CN102231658A - Safe communication method of internetwork isolation apparatus - Google Patents

Safe communication method of internetwork isolation apparatus Download PDF

Info

Publication number
CN102231658A
CN102231658A CN2011101528603A CN201110152860A CN102231658A CN 102231658 A CN102231658 A CN 102231658A CN 2011101528603 A CN2011101528603 A CN 2011101528603A CN 201110152860 A CN201110152860 A CN 201110152860A CN 102231658 A CN102231658 A CN 102231658A
Authority
CN
China
Prior art keywords
frame
file
blocks
files
verification
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN2011101528603A
Other languages
Chinese (zh)
Inventor
刘红军
荆铭
延峰
张永庆
马强
张道霖
贾久龙
管荑
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
State Grid Shandong Electric Power Co Ltd
Integrated Electronic Systems Lab Co Ltd
Original Assignee
State Grid Shandong Electric Power Co Ltd
Integrated Electronic Systems Lab Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by State Grid Shandong Electric Power Co Ltd, Integrated Electronic Systems Lab Co Ltd filed Critical State Grid Shandong Electric Power Co Ltd
Priority to CN2011101528603A priority Critical patent/CN102231658A/en
Publication of CN102231658A publication Critical patent/CN102231658A/en
Pending legal-status Critical Current

Links

Landscapes

  • Detection And Prevention Of Errors In Transmission (AREA)
  • Communication Control (AREA)

Abstract

The invention relates to a safe communication method of an internetwork isolation apparatus. The method comprises the following steps: (1), detecting a file size; if the file size is less than 9KB, stepping into a step (3); if the file size is larger than 9KB, stepping into a step (2); (2), splitting the file into pieces, which means the file is split into a plurality of pieces according to a standard of 9 KB of each piece; (3), packing the file or file pieces into a frame or frames; (4), establishing network connection based on socket and sending the frame or the frames to a receiving end according to a frame number or frame numbers; if the sending is completed, storing the frame or the frames; if the sending is failed, carrying out resending immediately; if continuous sending is failed for N times, returning the failure information; (5), receiving data of one frame and carrying out processing by the receiving end; (6), carrying out processing on feedback information by a sending end. The safe communication method provided in the invention has the following advantages that: 1, safety of communication is effectively improved by employing the communication mechanism; 2, for large file transmission, a problem that the whole large file has to be retransmitted due to an error of data of one frame is solved, so that communication efficiency is enhanced; 3, functions of automatic retransmission and complementary transmission of data based on a frame are realized.

