Data acquisition and reporting system based on physical isolation environment
By designing a data acquisition and reporting system based on a physically isolated environment in an internal network with high security level, the problem of information transmission security in the external environment is solved, and the unidirectional and physical isolation of data transmission is realized, ensuring the security and integrity of information data.
Patent Information
- Application Number
- CN202421181179.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Utility models(China)
- Current Assignee / Owner
- Filing Date
- 2024-05-28
- Publication Date
- 2025-06-06
- Estimated Expiration
- 2034-05-28
AI Technical Summary
In internal networks with high security levels, it is difficult to achieve information transmission between devices, especially in external environments, and traditional protection measures for information leakage are insufficient.
A data acquisition and reporting system based on a physical isolation environment is designed. Through full physical isolation between the acquisition side host and the reporting side host, combined with an electromagnetic shielding shell, the data transmission is unidirectional and physical isolation is achieved to prevent information leakage and electromagnetic interference.
It realizes the security and reliability of data transmission, prevents information leakage and electromagnetic interference, and ensures the integrity and security of information data during transmission.
Smart Images

Figure CN222954071U_ABST
Abstract
Description
Technical Field
[0001] The utility model relates to the technical field of information security, and in particular to a data collection and reporting system based on a physical isolation environment. Background Art
[0002] With the rapid popularization and development of the Internet, network information security threats are increasingly receiving attention from relevant enterprises and government departments. Efficient and secure data transmission between network domains with different security levels has become an urgent need for important confidential departments such as the government, military industry, and finance.
[0003] However, due to the high security level of the internal network, in order to prevent information leakage during transmission to the external network, information is usually imported and exported through manual disc burning. However, for devices set up in an external environment, it is difficult to achieve information transmission in this way. Utility Model Content
[0004] In order to improve at least one of the above-mentioned technical problems, one object of the present utility model is to provide a data collection and reporting system based on a physical isolation environment, referred to as a data collection and reporting system, for realizing data isolation and secure transmission.
[0005] To achieve the above-mentioned purpose, the technical solution of the utility model provides a data collection and reporting system based on a physically isolated environment, including a collection-side host, a display device, a camera device, a reporting-side host, and an electromagnetic shielding shell.
[0006] Specifically, the acquisition side host includes a detection module, an acquisition module, an image conversion module, and an output module; the detection module is used to connect to the acquired device, and is used to detect (in real time or periodically) whether the acquired device has information data generated, and is suitable for sending a start signal after the acquired device generates data. The acquisition module is connected to the detection module and is used to connect to the acquired device to acquire the information data generated by the acquired device after receiving the start signal. The image conversion module is connected to the acquisition module and is used to convert the information data acquired by the acquisition module into image data through encoding. The output module is connected to the image conversion module for outputting image data; the display device is connected to the output module, and is used to receive image data and display it; the camera device is used to The image data displayed by the shooting display device is obtained to obtain a photographic picture; the reporting side host includes an image receiving module, an image decoding module and a reporting module; the image receiving module is connected to the camera device and is used to receive the photographic picture, the image decoding module is connected to the image receiving module and is used to decode the photographic picture and restore it into information data, and the reporting module is used to connect to an external network (referring to accessing the external network or connecting to a device in the external network) to report the information data; the collection side host, the display device, the camera device and the reporting side host are all arranged in an electromagnetic shielding shell, so that the information data in the collection side host and the image data in the display device cannot be directly transmitted to the reporting side host or the device arranged outside the electromagnetic shielding shell through wired signal transmission or wireless signal transmission.
