WAPI stable transmission type wireless data management system

Abstract

The invention relates to the technical field of wireless communication, in particular to a WAPI stable transmission type wireless data management system, which is used for solving the problems that a WAPI-based ternary security architecture is adopted, an intelligent substation network is constructed, secure communication and service isolation are realized, the compatibility with the existing network is ensured, and the wireless data management efficiency is high. However, flow distribution cannot be dynamically adjusted according to transmission conditions and service requirements, network congestion and delay cannot be reduced through dynamic adjustment, and system stability and performance are reduced. Wireless transmission flow is monitored in real time through the flow management module, flow distribution is dynamically adjusted according to transmission conditions and service requirements, efficient utilization of network resources is guaranteed, an existing network structure is not affected through comprehensive evaluation, accurate calculation of the service requirements and optimization of bandwidth distribution, good compatibility is achieved, and the service quality is improved. Network congestion and delay are reduced through dynamic adjustment, and system stability and performance are improved.

Description

Technical Field

[0001] The present invention relates to the field of wireless communication technologies, and more specifically, to a WAPI stable transmission type wireless data management system. Background Art

[0002] WAPI is a wireless local area network transmission protocol independently developed in China. Compared with WIFI, WAPI has significant advantages in terms of security. It adopts two-way authentication encryption technology to ensure the security of data transmission. However, despite many advantages of WAPI, in practical applications, its stability and transmission efficiency still face some challenges. Therefore, it is particularly important to develop a WAPI wireless data management system capable of stable data transmission.

[0003] The patent application with the publication number CN116017459A discloses an intelligent substation data secure transmission system implemented based on WAPI. The intelligent substation data secure transmission system includes a service end and a substation end. The substation end includes a network edge layer, a network security layer, a network aggregation layer, a network access layer, and a terminal device layer. The present invention constructs the network architecture of the intelligent substation by using a network based on WAPI, and realizes the secure data communication of the terminal devices in the substation through a three-element security architecture of the service end, the network access layer, and the terminal device layer. At the same time, an isolation network for different services is designed in the in-station network, which is more in line with the existing substation network environment and does not require significant modification of the original network structure, having better network compatibility.

[0004] However, the above reference patent constructs the intelligent substation network by adopting a three-element security architecture based on WAPI to achieve secure communication and service isolation, ensuring compatibility with the existing network. However, it cannot support regular key update and secure distribution, increasing the risk of data being cracked, and cannot dynamically adjust the traffic allocation according to the transmission status and service requirements, unable to reduce network congestion and latency through dynamic adjustment, reducing the system stability and performance. At the same time, it cannot real-time monitor abnormal behaviors in wireless transmission, cannot use machine learning models to predict the probability of abnormal behaviors, and cannot process abnormal behaviors in a timely manner, increasing the security risk.

[0005] Therefore, we propose a WAPI stable transmission type wireless data management system for the above problems. Summary of the Invention

[0006] The object of the present invention is to provide a WAPI stable transmission type wireless data management system, which solves the problems that the above reference patent adopts a three - element security architecture based on WAPI to construct an intelligent substation network, realizes secure communication and service isolation, ensures compatibility with the existing network, but cannot support regular key update and secure distribution, increases the risk of data being cracked, and cannot dynamically adjust traffic allocation according to transmission conditions and service requirements, cannot reduce network congestion and delay through dynamic adjustment, reduces the system stability and performance. At the same time, it cannot monitor abnormal behaviors in wireless transmission in real - time, cannot use machine learning models to predict the probability of abnormal behaviors, and cannot handle abnormal behaviors in a timely manner, increasing security risks.

[0007] The object of the present invention is achieved through the following technical solutions:

[0008] A WAPI stable transmission type wireless data management system includes a wireless data transmission management platform, an encrypted transmission module, an access control module, a traffic management module, a security monitoring and response module, and a wireless transmission optimization module;

[0009] The encrypted transmission module encrypts and transmits data using the RSA algorithm, and manages the generation, distribution, and update of keys;

[0010] The access control module authenticates users through user names, passwords, and digital certificates, and controls access to wireless transmission resources based on roles and permissions;

[0011] The traffic management module monitors the wireless transmission traffic in real - time and dynamically adjusts the traffic allocation according to the wireless transmission conditions and service requirements;

[0012] The security monitoring and response module monitors abnormal behaviors in wireless transmission in real - time and triggers a response mechanism according to the monitored abnormal behaviors;

[0013] The wireless transmission optimization module optimizes wireless transmission according to the evaluation results by regularly evaluating the wireless transmission performance.

[0014] As a preferred embodiment of the present invention, the specific process of the encrypted transmission module encrypting and transmitting data and managing keys is as follows:

[0015] The specific steps of encrypting and transmitting data using the RSA algorithm are as follows:

[0016] Select two large prime numbers x and y, and calculate the modulus b = x × y;

[0017] Calculate the Euler's totient function Select an integer c as the public - key exponent, satisfying And The public - key exponent c will be part of the public key, and gcd refers to the greatest common divisor, which represents the largest one among the common divisors of two or more integers;

[0018] Calculate the private key exponent d such that where d is the multiplicative inverse of c modulo This indicates that d and c satisfy the following relationship: where K is an integer. The private key exponent d will be part of the private key. Mod refers to the modulo operation, which is used to calculate the remainder when one number is divided by another number;

[0019] Generate the public key and the private key. The public key is (b, c), and the private key is (b, d);

[0020] Let the plaintext be M and the ciphertext be E;

[0021] The encryption formula is: E = M c mod b, and the decryption formula is: M = E d mod b;

[0022] The specific steps for managing the generation, distribution, and update of keys are as follows:

[0023] Use the RSA algorithm to generate a key pair. The key pair consists of a public key and a private key. Store the generated public key and private key in a secure environment;

[0024] Distribute the public key to the parties that need to encrypt data through a secure channel. The private key must be kept strictly confidential

[0025] and is only stored at the decryption side;

[0026] Periodically use the RSA algorithm to generate a new key pair, replace the old key pair, distribute the new public key to the parties that need to encrypt data through a secure channel. After the new key pair becomes effective, deactivate the old key pair and destroy it.

