CN114006732A - One-way transmission system and method for image transmission physical isolation data - Google Patents

Abstract

The invention provides a one-way transmission system and method for image transmission physical isolation data, comprising: a sending end, a receiving end, and a controlled isolation device; the sending end has an LED screen module; The data is image-coded to obtain the image, and the LED screen module displays the image; the LED screen module displays the light and darkness through the LED binary to form an image; the receiving end is used to obtain the image, decode it to obtain the decoded data, and send the decoded data to the second Network equipment; the controlled isolation device is arranged on the transmission path between the sending end and the receiving end; the controlled isolation device is provided with an aperture that can be opened and closed; the sending end controls the opening and closing of the aperture; closure. The invention realizes the one-way safe transmission of data only from the first network device to the second network device, ensures the security of the high-security industry intranet information, defines a clear security boundary, is convenient for management, and has stronger controllability .

Description

A one-way transmission system and method for image transmission physical isolation data

technical field

The invention relates to the technical field of information transmission, in particular to a one-way transmission system and method for physical isolation data of image transmission.

Background technique

The rapid development of information communication technology and Internet technology has changed our way of life and work, and improved our work efficiency, but it has also brought many security problems, such as network information leakage, viruses, etc., these problems seriously threaten various enterprises and undertakings Information security of the unit. The traditional information security protection technology only detects and controls data transmission at the software level, and cannot meet the requirements for physical isolation between classified networks and external unsafe networks.

Physical isolation means that the internal network must not be directly or indirectly connected to the public network to avoid internal network information being attacked by external network hackers, thus delineating a clear security boundary for the internal network, which is easy to manage and more controllable , the one-way transmission of data communication between the two networks with physical isolation is more reliable and secure.

In actual work, there are many data output requirements between network information systems. In this scenario, the one-way optical gate has the following risks: the risk of active transmission covert channel, in order to maintain a ready transmission channel, the optical gate sender must actively send The bottom layer synchronization frame and the top layer heartbeat packet become the carrier for constructing a time-type covert channel, which is used to encode and transmit sensitive information; the risk of information leakage due to passive escape, the inner end of the optical gate cannot be trusted to logically identify and filter all covert transmissions based on security policies. However, these passively escaped data packets themselves can be highly sensitive information; the risk of security bypass due to structural defects, the internal terminal of the one-way optical gate is reachable to the internal network, and the attacker may destroy the security policy of the internal terminal. Causes the safety protection mechanism to be bypassed.

SUMMARY OF THE INVENTION

According to the embodiments of the present invention, a system and method for one-way transmission of physically isolated data for image transmission are provided, which realizes one-way secure transmission of data only from a first network device to a second network device, and ensures a high-security industry intranet. Information security has a clear security boundary, which is easy to manage and more controllable.

A first aspect of this embodiment provides a one-way transmission system for image transmission physical isolation data, including: a sending end, a receiving end, and a controlled isolation device; wherein,

The sending end has an LED screen module; the sending end is used to receive the data sent by the first network device, perform image coding to obtain an image, and the LED screen module displays the image; the LED screen module represents binary by turning on and off the LED lights. data to form the image;

The receiving end is used to obtain the image, decode it to obtain the decoded data, and send the decoded data to the second network device;

The controlled isolation device is arranged on the transmission path between the sending end and the receiving end; the controlled isolation device is provided with a diaphragm that can be opened and closed; the transmitting end controls the opening and closing of the diaphragm.

Further, the transmitting end is also provided with a transmitter and an encoding device; wherein,

The transmitter is used to receive data, send it to the encoding device, and at the same time send an opening command or a closing command to control the opening or closing of the aperture;

The encoding device is used for receiving data to perform image encoding to form an image.

Further, the receiving end is provided with a camera device, a decoding device and a receiver; wherein,

Camera equipment is used to acquire images;

The decoding device is used to decode the image to obtain decoded data;

The receiver is used to send the decoded data to the second network device.

Further, the controlled isolation device is also provided with a diaphragm controller, a diaphragm control switch and a mechanical and electronic lock; wherein,

The diaphragm controller is used to control the opening and closing of the diaphragm;

The diaphragm control switch is used to receive the opening command or the closing command to control the opening and closing of the diaphragm by the diaphragm controller;

The opening and closing of the mechanical electronic lock controls the start and end of the one-way transmission system; the opening and closing of the mechanical electronic lock is manually controlled.