[0007] The data collection and reporting system provided by the technical solution is applied to the scenario where the data information of the collected device needs to be kept confidential during the transmission process. Among them, the collection side host is connected to the collected device through a physical line, and the information data is collected through an electrical signal. After the collection and encoding conversion, the image data is generated, and the image data is displayed on the collection side host and the connected display device through the physical line; the reporting side host is connected to the camera device through a physical line. After the camera device identifies the image data captured on the display device, it is transmitted to the reporting side host, and the reporting side host is decoded and restored to information data, and then reported. The collection side host and the reporting side host are completely physically isolated, and there is no communication transmission mode connection between them (including wired transmission mode and wireless transmission mode, such as optical fiber, cable, Wi-Fi, NFC, laser, radio frequency, microwave, Bluetooth, infrared, satellite, etc.). It can realize the unidirectionality of data transmission and the real physical isolation of the transmission link, and prevent information leakage from the physical principle. And after setting up an electromagnetic shielding shell, it can not only prevent information leakage during data transmission, but also prevent external electromagnetic interference, ensure the transmission effect, so as to achieve effective security control of the information data transmission process. That is, to a certain extent, it reduces the signal interference effect of electromagnetic equipment or radiation equipment used by others on the transmission information between the host and the device, reduces the occurrence of problems such as data loss during image data transmission, and to a certain extent, it reduces the use of signal interception equipment by others to obtain the transmission information between the host and the device.
[0008] In some specific cases, the collected equipment is a device used to detect military information, such as radar, hydrophone, etc. Similarly, the content type of the information data is related to the type of the collected equipment.
[0009] Furthermore, by providing an electromagnetic shielding shell to encapsulate the collection side host, display device, camera device, and reporting side host, the data collection and reporting system can be mounted on the collected device to achieve secure information transmission of radar, hydrophone and other equipment in the external environment.
[0010] In some specific cases, the encoding conversion method of the image conversion module is any one of the image encoding technologies. Further, the image data obtained through image encoding is determined according to the type of information data, and can be a two-dimensional code, a digital image, etc.
[0011] The camera device is a device with a function of taking pictures, such as a camera, etc. It can be a separate camera. In some specific cases, it is not excluded that the camera device can have functions such as data storage, lens focusing, and image recognition.
[0012] The display device is a device with image display function such as a display, which can be a separate display screen. In some specific cases, it is not excluded that the display device can have functions such as data storage and blue light shielding.
[0013] The external network refers to the external public network relative to the internal network environment where the collected equipment, the collection side host and the display device are located. That is, the external public network is a network that is physically isolated from the collected equipment, the collection side host and the display device, and can be a wide area network or a remote network that connects computers in different local area networks.
[0014] Preferably, the time interval between the generation of two consecutive sets of image data may be set to be adjustable, and when the set time is changed, the image data will be automatically generated according to the set time.
[0015] Preferably, when the host on the collection side detects that the collected device does not generate data or the host on the collection side cannot connect to the collected device, a prompt indicating no data or connection failure is displayed on the display device.
[0016] Preferably, the host on the collection side and the collected device are connected through a physical line (such as a cable, optical fiber, etc.), and the information data is collected through electrical signals.
[0017] In summary, the data collection and reporting system based on the physical isolation environment provided by the utility model has at least the following beneficial effects:
[0018] 1. The host computer on the acquisition side that completes the acquisition work is directly connected to the acquired device through a physical line, without generating other signals to prevent leakage;
[0019] 2. The host on the collection side is completely physically isolated from the host on the reporting side, and adopts contactless image recognition to safely collect and report data;
[0020] 3. The data collection and reporting system is encapsulated as a whole in a shell (or chassis). By designing the data collection and reporting system as an integrated product, the security of the data collection and reporting process is further increased.
[0021] Additional aspects and advantages of the present invention will become apparent in the following description or will be understood through practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS
[0022] The above and / or additional aspects and advantages of the present invention will become apparent and easily understood from the description of the embodiments in conjunction with the following drawings, in which:
[0023] Figure 1 It is a structural schematic diagram of a data collection and reporting system in some embodiments of the utility model.
[0024] Figure 2 It is a structural schematic diagram of the collection side host in some embodiments of the utility model.
[0025] Figure 3It is a structural diagram of a reporting-side host in some embodiments of the utility model.
[0026] Figure 4 It is a schematic diagram of the data transmission relationship between the collection-side host and the collected device in some embodiments of the utility model.
[0027] Figure 5 It is a structural schematic diagram of the collection side host in other embodiments of the utility model.
[0028] Figure 6 It is a structural schematic diagram of the collection side host in some other embodiments of the utility model.
[0029] Figure 7 It is a schematic diagram of the data transmission relationship between the reporting side host and the external network in some embodiments of the utility model.
