Air data oriented data encryption storage method and system, and storage medium

Abstract

The application provides an aviation data-oriented data encryption storage method and system and a storage medium, and the method comprises the following steps: determining an estimated connected window period based on data stream characteristics and motion state parameters of an aircraft, performing granularity adaptation on the data stream characteristics based on the estimated connected window period, and generating a time series data block sequence; predicting a next-hop edge server based on the motion state parameters and the geographical topology of an edge server group, and establishing a joint cache channel of a current edge server and the next-hop edge server; encrypting the time series data block sequence into an encrypted data stream based on the joint cache channel, and writing the encrypted data stream into the cache area of the two edge servers; and if a write success response of the two edge servers is received, solidifying the data in the cache area to a permanent storage layer based on an event trigger signal of the aircraft crossing a coverage area boundary, and generating a metadata chain of handover information of the new and old edge servers. The application improves the reliability of the encryption storage of the aviation data of the aircraft in a high-speed moving scene.

Description

Technical Field

[0001] This invention relates to the field of computer technology, and in particular to a data encryption storage method, system and storage medium for aviation data. Background Technology

[0002] In real-time aviation big data transmission scenarios, aircraft move at high speeds across the coverage areas of multiple ground edge servers (such as 5G base stations and airport edge nodes). Existing aviation data storage methods typically adopt an "instant write" mode, meaning that when the airborne terminal connects to the current edge server, it immediately establishes a TCP connection and transmits data.

[0003] However, due to the high-speed movement of aircraft and the Doppler effect, wireless links exhibit extremely high jitter and short connectivity windows. When an aircraft switches from one edge server coverage area to another, the traditional instant write mode forces the ongoing transmission connection to be disconnected. At this time, sent but unacknowledged data packets are often discarded due to timeouts, triggering full or large-block retransmissions by upper-layer protocols. This phenomenon of "switching is interruption, interruption is retransmission" causes huge resource waste in bandwidth-constrained aviation links and results in "data gaps" in critical flight data at the moment of switching, affecting data continuity and integrity. In addition, existing edge collaborative storage lacks the ability to perceive "connectivity windows" and cannot dynamically adjust the data packet sending strategy based on the remaining connection time, resulting in the transmission of large data blocks just before the link is about to be disconnected, causing data truncation and verification failures. Summary of the Invention

[0004] This invention provides a data encryption storage method, system, and storage medium for aviation data, aiming to solve the technical problems of data loss, high retransmission rate, and transmission interruption caused by high-speed aircraft movement during edge node switching in the background art, realize seamless and continuous transmission of aviation data in high-speed movement scenarios, and improve the reliability of aviation data encryption storage in high-speed movement scenarios.

[0005] In a first aspect, the present invention provides a data encryption and storage method for aviation data, comprising: Based on the data stream characteristics of the aviation data to be stored and the aircraft's motion state parameters, the estimated connectivity window period of the current communication link is determined, and the data stream characteristics are granularly adapted based on the estimated connectivity window period to generate a time-series data block sequence. Based on the motion state parameters and the geographical topology of the edge server group, predict the next-hop edge server that can be reached within the estimated connectivity window period, and initiate a collaborative storage handshake request to the current edge server and the next-hop edge server to establish a joint cache channel. Based on the joint caching channel, the time-series data block sequence is encrypted into an encrypted data stream and written into the cache areas of the current edge server and the next-hop edge server; If a write success response is received from both edge servers, the data in the cache is solidified to the permanent storage layer based on the event trigger signal of the aircraft crossing the coverage area boundary, the old session key is destroyed, and a metadata chain of handover information between the old and new edge servers is generated.

[0006] In a second aspect, the present invention also provides a data encryption storage system for aviation data, used to implement the data encryption storage method for aviation data as described in the first aspect; the data encryption storage system for aviation data includes: The temporal granularity adaptation module is used to determine the estimated connectivity window of the current communication link based on the data stream characteristics of the aviation data to be stored and the motion state parameters of the aircraft, and to perform granular adaptation on the data stream characteristics based on the estimated connectivity window to generate a temporal data block sequence. The joint cache establishment module is used to predict the next-hop edge server that can be reached within the estimated connectivity window period based on the motion state parameters and the geographical topology of the edge server group, and to initiate a collaborative storage handshake request to the current edge server and the next-hop edge server to establish a joint cache channel. The data encryption storage module is used to encrypt the time-series data block sequence into an encrypted data stream based on the joint cache channel and write it into the cache area of ​​the current edge server and the next-hop edge server; The data solidification storage module is used to solidify the data in the cache to the permanent storage layer based on the event trigger signal of the aircraft crossing the coverage area boundary if a write success response is received from both edge servers, destroy the old session key, and generate a metadata chain of handover information between the old and new edge servers.

[0007] Thirdly, the present invention also provides an electronic device, comprising: a memory for storing computer software programs; and a processor for reading and executing the computer software programs, thereby realizing the data encryption storage method for aviation data as described above.

[0008] Fourthly, the present invention also provides a non-transitory computer-readable storage medium storing a computer software program, which, when executed by a processor, implements the data encryption storage method for aviation data as described above.

[0009] Fifthly, the present invention also provides a computer program product, including a computer program that, when executed by a processor, implements the data encryption and storage method for aviation data as described above.

[0010] The data encryption and storage method for aviation data provided in this invention determines the estimated connectivity window of the current communication link by using the data stream characteristics of the aviation data to be stored and the aircraft's motion state parameters. It then performs granular adaptation of the data stream characteristics to generate a time-series data block sequence, obtaining data blocks of a reasonable granularity that fits the connectivity window. This avoids data truncation and verification failures caused by sending large data blocks just before the link is about to break, which is due to a lack of connectivity window awareness in the prior art. Based on the motion state parameters and the geographical topology prediction of the edge server group, the method identifies the next-hop edge server reachable within the estimated connectivity window and initiates a collaborative storage handshake request with both the current and next-hop edge servers to establish a joint caching channel. This results in a cross-edge node collaborative storage channel, solving the problem of no collaborative mechanism and easy connection interruption during edge node switching in the traditional mode. Based on the joint caching channel, the time-series data block sequence is encrypted into an encrypted data stream and written to the cache areas of both edge servers, resulting in encrypted data synchronously cached at both ends. This avoids data loss caused by switching interruptions during single-node storage. Based on the successful write responses from both edge servers, when the aircraft crosses the coverage area boundary, the cached data is solidified to the permanent storage layer, the old session key is destroyed, and a metadata chain is generated. This results in permanent and secure data storage and an orderly record of node handover, avoiding packet loss and full retransmission caused by data transmission interruption during handover, and filling the "data gap" at the moment of handover. Therefore, this invention solves the technical problems of data loss, high retransmission rate, and transmission interruption during edge node handover caused by high-speed aircraft movement in the background art, realizing seamless and continuous transmission of aviation data in high-speed movement scenarios, and improving the reliability of encrypted storage of aviation data in high-speed movement scenarios. Attached Figure Description

[0011] Figure 1 This is a flowchart of a data encryption and storage method for aviation data provided in an embodiment of the present invention; Figure 2 This is a structural diagram of a data encryption and storage system for aviation data provided in an embodiment of the present invention; Figure 3 An embodiment diagram of the electronic device provided in this invention; Figure 4 An embodiment diagram of a computer-readable storage medium provided in accordance with the present invention. Detailed Implementation

[0012] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0013] In the description of this invention, the terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of indicated technical features. Thus, a feature defined as "first" or "second" may explicitly or implicitly include one or more of the stated features. In the description of this invention, "a plurality of" means two or more, unless otherwise explicitly specified.

[0014] In the description of this invention, the term "for example" is used to mean "used as an example, illustration, or description." Any embodiment described as "for example" in this invention is not necessarily to be construed as being more preferred or advantageous than other embodiments. The following description is provided to enable any person skilled in the art to make and use the invention. Details are set forth in the following description for purposes of explanation. It should be understood that those skilled in the art will recognize that the invention can be made without using these specific details. In other instances, well-known structures and processes will not be described in detail to avoid obscuring the description of the invention with unnecessary detail. Therefore, the invention is not intended to be limited to the embodiments shown, but is consistent with the broadest scope of the principles and features disclosed herein.

[0015] Optionally, see Figure 1 , Figure 1 This is a flowchart of a data encryption and storage method for aviation data provided by the present invention. In this embodiment of the invention, the executing entity of the data encryption and storage method for aviation data is an aviation encryption system. Therefore, the data encryption and storage method for aviation data includes: Step 10: Based on the data stream characteristics of the aviation data to be stored and the aircraft's motion state parameters, determine the estimated connectivity window of the current communication link, and perform granular adaptation of the data stream characteristics based on the estimated connectivity window to generate a time-series data block sequence.

[0016] Optionally, the aviation encryption system acquires the data stream characteristics of the aviation data to be stored. These data stream characteristics refer to various inherent attributes of the aviation data during transmission, specifically including data generation frequency, total data volume, data transmission rate, and data type (such as aircraft flight attitude data, flight parameter monitoring data, and equipment operating status data). Simultaneously, the aviation encryption system acquires the aircraft's motion state parameters. These motion state parameters refer to various physical parameters that reflect the aircraft's real-time flight status, specifically including the aircraft's flight speed, altitude, heading, acceleration, turning angle, and current latitude and longitude coordinates.

