Method for safely transmitting digital information of internet of things

Abstract

The invention discloses an Internet of Things digital information secure transmission method, and relates to the technical field of digital information transmission, and the method comprises the steps: firstly constructing virtual mapping and generating a prediction path through a sending end twin platform, and dynamically adjusting a transmission path in combination with state data collected by Internet of Things equipment in real time to adapt to a complex and changeable environment; secondly, a quantum communication link is adopted to generate a dynamic key, and the randomness and inseparability of a quantum state are utilized to ensure the security of the key and the data integrity; besides, a receiving end feeds back transmission time consumption, decryption time delay and a channel state to a sending end, and a twin platform of the sending end dynamically optimizes key distribution parameters and path prediction logic based on feedback information, so that a real-time self-adaptive mechanism is formed and can adapt to a continuously changing network environment; and finally, by dynamically optimizing the path weight matrix, resource waste is remarkably reduced, and the utilization efficiency of link resources is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of digital information transmission, and in particular to a method for securely transmitting digital information of the Internet of Things. Background Art

[0002] In today's context of widespread application of digitalization and Internet of Things technologies, with the rapid growth in the number of connected devices, the structure of communication networks is becoming increasingly complex, and their dynamism and openness are constantly improving; this trend also brings severe challenges to the security of information transmission: it is easier for eavesdropping devices or forged nodes to be implanted in the link, directly threatening the confidentiality of information. In cross-regional, large-scale distributed scenarios, higher security requirements are placed on the transmission method.

[0003] Traditional digital information security transmission methods mainly rely on encryption technology, authentication protocols and key management mechanisms; for example, symmetric encryption algorithms (such as AES) and asymmetric encryption algorithms (such as RSA, ECC) are used to protect data content, and authentication protocols (such as TLS / SSL) are used to prevent data from being tampered with or forged during transmission. However, encryption technology can only protect data content to a certain extent, but cannot prevent traffic feature leakage; authentication protocols rely on pre-negotiated static keys and are vulnerable to man-in-the-middle attacks in dynamic network environments; and traditional centralized key management mechanisms are difficult to meet the real-time and efficient key negotiation requirements between distributed devices; therefore, in the current complex network environment, how to design a more secure and efficient transmission solution has become an urgent problem to be solved. Summary of the invention

[0004] In view of the above existing problems, the present invention is proposed.

[0005] The present invention provides a method for secure transmission of digital information in the Internet of Things to solve the problem that traditional digital information transmission schemes are inefficient in a highly dynamic Internet of Things environment and easily become a bottleneck and single point failure source of attacks in large-scale distributed networks.

[0006] In order to solve the above technical problems, the present invention provides the following technical solutions:

[0007] The embodiment of the present invention provides a method for securely transmitting digital information of the Internet of Things, which comprises:

[0008] Step S1, the IoT device collects information transmission system status data in real time, aggregates it through the gateway and transmits it to the sending end twin platform; the sending end twin platform builds a virtual mapping, synchronizes the information transmission system status data and generates a predicted path;

[0009] Step S2: The sending end twin platform cooperates with the receiving end to establish a quantum communication link based on the predicted path and state data, enters the quantum key distribution phase, and generates a random key that matches the current link state;

[0010] Step S3, the random key is transmitted to the sending end to encrypt the state data;

[0011] Step S4: The receiving end receives the encrypted data through the quantum communication link and decrypts it using the key, while verifying the integrity and authenticity of the data and whether there is tampering or man-in-the-middle attack; after decryption, the data is mapped to the target device through the receiving end twin platform;

[0012] Step S5: After the decrypted data is applied, the receiving end twin platform passes the feedback data back to the sending end; the sending end twin platform uses the feedback data to optimize the quantum key distribution parameters and update the next round of prediction path logic.

[0013] As a preferred solution of the method for secure transmission of digital information of the Internet of Things described in the present invention, the method for secure transmission of digital information of the Internet of Things adopts an information transmission system for transmission, and the system includes:

[0014] IoT devices are deployed in the information transmission system and are responsible for collecting status data. After being aggregated through the IoT gateway, they are transmitted to the sending end twin platform.

[0015] The sending-side twin platform builds a virtual map based on the collected status data, synchronizes system status data in real time, analyzes transmission requirements, and generates a preliminary predicted path;

[0016] The communication link module, based on the predicted path and state data of the twin platform at the sending end, cooperates with the receiving end to establish a quantum communication link, and generates a dynamic quantum key through the randomness of the link;

[0017] The receiving-end twin platform receives encrypted data through the quantum communication link, decrypts and verifies the integrity and authenticity of the data using the quantum key, and completes the task docking with the target device;

[0018] The feedback module transmits the feedback data to the sender for optimizing the subsequent key distribution parameters and path calculation logic.

