RU2780401C1 - Apparatus for message-authenticated data exchange hiding the contents of transmitted data - Google Patents

Abstract

FIELD: information security.

SUBSTANCE: invention relates to the field of supporting data exchange in information systems. Technical result of the claimed technical solution is achieved by the claimed solution involving a main apparatus including: a command table, a command counter, a pseudorandom sequence generator, a table of identifiers of controlled apparatus, a data packet generation unit, a message authentication unit, a transmitter, a main apparatus identifier unit, a command checksum calculation unit, a data packet checksum calculation unit; the communication line connects the main apparatus and the controlled apparatuses; the controlled apparatus therein includes a command execution unit, a receiver, a buffer, a decoder, a command recovery unit, a command table, a unit of identifiers of the controlled and the main apparatuses, a command number check unit, a PRS generator, a command checksum check unit, a data packet checksum check unit, a signalling unit, and a common bus.

EFFECT: hiding the contents of commands transmitted via a communication line from an outside observer with the integrity thereof and message authentication ensured.

1 cl, 2 dwg

Description

Field of technology to which the invention relates

The present invention relates to the field of technology that provides data exchange in information systems and fire and security alarms, as well as technologies based on the principles of the Internet of things and is intended to hide data content from an outside observer, imitate protection and check the integrity of data during their transmission between network devices .

State of the art

A device for imitation protection of monitored objects is known, consisting of a transmission unit with a sensor and a signal selection unit, a translator with an information processing unit, an information receiving unit with a control unit and a communication line between the transmission unit and the translator. The sensor includes a starting sequence memory unit, a comparison unit, a generator of the second pseudo-random sequence, a unit for converting an n-bit parallel combination into a serial one, a memory unit, a unit for converting a serial combination into an n-bit parallel combination, a demodulator, a modulator, a matching device. The information processing unit includes a starting sequence memory block, a block for converting an n-bit parallel combination into a serial one, a modulator, a matching device, a key generator, a first pseudo-random sequence generator, a control value memory block, a second pseudo-random sequence generator, a first storage device, a comparison unit , a second storage device, a block for converting a serial combination into an n-bit parallel combination and a demodulator (RF Patent No. 2310236 "Device for imitation protection of controlled objects", publ. 11/10/2007).

The disadvantages of this device are:

1) the device does not check the integrity of the transmitted data packet;

2) the device does not hide the information part of the transmitted data packet from an outside observer;

3) the device is designed to work with one subscriber.

A device is known, which includes a transmitting node containing an information block memory module, a message memory module, a hashing block, switching blocks, a starting block memory module, a memory module of the previous hashed block and a receiving node containing a received message memory module, an information block memory module , hash code selection block, switching blocks, hash code comparison block, hashing block, start block memory module, memory module of the previous hashed block of the received message (RF Patent No. ).

The disadvantages of this device are:

1) the device does not hide transmitted data from an outside observer;

2) the device is designed to work with a small number of subscribers.

A telemetric system for monitoring the parameters of chemical current sources is known, consisting of a non-contact current measurement unit, a voltage measurement unit, a temperature measurement unit, a microcontroller, a device for accelerated measurement of insulation resistance taking into account the absorption current and a power supply unit (Balaban I.G., Balaban A.L. Telemetric system for monitoring the parameters of chemical current sources // Proceedings of the MAI, 2021, No. 116, 35 p.).

Although this system provides protection of telemetric information from an outside observer by restricting access to it, it also has disadvantages:

1) the system does not check the integrity of the transmitted data packet;

2) the system does not provide imitation protection of data during their transmission;

3) the system does not hide the information part of the transmitted data packet from an outside observer.