[0030] Figure 8 It is a structural schematic diagram of a data collection and reporting system in other embodiments of the utility model.
[0031] Fig. 9 It is a structural schematic diagram of a data collection and reporting system in some further embodiments of the utility model.
[0032] Fig.10 It is a schematic diagram of the connection relationship between the data collection and reporting system and the external network or external network equipment in other embodiments of the utility model.
[0033] Fig.11 It is a workflow diagram of a data collection and reporting system in some embodiments of the present utility model.
[0034] The corresponding relationship between the reference numerals and component names is as follows:
[0035] 10 acquisition side host, 101 detection module, 102 acquisition module, 103 image conversion module, 104 output module, 105 cache module, 106 first clock module, 107 second clock module, 20 display device, 30 camera device, 40, reporting side host, 401 image receiving module, 402 image decoding module, 403 reporting module, 50 electromagnetic shielding shell, 51 acquisition side electronic level, 52 acquisition side destruction device, 53 reporting side electronic level, 54 reporting side destruction device, 60 detected device, 70 external network, 80 third clock module;
[0036] The direction of the arrow is the transmission direction of the data flow. DETAILED DESCRIPTION
[0037] In order to more clearly understand the above-mentioned purpose, features and advantages of the utility model, the utility model is further described in detail below in conjunction with the accompanying drawings and specific implementation methods. It should be noted that the embodiments of the present application and the features in the embodiments can be combined with each other without conflict.
[0038] In the following description, many specific details are set forth to facilitate a full understanding of the present invention. However, the present invention may also be implemented in other ways different from those described herein. Therefore, the protection scope of the present invention is not limited to the specific embodiments disclosed below.
[0039] Some embodiments of the present utility model provide a data collection and reporting system based on a physical isolation environment, referred to as a data collection and reporting system.
[0040] Example 1
[0041] like Figure 2 , Figure 3 As shown, the data collection and reporting system in this embodiment includes a collection-side host, a display device, a camera device, and a reporting-side host.
[0042] Specifically, the host on the acquisition side includes a detection module, an acquisition module, an image conversion module, and an output module; the detection module is used to connect to the acquired device, and is used to detect in real time whether the acquired device has information data generated, and is suitable for sending a start signal after the acquired device generates data; the acquisition module is connected to the detection module, and is used to connect to the acquired device to acquire the information data generated by the acquired device after receiving the start signal; the image conversion module is connected to the acquisition module, and is used to convert the information data acquired by the acquisition module into image data through encoding; the output module is connected to the image conversion module, and is used to output the image data; the display device is connected to the output module, and is used to receive image data and display it; the camera device is used to shoot the image data displayed by the display device to obtain a photographic picture; the reporting side host includes an image receiving module, an image decoding module, and a reporting module; the image receiving module is connected to the camera device, and is used to receive a photographic picture; the image decoding module is connected to the image receiving module, and is used to decode the photographic picture and restore it to information data; the reporting module is used to connect to the external network to report the information data.
[0043] In some specific embodiments, the acquisition side host is an embedded industrial-grade host with strong dust-proof, corrosion-proof and shock-proof capabilities. The acquisition side host can generate encrypted image data based on the information data read by the acquisition module and output it to the display device.
[0044] In some specific embodiments, the reporting side host is an embedded industrial-grade host with strong dust, sound and shock resistance. The reporting side host can decrypt the content of the photographic image taken by the camera device and then restore the information data and report it.
[0045] In some specific embodiments, the camera device has an autofocus function to ensure the clarity of the photographic images taken.
[0046] Example 2
[0047] like Figures 1 to 3 As shown, the data collection and reporting system in this embodiment includes a collection side host, a display device, a camera device, a reporting side host, and an electromagnetic shielding shell. The collection side host, the display device, the camera device, and the reporting side host are all arranged in the electromagnetic shielding shell, so that the information data in the collection side host and the image data in the display device cannot be directly transmitted to the reporting side host or the device arranged outside the electromagnetic shielding shell through wired signal transmission or wireless signal transmission.