[0027] As a preferred embodiment of the present invention, the specific process of the access control module for authenticating users and controlling access to wireless transmission resources is as follows:

[0028] The user enters the username and password on the login interface. Hash the password entered by the user to generate a password hash value. Obtain the password hash value corresponding to the username from the database and compare it with the password hash value entered by the user. If the comparison is successful, the authentication passes; otherwise, the authentication fails;

[0029] When the user logs in, submit a digital certificate. Verify the validity of the digital certificate and check whether the user information in the digital certificate is consistent with the system record. If the verification passes, the authentication passes; otherwise, the authentication fails.

[0030] As a preferred embodiment of the present invention, the specific steps for digital certificate verification are as follows:

[0031] Let the certificate be F, the certificate signature be G, the certificate public key be H, and the certificate content be I;

[0032] Extract the certificate chain from the certificate submitted by the user. For each certificate F j , using the public key H of its issuer j-1 Verify signature G j , the verification formula is: Verify(H j-1 , G j , I j ), where H j-1 is the public key of the j-1th certificate, G j is the signature of the jth certificate, I j is the content of the jth certificate, and Verify is the verification algorithm;

[0033] Verify the validity of the certificate chain. The issuer of each certificate is the holder of the next certificate. The verification formula is: VerifyChain(F 1 ,F 2 ,…,F n ), where VerifyChain is the verification algorithm;

[0034] Get the current system time T and extract the validity period [T 开始 , T 结束 ], verify whether the current time is within the validity period, the verification formula is: T 开始 ≤T≤T 结束 ;

[0035] Get the latest CRL from the certificate authority and extract the serial number from the user certificate.

[0036] Verify whether the certificate serial number is in the CRL. The verification formula is:

[0037] As a preferred implementation of the present invention, the specific steps of controlling access to wireless transmission resources based on roles and permissions are as follows:

[0038] The system administrator defines different roles and assigns corresponding permissions to each role;

[0039] The system administrator assigns the user to the corresponding role. After the user logs in, the system obtains the user's role information;

[0040] When a user initiates an access request, the system checks whether the user has the corresponding permissions based on the user's role and the requested operation. If the permission check passes, the user is allowed access; otherwise, access is denied.

[0041] As a preferred embodiment of the present invention, the specific process of the traffic management module for real-time monitoring of wireless transmission traffic and adjustment of traffic allocation is as follows:

[0042] Obtain the preprocessed wireless transmission traffic data;

[0043] Generate a monitoring period, divide the monitoring period Z into multiple monitoring time periods, {z1, z2, …, zn}, that is, Z = {z1, z2, …, zn}, obtain the real-time bandwidth utilization rate of the wireless transmission traffic data during the monitoring time period for data transmission. The real-time bandwidth utilization rate represents the ratio between the actually used bandwidth and the total bandwidth. Based on this, construct a set A of real-time bandwidth utilization rates, and record the mean value of the difference between the largest subset and the smallest subset in set A as the real-time bandwidth utilization rate difference DLC;

[0044] Obtain the real-time delay duration value of the wireless transmission traffic data during the monitoring time period for data transmission. The real-time delay duration value represents the ratio between the time difference between the packet reception time and the packet sending time and the number of packets. Calculate the difference between the real-time delay duration value and the median of the preset appropriate delay duration range and take the absolute value to obtain the real-time delay duration difference YSC.

[0045] As a preferred embodiment of the present invention, obtain the real-time packet loss rate of the wireless transmission traffic data during the monitoring time period for data transmission. The real-time packet loss rate represents the ratio between the number of lost packets and the number of sent packets. Based on this, construct a set B of real-time packet loss rates, obtain the mean value in set B, and mark the mean value in set B as the real-time packet loss rate mean value. Establish a rectangular coordinate system with time as the X-axis and the real-time packet loss rate mean value as the Y-axis. Plot the real-time packet loss rate mean value curve by plotting points. At the same time, plot the preset real-time packet loss rate mean value threshold curve in this coordinate system. Obtain the product value of the duration corresponding to the line segment where the real-time packet loss rate mean value curve is above the preset real-time packet loss rate mean value threshold curve and the area enclosed by the upper line segment and the preset real-time packet loss rate mean value threshold curve after normalization processing, and mark it as the packet loss rate anomaly risk value DYF;

[0046] Obtain the real-time bandwidth utilization rate difference DLC, the real-time delay duration difference YSC, and the packet loss rate anomaly risk value DYF, and calculate the service demand YZX of each service through the following formula:

[0047] YZX = q1 × DLC + q2 × YSC + q3 × DYF, where q1, q2, and q3 are the bandwidth weight, the delay duration weight, and the packet loss rate weight respectively;

[0048] Calculate the allocated broadband FK for each service according to the following formula:

[0049] Among them, ZKD is the total broadband for distribution.

