基于端点设备的城市轨道交通视频单向传输技术

张立东1许子恒1王坤2

One-way Video Transmission Technology for Urban Rail Transit Based on EndpointDevices

ZHANG Lidong1XU Ziheng1WANG Kun2
摘要:
[目的]为了满足城市轨道交通系统不同安全等级网络之间视频传输的完整性、机密性和可用性等要求,有必要创新一种安全、可靠的视频单向传输方案,确保视频数据仅从低密级网络向高密级网络单向流动。[方法]提出了基于2台端点设备的视频单向传输方案,介绍了该方案的整体架构,设计了基于以太网的私有协议。采用UPET(单向专用交换通道)技术进行了单向传输联络设计,采用FEC(前向纠错)技术进行了纠错及校验设计,在此基础上建立了所提方案的数据传输流程。配备了相关的软硬件,进一步验证了所提方案的测试效果,并统计了该方案在上海多条城市轨道交通线路上运行1个月的实际效果。[结果及结论]与常规UDP(用户数据包协议)传输方式相比,使用所提方案进行视频单向传输时,数据传输的速度更为稳定,延时更低,可以满足城市轨道交通业务的实时传输需求。该方案中的私有协议设计方案可以有效规避既有通用协议的漏洞,有效抵御网络攻击,确保跨密级网络的视频同步传输。
Abstracts:
[Objective] To meet the integrity, confidentiality and availability requirements for inter-network video transmission of different security levels in urban rail transit system, it is necessary to develop a secure and reliable one-way video transmission scheme that ensures video data flows only from low security networks to high security networks. [Method] A one-way video transmission scheme based on two endpoint devices is proposed. The overall architecture of the scheme is introduced, and a proprietary Ethernet-based protocol is designed. UPET (unidirectional private exchange tunnel) technology is employed for the design of one-way transmission channels, and FEC (forward error correction) technology is used for error correction and verification design. Based on these, the data transmission process of the proposed scheme is established. Relevant software and hardware are integrated to validate the testing effectiveness of the proposed scheme, and the actual performance of the scheme is evaluated over a one-month operational period on multiple urban rail transit lines in Shanghai. [Result & Conclusion] Compared with conventional UDP (user datagram protocol) transmission methods, the proposed one-way video transmission scheme demonstrates more stable data transfer rates and lower latency, meeting the real-time transmission requirements of urban rail transit services. The proprietary protocol design in the proposed scheme effectively avoids the vulnerabilities associated with general-purpose protocols and enhances resistance to network attacks, thereby ensuring synchronous video transmission across classified networks.
论文检索