Description

A kind of safe across a network spacer assembly communication means
Technical field
The present invention relates to power monitoring and Automated Technology in Office field, specifically is a kind of safe across a network spacer assembly communication means.
Background technology
Economic and commercial committee [2002] the 30th command spells out, and when interconnected, must adopt special use, reliable safe isolation facility through the national departments concerned authentication with network mode between each electric power monitoring system and the office automation system or other information systems.
For many years, be subjected to the influence of the characteristics of electrical network wide area distribution, the region that the production management of electric power system distributes according to electrical network, the features such as electric pressure of electrical network, electrical network is divided into a plurality of subnets of hierarchical block, for network security problems such as anti-locking system invasion, information-leakages, use network isolating device between each subnet.When having solved safety problem, a new problem having appearred also: when using network isolating device, how to guarantee to transmit the correctness of data.
When busy or network has fluctuation when network, the positive and negative spacer assembly of producer commonly used all can have certain probability the situation of packet or data packet transmission mistake to occur losing in the transmission data procedures on the market at present, thereby do not having under the situation of manual intervention, can not guarantee the correct transmission of each data.
Common across a network spacer assembly communication at present all is to adopt directly data are sent to destination, owing to spacer assembly carries out Packet Filtering when the intercommunication and carries out reason such as data relay by virtual IP address, this method is difficult to guarantee the normal transmission of data.Under most of situation, data can both arrive destination, but when network load has fluctuation than big or network, the error code and the data packet loss of certain probability will appear in data, when if the packet that sends is bigger, the error rate can be bigger, and the spacer assembly of some producer the possibility of error code and packet loss to occur bigger.If this occurs, transmitting terminal be detect less than, Tong Xin correctness and integrality just can not guarantee like this.Because spacer assembly intercommunication mechanism, occur sometimes that transmitting terminal sends successfully but receiving terminal is not received data conditions, thereby more increased the uncontrollability of whole communication process.
Summary of the invention
Consider above-mentioned problem, the invention provides and a kind ofly utilize big file to split, will send that data encapsulate again, the implementation method of the across a network spacer assembly communications security that reduces file transfer mistake probability greatly of reverse feedback file reception condition.
A kind of safe across a network spacer assembly communication means comprises the steps:
1) detects file size, if file less than 9KB, then need not split, enter step 3)) if file more than or equal to 9KB, then enters step 2;
2) file splits into piece, and file is split into some by the 9KB size; Reason by the fractionation of 9KB size: network isolating device has requirement to the packet size of communication, the matching requirements difference of different model, generally speaking, each packet is no more than 10KB can satisfy common on the market network isolating device, therefore split by 9KB here, wherein frame head and the postamble in the next procedure preserved in the 1KB space of reserving;
3) with file or blocks of files packing framing, be about to file or step 2 in the step 1) less than 9KB) in blocks of files add frame head and postamble, form Frame;
4) network of setting up based on socket connects, and above-mentioned frame is sent to receiving terminal by frame number, if be sent completely then preserve frame; If send failure then repeating transmission immediately, send failure continuously and then return failure information N time;
5) receiving terminal receives and carries out following processing behind the frame data:
A) verification frame head postamble is if the verification failure then abandons this frame;
B) separate file piece content;
C) verification file piece content size;
D) with CRC algorithm verification file piece content;
E) after verification is finished,, then preserve blocks of files content and frame number if the blocks of files content is correct; If blocks of files content verification failure abandons this frame;
Whether when f) receiving last frame, it is complete to detect the frame of receiving before by frame number, if do not leak frame, then file receives successfully, feeds back successful information to transmitting terminal by the reverse isolation device simultaneously; If find to leak frame, then needs are mended the frame number that passes and feed back successful information to transmitting terminal by the reverse isolation device;
6) transmitting terminal is pressed following processing feedback information:
If a) feedback information is successfully, this frame of buffer memory discharged before transmitting terminal was then incited somebody to action, and whole process of transmitting is finished;
B) if feedback information is failure, and with frame number, transmitting terminal is then mended according to frame number and is passed frame;
C) after all frames all are sent completely,, then think to send the file failure if in feedback information is waited for the time limit, do not receive feedback information.
Frame head comprises in the described step 3):
Frame identification: fixed code+sign, wherein fixed code accounts for 4 byte spaces, and sign accounts for 1 byte space, and sign is used for marking whether to be start frame, end frame;
Frame number: the sequence number of frame is a numeral that increases progressively, and accounts for 4 byte spaces;
Blocks of files size: account for 2 byte spaces;
The compression sign: whether blocks of files is compressed, and accounts for 1 byte space;
Time-out time: after Frame sent, if also do not feed back successful information after exceeding this time, transmitting terminal was then retransmitted, and accounts for 4 byte spaces;
The verification of piece content: the blocks of files content adopts the CRC algorithm coding to become 4 bytes, is used for the verification of receiving terminal to the blocks of files content.
Blocks of files in the described step 3) is and is used for depositing step 2) content of the file fritter that splits into; Postamble in the described step 3) is a fixed code, accounts for 4 byte spaces.
Preferably, described N=5, this is the optimum value when taking all factors into consideration the requiring of fail safe and communication efficiency.
Preferably, described feedback information waits for that the time limit is preferably 10 seconds.
The present invention guarantees the correctness and the integrality of data from three aspects.
1. the fractionation of big file.The small documents that big file is split into several fixed sizes sends, thereby solves the transmission failure that causes too greatly owing to each frame data.
2. send the encapsulation again of data.In communication process, the data that transmitting terminal will send, after receiving terminal is received data are tested form by sending after the certain format encapsulation again, thereby have solved the situation of data error codes.
3. reverse feedback file situation about receiving.After receiving terminal receives the data of all frames, whether receive success to the transmitting terminal feedback file by the reverse isolation device.If take defeat, then the frame number of erroneous frame and leakage biography is fed back to transmitting terminal, the information that transmitting terminal comes according to feedback is carried out the repeating transmission of frame and is reissued, thereby guarantees the correctness and the integrality of whole communication.
Therefore, the present invention has following advantage:
1. adopt this communication mechanism to effectively raise the fail safe of communication.
2. for the transmission of big file, solved because the problem that a frame data mistake causes whole big file all will retransmit has improved communication efficiency.
3. realized that data retransmit and mend the function of biography frame by frame automatically.
Embodiment
The present invention will be further explained, explanation with infinite execution mode below.
A kind of safe across a network spacer assembly communication means comprises the steps:
1) detects file size,, enter step 3) if file less than 9KB, does not then need to split; If file more than or equal to 9KB, then needs to split, enter step 2);
2) file is split into some by the 9KB size, this is to realize easily;
3) with file or blocks of files packing framing, be about to file or step 2 in the step 1) less than 9KB) in blocks of files add frame head and postamble, form Frame;
4) network of setting up based on socket connects, and above-mentioned frame is sent to receiving terminal by frame number, if be sent completely then preserve frame; If send failure then repeating transmission immediately, send failure continuously and then return failure information 5 times;
5) receiving terminal receives and carries out following processing behind the frame data:
A) verification frame head postamble is if the verification failure then abandons this frame;
B) separate file piece content;
C) verification file piece content size;
D) with CR C algorithm verification file piece content;
E) after verification is finished,, then preserve blocks of files content and frame number if the blocks of files content is correct; If blocks of files content verification failure abandons this frame;
Whether when f) receiving last frame, it is complete to detect the frame of receiving before by frame number, if do not leak frame, then file receives successfully, feeds back successful information to transmitting terminal by the reverse isolation device simultaneously; If find to leak frame, then needs are mended the frame number that passes and feed back successful information to transmitting terminal by the reverse isolation device;
6) transmitting terminal is pressed following processing feedback information:
If a) feedback information is successfully, this frame of buffer memory discharged before transmitting terminal was then incited somebody to action, and whole process of transmitting is finished;
B) if feedback information is failure, and with frame number, transmitting terminal is then mended according to frame number and is passed frame;
C) after all frames all are sent completely,, then think to send the file failure if in feedback information is waited for 10 seconds time limits, do not receive feedback information.
Frame head comprises in the step 3):
Frame identification: fixed code+sign, wherein fixed code accounts for 4 byte spaces, and sign accounts for 1 byte space, and sign is used for marking whether to be start frame, end frame;
Frame number: the sequence number of frame is a numeral that increases progressively, and accounts for 4 byte spaces;
Blocks of files size: account for 2 byte spaces;
The compression sign: whether blocks of files is compressed, and accounts for 1 byte space;
Time-out time: after Frame sent, if also do not feed back successful information after exceeding this time, transmitting terminal was then retransmitted, and accounts for 4 byte spaces;
The verification of piece content: the blocks of files content adopts the CRC algorithm coding to become 4 bytes, is used for the verification of receiving terminal to the blocks of files content.

