A shutter-based communication method and shutter
By classifying and labeling data packets, and utilizing load balancing modules and optical splitters, the problem of limited data transmission rate in optical shutters was solved, achieving more stable and efficient data transmission.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- BEIJING SECURITY UNION IT CO LTD
- Filing Date
- 2026-02-26
- Publication Date
- 2026-06-19
AI Technical Summary
In data transmission between intranet devices and optical modules, the transmission rate between components and optical modules is limited, leading to data packet loss and affecting the quality of information transmission.
By classifying data packets, the load balancing module divides them into two transmission paths based on their size and quantity. These paths are then transmitted through different optical modules, and identifiers are set in the data packets to distinguish the transmission routes. Combined with optical splitters and optical amplifiers, data integrity is ensured.
It improves data transmission stability, reduces packet loss rate, increases bandwidth utilization and data transmission rate, and avoids data packet loss.
Smart Images

Figure CN122247657A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of unidirectional transmission technology. Specifically, it relates to a communication method based on an optical shutter and an optical shutter. Background Technology
[0002] Optical shutters are unidirectional isolation hardware and software systems evolved from security isolation gateways. Based on the unidirectional principle of light, they achieve physical isolation between networks and secure data transmission. Their core application scenarios include high-security data exchange between classified and unclassified networks, and between public networks and industry-specific private networks, primarily serving government, military, and financial sectors.
[0003] Although optical shutters have the advantage of high-efficiency transmission, data transmission between internal network devices and optical modules or between external network devices and optical modules is limited by the transmission rate between components and optical modules. This can lead to data packet loss during transmission between components and optical modules, thus affecting the overall information transmission quality of the optical shutter. Summary of the Invention
[0004] Therefore, the technical problem to be solved by the present invention is to provide a communication method and an optical shutter based on an optical shutter, which reduces the packet loss rate of data transmission between components and optical modules by classifying and transmitting different data packets separately, while improving the overall data transmission rate.
[0005] To solve the above-mentioned technical problems, the present invention provides the following technical solution:
[0006] A communication method based on an optical shutter includes the following steps:
[0007] S1) The intranet device sends the data Data0, which needs to be transmitted to the external network, to the data processing module;
[0008] S2) After receiving data Data0, the data processing module counts the storage size occupied by data packet Package0 in Data0 to form data information Data1, and sends data information Data1 to the load balancing module;
[0009] S3) The load balancing module forms a sending strategy related to data Data0 based on the preset load balancing strategy and the received data information Data1, and sends the sending strategy to the data processing module;
[0010] S4) The data processing module packages the data packet Package0 in Data0 into a data packet Package1 that meets the maximum transmission unit requirement according to the sending strategy, and sends the data packet Package1 and the sending strategy to the data sending module together.
[0011] S5) The data sending module sends the data packet Package1 from the data processing module to the data sorting module via the first optical module, the second optical module, the third optical module and the fourth optical module according to the sending strategy;
[0012] S6) The data processing module processes the received data packet Package1 and sends it to the external network device.
[0013] In the aforementioned communication method based on optical shutters, when the load balancing module forms a transmission strategy, it divides the data packet Package0 into data packets transmitted via the first optical module and data packets transmitted via the second optical module according to the data information Data1 through the following steps:
[0014] S3-1) Calculate the number N1 of the packaged data packets Package1 based on the standard packet size, sort the data packets Package0 according to the number of data packets Package1 obtained after packetization, and mark the sequence number of the data packets Package1 obtained by each data packet Package0 to obtain the ranking table;
[0015] S3-2) Calculate the median number of data packets in Package1. and the median storage size occupied by Package0 Confirm that the occupied storage size is less than or equal to The position of data packet Package0 in the ranking table and the lowest ranking number M of the data packet Package1 obtained by packaging Package0, when M is less than or equal to When the ranking number is less than or equal to The data packet Package1 is divided into data packets transmitted via the first optical module. When M is greater than When the ranking is less than or equal to The data packet Package1 is divided into data packets transmitted via the first optical module.
[0016] In the above-described optical gate-based communication method, in step S4), when the data processing module converts the data packet transmitted via the first optical module into a data packet Package1 that meets the maximum transmission unit requirement, it sets an identifier Sign1 in the header of the data packet Package1 to indicate that the data packet was transmitted via the first optical module; simultaneously, when the data processing module converts the data packet transmitted via the second optical module into a data packet Package1 that meets the maximum transmission unit requirement, it sets an identifier Sign2 in the header of the data packet Package1 to indicate that the data packet was transmitted via the first optical module; in step S5), the data sending module selects the optical module for transmitting the data packet Package1 according to the identifier Sign1 and the identifier Sign2.
