A method, system, and gateway for providing state feedback for unidirectional transmission data.

Abstract

This invention provides a method, system, and unidirectional gateway for providing state feedback for unidirectional transmission data that effectively provides feedback for errors or omissions in the transmitted data. [Solution] In a unidirectional gateway, the transmitting end is connected to a first domain and is equipped with a transmitting end communication protocol proxy module, a retransmission module, and a feedback receiving module. The receiving end is connected to a second domain and is equipped with a receiving end communication protocol proxy module, a monitoring module, and a feedback module, and is connected to the transmitting end by a unidirectional channel. The transmitting end divides a single network data into multiple data chunks, and the receiving end receives the multiple data chunks by the unidirectional channel, determines whether there are any missing chunks, and feeds back a chunk retransmission message to the transmitting end, causing the transmitting end to retransmit the missing chunks.

Description

Technical Field

[0001] The present invention relates to a unidirectional gateway used for unidirectional transmission, and particularly to a method, a system, and a unidirectional gateway for providing a mechanism for feedback of the transmission state in a non-network.

Background Art

[0002] A unidirectional gateway (also referred to as a Unidirectional Gateway or Data Diode) is a gateway that effectively isolates two domains. One end of the unidirectional gateway is connected to a first domain, and the other end is connected to a second domain. Inside the unidirectional gateway, it is divided into two parts (a transmitting end and a receiving end respectively), and the transmitting end and the receiving end can be connected by a unidirectional channel (for example, an optical fiber). Data can only be transmitted in a single direction from the transmitting end to the receiving end, and the receiving end cannot transmit any data to the transmitting end, thus achieving the purpose of two physically isolated domains. Therefore, the unidirectional gateway can effectively prevent the receiving end from sending data back to the transmitting end, and thus can reduce potential risks such as malicious intrusion and data leakage.

[0003] FIG. 1 is a schematic diagram showing the configuration of a well-known unidirectional gateway 10.

[0004] The transmitting end of the unidirectional gateway 10 is provided with a unidirectional transmitting network unit 101, in which a transmitting end communication protocol proxy module 111 is operating. The transmitting end communication protocol proxy module 111 is connected to the first domain 11 and is used to process network data transmitted from the first domain 11 to the unidirectional gateway 10. The receiving end is provided with a unidirectional receiving network unit 102, in which a receiving end communication protocol proxy module 112 is operating. The receiving end communication protocol proxy module 112 is connected to the second domain 12. The transmitting end communication protocol proxy module 111 and the receiving end communication protocol proxy module 112 are connected by a unidirectional channel, and the receiving end communication protocol proxy module 112 is configured to process the data transmitted by the first domain 11 and then forward it to the second domain 12.

[0005] The unidirectional gateway 10 can substantially isolate the first domain 11 and the second domain 12 through unidirectional transmission. The unidirectional gateway 10 can use a custom protocol to unidirectionally transmit data content from the first domain 11 to the second domain 12 while not transmitting network addresses and communication ports. Since the network addresses and communication ports of devices transmitting data in the first domain 11 are not sent to the second domain 12, the effect and purpose of protocol break can be achieved.

[0006] However, in a well-known unidirectional gateway 10, the transmitting end and the receiving end are connected by a unidirectional channel, and the receiving end cannot provide any message feedback to the transmitting end. Therefore, if an error or loss occurs during the data transmission process, the well-known unidirectional gateway 10 lacks an effective mechanism for notification. Unlike bidirectional transmission technology, where the transmitting end can be aware of the transmission status through acknowledgment (ACK) or negation (NACK) signals, the unidirectional gateway 10 cannot ascertain that the data has been transmitted correctly, and therefore cannot effectively retransmit the data.

[0007] Conventional feedback methods for unidirectional transmission only allow for manual verification of data accuracy and retransmission, which impacts automated information processing and transmission performance. [Overview of the Initiative] [Problems that the invention aims to solve]

[0008] To address the problem in known technologies where unidirectional gateways cannot effectively feed back errors or omissions in transmitted data, the present invention provides a method, system, and unidirectional gateway for state feedback of unidirectional transmitted data, providing a solution that enables the unidirectional gateway to feed back the state of transmitted data. [Means for solving the problem]

[0009] According to an embodiment of a state feedback method for unidirectional transmission data, the transmitting end of the device divides the received single network data into multiple data chunks and transmits them to the receiving end, which can receive multiple data chunks from the transmitting end via a unidirectional channel. Subsequently, if the receiving end determines, based on the characteristics of the data chunks, that there is at least one missing chunk, it generates a chunk retransmission message using the at least one missing chunk, and then uses feedback technology to feed the chunk retransmission message back to the transmitting end, causing the transmitting end to retransmit at least one missing chunk.

