Linux-based law enforcement instrument data acquisition station and data processing method thereof

Abstract

The invention relates to the technical field of moving coil microphones, in particular to a Linux-based law enforcement instrument data acquisition station and a data processing method thereof, and the Linux-based law enforcement instrument data acquisition station comprises an embedded Linux host, and a multi-device management module, a packet capture unlocking module, an encryption and decryption module, a storage strategy module, an RFID distribution module, a network access module and a Web service module which are integrated on the embedded Linux host. And the multi-device management module is used for realizing simultaneous charging, uploading and USBHUB expansion of multiple law enforcement instruments. The package capturing and unlocking module unlocks the law enforcement instrument through package capturing, and a special drive is not needed. And the encryption and decryption module adopts RSA to manage an AES key and realize online encryption and decryption of the video. And the storage strategy module is used for supporting multi-protocol multi-target storage selection. According to the invention, simultaneous charging, stable concurrent uploading and device drive-free adaptation of a plurality of law enforcement instruments are realized, and the problems of poor USB expansion capability of the existing Windows platform, easy transmission bottleneck in concurrent uploading of a plurality of devices and poor compatibility caused by dependence on a manufacturer dedicated drive are solved.

Description

Technical Field

[0001] This invention relates to the field of dynamic microphone technology, and more particularly to a Linux-based law enforcement recorder data acquisition station and its data processing method. Background Technology

[0002] The Linux-based law enforcement recorder data acquisition station is an intelligent, dedicated device integrating automatic data acquisition, charging, storage, and management. It adopts an embedded Linux system architecture, offering advantages such as high security and freedom from virus infection, and supports simultaneous connection of multiple law enforcement recorders. The device can automatically identify the status of the law enforcement recorder, complete the uploading of audio and video data and terminal clearing, and supports breakpoint resume and hot-swapping functions. Furthermore, the Linux system naturally supports driverless design, making it compatible with multiple brands of law enforcement recorders and widely applicable to law enforcement fields such as public security and traffic police.

[0003] In existing technologies, most law enforcement recorder data acquisition systems are based on the Windows platform, which suffers from poor USB expansion and is prone to bottlenecks when uploading data to multiple devices concurrently, failing to meet practical needs. Furthermore, they have deficiencies in areas such as device unlocking, data security, storage management, law enforcement recorder allocation, and terminal access, severely impacting data acquisition efficiency and security, and making them unsuitable for grassroots law enforcement scenarios. Therefore, this paper proposes a Linux-based law enforcement recorder data acquisition station and its data processing method. Summary of the Invention

[0004] To address the shortcomings of existing technologies, this invention provides the following technical solution: A Linux-based law enforcement recorder data acquisition system includes: an embedded Linux host and integrated on it a multi-device management module, a packet capture and unlocking module, an encryption and decryption module, a storage strategy module, an RFID allocation module, a network access module, and a web service module. The multi-device management module enables simultaneous charging, uploading, and USB hub expansion for multiple law enforcement recorders. The packet capture and unlocking module unlocks law enforcement recorders by capturing packets, requiring no dedicated driver. The encryption and decryption module uses RSA to manage AES keys and implements online video encryption and decryption. The storage strategy module supports multi-protocol and multi-target storage selection. The RFID allocation module enables automatic allocation of law enforcement recorders and user binding. The network access module supports dual-path Wi-Fi (5GHz) and RJ45. The web service module supports unified access from multiple terminals.

[0005] As an improvement to the above technical solution, The multi-device management module adopts a multi-process, multi-thread, or asynchronous IO upload mechanism, schedules resources by port or device ID, and configures cache queues, rate limiting, and load balancing strategies to achieve concurrent upload and orderly management of multiple law enforcement devices.

[0006] As an improvement to the above technical solution, The packet capture and unlocking module analyzes communication protocol data packets through the original socket or packet capture unit, extracts key unlocking interaction fields, simulates or replays the corresponding data packet sequence to complete the unlocking, circumvents driver signature restrictions, and improves compatibility.

[0007] As an improvement to the above technical solution, The storage strategy module includes a unified abstract interface unit and a storage selection unit. The former is compatible with multiple storage protocols and supports fault switching and resume interrupted transmission, while the latter automatically selects storage targets based on video attributes and network status, and supports dividing storage directories or storage buckets according to metadata.

[0008] As an improvement to the above technical solution, The encryption and decryption module manages the AES session keys of each law enforcement device or user through RSA and stores them in the security module. When playing video, the AES key is first decrypted using the RSA private key, and then the video stream is decrypted online. The security module is an HSM or encrypted file, configured with a key storage and expiration destruction mechanism, and can only be triggered for decryption by authorized terminals.

