Data encryption transmission system and method for wireless WIFI engineering

Abstract

The invention belongs to the technical field of wireless transmission, and provides a data encryption transmission system and method for wireless WIFI engineering, and the method comprises the following steps: determining a transmitting node for wireless transmission, recognizing preliminary candidate equipment with data frame receiving capability through channel scanning in a coverage range of the transmitting node, and transmitting the preliminary candidate equipment to a server; the receiving capability of the preliminary candidate device is verified, the preliminary candidate device passing verification is used as a potential receiving node of wireless transmission, and a potential receiving node set is constructed; and calculating theoretical transmission time based on the real-time transmission rate of the transmitting node and the size of the data packet to be transmitted. Potential receiving nodes are accurately identified and a node set is dynamically maintained, so that equipment participating in data transmission has stable receiving capability, key updating is triggered in combination with real-time channel flow analysis, key evolution is matched with a channel state, encryption dynamics is enhanced, and the key leakage risk is reduced.

Description

Technical Field

[0001] The present invention belongs to the field of wireless transmission technology, and in particular relates to a data encryption transmission system and method for wireless WIFI engineering. Background Art

[0002] With the rapid development of wireless communication technology, wireless WIFI has become an important way of data transmission due to its convenience and is widely used in scenarios such as smart homes, industrial Internet of Things, and smart cities.

[0003] With the explosive growth of IoT devices, wireless channel environments are becoming increasingly complex, with frequent issues such as multi-device competition and channel congestion. Simultaneously, data security requirements are becoming increasingly stringent. Traditional wireless Wi-Fi data encryption transmission solutions typically use fixed key update cycles or encryption strategies based on preset rules. These solutions struggle to dynamically adapt to changes in channel quality, increasing the risk of key leakage. Furthermore, receiver authentication mechanisms often rely on static parameter matching and lack dynamic verification of key evolution, making them vulnerable to man-in-the-middle attacks.

[0004] To this end, the present invention provides a data encryption transmission system and method for wireless WIFI engineering. Summary of the Invention

[0005] In order to make up for the deficiencies of the prior art, at least one technical problem raised in the background technology is solved.

[0006] The technical solution adopted by the present invention to solve the technical problem is: a data encryption transmission method for wireless WIFI engineering, comprising the following steps:

[0007] Determine the transmitting node of wireless transmission, identify preliminary candidate devices capable of receiving data frames through channel scanning within the coverage area of ​​the transmitting node, verify the receiving capabilities of the preliminary candidate devices, and use the verified preliminary candidate devices as potential receiving nodes for wireless transmission to build a potential receiving node set;

[0008] The theoretical transmission time is calculated based on the real-time transmission rate of the transmitting node and the size of the data packet to be transmitted. The dynamic characteristics of the channel traffic within the theoretical transmission time are analyzed through traffic monitoring to determine whether the key update process is triggered. If the key update process is triggered, the key change trajectory is predicted and derived by combining the dynamic key pre-configured by the transmitting node and the key evolution algorithm;

[0009] Based on the encrypted transmission of key change trajectory, the predicted decryption path of the potential receiving node is obtained. The key change trajectory of the transmitting node and the predicted decryption path of the potential receiving node are verified by hash matching method. The target receiving node is determined in the set of potential receiving nodes and serves as the data receiving terminal for wireless transmission.

[0010] As a further solution of the present invention: the identification process of the preliminary candidate device is:

[0011] The transmitting node sends a probe request frame on the current channel; monitors the channel response, receives the probe response frame returned by the candidate device, and extracts the device MAC address, supported frequency band, and maximum data rate information;

[0012] Listen to the beacon frames sent by candidate devices in the channel and extract the MAC address, supported data rate, and signal strength information in the beacon frames; listen to the periodic broadcast of beacon frames in the channel and extract the sender's MAC address, signal strength, and supported rate set;

[0013] The monitored devices are those discovered by the transmitting node actively sending probe request frames and passively monitoring channel responses;

[0014] Candidate devices whose signal strength is greater than the signal strength threshold and whose device survival time is greater than the device survival time threshold are retained. The retained devices are preliminary candidate devices.

[0015] As a further solution of the present invention: the process of constructing the potential receiving node set is:

[0016] The preliminary candidate devices that have passed the signal quality evaluation are obtained as potential receiving nodes, their relevant information is recorded, and a set of potential receiving nodes is constructed.