[0010] Furthermore, the transmitting end is connected to the first domain and is equipped with a transmitting end communication protocol proxy module, which can convert and encode network data compliant with the communication protocol provided by the first domain into multiple data chunks compliant with a unidirectional transmission protocol.

[0011] Furthermore, the receiving end is connected to the second domain and is equipped with a receiving end communication protocol proxy module. This receiving end communication protocol proxy module can be used to acquire multiple data chunks conforming to the above-mentioned unidirectional transmission protocol and to convert and decode the multiple data chunks into network data conforming to the above-mentioned communication protocol.

[0012] Furthermore, when the receiving end receives multiple data chunks, it can convert and decode the multiple data chunks into network data compliant with the aforementioned communication protocol. At this time, the integrity of the network data is checked, and it is determined that there is at least one missing chunk based on the integrity check.

[0013] In another method, when the receiving end receives multiple data chunks, it can be determined that there is at least one missing chunk based on the number and / or eigenvalues ​​of the multiple data chunks provided by the transmitting end.

[0014] Furthermore, when the transmitting end divides network data into multiple data chunks, it generates an initialization vector corresponding to each data chunk and provides these initialization vectors to the receiving end, allowing the receiving end to obtain at least one initialization vector corresponding to at least one missing chunk, and then add the corresponding initialization vector to the chunk retransmission message.

[0015] Furthermore, when the sender receives a chunk retransmission message, it can authenticate the chunk retransmission message by comparing the initialization vector provided by the receiver with the corresponding initialization vector previously provided by the sender for the missing chunk described in the message.

[0016] In one of the feedback techniques implemented by this method, a graphic code reader is installed at the transmitting end and a graphic code generator is installed at the receiving end. At the receiving end, the graphic code generator encodes the chunk retransmission message to generate a graphic code, and the graphic code reader at the transmitting end periodically scans to read the graphic code, decodes it, and obtains the chunk retransmission message.

[0017] In another feedback technique, an optical coupler receiver is installed at the transmitting end, and an optical coupler transmitter is installed at the receiving end. At the receiving end, the chunk retransmission message is encoded to generate an optical signal, which can then be transmitted to the transmitting end via the optical coupler transmitter. The optical coupler receiver at the transmitting end can read the optical signal, decode it, and obtain the chunk retransmission message.

[0018] In yet another feedback technique, an infrared receiver is installed at the transmitting end, and an infrared transmitter is installed at the receiving end. At the receiving end, the chunk retransmission message is encoded to generate an infrared signal, which is then read by the infrared receiver at the transmitting end, and then decoded to obtain the chunk retransmission message.

[0019] According to an embodiment of a state feedback system for unidirectional transmission data, the system includes a transmitting end and a receiving end. The transmitting end is connected to a first domain via a transmitting end communication port and includes a transmitting end communication protocol proxy module, a retransmission module, and a feedback receiving module. The receiving end is connected to a second domain via a receiving end communication port and is connected to the transmitting end via a unidirectional channel. The receiving end includes a receiving end communication protocol proxy module, a monitoring module, and a feedback module. This system performs the state feedback method for unidirectional transmission data.

[0020] The provided unidirectional gateway is a unidirectional gateway that performs the state feedback method for unidirectional transmission data described above. [Brief explanation of the drawing]

[0021] [Figure 1] A schematic diagram illustrating the configuration of a well-known unidirectional gateway. [Figure 2] A diagram showing an embodiment relating to a unidirectional gateway that implements a state feedback method for unidirectional transmission data. [Figure 3] A flowchart illustrating an embodiment of a method for providing state feedback for unidirectional transmission data. [Figure 4] A flowchart illustrating an embodiment of a state feedback method for unidirectional transmission data performed between domains connected to a transmitting end and a receiving end. [Figure 5] A schematic diagram illustrating a typical format for chunk retransmission messages generated by the receiving end. [Figure 6] A diagram illustrating an example of information relating to multiple locations in missing data. [Figure 7] A schematic diagram illustrating an example of using graphic code to provide feedback on chunk retransmission messages. [Figure 8]Schematic diagram showing an example of feeding back a message of chunk retransmission by utilizing optical coupler technology.

Embodiments for Carrying out the Invention

[0022] In order to further deepen the understanding of the features and technical content of the present invention, please refer to the following detailed description of the present invention and the accompanying drawings. However, the provided accompanying drawings are only for reference and explanation, and do not limit the scope of the claims of the present invention.