[0048] Compared with Example 1, this embodiment adds an electromagnetic shielding shell. The electromagnetic shielding shell plays an electromagnetic shielding role. It can not only prevent information leakage during data transmission, but also prevent external electromagnetic interference, ensure the transmission effect, and achieve effective safety control of the information data transmission process.
[0049] In some specific embodiments, the electromagnetic shielding shell is a cold-rolled steel chassis, which has strong pressure resistance and shielding properties, and plays an important role in the safe operation and stable protection of internal equipment.
[0050] Furthermore, the cold-rolled steel chassis is made of cold-rolled steel material with a thickness of 1.5 mm.
[0051] Furthermore, a shielding material plate is provided in the cold-rolled steel chassis. The shielding plate is a composite material plate prepared from a variety of heavy metals, graphene, and nanomaterials. The heavy metals are lead, gallium and other materials. The shielding plate is suspected to be one of lead plates, gallium plates, graphene plates, nanomaterial plates, etc., and may also be a composite material plate synthesized from a variety of materials.
[0052] Example 3
[0053] Based on the above-mentioned embodiment 2, an observation port is provided on the electromagnetic shielding shell, which is used to observe the content displayed by the display device, or observe the working status of the acquisition side host, the display device, the camera device and the reporting side host through the observation port.
[0054] By setting an observation port on the electromagnetic shielding shell, our personnel can observe whether the acquisition side host, the display device, the camera device and the reporting side host are in working condition, so as to simply judge whether the equipment has a fault, thereby facilitating timely maintenance and avoiding missing information data when it is generated.
[0055] Of course, when an observation port is provided on the electromagnetic shielding shell, the complete image data displayed on the display device in Example 1 is easily leaked. By adopting the technical means of Example 2 or 3, the leakage of information data corresponding to the complete image data can be reduced.
[0056] Example 4
[0057] Based on the above-mentioned embodiment 2, the electromagnetic shielding shell is a transparent shell, which is used to observe the content displayed by the display device, or observe the working status of the acquisition side host, the display device, the camera device and the reporting side host.
[0058] By setting the electromagnetic shielding shell as a transparent shell, our personnel can conveniently observe whether the collection side host, the display device, the camera device and the reporting side host are in working condition, so as to simply judge whether the equipment has a fault, thereby facilitating timely maintenance and avoiding missing information data when it is generated.
[0059] Of course, when the electromagnetic shielding shell is set as a transparent shell, the complete image data displayed on the display device in Example 1 is easy to leak. By adopting the technical means of Example 2 or 3, the leakage of information data corresponding to the complete image data can be reduced.
[0060] Example 7
[0061] On the basis of Example 3 or 4, Figure 4 As shown, the detection module is connected to the output module. When the collected device does not generate data, the detection module is used to send the detection result that the collected device does not generate data to the output module for display. The detection module is also used to detect the connection status between the collection side host and the collected device in real time, and send the detection result to the output module for display.
[0062] In this embodiment, the host on the collection side has the ability to communicate with the collected device, read data, and generally detect the link. When it is detected that the collected device has no data or the link is disconnected, the corresponding information can be prompted on the display screen. That is, when it is detected that the collected device has no data or cannot be connected to the collected device, a prompt of no data or connection failure will be displayed on the display device. This makes it convenient for our personnel to observe whether the information data is not generated or the collected device or the link is faulty, which is convenient for timely maintenance to avoid missing the information data when it is generated.
[0063] In other embodiments, when the detection module detects that the collected device does not generate data, the display device is in a dormant state. When the detection module detects that the collected device generates data, an electrical signal is sent to the display device through the output module to put the display device in a display state.
[0064] Example 6
[0065] Based on Example 3 or 4, the output module includes a first output submodule and a second output submodule, and the first output submodule and the second output submodule are both connected to the display device and are used to form two independent display areas on the display interface of the display device; the first output submodule is connected to the image conversion module and is used to output image data so that the image data is displayed in one of the display areas on the display interface; the second output submodule is connected to the acquisition module and is used to record the time of each information data collected in a preset time list, so that the time list can be scrolled and updated in another display area on the display interface after each information data is collected.
