KR20200125115A - Method and apparatus for improving security of data communiucation of unmanned warship using public network - Google Patents

Abstract

The present invention is to provide a method and apparatus for improving the security of data communication of an unmanned warship using a public network, which transmit and receive data using an encryption and decryption module to improve the data security of the remote controlled warship using the public network and, more particularly, can prevent forgery or tempering of a command system and leakage of commands by performing encryption and decryption using a blockchain.

Description

TECHNICAL FIELD [Method and apparatus for improving security of data communication of unmanned warship using public network]

The present invention relates to a method and apparatus for improving the security of data communication of a remote control trap using a public network, and in particular, a method of enhancing the security of data communication of a trap by performing an encryption and decryption process using a block chain. And to an apparatus.

How to secure information is a well-known technique. The conventional method of securing information is based on encryption, wherein the secure data is processed according to a preset encryption method or key to provide an encrypted file. When decoding an encrypted file, it is necessary to reversely process the encrypted file according to the encrypted method or key to recover the original information.

A computer connected to a WAN or LAN communication network attempts to access classified files, downloads the classified files, and “cracks” the encryption of the classified files, unauthorized persons or data viruses ( data viruses).

Another important issue concerns securing access to data and devices when communicating along a network. Unauthenticated network users may attempt to infiltrate security systems or transmit damaging software such as software viruses. Prior art software systems such as fire-wall, etc. do not provide a full proof solution to the aforementioned unauthorized attempts.

Another important issue concerns securing an organization's network and computers against virus programs. On-line scanning of incoming communications (such as WebShild of Finjan Software Ltd. of Netanya, Israel and Webscan of McCafee Inc. of Santa Clara, CA) are currently being entered to identify damaging software such as viruses. (on-line scanning) is provided. It is natural that scanning all input data and data changes during communication consumes a number of resources and is generally not performed at full scale in real time.

Another way is to write the log onto a write once read many (WORM) medium (such as Pinnacle RCD-1000 from Pinnacle Micro Corporation). In fact, it is natural that worm data storage solutions are inferior to conventional write-read techniques (such as magnetic hard disks) in both performance and reliability. In addition, installation of a write-once device for the sole purpose of recording logs is very expensive.

On the other hand, information protection handled within a ship needs to be performed in the entire system area, such as an operating system (OS), a network (N/W), a database management system (DBMS), and an application from an information system perspective.

In particular, in the case of ship systems in which various information systems and equipment are operated, security vulnerabilities may occur for each OS and equipment, and important information may be exposed when a problem with information security occurs in an unmanned ship. In addition, the development of diagnostic technology for security vulnerabilities on land and sea is required.

Korean Patent Publication No. 10-2003-0046280 (published on June 12, 2003) Korean Patent Publication No. 10-2018-0138180 (published on December 24, 2018)

The technical problem to be achieved by the present invention is to solve the conventional problems, and to improve the data communication security of an unmanned ship using a public network in order to improve the inconvenience of use.

According to the first embodiment, a method of improving the security of data communication of an unmanned ship using a public network includes operation status diagnosis information and maintenance status diagnosis information diagnosed in real time during the operation of the unmanned ship by the control unit of the unmanned ship, and periodically Receiving the status information of the unmanned ship including the diagnosed preventive inspection information and parts life cycle information, one-way transmission to the first security module in order to transmit the status information of the unmanned ship to the remote diagnosis server outside the unmanned ship Step, In the first security module, first information is generated based on the identification information of the unmanned trap, the first information is included in the IN area of the transaction, and the status information of the unmanned trap is included in the OUT area of the transaction. The first encryption of the state information of the unmanned trap through the block chain by including it in the first block, generating second information using the first random number value for the state information of the first encrypted unmanned trap Then, the second information is included in the in area of the transaction, and the second block is created by including the first information in the out area of the transaction to perform the second encryption, and then the state information of the unattended trap processed by the second encryption is stored. Transmitting to a remote diagnosis server through a public network. Remote condition diagnosis that diagnoses the current state of the unmanned ship using an artificial intelligence learning model created by learning big data related to the state of a plurality of unmanned ships from the remote diagnosis server. It may provide a step of receiving information over a public network. In this case, the remote status diagnosis information is 3 that generates third information using a second random number value for the second information, and includes the third information in the in area of the transaction and the remote status diagnosis information in the out area of the transaction. It is encrypted by creating a tea block. Obtaining a third block corresponding to the second information by searching the block chain based on the identification information of the unmanned trap included in the second information, using the first random number value and the second random number value in the second security module Decrypting the third block to obtain remote condition diagnosis information from the third block, transmitting the obtained remote condition diagnosis information to the control unit of the unmanned ship by unidirectional communication only through the second security module, and the control unit of the unmanned ship On the basis of the remote condition diagnosis information, it may provide a step of controlling the unmanned ship.