[0023] Hereinafter, the implementation manners of the present invention will be described by specific specific examples. Those skilled in the art can understand the advantages and effects of the present invention based on the content disclosed in this specification. The present invention can be implemented or applied by other different specific examples, and for each detail in this specification, various modifications and changes can be made based on different viewpoints and applications without departing from the concept of the present invention. It should be noted in advance that the accompanying drawings of the present invention are only simple schematic explanations and are not drawn based on actual sizes. The technical content of the present invention will be described in more detail based on the following embodiments, but the scope of protection of the present invention is not limited by the disclosed content.

[0024] It should be understood that in this specification, terms such as "first" and "second" may be used to describe various elements or signals, but these elements or signals are not limited by these terms. These terms are mainly used to distinguish one element from another element, or one signal from another signal. Also, the term "or" used in this specification may include any one or a combination of multiple items listed in relation thereto depending on the actual situation.

[0025] A unidirectional gateway is a gateway used to transmit network data between two domains. It can execute various network communication protocols and, by connecting the transmitting and receiving ends with a unidirectional channel, can substantially isolate the two domains, thereby ensuring the security of data transmission. However, the fact that transmission is only possible in one direction generally means that the receiving end of a unidirectional gateway cannot notify the transmitting end of messages regarding missing data, much less the transmitting end can retransmit packets, which may affect the need for data integrity. Thus, the present invention provides a state feedback method and system for unidirectional transmission data, and a unidirectional gateway that implements the said method. Here, the objective is to utilize message feedback technology to notify the transmitting end of missing data, enabling retransmission of related packets and ensuring data integrity under high security requirements.

[0026] In particular, the feedback technology implemented by the state feedback method for unidirectional transmission data does not employ network transmission technology in order to avoid providing reverse transmission technology that could compromise security at the unidirectional gateway. According to the embodiment, the feedback technology may include graphic codes (e.g., barcodes, QR codes, etc.), optical transmission technology (e.g., optical coupler technology, infrared, etc.), or optical wireless communication technology (Light Fidelity, Li-Fi), and may be any non-network transmission technology.

[0027] Figure 2 shows an embodiment relating to a unidirectional gateway, and the process flow performed here can be simultaneously referenced to the flowchart of the embodiment relating to the state feedback method for unidirectional transmission data shown in Figure 3.

[0028] The unidirectional gateway 20 shown in the figure mainly includes a transmitting end 201 and a receiving end 202 connected to each other by a unidirectional channel. The main components of the transmitting end 201 include a transmitting-end communication protocol proxy module 211 implemented by software, hardware, or a collaboration of software and hardware, a register 213, a retransmission module 215, and a feedback receiving module 217. The main components of the receiving end 202 include a receiving-end communication protocol proxy module 221 implemented by software, hardware, or a collaboration of software and hardware, a register 223, a monitoring module 225, and a feedback module 227.

[0029] The transmitting end 201 is connected to the first domain 21 and is provided with a register 213 for temporarily storing network data transmitted from the first domain 21. After the transmitting end communication protocol proxy module 211 acquires the network data, it can divide the network data compliant with each specific communication protocol (e.g., FTP, HTTP, sFTP, etc. under the TCP protocol) into multiple data chunks (step S301 in Figure 3), convert and encode the multiple divided data chunks, and then construct multiple data chunks compliant with the unidirectional transmission protocol of the unidirectional gateway 20. It is noteworthy that the transmitting end 201 divides the network data into multiple data chunks based on a self-defined packet standard format, and the receiving end 202 can reconstruct the original network data from the data chunks based on this self-defined format.

[0030] Next, the transmitting end communication protocol proxy module 211 transmits multiple data chunks to the receiving end communication protocol proxy module 221 of the receiving end 202 via a unidirectional channel (step S303 in Figure 3), and can temporarily store them in the register 223 of the receiving end 202. When the receiving end 202 receives multiple data chunks, it converts and decodes the multiple data chunks into network data compliant with a specific communication protocol via the receiving end communication protocol proxy module 221, and then the monitoring module 225 checks the integrity of the network data and determines whether or not there are missing chunks based on the integrity check results (step S305 in Figure 3).

[0031] In one embodiment, when the monitoring module 225 checks the integrity of the data based on its characteristics and determines that there is at least one missing chunk, the feedback module 227 generates a chunk retransmission message based on the serial number and location of the at least one missing chunk (step S307 in Figure 3), and then transmits the chunk retransmission message to the transmitting end 201 using feedback technology. The corresponding feedback receiving module 217 then retrieves the message (step S309 in Figure 3), allowing the retransmission module 215 at the transmitting end 201 to obtain the missing chunk from the chunk retransmission message. The transmitting end communication protocol proxy module 211 then retrieves the missing chunk again from the register 213, and subsequently retransmits the converted and encoded missing chunk to the receiving end 202 (step S311 in Figure 3). In another embodiment, when the monitoring module 225 checks the integrity of the data based on its characteristics and determines that there are no missing chunks, the feedback module 227 can generate a message indicating that retransmission is not necessary and send it to the transmitting end 201. The message indicating that retransmission is not necessary may include relevant information about the data chunk that was successfully sent.