[0009] As an improvement to the above technical solution, The RFID allocation module identifies police officers through RFID card readers, automatically allocates law enforcement recorders, and establishes a binding between users, devices, and time periods. When uploading videos, it automatically associates user and shift information to achieve accountability.

[0010] As an improvement to the above technical solution, The network access module integrates a dual-path access unit and is configured with a network quality detection and automatic switching mechanism. The Web service module provides a unified API that supports access from multiple terminals and is combined with role-based access control.

[0011] As an improvement to the above technical solution, A Linux-based law enforcement recorder data processing method, applied to any one of the systems described in claims 1-7, includes the following steps: The RFID distribution module identifies police officers through a card reader, automatically distributes body cameras, and establishes a binding relationship. After the law enforcement recorder is connected to the system, the packet capture and unlocking module unlocks it through packet capture analysis; The multi-device management module initiates a concurrent upload mechanism to enable data upload and charging; The encryption / decryption module encrypts the video, managing and storing the AES key via RSA. The storage strategy module automatically selects the storage target and completes the storage. Authorized terminals can decrypt, view, and download videos via the Web service module; The system cleans up expired data according to preset rules to ensure storage space.

[0012] The beneficial effects of this invention are: 1. In this invention, by employing an embedded Linux host and the multi-device management module and packet capture unlocking module integrated thereon, combined with a multi-process / multi-thread / asynchronous IO upload mechanism, USB HUB expansion, and a packet capture simulation unlocking method without dedicated drivers, it is possible to achieve simultaneous charging of multiple law enforcement devices, stable concurrent upload, and driverless device adaptation. This solves the problems of poor USB expansion capabilities, easy transmission bottlenecks in concurrent uploads of multiple devices, and poor compatibility due to reliance on manufacturer-specific drivers on existing Windows platforms.

[0013] 2. In this invention, the encryption and decryption module uses RSA to manage the AES session key and cooperates with HSM for secure storage, online video encryption and decryption, and the RFID distribution module automatically completes the identification of police officers and the binding of users, devices and time periods. This realizes full-process encryption protection and accountability traceability of law enforcement videos from collection to access, solving the problems of easy leakage of video data, chaotic distribution of law enforcement devices and difficulty in tracing law enforcement responsibility in traditional collection stations. Attached Figure Description

[0014] Figure 1 This is a system flowchart of the present invention; Figure 2 This is a system flowchart of the present invention; Figure 3 This is a system flowchart of the present invention; Figure 4 This is a flowchart of the method of the present invention. Detailed Implementation

[0015] The following specific examples illustrate the implementation of the present invention. Those skilled in the art can easily understand other advantages and effects of the present invention from the content disclosed in this specification. The present invention can also be implemented or applied through other different specific embodiments, and various details in this specification can also be modified or changed based on different viewpoints and applications without departing from the spirit of the present invention.

[0016] See appendix Figure 1-3 As shown, the Linux-based law enforcement recorder data acquisition system includes: The system consists of an embedded Linux host and integrated modules for multi-device management, packet capture and unlocking, encryption and decryption, storage strategy, RFID allocation, network access, and web services. The multi-device management module enables simultaneous charging, uploading, and USB hub expansion for multiple law enforcement devices. The packet capture and unlocking module unlocks law enforcement devices via packet capture, requiring no dedicated driver. The encryption and decryption module uses RSA to manage AES keys and implements online video encryption and decryption. The storage strategy module supports multi-protocol and multi-target storage selection. The RFID allocation module enables automatic allocation and user binding of law enforcement devices. The network access module supports dual-path Wi-Fi (5GHz) and RJ45. The web service module supports unified access from multiple terminals.

[0017] In one embodiment, the embedded Linux host serves as the core carrier of the system, providing the operating environment and resource support for each integrated module. Each module operates independently yet works collaboratively. The multi-device management module is responsible for charging and data uploading expansion of the law enforcement recorder. The packet capture and unlocking module enables the law enforcement recorder to be unlocked without a dedicated driver. The encryption and decryption module ensures the security of video data. The storage strategy module flexibly selects storage methods. The RFID allocation module completes the binding and allocation between the law enforcement recorder and the user. The network access module provides stable network support. The Web service module enables convenient access from multiple terminals. Together, they solve the platform limitations and insufficient expansion of traditional data collection stations, ensuring the efficient operation of the system.