Further, when the data is transmitted, the diaphragm is opened: when the transmitter sends an opening command to the diaphragm control switch and the mechanical and electronic lock is opened, the diaphragm is opened; when the transmitter sends an opening command to the diaphragm control switch but the mechanical and electronic lock is closed. , the diaphragm will not open.

Further, when the data transmission is completed, the diaphragm is closed: when the transmitter sends a closing command to the diaphragm control switch or the mechanical and electronic lock is closed, the diaphragm is closed.

A second aspect of this embodiment provides a one-way transmission method for image transmission physical isolation data, using the above-mentioned one-way transmission system, including:

The sending end receives the data sent by the first network device, and after receiving the data, sends an opening command to the diaphragm controller to control the opening of the diaphragm, and the sending end starts data transmission;

The sender encodes the data to form an image and displays the image;

The receiving end acquires the image, decodes it to obtain the decoded data, and sends the decoded data to the second network device;

After the transmission of the image on the sending end is completed, when the receiving end acquires the image, the sending end sends a closing command to the diaphragm controller to control the closing of the diaphragm, thereby cutting off the transmission channel between the sending end and the receiving end.

Further, before the data transmission, the mechanical and electronic locks are manually controlled to open, and the one-way transmission system is started; after the data transmission is completed, the mechanical and electronic locks are manually controlled to be closed to end the one-way transmission system.

Further, the first network device sends a data transmission application to the sending end, and after receiving the feedback information of accepting the application fed back by the sending end, sends the data to the sending end.

Further, the diaphragm is opened: when the transmitter sends an opening command to the diaphragm control switch and the mechanical and electronic lock is turned on, the diaphragm is opened; when the transmitter sends an opening command to the diaphragm control switch but the mechanical and electronic lock is closed, the diaphragm will not. on.

The invention realizes the controlled physical isolation of image transmission between the internal and external networks by setting the controlled isolation device; the control of the controlled isolation device is performed by the sending end, and the image encoding and decoding of the data are performed between the transmitter and the receiver. The one-way transmission of data realizes the one-way safe transmission of data only from the first network device to the second network device, which ensures the security of intranet information in the high-security industry, and defines a clear security boundary, which is easy to manage and can be More control. The invention solves the defects of time-consuming and labor-intensive, low work efficiency and low reliability due to frequent manual operation of data transmission between two physically isolated networks, realizes the automatic operation of each component, does not require manual intervention, and saves manpower .

It should be understood that the matters described in this Summary are not intended to limit key or critical features of the embodiments of the invention, nor are they intended to limit the scope of the invention. Other features of the present invention will become apparent from the following description.

Description of drawings

The above and other features, advantages and aspects of various embodiments of the present invention will become more apparent when taken in conjunction with the accompanying drawings and with reference to the following detailed description. In the drawings, the same or similar reference numbers refer to the same or similar elements, wherein:

Fig. 1 shows the connection schematic diagram of the image transmission physical isolation data one-way transmission system of the present invention;

Fig. 2 shows the flow chart of the image transmission physical isolation data one-way transmission method of the present invention;

Wherein, the corresponding relationship between the reference numerals and component names in Fig. 1 to Fig. 2 is:

100 transmitter, 110 transmitter, 120 encoding equipment, 130 LED screen module, 200 receiver, 210 high-speed photoelectric camera equipment, 220 decoding equipment, 230 receiver, 300 controlled isolation device, 310 diaphragm, 320 isolation plate, 330 Aperture controller, 340 aperture control switch, 350 mechanical electronic lock.

Detailed ways

In order to make the purposes, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments These are some embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

In addition, the term "and/or" in this article is only an association relationship to describe the associated objects, indicating that there can be three kinds of relationships, for example, A and/or B, it can mean that A exists alone, A and B exist at the same time, There are three cases of B alone. In addition, the character "/" in this document generally indicates that the related objects are an "or" relationship.