[0066] In this embodiment, by setting the display content on the display interface of the display device, our personnel can conveniently observe the number and time of the generated information data, and by comparing with the number and time of the information data finally obtained on the reporting side host or external network, it can be verified whether there is any omission of information data. Therefore, when a data storage device is provided on the collection side or the reporting side, a corresponding search can be performed based on the time information to make the obtained information data complete.
[0067] It should be noted that the object photographed by the camera is still the image data, not the time list, that is, the camera is aimed at the area where the image data is displayed on the display interface, not the area where the time list is displayed.
[0068] Example 7
[0069] Based on any of the above embodiments, Figure 5As shown, the acquisition side host also includes a cache module and a first clock module; the cache module is connected to the acquisition module, and is used to store the information data collected each time; the first clock module is connected to the cache module, and is used to set the sending time interval of the information stored in the cache module; the cache module is connected to the image conversion module, and is used to send a single collected information data to the image conversion module every time the sending time interval passes.
[0070] The acquisition side host provided in this embodiment includes a detection module, an acquisition module, an image conversion module, an output module, a cache module, and a first clock module. In the case where the flow of information data generated by the detected device is large, the cache module is set so that the image conversion module has sufficient time to generate image data, which helps to avoid the accumulation of redundant data. Secondly, by setting the cache module and using it in conjunction with the first clock module, the generation of image data is completed according to the preset time, and then the display device displays the image data according to the preset time. In this way, even if the shooting device and the acquisition side host or the display device do not have a unified time, the shooting of each image data can be achieved, and the probability of missing shooting is reduced.
[0071] Example 8
[0072] Based on any of the above embodiments, Figure 6 As shown, the acquisition side host also includes a second clock module; the second clock module is connected to the image conversion module, and the second clock module is used to set the encoding conversion frequency so that the image conversion module generates image data for the same information data at the encoding conversion frequency to achieve image data refresh.
[0073] Since image data is transmitted unidirectionally, the reporting-side host cannot identify whether the image data is displayed correctly or is correctly captured by the camera device. Therefore, this embodiment sets a refresh mechanism for image data so that the image conversion module can repeatedly generate multiple image data for the same information data for display, thereby avoiding omission of image data.
[0074] In some specific embodiments, the encoding conversion frequency can be set according to the preset shooting time of the camera device to generate multiple picture data within the shooting time period. For example, if the shooting time of the camera device is 30s and the encoding conversion frequency is 10s / time, three photographic pictures can be taken by reasonably setting the shooting start time. Even if the shooting start time is not consistent with the display time of the picture data on the display device, the camera device can still take three photographic pictures.
[0075] Example 9
[0076] Based on any of the above embodiments, Figure 7 As shown, the reporting side host also includes a storage module, which is connected to the image receiving module and is used to store photographic pictures.
[0077] This embodiment can retain photographic images by setting up a storage module to perform data verification and other tasks.
[0078] In some specific embodiments, the storage module may be connected only to the image receiving module, and a transmission interface is provided on the reporting side host, through which an external device may be connected to the storage module to export the photographic images stored in the storage module.
[0079] Example 10
[0080] Based on any of the above embodiments, Figure 8 As shown, the data collection and reporting system also includes: a third clock module; the third clock module is connected to the camera device, and the third clock module is used to set the shooting frequency of the camera device so that the shooting of the camera device is synchronized with the change of the image data displayed on the display device.
[0081] In this embodiment, when the reporting side host cannot identify whether the image data is displayed or whether the image data is captured by the camera device, the third clock module can be used to set the shooting frequency of the camera device so that the shooting frequency of the camera device is the same as the update frequency of the new image data displayed on the display device, so as to ensure the capture of the image data.
[0082] Especially when there are multiple copies of image data, setting the shooting frequency of the camera device can help ensure that no image data is missed, thereby ensuring that a photographic image carrying complete information data can be synthesized in the reporting host, thereby restoring the complete information data.