[0017] The aviation encryption system determines the estimated connectivity window period of the current communication link based on data stream characteristics and aircraft motion state parameters. The estimated connectivity window period refers to the expected time interval during which the current communication link can maintain stable connectivity and meet data transmission requirements. The determination process involves: combining data transmission rate and total data volume requirements from the data stream characteristics, as well as the aircraft's flight speed, heading, and current latitude and longitude; analyzing the signal strength variation trend of the communication link between the aircraft and the currently accessed edge server under the current flight state; excluding periods of signal interruption or signal attenuation exceeding transmission requirements; and determining a continuous time interval capable of stably transmitting the aviation data to be stored, which is the estimated connectivity window period. The duration of the estimated connectivity window period must meet the basic requirements for the transmission and caching of the aviation data to be stored.

[0018] The aviation encryption system, based on a predetermined estimated connectivity window, performs granular adaptation on data stream characteristics to generate a sequence of time-series data blocks. Granular adaptation refers to dividing the aviation data to be stored into several independent time-series data blocks according to a certain size and chronological order, based on the duration of the estimated connectivity window and the transmission capacity of the communication link (determined by both data stream characteristics and communication link status). These time-series data blocks are arranged in the order of their generation, forming the sequence. The purpose of granular adaptation is to ensure that each time-series data block can be transmitted within the estimated connectivity window, avoiding transmission timeouts due to excessively large data blocks or low transmission efficiency due to excessively small data blocks.

[0019] In one embodiment, it is assumed that the aviation data to be stored is aircraft flight attitude monitoring data, and its data stream characteristics are as follows: the data generation frequency is 1 data per second, the total data volume is 1000 data, the data transmission rate is 5 data per second, and the data type is critical flight safety data; the aircraft's motion state parameters are as follows: flight speed is 800 km / h, flight altitude is 10000 meters, flight heading is due east, flight acceleration is 0 (uniform flight), and the current latitude and longitude coordinates are (30.1234°N, 120.5678°E).

[0020] Based on the above parameter analysis, the aviation encryption system determines that the current communication link signal strength is stable. Considering the aircraft's uniform flight speed, it anticipates that the communication link will remain stable for the next 200 seconds, thus establishing a 200-second estimated connection window. Based on this estimated window, the aviation encryption system adapts the data stream characteristics to a specific granularity: since the data transmission rate is 5 data points per second, 1000 data points can be transmitted in 200 seconds, perfectly matching the total data volume. Therefore, the 1000 flight attitude monitoring data points are divided into 5 time-series data blocks of 200 data points each, arranged chronologically. These 5 time-series data blocks are then sorted according to their generation time, generating a time-series data block sequence. Each time-series data block can be transmitted within 40 seconds.

[0021] Step 20: Based on motion state parameters and the geographical topology of the edge server group, predict the next-hop edge server that can be reached within the estimated connectivity window, and initiate a collaborative storage handshake request to the current edge server and the next-hop edge server to establish a joint cache channel.

[0022] Optionally, the aviation encryption system obtains the geographical topology of the edge server group, wherein the geographical topology of the edge server group refers to the geographical distribution information of all edge servers in the edge server group, specifically including the latitude and longitude coordinates of each edge server, the coverage area (i.e., the geographical area in which each edge server can provide stable communication and storage services), the operating status of the server (such as whether it is working properly, cache capacity, processing capacity, etc.), and the communication link connection between each edge server.

[0023] Based on the aircraft motion state parameters and the geographical topology of the edge server group obtained above, the aviation encryption system predicts the next-hop edge server that can be reached within the estimated connectivity window, as described in steps 201 to 205.

[0024] The aviation encryption system initiates a collaborative storage handshake request to the current edge server and the next-hop edge server to establish a joint cache channel. The collaborative storage handshake request is a request signal sent by the current edge server and the next-hop edge server to negotiate collaborative storage parameters, confirm the storage capacity of both parties, and the status of the communication link. This request signal includes estimated connectivity window information, relevant parameters of the time-series data block sequence (such as data block size, quantity, and transmission rate), and relevant configuration requirements for the joint cache (such as cache area division and data synchronization method).

[0025] After receiving the collaborative storage handshake request, the current edge server and the next-hop edge server perform self-checks on their own operating status, cache capacity, and communication link status. If the self-checks pass, they return a handshake confirmation response to the aviation encryption system, confirming that they have collaborative storage capabilities and agree to participate in the joint caching.

[0026] After receiving the handshake confirmation response from both edge servers, the aviation encryption system completes the final negotiation of collaborative storage parameters and establishes a joint caching channel. This joint caching channel refers to a dedicated communication channel between the current edge server and the next-hop edge server, specifically used for transmitting aviation data to be stored and realizing collaborative data caching. Once the channel is established, it can ensure the security and efficiency of data transmission and ensure that both edge servers can receive and cache data synchronously.

[0027] In one embodiment, edge server A is assumed to be the current edge server, and edge server B is predicted to be the next-hop edge server reachable within the estimated connectivity window. The aviation encryption system sends a collaborative storage handshake request to edge server A (the current edge server) and edge server B (the next-hop edge server). The request includes information such as an estimated connectivity window of 200 seconds, a time-series data block sequence containing 5 data blocks, each data block containing 200 data entries, and a transmission rate of 5 entries per second. It requests both servers to allocate dedicated cache areas for storing this batch of data. Edge server A and edge server B perform self-checks to confirm that they are operating normally, that their cache capacity meets the requirements, and that their communication links with each other are stable. After confirming that they are working normally, that their cache capacity meets the requirements, and that their communication links with each other are stable, both return a handshake confirmation response to the aviation encryption system. Upon receiving the confirmation response, the aviation encryption system negotiates and determines parameters such as the transmission protocol and data synchronization frequency of the joint cache channel, formally establishing the joint cache channel between edge server A and edge server B.

[0028] Step 30: Based on the joint cache channel, encrypt the time-series data block sequence into an encrypted data stream and write it into the cache area of ​​the current edge server and the next-hop edge server.

[0029] Optionally, the aviation encryption system encrypts the sequence of time-series data blocks into an encrypted data stream based on the joint cache channel and writes it into the cache area of ​​the current edge server and the next-hop edge server, as in steps 301 to 304.

[0030] Step 40: If a write success response is received from both edge servers, the data in the cache is solidified to the permanent storage layer based on the event trigger signal of the aircraft crossing the coverage area boundary, the old session key is destroyed, and a metadata chain of handover information between the old and new edge servers is generated.

[0031] Optionally, the aviation encryption system waits to receive write success responses from the current edge server and the next-hop edge server. The write success response refers to the confirmation signal sent by the edge server to the aviation encryption system after it has completely written the encrypted data stream into its own buffer, which is used to inform the aviation encryption system that the data has been successfully written into the buffer.

[0032] If the aviation encryption system receives write success responses from both the current edge server and the next-hop edge server simultaneously, it begins verifying the bidirectional write consistency results between the two edge servers, as detailed in steps 401 to 405. The bidirectional write consistency result refers to whether the encrypted data stream stored in the buffer of the current edge server is completely consistent with the encrypted data stream stored in the buffer of the next-hop edge server.

[0033] If the bidirectional write consistency result is consistent, it indicates that the cached data of the two edge servers are completely synchronized, meeting the conditions for data solidification. At this point, the aviation encryption system, based on the event trigger signal of the aircraft crossing the coverage area boundary, performs the data solidification operation, solidifying the encrypted data stream in the cache areas of the two edge servers to the permanent storage layer. The event trigger signal of the aircraft crossing the coverage area boundary refers to the trigger signal generated when the aircraft is about to leave the coverage area of ​​the current edge server and enter the coverage area of ​​the next-hop edge server, obtained by acquiring the real-time latitude and longitude coordinates of the aircraft and the coverage range of the edge server. This signal is used to trigger the data solidification process, ensuring that the data is permanently stored before the aircraft crosses the coverage area boundary. The permanent storage layer refers to the storage area in the edge server used for long-term data storage. This area has the characteristics of large storage capacity, stable data preservation, and long-term readability. After the data is solidified to the permanent storage layer, long-term data preservation can be achieved, avoiding data loss.

[0034] After the data is solidified, the aviation encryption system destroys the old session key used in this data storage process. The old session key refers to the temporary session key used in step 30 to encrypt the sequence of time-series data blocks. Destroying the old session key can prevent key leakage from causing the encrypted data to be cracked and ensure the long-term security of the data.

[0035] The aviation encryption system generates a metadata chain for the handover information between old and new edge servers. This handover information refers to data handover information between the current edge server (old edge server) and the next-hop edge server (new edge server), specifically including data handover time, total data volume, data type, time-series data block sequence information, and storage address of the permanent storage layer. The metadata chain is a chain-like data structure that organizes the above handover information according to time order and logical relationships. It is used to record the complete data handover process, facilitating subsequent data query, traceability, and management, and ensuring the traceability of the data handover.