[0019] As a preferred solution of the method for secure transmission of digital information in the Internet of Things described in the present invention, the status data includes channel interference, temperature and humidity, electromagnetic background, node online status and data throughput.

[0020] As a preferred solution of the method for secure transmission of digital information in the Internet of Things described in the present invention, the steps of constructing a virtual mapping, synchronizing information transmission system status data and generating a predicted path on the sending end twin platform are as follows:

[0021] IoT devices collect status data in real time D:

[0022] D={d ij |i=1,2,…,M;j=1,2,…,N}, where d ij is the jth type of state data in the i-th time step, M is the total number of sampling time steps, N is the type of state data,

[0023] Each type of status data d ij After being transmitted to the twin platform through the gateway, it is normalized. The normalization formula is:

[0024]

[0025] in, is the normalized state data, min(d j )、max(d j ) is the minimum and maximum value of the j-th type of state data, which is dynamically adjusted according to historical data;

[0026] The twin platform constructs a virtual mapping of the information transmission system based on the normalized state data, which is represented by the dynamic state matrix s:

[0027] Among them, S t is the system state vector at time t, containing the real-time values ​​of N types of state features,

[0028] Virtual mapping maps the current state of the system through the weighted dynamic association matrix A. The mapping formula is:

[0029] in, is the virtual mapping state vector, A is the weight matrix, and the matrix element is a ij , a ij Dynamic update, the update formula is:

[0030]

[0031] Among them, a ij is the dynamic correlation coefficient between the i-th state and the j-th state, and M is the time step window;

[0032] The twin platform is based on the state vector of the virtual map The real-time status of the synchronous information transmission system, the synchronization formula is: in, is the system state vector after synchronization, is the system state vector before synchronization, α is the smoothing factor,

[0033] Based on synchronization status data Generate prediction path P using dynamic time prediction LSTM model t+Δt , the calculation formula is:

[0034]

[0035] Among them, P t+Δt is the predicted path vector at time t+Δt, f LSTM is the long short-term memory network LSTM model, and Δt is the prediction time step.

[0036] As a preferred solution of the method for secure transmission of digital information in the Internet of Things described in the present invention, the sending end twin platform cooperates with the receiving end to establish a quantum communication link according to the predicted path and state data, enters the quantum key distribution stage, and generates a random key matching the current link state.

[0037] The sending end twin platform generates the predicted path P according to step S1. t+Δt and sync status data Send communication request C to the receiving end t : Among them, P t+Δt To predict the path, To synchronize status data,

[0038] The receiving end twin platform receives C t , and with its own status data Compare and calculate the link compatibility score η, the calculation formula is:

[0039]

[0040] Among them, w i is the weight of the link feature, p i , is the corresponding characteristic value of the sender and the receiver, η is the compatibility score, when η is less than the threshold η th When the link establishment request is passed, the quantum communication link configuration phase begins: according to the predicted path P t+Δt Priority, select the optimal quantum communication channel

[0041]

[0042] in, is the set of candidate quantum communication channels, β k is the channel bandwidth weight, γ k is the channel stability weight, which is determined by the link status data Provide, δ k For channel delay, select The sender and receiver work together to complete the dynamic configuration of the quantum communication channel.

[0043] As a preferred solution of the method for secure transmission of digital information in the Internet of Things described in the present invention, the step of entering the quantum key distribution phase and generating a random key matching the current link state also includes:

[0044] Quantum communication link After the configuration is completed, the system uses the quantum state generation device to generate entangled photon pairs |Ψ>,

[0045]

[0046] Among them, |00> and |11> are the ground states of the entangled state,

[0047] The transmitter and receiver measure the received entangled photons respectively, and the measurement basis is in, and denote the rectangular basis and the diagonal basis respectively;

[0048] The bit sequence generated after measurement is K s and K r , compare and extract the same bits through classical communication to generate the final key K, in, and is the measurement result of the sender and the receiver at the i-th position, and L is the final key length;

[0049] The generated key K passes the NIST randomness test and is distributed to the sender after verification for data encryption.