[0018] See appendix Figure 1-3 As shown, the multi-device management module adopts a multi-process, multi-thread, or asynchronous IO upload mechanism, schedules resources by port or device ID, and configures cache queues, rate limiting, and load balancing strategies to achieve concurrent upload and orderly management of multiple law enforcement recorders.

[0019] In one embodiment, after the multi-device management module is started, it can automatically select a multi-process, multi-thread, or asynchronous IO upload mechanism according to the number and port distribution of the connected law enforcement devices. It can reasonably schedule the upload resources of each law enforcement device through the port or device ID, configure a cache queue to avoid data congestion, and balance the upload pressure of each device through rate limiting and load balancing strategies to ensure that multiple law enforcement devices can upload data simultaneously in an orderly and efficient manner. It can also provide charging services for the connected law enforcement devices and support the expansion of more law enforcement devices through a USB hub to meet the needs of multi-device concurrent management.

[0020] See appendix Figure 1-3 As shown, the packet capture and unlocking module analyzes communication protocol data packets through the original socket or packet capture unit, extracts key unlocking interaction fields, simulates or replays the corresponding data packet sequence to complete the unlocking, circumvents driver signature restrictions, and improves compatibility.

[0021] In one embodiment, when the packet capture and unlocking module is running, it analyzes the communication protocol data packets between the law enforcement device and the system in real time through raw sockets or the built-in packet capture unit, accurately extracts the key interaction fields used for unlocking and authorizing the law enforcement device, and completes the unlocking operation of the law enforcement device by simulating or replaying the extracted key data packet sequence without relying on the manufacturer's dedicated driver. This effectively avoids driver signature restrictions, can be adapted to law enforcement devices of different brands, and significantly improves the system's compatibility and deployment convenience.

[0022] See appendix Figure 1-3 As shown, the storage strategy module includes a unified abstract interface unit and a storage selection unit. The former adapts to multiple storage protocols and supports fault switching and breakpoint resume, while the latter automatically selects storage targets based on video attributes and network status, and supports dividing storage directories or storage buckets according to metadata.

[0023] In one embodiment, when the storage strategy module is running, its unified abstract interface unit adapts to various storage protocols such as FTP, SMB, WebDAV, and various cloud disk APIs, enabling seamless switching between different storage protocols. It also supports fault switching and breakpoint resume functions to avoid data storage interruption or loss. The storage selection unit obtains the attributes of law enforcement videos and the current network status in real time, automatically filters the optimal storage target, and automatically divides the storage directory or storage bucket according to metadata such as case number and user ID, so as to achieve standardized and efficient data storage.

[0024] See appendix Figure 1-3 As shown, the encryption and decryption module manages the AES session keys of each law enforcement device or user through RSA and stores them in the security module. When playing the video, the AES key is first decrypted using the RSA private key, and then the video stream is decrypted online. The security module is an HSM or encrypted file, configured with a key storage and expiration destruction mechanism, and can only be triggered for decryption by authorized terminals.

[0025] In one embodiment, during the operation of the encryption / decryption module, the RSA algorithm is used to uniformly manage the AES session key corresponding to each law enforcement device or user. The AES session key is stored in the HSM hardware security module or an encrypted file to ensure key security. When law enforcement videos are uploaded, the video is encrypted online using the AES algorithm. When the video needs to be played, the corresponding AES session key is first decrypted using the RSA private key, and then the decrypted AES key is used to decrypt the video stream online in real time. Simultaneously, the system is configured with a key memory temporary storage and automatic expiration destruction mechanism, ensuring that only terminals with corresponding permissions can trigger the decryption operation, further guaranteeing the security and confidentiality of video data.

[0026] See appendix Figure 1-3As shown, the RFID allocation module identifies police officers through an RFID reader, automatically allocates law enforcement recorders, and establishes a binding between users, devices, and time periods. When uploading videos, it automatically associates user and shift information to achieve accountability.

[0027] In one embodiment, when the RFID allocation module is running, it reads the identity information from the police officer's ID card or tag through the connected RFID reader. After completing the police officer identification, it automatically allocates a suitable law enforcement device from the pool of available law enforcement devices in the system and establishes a unique "user-device-time period" binding relationship. When the law enforcement device completes data upload, the module automatically associates the uploaded video data with the user information and shift information bound to the law enforcement device, forming a complete chain of responsibility for traceability. This facilitates subsequent querying and tracing of the law enforcement personnel and law enforcement time periods corresponding to the video, ensuring the traceability of law enforcement data.