[0036] If the bidirectional write result is inconsistent, it indicates that there is a difference in the cached data of the two edge servers, which cannot meet the conditions for data solidification. At this time, the aviation encryption system generates a write failure interruption signal. This signal is used to inform the two edge servers to terminate the current data storage process. At the same time, the aviation encryption system terminates the data solidification process to avoid errors in subsequent data handover and use due to data inconsistency.

[0037] After the process is terminated, the aviation encryption system can re-initiate the collaborative storage handshake request or adjust the data stream granularity adaptation parameters to re-execute the data writing process, depending on the actual situation.

[0038] In one embodiment, assuming that encrypted data streams are synchronously written to the buffers of the current edge server A and the next-hop edge server B, the aviation encryption system receives write success responses from both edge server A and edge server B. Both responses indicate that five encrypted time-series data blocks have been successfully written, with the total data size matching the encrypted data stream. The aviation encryption system triggers a bidirectional write consistency verification, which confirms bidirectional write consistency. At this point, the aviation encryption system monitors the aircraft's latitude and longitude coordinates in real time and discovers that the aircraft's current latitude and longitude coordinates are (30.1234°N, 120.9990°E). It has reached the eastern boundary of the coverage area of ​​edge server A (the radius of edge server A's coverage area is 50 kilometers, and the current location is approximately 50 kilometers from edge server A), and is about to enter the coverage area of ​​edge server B. Therefore, it generates an event trigger signal indicating that the aircraft has crossed the coverage area boundary. Based on the trigger signal, the aviation encryption system instructs edge servers A and B to persist the encrypted data streams in their respective caches to their own permanent storage layers. Edge server A persists the encrypted data streams to the "Aircraft Flight Data-20260420-0800" directory in its permanent storage layer, while edge server B persists the encrypted data streams to the same directory in its permanent storage layer, ensuring consistent data storage addresses. After data persistence is complete, the aviation encryption system calls the key destruction module to completely destroy the old session key (the temporary key used for this encryption) generated in step 30, preventing key leakage. Simultaneously, the aviation encryption system generates a metadata chain for the handover information between the old and new edge servers. The metadata chain includes information such as the handover time (08:05 on April 20, 2026), the total amount of data (1000 flight attitude monitoring data points), the data type (critical flight safety data), the time-series data block sequence information (5 data blocks, 200 data points per block), the permanent storage address of edge server A (Server A - Permanent Storage Layer - Aircraft Flight Data - 20260420-0800), and the permanent storage address of edge server B (Server B - Permanent Storage Layer - Aircraft Flight Data - 20260420-0800). The metadata chain is organized in chronological order to complete the data handover record.

[0039] If the bidirectional write consistency verification result is inconsistent, edge server A shows that 5 data blocks have been written and edge server B shows that 4 data blocks have been written. At this time, the aviation encryption system generates a write failure interrupt signal and sends it to edge server A and edge server B to terminate the current data solidification process. Subsequently, a collaborative storage handshake request can be re-initiated to re-execute the data write operation.

[0040] The embodiments of the present invention solve the technical problems of data loss, high retransmission rate and transmission interruption caused by high-speed aircraft movement during edge node switching, realize seamless and continuous transmission of aviation data in high-speed movement scenarios, and improve the reliability of encrypted storage of aviation data in high-speed movement scenarios.

[0041] Optionally, the process of steps 201 to 205 includes: Step 201: Based on the horizontal velocity component and heading angle in the motion state parameters and the preset time step, calculate the horizontal displacement component of the aircraft per unit time to obtain the displacement vector per unit time.

[0042] Optionally, the horizontal velocity component refers to the aircraft's flight speed in the horizontal direction, i.e., the velocity component excluding the vertical flight speed, used to reflect the speed of the aircraft's movement on the horizontal plane; the heading angle refers to the angle between the aircraft's flight direction and true north, used to determine the aircraft's horizontal flight direction. The preset time step refers to the pre-set time interval used to calculate the displacement per unit time. It needs to be reasonably set in conjunction with the aircraft's flight speed to ensure that the calculated displacement per unit time accurately reflects the aircraft's real-time movement status. Typically, the preset time step is set to 1 second, but it can be flexibly adjusted according to the actual flight scenario.

[0043] Based on the extracted horizontal velocity component, heading angle, and preset time step, the aviation encryption system calculates the horizontal displacement component of the aircraft per unit time: first, the direction of the aircraft's horizontal flight is determined according to the heading angle, and then the distance that the aircraft can move in that direction within a unit preset time step is calculated in combination with the horizontal velocity component. This distance is the horizontal displacement component per unit time.

[0044] The aviation encryption system combines the horizontal displacement component per unit time with the corresponding flight direction to form a displacement vector per unit time. The displacement vector per unit time refers to vector data that can simultaneously reflect the horizontal distance and direction of the aircraft's movement per unit time. It includes both the magnitude of the displacement (i.e., the horizontal displacement component per unit time) and the direction of the displacement (i.e., the direction corresponding to the heading angle).

[0045] Step 202: Calculate the maximum flight distance of the aircraft within the estimated connectivity window period based on the estimated connectivity window period and the displacement vector per unit time, and obtain the maximum displacement boundary value within the estimated connectivity window period.

[0046] Optionally, the aviation encryption system extracts the displacement magnitude from the unit-time displacement vector, i.e., the horizontal displacement component of the aircraft per unit time. By calculating the product of the unit-time displacement component and the estimated connectivity window duration, the maximum distance the aircraft can fly within the estimated connectivity window period is obtained. This maximum distance is the maximum displacement boundary value within the estimated connectivity window period. The maximum displacement boundary value refers to the farthest distance the aircraft can reach within the estimated connectivity window period while flying at a constant horizontal speed and heading angle, and is used to define the aircraft's activity range within the estimated connectivity window period. During the calculation, it is necessary to ensure that the unit of the unit-time displacement component is consistent with the unit of the estimated connectivity window duration. For example, if the unit-time displacement component is in meters and the estimated connectivity window duration is in seconds, the product result will be meters.

[0047] Step 203: Based on the geographical coordinates of each edge server in the edge server group and the preset single base station wireless signal coverage radius, construct a circular coverage area with the geographical coordinates of each edge server as the center and the preset single base station wireless signal coverage radius as the radius, and obtain the coverage area set of the edge server group.

[0048] Optionally, geographic coordinates refer to the specific location of each edge server on the Earth's surface, typically expressed in latitude and longitude coordinates. The preset single-base station wireless signal coverage radius refers to the maximum distance over which a single edge server can provide stable wireless communication and storage services. This radius needs to be set based on the edge server's communication capabilities, signal strength, and the actual needs of aviation flight scenarios, and is typically set to 50 to 100 kilometers to ensure that the edge server's coverage area meets the requirements of high-speed aircraft flight.

[0049] The aviation encryption system constructs a circular area in geographic space, centered on the geographical coordinates of each edge server and with a preset single-base station wireless signal coverage radius as the radius. This circular area represents the coverage area of ​​the corresponding edge server. Aircraft within this area can establish a stable communication link with the edge server and perform data transmission and storage. Finally, the coverage areas of all edge servers in the edge server group are integrated to form the edge server group's coverage area set, which contains the coverage range information of all edge servers.

[0050] Step 204: Based on the aircraft's current position coordinates and displacement vector per unit time, construct a straight trajectory extending along the heading angle from the aircraft's current position to obtain the aircraft's predicted flight path.

[0051] Optionally, the current position coordinates refer to the real-time geographic coordinates of the aircraft when performing step 20, expressed in latitude and longitude coordinates. These coordinates are extracted from the aircraft's motion state parameters and are consistent with the definition of the aircraft's current position coordinates used in step 10. Simultaneously, the flight direction corresponding to the displacement vector per unit time is extracted, i.e., the horizontal flight direction corresponding to the heading angle.

[0052] The aviation encryption system uses the aircraft's current position coordinates as a starting point and constructs an infinitely extending straight-line trajectory along the flight direction corresponding to the displacement vector per unit time. This straight-line trajectory is the aircraft's predicted flight path. This path is predicted based on the aircraft's current horizontal velocity component and heading angle. Assuming the aircraft maintains uniform straight-line flight within the estimated connectivity window and there are no sudden events such as changes in heading or speed, it can accurately reflect the aircraft's approximate flight path within the estimated connectivity window.

[0053] Step 205: Based on the coverage area set of the edge server group, the predicted flight path, and the maximum displacement boundary value, predict the next-hop edge server that can be reached within the estimated connectivity window.

[0054] Optionally, the aviation encryption system predicts the next-hop edge server that can be reached within the estimated connectivity window based on the coverage area set of the edge server group, the predicted flight path, and the maximum displacement boundary value, as described in steps 2051 to 2053.

[0055] This invention makes predictions based on the actual flight status of the aircraft and the geographical distribution of the edge servers, achieving accurate prediction of the next-hop edge server. This ensures that the predicted next-hop edge server can be reached by the aircraft within the estimated connectivity window, solving the problem of connection interruption caused by the inability to determine the next-hop edge server in advance when the edge node switches due to the high-speed movement of the aircraft. It ensures the continuity of aviation data transmission and storage, realizes seamless and continuous transmission of aviation data in high-speed moving scenarios, and improves the reliability of encrypted storage of aviation data in high-speed moving scenarios.

