Information security transmission method and system based on ACARS data

Abstract

The application discloses an information security transmission method and system based on ACARS data. The method comprises the following steps: obtaining ACARS data generated by an airplane, and performing encryption processing and encapsulation processing on the ACARS data to generate a secure data packet; generating a data digest according to the secure data packet, transmitting the secure data packet to a ground base station network through an air-ground data link, and synchronously uploading the data digest to a preset trusted evidence storage system for evidence storage, wherein the trusted evidence storage system is used for providing tamper-proof evidence storage and evidence storage state query for the uploaded data; in the case that the ground base station network receives the secure data packet, verifying the integrity of the secure data packet according to the evidence storage state of the data digest in the trusted evidence storage system and the consistency between the data digest and the secure data packet; and in the case that the verification is passed, performing decryption processing and analysis processing on the secure data packet to obtain the ACARS data. The application improves the security, credibility and traceability of ACARS data transmission.

Description

Technical Field

[0001] This invention relates to the field of aviation communication technology, and in particular to a method and system for secure information transmission based on ACARS data. Background Technology

[0002] Aircraft Communications Addressing and Reporting System (ACARS) is a crucial means of data communication between aircraft and the ground in the civil aviation industry, widely used in scenarios such as flight status monitoring, engine performance monitoring, and meteorological information downlink. Currently, aircraft transmit ACARS messages to ground base stations in real time via Very High Frequency (VHF) data links or satellite communication links. The ground system then parses the received messages for use by airline operations control, aircraft maintenance, and other business systems.

[0003] However, existing ACARS data transmission schemes have significant security shortcomings. Firstly, traditional ACARS messages are often transmitted in plaintext during air-to-ground transmission, or rely solely on simple Cyclic Redundancy Check (CRC) at the link layer for limited data integrity protection, lacking effective encryption mechanisms. This poses a security risk of interception and content reading by third parties during transmission. Secondly, existing schemes lack independent verification mechanisms for data transmission integrity. When ACARS messages are tampered with during transmission due to link interference or malicious attacks, the ground receiver cannot effectively detect and identify whether the data has been altered, potentially leading to ground systems making monitoring judgments and operational decisions based on erroneous data. Furthermore, the ground end lacks traceable records after receiving ACARS data, making it impossible to provide reliable proof that the data has not been tampered with throughout the entire transmission process in the event of data disputes or security incidents.

[0004] In summary, the existing ACARS data transmission scheme has technical problems such as insufficient protection of data confidentiality, lack of integrity verification mechanism, and lack of reliable evidence storage and traceability capabilities. Summary of the Invention

[0005] This invention provides a method and system for secure information transmission based on ACARS data, enabling secure and reliable end-to-end transmission of ACARS data from aircraft to the ground. It addresses the technical problems of insufficient data confidentiality protection, lack of integrity verification mechanisms, and lack of reliable evidence storage and traceability in existing ACARS data transmission schemes, thereby improving the security, reliability, and traceability of data transmission.

[0006] According to one aspect of the present invention, a method for secure information transmission based on ACARS data is provided, the method comprising: Acquire ACARS data generated by the aircraft, and encrypt and encapsulate the ACARS data to generate a secure data packet; A data digest is generated based on the security data packet, and the security data packet is transmitted to the ground base station network via an air-to-ground data link. Simultaneously, the data digest is uploaded to a pre-set trusted evidence storage system for evidence storage. The trusted evidence storage system is used to provide tamper-proof evidence storage and evidence storage status query for the uploaded data. When the ground base station network receives the security data packet, the integrity of the security data packet is verified based on the storage status of the data digest in the trusted evidence storage system and the consistency between the data digest and the security data packet. If the verification is successful, the security data packet is decrypted and parsed to obtain the ACARS data.

[0007] According to another aspect of the present invention, an information security transmission system based on ACARS data is provided, the system comprising: The secure data packet generation module is used to acquire ACARS data generated by the aircraft, and to encrypt and encapsulate the ACARS data to generate secure data packets. The evidence storage module is used to generate a data digest based on the security data packet, transmit the security data packet to the ground base station network through the air-to-ground data link, and simultaneously upload the data digest to a pre-set trusted evidence storage system for evidence storage. The trusted evidence storage system is used to provide tamper-proof evidence storage and evidence storage status query for the uploaded data. The verification module is used to verify the integrity of the security data packet based on the storage status of the data digest in the trusted evidence storage system and the consistency between the data digest and the security data packet when the ground base station network receives the security data packet. The data parsing module is used to decrypt and parse the security data packet after successful verification to obtain the ACARS data.

[0008] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising: At least one processor; and memory that is communicatively connected to at least one processor; The memory stores a computer program that can be executed by at least one processor, which enables the at least one processor to execute the information security transmission method based on ACARS data according to any embodiment of the present invention.

[0009] According to another aspect of the present invention, a computer-readable storage medium is provided, which stores computer instructions for causing a processor to execute and implement the information security transmission method based on ACARS data according to any embodiment of the present invention.

[0010] The technical solution of this invention generates secure data packets by encrypting and encapsulating ACARS data, ensuring that the ACARS data exists in encrypted form during air-to-ground transmission. This effectively prevents data content from being intercepted and stolen by third parties, improving the confidentiality of data transmission. By generating a data digest from the secure data packet and uploading it to a trusted evidence storage system for independent storage, an immutable comparison benchmark is provided for subsequent integrity verification. This avoids the risk of malicious data tampering or forgery associated with relying on local storage or a single centralized evidence storage system, improving the credibility of the verification basis. Furthermore, when the ground base station network receives the secure data packet, it verifies the integrity of the secure data packet based on the evidence storage status of the data digest in the trusted evidence storage system and the consistency between the data digest and the secure data packet. This allows the ground end to proactively identify whether the data has been tampered with during transmission, compensating for the shortcomings of existing methods. This invention addresses the deficiency in existing solutions where the receiving end cannot effectively detect compromised data integrity, thereby improving the reliability of data reception. By only decrypting and parsing secure data packets to obtain ACARS data after successful verification, and performing decryption and parsing only after integrity verification, it eliminates the security risks of subsequent processing based on tampered data. Simultaneously, the data digest stored in the trusted evidence storage system provides traceable and reliable credentials for the entire process of evidence storage, solving the technical problem of not being able to provide proof that data has not been tampered with in the event of data disputes or security incidents. This invention achieves end-to-end trusted transmission of ACARS data from aircraft to ground, solving the technical problems of insufficient data confidentiality protection, lack of integrity verification mechanisms, and lack of trusted evidence storage and traceability in existing ACARS data transmission schemes, achieving the technical effects of improving the security, reliability, and traceability of data transmission.