[0028] See appendix Figure 1-3 As shown, the network access module integrates a dual-path access unit and is configured with a network quality detection and automatic switching mechanism. The Web service module provides a unified API, supports multi-terminal access, and combines role-based access control.

[0029] In one embodiment, when the network access module is running, its integrated dual-path access unit simultaneously supports Wi-Fi 5GHz and RJ45 wired network access. Through a built-in network quality detection mechanism, it monitors the connection status and transmission quality of the two networks in real time. When one network becomes unstable or experiences lag, it automatically switches to the other network to ensure the stability of system data transmission and terminal access. When the Web service module is running, it provides a unified API interface that is compatible with various terminals such as mobile phones, computers, and tablets. At the same time, it combines a role-based access control mechanism to divide the terminal access permissions for different roles, ensuring that each terminal can only access system resources within its corresponding permission scope, thus ensuring the security and standardization of system access.

[0030] See appendix Figure 4 As shown, the Linux-based law enforcement recorder data processing method, applied to the Linux-based law enforcement recorder data acquisition system according to any one of claims 1-7, is characterized by comprising the following steps: S1: The RFID distribution module identifies police officers through a card reader, automatically distributes law enforcement recorders, and establishes a binding relationship. S2: After the law enforcement recorder is connected to the system, the packet capture and unlocking module unlocks the device through packet capture analysis; S3: The multi-device management module starts the concurrent upload mechanism to realize data upload and charging; S4: The encryption / decryption module encrypts the video, manages and stores the AES key via RSA; S5: The storage strategy module automatically selects the storage target and completes the storage; S6: Authorized terminals can decrypt, view, and download videos via the Web service module; S7: The system cleans up expired data according to preset rules to ensure storage space.

[0031] System Workflow: The RFID allocation module identifies police officers using RFID readers, automatically allocates a law enforcement device from the available pool, and establishes a "user-device-time period" binding relationship. After the law enforcement device is connected to the system, the packet capture and unlocking module analyzes the communication protocol data packets through raw sockets or packet capture units, extracts key unlocking interaction fields, and simulates or replays the corresponding data packet sequence to complete the unlocking. No dedicated driver is required, and it is compatible with different brands of law enforcement devices. After unlocking, the multi-device management module starts a multi-process, multi-thread, or asynchronous IO upload mechanism, schedules resources by port or device ID, configures cache queues, rate limiting, and load balancing strategies, and enables multiple law enforcement devices to upload data and charge synchronously at the same time. It also supports the expansion of more devices through a USB hub. During the data upload process, the encryption and decryption module uses the RSA algorithm to manage the AES session keys of each law enforcement device or user, stores the keys in an HSM or encrypted file, and performs online encryption processing on the video. The encrypted video data is transmitted to the storage strategy module, whose unified abstract interface unit adapts to multiple storage protocols and supports fault switching and resume interrupted downloads. The storage selection unit automatically selects the storage target based on video attributes and network status, and completes storage by dividing storage directories or buckets according to metadata. After storage, the Web service module provides a unified API interface, combined with role-based access control, supporting multi-terminal access. Authorized terminals can decrypt the AES key using an RSA private key, enabling online decryption, viewing, and downloading of the video. Throughout the process, the network access module provides stable network support through dual-path Wi-Fi 5GHz and RJ45 and an automatic switching mechanism. The system ultimately cleans up expired data according to preset rules to ensure sufficient storage space. All modules work together to complete the entire process of law enforcement recorder allocation, unlocking, data acquisition, encryption, storage, access, and data cleanup.

[0032] The workflow is as follows: During runtime, the RFID allocation module first reads the officer's identity information via a card reader. After identity verification, it automatically allocates the corresponding law enforcement device from the available device pool and establishes a binding relationship between the officer and the device. Once the device is connected to the system, the packet capture and unlocking module initiates a packet analysis process. By analyzing the communication protocol data packets between the device and the system, it extracts key unlocking interaction fields and simulates or replays the corresponding data packet sequence to unlock the device, without relying on a dedicated driver. After unlocking, the multi-device management module initiates a concurrent upload mechanism, allocating resources based on the number of connected devices and port distribution. This ensures efficient data upload while simultaneously providing charging services to the devices. During data upload, the encryption and decryption module performs online encryption of the video data and uses the RSA algorithm to uniformly manage all devices. The system securely stores the corresponding AES session key for each user to ensure video data security. The encrypted video data is then transmitted to the storage strategy module, which automatically selects the optimal storage target based on video attributes and current network conditions, adapts to the corresponding storage protocol, and completes data storage. After storage, the Web service module provides a unified access interface, combined with a role-based access control mechanism, allowing authorized terminals to initiate decryption, viewing, and downloading of videos. Authorized terminals can then decrypt and access the video online by decrypting the AES session key using an RSA private key. Finally, the system automatically cleans up expired data according to preset cleanup rules, reasonably releasing storage space and ensuring that each step is seamlessly connected and operates collaboratively, efficiently completing the entire process of law enforcement recorder data processing from allocation, unlocking, acquisition, encryption, storage, access to cleanup.