[0032] In one embodiment, the transmitting end 201 may obtain unique values ​​of the data by calculation before transmitting the data (for example, by calculating the hash value of each data chunk using a hash algorithm), and the data chunks are then transmitted to the receiving end 202 along with their corresponding unique values. The receiving end 202 recalculates the unique values ​​(for example, hash values) based on the received data chunks, compares them with the unique values ​​transmitted by the transmitting end 201, and then determines the integrity of the data. If there is data loss, the monitoring module 225 can determine that there is a missing chunk based on the integrity check. Subsequently, the serial number of the missing chunk is fed back to the transmitting end 201 by the feedback module 227 of the receiving end 202, received by the feedback receiving module 217 of the transmitting end 201, and then the data to be retransmitted is determined by the retransmission module 215. Further, the data is converted and encoded into the aforementioned data chunks conforming to the unidirectional transmission protocol by the transmitting end communication protocol proxy module 211, and then retransmitted to the receiving end 202, where it is converted and decoded into network data conforming to a specific communication protocol by the receiving end communication protocol proxy module 221 to obtain the complete data.

[0033] In another embodiment, before transmitting the data, the transmitting end 201 divides the data into multiple data chunks. Based on these multiple data chunks, data is constructed that describes the characteristics of the data. This data may include the serial number of each data chunk, the relative positions of the chunks, and the size of the data chunks. In this embodiment, this is like a data chunk list stored in a specific storage medium. The transmitting end 201 first transmits the data chunk list to the receiving end 202, and then transmits the multiple data chunks to the receiving end 202 in sequence. After the receiving end 202 obtains the data chunk list, it can check the integrity of the multiple data chunks it has received based on the data chunk information described in the data chunk list. Once at least one missing chunk is detected, the monitoring module 225 generates a chunk retransmission message based on information about the missing chunk (e.g., the serial number and location of the missing chunk), transmits it to the feedback receiving module 217 at the transmitting end 201 via the feedback module 227 using the specific feedback technique employed by the system, and the retransmission module 215 retrieves information about the missing chunk by comparing it with the corresponding data chunk list, processes it again at the transmitting end communication protocol proxy module 211, and then retransmits the missing portion so that the receiving end 202 can obtain the complete data.

[0034] In another embodiment, when the transmitting end 201 divides data into multiple data chunks, an initialization vector (IV) can be generated for each data chunk. In each embodiment, the initialization vector may be a corresponding random number generated for each data chunk by a random number generator, or it may be a value generated for each data chunk based on various predefined rules. In one embodiment, the transmitting end 201 can transmit all initialization vectors to the receiving end 202 before actually transmitting the data (for example, by synchronizing the initialization vectors with the data chunk list or by transmitting them via a separately created feedback table). In another embodiment, when the transmitting end 201 transmits data chunks, it can associate an initialization vector with each data chunk and transmit them all together. The receiving end 202 can compare the obtained at least one missing chunk and generate a chunk retransmission message based on the initialization vector corresponding to the missing chunk and send it back to the transmitting end 201. When the receiving end 202 returns at least one corresponding missing chunk, it transmits the initialization vectors corresponding to each missing chunk together, and the transmitting end 201 compares whether they match the corresponding initialization vectors (i.e., compares whether the initialization vector returned by the receiving end 202 is the same as the initialization vector corresponding to the missing chunk generated by the random number generator), which can serve as authentication for the receiving end 202 and / or the chunk retransmission message. If authentication is successful, the transmitting end 201 retransmits the corresponding missing chunk. If the transmitting end 201 receives a message indicating that authentication failed (e.g., the initialization vectors do not match), it can directly discard the message. This mechanism prevents the retransmitted information from leaking to an unauthenticated external device, thereby improving the security of the feedback mechanism.

[0035] Following the above-described embodiment of the system and process flow, Figure 4 shows a flowchart of an embodiment relating to a state feedback method for unidirectional transmission data performed between the first domain 21, the transmitting end 201, the receiving end 202 and the second domain 22.

[0036] First, the transmitting end 201 acquires the data transmitted in the first domain 21 (step S401), then the transmitting end 201 divides the data into multiple data chunks (step S403), then processes the data chunks and transmits them to the receiving end 202 via a unidirectional channel (step S405), and the receiving end 202 then reconstructs the data chunks and verifies the data integrity (step S407). According to the embodiment described above, the data integrity can be verified by the data eigenvalues ​​provided by the transmitting end 201. If the data is incomplete, it is determined that there is at least one missing chunk among the multiple data chunks.