[0011] It should be understood that the description in this section is not intended to identify key or essential features of the embodiments of the present invention, nor is it intended to limit the scope of the invention. Other features of the invention will become readily apparent from the following description. Attached Figure Description

[0012] To more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0013] Figure 1 A flowchart illustrating an information security transmission method based on ACARS data provided in an embodiment of the present invention; Figure 2 A flowchart illustrating another information security transmission method based on ACARS data provided in this embodiment of the invention; Figure 3 A schematic diagram of the structure of an information security transmission system based on ACARS data provided in an embodiment of the present invention; Figure 4 A schematic diagram of the structure of an electronic device for implementing an information security transmission method based on ACARS data according to an embodiment of the present invention. Detailed Implementation

[0014] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0015] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of the invention described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover a non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0016] Figure 1 This is a flowchart illustrating an information security transmission method based on ACARS data, provided in an embodiment of the present invention. This embodiment is applicable to situations where ACARS data is transmitted between an aircraft and a ground station via an air-to-ground data link. The method can be executed by an information security transmission method system based on ACARS data. This device can be implemented in hardware and / or software and can be configured in an electronic device. Figure 1 As shown, the method specifically includes the following steps: S110. Acquire ACARS data generated by the aircraft, and encrypt and encapsulate the ACARS data to generate a secure data packet.

[0017] ACARS data can be understood as Aircraft Communications Addressing and Reporting System (ACRS) data, which is the message data transmitted between the aircraft and the ground station via air-to-ground data link during flight. This includes flight-related information such as flight number, aircraft registration number, and flight status parameters. Encryption processing involves converting the raw ACARS data into ciphertext using a preset encryption algorithm, preventing unauthorized third parties from directly reading the data. Encapsulation processing involves combining the encrypted data payload with a message authentication code used for integrity verification according to a preset data format to form a secure data packet that conforms to the transmission protocol requirements. A secure data packet can be understood as a data unit with confidentiality and integrity protection capabilities generated after encryption and encapsulation, containing both the data payload and the message authentication code.

[0018] Specifically, during flight, the onboard ACARS system continuously collects flight parameters, status information, and operational messages generated by various aircraft systems, forming ACARS data. After acquiring the ACARS data, it is encrypted using a preset encryption algorithm, converting plaintext ACARS data into ciphertext data payload to prevent interception and reading by third parties during air-to-ground transmission. Simultaneously, a hash operation is performed on the encrypted data payload to generate a message authentication code, which is used by the receiving end to verify data integrity. Then, the data payload and message authentication code are packaged and combined according to a preset encapsulation format to generate a complete secure data packet, which possesses confidentiality and integrity protection capabilities.

[0019] Optionally, before acquiring the ACARS data generated by the aircraft, the method further includes: configuring an airborne encryption module on the aircraft side, the airborne encryption module being used to perform the encryption process and the encapsulation process; configuring a ground verification and decryption module on the ground base station network side, the ground verification and decryption module being used to perform the verification, the decryption process and the parsing process; and establishing a key negotiation mechanism between the airborne encryption module and the ground verification and decryption module, the key negotiation mechanism being used to ensure that the airborne encryption module and the ground verification and decryption module obtain the same encryption and decryption key respectively.

[0020] The airborne encryption module can be understood as a hardware or software functional unit deployed on the aircraft side to perform encryption and encapsulation processing. This module receives ACARS data collected by the airborne ACARS system, encrypts and transforms the ACARS data according to a preset encryption algorithm, and packages the encrypted data payload with the generated message authentication code according to a preset encapsulation format to generate a secure data packet. The ground verification and decryption module can be understood as a hardware or software functional unit deployed on the ground base station network side to perform integrity verification, decryption, and parsing processing. This module receives the secure data packet transmitted from the aircraft, verifies the integrity of the secure data packet, decrypts the data payload after successful verification, and parses the decrypted data to restore the original ACARS data. The key negotiation mechanism can be understood as a pre-agreed interaction process and rules between the airborne encryption module and the ground verification and decryption module to ensure that both parties obtain the same encryption and decryption keys. The encryption and decryption keys can be understood as symmetric keys used for encrypting and decrypting ACARS data. For example, in the encryption process, the airborne encryption module uses the key to convert plaintext ACARS data into ciphertext data payload; in the decryption process, the ground verification and decryption module uses the same key to restore the ciphertext data payload back to plaintext ACARS data.

[0021] Specifically, an airborne encryption module is configured on the aircraft side. This module serves as the functional unit for security processing on the aircraft side. After acquiring ACARS data, it encrypts the ACARS data according to a preset encryption algorithm and packages the encrypted data payload and message authentication code into a preset encapsulation format to generate a secure data packet. The preset encryption algorithm and encapsulation format can be pre-defined according to the actual application scenario; this embodiment does not impose specific limitations on them. Simultaneously, a ground verification and decryption module is configured on the ground base station network side. This module serves as the functional unit for security processing on the ground side. After the ground base station network receives the secure data packet, it verifies the integrity of the secure data packet. After successful verification, it decrypts the data payload in the secure data packet according to a preset decryption algorithm and parses the decrypted data to restore the original ACARS data. The preset decryption algorithm matches the encryption algorithm used in the encryption processing. For example, the preset encryption and decryption algorithms can employ symmetric encryption algorithms, such as the Advanced Encryption Standard (AES) algorithm or the Chinese national standard SM4 (SM4 Block Cipher Algorithm). Taking AES as an example, the airborne encryption module uses AES and a preset key to encrypt ACARS data, generating a ciphertext data payload. The ground verification and decryption module uses a decryption algorithm matching AES and the same key to decrypt the data payload, restoring the plaintext ACARS data. The SM4 algorithm is a block symmetric encryption algorithm independently developed in my country and has been applied to the encryption protection of ACARS data link information, meeting the ACARS data link information security standards.