[0083] Embodiment 11
[0084] Based on any of the above embodiments, Fig. 9As shown, the data collection and reporting system also includes: an electronic level on the collection side, a destruction device on the collection side, an electronic level on the reporting side, and a destruction device on the reporting side; the electronic level on the collection side, the destruction device on the collection side, the electronic level on the reporting side, and the destruction device on the reporting side are all arranged in the electromagnetic shielding shell, and the electronic level on the collection side and the electronic level on the reporting side are both used to obtain the change angle of the electromagnetic shielding shell relative to a preset horizontal plane; the destruction device on the collection side and the destruction device on the reporting side both store a data destruction program; the destruction device on the collection side is respectively connected to the electronic level on the collection side, the host on the collection side, and the display device, and is used to obtain the change angle, and is suitable for starting the data when the change angle exceeds the preset angle range. According to the data destruction program, the data in the host on the collection side and the display device are destroyed; the destruction device on the reporting side is respectively connected to the electronic level on the reporting side, the host on the reporting side, and the camera device, for obtaining the change angle, and is suitable for starting the data destruction program when the change angle exceeds the preset angle range to destroy the data in the host on the reporting side and the camera device; wherein, there is no signal transmission between the electronic level on the collection side and the destruction device on the collection side and the equipment on the reporting side (including the host on the reporting side, the camera device, the electronic level on the reporting side, and the destruction on the reporting side); there is no signal transmission between the electronic level on the reporting side and the destruction device on the reporting side and the equipment on the collection side (including the host on the reporting side, the display device, the electronic level on the reporting side, and the destruction on the collection side).
[0085] In this embodiment, the collection side electronic level, the collection side destruction device, the reporting side electronic level, and the reporting side destruction device are arranged in the electromagnetic shielding shell, so that even if the data collection and reporting system is acquired by other parties, no information leakage will occur.
[0086] Especially when the data collection and reporting system is set up on the collected equipment, due to the long distance on our side, the failure of the recovery equipment of the collected equipment, etc., it may be impossible to recover the collected equipment. In this case, destroying the data is an effective means to avoid data leakage.
[0087] At the same time, it should be noted that in this embodiment, two electronic levels and two destruction devices are provided, and the collection side and the reporting side are each provided with one set of electronic levels and destruction devices. This enables physical isolation between the two sets of electronic levels and destruction devices. Data cannot be transmitted between the collection side and the reporting side through the electronic level or the destruction device. In this way, compared with the technical solution of only providing one set of electronic levels and destruction devices, and providing destruction procedures for both the collection side and the reporting side, this embodiment further improves the security of information.
[0088] Example 12
[0089] The data collection and reporting system based on a physical isolation environment provided in this embodiment includes a collection-side host, a display device, a camera device, a reporting-side host, and an electromagnetic shielding shell.
[0090] Specifically, Fig.10 As shown, the acquisition side host includes a detection module, an acquisition module, an image conversion module, and an output module; the detection module is used to connect to the acquired device, and is used to detect in real time whether the acquired device has information data generated, and is suitable for sending a start signal after the acquired device generates data. The acquisition module is connected to the detection module and is used to connect to the acquired device to acquire the information data generated by the acquired device after receiving the start signal. The image conversion module is connected to the acquisition module and is used to convert the information data acquired by the acquisition module into image data through encoding. The output module is connected to the image conversion module and is used to output the image data; the display device is connected to the output module, and is used to receive the image data and display it; the camera device is used to take pictures The image data displayed by the display device is photographed to obtain a photographic picture; the reporting side host includes an image receiving module, an image decoding module and a reporting module; the image receiving module is connected to the camera device and is used to receive the photographic picture, the image decoding module is connected to the image receiving module and is used to decode the photographic picture and restore it into information data, and the reporting module is used to connect to an external network to report the information data; the acquisition side host, the display device, the camera device and the reporting side host are all arranged in the electromagnetic shielding shell, so that the information data in the acquisition side host and the image data in the display device cannot be directly transmitted to the reporting side host or the equipment arranged outside the electromagnetic shielding shell through wired signal transmission or wireless signal transmission.
[0091] The difference between this embodiment 12 and the above embodiments 1 to 11 is that:
[0092] In the above-mentioned embodiments 1 to 11, the reporting side host includes an image receiving module, an image decoding module, and a reporting module. The reporting module is indirectly connected to the image receiving module, with an image decoding module in between. That is, the image decoding module is arranged in the reporting side host, and is respectively connected to the image receiving module and the reporting module, and is used to decode the photographic image and restore it to information data and then report it to the external network.
