A wireless security forwarding device

Abstract

The utility model discloses a wireless safety forwarding device, including multichannel wi -Fi module, main control unit and 5G module. The main control unit includes first main control chip and second main control chip, and multichannel wi -Fi module includes STA module and AP module, and its output end is connected with second main control chip, and mode configuration and data transceiver control are carried out by second main control chip, realize AP mode terminal and STA mode terminal's simultaneous access and mixed networking. 5G module is connected with first main control chip, is used for establishing 5G communication link, and first main control chip and second main control chip interconnection, and the data that multichannel wi -Fi module receives is forwarded through the security link that 5G module establishes. The device supports the uniform analysis and transcoding of multiple source heterogeneous stream media data, has the advantages of simple deployment, strong compatibility, communication safety and reliability.

Description

Technical Field

[0001] This utility model relates to a wireless security forwarding device, belonging to the field of data transmission technology. Background Technology

[0002] With the rapid development of wireless communication technology, various terminal devices are increasingly being used in fields such as public safety, emergency command, and industrial IoT. In these application scenarios, it is often necessary to simultaneously connect multiple types of terminal devices (such as dedicated cameras that only support AP mode, handheld smart terminals that only support STA mode, etc.) and securely and reliably transmit the collected multi-source heterogeneous data (such as audio and video streams based on different streaming media protocols) back to the remote command center through a unified gateway device.

[0003] However, existing wireless forwarding devices centered around general-purpose routers have significant technical shortcomings when addressing these complex requirements. First, there are limitations in terminal access capabilities. Mainstream routers typically only support a single AP mode, where they act as wireless access points broadcasting signals for STA mode terminals to connect to. However, many AP mode terminals present in the field (such as certain dedicated cameras and drone image transmission devices) cannot actively connect to the router's AP, thus preventing direct access to the existing network. To solve this technical problem, the current common approach is to deploy separate wireless repeaters or bridges for signal conversion. This not only increases the number of devices, power consumption, and cost of the command and dispatch system but also introduces higher transmission latency and data packet loss risks due to multiple relays, severely impacting the system's deployment efficiency and stability in emergency scenarios. Second, there are deficiencies in data processing compatibility. Existing devices lack the ability to uniformly parse and transcode multi-source heterogeneous streaming media protocols (such as RTSP, HLS, RTP, etc.), making it difficult to standardize the data formats reported by different terminals, posing significant challenges to the unified reception and processing by the backend server. Third, there are shortcomings in communication security. Although some secure routers use SOC chips based on commercial cryptographic algorithms to encrypt and decrypt data, their design focuses on the secure processing of the data itself, without addressing the device's own authentication and the establishment of secure links, and without solving the aforementioned problems of mixed access of multi-mode terminals and heterogeneous streaming media data processing.

[0004] Therefore, existing technologies lack an integrated wireless security forwarding device that can simultaneously enable mixed access of multi-mode Wi-Fi terminals, unified processing of multi-source heterogeneous streaming media data, and integrated end-to-end secure communication capabilities. Utility Model Content

[0005] The technical problem to be solved by this utility model is to provide a wireless security forwarding device.

[0006] To achieve the above-mentioned technical objectives, the present invention adopts the following technical solution: According to an embodiment of this utility model, a wireless security forwarding device is provided, comprising a multi-channel Wi-Fi module, a main control unit, and a 5G module; wherein... The main control unit includes a first main control chip and a second main control chip, and the multi-channel Wi-Fi module includes a STA module and an AP module; The multi-channel Wi-Fi module is connected to the second main control chip, which performs mode configuration and data transmission and reception control on it, thereby enabling simultaneous access and mixed networking of AP mode terminals and STA mode terminals. The 5G module is connected to the first main control chip, and the first main control chip controls the 5G module to establish a 5G communication link. The first main control chip is interconnected with the second main control chip and is used to forward the data received by the multi-channel Wi-Fi module through the secure link established by the 5G module.

[0007] Preferably, the 5G module has a built-in super SIM card, which is used to perform two-way identity authentication and key negotiation with the authentication server based on the national cryptographic algorithm to establish the secure link.

[0008] Preferably, the 5G module is a J9905 chip.

[0009] Preferably, the first main control chip is U8102-CH634F, which is used to connect to the corresponding interface of the 5G module through the P1_HS_DP, P1_HS_DM, P1_SS_TXA, P1_SS_TXB, P1_SS_RXA, and P1_SS_RXB interfaces.

