

[0077] Step S21: Encode the binary encrypted data into a base-64 encoding string.

[0078] Step S22: The binary data bit stream obtained by converting the encoded string is split into multiple data blocks of equal length according to the QR code encoding algorithm standard.

[0079] Step S23: Calculate the 32-bit error correction code for each data block using the Reed-Solomon error correction algorithm.

[0080] Step S24: The concatenated data obtained by concatenating each data block with the corresponding error correction code is filled into the corresponding pixel module in the pixel matrix according to the path specified by the QR code encoding, until all data is filled into the pixel matrix to obtain a two-dimensional image.

[0081] Specifically, the encrypted data obtained through the symmetric encryption algorithm is binary data. Before encoding the encrypted data into a QR code, it needs to be converted into an encoded string using base64 encoding to obtain a printable character stream that meets the input requirements of QR code encoding, thus avoiding data corruption during QR code encoding.

[0082] In the embodiments of this invention, the QR code encoding algorithm with error correction function is preferably a QR code (Quick Response Code). The QR code encoding incorporates the Reed-Solomon (RS) algorithm for generating error-correcting codes.

[0083] To meet the computational requirements of the Reed-Solomon algorithm, after obtaining the encoded string, each character of the encoded string needs to be converted into a corresponding 6-bit binary number. Then, all the 6-bit binary numbers are concatenated in sequence to form a continuous binary data bit stream. Following the QR code encoding algorithm standard, the stream is then split into multiple equal-length data blocks. This process converts unstructured text character sequences into standardized binary data units that meet the requirements of the Reed-Solomon algorithm, ensuring that the error correction algorithm can perform accurate calculations on data blocks of uniform specifications to generate error correction codes.

[0084] The Reed-Solomon error correction algorithm is used to calculate a 32-bit error correction code for each equal-length data block, adding a specific length of redundant check information to the original data block. This endows the QR code with error repair capabilities. When data errors occur in the QR code due to dirt, obstruction, etc., these error correction codes can be used to reverse-engineer the correct data, ensuring the accuracy of information decoding.

[0085] The concatenated data, obtained by concatenating each data block with its corresponding error correction code, is then used to determine the data's filling path in the pixel matrix based on the QR code version and encoding standard. This path typically starts from the bottom right corner of the matrix and spirals towards the top left corner in an alternating serpentine pattern, avoiding fixed functional areas such as positioning and timing patterns. This path is then sequentially mapped to pixel states and filled into the corresponding pixel modules in the pixel matrix. Each binary value corresponds to a pixel module in the matrix (0 typically corresponds to a white module, and 1 to a black module).

[0086] During the filling process, each pixel module is placed sequentially according to the path order to ensure that the order of the data bit stream and the physical position of the pixels in the matrix form a fixed mapping relationship. In the end, all the spliced ​​data is completely embedded into the pixel matrix to form a visual QR code image containing the original data and error correction information. The pixel distribution of this image fully conforms to the QR code decoding standard and can be recognized and restored by scanning devices according to the preset path.

[0087] Furthermore, step S3 in the present invention embodiment preferably includes steps S31 to S34.

[0088] Step S31: At the receiving end, capture the light signal through the camera; wherein the capture frame rate of the camera is not lower than the refresh rate of the display panel.

[0089] Step S32: The light signal is converted into a discrete electrical signal by the image sensor built into the camera.

[0090] Step S33: The discrete electrical signal is converted into a digital image by the analog-to-digital converter module built into the camera.

[0091] Step S34: Preprocess the digital image to generate a digital image that conforms to the QR code decoding standard; wherein, the preprocessing includes at least one of grayscale conversion, binarization, and perspective correction.

[0092] In step S31, the camera stably captures the light signal containing the QR code emitted by the display panel, and the capture frame rate matches the refresh rate of the display panel to avoid screen flickering, blurring or information loss caused by frame rate mismatch, and ensure that the light signal input of the QR code can be continuously and completely acquired.

[0093] Since optical signals cannot be directly processed by electronic systems, steps S32 and S33 convert the optical signal into a discrete electrical signal, realizing the physical quantity conversion from optical signal to electrical signal. Then, the discrete electrical signal is converted into a digital image, completing the conversion from analog signal to digital signal, providing a digital data form for subsequent QR code decoding.