[0050] As a preferred solution of the method for secure transmission of digital information of the Internet of Things described in the present invention, the encrypted data is transmitted to the receiving end in combination with the predicted path, and at the same time, the Internet of Things device continuously collects status data and feeds it back to the twin platform of the sending end. The step of dynamically adjusting the transmission path is as follows:

[0051] The sending end twin platform uses the quantum key K generated in step S2 to encrypt the transmission data M. The encryption adopts the improved AES encryption algorithm. The encryption formula is: C = E K (M), where C is the encrypted data, M is the plaintext data to be transmitted, K is the quantum key, and E K (·) is the encryption operation, ciphertext C and prediction path P t+Δt After bundling, it is ready for transmission;

[0052] The transmission path is based on the predicted path P in step S1. t+ΔtThe path weight matrix W(t) is defined as Among them, w ij (t) is the transmission path weight between node i and node j at time t, is a set of network nodes;

[0053] Path weight w ij (t) Dynamic calculation formula is:

[0054]

[0055] Among them, τ ij (t) is the current transmission delay between nodes i and j, Q ij (t) is the link quality indicator, I ij (t) is the channel interference strength, α, β, γ are weight parameters,

[0056] The shortest weighted Dijkstra algorithm is used to generate the optimal path P opt , the generating formula is:

[0057]

[0058] in, is the set of available paths, ∑ (i,j)∈P w ij (t) is the total weight of path P;

[0059] Encrypted data C according to the optimal path P opt During the transmission process, the IoT device continuously collects status data D t , including the real-time transmission delay τ ij (t), link quality Q ij (t) and channel interference I ij (t), the collected status data is transmitted to the sending end twin platform through the gateway,

[0060] The sending end twin platform uses the latest feedback data D t Dynamically adjust the path weight matrix W(t) and recalculate the optimal path P opt ;

[0061] If the current path P is found opt When the performance index exceeds the threshold θ, the twin platform at the sending end immediately triggers the path adjustment, and the adjusted path is notified to the receiving end through the network;

[0062] The receiving end receives the encrypted data C through the quantum communication link and decrypts it using the key K. The decryption process is: M = D K (C), where D K(·) is the decryption operation, and the encryption operation E K (·) corresponds to, M is the decrypted plaintext data;

[0063] The receiving end will feed back the link status (such as data integrity, transmission delay, etc.) during the transmission process to the sending end twin platform for subsequent path optimization and transmission adjustment.

[0064] As a preferred solution of the method for secure transmission of digital information of the Internet of Things described in the present invention, the encrypted data of step S3 is transmitted to the receiving end in combination with the predicted path, and at the same time, the Internet of Things device continuously collects status data and feeds it back to the twin platform of the sending end to dynamically adjust the transmission path.

[0065] As a preferred solution of the method for secure transmission of digital information in the Internet of Things described in the present invention, the receiving end receives encrypted data through a quantum communication link and decrypts it using a key, and at the same time verifies the integrity and authenticity of the data, and verifies whether there is tampering or man-in-the-middle attack.

[0066] The receiving end receives the encrypted data C and the corresponding transmission meta-information Π through the quantum communication link.

[0067] Π={P opt ,T,H M},

[0068] Among them, P opt is the optimal transmission path generated by the sender, T is the timestamp, H M The hash value generated by the sender,

[0069] The receiving end verifies whether T is within the receiving time window [T recvstart ,T recvend ], if the time window requirement is not met, data C is rejected;

[0070] The receiving end uses the quantum key K to decrypt the encrypted data C and restore the original plaintext data M. The restoration process is: M = D k (C), where D K (·) is the decryption operation, which is the same as the encryption operation E at the sender. K (·) corresponds to, M is the decrypted plaintext data,

[0071] After successful decryption, the receiving end verifies the plaintext data M and the meta-information Π;

[0072] The receiving end calculates the hash value H′ of the plaintext data M M and the hash value H of the sender in Π M Compare, if H′ M ≠H M, it is determined that the data has been tampered with or transmitted incorrectly during transmission, the data is discarded and an alarm signal is sent to the sender;

[0073] The receiving end verifies the digital signature of the sending end. The sending end uses its private key to sign the data, and the receiving end verifies it using the sending end's public key. The verification process is as follows:

[0074]

[0075] in,

[0076] Σ S The digital signature generated by the sender,

[0077] It is a digital signature operation based on the private key of the sender.

[0078] It is a digital signature verification operation based on the sender's public key.

[0079] If the signature verification fails, it is considered that the data source is abnormal and may be subject to a man-in-the-middle attack;

[0080] Combined with the results of integrity check and authenticity verification, the receiving end further verifies whether there is a man-in-the-middle attack. The triggering conditions for man-in-the-middle attack detection are:

[0081]

[0082] If the trigger condition is met, the receiving end rejects the data and records the abnormal path P opt , informing the sender to optimize the transmission strategy.

[0083] As a preferred solution of the method for secure transmission of digital information in the Internet of Things described in the present invention, the feedback data includes transmission time, channel status and decryption delay.