[0056] Optionally, the process of steps 2051 to 2053 includes: Step 2051: Based on the predicted flight path and the set of coverage areas of the edge server group, perform geometric intersection detection between the predicted flight path and each circular coverage area, and filter out the circular coverage areas with at least one intersection point to obtain the reachable edge server.

[0057] Optionally, the aviation encryption system performs geometric intersection detection on each circular coverage area in the set of coverage areas of the edge server group, whereby geometric intersection detection refers to determining whether there is a common point, i.e., an intersection point, between the straight-line predicted flight path and the circular edge server coverage area. During the detection process, the aviation encryption system compares the vertical distance from the predicted flight path to the center of the corresponding circular coverage area with the radius of the circular coverage area. If the vertical distance is less than or equal to the radius, it indicates that the predicted flight path and the circular coverage area have at least one intersection point, meaning that the aircraft's predicted flight path will pass through the coverage area of ​​the edge server; if the vertical distance is greater than the radius, it indicates that there is no intersection point, and the aircraft's predicted flight path will not pass through the coverage area of ​​the edge server.

[0058] The aviation encryption system filters out all circular coverage areas that intersect at least one point with the predicted flight path. The edge servers corresponding to these circular coverage areas are called reachable edge servers. Reachable edge servers are edge servers that can enter the coverage area and establish a stable communication link when the aircraft flies along the predicted flight path, excluding edge servers that are unrelated to the aircraft's flight path.

[0059] Step 2052: Based on the coordinates of the nearest intersection point of the circular coverage area of ​​each reachable edge server and the coordinates of the current position, calculate the straight-line distance from the current position of the aircraft to each nearest intersection point coordinate to obtain the access path length of each reachable edge server.

[0060] Optionally, for each reachable edge server, the aviation encryption system extracts the coordinates of all intersection points between its corresponding circular coverage area and the predicted flight path. The intersection coordinates refer to the geographic coordinates of the points where the predicted flight path intersects the boundary of the circular coverage area, expressed in latitude and longitude coordinates.

[0061] Subsequently, from all the intersection coordinates corresponding to each reachable edge server, the intersection coordinates closest to the aircraft's current position coordinates are selected. These intersection coordinates are the nearest intersection coordinates of the circular coverage area of ​​the reachable edge server. The nearest intersection coordinates refer to the position where the aircraft first enters the coverage area of ​​the reachable edge server when flying along the predicted flight path, and are also the earliest possible position where the aircraft establishes a communication link with the edge server.

[0062] The aviation encryption system calculates the straight-line distance between the aircraft's current location coordinates and the coordinates of the nearest intersection point of each reachable edge server. This straight-line distance is the access path length for each reachable edge server. The calculation process uses a geographic coordinate straight-line distance calculation method, that is, it calculates the straight-line distance between two points on the Earth's surface corresponding to two latitude and longitude coordinates. The influence of the Earth's curvature is ignored during the calculation process to ensure that the calculation result can accurately reflect the actual distance from the aircraft's current location to the nearest intersection point. The unit of the access path length is consistent with the unit of the preset single base station wireless signal coverage radius.

[0063] Step 2053: Based on the numerical comparison of each access path length and the maximum displacement boundary value, the reachable edge server with the access path length less than the maximum displacement boundary value and the smallest access path length is determined as the next-hop edge server.

[0064] Optionally, the aviation encryption system compares the access path length of each reachable edge server with the maximum displacement boundary value, and filters out reachable edge servers whose access path length is less than the maximum displacement boundary value. This ensures that the edge servers can be reached by the aircraft within the estimated connectivity window, while excluding edge servers whose access path length exceeds the aircraft's maximum flight distance and cannot be reached within the window.

[0065] Among the reachable edge servers whose access path length is less than the maximum displacement boundary value, the aviation encryption system compares the access path length of each server and selects the reachable edge server with the smallest access path length, which is then identified as the next-hop edge server reachable within the estimated connectivity window.

[0066] Choosing the server with the shortest access path length as the next hop ensures that the aircraft reaches the edge server within the shortest distance, reducing data transmission latency and mitigating the risk of the aircraft being unable to reach the server due to changes in heading or speed fluctuations during flight, thus ensuring the optimal selection of the next-hop edge server.

[0067] This invention enables accurate prediction of the next-hop edge server, ensuring that the predicted next-hop edge server is reachable by the aircraft within the estimated connectivity window. This solves the problem of connection interruption caused by the inability to determine the next-hop edge server in advance when switching edge nodes due to the high-speed movement of aircraft. It ensures the continuity of aviation data transmission and storage, realizes seamless and continuous transmission of aviation data in high-speed moving scenarios, and improves the reliability of encrypted storage of aviation data in high-speed moving scenarios.

[0068] Optionally, the processes of steps 301 to 304 include: Step 301: Prioritize the data blocks in the time-series data block sequence based on the link quality difference between the current edge server and the next-hop edge server in the joint caching channel to obtain the priority transmission queue.

[0069] Optionally, the aviation encryption system obtains the link quality parameters corresponding to the current edge server and the next-hop edge server in the joint caching channel. The link quality parameters refer to the parameters used to measure the stability and transmission capability of the communication link between each edge server in the joint caching channel and the aviation encryption system. Specifically, they include link transmission rate, link latency, link packet loss rate, and link signal strength. These parameters can intuitively reflect the quality of the link. The higher the link transmission rate, the lower the link latency, the lower the link packet loss rate, and the stronger the link signal strength, the better the link quality. Conversely, the lower the link quality, the worse the link quality.

[0070] The aviation encryption system analyzes the link quality differences between the current edge server and the next-hop edge server to determine the quality level of the link between the two. At the same time, it extracts the inherent priority of each data block in the time-series data block sequence (this priority is obtained from the data flow characteristics in step 10, and the data block priority corresponding to critical flight safety data is higher than the data block priority corresponding to ordinary monitoring data).

[0071] The aviation encryption system combines link quality differences and inherent data block priorities to prioritize all data blocks in the time-series data block sequence: data blocks with higher inherent priorities are prioritized to ensure that critical data is transmitted first; for data blocks with the same inherent priority, the link quality differences are considered, and the data blocks corresponding to edge servers with poorer link quality are prioritized to avoid data transmission timeouts due to poor link quality, and to ensure that the edge servers at both ends can receive data synchronously.

[0072] The aviation encryption system organizes the sorted data blocks into priority transmission queues in descending order of priority. The priority transmission queue is a queue structure used to regulate the transmission order of data blocks. The transmission order of data blocks in the queue follows the priority sorting result, and data blocks with higher priority are transmitted first.

[0073] Step 302: Based on the session metadata in the priority transmission queue and the preset key derivation function, generate a dynamic session key that is bound to the session lifecycle.

[0074] Optionally, the aviation encryption system extracts session metadata from the priority transmission queue. The session metadata refers to information related to the current data storage session, specifically including the number of data blocks in the priority transmission queue, the total data size, the transmission start time, the estimated transmission end time, the current edge server identifier, the next-hop edge server identifier, and the link parameters of the joint cache channel.

[0075] The preset key derivation function refers to the algorithm function used to generate encryption keys based on the input metadata. It can convert session metadata into encryption keys that comply with aviation data security standards, and the generated keys are unique and unpredictable. Different session metadata corresponds to different keys.

[0076] The aviation encryption system inputs the extracted session metadata into a preset key derivation function, which calculates and generates a dynamic session key. This dynamic session key is an encryption key bound to the lifecycle of the current data storage session. The session lifecycle refers to the entire process from the generation of the priority transmission queue to the complete writing of the data block to the buffers of both edge servers and the receipt of the successful write response. After the session lifecycle ends, the dynamic session key is destroyed. The generation process of the dynamic session key is based on the unique metadata of each session, ensuring that each session's key is independent and improving data encryption security.

[0077] Step 303: Reassemble the data blocks in the priority transmission queue into a continuous data stream, and perform streaming encryption on the continuous data stream based on the dynamic session key to obtain an encrypted data stream.

[0078] Optionally, the aviation encryption system sequentially splices and reassembles all data blocks according to the data block order of the priority transmission queue, removes the independent separators between each data block, and forms a continuous data stream. The format of the continuous data stream is compatible with the transmission format of the joint cache channel, and can be transmitted efficiently through the joint cache channel.

[0079] The aviation encryption system uses a dynamic session key to encrypt continuous data streams using streaming encryption. Streaming encryption involves dividing the continuous data stream into several encryption units of fixed byte length, and then encrypting each unit sequentially using the dynamic session key. During the encryption process, the encryption result of each unit is associated with the previous unit, forming a continuous encrypted data stream.

[0080] After encryption is completed, an encrypted data stream is formed. The encrypted data stream refers to the encrypted data that has been processed by streaming encryption, can be transmitted through the joint cache channel, and cannot be directly read. It contains the encrypted information of all time-series data blocks and maintains the same order as the priority transmission queue.

[0081] Step 304: Based on the joint caching channel, a primary-backup parallel injection strategy is adopted to write the encrypted data stream into the caches of the current edge server and the next-hop edge server.

[0082] Optionally, the aviation encryption system adopts a primary-backup parallel injection strategy based on the joint cache channel to write the encrypted data stream into the caches of the current edge server and the next-hop edge server, as described in steps 3041 to 3044.