[0094] In step S34, problems such as color interference, uneven brightness, and geometric distortion that may exist in the original digital image are addressed through grayscale conversion, binarization, perspective correction, and other processes to generate a digital image that conforms to the decoding standard. This ensures that the QR code boundaries in the image are clear, the contrast is appropriate, and the angles are standardized, thus meeting the standardization requirements of the decoding algorithm for the input image.

[0095] Furthermore, step S4 of the present invention preferably includes steps S41 to S45.

[0096] Step S41: Using a QR code decoding algorithm, identify each pixel module in the preprocessed digital image to obtain each binary data.

[0097] Step S42: Concatenate the individual binary data to obtain an encoded data bit stream; wherein, the encoded data bit stream includes: the original data block and the error correction code.

[0098] Step S43: Convert the original data in the encoded data bit stream into a string to obtain the encoded string at the receiving end.

[0099] Step S44: Based on the error correction codes in the encoded data bit stream, perform error detection and correction on the encoded string at the receiving end to obtain corrected data.

[0100] Step S45: The corrected data is restored to binary encrypted data at the receiving end by using a hexadecimal decoding algorithm.

[0101] Specifically, the pixel matrix of the preprocessed image is traversed by a QR code decoding algorithm, and the black and white state of each pixel module is identified and converted into corresponding binary data according to the specified path during encoding, thereby restoring the visualized pixel distribution to the original binary sequence.

[0102] The obtained discrete binary data is concatenated in sequence and reassembled into a continuous encoded data bit stream. The original data blocks and corresponding error correction codes contained therein are separated out, which can restore the complete structure of the data and provide complete encoded information for error correction and restoration.

[0103] The raw data portion is extracted from the encoded data bitstream and converted into a string form according to the binary-to-character mapping rules (such as the inverse process of Base64). This yields the received-end encoded string, which can convert the raw binary data into a readable text form, providing an operable text object for subsequent error detection and correction.

[0104] To utilize the error correction codes in the encoded data bitstream, the Reed-Solomon algorithm is used to verify the encoded string at the receiving end, detect and correct errors in data transmission (such as bit errors caused by pixel recognition deviations), eliminate errors introduced during transmission or recognition, and ensure data accuracy.

[0105] The corrected string is Base64 decoded to restore it to the binary form of the received encrypted data, thus recovering the original binary form of the encrypted data and providing a compliant binary input for decryption of symmetric encryption algorithms.

[0106] Furthermore, step S41 preferably includes the following steps: identifying the positioning features of the preprocessed digital image through a QR code decoding algorithm, wherein the positioning features include: position detection patterns and timing patterns; reading each pixel module in the digital image line by line according to the set path in the QR code decoding algorithm; extracting the binary values ​​of each pixel module to obtain each binary data; wherein the binary values ​​in the pixel module are determined based on the pixel color in the pixel module.

[0107] Specifically, the QR code decoding algorithm identifies the position detection pattern (nested square patterns at the three corners) and timing pattern (alternating black and white stripes running through the matrix) in the preprocessed digital image, thereby determining the physical boundary and size ratio of the QR code in the image, providing a spatial reference for the subsequent pixel reading module.

[0108] Based on the serpentine or spiral path preset by the QR code decoding algorithm, the pixel modules belonging to the data area in the digital image are traversed line by line in sequence (avoiding functional areas such as positioning and timing) to ensure that the reading order of the pixel modules is consistent with the filling order during encoding, thus ensuring the correct splicing logic of binary data.

[0109] Based on the color of the pixel module (black corresponds to 1, white corresponds to 0), each pixel module is converted into its corresponding binary value (0 or 1) to obtain discrete binary data. This transforms the visual features of the image into processable binary information, providing the basic unit for subsequent stitching of a complete data bit stream.

[0110] Furthermore, step S5 of the present invention preferably includes steps S51 to S54.

[0111] Step S51: Decrypt the encrypted data at the receiving end using a symmetric decryption algorithm to obtain decrypted data; wherein the symmetric decryption algorithm matches the symmetric encryption algorithm, and the decryption key is the same as the encryption key.

[0112] Step S52: Identify and remove padding data in the decrypted data that corresponds to the padding standard used during encryption, and obtain the compressed data at the receiving end.

[0113] Step S53: Decompress the compressed data at the receiving end using a streaming data decompression algorithm to obtain the restored byte sequence.