[0093] In this embodiment 12, the reporting side host includes an image receiving module and a reporting module. The reporting module is directly connected to the image receiving module without an image decoding module in between. The image decoding module is used to be set in the external network to decode and restore the reported photographic image to obtain information data in the external network.
[0094] By adopting this embodiment, image decoding is not completed in the data acquisition and reporting system, so that there is no information data in the reporting side host of the data acquisition and reporting system, and only the photographic pictures are transmitted to the external network. In this way, even if the photographic pictures are obtained by other parties during the transmission from the reporting side host to the external network, without the corresponding decoding technology, the other parties cannot obtain the information data, which helps to further avoid the leakage of information data. After our personnel obtain the photographic pictures through the external network, they can perform subsequent decoding operations or send the photographic pictures to another physically isolated confidentiality system, so that the two confidentiality systems can achieve secure transmission of information data even if they are not in the same network.
[0095] In addition, the data collection and reporting system in the above embodiment can be used to achieve the following Fig.11 The workflow shown, namely, through the steps of data collection, data visualization, image display, image capture, image decoding, etc., can not only realize the unidirectional data transmission, but also realize the real physical isolation of the transmission link, thus ensuring the security of the data transmission process.
[0096] In summary, the data collection and reporting system based on a physical isolation environment provided by the utility model can achieve full physical isolation between the collection side host and the reporting side host, without any communication transmission mode connection between them, which can not only realize the unidirectional data transmission, but also realize the real physical isolation of the transmission link, and prevent the leakage of information from the physical principle, and by setting an electromagnetic shielding shell, it can not only prevent the leakage of information in the data transmission process, but also prevent external electromagnetic interference, ensure the transmission effect, so as to realize effective security control of the information data transmission process, thereby enabling the data collection and reporting system to effectively and continuously transmit information to the external network while preventing information leakage, and has a high use value.
[0097] In the present invention, the terms "first", "second", and "third" are used for descriptive purposes only and should not be understood as indicating or implying relative importance; the term "plurality" refers to two or more, unless otherwise clearly defined. The terms "installed", "connected", "connected", "fixed" and the like should be understood in a broad sense. For example, "connected" can be a fixed connection, a detachable connection, or an integral connection; "connected" can be a direct connection or an indirect connection through an intermediate medium. For those of ordinary skill in the art, the specific meanings of the above terms in the present invention can be understood according to the specific circumstances.
[0098] In the description of this specification, the description of the terms "one embodiment", "some embodiments", "specific embodiments", etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the utility model. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described can be combined in any one or more embodiments or examples in a suitable manner.
[0099] The above are only preferred embodiments of the present invention and are not intended to limit the present invention. For those skilled in the art, the present invention may be subject to various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.
Claims
1. A data collection and reporting system based on a physically isolated environment, characterized in that: include: The host on the acquisition side includes a detection module, an acquisition module, an image conversion module, and an output module; The detection module is used to be connected to the collected device, used to detect whether the collected device has information data generated, and is suitable for sending a start signal after the collected device generates data. The collection module is connected to the detection module and is used to be connected to the collected device to collect the information data generated by the collected device after receiving the start signal. The image conversion module is connected to the collection module and is used to convert the information data collected by the collection module into image data through encoding. The output module is connected to the image conversion module and is used to output the image data; A display device, connected to the output module, for receiving image data and displaying it; A camera device, used to capture the image data displayed by the display device to obtain a photographic picture; A reporting side host, the reporting side host comprises an image receiving module, an image decoding module, and a reporting module; the image receiving module is connected to the camera device and is used to receive photographic images, the image decoding module is connected to the image receiving module and is used to decode the photographic images and restore them into information data, and the reporting module is used to connect to an external network to report the information data; An electromagnetic shielding shell, wherein the acquisition side host, the display device, the camera device and the reporting side host are all arranged in the electromagnetic shielding shell, so that the information data in the acquisition side host and the image data in the display device cannot be directly transmitted to the reporting side host or the equipment arranged outside the electromagnetic shielding shell through wired signal transmission or wireless signal transmission.