[0050] As a preferred embodiment of the present invention, the specific process of the security monitoring response module monitoring abnormal behaviors and triggering a response mechanism according to the monitoring results is as follows:

[0051] Obtain the preprocessed wireless transmission abnormal behavior data;

[0052] Obtain the real-time traffic change rate of the wireless transmission abnormal behavior data during the monitoring period. The real-time traffic change rate represents the ratio of the traffic change amount to the current traffic. Calculate the difference between the real-time traffic change rate and the median of the preset appropriate traffic change range and take the absolute value to obtain the real-time traffic change rate difference LBC;

[0053] Obtain the real-time access frequency of the wireless transmission abnormal behavior data during the monitoring period. The real-time access frequency represents the ratio of the number of accesses to the duration of the monitoring period. Calculate the difference between the real-time access frequency and the median of the preset appropriate access frequency change range and take the absolute value to obtain the real-time access frequency difference FPC;

[0054] Obtain the real-time user login failure rate of the wireless transmission abnormal behavior data during the monitoring period. The real-time user login failure rate represents the ratio of the number of user login failures to the total number of user logins. Calculate the difference between the real-time user login failure rate and the median of the preset appropriate user login failure range and take the absolute value to obtain the real-time user login failure rate difference YDC.

[0055] As a preferred embodiment of the present invention, take the obtained real-time traffic change rate difference LBC, real-time access frequency difference FPC, and real-time user login failure rate difference YDC as feature quantities related to abnormal behavior prediction, construct a feature set C, convert the feature set C into a corresponding set of feature vectors, use the feature vectors as the input of the machine learning model, and use the abnormal behavior probability corresponding to each group of feature vectors as the output of the machine learning model. Take the abnormal behavior probability as the prediction target and the sum of the prediction errors of all training data as the training target, train the machine learning model until the sum of the prediction errors reaches convergence and then stop training to obtain an abnormal behavior probability prediction model. The expression formula of the abnormal behavior probability prediction model is as follows:

[0056] Among them, r1, r2, and r3 are all preset proportional factor coefficients, and r3 > r2 > r1;

[0057] If the calculated probability of abnormal behavior P > 0.7, it indicates that there is abnormal behavior in the wireless transmission. An abnormal signal for wireless transmission is generated and sent to the wireless data transmission management platform. After receiving the abnormal signal for wireless transmission, the wireless data transmission management platform triggers the corresponding response mechanism;

[0058] If the calculated probability of abnormal behavior P ≤ 0.7, it indicates that there is no abnormal behavior in the wireless transmission, and no signal is generated.

[0059] As a preferred embodiment of the present invention, the specific process of the wireless transmission optimization module for evaluating the wireless transmission performance and performing wireless transmission optimization is as follows:

[0060] Obtain the preprocessed wireless network performance data;

[0061] Obtain the actual throughput ST and signal coverage rate XF of the wireless network performance data during the monitoring period. The actual throughput represents the ratio between the data volume transmitted by the wireless network signal and the transmission time corresponding to the data volume transmitted by the wireless network signal. The signal coverage rate represents the ratio between the area of the region where the wireless network signal strength meets the requirements and the total area covered by the wireless network signal during wireless transmission;

[0062] Obtain the wireless transmission performance evaluation coefficient WCP through the following formula: where s1 and s2 are both preset proportional factor coefficients, s2 > s1. Compare and analyze the obtained wireless transmission performance evaluation coefficient WCP with the preset wireless transmission performance evaluation coefficient threshold:

[0063] If WCP is greater than or equal to the preset wireless transmission performance evaluation coefficient threshold, it indicates that the wireless transmission performance is good, and no signal is generated;

[0064] If WCP is less than the preset wireless transmission performance evaluation coefficient threshold, it indicates that the wireless transmission performance is poor, and wireless transmission performance optimization is required. A signal indicating that the wireless transmission performance needs to be optimized is generated and sent to the wireless data transmission management platform. The wireless data transmission management platform sends corresponding processing instructions according to the received signal.

[0065] Compared with the prior art, the advantages of the present invention are:

[0066] (1) In the present invention, the encryption transmission module uses the RSA algorithm to encrypt data. The public key and private key are managed separately, improving security. It supports regular key updates and secure distribution, ensuring the validity of the key. The public key is distributed through a secure channel, compatible with the existing network, and the key pair is updated regularly, reducing the risk of being cracked and enhancing the anti-attack ability;

[0067] (2) In the present invention, the traffic management module monitors the wireless transmission traffic in real time, dynamically adjusts the traffic allocation according to the transmission status and service requirements, ensures the efficient utilization of network resources, accurately calculates the service requirements through comprehensive evaluation, optimizes the bandwidth allocation, does not affect the existing network structure, has good compatibility, dynamically adjusts to reduce network congestion and latency, and improves the system stability and performance.

[0068] (3) In the present invention, the security monitoring and response module monitors the abnormal behaviors in wireless transmission in real time, triggers the response mechanism according to the monitoring results, ensures the security and stability of the network, accurately identifies the abnormal behaviors through comprehensive evaluation, uses a machine learning model to predict the probability of abnormal behaviors, improves the detection accuracy, promptly processes the abnormal behaviors, and reduces the security risks. BRIEF DESCRIPTION OF THE DRAWINGS

[0069] Figure 1 is the system block diagram of the first embodiment in the present invention;

[0070] Figure 2 is the system block diagram of the second embodiment in the present invention;

[0071] Figure 3 is the schematic diagram of the logical flow of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0072] Next, the technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

[0073] Embodiment 1: As Figure 1 shown, a WAPI stable transmission type wireless data management system proposed by the present invention includes a wireless data transmission management platform, an encrypted transmission module, an access control module, a traffic management module, a security monitoring and response module, and a wireless transmission optimization module;