[0114] Step S54: The restored byte sequence is format-converted to obtain the restored digital data.

[0115] Specifically, a symmetric decryption algorithm (such as AES, SM4, etc.) matching the encryption key is used, and the same decryption key as the encryption key is input. The binary encrypted data at the receiving end is decrypted to obtain the decrypted data, and the binary data in the encrypted state is restored to the original data form before encryption (including padding information).

[0116] Based on the padding standard used during encryption (such as PKCS#7), identify the padding bytes used to complete the block length in the decrypted data (such as redundant bytes with specific values) and remove them to obtain clean compressed data at the receiving end. Eliminate redundant padding information introduced during the encryption process to ensure accurate compressed data is obtained.

[0117] The receiving end's compressed data is decompressed using a streaming data decompression algorithm corresponding to the encryption end (preferably a decompression algorithm that matches the Deflate used during compression), restoring the original byte sequence and converting the compressed compact data back into the original uncompressed byte sequence, thus restoring the original byte structure of the data.

[0118] Based on the format of the original data (such as the encoding format corresponding to text, image, audio, etc.), the restored byte sequence is converted into digital data that conforms to the original format specification (such as text strings, image pixel matrices, etc.), and the byte sequence is converted into a specific data form that is understandable to humans or can be processed by applications, thus completing the complete restoration of the data.

[0119] Furthermore, in this embodiment of the invention, after obtaining the restored digital data in step S5, the method further includes the following steps: verifying the consistency between the restored digital data and the original digital data using a check code; if the verification is successful, sending the restored digital data to the application module of the receiving end; if the verification fails, discarding the restored digital data or temporarily replacing it with locally cached historical valid data, and recording an error log.

[0120] Specifically, preset checksum algorithms, such as CRC (Cyclic Redundancy Check), MD5 (Message-Digest Algorithm 5), and SHA (Secure Hash Algorithm), are used to calculate a checksum for the restored digital data. This checksum is then compared with the checksum of the original digital data. When the checksums match, the restored digital data is transmitted to the receiving application module (such as the display interface or database storage module), ensuring the effective delivery of correct data. If the checksums do not match, the erroneous restored data is discarded, or historically valid similar data from the local cache is used as a temporary replacement. Error information (such as time and details of the checksum mismatch) is recorded in the log system to prevent erroneous data from entering the application process. This temporary replacement mechanism also reduces the impact of service interruptions and improves system fault tolerance and traceability.

[0121] This invention also provides a controllable unidirectional contactless protective data transmission system, applied to the controllable unidirectional contactless protective data transmission method described in the above embodiments. The system includes: a transmitting end processing module, a data transmitting module, a data receiving module, a receiving end processing module, and a data restoration module.

[0122] The transmitting end processing module is used to compress the raw digital data to be transmitted using a streaming data compression algorithm, encrypt it using a symmetric encryption algorithm to generate encrypted data, and generate a two-dimensional image from the encrypted data using a QR code encoding algorithm with error correction function.

[0123] The data transmission module includes a display panel; the display panel is connected to the transmitting end processing module and is used to convert the two-dimensional image into an optical signal and then send it to the receiving end.

[0124] The data receiving module includes a camera; the camera is used to capture light signals and convert the light signals into digital images.

[0125] The receiving end processing module, connected to the data receiving module, is used to preprocess the digital image, perform QR code recognition and decoding on the preprocessed digital image, and use the error correction code embedded in the QR code to correct the recognized original data to obtain the receiving end encrypted data.

[0126] The data restoration module, connected to the receiving end processing module, is used to decrypt the encrypted data from the receiving end sequentially using a symmetric decryption algorithm and a streaming data compression algorithm to obtain the restored digital data.

[0127] Among them, such as Figure 2As shown, both the transmitting end processing module and the data transmitting module are located in transmitting end network A. The transmitting end processing module includes data acquisition, data compression, data encryption, and optical encoding processes. The data transmitting module includes the optical signal output process.

[0128] The light signal is sent to the camera through a one-way contactless optical channel consisting of a display panel and a camera.

[0129] The data receiving module, receiver processing module, and data restoration module are all located in receiver network B. The data receiving module performs optical signal acquisition and image decoding. The data restoration module performs data decryption, data decompression, and data output.