[0084] The beneficial effects of the present invention are as follows: First, the present invention constructs a virtual mapping and generates a predicted path through the sending end twin platform, combines the status data collected in real time by the Internet of Things devices, dynamically adjusts the transmission path to adapt to the complex and changeable environment, and avoids link congestion and delay; secondly, a quantum communication link is used to generate a dynamic key, and the randomness and indivisibility of the quantum state are used to ensure the security of the key. In terms of data integrity, a multiple protection mechanism is formed through hash verification, digital signature verification, and man-in-the-middle attack detection. The receiving end can not only quickly detect and reject tampered or forged data, but also effectively prevent man-in-the-middle attacks, and comprehensively ensure the credibility and integrity of the data; in addition, the receiving end feeds back the transmission time, decryption delay, and channel status to the sending end. The sending end twin platform dynamically optimizes the key distribution parameters and path prediction logic based on the feedback information, forming a real-time adaptive mechanism that can adapt to the ever-changing network environment; finally, by dynamically optimizing the path weight matrix, resource waste is significantly reduced and the utilization efficiency of link resources is improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0085] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative work.

[0086] Figure 1 This is a flow chart of the method for secure transmission of digital information in the Internet of Things in Example 1. DETAILED DESCRIPTION

[0087] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are described in detail below in conjunction with the accompanying drawings.

[0088] In the following description, many specific details are set forth to facilitate a full understanding of the present invention, but the present invention may also be implemented in other ways different from those described herein, and those skilled in the art may make similar generalizations without violating the connotation of the present invention. Therefore, the present invention is not limited to the specific embodiments disclosed below.

[0089] Secondly, the term "one embodiment" or "embodiment" as used herein refers to a specific feature, structure, or characteristic that may be included in at least one implementation of the present invention. The term "in one embodiment" that appears in different places in this specification does not necessarily refer to the same embodiment, nor does it refer to a separate or selective embodiment that is mutually exclusive with other embodiments.

[0090] Example 1, reference Figure 1, this embodiment provides a method for securely transmitting digital information of the Internet of Things, comprising the following steps:

[0091] Step S1, the IoT device collects information transmission system status data in real time, aggregates it through the gateway and transmits it to the sending end twin platform; the sending end twin platform builds a virtual mapping, synchronizes the information transmission system status data and generates a predicted path;

[0092] Status data includes channel interference, temperature and humidity, electromagnetic background, node online status and data throughput;

[0093] The steps for the sending end twin platform to build a virtual map, synchronize the information transmission system status data and generate a predicted path are as follows:

[0094] IoT devices collect status data in real time D:

[0095] D={d ij |i=1,2,…,M;j=1,2,…,N}, where d ij is the jth type of state data in the i-th time step, M is the total number of sampling time steps, N is the type of state data,

[0096] Each type of status data d ij After being transmitted to the twin platform through the gateway, it is normalized. The normalization formula is:

[0097]

[0098] in, is the normalized state data, min(d j )、max(d j ) is the minimum and maximum value of the j-th type of state data, which is dynamically adjusted according to historical data;

[0099] The twin platform constructs a virtual mapping of the information transmission system based on normalized state data, expressed using a dynamic state matrix S:

[0100] Among them, S t is the system state vector at time t, containing the real-time values ​​of N types of state features,

[0101] Virtual mapping maps the current state of the system through the weighted dynamic association matrix A. The mapping formula is:

[0102] in, is the virtual mapping state vector, A is the weight matrix, and the matrix element is a ij , a ij Dynamic update, the update formula is:

[0103]

[0104] Among them, a ij is the dynamic correlation coefficient between the i-th state and the j-th state, and M is the time step window;

[0105] The twin platform is based on the state vector of the virtual map The real-time status of the synchronous information transmission system, the synchronization formula is: in, is the system state vector after synchronization, is the system state vector before synchronization, α is the smoothing factor,

[0106] Based on synchronization status data Generate prediction path P using dynamic time prediction LSTM model t+Δt , the calculation formula is:

[0107]

[0108] Among them, P t+Δt is the predicted path vector at time t+Δt, f LSTM is the long short-term memory network LSTM model, Δt is the prediction time step;

[0109] Specifically, the twin platform realizes dynamic modeling, state synchronization and path optimization of information transmission systems.