[0083] This invention, through priority sorting to adapt to link differences, dynamic key to ensure encryption security, and parallel injection to achieve synchronous caching, ensures that encrypted data streams can be stored completely and securely in the cache areas of the edge servers at both ends. It helps to solve the technical problems of data loss, high retransmission rate and transmission interruption caused by high-speed aircraft movement during edge node switching, ensuring seamless and continuous transmission of aviation data in high-speed movement scenarios and improving the reliability of encrypted storage of aviation data in high-speed movement scenarios.

[0084] Optionally, the processes of steps 3041 to 3044 include: Step 3041: Based on the starting byte index of the encrypted data stream and the current edge server's receive buffer free capacity, analyze the length of the data segment that the current edge server can immediately accept within the current transmission cycle to obtain the main channel write data block.

[0085] Optionally, the aviation encryption system extracts the starting byte index of the encrypted data stream. The starting byte index indicates the position of the first byte in the encrypted data stream, used to locate the beginning of the encrypted data stream. Initially, the starting byte index is 0, and it is updated synchronously as data writing progresses. Simultaneously, the aviation encryption system obtains the free capacity of the current edge server's receive buffer. The receive buffer refers to the storage area on the current edge server used for temporarily receiving encrypted data streams. The free capacity of the receive buffer refers to the unused storage capacity within the receive buffer that can be used to receive new data. Its unit is consistent with the byte unit of the encrypted data stream, ensuring consistency in data volume calculation.

[0086] The current transmission cycle refers to the preset fixed time interval for a single data write. This time interval needs to be set reasonably in combination with the transmission rate of the joint cache channel and the current processing capacity of the edge server, and is usually set to 10 milliseconds to 50 milliseconds.

[0087] The aviation encryption system analyzes the length of data segments that the current edge server can immediately accept within the current transmission cycle based on the starting byte index of the encrypted data stream and the free capacity of the current edge server's receive buffer. First, it calculates the amount of data that the main link of the joint buffer channel (the link corresponding to the current edge server) can transmit within the current transmission cycle. This amount of data is obtained by multiplying the main link transmission rate by the duration of the current transmission cycle. Then, it compares this amount of data with the free capacity of the current edge server's receive buffer and selects the smaller value as the length of the data segment that can be immediately accepted within the current transmission cycle.

[0088] The aviation encryption system starts from the starting byte index position of the encrypted data stream and extracts a continuous byte sequence with a length equal to the length of the data segment that can be immediately accepted. This byte sequence is the main channel write data block. The main channel write data block refers to the data unit written to the current edge server's receive buffer through the main link in the current transmission cycle. Its length is adapted to the receiving capacity of the current edge server and the transmission capacity of the main link.

[0089] Step 3042: Based on the end byte index of the data block written by the main channel and the link propagation delay of the next-hop edge server, calculate the starting offset of the data segment that the next-hop edge server can pre-receive within the link propagation delay, and obtain the starting position of the preloaded data of the backup channel.

[0090] Optionally, the aviation encryption system extracts the end byte index of the main channel written data block. The end byte index refers to the position identifier of the last byte in the main channel written data block in the encrypted data stream. Its value is equal to the start byte index of the main channel written data block (i.e. the start byte index of the encrypted data stream) plus the length of the main channel written data block, and is used to locate the end position of the current written data of the main channel.

[0091] The aviation encryption system obtains the link propagation delay of the next-hop edge server. The link propagation delay refers to the time required for the encrypted data stream to be transmitted from the aviation encryption system through the backup link (the link corresponding to the next-hop edge server) of the joint cache channel to the next-hop edge server. This delay is determined by the transmission distance and signal propagation speed of the backup link and can be calculated in real time through the link parameters of the joint cache channel. Its unit is consistent with the unit of the current transmission cycle.

[0092] The aviation encryption system calculates the starting offset of the data segment that the next-hop edge server can pre-receive within the link propagation delay: it calculates the amount of data that the backup link can transmit within the link propagation delay, which is obtained by multiplying the backup link transmission rate by the link propagation delay; then it converts the transmitted data amount into the corresponding byte offset, i.e., the starting offset of the data segment. This offset refers to the offset distance relative to the end byte index of the data block written by the main channel, and is used to determine the starting position of the backup channel preloaded data in the encrypted data stream.

[0093] The aviation encryption system adds the end byte index of the data block written by the main channel to the calculated start offset of the data segment to obtain the start position of the preloaded data in the backup channel. The start position of the preloaded data in the backup channel refers to the byte index position at which the backup channel begins to preload data in the current transmission cycle, ensuring that the data preloading in the backup channel can keep up with the data writing progress of the main channel and realize parallel transmission between the main and backup channels.

[0094] Step 3043: Based on the starting position of the backup channel preloaded data and the preset maximum single transmission unit size, extract the continuous byte sequence located after the starting position of the backup channel preloaded data from the encrypted data stream to obtain the backup channel write data block.

[0095] Optionally, the aviation encryption system obtains the starting position of the preloaded data in the backup channel. This position is the starting byte index of the preloaded data in the backup channel during the current transmission cycle, used to locate the starting position of the data to be written in the backup channel within the encrypted data stream. The preset maximum single transmission unit size refers to the maximum byte length of the data block that the backup link can stably transmit in a single transmission. This length needs to be reasonably set in combination with the transmission capacity, link bandwidth, and transmission latency of the backup link, and is usually set to 1024 bytes to 4096 bytes to ensure that the data block transmitted in a single transmission can be stably received by the next-hop edge server.

[0096] The aviation encryption system determines the length of the remaining bytes in the encrypted data stream after the start position of the backup channel preloaded data. If the remaining byte length is greater than or equal to the preset maximum transmission unit size, it extracts a continuous byte sequence with a length equal to the preset maximum transmission unit size, starting from the start position of the backup channel preloaded data. If the remaining byte length is less than the preset maximum transmission unit size, it extracts all remaining byte sequences after the start position of the backup channel preloaded data, ensuring that the extracted data sequence can completely cover the amount of data that the backup link can transmit within the current transmission cycle.

[0097] The aviation encryption system identifies the intercepted continuous byte sequence as the backup channel write data block. The backup channel write data block refers to the data unit written to the receiving buffer of the next-hop edge server through the backup link in the current transmission cycle. Its length is adapted to the single transmission capability of the backup link, and it works in conjunction with the main channel write data block to achieve parallel injection of encrypted data stream.

[0098] Step 3044: Based on the main channel write data block and the backup channel write data block, write the encrypted data stream into the buffers of the current edge server and the next-hop edge server.

[0099] Optionally, based on the main channel write data block and the backup channel write data block, the encrypted data stream is written to the buffer of the current edge server and the next-hop edge server, as in steps 30441 to 30445.

[0100] This invention, through precise analysis of the transmission and reception capabilities of the primary and backup channels, dynamically adjusts the length and starting position of the written data blocks to ensure parallel transmission and synchronous writing of the primary and backup links. This improves the stability of data writing and ensures that the encrypted data stream can be stored completely and synchronously in the cache areas of the edge servers at both ends. It solves the technical problems of data loss, high retransmission rate and transmission interruption caused by high-speed aircraft movement during edge node switching, and improves the reliability of encrypted storage of aviation data in high-speed aircraft movement scenarios.

[0101] Optionally, the processes of steps 30441 to 30445 include: Step 30441: Based on the main channel write data block and the base address of the first buffer of the current edge server, generate a memory access descriptor pointing to the beginning of the buffer of the current edge server, and obtain the main channel write instruction.

[0102] Optionally, the aviation encryption system obtains the first cache base address of the current edge server. The first cache base address refers to the starting memory address of the dedicated cache area in the current edge server used to store the encrypted data stream. This address is the starting position identifier of the cache area of ​​the current edge server, used to accurately locate the starting position of the cache area and ensure that the data writing does not deviate from the preset storage area. The first cache base address is synchronized to the aviation encryption system by the current edge server during the collaborative storage handshake phase.

[0103] The aviation encryption system generates memory access descriptors based on the main channel data block and the base address of the first buffer. The memory access descriptor is a set of instruction parameters used to describe memory access-related parameters and guide the specific location of data writing to the buffer. Specifically, it includes key parameters such as the base address of the first buffer, the length of the main channel data block, and the data writing method (i.e., local memory writing). The memory access descriptor can clearly tell the current edge server the writing location and writing specifications of the data.

[0104] The generation process is as follows: Extract the byte length and data transmission format of the main channel write data block from the main channel write data block. The data transmission format refers to the storage format of the encrypted data stream segment, which must be consistent with the overall format of the encrypted data stream to ensure normal reading and subsequent decryption after data writing. Integrate the first buffer base address, the byte length of the main channel write data block, the data transmission format, and the data writing method (local memory write) according to a preset memory access descriptor to obtain the memory access descriptor.

[0105] The aviation encryption system combines the generated memory access descriptor with the data write instruction logic to generate the main channel write instruction. The main channel write instruction is used to control the main channel data transmission and instruct the current edge server to perform local memory write operations.