A device for imitation protection of a group of controlled objects is known, based on the XOR logic, which consists of a control unit containing a control unit, a block for generating a codegram for the next cycle, a generator of the first pseudo-random sequence (RRP-1 generator), a modulator unit, a second pseudo-random sequence generator (RRP-1 generator). 2), a switch containing a switching unit with N communication lines, N comparison units according to the number of controlled objects, each of which consists of a storage device for the value of the PSP-2 generator of the control unit (memory for the value of the PSP-2 generator of the control unit), a block of logical operations XOR (logical operation "exclusive OR"), consisting of n XOR blocks, according to the number of digits in the binary representation of the codograms of the first and second pseudo-random sequences, memory device for the value of the PSP-2 generator of controlled objects (memory for the value of the PSP-2 generator for controlled objects), control unit the health of the object and controlled th object, consisting of a memory block of the next cycle, a comparison block, a demodulator, a memory block, a matching device, a modulator, a PSP-2 generator (RF Patent No. 06/27/2014).

The disadvantages of this device are:

1) the device does not check the integrity of the transmitted data packet;

2) the device does not hide the information part of the transmitted data packet from an outside observer.

To eliminate these shortcomings, a solution is proposed that can make it as difficult as possible to read or replace commands by using a pseudo-random sequence (RRP) and checking the checksum of the incoming data.

Disclosure of invention

The task of the presented device is to hide the content of data, ensure the integrity and imitation protection of data by modifying the transmitted commands by introducing into the data packet an imitation insertion obtained using a PRS generator with a pseudo-random number generation function known only to the sender and recipients of the packet and using data checksum verification. The device allows you to significantly increase the level of information security without the use of cryptographic protection.

The technical result that can be obtained using the proposed invention is to hide the content of commands transmitted over the communication line from an outside observer, while ensuring their integrity and imitation protection and simplifying the technical implementation, compared with known devices.

The technical result is achieved using the main device 1 and one or more controlled devices 2,

the main device (GU) includes a command table 3, a command counter 4, a PSP generator 5, a table of identifiers of controlled devices, a block 7 for generating a data packet, a block 8 for imitation protection, a transmitter 9 for sending a data packet over a communication line 10, a block for the identifier of the main device 11, block 12 for calculating the checksum of the command, block 13 for calculating the checksum of the data packet,

the controlled device (CU) consists of a command execution block 14, a receiver 15, a buffer 16, a decoder 17, a command recovery block 18, a command table 19, a block 20 of identifiers of the controlled and master devices, a block 21 of checking the command number, a PSP generator 22, a block 23 checking the checksum of the command, block 24 checking the checksum of the data packet, signaling block 25 and common bus 26, and

the command and control device selection signal is applied to the first input of the command table 3 and to the first input of the table 6 of identifiers of controlled devices,

the first output of the command table 3 is connected to the first input of the block 7 for forming a data packet, the first output of the table 6 of identifiers of controlled devices is connected to the second input of the block 7 for forming a data packet,

the first input-output of the block 7 forming a data packet is connected to the first input-output of the block 11 of the identifier of the main device, the second input-output of the block 7 forming a data packet is connected to the first input-output of the block 12 for calculating the checksum of the command,

the first output of block 7 for forming a data packet is connected to the second input of block 8 of imitation protection,

the first input-output of block 8 of imitation protection is connected to the first input-output of the command counter 4, the second input-output of block 8 of imitation protection is connected to the first input-output of block 13 for calculating the checksum of the data packet, the first input of block 8 of imitation protection is connected to the first output of generator 5 of the PSP , the first output of the imitation protection unit 8 is connected to the first input of the transmitter 9,

the first output of the command counter 4 is connected to the first input of the PSP generator 5,

the first output of the transmitter 9 is connected to the communication line 10,

the first output of the communication line 10 is connected to the first input of the receiver 15 of the control device 2,

the first output of the receiver 15 is connected to the first input of the buffer 16,

the first output of the buffer 16 is connected to the first input of the decoder 17,

the first input-output of the decoder 17 is connected to the first input-output of the block 20 of the identifier of the controlled and master devices, the second input-output of the decoder 17 is connected to the first input-output of the block 24 for checking the checksum of the data packet, the third input-output of the decoder 17 is connected to the first input - the output of the block 21 for checking the number of commands, the first output of the decoder 17 is connected to the first input of the block 18 for restoring the command,

the second input of the command recovery block 18 is connected to the first output of the PSP generator 22, the first input-output of the command recovery block 18 is connected to the first input-output of the command checksum check block 23, the first output of the command recovery block 18 is connected to the first input of the command table 19,