[0110] Step S2: The sending end twin platform cooperates with the receiving end to establish a quantum communication link based on the predicted path and state data, enters the quantum key distribution phase, and generates a random key that matches the current link state;

[0111] The sending end twin platform cooperates with the receiving end to establish a quantum communication link based on the predicted path and state data, and enters the quantum key distribution phase. The steps to generate a random key that matches the current link state are as follows:

[0112] The sending end twin platform generates the predicted path P according to step S1. t+Δt and sync status data Send communication request C to the receiving end t : Among them, P t+Δt To predict the path, To synchronize status data,

[0113] The receiving end twin platform receives C t , and with its own status data Compare and calculate the link compatibility score η, the calculation formula is:

[0114]

[0115] Among them, w i is the weight of the link feature, p i , is the corresponding characteristic value of the sender and the receiver, η is the compatibility score, when η is less than the threshold η th When the link establishment request is passed, the quantum communication link configuration phase begins: according to the predicted path P t+Δt Priority, select the optimal quantum communication channel

[0116]

[0117] in, is the set of candidate quantum communication channels, β k is the channel bandwidth weight, γ k is the channel stability weight, which is determined by the link status data Provide, δ k For channel delay, select The sender and receiver work together to dynamically configure the quantum communication channel;

[0118] Entering the quantum key distribution phase, the step of generating a random key that matches the current link state also includes:

[0119] Quantum communication link After the configuration is completed, the system uses the quantum state generation device to generate entangled photon pairs |Ψ>,

[0120]

[0121] Among them, |00> and |11> are the ground states of the entangled state,

[0122] The transmitter and receiver measure the received entangled photons respectively, and the measurement basis is in, and denote the rectangular basis and the diagonal basis respectively;

[0123] The bit sequence generated after measurement is K s and K r , compare and extract the same bits through classical communication to generate the final key K, in, and is the measurement result of the sender and the receiver at the i-th position, and L is the final key length;

[0124] The generated key K passes the NIST randomness test and is distributed to the sender after verification for data encryption;

[0125] Specifically, through the above steps, the quantum communication link combines the current link state and the predicted path to generate a random key that is highly matched with the environment.

[0126] Step S3, the random key is transmitted to the sending end to encrypt the state data;

[0127] The encrypted data in step S3 is transmitted to the receiving end in combination with the predicted path. At the same time, the IoT device continuously collects status data and feeds it back to the sending end twin platform to dynamically adjust the transmission path.

[0128] The encrypted data is transmitted to the receiving end in combination with the predicted path. At the same time, the IoT device continuously collects status data and feeds it back to the sending end twin platform. The steps for dynamically adjusting the transmission path are:

[0129] The sending end twin platform uses the quantum key K generated in step S2 to encrypt the transmission data M. The encryption adopts the improved AES encryption algorithm. The encryption formula is: C = E K (M), where C is the encrypted data, M is the plaintext data to be transmitted, K is the quantum key, and E K (·) is the encryption operation, ciphertext C and prediction path P t+Δt After bundling, it is ready for transmission;

[0130] The transmission path is based on the predicted path P in step S1. t+Δt The path weight matrix W(t) is defined as Among them, w ij (t) is the transmission path weight between node i and node j at time t, is a set of network nodes;

[0131] Path weight w ij (t) Dynamic calculation formula is:

[0132]

[0133] Among them, τ ij (t) is the current transmission delay between nodes i and j, Q ij (t) is the link quality indicator, I ij (t) is the channel interference strength, α, β, γ are weight parameters,

[0134] The shortest weighted Dijkstra algorithm is used to generate the optimal path P opt , the generating formula is:

[0135]

[0136] in, is the set of available paths, ∑ (i,j)∈Pw ij (t) is the total weight of path P;

[0137] Encrypted data C according to the optimal path P opt During the transmission process, the IoT device continuously collects status data D t , including the real-time transmission delay τ ij (t), link quality Q ij (t) and channel interference I ij (t), the collected status data is transmitted to the sending end twin platform through the gateway,

[0138] The sending end twin platform uses the latest feedback data D t Dynamically adjust the path weight matrix W(t) and recalculate the optimal path P opt ;

[0139] If the current path P is found opt When the performance index exceeds the threshold θ, the twin platform at the sending end immediately triggers the path adjustment, and the adjusted path is notified to the receiving end through the network;

[0140] The receiving end receives the encrypted data C through the quantum communication link and decrypts it using the key K. The decryption process is: M = D K (C), where D K (·) is the decryption operation, and the encryption operation E K (·) corresponds to, M is the decrypted plaintext data;

[0141] The receiving end will feed back the link status (such as data integrity, transmission delay, etc.) during the transmission process to the sending end twin platform for subsequent path optimization and transmission adjustment; specifically, efficient and secure transmission of encrypted data is achieved in a dynamically changing transmission environment.