[0130] The present invention provides a controllable unidirectional contactless protective data transmission system that converts the original data to be transmitted into a two-dimensional image. The two-dimensional image is then converted into an optical signal by a display panel and sent unidirectionally to a camera. The system employs an optical display-visual acquisition channel, which ensures, in principle, that data can only flow from the sending end to the receiving end, completely avoiding electrical reverse communication paths and enabling physical cross-network unidirectional transmission.

[0131] Meanwhile, this invention also ensures the security, controllability, and integrity of data transmission through an algorithm that combines compression, encryption, and error-correcting QR code encoding, effectively preventing information leakage. Under low bandwidth conditions, increasing the camera's refresh rate can meet the real-time requirements of high-frequency, low-data scenarios.

[0132] Secondly, this invention uses a display panel and a camera as data transmission components, eliminating the need for dedicated network hardware. It can be customized to suit various scenarios, offering good economic efficiency and promotional value. It can solve the problems of difficulty in balancing physical isolation and data exchange, pseudo-unidirectional transmission, and high cost in related technologies.

[0133] Furthermore, such as Figure 3 As shown, in the method provided by the embodiments of the present invention, the sending-end network processing chain is as follows: .in, This is the original data; To compress the data; To encrypt data; For encoding strings; It is a two-dimensional image.

[0134] The processing chain for unidirectional optical transmission is as follows: , The receiving end image mapped to the display panel.

[0135] Image frame F is carried by an optical medium and captured by the camera via an optical path. This physical channel is inherently unidirectional and cannot communicate in the reverse direction.

[0136] like Figure 4 As shown, the receiving network processing chain is as follows: .in, Encode the string for the receiving end; Encrypt the data at the receiving end; Compress the data at the receiving end; To restore the byte sequence; To restore the data.

[0137] Taking a cross-network one-way secure high-frequency low-bandwidth transmission scenario as an example, and sending the original digital signal "Hello", the specific process of applying the method provided by the embodiments of this invention is as follows:

[0138] Original data: Convert to a byte sequence: .

[0139] At the sending end, the original data byte sequence is first compressed using Deflate. This algorithm combines LZ77 and Huffman coding to eliminate redundancy and reduce data size. The process of obtaining compressed data is preferably represented as follows: The resulting compressed data is represented as follows: .

[0140] By compressing and reducing data packet length, a high-frequency, small-data-packet transmission mode can be achieved under low-bandwidth conditions, significantly improving transmission efficiency and enhancing applicability in resource-constrained scenarios.

[0141] The compressed data is encrypted and protected using the AAES-128-CBC encryption algorithm.

[0142] The key K is: 2B7E151628AED2A6ABF7158809CF4F3C.

[0143] Initial vector IV: 000102030405060708090A0B0C0D0E0F.

[0144] Compress data Divide the data into 16-byte blocks and pad with PKCS#7 to an integer multiple of 16 bytes, resulting in: ,in, Indicates fill. Fill length: ,in, It is a modulo operation, representing taking the remainder.

[0145] Perform CBC encryption: ;in, This represents the i-th ciphertext block, where i = 1, 2, 3...n. , represents the initial vector; This represents the encryption function of the Advanced Encryption Standard (AES); K represents the symmetric key used for AES encryption. This represents the i-th plaintext block; Represents the XOR operation; This represents the (i-1)th ciphertext block.

[0146] The encrypted text obtained is: Example ciphertext value: .

[0147] It provides strong encryption protection for data, ensuring that even if optical signals are intercepted by unauthorized parties, their content remains unreadable. This is equivalent to establishing a mandatory logical security layer, significantly improving the level of information security.

[0148] Convert the ciphertext into a displayable sequence of optical signals: ,in, This indicates that Base64 encoding is performed on the encrypted data C. The encoding result is:

[0149] , This represents the first to the mth characters.

[0150] Example output ciphertext value: .

[0151] Encode string Encoded as QR image frames It adopts Q-level error correction (25% fault tolerance). The output is an image frame. Used for optical displays; This represents the QR code generation function; EC=Q indicates that the error correction level is Q.

[0152] Base64 encoding ensures lossless conversion of binary data, while QR code's Q-level error correction capability effectively combats signal quality degradation during transmission, achieving adaptation and reinforcement from digital signals to physical optical signals.