According to the second embodiment, a device for improving the security of data communication of an unmanned ship using a public network is provided, the device comprising: a first security module receiving information in one direction from a control unit of an unmanned ship, It includes a second module that receives information from the remote diagnosis server in one direction, a processor, and a memory that stores instructions executed by the processor, and the processor executes the instructions, so that the control unit of the unmanned ship performs real-time diagnosis during operation of the unmanned ship. Receives status information of unmanned ships, including information about diagnosed operation status and maintenance status, and regularly diagnosed preventive inspection information and parts life cycle information, and remote diagnosis server outside of the unmanned ship In order to transmit to, one-way transmission to the first security module, the first security module generates first information based on the identification information of the unmanned trap, includes the first information in the IN area of the transaction, and By creating a primary block by including the status information of the trap in the OUT area of the transaction, the state information of the unmanned trap is first encrypted through the blockchain, and the state information of the first encrypted unmanned trap is removed. 1 Secondary encryption is performed by generating second information using a random number, including the second information in the in area of the transaction, and generating a secondary block by including the first information in the out area of the transaction, Unmanned using an artificial intelligence learning model generated by transmitting the secondary encryption-processed status information of unmanned ships to a remote diagnosis server through a public network and learning big data related to the state of a plurality of unmanned ships from the remote diagnosis server. Receives remote condition diagnosis information that diagnoses the current state of the trap through the public network, and the remote condition diagnosis information generates third information using a second random number value for the second information, and uses the third information to signify the transaction. In the area, it is encrypted by creating a tertiary block containing remote status diagnosis information in the out area of the transaction. 2 Obtain the third block corresponding to the second information by searching the block chain based on the identification information of the unmanned trap included in the information, and use the first random number value and the second random number value in the second security module. By decrypting the block, remote condition diagnosis information is obtained from the third block, and the obtained remote condition diagnosis information is transmitted to the control unit of the unmanned ship by unidirectional communication only through the second security module, and remote condition diagnosis from the control unit of the unmanned ship Based on the information, it is characterized in that the unmanned trap is controlled.

According to the third embodiment, it is possible to provide a computer-readable recording medium in which a program for executing a method for improving the security of data communication of an unmanned ship using a public network on a computer is recorded.

FIG. 1 is a diagram schematically illustrating a method of improving the security of data communication of an unmanned ship using a public network according to one disclosure.
FIG. 2 is a flowchart illustrating a method of improving the security of data communication of an unmanned ship using a public network according to one disclosure.
3 is a diagram for explaining a one-way transmission system that improves the existing hackable system according to one disclosure.
4 is a diagram for explaining data transmission and reception for remote control of an unmanned ship in a remote diagnosis server according to an embodiment of the present invention.
5 is a diagram showing a representative configuration of an apparatus for improving the security of data communication of an unmanned ship using a public network according to one disclosure.
6 is a diagram showing a detailed configuration of an apparatus for improving the security of data communication of an unmanned ship using a public network according to one disclosure.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those of ordinary skill in the art can easily implement the present invention. However, the present invention may be implemented in various different forms and is not limited to the embodiments disclosed below. In addition, parts irrelevant to the present invention are omitted in the drawings in order to clearly disclose the present invention, and the same or similar reference numerals denote the same or similar components in the drawings.

Objects and effects of the present invention may be naturally understood or more clearly understood by the following description, and the objects and effects of the present invention are not limited only by the following description.

Objects, features and advantages of the present invention will become more apparent through the following detailed description. In addition, in describing the present invention, when it is determined that a detailed description of a known technology related to the present invention may unnecessarily obscure the subject matter of the present invention, a detailed description thereof will be omitted. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

FIG. 1 is a diagram schematically illustrating a method of improving the security of data communication of an unmanned ship using a public network according to one disclosure.

According to one disclosure, the device 100 for improving the security of data communication of an unmanned trap using a public network is abbreviated as the data communication security device 100 to be used.

According to one disclosure, the data communication security device 100 may help to safely transmit data included in a ship such as an unmanned ship or a cruise to an external server or an external device.

In the case of data communication of existing ships, a communication system was established through an independent network without using a public network for security, but there was a difficulty in exchanging data with other servers or other devices, and user inconvenience was increased. .

Accordingly, the data communication security device 100 may use a public network, but may perform an encryption/decryption function using a block chain so as to improve security. A public network is a network used by a large number of users, and has low security as a network is used by using the Internet or the like.

The data communication security device 100 generally uses the Internet or a public communication network by using a commercially available communication module, and since it uses an existing ICAS equipment, it is possible to save the cost of building a data communication network. In addition, the data communication security device 100 may use a fire wall system for overall security of the system.

In addition, the data communication security device 100 reinforces the security of the internal system by using a physical one-way (out) for information sensed in the ship, and also uses a physical one-way (in) to Prevent spills.