[0142] Step S4: The receiving end receives the encrypted data through the quantum communication link and decrypts it using the key, while verifying the integrity and authenticity of the data and whether there is tampering or man-in-the-middle attack; after decryption, the data is mapped to the target device through the receiving end twin platform;

[0143] The receiving end receives the encrypted data through the quantum communication link and decrypts it using the key, while verifying the integrity and authenticity of the data and whether there is tampering or man-in-the-middle attack.

[0144] The receiving end receives the encrypted data C and the corresponding transmission meta-information Π through the quantum communication link.

[0145] Π={P opt ,T,H M},

[0146] Among them, P optis the optimal transmission path generated by the sender, T is the timestamp, H M The hash value generated by the sender,

[0147] The receiving end verifies whether T is within the receiving time window [T recvstart ,T recvend ], if the time window requirement is not met, data C is rejected;

[0148] The receiving end uses the quantum key K to decrypt the encrypted data C and restore the original plaintext data M. The restoration process is: M = D K (C), where D K (·) is the decryption operation, which is the same as the encryption operation E at the sender. K (·) corresponds to, M is the decrypted plaintext data,

[0149] After successful decryption, the receiving end verifies the plaintext data M and the meta-information Π;

[0150] The receiving end calculates the hash value H′ of the plaintext data M M and the hash value H of the sender in Π M Compare, if H′ M ≠H M , it is determined that the data has been tampered with or transmitted incorrectly during transmission, the data is discarded and an alarm signal is sent to the sender;

[0151] The receiving end verifies the digital signature of the sending end. The sending end uses its private key to sign the data, and the receiving end verifies it using the sending end's public key. The verification process is as follows:

[0152]

[0153] in,

[0154] Σ S The digital signature generated by the sender,

[0155] It is a digital signature operation based on the private key of the sender.

[0156] It is a digital signature verification operation based on the sender's public key.

[0157] If the signature verification fails, it is considered that the data source is abnormal and may be subject to a man-in-the-middle attack;

[0158] Combined with the results of integrity check and authenticity verification, the receiving end further verifies whether there is a man-in-the-middle attack. The triggering conditions for man-in-the-middle attack detection are:

[0159]

[0160] If the trigger condition is met, the receiving end rejects the data and records the abnormal path P opt , inform the sender to optimize the transmission strategy;

[0161] Specifically, the receiving end implements data decryption, integrity check, authenticity verification, and man-in-the-middle attack detection to ensure that data is transmitted securely and reliably to the target device.

[0162] Step S5: After the decrypted data is applied, the receiving end twin platform transmits the feedback data back to the sending end; the sending end twin platform uses the feedback data to optimize the quantum key distribution parameters and update the next round of prediction path logic;

[0163] Feedback data includes transmission time, channel conditions, and decryption delay;

[0164] The method for secure transmission of digital information in the Internet of Things adopts an information transmission system for transmission, and the system includes:

[0165] IoT devices are deployed in the information transmission system and are responsible for collecting status data. After being aggregated through the IoT gateway, they are transmitted to the sending end twin platform.

[0166] The sending-side twin platform builds a virtual map based on the collected status data, synchronizes system status data in real time, analyzes transmission requirements, and generates a preliminary predicted path;

[0167] The communication link module, based on the predicted path and state data of the twin platform at the sending end, cooperates with the receiving end to establish a quantum communication link, and generates a dynamic quantum key through the randomness of the link;

[0168] The receiving-end twin platform receives encrypted data through the quantum communication link, decrypts and verifies the integrity and authenticity of the data using the quantum key, and completes the task docking with the target device;

[0169] The feedback module transmits the feedback data to the sender for optimizing the subsequent key distribution parameters and path calculation logic.

[0170] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical solutions of the present invention, which should all be included in the scope of the claims of the present invention.

Claims

1. A method for secure transmission of digital information in the Internet of Things, characterized by: include, Step S1: IoT devices collect information transmission system status data in real time, aggregate it through the gateway and transmit it to the sending end twin platform; The sending-side twin platform builds a virtual map, synchronizes information transmission system status data, and generates a predicted path; Step S2: The sending end twin platform cooperates with the receiving end to establish a quantum communication link based on the predicted path and state data, enters the quantum key distribution phase, and generates a random key that matches the current link state; Step S3, the random key is transmitted to the sending end to encrypt the state data; Step S4, the receiving end receives the encrypted data through the quantum communication link and decrypts it using the key, while verifying the integrity and authenticity of the data and whether there is tampering or man-in-the-middle attack; After decryption, the data is mapped to the target device through the receiving-end twin platform; Step S5: After the decrypted data is applied, the receiving end twin platform passes the feedback data back to the sending end; the sending end twin platform uses the feedback data to optimize the quantum key distribution parameters and update the next round of prediction path logic.