[0153] The one-way optical transmission process is as follows: The transmitting end displays a QR 2D image F at a high frame rate, which is transmitted through an air optical path. The receiving end's camera captures the light signal and generates the receiving end image. .

[0154] This process constitutes a physical layer unidirectional isolation channel, which naturally and irreversibly enables the unidirectional flow of data at the physical level, ensuring that signals can only be sent from the internal network to the external network and cannot be propagated in the reverse direction.

[0155] At the receiving end, the captured image is... First, preprocessing is performed, including grayscale conversion, binarization, and perspective correction, and then the QR code is parsed.

[0156] The Reed-Solomon algorithm was used to correct module errors and restore the Base64 string. ,in, This represents the QR code decoding function.

[0157] If the QR image is lossy, the Base64 string can still be recovered after error correction to obtain the encoded string at the receiving end. , .

[0158] Image processing and error correction algorithms ensure accurate extraction of coded data from non-ideal physical environments, guaranteeing system robustness and low bit error rate, which is an important guarantee for achieving reliable signal reception.

[0159] When decrypting data, first use Base64 decoding, such as: ,in, This indicates the Base64 decoding function.

[0160] Next, decrypt using AES-CBC, using the same key and initialization vector: ,in, This represents the i-th plaintext block received. This represents the encoded string of the i-th receiver. This represents the decryption key, which is the same as the encryption key. This represents the encoded string of the (i-1)th receiver. This represents the initial string at the receiving end, which is the same as the initial vector at the sending end.

[0161] splice all get: ;in, This indicates that the receiving end is concatenating the plaintext sequence; This represents the concatenation operator.

[0162] The encrypted data from the concatenated receiving end is de-padded, such as... , This indicates the PKCS#7 fill function.

[0163] Output received compressed data: .

[0164] Remove the confidentiality protection of the data to restore its availability. Together with the encryption operation at the sending end, this forms a complete security loop, ensuring that only authorized recipients can ultimately obtain the information.

[0165] The Inflate algorithm is used to compress data at the receiving end. Decompression yields the restored byte sequence: Output: .

[0166] The restored byte sequence is converted into a UTF-8 encoded string to obtain the restored data. : .

[0167] Perform a consistency check on the restored data: , This represents the hash consistency check function; This indicates that the verification result is true, and the restored data has the same hash value as the original data.

[0168] This step is the reverse of data compression, precisely restoring the data to its initial state for use by the target business system. A consistency check verifies that the transmission process was successful and the data is complete and error-free.

[0169] The above embodiments, through specific data samples, fully demonstrate the rigorous algorithmic chain that data undergoes during transmission across physically isolated networks. Each step undertakes a clear technical function, works collaboratively, and systematically resolves the core contradictions raised in the background technology, fully verifying the feasibility and superiority of this invention in achieving the technical effects of "true isolation, true unidirectional transmission, low cost, and high adaptability."

[0170] Therefore, the controllable unidirectional contactless protective data transmission method provided in this embodiment of the invention has the following beneficial effects:

[0171] (1) Enhanced physical layer security: This invention uses light as the data transmission medium to form a "no ingress" physical disconnect structure, which allows data to be transmitted unidirectionally from the sending end to the receiving end, thus completely cutting off the reverse feedback path between the electrical signal and the network protocol layer at the physical level.

[0172] This structure possesses the inherent characteristics of physical irreversibility, no electromagnetic backflow, and no reverse conduction. Combined with the end-to-end AAES-128-CBC encryption algorithm, it can effectively prevent any form of reverse attack, data theft, and side-channel intrusion, ensuring absolute security during transmission.

[0173] (2) Efficient transmission and robustness enhancement under algorithm chain collaboration: The system introduces a composite algorithm system of Deflate streaming compression + AAES-128-CBC encryption + Base64 visualization encoding + QR error correction and reconstruction in the transmission chain, realizing secure mapping and inverse mapping from electrical signals to optical signals and then to digital signals.

[0174] Among these features, the Deflate compression algorithm effectively reduces data volume and adapts to the bandwidth limitations of optical transmission; the AAES-128-CBC mode enhances anti-tampering capabilities; and the Reed-Solomon error correction mechanism built into the QR encoding can still achieve complete data restoration even when image frames are partially distorted or occluded. Therefore, even in extreme scenarios such as low bandwidth, high noise, or high-frequency sampling, the system can still maintain stable, low-latency, and highly reliable transmission performance.