[0022] Preferably, a key negotiation mechanism is established between the airborne encryption module and the ground verification and decryption module. This mechanism stipulates that before formal data transmission, the airborne encryption module and the ground verification and decryption module independently calculate the same encryption and decryption key through interactive negotiation. This ensures that the airborne encryption module obtains the encryption key used for encryption processing, and the ground verification and decryption module obtains the same decryption key used for decryption processing. The key itself is not directly transmitted during the key negotiation process; therefore, even if the interactive data during the negotiation process is intercepted by a third party, the final encryption and decryption key cannot be obtained. Through this key negotiation mechanism, the airborne encryption module and the ground verification and decryption module each obtain the same encryption and decryption key, which is used for subsequent encryption and decryption processing of ACARS data. In one embodiment, the encryption and decryption key is a symmetric key, which is used by the airborne encryption module and the ground verification and decryption module for encryption and decryption, respectively. The specific key negotiation algorithm can be pre-selected according to the actual application scenario, such as the Diffie-Hellman (DH) key negotiation algorithm, the Elliptic Curve Diffie-Hellman (ECDH) key negotiation algorithm, or the SM2 key exchange protocol. This embodiment does not impose specific restrictions on it.

[0023] Optionally, the step of encrypting and encapsulating the ACARS data to generate a secure data packet includes: encrypting the ACARS data according to a preset encryption algorithm to generate a data payload; performing a hash operation on the data payload to generate a message authentication code; and packaging the data payload and the message authentication code according to a preset encapsulation format to generate the secure data packet.

[0024] The preset encryption algorithm can be understood as a pre-defined mathematical transformation rule used to convert plaintext data into ciphertext data. In this embodiment, it is used to encrypt ACARS data to ensure the confidentiality of data transmission. The data payload can be understood as the ciphertext data portion formed after ACARS data has been encrypted; it is the core data content in the secure data packet. The message authentication code can be understood as verification information generated through hash operations to verify the integrity and authenticity of the data. The encapsulation format can be understood as a pre-defined rule for the arrangement and combination of data, specifying the storage order, field length, and identification method of the data payload and message authentication code in the secure data packet.

[0025] Specifically, firstly, the original ACARS data is encrypted using a preset encryption algorithm, converting the plaintext ACARS data into ciphertext data, which becomes the data payload in the secure data packet. Then, a hash operation is performed on the encrypted data payload, mapping it to a fixed-length hash value. This hash value serves as a message authentication code, used by the receiving end to verify whether the data payload has been tampered with during transmission. Finally, the data payload and message authentication code are combined and packaged according to a preset encapsulation format. The data payload and message authentication code are arranged according to a preset field order and length, and necessary identification information is added to the data units, ultimately generating a complete secure data packet. This secure data packet simultaneously possesses the ability to achieve confidentiality protection through encryption and integrity protection through the message authentication code. The encapsulation format can be preset according to the actual application scenario; this embodiment does not impose specific limitations on it.

[0026] S120. Generate a data digest based on the security data packet, transmit the security data packet to the ground base station network through an air-to-ground data link, and simultaneously upload the data digest to a pre-set trusted evidence storage system for evidence storage. The trusted evidence storage system is used to provide tamper-proof evidence storage and evidence storage status query for the uploaded data.

[0027] In this context, a data digest can be understood as a fixed-length hash value obtained by hashing a secure data packet. This hash value uniquely identifies the content of the secure data packet, and any tampering with the secure data packet will change the data digest. An air-to-ground data link can be understood as a wireless transmission link for data communication between an aircraft and a ground base station, including Very High Frequency (VHF) data links and satellite communication links. A ground base station network can be understood as a communication base station system deployed on the ground to receive data transmitted from aircraft, including multiple base stations distributed in different geographical locations, responsible for establishing communication connections with transit aircraft and receiving data. A trusted evidence storage system can be understood as a system with tamper-proof data storage and evidence status query functions, used for independent storage and evidence status management of uploaded data, providing a reliable comparison benchmark for subsequent data integrity verification. In one embodiment, the trusted evidence storage system can be a blockchain network. Tamper-proof evidence storage can be understood as storing data in an unmodifiable evidence storage carrier, where no one can tamper with or delete the stored data. The evidence storage status can be understood as the evidence storage record status information of the data digest in the trusted evidence storage system, which is used to indicate whether the data digest has been successfully stored in the system and is in a valid state.

[0028] Specifically, after the secure data packet is generated, a hash operation is performed on the entire secure data packet based on a preset hash algorithm to generate a fixed-length data digest. This data digest is a unique digital identifier for the content of the secure data packet. The preset hash algorithm can be any pre-defined algorithm, such as the Secure Hash Algorithm (SHA) series; this embodiment does not impose specific restrictions on it. The secure data packet is transmitted to the ground base station network via an air-to-ground data link between the aircraft and the ground. Simultaneously, the generated data digest is uploaded to a pre-set trusted evidence storage system for evidence storage. The trusted evidence storage system independently stores the received data digest and provides tamper-proof evidence storage and evidence storage status query services. After evidence storage is completed, the data digest is in a queryable and valid evidence storage state in the trusted evidence storage system, providing an immutable comparison benchmark for subsequent data integrity verification by the ground end. The preset parameters can be pre-set according to the actual application scenario; this embodiment does not impose specific restrictions on them.