The first aspect of this embodiment is described below with reference to FIG. 1 , providing a one-way transmission system for image transmission physical isolation data, including: a sending end 100, a receiving end 200, and a controlled isolation device 300;

The sending end 100 is connected to a first network device, such as an intranet; the receiving end 200 is connected to a second network device, such as an external network; according to the data transmission direction, the data sent by the first network device passes through the sending end 100 and the controlled isolation device 300 in sequence. and the receiving end 200, finally received by the second network device;

The sending end 100 has an LED screen module 130; the sending end 100 is used to receive the data sent by the first network device, perform image coding to obtain an image, and the LED screen module 130 displays the image; the LED screen module 130 passes through the LED lights. On and off, representing binary data, forming the image;

The receiving end 200 is used for acquiring the image, decoding to obtain the decoded data, and sending the decoded data to the second network device;

The controlled isolation device 300 is arranged on the transmission path between the transmitting end 100 and the receiving end 200; Audited data transmission; the sending end 100 controls the opening and closing of the diaphragm 310 . This design improves the security of one-way data transmission from the first network device to the second network device.

In the above-mentioned embodiment, the transmitter 100 is further provided with a transmitter 110 and an encoding device 120; wherein,

The transmitter 110 is used for receiving data, sending it to the encoding device 120, and simultaneously sending an opening command or a closing command to control the opening or closing of the aperture 310;

The encoding device 130 is used for receiving data and performing image encoding to form an image;

The image here can be any form of image with data recognition function, such as two-dimensional code, barcode, various combination of numbers, etc. The LED screen module is a screen display module, and can also be a display screen that can display images such as a liquid crystal screen.

In the above embodiment, the receiving end 200 is provided with a camera device 210, a decoding device 220 and a receiver 230; wherein,

The imaging device 210 is used to acquire images, and a high-speed photoelectric imaging device can be used;

The decoding device 220 is used for decoding the image to obtain decoded data;

The receiver 230 is used to send the decoded data to the second network device. Because the data transmission is realized by the receiving end 200 by acquiring and decoding the image, the complete one-way transmission of the data can be guaranteed.

In the above embodiment, the controlled isolation device 300 is further provided with an aperture controller 330, an aperture control switch 340 and a mechanical and electronic lock 350; wherein,

The diaphragm controller 330 is used to control the opening and closing of the diaphragm 310;

The diaphragm control switch 340 is used for receiving an opening command or a closing command to control the opening and closing of the diaphragm 310 by the diaphragm controller 330;

The opening and closing of the mechanical electronic lock 350 controls the starting and ending of the one-way transmission system; the opening and closing of the mechanical electronic lock 350 is controlled manually.

In the above-mentioned embodiment, the mechanical electronic lock 350 is realized by human control, such as an administrator. The setting of the mechanical electronic lock subjectively ensures the transmission of data, which can be interrupted at any time during the transmission process, which increases the security and flexibility of data transmission.

In the above embodiment, the diaphragm 310 and the isolation plate 320 included in the controlled isolation device 300 can block the transmission channel between the transmitting end 100 and the receiving end 200 to perform physical isolation when there is no task.

The controlled isolation device 300 is provided with an isolation plate 320 for isolating the transmitting end 100 and the receiving end 200. The isolating plate 320 is provided with a circular hole corresponding to the transmission path between the transmitter 110 and the receiver 230, and the diaphragm 310 is disposed corresponding to the isolating plate 320. The circular hole is on the sending end 100 side, so that when the diaphragm 310 is open, the transmitter 110 sends data to the receiver 230; in normal state, the diaphragm 310 is closed, the circular hole is shielded by the diaphragm 310, the transmitter 110 and the receiver 230 in physical isolation.

In the above embodiment, during data transmission, the diaphragm 310 is opened only when the transmitter 110 sends an opening command to the diaphragm control switch 340 and the mechanical electronic lock 350 is open; when the transmitter 110 sends the diaphragm control switch 340 to open Aperture 310 will not open when commanded but mechatronic lock 350 is closed.

In the above embodiment, when the data transmission is completed, the diaphragm 310 is closed: when the transmitter 110 sends a closing command to the diaphragm control switch 340 or the mechanical electronic lock 350 is closed, the diaphragm 310 is closed.