[0037] Once it is confirmed that the data is complete, as shown in the figure, the receiving end 202 combines the data chunks to form complete data and then transmits it to the second domain 22 (step S409). On the other hand, if it is determined that the data is incomplete (step S411), a chunk retransmission message is generated based on the information of the missing chunk, and the chunk retransmission message is fed back to the transmitting end 201 by the feedback technique (step S413). Based on the chunk retransmission message, the transmitting end 201 regenerates the missing chunk (step S415) and transmits the missing chunk back to the receiving end 202 via the unidirectional channel (step S417).

[0038] Of particular note is that in a state feedback system for unidirectional transmission data, the transmitting end 201 transmits data chunks to the receiving end 202 via a unidirectional channel, and the receiving end 202 uses non-network transmission information feedback technology to feed back chunk retransmission messages to the transmitting end 201. For example, the feedback technology can employ non-bidirectional and non-network transmission technologies such as optical sensing for scanning graphic codes, optical coupler technology, optical (e.g., infrared) transmission signal technology, and optical wireless communication technology (Li-Fi). Some implementations can refer to the examples shown in Figures 7 and 8, and the technologies listed herein are not limited to implementations relating to a state feedback system for unidirectional transmission data.

[0039] When the receiving end 202 receives the retransmitted data chunk, it verifies the integrity of the retransmitted data chunk from the transmitting end 201 (step S419), and after verifying the data integrity (step S419), combines the complete data chunks and transmits them to the second domain 22 (step S421).

[0040] Furthermore, in the above embodiment, the chunk retransmission message generated by the receiving end 202 mainly consists of the serial number and location of the missing chunk, and can cover information such as the data overview and timestamp of the missing data chunk, thereby enabling the transmitting end 201 to detect the missing chunk. Here, an embodiment relating to the chunk retransmission message can be seen by referring to the schematic diagram of the example format of the chunk retransmission message generated by the receiving end shown in Figure 5.

[0041] The information fields in the chunk retransmission message shown in the figure include, but are not limited to, the chunk size (501), the round number (503), and the number of missing data points (505 to 507). The chunk size (501) is used to indicate the size of the missing chunk; for example, the size of the missing chunk may be "4500" bytes. The round number (503) is used to indicate the number of times the same chunk has been transmitted; this round number may be a cumulative number (+1) each time the same chunk is transmitted, with the value starting from "1". The remaining information fields are mainly used to describe information about the missing data chunk, which consists of multiple missing data points. In this example, it shows a chunk containing multiple missing parts, such as the first missing data point (505) to the Nth missing data point (507). In one of the missing data fields, you can enter the part number (509), the number of chunks covered by each missing part (511), and the missing chunk in a part (513). This indicates the lost chunk token within each part.

[0042] In the message format for chunk retransmission described above, the missing data field contains information on multiple missing locations. For an example, refer to the diagram of the embodiment relating to location information in missing data shown in Figure 6.

[0043] Each missing data point covers multiple missing regions, and information about these regions can be found in the table shown in Figure 6. Using Figure 6 as an example, the information about a missing region may include, but is not limited to, the region's identification number 509, the number of chunks covered by that region 511, and the missing region chunk 513. This example shows regions with identification numbers "0", "1", and "2". As can be seen from the number of chunks covered by each region 511, each region covers 37,865 chunks. The missing region chunk 513 defines the range of chunks missing in the corresponding region. Using the example in Figure 6, the region with identification number "0" is missing chunks with identification numbers "113" through "1022", chunk "1665", and chunks with identification numbers "29240" through "37864". The parts with reference numbers "1" and "2" both have no missing chunks and therefore no data is recorded (in the example in Figure 6, the symbol "ψ" indicates that no data is recorded in this column). Thus, when the receiving end monitors the received data, it can determine that there is at least one missing chunk based on the number of data chunks and / or eigenvalues ​​provided by the transmitting end.

[0044] One example of a feedback technique between a transmitting end and a receiving end is a schematic diagram of an example in which chunk retransmission messages are fed back using the graphic code shown in Figure 7.

[0045] Referring to the embodiment of the unidirectional gateway shown in Figure 7, the transmitting end is provided with a feedback receiving module 217 and a retransmission module 215. The main elements of the feedback receiving module 217 include a graphic code reader 711 (which includes or separately provides a decoder 715) and a graphic code scan interface 713. The receiving end is provided with a feedback module 227 and a monitoring module 225. The main elements of the feedback module 227 include a graphic code generator 721 (which includes or separately provides an encoder 725) and a graphic code display interface 723. Here, the graphic code describes the chunk retransmission message generated at the receiving end by encoding. The graphic code may, but is not limited to, various barcode formats such as two-dimensional barcodes and QR codes.