[0074] The wireless data transmission management platform is in two-way communication connection with the wireless transmission optimization module and the security monitoring and response module, the wireless data transmission management platform is in one-way communication connection with the traffic management module and the encrypted transmission module, the encrypted transmission module is in one-way communication connection with the access control module, and the traffic management module is in one-way communication connection with the security monitoring and response module;

[0075] The encrypted transmission module uses the RSA algorithm to encrypt and transmit data, and manages the generation, distribution, and update of keys;

[0076] The specific process of the encrypted transmission module encrypting and transmitting data and managing keys is as follows:

[0077] The specific steps for encrypting and transmitting data using the RSA algorithm are as follows:

[0078] Select two large prime numbers x and y, and calculate the modulus b = x × y;

[0079] Calculate the Euler's totient function Select an integer c as the public key exponent, satisfying

[0080] and The public key exponent c will be part of the public key. gcd refers to the greatest common divisor, which represents the largest of the common divisors of two or more integers;

[0081] Calculate the private key exponent d such that Here, d is the multiplicative inverse of c modulo This indicates that d and c satisfy the following relationship: where K is an integer. The private key exponent d will be part of the private key. mod refers to the modulo operation, which is used to calculate the remainder of one number divided by another number;

[0082] Generate the public key and the private key. The public key is (b, c), and the private key is (b, d);

[0083] Let the plaintext be M and the ciphertext be E;

[0084] The encryption formula is: E = M^c mod b, and the decryption formula is: M = E^d mod b;

[0085] The specific steps for managing the generation, distribution, and update of keys are as follows:

[0086] Use the RSA algorithm to generate a key pair. The key pair consists of the public key and the private key, and store the generated public key and private key in a secure environment;

[0087] Distribute the public key to the parties that need to encrypt data through a secure channel (such as encrypted email, secure file transfer, etc.). The private key must be strictly confidential and only stored at the decryption party;

[0088] Regularly use the RSA algorithm to generate a new key pair, replace the old key pair, distribute the new public key to the parties that need to encrypt data through a secure channel, and after the new key pair becomes effective, deactivate and destroy the old key pair;

[0089] The encryption transmission module uses the RSA algorithm to encrypt and transmit data. The public key and private key are managed separately, improving the security of data transmission. It supports the regular update and secure distribution of keys, ensuring the security and effectiveness of keys. The public key is distributed through a secure channel without affecting the existing network structure and has good network compatibility. The key pair is updated regularly, reducing the risk of being cracked and enhancing the anti-attack ability of the system.

[0090] The access control module authenticates users through the user name, password, and digital certificate, and controls the access to wireless transmission resources based on roles and permissions;

[0091] The specific process of the access control module for user authentication and controlling access to wireless transmission resources is as follows:

[0092] The user enters the user name and password on the login interface. The password entered by the user is hashed (such as using SHA-256) to generate a password hash value. The password hash value corresponding to the user name is obtained from the database and compared with the password hash value entered by the user. If the comparison is successful, the authentication passes; otherwise, the authentication fails.

[0093] When the user logs in, the digital certificate is submitted to verify the validity of the digital certificate and whether the user information (such as the user name, public key, etc.) in the digital certificate is consistent with the system records. If the verification passes, the authentication passes; otherwise, the authentication fails.

[0094] The specific steps for digital certificate verification are as follows:

[0095] Let the certificate be F, the certificate signature be G, the certificate public key be H, and the certificate content be I;

[0096] Extract the certificate chain from the certificate submitted by the user. For each certificate F j , use the public key H of its issuer j-1 to verify the signature G j , and the verification formula is: Verify(H j-1 , G j , I j ), where H j-1 is the public key of the (j - 1)th certificate, G j is the signature of the jth certificate, I j is the content of the jth certificate, and Verify is the verification algorithm;

[0097] Verify the validity of the certificate chain. The issuer of each certificate is the holder of the next certificate. The verification formula is: VerifyChain(F 1 , F 2 , …, F n ), where VerifyChain is the verification algorithm;

[0098] Obtain the current system time T, and extract the validity period [T 开始 , T 结束 from the certificate, and verify whether the current time is within the validity period. The verification formula is: T 开始 ≤T≤T 结束 ;

[0099] Obtain the latest CRL from the certificate issuing authority, and extract the serial number SerialNumber from the user certificate.

[0100] Verify whether the certificate serial number is in the CRL. The verification formula is:

[0101] The specific steps for controlling wireless transmission resource access based on roles and permissions are as follows:

[0102] The system administrator defines different roles (such as administrator, ordinary user, visitor, etc.), and assigns corresponding permissions (such as read, write, delete, etc.) to each role;

[0103] The system administrator assigns users to the corresponding roles. After the user logs in, the system obtains the role information of the user;

[0104] The user initiates an access request (such as reading a file, modifying data, etc.). The system checks whether the user has the corresponding permission according to the user's role and the requested operation. If the permission check passes, the user is allowed to access; otherwise, access is denied;

[0105] Through the access control module, multiple identity authentications are performed on the user using the username, password, and digital certificate to ensure the legitimacy of the user's identity. Access to wireless transmission resources is controlled based on roles and permissions to achieve fine-grained access control, improve the security and management efficiency of the system. The digital certificate verification ensures the validity and credibility of the certificate, enhances the reliability of authentication, and has flexible permission management, which can assign different permissions according to different roles and requirements to ensure the secure access to resources.

