Airborne cloud box system

Abstract

The utility model belongs to the technical field of network security, and particularly relates to an airborne cloud box system, which comprises a power supply module, and a data acquisition module, a data storage module, a data transmission module and a network security protection module which are connected with the power supply module, the data power module is used for providing working power; the data acquisition module is used for acquiring data and processing the acquired data; the input end of the data storage module is connected with the output end of the data acquisition module, and the data storage module is used for storing data acquired and processed by the data acquisition module; the data transmission module is in bidirectional connection with the data storage module, the data transmission module is used for transmitting data stored in the data storage module to a ground station, and the data transmission module is also used for providing an interface for the ground station to access the data stored in the data storage module online; the network security protection module is in bidirectional connection with the data transmission module, and the network security protection module is used for providing protection for downlink data transmission and uplink data access of the data transmission module.

Description

TECHNICAL FIELD

[0001] The utility model belongs to network security technical field, especially relate to a kind of airborne cloud box subsystem. BACKGROUND

[0002] Chinese patent publication number CN106846545, publication date June 13, 2017, the utility model name is a kind of civil aviation passenger plane flight recorder, the application discloses a kind of civil aviation passenger plane flight recorder providing flight data, flight voice and flight video recording function;Chinese patent publication number CN115439952A, publication date December 06, 2022, the utility model name is flight recorder system and method, the application discloses a kind of flight recorder system of aircraft, including resource controller module, the resource controller module is communicatively coupled to a set of flight recorder system module via switching structure;Chinese patent publication number CN110262550A, publication date September 20, 2019, the utility model name is a kind of unmanned aerial vehicle air control black box subsystem, the application discloses a kind of unmanned aerial vehicle air control black box subsystem, and server and black box, black box and flight control are respectively through communication data transmission protocol and mutually transmit data.

[0003] The above patents propose a variety of flight recorder design schemes, which provide support for accident analysis and recorder design improvement, and the shortcomings are that the data cannot be obtained due to the loss or serious damage of traditional black box in the design process, and the network security risk in the data transmission process of "cloud box system" is not considered. UTILITY MODEL CONTENT

[0004] The utility model aims at improving traditional airborne black box, provides a kind of airborne cloud box subsystem, simultaneously considers the network security risk introduced by real-time data transmission, increases network security protection function in airborne "cloud box" system.

[0005] Technical scheme

[0006] A kind of airborne cloud box subsystem, it include: power module and the data acquisition module, data storage module, data transmission module and network security protection module connected with it:

[0007] Data power module is used to provide working power;

[0008] The data acquisition module is used to collect data and process the collected data;

[0009] The input end of the data storage module is connected to the output end of the data acquisition module, and the data storage module is used to store the data collected and processed by the data acquisition module;

[0010] The data transmission module is bidirectionally connected with the data storage module, and is configured to transmit the data stored in the data storage module to a ground station; the data transmission module is further configured to provide an interface for the ground station to access the data stored in the data storage module online.

[0011] The network security protection module is bidirectionally connected with the data transmission module, and is configured to provide protection for the downlink data transmission and uplink data access of the data transmission module.

[0012] Further, the data acquisition module comprises a flight data acquisition module, a three-axis acceleration acquisition module, a cockpit audio acquisition module and a flight video acquisition module.

[0013] The flight data acquisition module acquires, processes and integrates multiple sensor signals, and converts the acquired data into a standard format; the three-axis acceleration acquisition module acquires three-axis acceleration values of the aircraft; the cockpit audio acquisition module acquires sound signals of the pilot, co-pilot, crew members and inside the cockpit; and the flight video acquisition module acquires pictures of the pilot and co-pilot flying the aircraft and operating the instrument equipment inside the cockpit.

[0014] Further, the data storage module comprises a flight data storage module, a cockpit audio storage module and a flight video storage module.

[0015] The flight data storage module is connected with the flight data acquisition module and the three-axis acceleration acquisition module, and is configured to record various flight data transmitted by the flight data acquisition module and the three-axis acceleration acquisition module.

[0016] The cockpit audio storage module is connected with the cockpit audio acquisition module, and is configured to record the sound signals of the pilot, co-pilot, crew members and inside the cockpit transmitted by the cockpit audio acquisition module.

[0017] The flight video storage module is connected with the flight video acquisition module, and is configured to store the pictures of the pilot and co-pilot flying the aircraft and operating the instrument equipment inside the cockpit transmitted by the flight video acquisition module.

[0018] Further, the data transmission module comprises a data downlink module and a data access module.

[0019] The data downlink module is connected with the data storage module, and is configured to transmit various flight data stored in the data storage module to a ground station through a wireless transmission link.