[0046] The monitoring module 225 at the receiving end performs integrity checks on the data received at the receiving end. Here, it periodically performs checks and calibrations to compare the characteristics of the data at the transmitting and receiving ends and ensure data integrity. If the monitoring module 225 determines, based on data integrity, that there is at least one missing chunk, it generates a chunk retransmission message, activates the feedback module 227, and uses its graphic code generator 721 or a separately provided encoder 725 to encode the chunk retransmission message, generates a graphic code (e.g., a QR code), and then displays the graphic code using the graphic code display interface 723.

[0047] According to the embodiment, the graphic code reader 711 at the transmitting end periodically scans the graphic code displayed at the receiving end, and when it determines that the graphic code has been displayed or refreshed by the video recognition technology, it activates the graphic code reader 711, reads the graphic code displayed at the receiving end using the graphic code scan interface 713, reads the graphic code using the graphic code reader 711 or a separately provided decoder 715, decodes it, and obtains a chunk retransmission message. The chunk retransmission message is provided to the retransmission module 215, and the missing chunk obtained from the chunk retransmission message is retransmitted by the retransmission module 215, and the missing chunk is retransmitted from the transmitting end to the receiving end.

[0048] Figure 8 shows another implementation, which illustrates an example in which the transmitting and receiving ends use optical coupler technology to feed back chunk retransmission messages.

[0049] Optical coupler technology is a technology that uses light as a medium for signal transmission. It encodes digital signals (data packets) to generate current signals, which are input to an optical coupler transmitter at the receiving end of a unidirectional gateway. There, an electrical-to-optical conversion circuit converts the signals back into optical signals. The optical coupler transmitter generates optical signals whose brightness changes in accordance with changes in the magnitude of the current. Subsequently, an optical coupler receiver at the transmitting end receives the optical signals and converts them back into electrical signals using an optical-to-electrical conversion circuit, and then further converts them back into digital signals.

[0050] In the embodiment shown in the figure, the transmitting end is provided with a feedback receiving module 217 and a retransmission module 215. The feedback receiving module 217 is provided with an optical coupler receiver 811, an optical-to-electrical conversion circuit 813, and a decoder 815. The receiving end is provided with a feedback module 227 and a monitoring module 225. The feedback module 227 is provided with an optical coupler transmitter 821, an electrical-to-optical conversion circuit 823, and an encoder 825.

[0051] During operation, the monitoring module 225 at the receiving end determines the presence or absence of missing chunks based on the integrity of the received data. If it determines that there is at least one missing chunk, it generates a chunk retransmission message based on the missing chunk. Subsequently, it activates the feedback module 227, utilizing its encoder 825 to encode the information of the missing chunk, then generates an electrical signal. This signal is further converted into an optical coupler signal by the electrical-to-optical conversion circuit 823 and transmitted via the optical coupler transmitter 821. After that, the optical coupler receiver 811 of the feedback receiving module 217 at the transmitting end receives the optical coupler signal, and the optical signal is converted back into an electrical signal by the optical-to-electrical conversion circuit 813. This is then decoded by the decoder 815 to obtain the chunk retransmission message.

[0052] Finally, the retransmission module 215 retrieves the missing chunks based on the information about the missing chunks in the chunk retransmission message, encodes them again into data chunks compliant with the unidirectional transmission protocol, and then transmits them to the receiving end.

[0053] Similarly, in technologies that use optical signals as a message transmission medium, it is particularly preferable to use infrared light as the light source, as it is relatively unaffected by the environment. However, visible light or light-emitting diodes can also be used as light sources. In one embodiment, an optical receiver (e.g., an infrared receiver) is installed at the transmitting end, and a light emitter (e.g., an infrared transmitter) is installed at the receiving end. The receiving end generates an optical signal capable of transmitting a message by encoding based on the chunk retransmission message, transmits the optical signal using the light emitter, and after the optical receiver at the transmitting end receives the optical signal, the chunk retransmission message can be obtained by decoding.