the first output of the command table 19 is connected to the first input of the command number check block 21, the second output of the command table block 19 is connected to the first input of the command execution block 14, the third output of the command table block 19 is connected to the alarm block 25 via a common bus 26,

the first output of the block 20 identifiers of the controlled and master devices is connected to the signaling block 25 via a common bus 26,

the first output of the block 24 checking the checksum of the data packet is connected to the signaling block 25 via a common bus 26,

the first output of the block 21 checking the command number is connected to the signaling block 25 via a common bus 26, the second output of the block 21 checking the command number is connected to the first input of the PSP generator 22,

the first output of block 23 for checking the checksum of the command is connected to the signaling block 25 via a common bus 26.

Brief description of the drawings

Figure 1 shows a diagram of a data transmission packet. The package includes: sync sequence field 27, recipient ID field 28, sender ID field 29, command field 30, command checksum field 31, command number field 32, data packet checksum field 33.

In FIG. 2 shows a block diagram of the master 1 device and the controlled 2 device.

The GU includes a command table 3, a command counter 4, a PSP generator 5, a table of 6 identifiers of controlled devices, a block 7 for forming a data packet, a block 8 for imitation protection, a transmitter 9, a block for the identifier of the main device 11, a block 12 for calculating the command checksum, block 13 calculation of the checksum of the data packet;

A wireless link 10 connects the GU and one or more CUs;

The controlled device 2 includes a command execution block 14, a receiver 15, a buffer 16, a decoder 17, a command recovery block 18, a command table 19, a block of identifiers of the managed and master devices 20, a block 21 for checking the command number, a PSP generator 22, a check block 23 command checksum, block 24 checking the checksum of the data packet, signaling block 25 and common bus 26, and

the command and control device selection signal is applied to the first input of the command table 3 and to the first input of the table 6 of identifiers of controlled devices,

the first output of the command table 3 is connected to the first input of the block 7 for forming a data packet, the first output of the table 6 of identifiers of controlled devices is connected to the second input of the block 7 for forming a data packet,

the first input-output of the block 7 forming a data packet is connected to the first input-input of the block 11 of the identifier of the main device, the second input-output of the block 7 forming a data packet is connected to the first input-output of the block 12 for calculating the checksum of the command,

the first output of block 7 for forming a data packet is connected to the second input of block 8 of imitation protection,

the first input-output of block 8 of imitation protection is connected to the first input-output of the command counter 4, the second input-output of block 8 of imitation protection is connected to the first input-output of block 13 for calculating the checksum of the data packet, the first input of block 8 of imitation protection is connected to the first output of generator 5 of the PSP , the first output of the imitation protection unit 8 is connected to the first input of the transmitter 9,

the first output of the command counter 4 is connected to the first input of the PSP generator 5,

the first output of the transmitter 9 is connected to the communication line 10,

the first output of the communication line 10 is connected to the first input of the receiver 15 of the control device 2,

the first output of the receiver 15 is connected to the first input of the buffer 16 that stores the data packet,

the first output of the buffer 16 is connected to the first input of the decoder 17,

the first input-output of the decoder 17 is connected to the first input-output of the block 20 of the identifier of the controlled and master devices, the second input-output of the decoder 17 is connected to the first input-output of the block 24 for checking the checksum of the data packet, the third input-output of the decoder 17 is connected to the first input - the output of the block 21 for checking the number of commands, the first output of the decoder 17 is connected to the first input of the block 18 for restoring the command,

the second input of the command recovery block 18 is connected to the first output of the PSP generator 22, the first input-output of the command recovery block 18 is connected to the first input-output of the command checksum check block 23, the first output of the command recovery block 18 is connected to the first input of the command table 19,

the first output of the command table 19 is connected to the first input of the command number check block 21, the second output of the command table 19 is connected to the first input of the command execution block 14, the third output of the command table 19 is connected to the signaling unit 25 via a common bus 26,

the first output of the block 20 identifiers of the controlled and master devices is connected to the signaling block 25 via a common bus 26,

the first output of the block 24 checking the checksum of the data packet is connected to the signaling block 25 via a common bus 26,

the first output of the block 21 checking the command number is connected to the signaling block 25 via a common bus 26, the second output of the block 21 checking the command number is connected to the first input of the PSP generator 22,

the first output of block 23 for checking the checksum of the command is connected to the signaling block 25 via a common bus 26.