Claims (4)

1. the across a network spacer assembly communication means of a safety is characterized in that comprising the steps:
1) detects file size, if file less than 9KB, then enters step 3), if file more than or equal to 9KB, then enters step 2);
2) file splits into piece, and file is split into some by the 9KB size;
3) with file or blocks of files packing framing, be about to file or step 2 in the step 1) less than 9KB) in blocks of files add frame head and postamble, form Frame;
4) network of setting up based on socket connects, and above-mentioned frame is sent to receiving terminal by frame number, if be sent completely then preserve frame; If send failure then repeating transmission immediately, send failure continuously and then return failure information N time;
5) receiving terminal receives and carries out following processing behind the frame data:
A) verification frame head postamble is if the verification failure then abandons this frame;
B) separate file piece content;
C) verification file piece content size;
D) with CRC algorithm verification file piece content;
E) after verification is finished,, then preserve blocks of files content and frame number if the blocks of files content is correct; If blocks of files content verification failure abandons this frame;
Whether when f) receiving last frame, it is complete to detect the frame of receiving before by frame number, if do not leak frame, then file receives successfully, feeds back successful information to transmitting terminal by the reverse isolation device simultaneously; If find to leak frame, then needs are mended the frame number that passes and feed back successful information to transmitting terminal by the reverse isolation device;
6) transmitting terminal is pressed following processing feedback information:
If a) feedback information is successfully, this frame of buffer memory discharged before transmitting terminal was then incited somebody to action, and whole process of transmitting is finished;
B) if feedback information is failure, and with frame number, transmitting terminal is then mended according to frame number and is passed frame;
C) after all frames all are sent completely,, then think to send the file failure if in feedback information is waited for the time limit, do not receive feedback information.
2. safe across a network spacer assembly communication means according to claim 1, it is characterized in that: frame head comprises in the described step 3):
Frame identification: fixed code+sign, wherein fixed code accounts for 4 byte spaces, and sign accounts for 1 byte space, and sign is used for marking whether to be start frame, end frame;
Frame number: the sequence number of frame is a numeral that increases progressively, and accounts for 4 byte spaces;
Blocks of files size: account for 2 byte spaces;
The compression sign: whether blocks of files is compressed, and accounts for 1 byte space;
Time-out time: after Frame sent, if also do not feed back successful information after exceeding this time, transmitting terminal was then retransmitted, and accounts for 4 byte spaces;
The verification of piece content: the blocks of files content adopts the CRC algorithm coding to become 4 bytes, is used for the verification of receiving terminal to the blocks of files content.
3. safe across a network spacer assembly communication means according to claim 1 and 2 is characterized in that: described N=5.
4. safe across a network spacer assembly communication means according to claim 3 is characterized in that: described feedback information is limited to 10 seconds when waiting for.
CN2011101528603A 2011-06-09 2011-06-09 Safe communication method of internetwork isolation apparatus Pending CN102231658A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN2011101528603A CN102231658A (en) 2011-06-09 2011-06-09 Safe communication method of internetwork isolation apparatus