In addition, the data communication security device 100 can reduce the risk of hacking by controlling the execution of a white list for security of the operating system, and can check the reliability of a control command from a remote control server and receive data. . In addition, received data or transmitted data can be encrypted/decrypted using a block chain to enhance data security, and by performing data transmission through a block chain, the risk of forgery and alteration of the system can be prevented. .

It will be described in detail below.

FIG. 2 is a flowchart illustrating a method of improving the security of data communication of an unmanned ship using a public network according to one disclosure.

In block 201 by the start of the day, the data communication security device 100 includes the operation status diagnosis information and maintenance status diagnosis information diagnosed in real time during the operation of the unmanned ship by the control unit of the unmanned ship, and the periodic preventive inspection information and parts life cycle. It is possible to provide the step of receiving the status information of the unmanned trap including information.

By the start of the day, the status information of the unmanned ship is the operating status information including the speed, temperature, pressure, and motor rotation speed acquired in real time while the unmanned ship is running, the standard operating information of each of the equipment included in the unmanned ship, Includes cycle diagnosis information that determines process information periodically, equipment status information that determines physical failures of equipment, parts life information that determines the life cycle of parts included in each equipment, and surrounding environment information acquired based on the location of an unmanned ship. can do.

In addition, the status information of the unmanned ship is characterized in that it is transmitted only to the first security module using a one-way network.

According to one disclosure, in block 202, the data communication security apparatus 100 may provide a step of one-way transmission to the first security module in order to transmit the status information of the unmanned ship to a remote diagnosis server outside the unmanned ship.

According to one initiation, the security module is a module responsible for receiving and transmitting data, and the first security module can communicate with the database of the unmanned ship, and the first security module can only receive data received from the unmanned ship. However, data cannot be transmitted by unmanned traps. That is, by receiving data in only one direction, it is possible to prevent a hacker from accessing the data of the unmanned trap through the first security module.

By the start of the day, the data communication security device 100 records the time when the state information of the unmanned trap is received by the first security module and the time transmitted from the first security module to the public network, so that the log information of the state information of the unmanned trap Can be created.

In block 203 by the start, the data communication security device 100 generates first information based on the identification information of the unmanned trap in the first security module, and includes the first information in the IN area of the transaction, By creating a primary block by including the state information of the unmanned trap in the OUT area of the transaction, it is possible to provide a step of first encrypting the state information of the unmanned trap through the blockchain.

Blockchain, widely known through bitcoin, etc., stores information by connecting it in blocks. A brief look at each block includes a header and a transaction, and a transaction includes a transaction identifier, an IN area, and an out area. Since the data structure of the blockchain is a known configuration, detailed descriptions thereof will be omitted.

The data communication security device 100 stores and manages at least one of personal information consent, authentication code, and access token in a blockchain in order to authenticate at least one terminal, device, and server according to standard protocols such as Oauth. do.

The data communication security device 100 stores a pair of information (eg, an unattended trap ID) and data in the IN area and OUT area of the block of the blockchain. The data communication security device 100 generates information in various forms so that information such as a user authentication code and an access code required for access to a remote diagnosis server can be easily stored, managed, and searched.

First, the data communication security device 100 generates first information based on the identification information of the unmanned trap. The data communication security device 100 may generate a hash value calculated by using identification information of an unmanned trap as an input of a hash function as the first information. The data communication security device 100 stores the first information in the IN area of the block, and stores state information such as temperature, speed, and internal pressure of the unmanned ship in the OUT area of the same block.

The data communication security device 100 generates second information based on a first random number value. The data communication security apparatus 100 may generate the first random number value as second information as it is, or may generate a hash value for the first random number value as second information. The second information is used as an authentication code issued to an authentication application in the process of authentication through the blockchain. The data communication security device 100 stores the second information in the IN area of the block and the first information in the OUT area of the same block. Accordingly, the data communication security device 100 can easily check which unattended trap the authentication code is for and at which point the remote diagnosis server was issued by searching the block chain for the authentication code as a kit value.

The data communication security device 100 generates third information based on the second random number value. The data communication security device 100 may generate the second random number value as third information as it is, or may generate a hash value for the second random number value as third information. The third information is used as an access token in the process of authentication. The data communication security device 100 stores third information in the IN area of the block, and stores drug prescription information and user identification information in the OUT area of the same block. Therefore, like the authentication code, the data communication security device 100 can easily check whether an access token for a customer of a specific company has been effectively issued by searching the block chain for the access token as a kit value.

In addition to this, the data communication security device 100 may generate fourth information based on identification information of other ships and other external servers using the block chain and store it in a block of the block chain together with the affiliate identification information.

The authentication code or access token may have a validity period. The data communication security device 100 may determine whether the authentication code or the access token has a predetermined validity period based on the generation time of the block in which the authentication code or the access token is stored. When receiving an authentication code or an access token whose validity period has elapsed from a user terminal or the like, the data communication security device 100 may inform that the authentication code or access token is not valid to notify that the login authentication process is performed again.