[0029] Optionally, the trusted evidence storage system is a blockchain network; uploading the data digest to the pre-set trusted evidence storage system for evidence storage includes: uploading the data digest to the distributed nodes of the blockchain network via a smart contract; verifying the data digest through consensus via the blockchain network; storing the data digest in a block of the blockchain network and returning the evidence storage transaction hash value; and associating the evidence storage transaction hash value with the transmission record of the secure data packet.

[0030] In this context, a blockchain network can be understood as a decentralized distributed ledger system, where multiple consensus nodes jointly maintain a sequentially linked data blockchain. Each block contains several data records that have been verified through consensus, and the written data cannot be tampered with. This serves as a specific implementation of a trusted evidence storage system. Smart contracts can be understood as automatically executing program code deployed on the blockchain network, used to automatically execute corresponding business logic when preset conditions are met. In this embodiment, they are used to upload data summaries to the blockchain network and trigger the evidence storage process. Distributed nodes can be understood as the various independent computing devices that constitute the blockchain network. Each node maintains a complete copy of the blockchain ledger and participates in data verification and storage through a consensus protocol. Consensus verification can be understood as the process by which multiple nodes in the blockchain network confirm the consistency of submitted data; only data that passes consensus verification can be written into a blockchain block. The evidence storage transaction hash value can be understood as the hash value returned by the blockchain network to uniquely identify an evidence storage transaction. This hash value allows querying detailed records of the evidence storage transaction within the blockchain network.

[0031] Specifically, the ground-based system uses the data digest as a parameter to invoke a smart contract deployed on the blockchain network, initiating a data notarization request. Upon receiving the data digest, the smart contract broadcasts it to all distributed nodes in the blockchain network. Each distributed node verifies the data digest according to the blockchain network's pre-defined consensus mechanism, checking the format correctness of the data digest and confirming that it has not yet been notarized in the blockchain network. After successful consensus verification, the blockchain network packages the data digest into a new block. This new block is linked to the previous block via a cryptographic hash value, forming an immutable blockchain structure. The data digest is permanently and immutably stored in the blockchain network's blocks. After notarization is complete, the blockchain network returns a notarization transaction hash value to the ground-based system. This hash value uniquely identifies the notarization transaction. The ground-based system associates this notarization transaction hash value with the transmission record of the secure data packet, enabling subsequent querying and verification of the data digest's notarization status and content within the blockchain network using this hash value. The preset consensus mechanism can be pre-set according to the actual application scenario, and this embodiment does not impose specific restrictions on it.

[0032] S130. When the secure data packet is received by the ground base station network, the integrity of the secure data packet is verified based on the storage status of the data digest in the trusted evidence storage system and the consistency between the data digest and the secure data packet.

[0033] Integrity can be understood as the state attribute of a security data packet that has not been tampered with or damaged during the process of being sent from the aircraft to the ground base station network. That is, the security data packet received by the receiving end is completely consistent with the security data packet sent by the sending end in terms of content.

[0034] Specifically, after receiving the security data packet transmitted from the aircraft, the ground base station network does not directly decrypt and parse the security data packet. Instead, it first initiates an integrity verification process. The ground station performs a hash operation on the received security data packet to generate local digest data to be verified. Then, the ground station queries the trusted evidence storage system for the storage status of the uploaded data digest to determine whether the data digest has been successfully stored and is valid in the trusted evidence storage system. If the storage status is confirmed to be valid, the ground station retrieves the stored data digest from the trusted evidence storage system. Finally, the ground station compares the locally generated digest data to be verified with the stored data digest in the trusted evidence storage system. Based on the comparison result, it determines whether the integrity verification has passed.

[0035] Optionally, verifying the integrity of the security data packet based on the storage status of the data digest in the trusted evidence storage system and the consistency between the data digest and the security data packet includes: performing a hash operation on the received security data packet to generate a digest data to be verified; querying the storage status of the data digest from the trusted evidence storage system; if the storage status indicates that the storage is valid, obtaining the data digest stored in the trusted evidence storage system; and if the digest data to be verified is consistent with the data digest stored in the trusted evidence storage system, determining that the integrity verification of the security data packet has passed.

[0036] The digest data to be verified can be understood as the hash value generated by the ground end after performing a hash operation on the received security data packet. It is used to compare with the data digest stored in the trusted evidence storage system to determine the integrity of the security data packet.

[0037] Specifically, after the ground base station network receives the security data packet, it initiates an integrity verification process. First, the ground station performs a hash operation on the received security data packet as a whole, using the same hash algorithm as the one used to generate the data digest, to generate a local digest data to be verified. Then, the ground station sends a query request to the trusted evidence storage system to check the storage status of the uploaded data digest in the trusted evidence storage system. If the trusted evidence storage system returns a storage status indicating that the data digest has been successfully stored in the system and is in a valid state, the ground station retrieves the stored data digest from the trusted evidence storage system. The ground station compares the locally generated digest data to be verified with the stored data digest retrieved from the trusted evidence storage system. If the digest data to be verified is completely consistent with the stored data digest in the trusted evidence storage system, it means that the received security data packet has not been tampered with since it was sent from the aircraft, and the integrity verification passes; if they are inconsistent, it means that the security data packet has undergone data modification during transmission, and the integrity verification fails. The specific hash algorithm can be pre-selected according to the actual application scenario, and this embodiment does not impose specific restrictions on it.

[0038] S140. If the verification is successful, the security data packet is decrypted and parsed to obtain the ACARS data.

[0039] Decryption can be understood as restoring the encrypted data payload to plaintext form using a decryption algorithm that matches the encryption algorithm used in the encryption process. Parsing can be understood as splitting and formatting the decrypted data according to preset parsing rules to extract the flight parameter data corresponding to each field.