[0020] The data access module is connected with the ground station through a wireless transmission link, and is configured to provide an interface for the ground station to access the various flight data stored in the data storage module.

[0021] Further, the network security protection module comprises a security authentication module and a data encryption module.

[0022] The data encryption module is connected with the data download module, and is configured to encrypt and protect data transmitted by the data download module to the ground station.

[0023] The security authentication module is connected with the data access module, and is configured to authenticate the identity of a data storage module access request from the ground station.

[0024] Further, the network security protection module further comprises a data integrity protection module.

[0025] The data integrity protection module is configured to perform integrity check on data transmitted to the ground station.

[0026] Beneficial effects:

[0027] An on-board "cloud box" system scheme is innovatively proposed, which realizes real-time transmission of flight data, remote access, aircraft state monitoring and flight quality analysis.

[0028] The real-time transmission feature of the on-board "cloud box" system effectively avoids damage and loss of black boxes, and provides strong support for accident investigators to analyze accident causes and improve aircraft design.

[0029] The network security protection function protects the data download and remote access process of the "cloud box" system, which can effectively avoid network security risks such as deliberate attack, unauthorized access and malicious tampering, and ensure the safety and reliability of the on-board "cloud box" system. BRIEF DESCRIPTION OF DRAWINGS

[0030] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings needed in the embodiments will be briefly introduced as follows. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without creative labor on the basis of these drawings.

[0031] Figure 1 A schematic diagram of an on-board cloud box system of the present application. DETAILED DESCRIPTION

[0032] Following make the application's implementation through specific concrete example, the person skilled in the art can easily understand the other advantages and efficacy of the application from the disclosure of this specification. Obviously, the described embodiments are only a part of the embodiments of the application, not all the embodiments. The application can also be implemented or applied by another different specific implementation, and the details in the specification can be based on different views and applications, various modifications or changes are made without departing from the spirit of the application. It should be noted that the following embodiments and features in the embodiments can be combined with each other without conflict. Based on the embodiments in the application, all other embodiments obtained by the person skilled in the art without creative labor belong to the scope of protection of the application.

[0033] The utility model relates to a kind of airborne "cloud box" systems with network security protection function, mainly by power module 1, data acquisition module 2, data storage module 3, data transmission module 4, network security protection module 5 and structural member are constituted. Among them, data acquisition module 2 includes flight data acquisition module 201, three-axis acceleration acquisition module 202, cockpit audio acquisition module 203, flight video acquisition module 204 and other auxiliary circuits;Data storage module 3 includes crash protection module 301, flight data storage module 302, cockpit audio storage module 303 and flight video storage module 304 and other auxiliary circuits;Data transmission module 4 includes data downlink module 401, data access module 402 and other auxiliary circuits;Network security protection module 5 includes security authentication module 501, data encryption module 502 and data integrity protection module 503 and other auxiliary circuits.

[0034] Power module 1 provides product working power supply.

[0035] Data acquisition module 2 provides acquisition signal type physical channel configuration, front-end signal conditioning, data acquisition function. Flight data acquisition module 201 acquires, processes and synthesizes sensor signals from various different systems, and converts data into standard format, three-axis acceleration acquisition module 202 acquires three-axis acceleration values of aircraft;Cockpit audio acquisition module 203 acquires signals of multiple voice sensors;Flight video acquisition module 204 acquires the picture of the captain and co-pilot driving the aircraft and operating instrument equipment in the cockpit.

[0036] The data storage module 3 provides data storage function through solid-state memory. The flight data storage module 302 receives and stores the flight data transmitted by the flight data acquisition module 201 through the data bus; the cockpit audio storage module 303 receives and stores the three-way voice of the pilot, co-pilot and crew members and the cabin audio information collected by the cockpit audio acquisition module 203; the flight video storage module 304 receives and stores the flight video collected by the flight video acquisition module 204.

[0037] The data transmission module 4 provides real-time transmission and remote access function. The data downlink module 401 transmits the flight information stored by the data storage module 3 to the ground data station through a predetermined link; the ground data station can access the flight information stored by the data storage module 3 through the data access module 402.

[0038] The security authentication module 501 provides the identity authentication and key negotiation function of the onboard "cloud locker" and the ground data station. The security authentication module can provide strong encryption and secure storage function through a hardware security module (HSM) or a special security chip, etc., to ensure that only authorized legal users can access the flight data through the data access module 402; the data encryption module 502 provides confidentiality protection for the storage data transmitted by the onboard cloud locker data downlink module 401 to the ground data station; the data encryption module can realize the function through an encryption chip; the data integrity protection module 503 provides message authentication and integrity protection for data transmission. The data integrity protection module can configure a hardware firewall or use a hardware security module to prevent data tampering attacks and keep the data downloaded by the ground data station consistent with the data of the onboard cloud locker.