[0017] In the above-mentioned communication method based on optical shutters, in step S4), the data processing module sends the data packet Package1 to the data storage module for storage.
[0018] In the above-mentioned communication method based on optical shutters, in step S1), the intranet device sends the data Data0 that needs to be transmitted to the external network to the data processing module and at the same time sends the data Data0 to the data storage module for storage.
[0019] A light shutter, comprising:
[0020] The intranet unit provides access communication ports for intranet devices. The intranet unit includes a data processing module, a load balancing module, a data transmission module, a first optical module, and a second optical module. The data processing module is used to collect information on the size of data packets from intranet devices and to package the data packets. The load balancing module formulates a transmission strategy based on a preset load balancing strategy and the size of each data packet. The data transmission module is used to send the packaged data packets outward through the first optical module or the second optical module according to the transmission strategy.
[0021] The external network unit provides access communication ports for external network devices; the external network unit includes a data processing module, a flash memory module, a third optical module, and a fourth optical module.
[0022] The intranet device communicates with the data processing module, which in turn communicates with the load balancing module and the data transmission module. The data transmission module communicates with the first optical module and the second optical module. The first optical module communicates unidirectionally with the third optical module, and the second optical module communicates unidirectionally with the fourth optical module. The fourth optical module and the third optical module communicate with the data processing module, which in turn communicates with the flash memory module and the extranet device. The flash memory module also communicates with the extranet device.
[0023] The aforementioned optical shutter also includes a data storage module in its intranet unit that communicates with both the intranet devices and the data processing module.
[0024] The aforementioned optical shutter, within its internal network unit, also includes a first optical splitter, a second optical splitter, and a verification module. The first optical module communicates with the third optical module via the first optical splitter, and the second optical module communicates with the fourth optical module via the second optical splitter. One optical signal output terminal of the first optical splitter communicates with the optical signal receiving terminal of the first optical module, and the first optical module communicates with the verification module. One optical signal output terminal of the second optical splitter communicates with the optical signal receiving terminal of the second optical module, and the second optical module communicates with the verification module. The verification module communicates with both the data transmission module and the data storage module.
[0025] The aforementioned optical shutter has a first data transmission control submodule and a second data transmission control submodule within its data transmission module. Both the first data transmission control submodule and the second data transmission control submodule are used to control the data packet transmission speed.
[0026] The aforementioned optical shutter has an optical amplifier at the optical signal output terminals of both the first and second optical splitters.
[0027] The technical solution of the present invention achieves the following beneficial technical effects:
[0028] 1. By transmitting larger and smaller data packets in a concentrated manner, the stability of data transmission between components and optical modules is improved, reducing the risk of packet loss caused by frequent fluctuations in the size of transmitted data packets during data transmission, while also improving the overall bandwidth utilization.
[0029] 2. By controlling the data packet sending speed, queuing during data transmission can be reduced, thereby avoiding data packet loss caused by data transmission queuing. Attached Figure Description
[0030] Figure 1 This is a schematic diagram illustrating the working principle of the optical shutter in this invention;
[0031] Figure 2 This is a schematic diagram illustrating the data transmission process using the optical shutter of this invention. Detailed Implementation
[0032] The present invention will be further explained below with reference to examples.
[0033] like Figure 1 As shown, an optical shutter includes an internal network unit and an external network unit. The internal network device is bidirectionally connected to the internal network unit, the internal network unit is unidirectionally connected to the external network unit via optical fiber, and the external network unit is bidirectionally connected to the external network device.
[0034] In this embodiment, the intranet unit provides access communication ports for intranet devices. The intranet unit includes a data processing module, a load balancing module, a data transmission module, a first optical module, and a second optical module. The data processing module collects data packet size information from the intranet devices and packages the data packets. The load balancing module formulates a transmission strategy based on a preset load balancing strategy and the size of each data packet. The data transmission module transmits the packaged data packets outwards via the first or second optical module according to the transmission strategy. The extranet unit provides access communication ports for extranet devices. The extranet unit includes a data processing module, a flash memory module, a third optical module, and a fourth optical module. The intranet devices are communicatively connected to the data processing module. The data processing module is communicatively connected to the load balancing module and the data transmission module. The data transmission module is communicatively connected to the first and second optical modules. The first and third optical modules have a one-way communication connection, as do the second and fourth optical modules. The fourth and third optical modules are communicatively connected to the data processing module. The data processing module is communicatively connected to the flash memory module and the extranet devices. The flash memory module is also communicatively connected to the extranet devices.