[0106] The traffic management module monitors the wireless transmission traffic in real time and dynamically adjusts the traffic allocation according to the wireless transmission status and business requirements;

[0107] The specific process of the traffic management module monitoring the wireless transmission traffic in real time and adjusting the traffic allocation is as follows:

[0108] Obtain the preprocessed wireless transmission traffic data. The preprocessing operations of the wireless transmission traffic data include the following steps: data cleaning, format conversion, and data storage. The wireless transmission traffic data includes packet traffic, the number of packets, packet sending time, packet receiving time, actual used bandwidth, total bandwidth, the number of lost packets, and the number of sent packets;

[0109] Generate a monitoring period, divide the monitoring period Z into multiple monitoring time periods, {z1, z2, …, zn}, that is, Z = {z1, z2, …, zn}, obtain the real-time bandwidth utilization rate of the wireless transmission traffic data during the monitoring time period. The real-time bandwidth utilization rate represents the ratio between the actually used bandwidth and the total bandwidth. Based on this, construct a set A of real-time bandwidth utilization rates, and denote the mean value of the difference between the largest subset and the smallest subset in set A as the real-time bandwidth utilization rate difference DLC;

[0110] Obtain the real-time delay duration value of the wireless transmission traffic data during the monitoring time period. The real-time delay duration value represents the ratio between the time difference between the packet reception time and the packet transmission time and the number of packets. Calculate the difference between the real-time delay duration value and the median of the preset appropriate delay duration range and take the absolute value to obtain the real-time delay duration difference YSC;

[0111] Obtain the real-time packet loss rate of the wireless transmission traffic data during the monitoring time period. The real-time packet loss rate represents the ratio between the number of lost packets and the number of sent packets. Based on this, construct a set B of real-time packet loss rates, obtain the mean value in set B, and mark the mean value in set B as the real-time packet loss rate mean. Establish a rectangular coordinate system with time as the X-axis and the real-time packet loss rate mean as the Y-axis. Draw the real-time packet loss rate mean curve by plotting points. At the same time, draw the preset real-time packet loss rate mean threshold curve in this coordinate system. Obtain the product value of the duration corresponding to the line segment where the real-time packet loss rate mean curve is above the preset real-time packet loss rate mean threshold curve and the area enclosed by the upper line segment and the preset real-time packet loss rate mean threshold curve after normalization processing, and mark it as the packet loss rate abnormal risk value DYF;

[0112] Obtain the real-time bandwidth utilization rate difference DLC, the real-time delay duration difference YSC, and the packet loss rate abnormal risk value DYF. Calculate the service demand YZX of each service through the following formula:

[0113] YZX = q1 × DLC + q2 × YSC + q3 × DYF, where q1, q2, and q3 are the bandwidth weight, the delay duration weight, and the packet loss rate weight respectively;

[0114] By analyzing historical data, understand the influence degree of the bandwidth weight, the delay duration weight, and the packet loss rate weight on the service demand. According to the historical data, determine the specific values of q1, q2, and q3 to ensure that the calculated service demand can accurately reflect the actual situation of each service;

[0115] Calculate the allocated broadband FK for each service according to the following formula:

[0116] Among them, ZKD is the total broadband for distribution;

[0117] The wireless transmission traffic is monitored in real time through the traffic management module, and the traffic distribution is dynamically adjusted according to the wireless transmission status and service requirements to ensure the efficient utilization of network resources. Through the comprehensive evaluation of data preprocessing, real-time bandwidth utilization rate, delay duration, and packet loss rate, the service requirements are accurately calculated, the bandwidth allocation is optimized, the existing network structure is not affected, and good network compatibility is achieved. Through dynamic adjustment, network congestion and data transmission delay are reduced, and the stability and performance of the system are improved.

[0118] Embodiment 2: The technical solution of this embodiment of the present invention is different from that of Embodiment 1 in that:

[0119] As Figure 2 and Figure 3 shown, the security monitoring and response module monitors the abnormal behaviors in wireless transmission in real time and triggers the response mechanism according to the monitored abnormal behaviors;

[0120] The specific process of the security monitoring and response module monitoring abnormal behaviors and triggering the response mechanism according to the monitoring results is as follows:

[0121] Obtain the preprocessed wireless transmission abnormal behavior data. The preprocessing operations of the wireless transmission abnormal behavior data include the following steps: data cleaning, format conversion, and data storage. The wireless transmission abnormal behavior data includes the change amount of traffic, the current traffic, the number of accesses, the time window, the number of user login failures, and the total number of user logins;

[0122] Obtain the real-time traffic change rate of the wireless transmission abnormal behavior data during the monitoring period for data transmission. The real-time traffic change rate represents the ratio between the change amount of traffic and the current traffic. Calculate the difference between the real-time traffic change rate and the median of the preset appropriate traffic change range and take the absolute value to obtain the real-time traffic change rate difference LBC;

[0123] Obtain the real-time access frequency of the wireless transmission abnormal behavior data during the monitoring period for data transmission. The real-time access frequency represents the ratio between the number of accesses and the duration of the monitoring period. Calculate the difference between the real-time access frequency and the median of the preset appropriate access frequency change range and take the absolute value to obtain the real-time access frequency difference FPC;

[0124] Obtain the real-time user login failure rate of the wireless transmission abnormal behavior data during the monitoring period for data transmission. The real-time user login failure rate represents the ratio between the number of user login failures and the total number of user logins. Calculate the difference between the real-time user login failure rate and the median of the preset appropriate user login failure range and take the absolute value to obtain the real-time user login failure rate difference YDC;