[0010] Preferably, the second main control chip is U8125-CH634F, which is used to connect to the AP module through the P2_HS_DP and P2_HS_DM interfaces, and to connect to the STA module through the P3_HS_DP and P3_HS_DM interfaces.

[0011] Preferably, the STA module includes an SV6355 chip and an SGM2590D chip; wherein the USB_DP interface and USB_DM interface of the SV6355 chip are respectively connected to the P3_HS_DP interface and P3_HS_DM interface of the second main control chip; and the 3V3 interface of the SV6355 chip is connected to the VOUT interface of the SGM2590D chip.

[0012] Preferably, the AP module is a BL_M8812CU2 / NC chip; its DM interface and DP interface are respectively connected to the P2_HS_DM interface and P2_HS_DP interface of the second main control chip.

[0013] Preferably, the multi-channel Wi-Fi module includes at least four channels, of which three channels are configured in STA mode and one channel is configured in AP mode.

[0014] Compared with the prior art, the wireless security forwarding device provided by this utility model has the following beneficial effects: (1) By integrating multiple Wi-Fi modules that can be independently configured as AP or STA modes, this utility model can directly access heterogeneous devices such as dedicated cameras in AP mode and handheld terminals in STA mode without any external relay equipment, which greatly simplifies on-site deployment, reduces system complexity and cost, and improves connection stability and data transmission efficiency.

[0015] (2) The main control unit has powerful streaming media protocol parsing and transcoding capabilities. It can uniformly parse, transcode and encapsulate audio and video data streams from different terminals and different protocols (such as RTSP, HLS and RTP) into standard formats (such as RTMP), thereby effectively solving the compatibility problem of the backend server and realizing seamless data connection.

[0016] (3) Through the super SIM card built into the 5G module and national cryptographic algorithms (such as SM9 and SM4), this utility model not only realizes two-way identity authentication between the device and the authentication server, but also negotiates and establishes an encrypted secure transmission link. This ensures that the entire process from terminal access to data back to the backend is under high-level security protection, effectively preventing unauthorized access and data leakage. Attached Figure Description

[0017] Figure 1 A schematic diagram of the overall structure of a wireless security forwarding device provided in an embodiment of this utility model; Figure 2 This is a circuit diagram of the STA module in an embodiment of the present invention; Figure 3 This is a circuit schematic diagram of the AP module in an embodiment of the present invention; Figure 4A This is a circuit diagram of the first main control chip in an embodiment of the present invention; Figure 4B This is a circuit diagram of the second main control chip in an embodiment of the present invention; Figure 5 This is a circuit diagram of the 5G module in an embodiment of the present invention. Detailed Implementation

[0018] The technical content of this utility model will be described in detail below with reference to the accompanying drawings and specific embodiments.

[0019] like Figure 1 As shown in the figure, this utility model embodiment provides a wireless security forwarding device, which includes at least a multi-channel Wi-Fi module, a main control unit, and a 5G module. The main control unit includes a first main control chip and a second main control chip; the multi-channel Wi-Fi module includes at least one STA module and at least one AP module; the output of the multi-channel Wi-Fi module is connected to the input of the second main control chip, which performs mode configuration and data transmission / reception control on the multi-channel Wi-Fi module to enable simultaneous access and hybrid networking of AP mode terminals and STA mode terminals; the 5G module is connected to the first main control chip, which controls the 5G module to establish a 5G communication link; the first main control chip is connected to the second main control chip and is used to forward the data received by the multi-channel Wi-Fi module through the secure link established by the 5G module. The multi-channel Wi-Fi module includes at least four streaming media data transmission channels, of which three channels are configured in STA mode and one channel is configured in AP mode.

[0020] In one embodiment of this utility model, the multi-channel Wi-Fi module includes a STA module and an AP module. For example... Figure 2 As shown, the STA module includes the SV6355 chip and the SGM2590D chip. The SV6355 chip, as the core of the STA (Station) mode, is responsible for scanning and connecting to external AP mode devices (such as dedicated cameras) and receiving their audio and video data streams. Its USB_DP and USB_DM interfaces connect to the P3_HS_DP and P3_HS_DM interfaces of the second main control chip, respectively. The 3V3 interface serves as the operating voltage interface and connects to the VOUT interface of the SGM2590D chip. The SGM2590D chip is a power distribution switch used to provide a stable, controlled, and safe power supply for multi-channel Wi-Fi modules, etc. The SGM2590D chip has five pins, used for input voltage (VIN), enable control (EN), current limit setting (ILIM), output voltage (VOUT), and ground (GND).