[0035] Given the limitation of data processing speed of the data processing module when the intranet device transmits data to the intranet unit, the present invention further includes a data storage module in the intranet unit that is communicatively connected to both the intranet device and the data processing module. This data storage module is used to store the data sent by the intranet device to the data processing module, the data processed by the data processing module that has not yet been sent to the data sending module, and other data information that needs to be temporarily stored.
[0036] To avoid data loss during the conversion of data into optical signals by the optical modules, this invention includes a first optical splitter, a second optical splitter, and a verification module within the intranet unit. The first optical module communicates with a third optical module via the first optical splitter, and the second optical module communicates with a fourth optical module via the second optical splitter. One optical signal output terminal of the first optical splitter communicates with the optical signal receiving terminal of the first optical module, and the first optical module communicates with the verification module. Similarly, one optical signal output terminal of the second optical splitter communicates with the optical signal receiving terminal of the second optical module, and the second optical module communicates with the verification module. The verification module communicates with both the data transmission module and the data storage module. Both the optical signal output terminals of the first and second optical splitters are equipped with optical amplifiers. In this configuration, the optical modules convert a portion of the optical signal emitted by the splitter into data information and send it to the verification module. The verification module compares this data information with the data packets processed by the data processing module. If any data packets are missing, the data transmission module retransmits the missing packets, thus reducing the impact of packet loss during data transmission within the intranet unit.
[0037] To reduce the impact of queuing during data transmission, this invention includes a first data transmission control submodule and a second data transmission control submodule within the data transmission module. Both the first and second data transmission control submodules are used to control the data packet transmission speed. Specifically, the first data transmission control submodule controls the speed at which data packets are sent to the first optical module, and the second data transmission submodule controls the speed at which data packets are sent to the second optical module.
[0038] When the optical shutter of this invention is used for communication between internal and external networks, the internal network device is connected to the internal network unit, and the external network device is connected to the external network unit. Then, the internal network device sends data to the external network device through the optical shutter.
[0039] like Figure 2 As shown, the specific steps are as follows:
[0040] S1) The intranet device sends the data Data0, which needs to be transmitted to the external network, to the data processing module;
[0041] S2) After receiving data Data0, the data processing module counts the storage size occupied by data packet Package0 in Data0 to form data information Data1, and sends data information Data1 to the load balancing module;
[0042] S3) The load balancing module forms a sending strategy related to data Data0 based on the preset load balancing strategy and the received data information Data1, and sends the sending strategy to the data processing module;
[0043] S4) The data processing module packages the data packet Package0 in Data0 into a data packet Package1 that meets the maximum transmission unit requirement according to the sending strategy, and sends the data packet Package1 and the sending strategy to the data sending module together.
[0044] S5) The data sending module sends the data packet Package1 from the data processing module to the data sorting module via the first optical module, the second optical module, the third optical module and the fourth optical module according to the sending strategy;
[0045] S6) The data processing module processes the received data packet Package1 and sends it to the external network device.
[0046] When performing load balancing on data to be transmitted, it can be categorized according to the requirements of the data to be transmitted, or according to the size of the data packets, and then transmitted separately. In this invention, the categorization is based on the size and total number of data packets to be transmitted. Specifically, when forming a transmission strategy, the load balancing module divides data packet Package0 into data packets to be transmitted via the first optical module and data packets to be transmitted via the second optical module according to data information Data1 through the following steps:
[0047] S3-1) Calculate the number N1 of the packaged data packets Package1 based on the standard packet size, sort the data packets Package0 according to the number of data packets Package1 obtained after packetization, and mark the sequence number of the data packets Package1 obtained by each data packet Package0 to obtain the ranking table;
[0048] S3-2) Calculate the median number of data packets in Package1. and the median storage size occupied by Package0 Confirm that the occupied storage size is less than or equal to The position of data packet Package0 in the ranking table and the lowest ranking number M of the data packet Package1 obtained by packaging Package0, when M is less than or equal to When the ranking number is less than or equal to The data packet Package1 is divided into data packets transmitted via the first optical module. When M is greater than When the ranking is less than or equal to The data packet Package1 is divided into data packets transmitted via the first optical module.