2. A method for secure transmission of digital information in the Internet of Things as claimed in claim 1, characterized in that: The method for securely transmitting digital information of the Internet of Things adopts an information transmission system for transmission, and the system includes: IoT devices are deployed in the information transmission system and are responsible for collecting status data. After being aggregated through the IoT gateway, they are transmitted to the sending end twin platform. The sending-side twin platform builds a virtual map based on the collected status data, synchronizes system status data in real time, analyzes transmission requirements, and generates a preliminary predicted path; The communication link module, based on the predicted path and state data of the twin platform at the sending end, cooperates with the receiving end to establish a quantum communication link, and generates a dynamic quantum key through the randomness of the link; The receiving-end twin platform receives encrypted data through the quantum communication link, decrypts and verifies the integrity and authenticity of the data using the quantum key, and completes the task docking with the target device; The feedback module transmits the feedback data to the sender for optimizing the subsequent key distribution parameters and path calculation logic.

3. A method for secure transmission of digital information in the Internet of Things as claimed in claim 2, characterized in that: The status data includes channel interference, temperature and humidity, electromagnetic background, node online status and data throughput.

4. A method for secure transmission of digital information in the Internet of Things as claimed in claim 3, characterized in that: The steps of constructing a virtual mapping, synchronizing information transmission system status data and generating a predicted path on the sending end twin platform are: IoT devices collect status data in real time D: D={d ij |i=1,2,...,M;j=1,2,...,N},where d ij is the jth type of state data in the i-th time step, M is the total number of sampling time steps, N is the type of state data, Each type of status data d ij After being transmitted to the twin platform through the gateway, it is normalized. The normalization formula is: in, is the normalized state data, min(d j )、max(d j ) is the minimum and maximum value of the j-th type of state data, which is dynamically adjusted according to historical data; The twin platform constructs a virtual mapping of the information transmission system based on normalized state data, expressed using a dynamic state matrix S: Among them, S t is the system state vector at time t, containing the real-time values ​​of N types of state features, Virtual mapping maps the current state of the system through the weighted dynamic association matrix A. The mapping formula is: in, is the virtual mapping state vector, A is the weight matrix, and the matrix element is a ij , a ij Dynamic update, the update formula is: Among them, a ij is the dynamic correlation coefficient between the i-th state and the j-th state, and M is the time step window; The twin platform is based on the state vector of the virtual map The real-time status of the synchronous information transmission system, the synchronization formula is: in, is the system state vector after synchronization, is the system state vector before synchronization, α is the smoothing factor, Based on synchronization status data Generate prediction path P using dynamic time prediction LSTM model t+Δt , the calculation formula is: Among them, P t+Δt is the predicted path vector at time t+Δt, f LSTM is the long short-term memory network LSTM model, and Δt is the prediction time step.

5. A method for secure transmission of digital information in the Internet of Things as claimed in claim 4, characterized in that: The sending end twin platform cooperates with the receiving end to establish a quantum communication link based on the predicted path and state data, and enters the quantum key distribution phase. The steps of generating a random key matching the current link state are as follows: The sending end twin platform generates the predicted path P according to step S1. t+Δt and sync status data Send communication request C to the receiving end t : Among them, P t+Δt To predict the path, To synchronize status data, The receiving end twin platform receives C t , and with its own status data Compare and calculate the link compatibility score η, the calculation formula is: Among them, w i is the weight of the link feature, p i , is the corresponding characteristic value of the sender and the receiver, η is the compatibility score, when η is less than the threshold η th When the link establishment request is passed, the quantum communication link configuration phase begins: according to the predicted path P t+Δt The priority of selecting the optimal quantum communication channel Q opt : Among them, Q is the set of candidate quantum communication channels, β k is the channel bandwidth weight, Y k is the channel stability weight, which is determined by the link status data Provide, δ k is the channel delay.

6. A method for secure transmission of digital information in the Internet of Things as claimed in claim 5, characterized in that: The step of entering the quantum key distribution phase and generating a random key matching the current link state also includes: Quantum communication link Q opt After the configuration is completed, the system uses the quantum state generation device to generate entangled photon pairs |ψ>, Among them, |00> and |11> are the ground states of the entangled state, The transmitter and receiver measure the received entangled photons respectively, and the measurement basis is in, and denote the rectangular basis and the diagonal basis respectively; The bit sequence generated after measurement is K s and K r , compare and extract the same bits through classical communication to generate the final key K, in, and is the measurement result of the sender and the receiver at the i-th position, and L is the final key length; The generated key K passes the NIST randomness test and is distributed to the sender after verification for data encryption.

