Cross-domain unidirectional communication apparatus and method

Abstract

The application discloses a cross-domain one-way communication device and method, and the device comprises a one-way physical isolation channel, a hardware check unit, a monotonic counter; pure hardware one-way transmission data, anti-tampering and anti-replay, abnormal frame hardware interception, and key solidification storage. The application improves communication stability and is suitable for a cross-domain data transmission scene of a smart phone.

Description

Technical Field

[0001] This invention relates to the field of hardware communication technology, specifically to a physically isolated unidirectional hardware communication device and its execution method. Background Technology

[0002] Existing cross-domain communication uses bidirectional protocol transmission and relies on software protocol stacks to process data. This results in drawbacks such as data being easily modified, frame sequence disorder, and the inability to quickly intercept abnormal frames, leading to low device communication stability. Summary of the Invention

[0003] This invention provides a cross-domain unidirectional communication device and method. The entire link adopts unidirectional physical isolation transmission, the hardware completes the verification operation, the counter ensures the uniqueness of the frame sequence, abnormal frames are blocked by hardware, and there is no protocol stack or data buffer structure in the entire domain.

[0004] Differences from existing technologies 1. Existing technology uses bidirectional return transmission, while this solution is purely unidirectional with no reverse pin and no data return path; 2. Existing technologies use software for verification and processing; this solution involves pure hardware parallel computation with no scheduling processing latency. 3. Existing technologies lack anti-replay structures, and the counter in this solution cannot be rolled back, thus avoiding the transmission of duplicate frames; 4. Existing technologies involve exposed key transmission, while this solution uses fuse-based computation, ensuring the key remains within the chip throughout the entire process. Beneficial effects

[0005] 1. Unidirectional isolated transmission with no reverse path reduces the security risk of data modification; 2. Hardware-based verification calculations offer fast processing speeds and improve data transmission stability; 3. Monotonic counting structure avoids interference from duplicate data frames and ensures transmission uniqueness; 4. Abnormal frame blocking structure filters invalid data and improves system stability; 5. Securely store encryption keys to reduce the security risks of exposing encryption parameters. Detailed Implementation

[0006] This device is used in smartphone communication systems, connecting the application processor domain, baseband communication domain, and Bluetooth near-field communication domain; each functional domain is connected through a unidirectional physical isolation channel, and data is transmitted only in one direction.

[0007] The transmitting domain generates a data checksum in hardware, and a monotonic counter increments frame by frame without rollback; the receiving domain completes hardware verification, and timeout and erroneous data frames are instantly blocked; the communication key is locked by a fuse at the factory, and no parameters are exposed throughout the operation; the entire domain has no communication protocol stack and no data buffer, making it suitable for mobile phone Bluetooth, near-field communication, and baseband data transmission scenarios.

Claims

1. A cross-domain unidirectional communication device, comprising a transmitting domain, a receiving domain, and a unidirectional physically isolated channel, characterized in that: The transmitting field has a built-in hardware verification generation unit and a monotonic counter; the receiving field has a built-in hardware verification unit and a timestamp verification unit. Communication parameters and verification keys are stored in a one-time programmable storage unit; data frames are transmitted unidirectionally through a one-way physically isolated channel without any reverse feedback link. When verification fails or the timestamp is abnormal, the receiving field directly discards the data frame; the monotonic counter is used to ensure the uniqueness of the frame sequence; the timestamp verification unit is used to intercept timeout abnormal frames.

2. The apparatus according to claim 1, characterized in that, The unidirectional physical isolation channel has no reverse copper foil pins, and the isolation device has a complete DC disconnection and no data return.

3. The apparatus according to claim 1, characterized in that, The hardware verification generation unit and the verification unit are pure combined copper foil parallel operations without iteration, and the frame data level is directly processed.

4. The apparatus according to claim 1, characterized in that, The monotonic counter increments by pulse through a continuous stream, cannot be rolled back, has no zeroing function, and will physically discard data frames upon overflow.

5. The apparatus according to claim 1, characterized in that, The timestamp verification unit is a fixed-level pass-through judgment with no configuration, and the copper foil of the timeout frame is momentarily blocked.

6. The apparatus according to claim 1, characterized in that, The one-time programmable memory unit is a fuse-type fixed, erase-and-write circuit, and the key is completely exposed throughout the operation.

7. The apparatus according to claim 1, characterized in that, The communication parameters and verification keys are factory-locked by fuses, there is no user interface, and the parameters are fixed throughout the entire link.

8. A cross-domain one-way communication method, applied to the apparatus of claim 1, characterized in that, include: The transmission domain is framed based on fixed parameters and generates a unit pass-through check code through hardware verification. The monotonic counter pulse increments and binds to the frame sequence; the data frame is transmitted unidirectionally through a unidirectional physical isolation channel; the receiving domain performs pass-through verification of the verification level and fixed threshold verification of the timestamp; if the verification is valid, the data is received; if the verification is abnormal, the frame is discarded via hardware pass-through; the process is a fixed clock pass-through timing and has no software scheduling.

9. The method according to claim 8, characterized in that, The device is a unidirectional communication hardware module with no communication protocol stack, no buffer, and full-frame processing copper foil hardwire.