[0039] The flight data storage module 302 is used for recording various flight data sent by the flight data acquisition module 201 and the three-axis acceleration acquisition module 202. The cockpit audio storage module 303 is used for recording sound information in the cockpit sent by the cockpit audio acquisition module 203. The flight video storage module 304 is used for recording the picture of the main pilot and the co-pilot operating the airplane in the cockpit sent by the flight video acquisition module 204. The data downlink module 401 transmits the flight information stored in the data storage module 3 to the ground data station through a predetermined link, and the ground data station can access the flight information stored in the data storage module 3 through the data access module 402. The security authentication module 501 provides the onboard "cloud box" and the ground data station identity authentication and key negotiation function, ensures that only the authorized legal user can obtain the flight data, thereby reducing unauthorized access and potential threats, preventing impersonation attacks, and the key negotiation is used for encryption and integrity protection of the data after authentication. The data encryption module 502 provides confidentiality protection for the transmission process of the onboard cloud box storage data downlink to the ground data station, so as to reduce eavesdropping attacks. The data integrity protection module 503 provides message authentication and integrity protection for data transmission, so as to prevent message tampering attacks and keep the data downloaded by the ground data station consistent with the data of the onboard cloud box.

[0040] The above is only a specific embodiment of the utility model, which is used for detailed description of the utility model, and the part not described in detail is a conventional technology. However, the protection scope of the utility model is not limited to this, and any person skilled in the art can easily think of changes or replacements within the technical range disclosed by the utility model, which should be covered in the protection scope of the utility model. The protection scope of the utility model should be subject to the protection scope of the claims.

Claims

1. An on-board cloud locker subsystem, characterized by: The system comprises a power module and a data acquisition module, a data storage module, a data transmission module and a network security protection module connected therewith; The data power module is used for providing working power supply; The data acquisition module is used for collecting data and processing the collected data; The data storage module is connected to the output end of the data acquisition module and is used for storing the processed data collected by the data acquisition module; The data transmission module is bidirectionally connected to the data storage module, and is used for transmitting the data stored in the data storage module to a ground station and providing an interface for the ground station to access the data stored in the data storage module online; The network security protection module is bidirectionally connected to the data transmission module, and is used for protecting the downlink data transmission and uplink data access of the data transmission module.

2. The system of claim 1, wherein: The data acquisition module comprises a flight data acquisition module, a three-axis acceleration acquisition module, a cockpit audio acquisition module and a flight video acquisition module; The flight data acquisition module collects, processes and integrates multiple sensor signals, and converts the collected data into a standard format; the three-axis acceleration acquisition module collects three-axis acceleration values of the aircraft; the cockpit audio acquisition module collects sound signals of the pilot, the co-pilot, the crew and the cockpit; and the flight video acquisition module collects pictures of the pilot and the co-pilot driving the aircraft and operating the instrument equipment in the cockpit.

3. The system of claim 2, wherein: The data storage module comprises a flight data storage module, a cockpit audio storage module and a flight video storage module; The flight data storage module is connected to the flight data acquisition module and the three-axis acceleration acquisition module, and is used for recording various flight data transmitted by the flight data acquisition module and the three-axis acceleration acquisition module; The cockpit audio storage module is connected to the cockpit audio acquisition module, and is used for recording the sound signals of the pilot, the co-pilot, the crew and the cockpit sent by the cockpit audio acquisition module; The flight video storage module is connected to the flight video acquisition module, and is used for storing the pictures of the pilot and the co-pilot driving the aircraft and operating the instrument equipment in the cockpit sent by the flight video acquisition module.

4. The system of claim 3, wherein: The data transmission module comprises a data downlink module and a data access module; The data downlink module is connected to the data storage module, and is used for transmitting various flight data stored in the data storage module to a ground station through a wireless transmission link; The data access module is connected to the ground station through a wireless transmission link, and is used for providing an interface for the ground station to access the various flight data stored in the data storage module.

5. The system of claim 4, wherein: The network security protection module comprises a security authentication module and a data encryption module; The data encryption module is connected to the data downlink module, and is used for encrypting the data sent by the data downlink module to the ground station; The security authentication module is connected to the data access module, and is used for authenticating the identity of the data storage module access request from the ground station.

6. The system of claim 5, wherein: The network security protection module further comprises a data integrity protection module; The data integrity protection module is used for checking the integrity of the data transmitted to the ground station.

Images