[0106] Step 30442: Based on the backup channel write data block, the base address of the second buffer of the next-hop edge server, and the byte length of the main channel write data block, calculate the starting storage address of the backup channel write data block in the buffer of the next-hop edge server, generate a memory access descriptor pointing to the starting storage address, and obtain the backup channel write instruction.

[0107] Optionally, the aviation encryption system obtains the second cache base address of the next-hop edge server, wherein the second cache base address refers to the starting memory address of the cache used to store the encrypted data stream in the next-hop edge server, which is synchronized to the aviation encryption system by the next-hop edge server during the collaborative storage handshake phase.

[0108] The aviation encryption system extracts the byte length of the main channel write data block, which is the total number of bytes contained in the main channel write data block, and is used to determine the space occupied by the main channel data in the buffer. Then, it calculates the starting storage address of the backup channel write data block in the buffer of the next-hop edge server. The calculation method is as follows: add the base address of the second buffer of the next-hop edge server to the byte length of the main channel write data block. The resulting address is the starting storage address of the backup channel write data block. This calculation logic ensures that the backup channel write data block can closely follow the storage progress of the main channel write data block, avoiding misalignment of cached data at both edge servers and ensuring data temporal consistency.

[0109] The aviation encryption system generates a memory access descriptor pointing to the starting storage address based on the backup channel data block and the calculated starting storage address. Specifically, as in the embodiment of step 30441, it includes parameters such as the base address of the second buffer, the length of the backup channel data block, the starting storage address, and the data writing method. Then, the memory access descriptor is combined with the data writing instruction logic to generate a backup channel write instruction, which is used to control the backup channel data transmission and instruct the next-hop edge server to perform local memory write operations.

[0110] Step 30443: Based on the main channel write instruction, the main channel write data block is mapped to the current edge server's cache area through the remote memory access protocol, triggering the local memory write operation of the current edge server and obtaining the main channel write completion interrupt signal.

[0111] Optionally, the remote memory access protocol refers to a dedicated communication protocol used to realize remote memory data interaction and data mapping between the aviation encryption system and the edge server, enabling fast data transmission and direct mapping of memory addresses. Through the remote memory access protocol, the data block written to the main channel is directly mapped to the current edge server's cache according to the memory access descriptor in the main channel write instruction. That is, the protocol transmits the data content of the data block written to the main channel to the cache area corresponding to the base address of the first cache area.

[0112] The mapping operation triggers a local memory write operation on the current edge server. After receiving the data mapping request, the current edge server executes the local memory write process, completely writing the main channel write data block into its own dedicated buffer. Once the current edge server completes the local memory write operation and all the main channel write data blocks are written into the buffer, it sends a main channel write completion interrupt signal to the aviation encryption system. This main channel write completion interrupt signal is a status feedback signal used by the current edge server to inform the aviation encryption system that the main channel data has been successfully written into the buffer. This signal includes information such as the data write completion identifier and the length of the written data. Upon receiving this signal, the aviation encryption system confirms that the main channel data write is complete.

[0113] Step 30444: Based on the backup channel write instruction, the backup channel write data block is mapped to the buffer of the next-hop edge server through the remote memory access protocol, triggering the local memory write operation of the next-hop edge server and obtaining the backup channel write completion interrupt signal.

[0114] Optionally, the aviation encryption system uses a remote memory access protocol to directly map the backup channel data block to the cache area of ​​the next-hop edge server, i.e., to the cache area corresponding to the calculated starting storage address, according to the memory access descriptor in the backup channel write instruction.

[0115] The mapping operation triggers a local memory write operation on the next-hop edge server. Upon receiving the data mapping request, the next-hop edge server executes the local memory write process, completely writing the backup channel write data block into its own dedicated buffer, ensuring that the write position is synchronized with the main channel data write progress. Once the next-hop edge server completes the local memory write operation and all backup channel write data blocks are written into the buffer, it sends a backup channel write completion interrupt signal to the aviation encryption system. The backup channel write completion interrupt signal is defined identically to the main channel write completion interrupt signal.

[0116] Step 30445: Based on the main channel write completion interrupt signal and the backup channel write completion interrupt signal, write the main channel write data block and the backup channel write data block to disk to their respective buffer areas.

[0117] Optionally, the system synchronously receives both the primary channel write completion interrupt signal and the backup channel write completion interrupt signal, confirming that both interrupt signals indicate a data write completion status. This means that the primary channel write data block has been successfully written to the current edge server's cache, and the backup channel write data block has been successfully written to the next-hop edge server's cache. The aviation encryption system triggers a data write-to-disk operation, which involves transferring data temporarily mapped to the cache from the cache's temporary storage area to a stable storage area. This ensures that data can be stably stored in the cache for a long period, preventing data loss due to temporary power outages or data refreshes.

[0118] Specifically, the aviation encryption system instructs the current edge server to write the main channel data block from the temporary receive buffer to the stable storage area of ​​its dedicated buffer, and simultaneously instructs the next-hop edge server to write the backup channel data block from the temporary receive buffer to the stable storage area of ​​its dedicated buffer. The disk writing process is strictly executed in accordance with the storage specifications of their respective buffers to ensure that no data is corrupted, lost, or misplaced after the data is written to disk. This completes the stable storage of the main channel data block and the backup channel data block in their respective buffers, and realizes bidirectional synchronous writing of encrypted data streams in the buffers of the two edge servers.

[0119] This invention provides a solution to the technical problems of data loss, high retransmission rate, and transmission interruption caused by high-speed aircraft movement during edge node switching. It achieves precise location of write position through memory access descriptors, improves write efficiency through remote memory access protocols, and ensures stable storage by writing data to disk. This improves the reliability of encrypted storage of aviation data in high-speed aircraft movement scenarios.

[0120] Optionally, the processes of steps 401 to 405 include: Step 401: Based on the execution completion status of the main channel write instruction and the control block address of the current edge server's buffer, generate a main channel ready flag value pointing to the buffer status register of the current edge server.

[0121] Optionally, the aviation encryption system determines the execution completion status of the main channel write instruction based on the main channel write completion interrupt signal. The execution completion status of the main channel write instruction refers to whether the main channel write instruction has been successfully executed by the current edge server and whether the main channel write data block has been completely written to the current edge server's cache. If the main channel write completion interrupt signal is in a normal completion state, the execution completion status of the main channel write instruction is "execution completed"; if the interrupt signal is abnormal, the execution completion status is "execution failed". This step only handles the scenario where the execution completion status is "execution completed".

[0122] The aviation encryption system obtains the control block address of the current edge server's cache. The control block address refers to the memory address in the current edge server's cache used to store cache control information. The control information includes the cache's storage status, data writing progress, address allocation, etc. The control module of the cache can be accurately located through the control block address, and relevant information of the cache status register can be obtained.

[0123] The aviation encryption system generates a main channel ready flag value based on the "execution complete" status of the main channel write command and the control block address of the current edge server's buffer. This main channel ready flag value indicates that the current edge server's main channel data writing is ready and the buffer status is updatable. The flag value is a preset fixed value, with different execution complete states corresponding to different flag values. The "execution complete" state corresponds to the preset "ready" flag value. This flag value can be recognized by the current edge server's buffer status register and is used to trigger subsequent status update operations. During the generation process, the aviation encryption system combines the buffer's control block address to ensure that the main channel ready flag value accurately points to the current edge server's buffer status register, avoiding status update failures caused by incorrect flag values.

[0124] Step 402: Based on the completion status of the backup channel write instruction and the control block address of the buffer of the next-hop edge server, generate a backup channel ready flag value pointing to the buffer status register of the next-hop edge server.

[0125] Optionally, the aviation encryption system determines the execution completion status of the backup channel write instruction based on the backup channel write completion interrupt signal. That is, when the backup channel write completion interrupt signal is in the normal completion state, the execution completion status of the backup channel write instruction is "execution completed". The aviation encryption system obtains the control block address of the buffer of the next-hop edge server, which corresponds only to the buffer of the next-hop edge server and is used to store the control information of the buffer of the next-hop edge server. Through this address, the control module and buffer status register of the buffer of the next-hop edge server can be accurately located.

[0126] The aviation encryption system generates a backup channel ready flag value based on the "execution complete" status of the backup channel write command and the control block address of the buffer of the next-hop edge server. During the generation process, the system combines the control block address of the buffer of the next-hop edge server to ensure that the backup channel ready flag value can accurately point to the buffer status register of the next-hop edge server, ensuring the accuracy of subsequent status writes and interrupt triggers. This ensures that the backup channel ready flag value corresponds to the primary channel ready flag value, jointly reflecting the write ready status of both edge servers.

[0127] Step 403: Based on the remote memory access network card interface of the current edge server, the main channel ready flag value is written to the buffer status register of the current edge server through an atomic write operation, triggering the local status update interrupt of the current edge server and obtaining the main channel status signal.

[0128] Optionally, the aviation encryption system obtains the remote memory access network card interface of the current edge server. The remote memory access network card interface refers to the hardware interface in the current edge server used to realize remote memory access protocol interaction, data and instruction transmission. It is compatible with the remote memory access protocol used in step 30443 and can realize direct data interaction between the aviation encryption system and the buffer status register of the current edge server without going through the edge server CPU, thus ensuring the efficiency and atomicity of the write operation.