Implementation of the invention

The technical result is achieved using the main device 1 and one or more controlled devices 2,

GU 1 includes a command table 3, a command counter 4, a PSP generator 5, a table 6 of identifiers of controlled devices, a data packet generation unit 7, an imitation protection unit 8, a transmitter 9, a master device identifier unit 11, a command checksum calculation unit 12, a 13 calculation of the checksum of the data packet;

a wireless link 10 connects the GU and one or more CUs;

the controlled device 2 includes a command execution block 14, a receiver 15, a buffer 16, a decoder 17, a command recovery block 18, a command table 19, a block of identifiers of the controlled and master devices 20, a block 21 for checking the command number, a PSP generator 22, a check block 23 command checksum, block 24 checking the checksum of the data packet, signaling block 25 and common bus 26, and

the command and control device selection signal is applied to the first input to the command tables 3 and to the first input of the table 6 of identifiers of controlled devices,

the first output of the command table 3 is connected to the first input of the block 7 for forming a data packet, the first output of the table 6 of identifiers of controlled devices is connected to the second input of the block 7 for forming a data packet,

the first input-output of the block 7 forming a data packet is connected to the first input-input of the block 11 of the identifier of the main device, the second input-output of the block 7 forming a data packet is connected to the first input-output of the block 12 for calculating the checksum of the command,

the first output of block 7 for forming a data packet is connected to the second input of block 8 of imitation protection,

the first input-output of block 8 of imitation protection is connected to the first input-output of the command counter 4, the second input-output of block 8 of imitation protection is connected to the first input-output of block 13 for calculating the checksum of the data packet, the first input of block 8 of imitation protection is connected to the first output of generator 5 of the PSP , the first output of the imitation protection unit 8 is connected to the first input of the transmitter 9,

the first output of the command counter 4 is connected to the first input of the PSP generator 5,

the first output of the transmitter 9 is connected to the communication line 10,

the first output of the communication line 10 is connected to the first input of the receiver 15 of the control device 2,

the first output of the receiver 15 is connected to the first input of the buffer 16 that stores the data packet,

the first output of the buffer 16 is connected to the first input of the decoder 17,

the first input-output of the decoder 17 is connected to the first input-output of the block 20 of the identifier of the controlled and master devices, the second input-output of the decoder 17 is connected to the first input-output of the block 24 for checking the checksum of the data packet, the third input-output of the decoder 17 is connected to the first input - the output of the block 21 for checking the number of commands, the first output of the decoder 17 is connected to the first input of the block 18 for restoring the command,

the second input of the command recovery block 18 is connected to the first output of the PSP generator 22, the first input-output of the command recovery block 18 is connected to the first input-output of the command checksum check block 23, the first output of the command recovery block 18 is connected to the first input of the command table 19,

the first output of the command table 19 is connected to the first input of the command number check block 21, the second output of the command table 19 is connected to the first input of the command execution block 14, the third output of the command table 19 is connected to the signaling unit 25 via a common bus 26,

the first output of the block 20 identifiers of the controlled and master devices is connected to the signaling block 25 via a common bus 26,

the first output of the block 24 checking the checksum of the data packet is connected to the signaling block 25 via a common bus 26,

the first output of the block 21 checking the command number is connected to the signaling block 25 via a common bus 26, the second output of the block 21 checking the command number is connected to the first input of the PSP generator 22,

the first output of block 23 for checking the checksum of the command is connected to the signaling block 25 via a common bus 26.

Imitation-protected exchange with concealment of transmitted data is carried out as follows.