[0175] (3) Extremely adaptable and flexible: It does not depend on any specific network protocol or bus standard and can support the transmission of multiple types of information such as text, files, control commands, and structured data.

[0176] Because the data is transmitted via an optical channel in the form of images, the system can achieve highly secure, loosely coupled, and contactless one-way data transmission in various network isolation environments.

[0177] This invention constructs a secure, contactless, physical, one-way transmission channel through an "algorithm-driven + optical medium" technical approach, achieving improvements in four dimensions: security, reliability, economy, and applicability.

[0178] Embodiments of the present invention also provide a non-transitory machine-readable medium storing a computer program, wherein the computer program, when executed by a computer's processor, is used to cause the computer to perform a method according to an embodiment of the present invention.

[0179] Embodiments of the present invention also provide a computer program product, including a computer program, wherein the computer program, when executed by a computer's processor, is used to cause the computer to perform the method of an embodiment of the present invention.

[0180] An embodiment of the present invention also provides an electronic device, including: at least one processor; and a memory communicatively connected to the at least one processor. The memory stores a computer program executable by the at least one processor, which, when executed by the at least one processor, causes the electronic device to perform the method of the embodiment of the present invention.

[0181] refer to Figure 5This is a structural block diagram of an electronic device for a server or client, representing an embodiment of the present invention, and is an example of a hardware device that can be applied to various aspects of the present invention. The electronic device is intended to represent various forms of digital electronic computer devices, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processors, cellular phones, smartphones, wearable devices, and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely illustrative and are not intended to limit the implementation of the present invention described and / or claimed herein.

[0182] like Figure 5 As shown, the electronic device includes a computing unit 601, which can perform various appropriate actions and processes based on a computer program stored in a read-only memory (ROM) 602 or a computer program loaded from a storage unit 608 into a random access memory (RAM) 603. The RAM 603 may also store various programs and data required for the operation of the electronic device. The computing unit 601, ROM 602, and RAM 603 are interconnected via a bus 604. An input / output (I / O) interface 605 is also connected to the bus 604.

[0183] Multiple components in the electronic device are connected to I / O interface 605, including: input unit 606, output unit 607, storage unit 608, and communication unit 609. Input unit 606 can be any type of device capable of inputting information into the electronic device. Input unit 606 can receive input digital or character information and generate key signal inputs related to user settings and / or function control of the electronic device. Output unit 607 can be any type of device capable of presenting information and may include, but is not limited to, a display, speaker, video / audio output terminal, vibrator, and / or printer. Storage unit 608 may include, but is not limited to, disks and optical discs. Communication unit 609 allows the electronic device to exchange information / data with other devices through computer networks such as the Internet and / or various telecommunications networks, and may include, but is not limited to, modems, network cards, infrared communication devices, and / or wireless communication transceivers, such as Bluetooth devices, WiFi devices, WiMax devices, cellular communication devices, and / or the like.

[0184] The computing unit 601 can be a variety of general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of the computing unit 601 include, but are not limited to, CPUs, graphics processing units (GPUs), various special-purpose artificial intelligence (AI) computing units, various computing units running machine learning model algorithms, digital signal processors (DSPs), and any suitable processor, controller, microcontroller, etc. The computing unit 601 performs the various methods and processes described above. For example, in some embodiments, the method embodiments of the present invention can be implemented as computer programs tangibly contained in a machine-readable medium, such as storage unit 608. In some embodiments, part or all of the computer program can be loaded and / or installed on an electronic device via ROM 602 and / or communication unit 609. In some embodiments, the computing unit 601 can be configured to perform the methods described above by any other suitable means (e.g., by means of firmware).

[0185] Computer programs for implementing the methods of embodiments of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor or controller of a general-purpose computer, special-purpose computer, or other programmable data processing apparatus, such that when executed by the processor or controller, the computer programs cause the functions / operations specified in the flowcharts and / or block diagrams to be performed. The computer programs may be executed entirely on a machine, partially on a machine, or as a standalone software package, partially on a machine and partially on a remote machine, or entirely on a remote machine or server.