[0129] The aviation encryption system performs atomic write operations through the remote memory access network card interface of the current edge server. An atomic write operation is an uninterrupted write operation that is not interfered with by other operations during the write process, which can ensure that the main channel ready flag value is completely and accurately written to the buffer status register of the current edge server.

[0130] During the writing process, the aviation encryption system accurately locates the current edge server's buffer status register based on the control block address of the buffer determined in step 401, and writes the main channel ready flag value completely into the register, thus completing the marking of the current edge server's write ready state.

[0131] Once the main channel ready flag is successfully written to the buffer status register, it will trigger a local status update interruption of the current edge server. The local status update interruption refers to the status update notification mechanism that is automatically triggered when the current edge server detects a change in the value of the buffer status register. It is used to inform the aviation encryption system that the current edge server's buffer status has been updated.

[0132] After the current edge server triggers the interruption, it will send a main channel status signal to the aviation encryption system. The main channel status signal is used to provide feedback on the readiness status of the current edge server's main channel data writing. It includes information such as the main channel readiness flag value and the buffer status. After receiving the signal, the aviation encryption system confirms that the current edge server's data writing is ready.

[0133] Step 404: Based on the remote memory access network card interface of the next-hop edge server, the backup channel ready flag value is written to the buffer status register of the next-hop edge server through an atomic write operation, triggering the local status update interrupt of the next-hop edge server and obtaining the backup channel status signal.

[0134] Optionally, the aviation encryption system uses the remote memory access network card interface of the next-hop edge server to write the backup channel ready flag value into the buffer status register of the next-hop edge server through an atomic write operation, triggering the local status update interrupt of the next-hop edge server and obtaining the backup channel status signal, as in the embodiment process of step 403.

[0135] Step 405: Based on the main channel status signal and the backup channel status signal, determine the bidirectional write consistency result between the current edge server and the next-hop edge server.

[0136] Optionally, the aviation encryption system determines the bidirectional write consistency result between the current edge server and the next-hop edge server based on the main channel status signal and the backup channel status signal, as described in steps 4051 to 4054.

[0137] The embodiments of the present invention accurately determine the bidirectional write consistency result, ensuring the consistency of aviation data storage, solving the technical problems of data loss, high retransmission rate and transmission interruption caused by high-speed aircraft movement during edge node switching, and improving the reliability of aviation data encryption storage in high-speed aircraft movement scenarios.

[0138] Optionally, the processes of steps 4051 to 4054 include: Step 4051: Based on the main channel status signal and the preset status polling time window, read the buffer status register of the current edge server to obtain the main channel ready status value of the current edge server.

[0139] Optionally, the preset status polling time window refers to a fixed time interval set in advance for reading the status register of the edge server's cache. The duration of this time window is reasonably set in combination with the triggering delay of the edge server's local status update interruption and the response speed of the cache status register. It is usually set to 5 milliseconds to 10 milliseconds to ensure that the read operation can be executed stably within this time window.

[0140] Within a preset status polling time window, the aviation encryption system reads the buffer status register of the current edge server via the remote memory access network card interface. This read operation uses the same remote memory access protocol as the atomic write operation in step 403, ensuring compatibility and efficiency in data interaction. During the read operation, the aviation encryption system precisely locates the buffer status register based on the control block address of the current edge server's buffer and reads the main channel ready flag value stored in the register. This read value is the main channel ready status value of the current edge server, which refers to the value actually stored in the buffer status register of the current edge server used to mark the main channel data write ready state.

[0141] Step 4052: Based on the backup channel status signal and the preset status polling time window, read the buffer status register of the next-hop edge server to obtain the backup channel ready status value of the next-hop edge server.

[0142] Optionally, within a preset status polling time window, the aviation encryption system reads the buffer status register of the next-hop edge server via the remote memory access network card interface of the next-hop edge server. During the reading process, the aviation encryption system accurately locates the buffer status register based on the control block address of the buffer of the next-hop edge server obtained in step 402, and reads the backup channel ready flag value stored in the register. The read value is the backup channel ready status value of the next-hop edge server.

[0143] Step 4053: Compare the values ​​of the main channel ready status value, the backup channel ready status value, and the main channel ready flag value to determine whether the main channel ready status value and the backup channel ready status value are both equal to the main channel ready flag value.

[0144] Optionally, the aviation encryption system performs a numerical comparison operation, which consists of two steps: First, the ready status value of the main channel is compared with the ready flag value of the main channel to determine whether the ready status value of the main channel is equal to the ready flag value; second, the ready status value of the backup channel is compared with the ready flag value of the main channel to determine whether the ready status value of the backup channel is equal to the ready flag value of the main channel. After the comparison is completed, the aviation encryption system obtains two comparison results: the comparison result of the ready status value of the main channel with the ready flag value of the main channel, and the comparison result of the ready status value of the backup channel with the ready flag value of the main channel.

[0145] Step 4054: If all values ​​are equal to the main channel ready flag value, then the bidirectional write consistency result is determined to be bidirectional write consistent. If any channel ready status value is not equal to the main channel ready flag value, then the bidirectional write consistency result is determined to be bidirectional write inconsistent.

[0146] Optionally, the aviation encryption system makes a comprehensive judgment on the two comparison results. If both comparison results are "equal", that is, the main channel ready status value is equal to the main channel ready flag value, and the backup channel ready status value is also equal to the main channel ready flag value, it means that the main channel data of the current edge server and the backup channel data of the next-hop edge server have been successfully written to their respective caches, and the status flags are consistent, and the cached data at both ends are synchronized. At this time, the aviation encryption system determines that the bidirectional write consistency result is bidirectional write consistency.

[0147] If either of the two comparison results is "unequal", that is, the main channel ready status value is not equal to the main channel ready flag value, or the backup channel ready status value is not equal to the main channel ready flag value, it means that at least one edge server's data writing has not reached the ready state, and there is a lack of synchronization between the two cached data. There may be problems such as incomplete data writing or incorrect flag value writing. In this case, the aviation encryption system determines that the bidirectional write consistency result is bidirectional write inconsistency.

[0148] This invention ensures the stability of status reading by setting a preset status polling time window, ensures the rigor of judgment by comparing values ​​of a unified benchmark, and ensures the accuracy of results by using clear judgment rules. This guarantees the consistency and security of aviation data storage, solves the technical problems of data loss, high retransmission rate and transmission interruption caused by high-speed aircraft movement, and improves the reliability of encrypted storage of aviation data in high-speed movement scenarios.

[0149] Furthermore, the data encryption storage system for aviation data provided by the present invention will be described below. The data encryption storage system for aviation data described below can be referred to in correspondence with the data encryption storage method for aviation data described above.

[0150] Optionally, refer to Figure 2 , Figure 2 This is a structural diagram of the data encryption and storage system for aviation data provided by the present invention. The data encryption and storage system for aviation data includes: The temporal granularity adaptation module 210 is used to determine the estimated connection window period of the current communication link based on the data stream characteristics of the aviation data to be stored and the motion state parameters of the aircraft, and to perform granularity adaptation on the data stream characteristics based on the estimated connection window period to generate a temporal data block sequence. The joint cache establishment module 220 is used to predict the next-hop edge server that can be reached within the estimated connectivity window based on motion state parameters and the geographical topology of the edge server group, and to initiate a collaborative storage handshake request to the current edge server and the next-hop edge server to establish a joint cache channel. The data encryption storage module 230 is used to encrypt the sequence of time-series data blocks into an encrypted data stream based on the joint cache channel and write it into the cache area of ​​the current edge server and the next-hop edge server; The data solidification storage module 240 is used to solidify the data in the cache to the permanent storage layer based on the event trigger signal of the aircraft crossing the coverage area boundary if a write success response is received from both edge servers, destroy the old session key, and generate a metadata chain of handover information between the old and new edge servers.

[0151] The embodiments of the present invention solve the technical problems of data loss, high retransmission rate and transmission interruption caused by high-speed aircraft movement during edge node switching, realize seamless and continuous transmission of aviation data in high-speed movement scenarios, and improve the reliability of encrypted storage of aviation data in high-speed movement scenarios.

[0152] Please see Figure 3 , Figure 3 An embodiment diagram of an electronic device provided in accordance with the present invention. For example... Figure 3 As shown, an embodiment of the present invention provides an electronic device 300, including a memory 310, a processor 320, and a computer program 311 stored in the memory 310 and executable on the processor 320. When the processor 320 executes the computer program 311, it implements the processes of steps 10 to 40.

[0153] Please see Figure 4 , Figure 4 An embodiment diagram of a computer-readable storage medium provided in accordance with an embodiment of the present invention is shown. Figure 4 As shown, this embodiment provides a computer-readable storage medium 400 on which a computer program 311 is stored. When the computer program 311 is executed by a processor, it implements the processes of steps 10 to 40.

[0154] On the other hand, the present invention also provides a computer program product, which includes a computer program that can be stored on a non-transitory computer-readable storage medium. When the computer program is executed by a processor, the computer is able to execute the data encryption storage method for aviation data provided by the above methods, which includes steps 10 to 40.

[0155] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Those skilled in the art can understand and implement this without any creative effort.

[0156] Through the above description of the embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus necessary general-purpose hardware platforms, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solutions, in essence or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods described in the various embodiments or some parts of the embodiments.