[0049] The standard packet size is the maximum transmission unit size when transmitting data according to a network protocol. If no protocol is used for transmission, the user can set the standard packet size according to their own situation. In addition, the user can also set the allocation rules to divide the data packet Package0 into data packets transmitted via the first optical module and data packets transmitted via the second optical module.
[0050] In this invention, the above-mentioned strategy is used to divide data packet Package0 into data packet Packages transmitted via the first optical module. 0-1 and data packets transmitted via the second optical module. 0-2This ensures that data packets with large storage requirements can be transmitted through the same route, and that fewer data packets with small storage requirements are packaged during data transmission. This reduces the impact of frequent fluctuations in data packet size, improves the stability of data transmission, and reduces packet loss during data transmission. At the same time, it can make full use of the first and second optical modules, avoiding a situation where one optical module is heavily loaded while the other is idle.
[0051] After the data processing module classifies the data packet Package0, it can store different types of data packets in different folders, then package them, and store the packaged data packets in different folders. The data sending module then uses the folders to distinguish which data packets are sent via the first optical module and which are sent via the second optical module. Similarly, different identifiers can be set in the header of the packaged data packets for differentiation. In this invention, in step S4), when the data processing module packages the data packet transmitted via the first optical module into a data packet Package1 that meets the maximum transmission unit requirement, it sets an identifier Sign1 in the header of the data packet Package1 to indicate that the data packet is transmitted via the first optical module. At the same time, when the data processing module packages the data packet transmitted via the second optical module into a data packet Package1 that meets the maximum transmission unit requirement, it sets an identifier Sign2 in the header of the data packet Package1 to indicate that the data packet is transmitted via the first optical module. In step S5), the data sending module selects the optical module for transmitting data packet Package1 based on identifiers Sign1 and Sign2.
[0052] In order not to affect the data packaging process of the data processing module, the data processing module sends the data package Package1 to the data storage module for storage. In step S1), the intranet device sends the data Data0 that needs to be transmitted to the external network to the data processing module and at the same time sends the data Data0 to the data storage module for storage.
[0053] In step S6), when data transmission is achieved using the first optical module, the second optical module, the third optical module, and the fourth optical module, the first optical splitter splits the optical signal emitted by the transmitting end of the first optical module into two optical signals, and one of the optical signals is sent back to the receiving end of the first optical module. The first optical module converts the received optical signal into data information and sends it to the verification module. Then, the verification module outputs the integrity of the data from the first optical module. Similarly, the second optical splitter splits the optical signal emitted by the transmitting end of the second optical module into two optical signals, and one of the optical signals is sent back to the receiving end of the second optical module. The second optical module converts the received optical signal into data information and sends it to the verification module. Then, the verification module outputs the integrity of the data from the second optical module, thereby further improving the integrity of data transmission.
[0054] When using the optical gate of this invention for data transmission, when a large number of data packets occupying storage size exceeding the maximum transmission unit appear, the data transmission rate is significantly improved compared to existing optical gates, and the packet loss rate is also significantly reduced. However, when the number of large data packets and small data packets in the data is roughly equal, the data transmission rate improvement is not significant, but the packet loss rate when large data packets are divided and transmitted is significantly suppressed.
[0055] Obviously, the above embodiments are merely illustrative examples for clear explanation and are not intended to limit the implementation. Those skilled in the art will recognize that other variations or modifications can be made based on the above description. It is neither necessary nor possible to exhaustively list all possible implementations here. However, obvious variations or modifications derived therefrom are still within the scope of protection of the claims of this patent application.
Claims
1. A communication method based on an optical shutter, characterized in that, Includes the following steps: S1) The intranet device sends the data Data0, which needs to be transmitted to the external network, to the data processing module; S2) After receiving data Data0, the data processing module counts the storage size occupied by data packet Package0 in Data0 to form data information Data1, and sends data information Data1 to the load balancing module; S3) The load balancing module forms a sending strategy related to data Data0 based on the preset load balancing strategy and the received data information Data1, and sends the sending strategy to the data processing module; S4) The data processing module packages the data packet Package0 in Data0 into a data packet Package1 that conforms to the sending policy standard according to the sending policy, and sends the data packet Package1 and the sending policy together to the data sending module; S5) The data sending module sends the data packet Package1 from the data processing module to the data sorting module via the first optical module, the second optical module, the third optical module and the fourth optical module according to the sending strategy; S6) The data processing module processes the received data packet Package1 and sends it to the external network device.