[0125] Taking the obtained real-time traffic change rate difference LBC, real-time access frequency difference FPC, and real-time user login failure rate difference YDC as feature quantities related to abnormal behavior prediction, constructing a feature set C, converting the feature set C into a corresponding set of feature vectors, using the feature vectors as the input of a machine learning model, and taking the abnormal behavior probability corresponding to each group of feature vectors as the output of the machine learning model. With the abnormal behavior probability as the prediction target and the sum of the prediction errors of all training data as the training target, training the machine learning model until the sum of the prediction errors converges and then stopping the training to obtain an abnormal behavior probability prediction model. The expression formula of the abnormal behavior probability prediction model is as follows:

[0126] where r1, r2, and r3 are all preset proportional factor coefficients, and r3 > r2 > r1;

[0127] If the calculated abnormal behavior probability P > 0.7, it indicates that there is an abnormal behavior in the wireless transmission. Generate a wireless transmission abnormal signal and send it to the wireless data transmission management platform. After receiving the wireless transmission abnormal signal, the wireless data transmission management platform triggers the corresponding response mechanism;

[0128] If the calculated abnormal behavior probability P ≤ 0.7, it indicates that there is no abnormal behavior in the wireless transmission and no signal is generated;

[0129] The response mechanism includes alarm notification, traffic blocking, behavior recording, and automatic repair. Alarm notification is to notify the administrator by email or text message. Traffic blocking is to block the abnormal IP address or user wireless transmission access. Behavior recording is to record the abnormal behavior and save it in the log. Automatic repair is to restart the service or update the firewall;

[0130] The security monitoring and response module monitors the abnormal behavior in the wireless transmission in real time, triggers the response mechanism according to the monitoring results, ensures the security and stability of the network. Through the comprehensive evaluation of data preprocessing, real-time traffic change rate, access frequency, and user login failure rate, accurately identify abnormal behavior, use a machine learning model to predict the abnormal behavior probability, improve the accuracy and reliability of detection. The response mechanism includes alarm notification, traffic blocking, behavior recording, and automatic repair, which can timely respond to and handle abnormal behavior and reduce security risks.

[0131] The wireless transmission optimization module regularly evaluates the wireless transmission performance and optimizes the wireless transmission according to the evaluation results;

[0132] The specific process of the wireless transmission optimization module evaluating the wireless transmission performance and performing wireless transmission optimization is as follows:

[0133] Obtain the preprocessed wireless network performance data. The preprocessing operations of the wireless network performance data include the following steps: data cleaning, format conversion, and data storage. The wireless network performance data includes the total area covered by the wireless network signal during wireless transmission, the area where the wireless network signal strength meets the requirements, the amount of data transmitted by the wireless network signal, and the transmission time corresponding to the amount of data transmitted by the wireless network signal.

[0134] Obtain the actual throughput ST and signal coverage rate XF of the wireless network performance data during the monitoring period. The actual throughput represents the ratio between the amount of data transmitted by the wireless network signal and the transmission time corresponding to the amount of data transmitted by the wireless network signal. The signal coverage rate represents the ratio between the area where the wireless network signal strength meets the requirements and the total area covered by the wireless network signal during wireless transmission.

[0135] Obtain the wireless transmission performance evaluation coefficient WCP through the following formula: where s1 and s2 are both preset proportional factor coefficients, s2 > s1. Compare and analyze the obtained wireless transmission performance evaluation coefficient WCP with the preset wireless transmission performance evaluation coefficient threshold:

[0136] If WCP is greater than or equal to the preset wireless transmission performance evaluation coefficient threshold, it indicates that the wireless transmission performance is good and no signal is generated.

[0137] If WCP is less than the preset wireless transmission performance evaluation coefficient threshold, it indicates that the wireless transmission performance is poor and wireless transmission performance optimization is required. Generate a signal indicating that the wireless transmission performance needs to be optimized and send it to the wireless data transmission management platform. The wireless data transmission management platform sends corresponding processing instructions according to the received signal. The processing instructions include adjusting the transmission power of the wireless signal and optimizing channel allocation.

[0138] Regularly evaluate the wireless transmission performance through the wireless transmission optimization module and perform optimization according to the evaluation results to ensure the stability and efficiency of the wireless network. Through the comprehensive evaluation of data preprocessing, actual throughput, and signal coverage rate, accurately calculate the wireless transmission performance evaluation coefficient to ensure the accuracy of the evaluation. The optimization measures include adjusting the transmission power of the wireless signal and optimizing channel allocation, effectively improving the coverage range and transmission quality of the wireless network. Through the automated performance evaluation and optimization mechanism, manual intervention is reduced, and the automation level and management efficiency of the system are improved.

[0139] Working principle of the present invention: During use, the encryption transmission module uses the RSA algorithm to encrypt data. The public key and private key are managed separately to improve security, support regular key updates and secure distribution to ensure the validity of the key. The public key is distributed through a secure channel, compatible with the existing network, and the key pair is updated regularly to reduce the risk of being cracked and enhance the anti-attack ability. The traffic management module monitors the wireless transmission traffic in real time, dynamically adjusts the traffic allocation according to the transmission status and service requirements to ensure the efficient utilization of network resources. Through comprehensive evaluation, the service requirements are accurately calculated, the bandwidth allocation is optimized without affecting the existing network structure, with good compatibility. The dynamic adjustment reduces network congestion and latency, improving the system stability and performance. And the security monitoring and response module monitors the abnormal behaviors in the wireless transmission in real time, triggers the response mechanism according to the monitoring results to ensure the security and stability of the network. Through comprehensive evaluation, the abnormal behaviors are accurately identified, the machine learning model is used to predict the probability of abnormal behaviors to improve the detection accuracy, and the abnormal behaviors are processed in time to reduce the security risks.