By the start, the data communication security device 100 generates first information based on the identification information of the unmanned trap for automatic authentication of at least one unmanned trap, and converts the first information into an IN area of the transaction. It is possible to store a block in the blockchain and include the state information of the unattended trap in the OUT area of the transaction.

At block 204, the data communication security device 100 generates second information using a first random number value with respect to the state information of the first encrypted unmanned trap at block 204, and transfers the second information to the phosphor area of the transaction. Including and including the first information in the out area of the transaction to generate a secondary block to perform secondary encryption, and then transmitting the secondary encryption-processed status information of the unmanned trap to the remote diagnosis server through the public network. Can provide.

That is, the data communication security device 100 may prevent the state data of the unmanned trap from being leaked to the outside by encrypting the state data of the unmanned trap twice. In addition, by performing encryption using a random number value, even if data is leaked, it is possible to prevent decryption of encrypted information easily.

At the beginning, the random number value may be a random value RA using a predetermined time. Here, the random time refers to the XOR value of the current time (Tc) at which the random value was created and the input time (Tp) when the private key is input to the communication terminal in the unmanned trap, and the random value is an arbitrary time value. Refers to the random number value obtained by a general random number generator, and is based on the following equation.

At the beginning of the day, the first random number value may be a random value generated using the current time (Tc) at the time when the random value is started to be generated and the time (Tp) at the time when the state information of the unmanned trap is received by the first security module. In addition, the second random number value may be a random value generated by using the current time Tc at the time when the random value is started to be generated and the time Tp at which the remote diagnosis server receives remote condition diagnosis information from the unmanned trap.

In block 205, the data communication security device 100 diagnoses the current state of the unmanned trap using an artificial intelligence learning model generated by learning big data related to the states of a plurality of unmanned traps from a remote diagnosis server. A step of receiving remote condition diagnosis information through a public network may be provided.

According to one disclosure, the remote diagnosis server may provide a step of acquiring a decryption key from the database for decrypting the state information of the unmanned ship that has been subjected to secondary encryption using the identification information of the unmanned ship. In addition, according to one disclosure, the remote diagnosis server may provide a step of decrypting the state information of the unmanned trap processed by the second encryption using the encryption key.

The encryption key by one initiation is a random value generated by reflecting the second encryption time point, and the remote diagnosis server may generate the encryption key by obtaining the time point at which the second encryption process has been performed in the data communication security device 100, By using this, it is possible to decrypt the state information of the unmanned trap processed by the second encryption and obtain data.

By the start, the remote diagnosis server converts the time information when the state information of the unmanned ship is generated, the time information processed by the first encryption process, and the state information of the unmanned ship from the state information of the unmanned ship that has been secondly encrypted. It is possible to provide a step of acquiring transmission log information including time information transmitted to the terminal.

In addition, the remote diagnosis server may provide a step of determining that the transmission log information is hacking information when the transmission log information is different from the reference information determined by the first security module.

In addition, when it is determined that the remote diagnosis server is hacking information, it is possible to increase security by discarding the state information of the unmanned trap processed by the secondary encryption without decrypting.

Here, the remote condition diagnosis information is 3 which generates third information using a second random number value for the second information, and includes the third information in the in area of the transaction and the remote status diagnosis information in the out area of the transaction. It may be encrypted by creating a tea block.

At block 206 by one initiation, the data communication security device 100 may provide a step of obtaining a third block corresponding to the second information by searching the block chain based on the identification information of the unmanned trap included in the second information. I can.

That is, the data communication security apparatus 100 undergoes a process of obtaining a third block corresponding to the second information in order to receive a result value for the transmitted data. In this case, the data communication security device 100 may determine the reliability of data in order to prevent intrusion from a hacker.

At block 207, the data communication security device 100 decodes the third block using the first random number value and the second random number value in the second security module, thereby obtaining remote condition diagnosis information from the third block. Steps can be provided.

By the start of the day, the data communication security device 100 receives time information and secondary information of the state information of the unmanned ship, which is secondary encrypted by the remote diagnosis server, from the remote state diagnosis information obtained from the second security module of the unmanned ship. It is possible to provide a step of obtaining reception log information including time information taken to decrypt the encrypted state information of the unmanned trap.

When the reception log information is different from the reference log information determined by the first security module, the data communication security apparatus 100 may provide a step of determining the remote condition diagnosis information as hacking information.

By an initiation, the data communication security device 100 may block remote condition diagnosis information determined as hacking information. In other words, it is possible to block unclear data from outside.

According to one disclosure, in block 208, the data communication security apparatus 100 may provide a step of transmitting the obtained remote condition diagnosis information to the controller of the unmanned ship by unidirectional communication only through the second security module.

According to one initiation, the second security module may prevent leakage of control information included in the remote condition diagnosis information by performing one-way communication in which data is transmitted only to an unmanned trap.