[0040] Specifically, after integrity verification passes, the ground station confirms that the received security data packet is complete and error-free. At this point, the security data packet undergoes decryption and parsing. Decryption involves using a preset decryption algorithm that matches the encryption algorithm used in the encryption process to decrypt the data payload in the security data packet, restoring the ciphertext data payload to plaintext ACARS data. Parsing involves splitting the decrypted plaintext data into fields and converting its format according to preset parsing rules. Flight parameter data corresponding to each field is extracted according to the standard ACARS data message format or a custom format, ultimately yielding the original ACARS data for use by various ground-based operational systems.

[0041] Optionally, the process of decrypting and parsing the security data packet to obtain the ACARS data includes: decrypting the data payload in the security data packet according to a preset decryption algorithm to obtain decrypted data; parsing the decrypted data according to preset parsing rules to extract flight parameter data; wherein the flight parameter data includes at least one of flight speed data, flight altitude data, engine status data, flight attitude data, and position data; and using the extracted flight parameter data as the ACARS data.

[0042] The preset decryption algorithm can be understood as a pre-defined mathematical transformation rule used to restore ciphertext data to plaintext data. It matches the encryption algorithm used in the encryption process and is used to decrypt the data payload in this embodiment. Flight parameter data can be understood as specific parameter values ​​reflecting the aircraft's flight status extracted from ACARS data, including parameters such as flight speed, flight altitude, engine status, flight attitude, and position.

[0043] Specifically, the ground-based system decrypts and parses the security data packets to obtain ACARS data. First, the data payload in the security data packets is decrypted according to a preset decryption algorithm. This preset decryption algorithm matches the encryption algorithm used in the encryption process, restoring the ciphertext data payload to plaintext format. The preset decryption algorithm can be pre-set according to the actual application scenario; this embodiment does not impose specific limitations on it. Then, the decrypted data is parsed according to preset parsing rules. These rules specify the position, length, and data type of each field in the ACARS data. Flight parameter data is extracted from the decrypted data field by field according to these rules. The flight parameter data includes at least one or more of the following: flight speed data, flight altitude data, engine status data, flight attitude data, and position data. Finally, the extracted flight parameter data is combined according to a preset data format and output as the original ACARS data to various ground-based operational systems for use by systems such as operation control, aircraft maintenance, and flight safety monitoring. The preset parsing rules can be pre-set according to different ACARS message formats; this embodiment does not impose specific limitations on them.

[0044] The technical solution of this invention generates secure data packets by encrypting and encapsulating ACARS data, ensuring that the ACARS data exists in encrypted form during air-to-ground transmission. This effectively prevents data content from being intercepted and stolen by third parties, improving the confidentiality of data transmission. By generating a data digest from the secure data packet and uploading it to a trusted evidence storage system for independent storage, an immutable comparison benchmark is provided for subsequent integrity verification. This avoids the risk of malicious data tampering or forgery associated with relying on local storage or a single centralized evidence storage system, improving the credibility of the verification basis. Furthermore, when the ground base station network receives the secure data packet, it verifies the integrity of the secure data packet based on the evidence storage status of the data digest in the trusted evidence storage system and the consistency between the data digest and the secure data packet. This allows the ground end to proactively identify whether the data has been tampered with during transmission, compensating for the shortcomings of existing methods. This invention addresses the deficiency in existing solutions where the receiving end cannot effectively detect compromised data integrity, thereby improving the reliability of data reception. By only decrypting and parsing secure data packets to obtain ACARS data after successful verification, and performing decryption and parsing only after integrity verification, it eliminates the security risks of subsequent processing based on tampered data. Simultaneously, the data digest stored in the trusted evidence storage system provides traceable and reliable credentials for the entire process of evidence storage, solving the technical problem of not being able to provide proof that data has not been tampered with in the event of data disputes or security incidents. This invention achieves end-to-end trusted transmission of ACARS data from aircraft to ground, solving the technical problems of insufficient data confidentiality protection, lack of integrity verification mechanisms, and lack of trusted evidence storage and traceability in existing ACARS data transmission schemes, achieving the technical effects of improving the security, reliability, and traceability of data transmission.

[0045] Figure 2 This is a flowchart of another information security transmission method based on ACARS data provided by an embodiment of the present invention. Based on the above embodiments, this embodiment represents a further optimization, and its specific implementation can be found in the technical solution of this embodiment. Technical terms that are the same as or corresponding to those in the above embodiments will not be repeated here. Optionally, the method further includes: if the verification fails, generating data transmission anomaly alarm data and sending the data transmission anomaly alarm data to a ground monitoring terminal, wherein the data transmission anomaly alarm data includes the source identification information and reception time information of the security data packet.

[0046] like Figure 2 As shown, the method specifically includes the following steps: S210. If the verification fails, generate data transmission anomaly alarm data and send the data transmission anomaly alarm data to the ground monitoring terminal. The data transmission anomaly alarm data includes the source identification information and reception time information of the security data packet.

[0047] The data transmission anomaly alarm data can be understood as information generated when integrity verification fails, used to notify ground monitoring personnel of data anomalies, including relevant identification information and time information that caused the anomaly. The ground monitoring terminal can be understood as the display and operation terminal equipment deployed at the ground monitoring center, used to receive and display the data transmission anomaly alarm data to monitoring personnel. The source identification information can be understood as information used to uniquely identify the source of the secure data packet, including the flight number, aircraft registration number, and / or data packet sequence number of the aircraft sending the data. The reception time information can be understood as the system timestamp of the ground base station network receiving the secure data packet.

[0048] Specifically, if integrity verification fails, the ground station determines that the received security data packet may have been tampered with or corrupted during air-to-ground transmission. In this case, the ground station generates a data transmission anomaly alarm. This alarm data includes at least the source identifier information and reception time information of the security data packet. The source identifier information indicates the aircraft identifier, flight identifier, and data packet identifier of the security data packet, while the reception time information records the specific time the data packet was received by the ground base station network. The ground station then sends this data transmission anomaly alarm data to the ground monitoring terminal, which alerts ground monitoring personnel so they can promptly be aware of the data transmission anomaly and take appropriate action.