2. The data collection and reporting system based on a physical isolation environment according to claim 1 is characterized in that: The electromagnetic shielding shell is provided with an observation port for observing the content displayed by the display device, or observing the working status of the acquisition side host, the display device, the camera device and the reporting side host through the observation port; or The electromagnetic shielding shell is a transparent shell, which is used to observe the content displayed by the display device, or observe the working status of the acquisition side host, the display device, the camera device and the reporting side host.
3. The data collection and reporting system based on a physical isolation environment according to claim 2 is characterized in that: The detection module is connected to the output module. When the collected device does not generate data, the detection module is used to send the detection result that the collected device does not generate data to the output module for display. The detection module is also used to detect the connection status between the collection side host and the collected device in real time, and send the detection result to the output module for display.
4. The data collection and reporting system based on a physical isolation environment according to claim 2 is characterized in that: The output module includes a first output submodule and a second output submodule, and the first output submodule and the second output submodule are both connected to the display device and are used to form two independent display areas on the display interface of the display device; The first output submodule is connected to the image conversion module and is used for outputting image data so that the image data is displayed in one of the display areas on the display interface; The second output submodule is connected to the acquisition module and is used to record the time of each information data collected in a preset time list, so that after each information data is collected, the time list is scrolled and updated in another display area on the display interface.
5. The data collection and reporting system based on a physically isolated environment according to claim 1 is characterized in that: The acquisition side host also includes a cache module and a first clock module; the cache module is connected to the acquisition module and is used to store the information data collected each time; the first clock module is connected to the cache module and is used to set the sending time interval of the information stored in the cache module; the cache module is connected to the image conversion module and is used to send the information data collected once to the image conversion module every time the sending time interval passes.
6. The data collection and reporting system based on a physically isolated environment according to claim 1 is characterized in that: The reporting-side host further includes a storage module, which is connected to the image receiving module and is used to store photographic images.
7. The data collection and reporting system based on a physical isolation environment according to claim 1 is characterized in that: The acquisition side host also includes a second clock module; the second clock module is connected to the image conversion module, and the second clock module is used to set the encoding conversion frequency so that the image conversion module generates image data for the same information data at the encoding conversion frequency to achieve image data refresh.
8. The data collection and reporting system based on a physical isolation environment according to claim 1 is characterized in that: Also includes: A third clock module; The third clock module is connected to the camera device, and is used to set the shooting frequency of the camera device so that the shooting of the camera device is synchronized with the change of the image data displayed on the display device.
9. The data collection and reporting system based on a physically isolated environment according to any one of claims 1 to 8, characterized in that: Also includes: Electronic level meter on the collection side, destruction device on the collection side, electronic level meter on the reporting side, destruction device on the reporting side; The electronic level on the collection side, the destruction device on the collection side, the electronic level on the reporting side, and the destruction device on the reporting side are all arranged in the electromagnetic shielding shell, and the electronic level on the collection side and the electronic level on the reporting side are both used to obtain the change angle of the electromagnetic shielding shell relative to the preset horizontal plane; the destruction device on the collection side and the destruction device on the reporting side both store a data destruction program; The collection side destruction device is respectively connected to the collection side electronic level, the collection side host, and the display device, and is used to obtain the change angle, and is suitable for starting a data destruction program when the change angle exceeds a preset angle range to destroy the data in the collection side host and the display device; The reporting side destruction device is respectively connected to the reporting side electronic level, the reporting side host, and the camera device, and is used to obtain the change angle, and is suitable for starting a data destruction program when the change angle exceeds a preset angle range to destroy the data in the reporting side host and the camera device; Among them, there is no signal transmission between the electronic level meter on the collection side, the destruction device on the collection side and the equipment on the reporting side; there is no signal transmission between the electronic level meter on the reporting side, the destruction device on the reporting side and the equipment on the collection side.
10. The data collection and reporting system based on a physically isolated environment according to any one of claims 1 to 8, characterized in that: The electromagnetic shielding shell comprises a chassis and a shielding plate arranged in the chassis; The chassis is made of cold-rolled steel with a thickness greater than or equal to 1 mm; the shielding plate is a composite material plate made of a variety of materials including heavy metals, graphene, and nanomaterials.