According to one disclosure, in block 209, the data communication security apparatus 100 may provide a step of controlling the unmanned ship based on the remote condition diagnosis information from the controller of the unmanned ship. That is, the remote condition diagnosis information includes information capable of controlling the unmanned ship, and thus, the external server can control the internal devices of the unmanned ship while maintaining security.

3 is a diagram for explaining a one-way transmission system that improves the existing hackable system according to one disclosure.

Referring to (a) of FIG. 3, when the existing remote monitoring system transmits data through an Internet network, which is a public network, there is a risk of being hacked by a hacker connecting through the Internet network. In particular, there is a risk of information leakage and data leakage because the CBM equipment and control device of the unmanned ship are transmitted from one communication module.

Looking at (b) of FIG. 3 as an improved advantage of the present invention, the data communication security device 100 performs data communication using a communication module that is similarly commercially available, but in order to prevent the threat of hacking due to the use of a public network. It adopts a one-way transmission system.

That is, data is transmitted in only one direction, and encrypted data is exchanged by receiving data, thereby improving security of data transmission and reception. In summary, through the one-way security module, the data communication security device 100 only transmits and receives information from the security module, and is passive (by security module type, system, and separate security log device configuration). It may be necessary to collect information in a passive) manner and minimize the impact on the existing system.

4 is a diagram for explaining data transmission and reception for remote control of an unmanned ship in a remote diagnosis server according to an embodiment of the present invention.

According to one disclosure, the unmanned ship of the present invention may be remotely controlled and managed through the data communication security device 100, and a control signal may be received from a remote diagnosis server to perform this.

The remote diagnosis server may provide a step of acquiring data on the states of a plurality of unmanned ships and analyzing the acquired data using a communication protocol for each ICS.

The remote diagnosis server may provide a step of classifying and grouping data into analog information, discrete information, and time series information.

The remote diagnosis server may provide a step of extracting and storing data according to a data extraction period and a data transmission period.

The remote diagnosis server may provide a step of determining an index field of stored data, a storage field, a data exchange method, whether to apply transmission error data, and the like, and converting the data into big data by structuring the data.

The remote diagnosis server may provide a step of generating an artificial intelligence learning model that diagnoses and analyzes the state from the state data of the unmanned ship using big data. And

The remote diagnosis server diagnoses the state information of the unmanned ship using an artificial intelligence learning model, and the equipment life information according to the state of the unmanned ship, equipment replacement information, equipment operating environment information, equipment failure prediction information, equipment inventory management information and equipment It is possible to increase the security of data communication of an unmanned ship using a public network, including generating remote condition diagnosis information including remote control information.

The remote diagnosis server uses an artificial intelligence (AI) system that simulates functions such as recognition and judgment of the human brain using machine learning algorithms such as deep learning, and can determine the status information of the unmanned trap and generate control information. have. Machine learning is an algorithm technology that classifies/learns the features of input data by itself, and element technology is a technology that simulates functions such as cognition and judgment of the human brain using machine learning algorithms such as deep learning. It consists of technical fields such as understanding, reasoning/prediction, knowledge expression, and motion control.

The remote diagnosis server can perform multidimensional analysis, integrated indexing, and integrated search through the big data system, and it can operate the integrated data storage through the tasks of monitoring learned data and creating and managing big data.

In addition, by operating an engine that predicts the failure of the unmanned ship using big data, it is possible to generate a control signal that predicts the failure of the unmanned ship and prevents the failure in advance.

As a result, the remote diagnosis server can comprehensively monitor unmanned ships by managing the user/operator management page, failure prediction results, failure prevention system, remote monitoring, overall plant status and individual plant status.

5 is a diagram showing a representative configuration of an apparatus for improving the security of data communication of an unmanned ship using a public network according to one disclosure.

6 is a diagram showing a detailed configuration of an apparatus for improving the security of data communication of an unmanned ship using a public network according to one disclosure.

According to one disclosure, the data communication security device 100 may include a first security module 1800, a second security module 1900, a communication unit 1500, a processor 1300, and a memory 1700.

However, not all of the components shown in FIG. 5 are essential components of the data communication security apparatus 100. The data communication security device 100 may be implemented by more components than the components shown in FIG. 5, or the data communication security device 100 may be implemented by fewer components than the components shown in FIG. 5. .

For example, as shown in FIG. 6, the data communication security device 100 according to an embodiment includes an output unit 1200, a communication unit 1500, a sensing unit 1400, and A/V. An input unit 1600 and a user input unit 1700 may be further included.

The memory 1700 may store a program for processing and controlling the processor 1300, and may store an image input to the data communication security device 100 or guide information output from the data communication security device 100. . Also, the memory 1700 may store specific information for determining whether to output the guide information.

The memory 1700 is a flash memory type, a hard disk type, a multimedia card micro type, a card type memory (for example, SD or XD memory), and RAM. (RAM, Random Access Memory) SRAM (Static Random Access Memory), ROM (ROM, Read-Only Memory), EEPROM (Electrically Erasable Programmable Read-Only Memory), PROM (Programmable Read-Only Memory), magnetic memory, magnetic disk And at least one type of storage medium among optical disks.