[0049] Optionally, after sending the data transmission anomaly alarm data to the ground monitoring terminal, the method further includes: triggering a retransmission command based on the source identification information; wherein the retransmission command is used to instruct the aircraft to retransmit the corresponding ACARS data; and generating link failure alarm data and stopping retransmission if the number of consecutive retransmission failures exceeds a preset maximum retransmission count threshold.

[0050] The retransmission command can be understood as a control command sent from the ground to the aircraft, instructing the aircraft to retransmit the corresponding ACARS data. The maximum retransmission threshold can be understood as a pre-set maximum number of consecutive retransmission failures allowed; when the number of consecutive retransmission failures exceeds this threshold, a fault is determined in the air-to-ground data link. Link fault alarm data can be understood as alarm information generated when the number of consecutive retransmission failures exceeds the maximum retransmission threshold, used to indicate a possible serious fault in the air-to-ground data link.

[0051] Specifically, after sending data transmission anomaly alarm data to the ground monitoring terminal, the ground terminal triggers a retransmission command based on the source identification information contained in the data transmission anomaly alarm data. This retransmission command is sent to the corresponding aircraft via the air-to-ground data link. After receiving the retransmission command, the aircraft retransmits the corresponding ACARS data according to the instructions in the retransmission command. The aircraft then performs the following operations: reacquires the corresponding ACARS data, encrypts the ACARS data to generate a ciphertext data payload, performs a hash operation on the data payload to generate a message authentication code, packages the data payload and message authentication code according to a preset encapsulation format to generate a secure data packet, performs a hash operation on the secure data packet to generate a data digest, transmits the secure data packet to the ground base station network via the air-to-ground data link, and simultaneously uploads the data digest to the trusted evidence storage system for evidence storage. After each retransmission, the ground end performs the following operations: performs a hash operation on the received security data packet to generate a digest data to be verified; queries the data digest's storage status from the trusted storage system and, if the storage status is valid, obtains the stored data digest; compares the digest data to be verified with the stored data digest to verify the integrity of the security data packet; if the verification passes, decrypts the data payload in the security data packet to obtain decrypted data; and performs format parsing on the decrypted data according to the parsing rules to extract flight parameter data.

[0052] Specifically, if integrity verification passes after a retransmission, the retransmission process ends. If the number of consecutive retransmission failures exceeds the preset maximum retransmission threshold, it indicates that the air-to-ground data link may have experienced a persistent transmission anomaly or fault. In this case, the ground end generates link fault alarm data and stops retransmission. The link fault alarm data is sent to the ground monitoring terminal to prompt ground monitoring personnel to investigate and handle the air-to-ground data link. The preset maximum retransmission threshold can be pre-set according to the actual application scenario; this embodiment does not impose specific restrictions on it.

[0053] The technical solution of this invention generates data transmission anomaly alarm data and sends it to the ground monitoring terminal when verification fails. This enables ground monitoring personnel to be promptly informed of integrity verification failure events during ACARS data transmission. It solves the technical problem in existing solutions where the ground end cannot effectively detect anomalies when data is tampered with, thus avoiding the security risk of the ground system making erroneous operational decisions based on tampered data. By including source identification information and reception time information in the data transmission anomaly alarm data, it provides ground monitoring personnel with a basis for quickly locating the source and occurrence time of abnormal data, facilitating subsequent source tracing and handling of abnormal events, and improving the monitorability of data transmission and the timeliness of anomaly response.

[0054] Figure 3This is a schematic diagram of an information security transmission system based on ACARS data, provided as an embodiment of the present invention. Figure 3 As shown, the system includes: a secure data packet generation module 310, an evidence storage module 320, a verification module 330, and a data parsing module 340.

[0055] The system includes a secure data packet generation module 310, which acquires ACARS data generated by the aircraft, encrypts and encapsulates the ACARS data to generate a secure data packet; a certificate storage module 320, which generates a data digest based on the secure data packet, transmits the secure data packet to the ground base station network via an air-to-ground data link, and simultaneously uploads the data digest to a pre-set trusted certificate storage system for certificate storage, wherein the trusted certificate storage system provides tamper-proof certificate storage and certificate storage status query for the uploaded data; a verification module 330, which, upon receiving the secure data packet from the ground base station network, verifies the integrity of the secure data packet based on the certificate storage status of the data digest in the trusted certificate storage system and the consistency between the data digest and the secure data packet; and a data parsing module 340, which, upon successful verification, decrypts and parses the secure data packet to obtain the ACARS data.

[0056] The technical solution of this invention generates secure data packets by encrypting and encapsulating ACARS data, ensuring that the ACARS data exists in encrypted form during air-to-ground transmission. This effectively prevents data content from being intercepted and stolen by third parties, improving the confidentiality of data transmission. By generating a data digest from the secure data packet and uploading it to a trusted evidence storage system for independent storage, an immutable comparison benchmark is provided for subsequent integrity verification. This avoids the risk of malicious data tampering or forgery associated with relying on local storage or a single centralized evidence storage system, improving the credibility of the verification basis. Furthermore, when the ground base station network receives the secure data packet, it verifies the integrity of the secure data packet based on the evidence storage status of the data digest in the trusted evidence storage system and the consistency between the data digest and the secure data packet. This allows the ground end to proactively identify whether the data has been tampered with during transmission, compensating for the shortcomings of existing methods. This invention addresses the deficiency in existing solutions where the receiving end cannot effectively detect compromised data integrity, thereby improving the reliability of data reception. By only decrypting and parsing secure data packets to obtain ACARS data after successful verification, and performing decryption and parsing only after integrity verification, it eliminates the security risks of subsequent processing based on tampered data. Simultaneously, the data digest stored in the trusted evidence storage system provides traceable and reliable credentials for the entire process of evidence storage, solving the technical problem of not being able to provide proof that data has not been tampered with in the event of data disputes or security incidents. This invention achieves end-to-end trusted transmission of ACARS data from aircraft to ground, solving the technical problems of insufficient data confidentiality protection, lack of integrity verification mechanisms, and lack of trusted evidence storage and traceability in existing ACARS data transmission schemes, achieving the technical effects of improving the security, reliability, and traceability of data transmission.