[0140] The above; only the preferred specific embodiments of the present invention; but the protection scope of the present invention is not limited thereto; any person skilled in the art within the technical scope disclosed by the present invention; according to the technical solution of the present invention and its improved conceptions for equivalent replacement or change; should be covered by the protection scope of the present invention.

Claims

1. A WAPI stable transmission type wireless data management system, characterized in that: It includes wireless data transmission management platform, encrypted transmission module, access control module, traffic management module, security monitoring response module and wireless transmission optimization module; Encrypted transmission module, which uses RSA algorithm to encrypt transmitted data and manage the generation, distribution and update of keys; The access control module authenticates users through usernames, passwords, and digital certificates, and controls access to wireless transmission resources based on roles and permissions; Traffic management module monitors wireless transmission traffic in real time and dynamically adjusts traffic allocation according to wireless transmission status and business needs; The security monitoring and response module monitors abnormal behaviors in wireless transmission in real time and triggers the response mechanism based on the abnormal behaviors detected; The wireless transmission optimization module periodically evaluates the wireless transmission performance and optimizes the wireless transmission according to the evaluation results.

2. A WAPI stable transmission type wireless data management system according to claim 1, characterized in that: The specific process of encrypting transmission data and managing keys by the encryption transmission module is as follows: The specific steps to use the RSA algorithm to encrypt transmitted data are as follows: Select two large prime numbers x and y, and calculate the modulus b = x × y; Calculate Euler function Choose an integer c as the public key exponent, satisfying and The public key exponent c will be used as part of the public key. gcd refers to the greatest common divisor, which means the largest common divisor of two or more integers. Calculate the private key exponent d so that Here d is the value of c in the model This shows that d and c satisfy the following relationship: Where K is an integer, the private key exponent d will be used as part of the private key, and mod refers to the modular operation, which is used to calculate the remainder of one number divided by another number; Generate a public key and a private key, the public key is (b,c), and the private key is (b,d); Let the plaintext be M and the ciphertext be E; The encryption formula is: E = M c mod b, the decryption formula is: M = E d mod b; The specific steps for managing key generation, distribution, and update are as follows: Use the RSA algorithm to generate a key pair, which consists of a public key and a private key. Store the generated public key and private key in a secure environment. The public key is distributed to all parties who need to encrypt data through a secure channel, and the private key must be kept strictly confidential and only kept by the decryption party; Regularly use the RSA algorithm to generate new key pairs to replace the old key pairs, and distribute the new public keys to all parties who need to encrypt data through a secure channel. After the new key pair takes effect, deactivate and destroy the old key pair.

3. A WAPI stable transmission type wireless data management system according to claim 1, characterized in that: The specific process of the access control module authenticating the user and controlling the access to the wireless transmission resources is as follows: The user enters the username and password on the login interface, the password entered by the user is hashed to generate a password hash value, the password hash value corresponding to the username is obtained from the database, and compared with the password hash value entered by the user. If the comparison is successful, the authentication is successful, otherwise, the authentication fails; When logging in, the user submits the digital certificate, verifies the validity of the digital certificate, and verifies whether the user information in the digital certificate is consistent with the system record. If the verification passes, the authentication is successful, otherwise, the authentication fails.

4. A WAPI stable transmission type wireless data management system according to claim 3, characterized in that: The specific steps for digital certificate verification are as follows: Let the certificate be F, the certificate signature be G, the certificate public key be H, and the certificate content be I; Extract the certificate chain from the certificate submitted by the user. For each certificate F j , using the public key H of its issuer j-1 Verify signature G j , the verification formula is: Verify(H j-1 , G j , I j ), where H j-1 is the public key of the j-1th certificate, G j is the signature of the jth certificate, I j is the content of the jth certificate, and Verify is the verification algorithm; Verify the validity of the certificate chain. The issuer of each certificate is the holder of the next certificate. The verification formula is: VerifyChain(F1, F2, ..., F n ), where VerifyChain is the verification algorithm; Get the current system time T and extract the validity period [T 开始 , T 结束 ], verify whether the current time is within the validity period, the verification formula is: T 开始 ≤T≤T 结束 ; Get the latest CRL from the certificate authority and extract the serial number from the user certificate. Verify whether the certificate serial number is in the CRL. The verification formula is: SerialNumber CRL.

5. A WAPI stable transmission type wireless data management system according to claim 4, characterized in that: The specific steps for controlling access to wireless transmission resources based on roles and permissions are as follows: The system administrator defines different roles and assigns corresponding permissions to each role; The system administrator assigns the user to the corresponding role. After the user logs in, the system obtains the user's role information; When a user initiates an access request, the system checks whether the user has the corresponding permissions based on the user's role and the requested operation. If the permission check passes, the user is allowed access; otherwise, access is denied.

6. A WAPI stable transmission type wireless data management system according to claim 1, characterized in that: The specific process of the traffic management module monitoring the wireless transmission traffic in real time and adjusting the traffic distribution is as follows: Obtaining pre-processed wireless transmission traffic data; Generate a monitoring cycle, divide the monitoring cycle Z into multiple monitoring time periods, {z1, z2, ..., zn}, that is, Z = {z1, z2, ..., zn}, obtain the real-time bandwidth utilization of wireless transmission traffic data for data transmission in the monitoring period, the real-time bandwidth utilization represents the ratio between the actually used bandwidth and the total bandwidth, thereby constructing a set A of real-time bandwidth utilization, and record the average of the difference between the maximum subset and the minimum subset in the set A as the real-time bandwidth utilization difference DLC; The real-time delay duration value of the wireless transmission traffic data for data transmission during the monitoring period is obtained. The real-time delay duration value represents the ratio between the time difference between the packet reception time and the packet transmission time and the number of packets. The real-time delay duration value is compared with the median of the preset appropriate delay duration range, and the difference is calculated and the absolute value is taken to obtain the real-time delay duration difference YSC.