Programs stored in the memory 1700 may be classified into a plurality of modules according to their functions, for example, a UI module 1710, a touch screen module 1720, a notification module 1730, and the like. .

The UI module 1710 may provide a specialized UI, GUI, etc. that are interlocked with the data communication security device 100 for each application. The touch screen module 1720 may detect a user's touch gesture on the touch screen and transmit information on the touch gesture to the processor 1300. The touch screen module 1720 according to an embodiment may recognize and analyze a touch code. The touch screen module 1720 may be configured as separate hardware including a controller.

The notification module 1730 may generate a signal for notifying the occurrence of an event of the apparatus 100 for displaying and recording dental treatment data. Examples of events occurring in the data communication security device 100 include call signal reception, message reception, key signal input, and schedule notification. The notification module 1730 may output a notification signal in the form of a video signal through the display unit 1210, may output a notification signal in the form of an audio signal through the sound output unit 1220, and the vibration motor 1230 It is also possible to output a notification signal in the form of a vibration signal through. For example, the notification module 1730 may generate a signal for outputting guide information based on the estimated lane information.

The output unit 1200 may output an audio signal, a video signal, or a vibration signal, and the output unit 1200 may include a display unit 1210, an audio output unit 1220, and a vibration motor 1230. have.

The display 1210 displays and outputs information processed by the data communication security device 100. Specifically, the display unit 1210 may output an image captured by the camera 1610. Also, the display 1210 may synthesize and output the guide information generated by the processor 1300 with the captured image.

In addition, the display 1210 may display a user interface for executing an operation related to the response in response to a user's input.

The sound output unit 1220 outputs audio data received from the communication unit 1500 or stored in the memory 1700. In addition, the sound output unit 1220 outputs sound signals related to functions (eg, call signal reception sound, message reception sound, and notification sound) performed by the data communication security device 100. For example, the sound output unit 1220 may output guide information generated as a signal from the notification module 1130 as an sound signal under the control of the processor 1300.

The processor 1300 generally controls the overall operation of the data communication security device 100. For example, the processor 1300 executes programs stored in the memory 1700, so that the user input unit 1700, the output unit 1200, the sensing unit 1400, the communication unit 1500, and the A/V input unit 1700 ) And so on. Further, the processor 1300 may perform a function of the data communication security device 100 by executing programs stored in the memory 1700.

The sensing unit 1400 may detect a state of the data communication security device 100 or a state around the data communication security device 100, and transmit the detected information to the processor 1300.

The sensing unit 1400 includes a magnetic sensor 1410, an acceleration sensor 1420, a temperature/humidity sensor 1430, an infrared sensor 1440, a gyroscope sensor 1450, and a position sensor. (For example, a GPS) 1460, an atmospheric pressure sensor 1470, a proximity sensor 1480, and an RGB sensor 1490 may be included, but the present invention is not limited thereto. Since the function of each sensor can be intuitively inferred by a person skilled in the art from its name, a detailed description will be omitted.

The communication unit 1500 may include one or more components that allow the data communication security device 100 to communicate with a patient's terminal, a doctor's terminal, or other devices (not shown) and a server (not shown). Another device (not shown) may be a computing device such as the data communication security device 100 or a sensing device, but is not limited thereto. For example, the communication unit 1500 may include a short range communication unit 1510, a mobile communication unit 1520, and a broadcast reception unit 1530.

The short-range wireless communication unit 1510 includes a Bluetooth communication unit, a Bluetooth Low Energy (BLE) communication unit, a near field communication unit, a WLAN (Wi-Fi) communication unit, a Zigbee communication unit, and an infrared ( IrDA, infrared data association) communication unit, WFD (Wi-Fi Direct) communication unit, UWB (ultra wideband) communication unit, Ant+ communication unit, etc. may be included, but is not limited thereto. For example, the short-range communication unit 1510 may receive information on the number of lanes through short-range wireless communication from a navigation device included in the vehicle.

The mobile communication unit 1520 transmits and receives a radio signal with at least one of a base station, an external terminal, and a server on a mobile communication network. Here, the wireless signal may include a voice call signal, a video call signal, or various types of data according to transmission/reception of text/multimedia messages.

The broadcast receiving unit 1530 receives a broadcast signal and/or broadcast-related information from outside through a broadcast channel. Broadcast channels may include satellite channels and terrestrial channels. According to an implementation example, the data communication security device 100 may not include the broadcast reception unit 1530.

The A/V (Audio/Video) input unit 1600 is for inputting an audio signal or a video signal, and may include a camera 1610 and a microphone 1620. The camera 1610 may obtain an image frame such as a still image or a moving image through an image sensor in a video call mode or a photographing mode. The image captured through the image sensor may be processed through the processor 1300 or a separate image processing unit (not shown).