[0057] Optionally, the secure data packet generation module 310 includes: The authentication code generation unit is used to encrypt the ACARS data according to a preset encryption algorithm, generate a data payload, perform a hash operation on the data payload, and generate a message authentication code. The packaging unit is used to package the data payload and the message authentication code according to a preset packaging format to generate the secure data packet.

[0058] Optionally, the trusted evidence storage system is a blockchain network; correspondingly, the evidence storage module 320 includes: The evidence storage unit is used to upload the data digest to the distributed nodes of the blockchain network through a smart contract, verify the data digest through consensus in the blockchain network, store the data digest in the block of the blockchain network, and return the evidence storage transaction hash value. The hash value association unit is used to associate the hash value of the evidence storage transaction with the transmission record of the secure data packet.

[0059] Optionally, the verification module 330 includes: The digest generation unit is used to perform a hash operation on the received security data packet to generate digest data to be verified. The evidence storage digest acquisition unit is used to query the evidence storage status of the data digest from the trusted evidence storage system, and to acquire the data digest stored in the trusted evidence storage system when the evidence storage status indicates that the evidence storage is valid. The integrity verification unit is used to determine that the integrity verification of the secure data packet is passed if the digest data to be verified is consistent with the data digest stored in the trusted evidence storage system.

[0060] Optionally, the data parsing module 340 includes: The decryption unit is used to decrypt the data payload in the security data packet according to a preset decryption algorithm to obtain decrypted data; The data extraction unit is used to parse the decrypted data according to preset parsing rules and extract flight parameter data; wherein, the flight parameter data includes at least one of flight speed data, flight altitude data, engine status data, flight attitude data and position data; The ACARS data determination unit is used to use the extracted flight parameter data as the ACARS data.

[0061] Optionally, the system further includes: The anomaly alarm module is used to generate data transmission anomaly alarm data and send the data transmission anomaly alarm data to the ground monitoring terminal when the verification fails. The data transmission anomaly alarm data includes the source identification information and reception time information of the security data packet.

[0062] Optionally, the system further includes: The retransmission triggering module is used to trigger a retransmission command based on the source identification information after the data transmission anomaly alarm data is sent to the ground monitoring terminal; wherein, the retransmission command is used to instruct the aircraft to retransmit the corresponding ACARS data; The link failure alarm module is used to generate link failure alarm data and stop retransmission when the number of consecutive retransmission failures exceeds the preset maximum retransmission threshold.

[0063] The information security transmission system based on ACARS data provided in the embodiments of the present invention can execute the information security transmission method based on ACARS data provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the method.

[0064] Figure 4This is a schematic diagram of an electronic device for implementing the ACARS-based secure data transmission method according to embodiments of the present invention. The electronic device is intended to represent various forms of digital computers, such as laptops, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframes, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital assistants, cellular phones, smartphones, wearable devices (e.g., helmets, glasses, watches, etc.), and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely illustrative and are not intended to limit the implementation of the invention described and / or claimed herein.

[0065] like Figure 4 As shown, the electronic device 10 includes at least one processor 11 and a memory, such as a read-only memory (ROM) 12 or a random access memory (RAM) 13, communicatively connected to the at least one processor 11. The memory stores computer programs executable by the at least one processor. The processor 11 can perform various appropriate actions and processes based on the computer program stored in the ROM 12 or loaded from storage unit 18 into the RAM 13. The RAM 13 can also store various programs and data required for the operation of the electronic device 10. The processor 11, ROM 12, and RAM 13 are interconnected via a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0066] Multiple components in electronic device 10 are connected to I / O interface 15, including: input unit 16, such as keyboard, mouse, etc.; output unit 17, such as various types of displays, speakers, etc.; storage unit 18, such as disk, optical disk, etc.; and communication unit 19, such as network card, modem, wireless transceiver, etc. Communication unit 19 allows electronic device 10 to exchange information / data with other devices through computer networks such as the Internet and / or various telecommunications networks.

[0067] Processor 11 can be a variety of general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special-purpose artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. Processor 11 performs the various methods and processes described above, such as the method of secure information transmission based on ACARS data.

[0068] In some embodiments, the method for secure transmission of ACARS data can be implemented as a computer program tangibly contained in a computer-readable storage medium, such as storage unit 18. In some embodiments, part or all of the computer program can be loaded and / or installed on electronic device 10 via ROM 12 and / or communication unit 19. When the computer program is loaded into RAM 13 and executed by processor 11, one or more steps of the method for secure transmission of ACARS data described above can be performed. Alternatively, in other embodiments, processor 11 can be configured to perform the method for secure transmission of ACARS data by any other suitable means (e.g., by means of firmware).

[0069] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field-programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), application-specific standard products (ASSPs), systems-on-a-chip (SoCs), complex programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations may include: implementations in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which may be a dedicated or general-purpose programmable processor, capable of receiving data and instructions from a storage system, at least one input device, and at least one output device, and transmitting data and instructions to the storage system, the at least one input device, and the at least one output device.

[0070] Computer programs used to implement the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, such that when executed by the processor, the computer programs cause the functions / operations specified in the flowcharts and / or block diagrams to be performed. The computer programs may be executed entirely on a machine, partially on a machine, or as a standalone software package, partially on a machine and partially on a remote machine, or entirely on a remote machine or server.

[0071] In the context of this invention, a computer-readable storage medium can be a tangible medium that may contain or store a computer program for use by or in conjunction with an instruction execution system, apparatus, or device. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination thereof. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. More specific examples of machine-readable storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof.