2. The communication method based on an optical shutter according to claim 1, characterized in that, When formulating the transmission strategy, the load balancing module divides data packet Package0 into data packets transmitted via the first optical module and data packets transmitted via the second optical module according to data information Data1 through the following steps: S3-1) Calculate the number N1 of the packaged data packets Package1 based on the standard packet size, sort the data packets Package0 according to the number of data packets Package1 obtained after packetization, and mark the sequence number of the data packets Package1 obtained by each data packet Package0 to obtain the ranking table; S3-2) Calculate the median number of data packets in Package1. and the median storage size occupied by Package0 Confirm that the occupied storage size is less than or equal to The position of data packet Package0 in the ranking table and the lowest ranking number M of the data packet Package1 obtained by packaging Package0, when M is less than or equal to When the ranking number is less than or equal to The data packet Package1 is divided into data packets transmitted via the first optical module. When M is greater than When the ranking is less than or equal to The data packet Package1 is divided into data packets transmitted via the first optical module.
3. The communication method based on an optical shutter according to claim 2, characterized in that, In step S4), when the data processing module converts the data packet transmitted via the first optical module into a data packet Package1 that meets the maximum transmission unit requirement, it sets an identifier Sign1 in the header of the data packet Package1 to indicate that the data packet was transmitted via the first optical module; at the same time, when the data processing module converts the data packet transmitted via the second optical module into a data packet Package1 that meets the maximum transmission unit requirement, it sets an identifier Sign2 in the header of the data packet Package1 to indicate that the data packet was transmitted via the first optical module; in step S5), the data sending module selects the optical module for transmitting the data packet Package1 according to the identifier Sign1 and the identifier Sign2.
4. The communication method based on an optical shutter according to claim 3, characterized in that, In step S4), the data processing module sends the data packet Package1 to the data storage module for storage.
5. The communication method based on an optical shutter according to claim 4, characterized in that, In step S1), the intranet device sends the data Data0 that needs to be transmitted to the external network to the data processing module, and at the same time sends the data Data0 to the data storage module for storage.
6. A light shutter, characterized in that, include: The intranet unit provides access communication ports for intranet devices. The intranet unit includes a data processing module, a load balancing module, a data transmission module, a first optical module, and a second optical module. The data processing module is used to collect information on the size of data packets from intranet devices and to package the data packets. The load balancing module formulates a transmission strategy based on a preset load balancing strategy and the size of each data packet. The data transmission module is used to send the packaged data packets outward through the first optical module or the second optical module according to the transmission strategy. The external network unit provides access communication ports for external network devices; the external network unit includes a data processing module, a flash memory module, a third optical module, and a fourth optical module. The intranet device communicates with the data processing module, which in turn communicates with the load balancing module and the data transmission module. The data transmission module communicates with the first optical module and the second optical module. The first optical module communicates unidirectionally with the third optical module, and the second optical module communicates unidirectionally with the fourth optical module. The fourth optical module and the third optical module communicate with the data processing module, which in turn communicates with the flash memory module and the extranet device. The flash memory module also communicates with the extranet device.
7. The optical shutter according to claim 6, characterized in that, The intranet unit also includes a data storage module that communicates with the intranet devices and the data processing module.
8. The optical shutter according to claim 7, characterized in that, The intranet unit also includes a first optical splitter, a second optical splitter, and a verification module. The first optical module communicates with the third optical module through the first optical splitter, and the second optical module communicates with the fourth optical module through the second optical splitter. One optical signal output terminal of the first optical splitter communicates with the optical signal receiving terminal of the first optical module, and the first optical module communicates with the verification module. One optical signal output terminal of the second optical splitter communicates with the optical signal receiving terminal of the second optical module, and the second optical module communicates with the verification module. The verification module communicates with both the data transmission module and the data storage module.
9. The optical shutter according to claim 8, characterized in that, The data transmission module includes a first data transmission control submodule and a second data transmission control submodule, both of which are used to control the data packet transmission speed.
10. The optical shutter according to claim 8, characterized in that, Optical amplifiers are provided at the optical signal output terminals of both the first and second beam splitters.