In the above embodiment, before data transmission, the mechanical electronic lock 350 is manually controlled to open to start the one-way transmission system; after the data transmission is completed, the mechanical and electronic lock 350 is manually controlled to close to end the one-way transmission system. In the above-mentioned embodiment, before data transmission, the first network device needs to send a data transmission application to the sending end 100, and the first network device will not perform data transmission until the first network device receives the feedback information of accepting the application fed back by the sending end 100. transmission, sent to the sender. In this embodiment, by setting the controlled isolation device 300, the controlled physical isolation between the internal and external networks based on the display screen image transmission is realized, and the security of data transmission is further improved. In the normal state, the diaphragm 310 is closed, and the transmitter 110 and the receiver 230 are in a state of physical isolation; in the data transmission state, the transmitter 110 controls the diaphragm 310 to open through the diaphragm controller 330 to start data transmission. The camera 110 controls the diaphragm 310 to close through the diaphragm controller 330 and is in a normal state. Therefore, the internal and external networks of the system are in a state of physical isolation when there are no audited tasks, which improves the security of one-way data transmission. The control of the diaphragm 310 by the diaphragm controller 330 realizes the automatic switching of the diaphragm 310 and saves manpower.

In this embodiment, in the one-way transmission system of physical isolation data based on display screen image transmission, a clear security boundary is delineated, which is convenient for management, has stronger controllability, and the communication method of one-way transmission is more reliable and secure.

The second aspect of this embodiment is described below with reference to FIG. 2 , and a method for unidirectional transmission of image transmission physical isolation data is provided, using the above-mentioned unidirectional transmission system, including the following steps:

S1, the mechanical electronic lock 350 is manually opened; the first network device sends a data transmission application to the transmitter 110, and after the transmitter 110 accepts the application and feeds back the feedback information of accepting the application to the first network device, the first network device sends the data to the sender 110. machine 110.

S2 , the encoding device 120 performs image encoding on the data received by the transmitter 110 and displays it on the LED screen 130 .

S3, the transmitter 110 sends an opening instruction of the aperture 310 to the aperture controller 330, and the aperture 310 is opened.

In this embodiment, the diaphragm 310 can be opened only when the transmitter 110 sends the opening command to the diaphragm controller 330 and the mechanical electronic lock 350 is opened at the same time, the diaphragm 310 can be opened, either of the two conditions The diaphragm 310 will not be opened unless it is satisfied.

S4 , after the diaphragm 310 is opened, the decoding device 220 of the receiving end 200 acquires and decodes the image displayed by the LED screen 130 through the high-speed photoelectric camera device 210 .

S5, the receiver 230 forwards the decoded data to the second network device after receiving the decoded data; after the data transmission is completed, the mechanical and electronic lock is manually turned off.

In this embodiment, the diaphragm 310 is arranged on the isolation plate 320: in the normal state, the diaphragm 310 is closed, and the transmitter 110 and the receiver 230 are in a state of physical isolation; in the data transmission state, the transmitter 110 passes through the diaphragm controller. 330 controls the aperture 310 to open, and starts data transmission; after the data transmission is completed, the transmitter 110 controls the aperture 310 to close through the aperture controller 330 and is in a normal state.

In this embodiment, the control of the diaphragm 310 by the diaphragm controller 330 realizes the automatic switching of the diaphragm 310 .

Through the one-way transmission method of physical isolation data based on display screen image transmission in this embodiment, the physical isolation of internal and external networks is realized when there is no task to apply for approval, and the security of information transmission in high-security industry intranets is ensured. The logical control of each component solves the problem that data transmission between the two physically isolated networks is manual operation, which is time-consuming, labor-intensive, low in efficiency, and requires frequent operations by personnel and low reliability.

The invention realizes the controlled physical isolation of image transmission between the internal and external networks by setting the controlled isolation device; the control of the controlled isolation device is performed by the sending end, and the image encoding and decoding of the data are performed between the transmitter and the receiver. The one-way transmission of data realizes the one-way safe transmission of data only from the first network device to the second network device, which ensures the security of intranet information in the high-security industry, and defines a clear security boundary, which is easy to manage and can be More control. The invention solves the defects of time-consuming and labor-intensive, low work efficiency and low reliability due to frequent manual operation of data transmission between two physically isolated networks, realizes the automatic operation of each component, does not require manual intervention, and saves manpower .

It should be noted that, for the sake of simple description, the foregoing method embodiments are all expressed as a series of action combinations, but those skilled in the art should know that the present invention is not limited by the described action sequence. As in accordance with the present invention, certain steps may be performed in other orders or simultaneously. Secondly, those skilled in the art should also know that the embodiments described in the specification are all optional embodiments, and the actions and modules involved are not necessarily required by the present invention.