[0157] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, and not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features; and these modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A data encryption and storage method for aviation data, characterized in that, include: Based on the data stream characteristics of the aviation data to be stored and the aircraft's motion state parameters, the estimated connectivity window period of the current communication link is determined, and the data stream characteristics are granularly adapted based on the estimated connectivity window period to generate a time-series data block sequence. Based on the motion state parameters and the geographical topology of the edge server group, predict the next-hop edge server that can be reached within the estimated connectivity window period, and initiate a collaborative storage handshake request to the current edge server and the next-hop edge server to establish a joint cache channel. Based on the joint caching channel, the time-series data block sequence is encrypted into an encrypted data stream and written into the cache areas of the current edge server and the next-hop edge server; If a write success response is received from both edge servers, the data in the cache is solidified to the permanent storage layer based on the event trigger signal of the aircraft crossing the coverage area boundary, the old session key is destroyed, and a metadata chain of handover information between the old and new edge servers is generated.

2. The data encryption and storage method for aviation data according to claim 1, characterized in that, Writing the encrypted data stream into the buffers of the two edge servers includes: Based on the link quality difference between the current edge server and the next-hop edge server in the joint caching channel, the data blocks in the time-series data block sequence are prioritized to obtain a priority transmission queue; Based on the session metadata in the priority transmission queue and combined with the preset key derivation function, a dynamic session key bound to the session lifecycle is generated. The data blocks in the priority transmission queue are reassembled into a continuous data stream, and the continuous data stream is stream-encrypted based on the dynamic session key to obtain an encrypted data stream; Based on the joint caching channel, a primary-backup parallel injection strategy is adopted to write the encrypted data stream into the cache areas of the current edge server and the next-hop edge server.

3. The data encryption and storage method for aviation data according to claim 2, characterized in that, The encrypted data stream is written to the buffers of both edge servers based on a primary-backup parallel injection strategy, including: Based on the starting byte index of the encrypted data stream and the current free capacity of the edge server's receive buffer, the length of the data segment that the current edge server can immediately accept within the current transmission cycle is analyzed to obtain the main channel write data block. Based on the end byte index of the data block written by the main channel and the link propagation delay of the next-hop edge server, the starting offset of the data segment that the next-hop edge server can pre-receive within the link propagation delay is calculated to obtain the starting position of the preloaded data of the backup channel. Based on the starting position of the backup channel preloaded data and the preset maximum single transmission unit size, a continuous byte sequence located after the starting position of the backup channel preloaded data is extracted from the encrypted data stream to obtain the backup channel write data block; Based on the main channel write data block and the backup channel write data block, the encrypted data stream is written to the buffers of the current edge server and the next-hop edge server.

4. The data encryption and storage method for aviation data according to claim 3, characterized in that, The step of writing the encrypted data stream into the buffers of the current edge server and the next-hop edge server based on the main channel write data block and the backup channel write data block includes: Based on the main channel write data block and the base address of the first buffer of the current edge server, a memory access descriptor pointing to the beginning of the buffer of the current edge server is generated to obtain the main channel write instruction; Based on the backup channel write data block, the base address of the second buffer of the next-hop edge server, and the byte length of the main channel write data block, calculate the starting storage address of the backup channel write data block in the buffer of the next-hop edge server, generate a memory access descriptor pointing to the starting storage address, and obtain the backup channel write instruction. Based on the main channel write instruction, the main channel write data block is mapped to the cache area of ​​the current edge server through the remote memory access protocol, triggering the local memory write operation of the current edge server and obtaining the main channel write completion interrupt signal; Based on the backup channel write instruction, the backup channel write data block is mapped to the cache area of ​​the next-hop edge server through the remote memory access protocol, triggering the local memory write operation of the next-hop edge server and obtaining the backup channel write completion interrupt signal; Based on the main channel write completion interrupt signal and the backup channel write completion interrupt signal, the main channel write data block and the backup channel write data block are written to disk to their respective corresponding buffer areas.

5. The data encryption and storage method for aviation data according to claim 4, characterized in that, Before persisting the data in the cache to the permanent storage layer, the following steps are also included: Based on the execution completion status of the main channel write instruction and the control block address of the current edge server's buffer, a main channel ready flag value pointing to the buffer status register of the current edge server is generated. Based on the completion status of the backup channel write instruction and the control block address of the buffer of the next-hop edge server, a backup channel ready flag value is generated pointing to the buffer status register of the next-hop edge server. Based on the remote memory access network card interface of the current edge server, the main channel ready flag value is written to the buffer status register of the current edge server through an atomic write operation, triggering the local status update interruption of the current edge server and obtaining the main channel status signal. The remote memory access network card interface based on the next-hop edge server writes the backup channel ready flag value into the buffer status register of the next-hop edge server through an atomic write operation, triggering the local status update interrupt of the next-hop edge server and obtaining the backup channel status signal. Based on the main channel status signal and the backup channel status signal, the bidirectional write consistency result between the current edge server and the next-hop edge server is determined.

6. The data encryption and storage method for aviation data according to claim 5, characterized in that, The step of determining the bidirectional write consistency result between the current edge server and the next-hop edge server based on the main channel status signal and the backup channel status signal includes: Based on the main channel status signal and the preset status polling time window, the buffer status register of the current edge server is read to obtain the main channel ready status value of the current edge server. Based on the backup channel status signal and the preset status polling time window, the buffer status register of the next-hop edge server is read to obtain the backup channel ready status value of the next-hop edge server. Based on the numerical comparison of the main channel ready status value, the backup channel ready status value, and the main channel ready flag value, it is determined whether the main channel ready status value and the backup channel ready status value are both equal to the main channel ready flag value. If all values ​​are equal to the main channel ready flag value, then the bidirectional write consistency result is determined to be bidirectional write consistent; if any channel ready status value is not equal to the main channel ready flag value, then the bidirectional write consistency result is determined to be bidirectional write inconsistent.

7. The data encryption and storage method for aviation data according to claim 1, characterized in that, The predicted next-hop edge server reachable within the estimated connectivity window includes: Based on the horizontal velocity component and heading angle in the motion state parameters, combined with a preset time step, the horizontal displacement component of the aircraft per unit time is calculated to obtain the displacement vector per unit time. Based on the estimated connectivity window period and the displacement vector per unit time, the maximum flight distance of the aircraft within the estimated connectivity window period is calculated to obtain the maximum displacement boundary value within the estimated connectivity window period. Based on the geographical coordinates of each edge server in the edge server group and the preset single base station wireless signal coverage radius, a circular coverage area is constructed with the geographical coordinates of each edge server as the center and the preset single base station wireless signal coverage radius as the radius, thus obtaining the coverage area set of the edge server group. Based on the aircraft's current position coordinates and the unit time displacement vector, a straight trajectory extending along the heading angle from the aircraft's current position is constructed to obtain the aircraft's predicted flight path. Based on the coverage area set of the edge server group, the predicted flight path, and the maximum displacement boundary value, the next-hop edge server that can be reached within the estimated connectivity window is predicted.

8. The data encryption and storage method for aviation data according to claim 7, characterized in that, The set of coverage areas based on the edge server group, the predicted flight path, and the maximum displacement boundary value are used to predict the next-hop edge server reachable within the estimated connectivity window, including: Based on the predicted flight path and the set of coverage areas of the edge server group, geometric intersection detection is performed between the predicted flight path and each circular coverage area. Circular coverage areas with at least one intersection point are selected to obtain reachable edge servers. Based on the coordinates of the nearest intersection point of the circular coverage area of ​​each reachable edge server and the coordinates of the current position, the straight-line distance from the current position of the aircraft to each nearest intersection point is calculated to obtain the access path length of each reachable edge server. Based on a numerical comparison of each access path length and the maximum displacement boundary value, the reachable edge server with the smallest access path length (less than the maximum displacement boundary value) is determined as the next-hop edge server.

9. A data encryption and storage system for aviation data, characterized in that, A system for implementing the data encryption and storage method for aviation data as described in any one of claims 1 to 8; the system comprises: The temporal granularity adaptation module is used to determine the estimated connectivity window of the current communication link based on the data stream characteristics of the aviation data to be stored and the motion state parameters of the aircraft, and to perform granular adaptation on the data stream characteristics based on the estimated connectivity window to generate a temporal data block sequence. The joint cache establishment module is used to predict the next-hop edge server that can be reached within the estimated connectivity window period based on the motion state parameters and the geographical topology of the edge server group, and to initiate a collaborative storage handshake request to the current edge server and the next-hop edge server to establish a joint cache channel. The data encryption storage module is used to encrypt the time-series data block sequence into an encrypted data stream based on the joint cache channel and write it into the cache area of ​​the current edge server and the next-hop edge server; The data solidification storage module is used to solidify the data in the cache to the permanent storage layer based on the event trigger signal of the aircraft crossing the coverage area boundary if a write success response is received from both edge servers, destroy the old session key, and generate a metadata chain of handover information between the old and new edge servers.

10. A non-transitory computer-readable storage medium, wherein a computer software program is stored therein, characterized in that, When the computer software program is executed by the processor, it implements the data encryption and storage method for aviation data as described in any one of claims 1 to 8.

Images