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN2011101528603A CN102231658A (en) 2011-06-09 2011-06-09 Safe communication method of internetwork isolation apparatus

Publications (1)

Publication Number Publication Date
CN102231658A true CN102231658A (en) 2011-11-02

Family

ID=44844200

Family Applications (1)

Application Number Title Priority Date Filing Date
CN2011101528603A Pending CN102231658A (en) 2011-06-09 2011-06-09 Safe communication method of internetwork isolation apparatus

Country Status (1)

Country Link
CN (1) CN102231658A (en)

Cited By (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103354479A (en) * 2013-03-22 2013-10-16 哈尔滨工业大学深圳研究生院 LT code based spatial delay/disruption tolerant network (DTN) transmission method
CN103607258A (en) * 2013-11-18 2014-02-26 深圳市道通科技有限公司 Method, device and system for communication between primary device and secondary device in vehicle computer diagnosis device
CN104601299A (en) * 2013-10-30 2015-05-06 北京临近空间飞行器系统工程研究所 Data transmission system and method based on two-way acknowledgment
CN104917644A (en) * 2015-04-14 2015-09-16 安徽立卓智能电网科技有限公司 Method for actively and additionally recording data by sub stations to master station based on compression algorithm
CN104967497A (en) * 2015-06-09 2015-10-07 武汉数字派特科技有限公司 Network communication protocol-based reliable data transmission method and upgrading method
CN105375626A (en) * 2015-11-03 2016-03-02 国网技术学院 Distribution network integrated distribution automation terminal on-line monitoring system and method
CN105827465A (en) * 2016-05-18 2016-08-03 罗文凤 Method of power dispatching automatic control system
CN106254043A (en) * 2016-08-26 2016-12-21 哈尔滨海能达科技有限公司 Method, base station and the target terminal of a kind of data transmission
CN109743135A (en) * 2018-12-29 2019-05-10 中国大唐集团新能源科学技术研究院有限公司 A kind of method of breakpoint transmission file transmission
CN110266775A (en) * 2019-06-04 2019-09-20 南京南瑞继保电气有限公司 Document transmission method, device, computer equipment and storage medium
CN110839018A (en) * 2019-10-22 2020-02-25 珠海许继芝电网自动化有限公司 File transmission method and system based on power distribution automation
CN114079654A (en) * 2022-01-05 2022-02-22 荣耀终端有限公司 Data retransmission method, system and related device
CN114363320A (en) * 2021-12-30 2022-04-15 格美安(北京)信息技术有限公司 Cross-network data returning method, storage medium and system
CN115065984A (en) * 2022-06-21 2022-09-16 江苏旭耀光电技术有限公司 Stability test method and system for landscape lighting control system

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101119219A (en) * 2007-09-12 2008-02-06 中兴通讯股份有限公司 Method and system for implementing data transmission of broadcast/multicast service
CN101202604A (en) * 2007-08-14 2008-06-18 深圳市同洲电子股份有限公司 Method, system and equipment for transmitting and receiving network data
CN101621367A (en) * 2009-06-09 2010-01-06 华中科技大学 HARQ decoding method based on packet check information
CN101814971A (en) * 2009-02-24 2010-08-25 肖宏声 Method for transmitting mobile phone file

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101202604A (en) * 2007-08-14 2008-06-18 深圳市同洲电子股份有限公司 Method, system and equipment for transmitting and receiving network data
CN101119219A (en) * 2007-09-12 2008-02-06 中兴通讯股份有限公司 Method and system for implementing data transmission of broadcast/multicast service
CN101814971A (en) * 2009-02-24 2010-08-25 肖宏声 Method for transmitting mobile phone file
CN101621367A (en) * 2009-06-09 2010-01-06 华中科技大学 HARQ decoding method based on packet check information