[0021] like Figure 3 As shown, the AP module uses the BL_M8812CU2 / NC chip, whose DM and DP interfaces are connected to the P2_HS_DM and P2_HS_DP interfaces of the second main control chip, respectively. In this wireless security forwarding device, it acts as an AP (access point), responsible for broadcasting the SSID, creating a wireless network for STA-mode terminals such as law enforcement recorders to access, and receiving data uploaded by these terminals.

[0022] like Figure 4A As shown, in one embodiment of this utility model, the first main control chip is U8102-CH634F, which is used to control the 5G module. It is connected to the corresponding interface of the 5G module through interfaces such as P1_HS_DP, P1_HS_DM, P1_SS_TXA / TXB, and P1_SS_RXA / RXB, and manages the establishment and maintenance of the 5G communication link and all data transmitted and received through the 5G network.

[0023] like Figure 4B As shown, in one embodiment of this utility model, the second main control chip is U8125-CH634F, which is used to connect to the AP module through the P2_HS_DP / P2_HS_DM interface and to the SV6355 chip of the STA module through the P3_HS_DP / P3_HS_DM interface. Its function is to configure the mode of the multi-channel Wi-Fi module, control the data transmission and reception, process heterogeneous data from AP mode terminals and STA mode terminals, and finally pass the data to the first main control chip for forwarding through chip interconnection.

[0024] like Figure 5 As shown, in one embodiment of this utility model, the 5G module uses the J9905 chip. This module establishes a connection with the first main control chip through multiple high-speed interfaces such as USB_HS_DP / DM and USB_SS_TX / RX to provide high-speed data transmission capabilities. Its core function is to establish a 5G cellular network backhaul link and use the built-in super SIM card to read the device identifier, then perform two-way identity authentication and key negotiation with the authentication server based on national cryptographic algorithms, ultimately constructing an end-to-end secure transmission link.

[0025] The working principle of this wireless security forwarding device will be explained below: S1: Generate a unique device identifier and corresponding identifier file based on the SM9 algorithm, and complete the registration on the authentication server.

[0026] After the wireless security forwarding device is started, it first constructs an identification cryptography system based on the SM9 algorithm, registers unique device identification information with the authentication server, and generates an identification file containing device identity credentials, laying the foundation for subsequent security authentication.

[0027] S2: Securely interacts with the authentication server via the 5G network to complete the secure distribution and synchronization of authentication parameters.

[0028] The generated identification file is distributed securely online in real time via the 5G network, ensuring that the identity credential can be securely transmitted to the authentication server. At the same time, the wireless secure forwarding device also securely receives the relevant authentication parameters, preparing for two-way authentication.

[0029] S3: The wireless security forwarding device and the authentication server perform two-way authentication and key negotiation based on the SM9+SM4 algorithm.

[0030] The wireless security forwarding device establishes a communication connection with the remote authentication server through the 5G module, completes two-way authentication based on the SM9 algorithm, and confirms the legitimacy of both parties' identities; then, it uses the SM4 algorithm to negotiate and generate a session key, and establishes an end-to-end encrypted secure transmission link.

[0031] S4: Through the flexible configuration of multiple independent Wi-Fi modules, it enables simultaneous access for both AP mode terminals and STA mode terminals.

[0032] Users can configure the operating modes of each module through a web management interface (requiring dual authentication of username, password, and SMS verification code): typically, 3 channels are set to STA mode for connecting dedicated terminals in AP mode (such as drone image transmission equipment); 1 channel is set to AP mode for connecting regular terminals in STA mode (such as mobile phones and laptops). STA mode requires configuring the target AP's SSID, encryption method (WPA2-PSK / WPA3-PSK), and password; AP mode requires setting its own SSID, encryption method, password, channel, and maximum number of connections. All configuration parameters are stored after being encrypted using the SM4 algorithm to prevent leakage and allow users to switch operating modes securely and in real-time according to on-site needs.

[0033] After the STA mode module starts up, it performs a scan-match-connect process: it scans the surrounding APs at a frequency of 10 seconds / time, matches the preset SSID and prefers targets with a signal strength ≥ -70dBm; it establishes an 802.11ac connection (up to 867Mbps) by encrypting the transmitted password through the SM4 algorithm; it receives audio and video data streams (supports RTSP, HLS, UDP-RTP, etc.) after obtaining an address through DHCP or static IP; and it automatically retryes and sends an alarm when the connection is abnormal.