The interaction between the main 1 and managed 2 devices occurs using a data packet (figure 1). The data package includes:

1) sync sequence 27 - this field is intended for storing a binary sequence used to synchronize the receiving equipment of the controlled device;

2) recipient identifier 28 - this field contains a unique identifier of the device for which the data packet is intended;

3) sender identifier 29 - this field is intended for storing the unique identifier of the device transmitting the data packet;

4) command 30 - the field contains the code of the transmitted command;

5) command checksum 31 - a field that stores the command checksum to check its integrity;

6) command number 32 - a field that stores the sequence number of the command;

7) checksum of data packet 33 - a field that stores the checksum for fields 28, 29, 30, 31 and 32 of the data packet.

To ensure the correct functioning of the device, the manufacturer performs preliminary preparation of the following blocks of the main device and the controlled device:

1) the identifier of the master device is recorded in the block of the identifier of the master device 11 and the identifiers of the controlled devices included in the network in the table 6 of the identifiers of the controlled devices;

2) in the block of identifiers of the controlled and master devices 20 of the controlled device 2, the identifier of the GU and the identifier of this control unit are recorded;

3) the same PRP generation functions are entered into the pseudo-random sequence generators 5 and 22 in order to generate matching pseudo-random sequences;

4) in the command counter 4 and the command number check block 21, the command counters are reset;

5) command tables 3 and 19 are filled with identical formalized commands;

6) in the block for calculating the checksum of commands 12, the block for calculating the checksum of the data packet 13, the block for checking the checksum of the command 23 and the block for checking the checksum of the data packet 24, the same functions for calculating the checksum are entered.

A network with imitation-protected data exchange with concealment of the content of transmitted data can contain only one GU and one or more CUs.

The operation of the GU begins with the user sending a signal to select the command to be transmitted and the controlled device for which this command is intended. To do this, the selection signal is simultaneously sent to the first input of the command table 3 and to the first input of the table 6 of the identifiers of the controlled devices.

The selected command from the first output of the command table 3 is transmitted to the first input of the block 7 forming the data packet and is recorded in the 30 command field of the data packet.

The unique identifier of the controlled device receiving the command from the first output of the table 6 of identifiers of the controlled devices is sent to the second input of the block 7 for forming the data packet, after which the identifier of the control unit is recorded in the field 28 of the recipient of the data packet.

From the first input-output unit 7 forming a data packet, a request is made to the first input-output block 11 of the identifier of the host device to obtain the identifier of the sender. Upon this request, the host ID unit 11 will return to the data packet generating unit 7 the unique host ID stored therein. Received on the first input-output block 7 of the formation of the data packet identifier is placed in the field 29 of the identifier of the sender of the data packet. From the second input-output block 7 forming a data packet to the first input-output block 12 for calculating the checksum of the command, a request is sent to calculate the checksum of the command to be transmitted. The result of calculations from the first input-output block 12 for calculating the checksum of the command is returned to the second input-output block 7 of the formation of the data packet and is placed in the field 31 of the data packet.

The block 7 for forming a data packet fills the field 27 of the data packet with a synchronization sequence that will allow you to synchronize the operation of the receiver 15 upon receipt of a data packet from the communication line 10. processing.

Having received a partially formed data packet, the block 8 of the imitation protection from the first input-output sends a signal to the first input-output of the command counter 4. Having received the signal, the command counter 4 increases the state of the counter of sent commands stored in it by 1 and returns a new counter value for the first input-output to the first input-output block 8 of imitation protection. The value of the command counter received by the block 8 of the simulation protection is placed in the field 32 of the command number of the data packet. Simultaneously with the first output of the command counter 4, the new value of the counter of sent commands is fed to the first input of block 5 of the PSP generator and initializes it to generate the next value of the pseudo-random sequence. The bit width of the returned value of the SRP must be equal to the sum of the bit lengths of the command to be transmitted, located in the field 30 of the data packet command and the checksum of the command, located in the field 31 of the data packet. The obtained value of the SRP from the first output of the block 5 of the generator of the SRP is transmitted to the first input of the block 8 of the imitation protection. Having received a new value of the PSP, the imitation protection unit 8 adds, according to the XOR rule, the values of the command to be transmitted, stored in field 30 of the data packet and the checksum of the command from field 31 on the one hand and the generated value of the PSP on the other. The result obtained is placed in fields 30 and 31 of the data packet, replacing the previous values. Then block 8 imitation on the second input-output sends a signal to the first input-output block 13 for calculating the checksum of the data packet to calculate the checksum fields 28, 29, 30, 31 and 32 of the data packet. The obtained checksum value from the first input-output block 13 for calculating the checksum of the data packet is returned to the second input-output block 8 of the imitation protection and is placed in field 33 of the checksum of the data packet. This completes the formation of the data packet in the imitation protection block 8, and it is sent from the first output of the imitation protection block 8 to the first input of the transmitter 9. The transmitter 9 transmits a signal from its first output via the communication line 10 to the control unit 2.