In the description of this specification, the description of the terms "one embodiment", "some embodiments", etc. means that a particular feature, structure, material or characteristic described in connection with the embodiment or example is included in at least one embodiment or example. In this specification, schematic representations of the above terms do not necessarily refer to the same embodiment or instance. Furthermore, the particular features, structures, materials or characteristics described may be combined in any suitable manner in any one or more embodiments or examples.

The above are only preferred embodiments of the present application, and are not intended to limit the present application. For those skilled in the art, the present application may have various modifications and changes. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of this application shall be included within the protection scope of this application.

Claims (10)

1. An image transmission physical isolation data unidirectional transmission system, characterized by comprising: a sending end, a receiving end and a controlled isolation device; wherein,

the transmitting end is provided with an LED screen module; the sending end is used for receiving data sent by first network equipment, carrying out imaging coding to obtain an image, and the LED screen module displays the image; the LED screen module represents binary data through the on and off of the LED lamps to form the image;

the receiving end is used for acquiring the image, decoding the image to obtain decoded data and sending the decoded data to second network equipment;

the controlled isolation device is arranged on a transmission path between the sending end and the receiving end; the controlled isolating device is provided with a diaphragm which can be opened and closed; and the transmitting end controls the opening and closing of the diaphragm.

2. The unidirectional transmission system of claim 1, wherein the transmitting end is further provided with a transmitter and an encoding device; wherein,

the transmitter is used for receiving the data, transmitting the data to the coding equipment, and simultaneously transmitting an opening instruction or a closing instruction to control the opening or closing of the diaphragm;

the coding device is used for receiving the data to carry out imaging coding to form the image.

3. The unidirectional transmission system of claim 1, wherein the receiving end is provided with an image pickup device, a decoding device, and a receiver; wherein,

the camera equipment is used for acquiring the image;

the decoding device is used for decoding the image to obtain decoded data;

the receiver is configured to send the decoded data to a second network device.

4. A one-way transmission system according to claim 2, wherein the controlled isolation device is further provided with a diaphragm controller, a diaphragm control switch and a mechatronic lock; wherein,

the diaphragm controller is used for controlling the opening and closing of the diaphragm;

the diaphragm control switch is used for receiving the opening instruction or the closing instruction to control the diaphragm controller to open and close the diaphragm;

the opening and closing of the mechanical electronic lock controls the starting and the ending of the one-way transmission system; and manually controlling the opening and closing of the mechanical electronic lock.

5. A one-way transmission system according to claim 4, wherein when said data is transmitted, said diaphragm is opened: the transmitter transmits the opening instruction to the diaphragm control switch, and when the mechanical electronic lock is opened, the diaphragm is opened; when the transmitter sends an opening instruction to the diaphragm control switch but the mechanical electronic lock is closed, the diaphragm cannot be opened.

6. A one-way transmission system according to claim 4, wherein when said data transmission is completed, said diaphragm is closed: and when the transmitter sends the closing instruction to the diaphragm control switch or the mechanical electronic lock is closed, the diaphragm is closed.

7. A unidirectional transmission method for image transmission physical isolation data, which is characterized in that the unidirectional transmission system of claims 1-6 is adopted, and comprises the following steps:

the method comprises the steps that a sending end receives data sent by first network equipment, and after the data are received, an opening instruction is sent to a diaphragm controller to control opening of a diaphragm; the sending end carries out imaging coding on the data to form an image and displays the image;

the receiving end acquires the image, decodes the image to obtain decoded data and then sends the decoded data to the second network equipment;

after the receiving end acquires the image, the sending end sends a closing instruction to the diaphragm controller to control the closing diaphragm to cut off a transmission channel between the sending end and the receiving end.

8. The method of claim 7, wherein before data transmission, the one-way transmission system is started by manually controlling the mechanical electronic lock to be unlocked; and after the data transmission is finished, manually controlling the mechanical electronic lock to be closed, and finishing the one-way transmission system.

9. The method according to claim 7, wherein the first network device sends a data transmission application to the sending end, and sends the data to the sending end after receiving feedback information of receiving the application, which is fed back by the sending end.

10. The method of claim 7, wherein the diaphragm is open: the transmitter transmits the opening instruction to the diaphragm control switch, and when the mechanical electronic lock is opened, the diaphragm is opened; when the transmitter transmits the opening instruction to the diaphragm control switch but the mechanical electronic lock is closed, the diaphragm is not opened.

Images