[0033] The above embodiments are merely illustrative of the technical solutions of the present invention and are not intended to limit it. Anyone skilled in the art can modify or alter the above embodiments without departing from the spirit and scope of the present invention. Therefore, all equivalent modifications or alterations made by those skilled in the art without departing from the spirit and technical concept disclosed in the present invention should still be covered by the claims of the present invention.

Claims

1. A Linux-based law enforcement recorder data acquisition system, characterized in that, include: Embedded Linux host and integrated on it a multi-device management module, packet capture and decryption module, encryption and decryption module, storage strategy module, RFID allocation module, network access module and Web service module; The multi-device management module is used to enable simultaneous charging, uploading, and USB hub expansion of multiple law enforcement recorders; The packet capture unlocking module unlocks the law enforcement recorder by capturing packets, without requiring a dedicated driver; The encryption / decryption module uses RSA to manage AES keys and enables online video encryption / decryption. The storage policy module is used to support multi-protocol, multi-target storage selection; The RFID distribution module is used to automatically distribute law enforcement recorders and bind them to users; The network access module is used to support dual-path Wi-Fi 5GHz and RJ45; The Web service module is used to support unified access from multiple terminals.

2. The Linux-based law enforcement recorder data acquisition system according to claim 1, characterized in that: The multi-device management module adopts a multi-process, multi-thread, or asynchronous IO upload mechanism, schedules resources by port or device ID, and configures cache queues, rate limiting, and load balancing strategies to achieve concurrent upload and orderly management of multiple law enforcement devices.

3. The Linux-based law enforcement recorder data acquisition system according to claim 1, characterized in that: The packet capture and unlocking module analyzes communication protocol data packets through the original socket or packet capture unit, extracts key unlocking interaction fields, simulates or replays the corresponding data packet sequence to complete the unlocking, circumvents driver signature restrictions, and improves compatibility.

4. The Linux-based law enforcement recorder data acquisition system according to claim 1, characterized in that: The storage strategy module includes a unified abstract interface unit and a storage selection unit. The former is compatible with multiple storage protocols and supports fault switching and resume interrupted transmission, while the latter automatically selects storage targets based on video attributes and network status, and supports dividing storage directories or storage buckets according to metadata.

5. The Linux-based law enforcement recorder data acquisition system according to claim 1, characterized in that: The encryption and decryption module manages the AES session keys of each law enforcement device or user through RSA and stores them in the security module. When playing video, the AES key is first decrypted using the RSA private key, and then the video stream is decrypted online. The security module is an HSM or encrypted file, configured with a key storage and expiration destruction mechanism, and can only be triggered for decryption by authorized terminals.

6. The Linux-based law enforcement recorder data acquisition system according to claim 1, characterized in that: The RFID allocation module identifies police officers through RFID card readers, automatically allocates law enforcement recorders, and establishes a binding between users, devices, and time periods. When uploading videos, it automatically associates user and shift information to achieve accountability.

7. The Linux-based law enforcement recorder data acquisition system according to claim 1, characterized in that: The network access module integrates a dual-path access unit and is configured with a network quality detection and automatic switching mechanism. The Web service module provides a unified API that supports access from multiple terminals and is combined with role-based access control.

8. A Linux-based law enforcement recorder data processing method, applied to any one of the systems described in claims 1-7, characterized in that... Includes the following steps: S1: The RFID distribution module identifies police officers through a card reader, automatically distributes law enforcement recorders, and establishes a binding relationship. S2: After the law enforcement recorder is connected to the system, the packet capture and unlocking module unlocks the device through packet capture analysis; S3: The multi-device management module starts the concurrent upload mechanism to realize data upload and charging; S4: The encryption / decryption module encrypts the video, manages and stores the AES key via RSA; S5: The storage strategy module automatically selects the storage target and completes the storage; S6: Authorized terminals can decrypt, view, and download videos via the Web service module; S7: The system cleans up expired data according to preset rules to ensure storage space.

Images