[0034] The AP mode module broadcasts dual-frequency signals (broadcast interval 100ms) as configured, enables DHCP service (IP range default 192.168.10.10-40), assigns IP addresses and receives data after verifying terminal connection, and marks data streams according to "terminal IP + protocol type" (e.g., 192.168.10.15_RTSP); when the maximum number of connections is reached, it rejects new requests and sends a notification.

[0035] All received data is aggregated by the main control unit to a unified cache system, and independent cache partitions are divided according to "module number + terminal IP" with dynamic capacity adjustment; each data stream is assigned a unique identifier of "module number - terminal IP - timestamp"; overflow protection (prioritizing the discarding of non-critical frames) and cyclic overwrite (automatically deleting frames that have not been read for more than 30 seconds) are implemented to ensure data integrity and processing efficiency.

[0036] S5: Transcodes streaming media data.

[0037] Standardized transcoding processing is performed on the received multi-source heterogeneous streaming media data: including parsing the original protocol (RTSP / HLS / RTP, etc.), decoding audio and video data, adjusting parameters such as resolution and frame rate, re-encoding and uniformly encapsulating it into RTMP format, thus solving the compatibility problem of heterogeneous data.

[0038] S6: Encrypts the processed streaming media data and forwards the encrypted data through a secure link.

[0039] The SM4 algorithm is used to encrypt the transcoded standard format streaming media data. The encrypted data is reliably forwarded to the backend server through the 5G secure transmission link established in the S3 phase, completing the entire process from terminal access to secure backhaul.

[0040] It should be noted that the above embodiments are merely illustrative examples. The technical solutions of the various embodiments can be combined, and all are within the protection scope of this utility model.

[0041] The wireless security relay device provided by this utility model has been described in detail above. Any obvious modifications made to this utility model by those skilled in the art without departing from its essential content will constitute an infringement of the patent rights of this utility model and will incur corresponding legal liability.

Claims

1. A wireless secure relay device, characterized in that... Includes a multi-channel Wi-Fi module, a main control unit, and a 5G module; among which, The main control unit includes a first main control chip and a second main control chip, and the multi-channel Wi-Fi module includes a STA module and an AP module; The multi-channel Wi-Fi module is connected to the second main control chip, which performs mode configuration and data transmission and reception control on it, thereby enabling simultaneous access and mixed networking of AP mode terminals and STA mode terminals. The 5G module is connected to the first main control chip, and the first main control chip controls the 5G module to establish a 5G communication link. The first main control chip is interconnected with the second main control chip and is used to forward the data received by the multi-channel Wi-Fi module through the secure link established by the 5G module.

2. The wireless secure forwarding device as described in claim 1, characterized in that: The 5G module has a built-in super SIM card, which is used to perform two-way identity authentication and key negotiation with the authentication server based on the national cryptographic algorithm in order to establish the secure link.

3. The wireless secure forwarding device as described in claim 2, characterized in that: The 5G module is a J9905 chip.

4. The wireless secure forwarding device as described in claim 1, characterized in that: The first main control chip is U8102-CH634F, which is used to connect to the corresponding interface of the 5G module through the P1_HS_DP, P1_HS_DM, P1_SS_TXA, P1_SS_TXB, P1_SS_RXA, and P1_SS_RXB interfaces.

5. The wireless secure forwarding device as described in claim 1, characterized in that: The second main control chip is U8125-CH634F, which is used to connect to the AP module through the P2_HS_DP and P2_HS_DM interfaces, and to connect to the STA module through the P3_HS_DP and P3_HS_DM interfaces.

6. The wireless secure forwarding device as described in claim 1, characterized in that: The STA module includes an SV6355 chip and an SGM2590D chip; wherein, the USB_DP interface and USB_DM interface of the SV6355 chip are respectively connected to the P3_HS_DP interface and P3_HS_DM interface of the second main control chip; the 3V3 interface of the SV6355 chip is connected to the VOUT interface of the SGM2590D chip.

7. The wireless secure forwarding device as described in claim 1, characterized in that: The AP module is a BL_M8812CU2 / NC chip; its DM interface and DP interface are respectively connected to the P2_HS_DM interface and P2_HS_DP interface of the second main control chip.

8. The wireless secure forwarding device according to any one of claims 1 to 7, characterized in that: The multi-channel Wi-Fi module includes at least four channels, of which three channels are configured in STA mode and one channel is configured in AP mode.

Images