[0186] In the context of embodiments of this invention, a machine-readable medium can be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, apparatus, or device. A machine-readable medium can be a machine-readable signal medium or a machine-readable storage medium. A machine-readable signal medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, or infrared systems, apparatus, or devices, or any suitable combination of the foregoing. More specific examples of machine-readable storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing.

[0187] It should be noted that the term "comprising" and its variations used in the embodiments of this invention are open-ended, meaning "including but not limited to". The term "based on" means "at least partially based on". The term "one embodiment" means "at least one embodiment"; the term "another embodiment" means "at least one additional embodiment"; the term "some embodiments" means "at least some embodiments". The modifications of "one" and "a plurality" mentioned in the embodiments of this invention are illustrative and not restrictive, and those skilled in the art should understand that unless explicitly indicated otherwise in the context, they should be understood as "one or more".

[0188] The user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in the embodiments of this invention are all information and data authorized by the user or fully authorized by all parties. Furthermore, the collection, use and processing of related data must comply with the relevant laws, regulations and standards of the relevant countries and regions, and corresponding operation entry points are provided for users to choose to authorize or refuse.

[0189] The steps described in the method embodiments provided by the present invention can be performed in different orders and / or in parallel. Furthermore, the method embodiments may include additional steps and / or omit the steps shown. The scope of protection of the present invention is not limited in this respect.

[0190] The term "embodiment" in this specification refers to a specific feature, structure, or characteristic described in connection with an embodiment that may be included in at least one embodiment of the invention. The appearance of this phrase in various places throughout the specification does not necessarily imply the same embodiment, nor does it imply independence or alternativeity from other embodiments. The various embodiments in this specification are described in a related manner, with reference to each other for similar or identical parts. In particular, for apparatus, device, and system embodiments, since they are substantially similar to method embodiments, the description is relatively simple, and relevant details are referred to in the description of the method embodiments.

[0191] The above-described embodiments are merely illustrative of several implementations of the present invention, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of protection. It should be noted that those skilled in the art can make various modifications and improvements without departing from the inventive concept of the present invention, and these modifications and improvements all fall within the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be determined by the appended claims.

Claims

1. A controllable, unidirectional, contactless, protective data transmission method, characterized in that, Includes the following steps: The raw data to be transmitted is compressed using a streaming data compression algorithm and then encrypted using a symmetric encryption algorithm to generate encrypted data. The encrypted data is converted into a two-dimensional image by a QR code encoding algorithm with error correction function, and then sent to the receiving end after being converted into an optical signal by the display panel. The light signal is captured by a camera at the receiving end; wherein the capture frame rate of the camera is not lower than the refresh rate of the display panel; The light signal is converted into a discrete electrical signal by the image sensor built into the camera; The discrete electrical signal is converted into a digital image by the analog-to-digital converter built into the camera. The digital image is preprocessed to generate a digital image that conforms to the QR code decoding standard; wherein, the preprocessing includes at least one of grayscale conversion, binarization, and perspective correction; the preprocessed digital image is subjected to QR code recognition and decoding, and the original data recognized is corrected using the error correction code embedded in the QR code to obtain encrypted data at the receiving end; The encrypted data received is decrypted using a symmetric decryption algorithm to obtain decrypted data; wherein the symmetric decryption algorithm matches the symmetric encryption algorithm, and the decryption key is the same as the encryption key; Identify and remove padding data in the decrypted data that corresponds to the padding standard used during encryption to obtain the compressed data at the receiving end; The compressed data at the receiving end is decompressed using a streaming data decompression algorithm to obtain the restored byte sequence; The restored byte sequence is converted to obtain the restored data.

2. The controllable unidirectional contactless protective data transmission method according to claim 1, characterized in that, Before compressing the raw data to be transmitted using a streaming data compression algorithm, the method includes the following steps: Obtain the raw data to be transmitted from the application or service on the network where the sender is located; The raw data is converted into a byte sequence using the Information Exchange Standard Code.

3. The controllable unidirectional contactless protective data transmission method according to claim 2, characterized in that, The raw data to be transmitted is compressed using a streaming data compression algorithm, and then encrypted using a symmetric encryption algorithm to generate encrypted data, including the following steps: The byte sequence obtained by converting the original data to be transmitted is compressed using a streaming data compression algorithm to obtain compressed data. The length of the compressed data is padded to an integer multiple of the length of the symmetric encryption algorithm block; The compressed data after being filled is encrypted using a symmetric encryption algorithm to generate encrypted data.