[0072] To provide interaction with a user, the systems and techniques described herein can be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and pointing device (e.g., a mouse or trackball) through which the user provides input to the electronic device. Other types of devices can also be used to provide interaction with the user; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including sound input, voice input, or tactile input).

[0073] The systems and technologies described herein can be implemented in computing systems that include backend components (e.g., as data servers), or middleware components (e.g., application servers), or frontend components (e.g., user computers with graphical user interfaces or web browsers through which users can interact with implementations of the systems and technologies described herein), or any combination of such backend, middleware, or frontend components. The components of the system can be interconnected via digital data communication of any form or medium (e.g., communication networks). Examples of communication networks include local area networks (LANs), wide area networks (WANs), blockchain networks, and the Internet.

[0074] A computing system can include clients and servers. Clients and servers are generally located far apart and typically interact through communication networks. The client-server relationship is created by computer programs running on the respective computers and having a client-server relationship with each other. The server can be a cloud server, also known as a cloud computing server or cloud host, which is a hosting product within the cloud computing service system to address the shortcomings of traditional physical hosts and VPS services, such as high management difficulty and weak business scalability.

[0075] It should be understood that the various forms of processes shown above can be used, with steps reordered, added, or deleted. For example, the steps described in this invention can be executed in parallel, sequentially, or in different orders, as long as the desired result of the technical solution of this invention can be achieved, and this is not limited herein.

[0076] The specific embodiments described above do not constitute a limitation on the scope of protection of this invention. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this invention should be included within the scope of protection of this invention.

Claims

1. A method for secure information transmission based on ACARS data, characterized in that, include: Acquire ACARS data generated by the aircraft, and encrypt and encapsulate the ACARS data to generate a secure data packet; A data digest is generated based on the security data packet, and the security data packet is transmitted to the ground base station network via an air-to-ground data link. Simultaneously, the data digest is uploaded to a pre-set trusted evidence storage system for evidence storage. The trusted evidence storage system is used to provide tamper-proof evidence storage and evidence storage status query for the uploaded data. When the ground base station network receives the security data packet, the integrity of the security data packet is verified based on the storage status of the data digest in the trusted evidence storage system and the consistency between the data digest and the security data packet. If the verification is successful, the security data packet is decrypted and parsed to obtain the ACARS data.

2. The method according to claim 1, characterized in that, The process of encrypting and encapsulating the ACARS data to generate a secure data packet includes: The ACARS data is encrypted according to a preset encryption algorithm to generate a data payload. The data payload is then hashed to generate a message authentication code. The data payload and the message authentication code are packaged according to a preset encapsulation format to generate the secure data packet.

3. The method according to claim 1, characterized in that, The trusted evidence storage system is a blockchain network; uploading the data digest to the pre-set trusted evidence storage system for evidence storage includes: The data digest is uploaded to the distributed nodes of the blockchain network via a smart contract. After the blockchain network verifies the data digest through consensus, the data digest is stored in the block of the blockchain network, and the notarization transaction hash value is returned. The hash value of the evidence storage transaction is associated with the transmission record of the secure data packet.

4. The method according to claim 1, characterized in that, The step of verifying the integrity of the security data packet based on the evidence storage status of the data digest in the trusted evidence storage system and the consistency between the data digest and the security data packet includes: The received security data packet is hashed to generate a digest data to be verified; The evidence storage status of the data digest is queried from the trusted evidence storage system. If the evidence storage status indicates that the evidence storage is valid, the data digest stored in the trusted evidence storage system is obtained. If the digest data to be verified is consistent with the data digest stored in the trusted evidence storage system, the integrity verification of the secure data packet is determined to be successful.

5. The method according to claim 1, characterized in that, The process of decrypting and parsing the security data packet to obtain the ACARS data includes: The data payload in the security data packet is decrypted according to a preset decryption algorithm to obtain decrypted data; The decrypted data is parsed according to preset parsing rules to extract flight parameter data; wherein, the flight parameter data includes at least one of flight speed data, flight altitude data, engine status data, flight attitude data, and position data; The extracted flight parameter data is output as the ACARS data.

6. The method according to claim 1, characterized in that, Also includes: If the verification fails, a data transmission anomaly alarm is generated and sent to the ground monitoring terminal. The data transmission anomaly alarm includes the source identification information and reception time information of the security data packet.

7. The method according to claim 6, characterized in that, After sending the data transmission anomaly alarm data to the ground monitoring terminal, the method further includes: A retransmission command is triggered based on the source identification information; wherein, the retransmission command is used to instruct the aircraft to retransmit the corresponding ACARS data; If the number of consecutive retransmission failures exceeds the preset maximum retransmission threshold, a link fault alarm will be generated and retransmission will be stopped.

8. An information security transmission system based on ACARS data, characterized in that, include: The secure data packet generation module is used to acquire ACARS data generated by the aircraft, and to encrypt and encapsulate the ACARS data to generate secure data packets. The evidence storage module is used to generate a data digest based on the security data packet, transmit the security data packet to the ground base station network through the air-to-ground data link, and simultaneously upload the data digest to a pre-set trusted evidence storage system for evidence storage. The trusted evidence storage system is used to provide tamper-proof evidence storage and evidence storage status query for the uploaded data. The verification module is used to verify the integrity of the security data packet based on the storage status of the data digest in the trusted evidence storage system and the consistency between the data digest and the security data packet when the ground base station network receives the security data packet. The data parsing module is used to decrypt and parse the security data packet after successful verification to obtain the ACARS data.

9. An electronic device, characterized in that, The electronic device includes: At least one processor; and a memory communicatively connected to the at least one processor; The memory stores a computer program that can be executed by the at least one processor, which is then executed by the at least one processor to enable the at least one processor to perform the information security transmission method based on ACARS data as described in any one of claims 1-7.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer instructions that, when executed by a processor, implement the information security transmission method based on ACARS data as described in any one of claims 1-7.

Images