Cited By (18)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103354479A (en) * 2013-03-22 2013-10-16 哈尔滨工业大学深圳研究生院 LT code based spatial delay/disruption tolerant network (DTN) transmission method
CN104601299B (en) * 2013-10-30 2017-11-28 北京临近空间飞行器系统工程研究所 A kind of data transmission system and method based on two-way confirmation
CN104601299A (en) * 2013-10-30 2015-05-06 北京临近空间飞行器系统工程研究所 Data transmission system and method based on two-way acknowledgment
CN103607258A (en) * 2013-11-18 2014-02-26 深圳市道通科技有限公司 Method, device and system for communication between primary device and secondary device in vehicle computer diagnosis device
CN104917644A (en) * 2015-04-14 2015-09-16 安徽立卓智能电网科技有限公司 Method for actively and additionally recording data by sub stations to master station based on compression algorithm
CN104967497A (en) * 2015-06-09 2015-10-07 武汉数字派特科技有限公司 Network communication protocol-based reliable data transmission method and upgrading method
CN105375626A (en) * 2015-11-03 2016-03-02 国网技术学院 Distribution network integrated distribution automation terminal on-line monitoring system and method
CN105827465A (en) * 2016-05-18 2016-08-03 罗文凤 Method of power dispatching automatic control system
CN105827465B (en) * 2016-05-18 2019-04-26 广西东电联电力科技有限公司 The method of power dispatching automation control system
CN106254043A (en) * 2016-08-26 2016-12-21 哈尔滨海能达科技有限公司 Method, base station and the target terminal of a kind of data transmission
CN109743135A (en) * 2018-12-29 2019-05-10 中国大唐集团新能源科学技术研究院有限公司 A kind of method of breakpoint transmission file transmission
CN110266775A (en) * 2019-06-04 2019-09-20 南京南瑞继保电气有限公司 Document transmission method, device, computer equipment and storage medium
CN110839018A (en) * 2019-10-22 2020-02-25 珠海许继芝电网自动化有限公司 File transmission method and system based on power distribution automation
CN114363320A (en) * 2021-12-30 2022-04-15 格美安(北京)信息技术有限公司 Cross-network data returning method, storage medium and system
CN114079654A (en) * 2022-01-05 2022-02-22 荣耀终端有限公司 Data retransmission method, system and related device
CN114079654B (en) * 2022-01-05 2022-06-21 荣耀终端有限公司 Data retransmission method, system and related device
CN115065984A (en) * 2022-06-21 2022-09-16 江苏旭耀光电技术有限公司 Stability test method and system for landscape lighting control system
CN115065984B (en) * 2022-06-21 2024-05-17 江苏旭耀光电技术有限公司 Stability test method and system for landscape lighting control system

Similar Documents

Publication Publication Date Title
CN102231658A (en) Safe communication method of internetwork isolation apparatus
CN106330414B (en) Message transmission method and device
CN102164043A (en) Log reporting method and terminal
CN108011698B (en) RSSP-I secure communication method based on dual-system synchronization
CN111130070B (en) Line differential protection method based on wireless network retransmission mechanism
CN102983884A (en) A method for transmitting data via a magnetic channel
CN103338090A (en) Service data transmission method, device and system
CN108513701B (en) Data transmission method, device, machine readable storage medium and system
CN102025737A (en) Compression and transmission method of Ethernet data packet in microwave communication as well as compressor and system
CN113836551A (en) Beidou short message communication transmission method and device for power application
CN103259797A (en) Data file transmission method and platform
KR20140132063A (en) Apparatus and Method for CAN Comnunication
CN105183687A (en) Time-sharing serial communication method and system
CN105007308A (en) File transmission method for use in database isolation device environment
CN101237664B (en) Transmission method, device and system for maintenance information
CN101369879A (en) Method and apparatus for requesting data retransmission
CN100481779C (en) Upgrade control method and control device
WO2019242496A1 (en) Method and device for data transmission
CN102970221A (en) Redundancy communication method among nodes based on multiple networks
CN113301051A (en) Data transmission method and device, computer storage medium and processor
CN109918108A (en) A kind of embedded equipment plug-in upgrade method and device
CN204408357U (en) Based on the reliable data transmission system of big-dipper satellite
CN111246428A (en) Network reliable communication method, system, device and storage medium
KR101374721B1 (en) Apparatus and method for data collection
CN116450180A (en) Remote upgrading method for terminal equipment

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C12 Rejection of a patent application after its publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20111102