4. The controllable unidirectional contactless protective data transmission method according to claim 1, characterized in that, The process of generating a two-dimensional image from the encrypted data using a QR code encoding algorithm with error correction capabilities includes the following steps: The encrypted data in binary form is then encoded in base 64 to obtain the encoded string; The binary data bitstream obtained by converting the encoded string is split into multiple data blocks of equal length according to the QR code encoding algorithm standard; Each of the data blocks is processed using the Reed-Solomon error correction algorithm to calculate a 32-bit error correction code. The concatenated data obtained by concatenating each data block with the corresponding error correction code is filled into the corresponding pixel module in the pixel matrix according to the path specified by the QR code encoding, until all data is filled into the pixel matrix to obtain a two-dimensional image.

5. The controllable unidirectional contactless protective data transmission method according to claim 1, characterized in that, The process of performing QR code recognition and decoding on the preprocessed digital image, and correcting the recognized original data using the error correction code embedded in the QR code to obtain encrypted data for the receiving end, includes the following steps: The QR code decoding algorithm is used to identify each pixel module in the preprocessed digital image to obtain each binary data. The binary data are concatenated to obtain an encoded data bit stream; wherein the encoded data bit stream includes: original data blocks and error correction codes; The original data in the encoded data bit stream is converted into a string to obtain the encoded string at the receiving end; Based on the error correction codes in the encoded data bit stream, the received end encoded string is subjected to error detection and correction to obtain corrected data; The corrected data is then converted back into binary encrypted data by a hexadecimal decoding algorithm.

6. The controllable unidirectional contactless protective data transmission method according to claim 5, characterized in that, The process of using a QR code decoding algorithm to identify individual pixel modules in the preprocessed digital image and obtain individual binary data includes the following steps: The positioning features of the preprocessed digital image are identified using a QR code decoding algorithm. The positioning features include: position detection patterns and timing patterns. According to the set path in the QR code decoding algorithm, read each pixel module in the digital image line by line; Extract the binary values ​​of each pixel module to obtain each binary data; wherein the binary values ​​in the pixel module are determined based on the pixel color in the pixel module.

7. The controllable unidirectional contactless protective data transmission method according to claim 1, characterized in that, After obtaining the restored data, the method further includes the following steps: The restored data is then compared with the original data using a checksum. If the verification is successful, the restored data will be sent to the application module of the receiving end. If the verification fails, the restored data is discarded or local cached historical valid data is temporarily used as a substitute, and an error log is recorded.

8. A controllable unidirectional contactless protective data transmission system, characterized in that, include: The sending end processing module is used to compress the raw data to be transmitted using a streaming data compression algorithm, encrypt it using a symmetric encryption algorithm to generate encrypted data, and generate a two-dimensional image from the encrypted data using a QR code encoding algorithm with error correction function. The data transmission module includes a display panel; the display panel is connected to the transmitting end processing module and is used to convert the two-dimensional image into an optical signal and then send it to the receiving end; A data receiving module includes a camera; the camera is used to capture the light signal at the receiving end; wherein the capture frame rate of the camera is not lower than the refresh rate of the display panel; the light signal is converted into a discrete electrical signal by the image sensor built into the camera; the discrete electrical signal is converted into a digital image by the analog-to-digital converter built into the camera; the digital image is preprocessed to generate a digital image conforming to the QR code decoding standard; wherein the preprocessing includes at least one of grayscale conversion, binarization, and perspective correction; The receiving end processing module, connected to the data receiving module, is used to preprocess the digital image, perform QR code recognition and decoding on the preprocessed digital image, and use the error correction code embedded in the QR code to correct the recognized original data to obtain the receiving end encrypted data. The data restoration module, connected to the receiving end processing module, is used to decrypt the received end encrypted data using a symmetric decryption algorithm to obtain decrypted data; wherein the symmetric decryption algorithm matches the symmetric encryption algorithm, and the decryption key is the same as the encryption key; identify and remove padding data in the decrypted data that corresponds to the padding standard used during encryption to obtain received end compressed data; decompress the received end compressed data using a streaming data decompression algorithm to obtain a restored byte sequence; and convert the restored byte sequence to obtain restored data.

Images