7. A WAPI stable transmission type wireless data management system according to claim 6, characterized in that: Obtain the real-time packet loss rate of wireless transmission traffic data for data transmission during the monitoring period. The real-time packet loss rate represents the ratio between the number of lost data packets and the number of sent data packets. Use this to construct a set B of real-time packet loss rates, obtain the mean in set B, and mark the mean in set B as the real-time packet loss rate mean. Use time as the X-axis and the real-time packet loss rate mean as the Y-axis to establish a rectangular coordinate system. Draw a real-time packet loss rate mean curve by plotting points. At the same time, draw a preset real-time packet loss rate mean threshold curve in the coordinate system. Obtain the product value obtained by normalizing the time length corresponding to the line segment of the real-time packet loss rate mean curve above the preset real-time packet loss rate mean threshold curve and the area enclosed by the upper line segment and the preset real-time packet loss rate mean threshold curve from the coordinate system, and mark it as the packet loss rate abnormal risk value DYF. The real-time bandwidth utilization difference DLC, the real-time delay duration difference YSC, and the packet loss rate abnormal risk value DYF are obtained, and the business demand YZX of each business is calculated using the following formula: YZX = q1 × DLC + q2 × YSC + q3 × DYF, where q1, q2 and q3 are bandwidth weight, delay weight and packet loss rate weight respectively; The allocated bandwidth FK for each service is calculated according to the following formula: Where ZKD is the total bandwidth to be distributed.

8. A WAPI stable transmission type wireless data management system according to claim 1, characterized in that: The specific process of the security monitoring response module monitoring abnormal behavior and triggering the response mechanism according to the monitoring results is as follows: Obtaining pre-processed abnormal behavior data of wireless transmission; The real-time traffic change rate of the abnormal behavior data of wireless transmission during the monitoring period is obtained. The real-time traffic change rate represents the ratio between the change in traffic and the current traffic. The real-time traffic change rate is compared with the median of the preset appropriate traffic change range to calculate the difference and take the absolute value to obtain the real-time traffic change rate difference LBC; The real-time access frequency of the abnormal wireless transmission behavior data during the monitoring period is obtained. The real-time access frequency represents the ratio between the number of accesses and the duration of the monitoring period. The real-time access frequency is compared with the median of the preset appropriate access frequency variation range, and the difference is calculated and the absolute value is taken to obtain the real-time access frequency difference FPC; The real-time user login failure rate of abnormal wireless transmission behavior data during the monitoring period is obtained. The real-time user login failure rate represents the ratio of the number of user login failures to the total number of user logins. The real-time user login failure rate is compared with the median of the preset appropriate user login failure range, and the difference is calculated and the absolute value is taken to obtain the real-time user login failure rate difference YDC.

9. A WAPI stable transmission type wireless data management system according to claim 8, characterized in that: The obtained real-time traffic change rate difference LBC, real-time access frequency difference FPC, and real-time user login failure rate difference YDC are used as feature quantities related to abnormal behavior prediction, and feature set C is constructed. The feature set C is converted into a corresponding set of feature vectors, and the feature vectors are used as the input of the machine learning model. The abnormal behavior probability corresponding to each set of feature vectors is used as the output of the machine learning model. The abnormal behavior probability is used as the prediction target, and the minimum sum of prediction errors of all training data is used as the training target. The machine learning model is trained until the sum of prediction errors reaches convergence and the training is stopped. The abnormal behavior probability prediction model is obtained. The abnormal behavior probability prediction model is expressed as follows: Among them, r1, r2 and r3 are preset proportional factor coefficients, r3>r2>r1; If the calculated abnormal behavior probability P>0.7, it indicates that there is abnormal behavior in the wireless transmission, and a wireless transmission abnormal signal is generated and sent to the wireless data transmission management platform. After receiving the wireless transmission abnormal signal, the wireless data transmission management platform triggers the corresponding response mechanism; If the calculated abnormal behavior probability P≤0.7, it indicates that there is no abnormal behavior in the wireless transmission and no signal is generated.

10. A WAPI stable transmission type wireless data management system according to claim 1, characterized in that: The specific process of the wireless transmission optimization module evaluating the wireless transmission performance and performing wireless transmission optimization is as follows: Obtaining pre-processed wireless network performance data; Obtain the actual throughput ST and signal coverage XF of the wireless network performance data during the monitoring period. The actual throughput represents the ratio between the amount of data transmitted by the wireless network signal and the transmission time corresponding to the amount of data transmitted by the wireless network signal. The signal coverage represents the ratio between the area where the wireless network signal strength meets the requirements and the total area covered by the wireless network signal during wireless transmission. The wireless transmission performance evaluation coefficient WCP is obtained by the following formula: Where s1 and s2 are both preset proportional factor coefficients, s2>s1, and the obtained wireless transmission performance evaluation coefficient WCP is compared and analyzed with the preset wireless transmission performance evaluation coefficient threshold: If WCP is greater than or equal to the preset wireless transmission performance evaluation coefficient threshold, it indicates that the wireless transmission performance is good and no signal is generated; If WCP is less than the preset wireless transmission performance evaluation coefficient threshold, it indicates that the wireless transmission performance is poor and needs to be optimized. A signal that the wireless transmission performance needs to be optimized is generated and sent to the wireless data transmission management platform. The wireless data transmission management platform sends corresponding processing instructions based on the received signal.

Images