The data packet from the communication line 10 arrives at the first input of the receiver 15 of the controlled device. After processing from the first output of the receiver 15, the data packet is sent to the first input of the buffer 16 for storage. From the first output of the buffer 16, the received data packet is sent to the first input of the decoder 17. At the first stage of decoding the data packet, the decoder 17 sends the contents of the packet from its second input-output to the first input-output of the block 24 for checking the checksum of the package. Block 24 checking the checksum of the data packet compares the checksum of fields 28, 29, 30, 31 and 32 of the received data packet with the value of field 33 of the checksum of the data packet. If the values of the checksums match, the block 24 for checking the checksum of the data packet on the first input-output gives the decoder 17 permission to further process the incoming data packet. Otherwise, further processing of the incoming data packet is interrupted and from the first output of block 24 for checking the checksum of the data packet, a corresponding notification is sent to the common bus 26, which is redirected from the common bus 26 to the first input of the signaling block 25. At the second stage of decoding the data packet, the decoder 17 from the field 28 of the data packet extracts the value of the identifier of the recipient, and from the field 29 of the data packet extracts the value of the identifier of the sender and transfers them from the first input-output of the decoder 17 to the first input-output block 20 of the identifiers of the controlled and master devices . Block 20 of identifiers of the managed and master devices compares the identifiers of the GU and CU stored in it and the received ones, and if they match, a signal is transmitted from the first input-output of the block 20 of identifiers of the controlled and master devices to the first input-output of the decoder 17, allowing further processing of the incoming data packet . If the identifiers do not match, the processing of the incoming data packet is interrupted and from the first output of the block 20 of identifiers of the controlled and master devices, a corresponding notification is sent to the common bus 26, which is redirected from the common bus 26 to the first input of the signaling block 25. At the third stage of decoding the data packet, the decoder 17 extracts the value of the command number from the field 32 of the data packet and sends it from the third input-output to the first input-output block 21 of checking the command number. If the command number is less than or equal to the command number stored in the memory of block 21 for checking the command number, further processing of the data packet is interrupted and from the first output of block 21 for checking the command number a corresponding notification is sent to the common bus 26, which is redirected from the common bus 26 to the first input of the block 25 signaling. If the received data packet contains a command number greater than the number of the command stored in the memory of block 21 for checking the command number, processing of the data packet continues. From the second output of block 21 checking the command number received the command number is sent to the first input of the generator 22 PSP. At the same time, data from fields 30 and 31 of the received data packet is sent from the first output of the decoder 17 to the first input of the command recovery unit 18. The PSP generator 22, having received the command number at the first input, uses it as an initial value to generate the next PSP value. Due to the fact that the PRS generator 22 of the control device is identical to the PRS generator 5 of the master device, the same instruction numbers result in the generation of the same PRS values.

The generated PSP value from the first output of the PSP generator block 22 is sent to the second input of the command recovery block 18 . In the command recovery block 18, the PSP value is added according to the XOR rule with the values of fields 30 and 31 of the incoming data packet, thus restoring the command values in field 30 and its checksum in field 31.