7. A method for secure transmission of digital information in the Internet of Things as claimed in claim 6, characterized in that: The encrypted data is transmitted to the receiving end in combination with the predicted path. At the same time, the IoT device continuously collects status data and feeds it back to the sending end twin platform. The steps of dynamically adjusting the transmission path are: The sending end twin platform uses the quantum key K generated in step S2 to encrypt the transmission data M. The encryption adopts the improved AES encryption algorithm. The encryption formula is: C = E K (M), where C is the encrypted data, M is the plaintext data to be transmitted, K is the quantum key, and E K (·) is the encryption operation, ciphertext C and prediction path P t+Δt After bundling, it is ready for transmission; The transmission path is based on the predicted path P in step S1. t+Δt The path weight matrix W(t) is defined as Among them, w ij (t) is the transmission path weight between node i and node j at time t, is a set of network nodes; Path weight w ij (t) Dynamic calculation formula is: Among them, τ ij (t) is the current transmission delay between nodes i and j, Q ij (t) is the link quality indicator, I ij (t) is the channel interference strength, α, β, Y are weight parameters, The shortest weighted Dijkstra algorithm is used to generate the optimal path Popt, and the generation formula is: in, is the set of available paths, ∑ (i，j)∈P w ij (t) is the total weight of path P; Encrypted data C according to the optimal path P opt During the transmission process, the IoT device continuously collects status data D t , including the real-time transmission delay τ ij (t), link quality Q ij (t) and channel interference t ij (t), the collected status data is transmitted to the sending end twin platform through the gateway, The sending end twin platform uses the latest feedback data D t Dynamically adjust the path weight matrix W(t) and recalculate the optimal path P opt ; If the current path P is found opt When the performance index exceeds the threshold θ, the twin platform at the sending end immediately triggers the path adjustment, and the adjusted path is notified to the receiving end through the network; The receiving end receives the encrypted data C through the quantum communication link and decrypts it using the key K. The decryption process is: M = D K (C), where D K (·) is the decryption operation, and the encryption operation E K (·) corresponds to M, and M is the decrypted plaintext data.

8. A method for secure transmission of digital information in the Internet of Things as claimed in claim 7, characterized in that: The encrypted data of step S3 is transmitted to the receiving end in combination with the predicted path. At the same time, the IoT device continuously collects status data and feeds it back to the twin platform of the sending end to dynamically adjust the transmission path.

9. A method for secure transmission of digital information in the Internet of Things as claimed in claim 8, characterized in that: The receiving end receives the encrypted data through the quantum communication link and decrypts it using the key, and at the same time verifies the integrity and authenticity of the data, and verifies whether there is tampering or man-in-the-middle attack. The receiving end receives the encrypted data C and the corresponding transmission meta-information Π through the quantum communication link. Π={P opt ,T,H M }, Among them, P opt is the optimal transmission path generated by the sender, T is the timestamp, H M The hash value generated by the sender, The receiving end verifies whether T is within the receiving time window [T recvstart , T recvend ], if the time window requirement is not met, data C is rejected; The receiving end uses the quantum key K to decrypt the encrypted data C and restore the original plaintext data M. The restoration process is: M = D K (C), where D K (·) is the decryption operation, which is the same as the encryption operation E at the sender. K (·) corresponds to, M is the decrypted plaintext data, After successful decryption, the receiving end verifies the plaintext data M and the meta-information Π; The receiving end calculates the hash value H′ of the plaintext data M M , and the hash value H of the sender in Π M Compare, if H′ M ≠H M , it is determined that the data has been tampered with or transmitted incorrectly during transmission, the data is discarded and an alarm signal is sent to the sender; The receiving end verifies the digital signature of the sending end. The sending end uses its private key to sign the data, and the receiving end verifies it using the sending end's public key. The verification process is as follows: in, ∑S is the digital signature generated by the sender, It is a digital signature operation based on the private key of the sender. It is a digital signature verification operation based on the sender's public key. If the signature verification fails, it is considered that the data source is abnormal and may be subject to a man-in-the-middle attack; Combined with the results of integrity check and authenticity verification, the receiving end further verifies whether there is a man-in-the-middle attack. The triggering conditions for man-in-the-middle attack detection are: If the trigger condition is met, the receiving end rejects the data and records the abnormal path P opt , informing the sender to optimize the transmission strategy.

10. A method for secure transmission of digital information in the Internet of Things as claimed in claim 9, characterized in that: The feedback data includes transmission time, channel status and decryption delay.

Images