According to an embodiment, the camera 1610 may capture an external image of the data communication security device 100. For example, the camera 1610 may be installed inside and outside the unmanned ship, or may be a camera included in equipment included in the unmanned ship.

The microphone 1620 receives an external sound signal and processes it as electrical voice data. For example, the microphone 1620 may receive an acoustic signal from an external device or a user. The microphone 1620 may receive a user's voice input. The microphone 1620 may use various noise removal algorithms for removing noise generated in a process of receiving an external sound signal.

The user input unit 1700 refers to a means for a user to input data for controlling the data communication security device 100. For example, the user input unit 1700 includes a key pad, a dome switch, a touch pad (contact type capacitance method, pressure type resistive film method, infrared detection method, surface ultrasonic conduction method, integral type). Tension measurement method, piezo effect method, etc.), a jog wheel, a jog switch, and the like, but are not limited thereto.

In addition, the memory refers to a means for storing by applying a method such as one-hot encoding that can be used for learning and verification of AI technology as labeling data on data related to the state of an unmanned trap entered by an experienced specialist. Data for AI technology learning and verification removes information on identification information and status information of unmanned traps for external disclosure, etc., and stores only data necessary for AI technology learning and verification. The storage format is a text-based format such as JSON, XML, CSV, or binary-based format such as xsl, xslx, npy, mat, etc. in the same way as one-hot encoding that is easily available for supervised learning, which is the most widely used among AI technologies. And the like, but is not limited thereto. In addition, the storage location of the data storage unit may be a repository at a remote location through a cloud service or a REST API-based micro service, etc. from a local device's HDD, but is not limited thereto.

If a person of ordinary skill in the art to which the present invention pertains, various substitutions, modifications and changes are possible within the scope of the technical spirit of the present invention, so that the present invention is described in the foregoing embodiments and the accompanying drawings. Is not limited by.

In the exemplary system described above, the methods are described on the basis of a flowchart as a series of steps or blocks, but the present invention is not limited to the order of the steps, and certain steps may occur in a different order or concurrently with the steps described above. I can. In addition, those skilled in the art will appreciate that the steps shown in the flowchart are not exclusive, other steps may be included, or one or more steps in the flowchart may be deleted without affecting the scope of the present invention.

The method according to the embodiment may be implemented in the form of program instructions that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, and the like alone or in combination. The program instructions recorded on the medium may be specially designed and configured for the embodiment, or may be known and usable to those skilled in computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic media such as floptical disks. -A hardware device specially configured to store and execute program instructions such as magneto-optical media, and ROM, RAM, flash memory, and the like. Examples of the program instructions include not only machine language codes such as those produced by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like. The hardware device described above may be configured to operate as one or more software modules to perform the operation of the embodiment, and vice versa.

Claims (8)