The restored values of the command and its checksum from the first input-output block 18 command recovery are transmitted to the first input-output block 23 checksum check command. Block 23 checking the checksum of the command checks the checksum. If the checksum is incorrect, further processing of the data packet is interrupted and from the first output of the block 23 checking the checksum of the command, a corresponding notification is sent to the common bus 26, which is redirected from the common bus 26 to the first input of the signaling block 25. If the checksum check is completed successfully, then from the first input-output block 23 of the checksum check of the command to the first input-output block 18 of the restoration of the command, a signal is sent, allowing further processing of the data packet. Having received permission for further processing of the data packet from the first output of the command recovery block 18, the restored command is sent to the first input of the command table 19.

Having received the next command, the command table 19 makes sure that it is present in the list of commands stored in its memory and, on the first output, sends to the first input of the command number check block 21 permission to store the new command number in the memory of the control unit. After that, the command number checking unit 21 stores the number of the new command in its memory, replacing the previous value. At the same time, the command table 19 sends a command to the command execution block 14 via the second output. If the incoming command is not in the memory of the command table 19, then its execution is interrupted, about which a corresponding notification is sent from the third output of the command table 19 to the common bus 26, which is redirected from the common bus 26 to the first input of the signaling block 25.

The present invention has the following advantages in comparison with known systems and devices:

1) the device checks the integrity of the transmitted data packet;

2) the device provides imitation protection of data during their transfer between network devices;

3) the device hides from an outside observer the information part of the transmitted data packet;

4) the device is designed to work with one or more managed devices.

Claims (21)

A device for imitation-protected data exchange with concealment of the content of transmitted data includes a master device and one or more controlled devices, the main device includes a command table, a command counter, a PSP generator, a table of controlled device identifiers, a data packet generation unit, an imitation protection unit, a transmitter, a master device identifier unit, a command checksum calculation unit, a data packet checksum calculation unit; a communication line connects the master device and one or more controlled devices; the controlled device includes a command execution block, a receiver, a buffer, a decoder, a command recovery block, a command table, a block of identifiers for the controlled and master devices, a block for checking the command number, a PSP generator, a block for checking the command checksum, a block for checking the checksum of a data packet, signaling unit and a common bus, and the command and control device selection signal is applied to the first input to the command tables and to the first input to the table of identifiers of controlled devices, the first output of the command table is connected to the first input of the data packet formation unit, the first output of the table of identifiers of controlled devices is connected to the second input of the data packet formation unit, the first input-output of the data packet generation unit is connected to the first input-output of the master device identifier block, the second input-output of the data packet formation unit is connected to the first input-output of the command checksum calculation unit, the first output of the data packet formation unit is connected to the second input of the imitation protection unit, the first input-output of the simulation protection unit is connected to the first input-output of the program counter, the second input-output of the simulation protection unit is connected to the first input-output of the data packet checksum calculation unit, the first input of the simulation protection unit is connected to the first output of the PSP generator, the first output of the simulation protection unit is connected to the first input of the transmitter, the first output of the program counter is connected to the first input of the PSP generator, the first output of the transmitter is connected to the communication line, the first output of the communication line is connected to the first input of the receiver of the control device, the first output of the receiver is connected to the first input of the buffer that stores the data packet, the first output of the buffer is connected to the first input of the decoder, the first input-output of the decoder is connected to the first input-output of the ID block of the controlled and master devices, the second input-output of the decoder is connected to the first input-output of the data packet checksum check block, the third input-output of the decoder is connected to the first input-output of the number check block commands, the first output of the decoder is connected to the first input of the command recovery block, the second input of the command recovery block is connected to the first output of the PSP generator, the first input-output of the command recovery block is connected to the first input-output of the command checksum check block, the first output of the command recovery block is connected to the first input of the command table, the first output of the command table is connected to the first input of the command number check block, the second output of the command table is connected to the first input of the command execution block, the third output of the command table is connected to the signaling unit via a common bus, the first output of the block of identifiers of the controlled and master devices is connected to the signaling block via a common bus, the first output of the block for checking the checksum of the data packet is connected to the signaling block via a common bus, the first output of the command number checker is connected to the signaling block via a common bus, the second output of the command number checker is connected to the first input of the PSP generator, the first output of the command checksum check block is connected to the signaling block via a common bus.

Images