[0054] The feedback technology described in the above embodiments allows the unidirectional data state feedback method, system, and unidirectional gateway implementing the unidirectional data state feedback method provided by the present invention to be equipped with a mechanism for monitoring data integrity, which, when it detects an anomaly or mismatch in data transmission, initiates a data retransmission process flow. Here, a data monitoring and retransmission mechanism, substantially isolated from the original circuit, is provided to feed back messages between the transmitting and receiving ends. When data transmission fails or data is lost, the receiving end can utilize this feedback mechanism to notify the transmitting end to retransmit the missing data. In this way, even under a unidirectional data transmission design, the transmission state can be effectively monitored to ensure data accuracy and security, while simultaneously avoiding security risks that may arise from reverse communication of the network.

[0055] The information disclosed above represents only preferred and implementable embodiments of the present invention, and the claims of the present invention are not limited thereto. Therefore, any equivalent technical modifications made using the description and drawings of the present invention are all included within the scope of the claims of the present invention. [Explanation of Symbols]

[0056] 10...Unidirectional Gateway 101...Unidirectional Transmitting Network Unit 111...Transmitter-end communication protocol proxy module 102...Unidirectional receiving network unit 112...Receiving end communication protocol proxy module 11...First Domain 12...Second Domain 20...Unidirectional Gateway 201...Transmitting end 211...Transmitter-end communication protocol proxy module 213... Register 215...Retransmission module 217...Feedback receiving module 202...receiving end 221...Receiving end communication protocol proxy module 223... Register 225...Monitoring module 227...Feedback module 21...First Domain 22...Second Domain 501...Chunk size 503...approximate number 505...First missing data 507... Missing data of the Nth position 509...Part number 511...Number of chunks 513...Missing body part chunk 711...Graphics code reader 713...Graphics code scan interface 715...Decoder 721...Graphics Code Generator 723...Graphic code display interface 725... Encoder 811... Optical coupler receiver 813...Optical-to-electrical conversion circuit 815...Decoder 821... Optical coupler transmitter 823...Electric / Optical Conversion Circuit 825... Encoder S301~S311...Process S401~S421...Process

Claims

1. At the transmitting end, a single network data is divided into multiple data chunks, The receiving end receives the plurality of data chunks from the transmitting end via a unidirectional channel, If the receiving end determines that there is at least one missing chunk in the plurality of data chunks, it generates a chunk retransmission message based on the at least one missing chunk. The receiving end includes, by using feedback technology, feeding back the chunk retransmission message to the transmitting end, causing the transmitting end to retransmit the at least one missing chunk. A method for providing state feedback for unidirectional transmission data.

2. The transmitting end is connected to the first domain and is equipped with a transmitting end communication protocol proxy module, which converts and encodes the network data conforming to the communication protocol provided by the first domain into the plurality of data chunks conforming to the unidirectional transmission protocol. The method for providing state feedback for unidirectional transmission data according to claim 1.

3. The receiving end is connected to a second domain and is equipped with a receiving end communication protocol proxy module, which acquires the plurality of data chunks conforming to the unidirectional transmission protocol, and converts and decodes the plurality of data chunks into network data conforming to the communication protocol. The method for providing state feedback for unidirectional transmission data according to claim 2.

4. When the receiving end receives the plurality of data chunks, it converts and decodes the plurality of data chunks into network data conforming to the communication protocol, checks the integrity of the network data, and determines that it has at least one missing chunk based on the integrity check. The method for providing state feedback for unidirectional transmission data according to claim 3.

5. When the receiving end receives the plurality of data chunks, it determines that it has at least one missing chunk based on the number and / or eigenvalues ​​of the plurality of data chunks provided by the transmitting end. The method for providing state feedback for unidirectional transmission data according to claim 3.

6. When the transmitting end divides the network data into multiple data chunks, it generates an initialization vector corresponding to each data chunk, provides the initialization vector corresponding to each data chunk to the receiving end, causes the receiving end to obtain at least one initialization vector corresponding to at least one missing chunk, and adds the at least one initialization vector to the chunk retransmission message. The method for providing state feedback for unidirectional transmission data according to claim 1.

7. When the transmitting end receives the chunk retransmission message, it authenticates the chunk retransmission message by comparing the at least one initialization vector provided by the receiving end with the corresponding initialization vector generated by the transmitting end for the at least one missing chunk. The method for providing state feedback for unidirectional transmission data according to claim 6.

8. The feedback technology includes installing a graphic code reader at the transmitting end and a graphic code generator at the receiving end, wherein at the receiving end, the graphic code generator encodes the chunk retransmission message to generate a graphic code, and the graphic code reader at the transmitting end reads the graphic code and decodes it to obtain the chunk retransmission message. A method for providing state feedback for unidirectional transmission data according to any one of claims 1 to 7.

9. The graphic code reader at the transmitting end periodically scans and reads the graphic code. The method for providing state feedback for unidirectional transmission data according to claim 8.