Receiving, by a control unit of the unmanned ship, real-time diagnosis information on the operation status and maintenance status diagnosis information diagnosed during the operation of the unmanned ship, and status information of the unmanned ship including periodic preventive maintenance information and parts life cycle information;
Unidirectionally transmitting the state information of the unmanned ship to a first security module in order to transmit the state information of the unmanned ship to a remote diagnosis server outside the unmanned ship;
The first security module generates first information based on the identification information of the unmanned trap, includes the first information in the IN area of the transaction, and the state information of the unmanned trap is out of the transaction. ) First encrypting the state information of the unmanned trap through a block chain by creating a primary block by including it in an area;
With respect to the state information of the first encrypted unmanned trap, second information is generated using a first random number value, the second information is included in the in area of the transaction, and the first information is included in the out area of the transaction. Performing secondary encryption by generating a secondary block including the secondary block, and then transmitting the secondary encryption-processed state information of the unmanned trap to the remote diagnosis server through a public network;
Receiving, from the remote diagnosis server, remote condition diagnosis information obtained by diagnosing the current condition of the unmanned vessel using an artificial intelligence learning model generated by learning big data related to the condition of a plurality of unmanned vessels through a public network. The remote status diagnosis information includes generating third information using a second random number value for the second information, and including the third information in the in area of the transaction and the remote status diagnosis information in the out area of the transaction. It is encrypted by creating a tertiary block;
Acquiring a third block corresponding to the second information by searching a block chain based on the identification information of the unmanned trap included in the second information;
Obtaining the remote condition diagnosis information from the third block by decoding a third block using the first random number value and the second random number value in a second security module;
Transmitting the obtained remote condition diagnosis information to a control unit of the unmanned ship by unidirectional communication only through a second security module; And
And controlling the unmanned ship based on the remote condition diagnosis information by the controller of the unmanned ship, and improving the security of data communication of the unmanned ship using a public network. The method of claim 1,
From the remote status diagnosis information obtained from the second security module of the unmanned trap, time information when the secondary encryption-processed status information of the unmanned trap is received by the remote diagnosis server, and the secondary encryption-processed status information of the unmanned trap Acquiring reception log information including information about a time taken to decode a signal;
When the reception log information is different from the reference log information determined by the first security module, determining the remote condition diagnosis information as hacking information; And
Blocking the remote condition diagnosis information determined as the hacking information, A method of improving the security of data communication of an unmanned ship using a public network. The method of claim 1,
The remote diagnosis server, by using the identification information of the unmanned ship, obtaining a decryption key from a database capable of decrypting the state information of the unmanned ship that has been subjected to the secondary encryption process; And
And decrypting the state information of the unmanned trap that has been subjected to the second encryption process using the decryption key, and improves the security of data communication of the unmanned trap using a public network. The method of claim 1,
The remote diagnosis server
From the state information of the unmanned trap that has been subjected to secondary encryption, time information when the state information of the unmanned trap is generated, time information that has been subjected to primary encryption, and the time information of transmitting the state information of the unmanned trap to a first security module Obtaining the included transmission log information;
Determining that the transmission log information is hacking information when it is different from the reference information determined by the first security module; And
If it is determined that the hacking information, the secondary encryption process of the unmanned trap state information, including the step of discarding without decrypting, how to improve the security of the data communication of the unmanned trap using a public network. The method of claim 1,
The remote diagnosis server obtaining data on the states of a plurality of unmanned ships and analyzing the obtained data using a communication protocol for each ICS;
Classifying and grouping the data into analog information, discrete information, and time series information;
Extracting and storing the data according to a data extraction period and a data transmission period;
Determining an index field of the stored data, a storage field, a data exchange method, whether to apply transmission error data, etc., and converting the data into big data by structuring the data;
Generating an artificial intelligence learning model that diagnoses and analyzes the state from the state data of the unmanned trap using the big data; And
Diagnosing the state information of the unmanned ship using the artificial intelligence learning model, equipment life information according to the state of the unmanned ship, equipment replacement information, equipment operating environment information, equipment failure prediction information, equipment inventory management information and equipment remote control A method of improving the security of data communication of an unmanned ship using a public network, comprising the step of generating remote condition diagnosis information including the information. The method of claim 1,
The status information of the unmanned ship,
Operation status information including speed, temperature, pressure, and motor rotation speed acquired in real time while the unmanned ship is running, standard operation information of each of the equipment included in the unmanned ship, period diagnosis information that periodically determines process information, It includes equipment status information for determining a physical failure of the equipment, parts life information for determining the life cycle of parts included in each equipment, and surrounding environment information obtained based on the location of the unmanned ship,
The method of improving the security of data communication of the unmanned ship using a public network, characterized in that the state information of the unmanned ship is transmitted only to the first security module using a one-way network. A first security module for receiving information in one direction from the controller of the unmanned ship;
A second module for receiving information in one direction from a remote diagnosis server outside of the unmanned ship;
Processor; and
And a memory storing instructions executed by the processor,
The processor executes instructions,
The control unit of the unmanned ship receives the status information of the unmanned ship including real-time diagnosis information and maintenance status diagnosis information diagnosed in real time during the operation of the unmanned ship, and periodically diagnosed preventive inspection information and parts life cycle information,
In order to transmit the status information of the unmanned ship to a remote diagnosis server outside of the unmanned ship, one-way transmission to the first security module,
The first security module generates first information based on the identification information of the unmanned trap, includes the first information in the IN area of the transaction, and the state information of the unmanned trap is out of the transaction. ) By creating a primary block by including it in the domain, the state information of the unmanned trap is first encrypted through the block chain,
With respect to the state information of the first encrypted unmanned trap, second information is generated using a first random number value, the second information is included in the in area of the transaction, and the first information is included in the out area of the transaction. Secondary encryption is performed by generating a secondary block including the secondary block, and then the secondary encryption-processed state information of the unmanned trap is transmitted to the remote diagnosis server through a public network,
From the remote diagnosis server, using an artificial intelligence learning model generated by learning big data related to the state of a plurality of unmanned ships, remote state diagnosis information that diagnoses the current state of the unmanned ship is received through a public network, and the remote The state diagnosis information is 3 that generates third information using a second random number value for the second information, and includes the third information in the in area of the transaction and the remote status diagnosis information in the out area of the transaction. It is encrypted by creating a tea block,
Obtaining a third block corresponding to the second information by searching the block chain based on the identification information of the unmanned trap included in the second information,
The second security module decodes the third block using the first random number value and the second random number value, thereby obtaining the remote condition diagnosis information from the third block,
The obtained remote condition diagnosis information is transmitted to the control unit of the unmanned ship by unidirectional communication only through a second security module,
An apparatus for improving the security of data communication of an unmanned ship using a public network, characterized in that the control unit of the unmanned ship controls the unmanned ship based on the remote condition diagnosis information. A computer-readable recording medium storing a program for executing the method of claim 1 on a computer.

Images