10. The feedback technique includes installing an optical coupler receiver at the transmitting end, installing an optical coupler transmitter at the receiving end, encoding the chunk retransmission message at the receiving end to generate an optical signal, transmitting the optical signal by the optical coupler transmitter, reading the optical signal by the optical coupler receiver at the transmitting end, and then decoding it to obtain the chunk retransmission message. A method for providing state feedback for unidirectional transmission data according to any one of claims 1 to 7.

11. The feedback technique includes installing an infrared receiver at the transmitting end, installing an infrared transmitter at the receiving end, encoding the chunk retransmission message at the receiving end to generate an infrared signal, and the infrared receiver at the transmitting end reading the infrared signal and then decoding it to obtain the chunk retransmission message. A method for providing state feedback for unidirectional transmission data according to any one of claims 1 to 7.

12. A transmitting end connected to a first domain via a transmitting end communication port, including a transmitting end communication protocol proxy module, a retransmission module, and a feedback receiving module, A receiving end is connected to the transmitting end via a unidirectional channel, while being connected to a second domain by a receiving end communication port, and includes a receiving end communication protocol proxy module, a monitoring module, and a feedback module. The aforementioned transmitting end communication protocol proxy module is used to divide a single network data into multiple data chunks. The transmitting end is used to transmit the plurality of data chunks to the receiving end via the unidirectional channel. The receiving end communication protocol proxy module is used to convert the plurality of data chunks into network data, and the monitoring module determines that the plurality of data chunks have at least one missing chunk. The feedback module at the receiving end is used to generate a chunk retransmission message based on the at least one missing chunk. The receiving end is used to feed back the chunk retransmission message to the transmitting end using feedback technology. The feedback receiving module at the transmitting end receives the chunk retransmission message and is used to cause the retransmission module to obtain the at least one missing chunk to be retransmitted. The transmitting end communication protocol proxy module is used to transform and encode the at least one missing chunk and then retransmit it to the receiving end. A state feedback system for unidirectional transmission data.

13. The transmitting end communication protocol proxy module is used to convert and encode the network data conforming to the communication protocol provided by the first domain into the plurality of data chunks conforming to the unidirectional transmission protocol, and the receiving end communication protocol proxy module is further used to acquire the plurality of data chunks conforming to the unidirectional transmission protocol and to convert and decode the plurality of data chunks into the network data conforming to the communication protocol. The state feedback system for unidirectional transmission data according to claim 12.

14. The receiving end determines that it has at least one missing chunk by checking the integrity of the network data. The state feedback system for unidirectional transmission data according to claim 12.

15. The receiving end determines that it has at least one missing chunk based on the number and / or eigenvalues ​​of the plurality of data chunks provided by the transmitting end. The state feedback system for unidirectional transmission data according to claim 12.

16. When the transmitting end divides the network data into multiple data chunks, it generates an initialization vector corresponding to each data chunk, provides the initialization vector corresponding to each data chunk to the receiving end, and causes the receiving end to obtain at least one initialization vector corresponding to the at least one missing chunk, while adding the at least one initialization vector to the chunk retransmission message. The transmitting end further uses the chunk retransmission message to authenticate the chunk retransmission message by comparing the at least one missing chunk with the corresponding initialization vector generated by the transmitting end, to determine whether the at least one initialization vector provided by the receiving end matches the corresponding initialization vector generated by the transmitting end. The state feedback system for unidirectional transmission data according to claim 12.

17. The feedback technique includes the transmitting end further including a graphics code reader, the receiving end further including a graphics code generator, the graphics code generator being used to encode the chunk retransmission message to generate a graphics code, and the graphics code reader of the transmitting end being used to read and decode the graphics code to obtain the chunk retransmission message. A state feedback system for unidirectional transmission data according to any one of claims 12 to 16.

18. The feedback technique further includes the transmitting end comprising an optical coupler receiver, the receiving end comprising an optical coupler transmitter, the receiving end further encoding the chunk retransmission message to generate an optical signal, and the optical coupler transmitter using the optical coupler transmitter to transmit the optical signal, and the optical coupler receiver of the transmitting end reading the optical signal and then decoding it to obtain the chunk retransmission message. A state feedback system for unidirectional transmission data according to any one of claims 12 to 16.

19. The feedback technique further includes the transmitting end comprising an infrared receiver, the receiving end comprising an infrared transmitter, the receiving end encoding the chunk retransmission message to generate an infrared signal, and the infrared receiver of the transmitting end reading the infrared signal and then decoding it to obtain the chunk retransmission message. A state feedback system for unidirectional transmission data according to any one of claims 12 to 16.

20. The state feedback method for unidirectional transmission data described in claim 1 is implemented. Unidirectional gateway.

Images