[0017] As a further solution of the present invention: the process of signal quality evaluation and verification is:

[0018] Send an out-of-band test frame to the initially identified candidate device; if a confirmation frame that meets the format is received, it is determined that the preliminary candidate device has the ability to receive data frames;

[0019] For preliminary candidate devices with data frame reception capabilities, send multiple test frames continuously and calculate the reception success rate; calculate the standard deviation of the signal strength;

[0020] The standard deviation of the signal strength is normalized, and the reception success rate and the standard deviation of the normalized signal strength are comprehensively output to obtain the signal quality evaluation coefficient;

[0021] If the signal quality assessment coefficient is greater than the signal quality assessment coefficient threshold, the corresponding preliminary candidate device passes the verification.

[0022] As a further solution of the present invention: the calculation process of the theoretical transmission time is:

[0023] The transmitting node obtains the actual transmission rate of the current channel through physical layer feedback;

[0024] The size of the data packet to be transmitted is obtained, the unit of the size of the data packet to be transmitted is converted from bytes to bits, and the ratio of the converted size of the data packet to be transmitted to the actual transmission rate is used as the theoretical transmission time.

[0025] As a further solution of the present invention: the process of analyzing the dynamic characteristics of the channel traffic and triggering the key update process is as follows:

[0026] Real-time monitoring of channel status, including idle and busy. Counting busy time and calculating the ratio of busy time to theoretical transmission time as channel occupancy rate.

[0027] The number of collisions detected within the theoretical transmission time is counted and the ratio of this to the total number of transmissions is calculated as the collision rate.

[0028] The number of collisions is the number of data packet collisions caused by multiple devices sending data simultaneously within the statistical theoretical transmission time;

[0029] The channel occupancy rate and conflict rate are comprehensively output to obtain the channel quality index;

[0030] If the channel quality index is greater than the channel quality index threshold, the key update process is triggered.

[0031] As a further solution of the present invention: the process of predicting and deriving the key change trajectory is:

[0032] The transmitting node pre-stores the basic key and the key basic update cycle parameters. The basic key is usually configured through an offline secure channel;

[0033] Based on the current channel quality value and the key base update period, a new key period is output and the key is updated in combination with the key evolution algorithm;

[0034] Each time the key is updated, a new key is generated based on the current temporary key and timestamp, and the update time point and corresponding key are recorded to form a key change track.

[0035] As a further solution of the present invention: the process of generating the predicted decryption path is:

[0036] The transmitting node will derive the key change trajectory, including the key sequence, timestamp and new key period;

[0037] Broadcast to a set of potential receiving nodes through a secure channel;

[0038] Monitor dynamic parameters such as channel occupancy rate and conflict rate in real time to verify whether the signal quality index broadcast by the transmitting node is consistent;

[0039] If they are consistent, the subsequent key sequence is derived based on the received key change trajectory, combined with the locally maintained basic key and key evolution algorithm; and a predicted decryption path is generated based on the derived key sequence and timestamp.

[0040] As a further solution of the present invention: the process of performing trajectory matching verification by the hash matching method is:

[0041] The transmitting node sends the hash sequence of the local trajectory to the potential receiving node; the potential receiving node sends the hash sequence of the predicted path back to the transmitting end;

[0042] The dynamic time warping algorithm is used to align two hash sequences and calculate the matching rate of the hash sequences of the transmitting node and the potential receiving node. The matching rate is the ratio of the number of successfully matched hashes to the total number.

[0043] If the matching rate is greater than or equal to the matching rate threshold, the trajectory matching is determined to be successful; the potential node with the highest matching rate is selected as the data receiving terminal.

[0044] A data encryption transmission system for wireless WIFI engineering, the system comprising:

[0045] Potential receiving node acquisition module: determines the transmitting node of wireless transmission, identifies preliminary candidate devices with data frame receiving capabilities through channel scanning within the coverage area of ​​the transmitting node, verifies the receiving capabilities of the preliminary candidate devices, and uses the verified preliminary candidate devices as potential receiving nodes for wireless transmission to build a potential receiving node set;

[0046] Key change generation module: This module calculates the theoretical transmission time based on the real-time transmission rate of the transmitting node and the size of the data packet to be transmitted. It then analyzes the dynamic characteristics of the channel traffic within the theoretical transmission time through traffic monitoring to determine if the key update process is triggered. If the key update process is triggered, it combines the dynamic key pre-configured by the transmitting node and the key evolution algorithm to predict and derive the key change trajectory.

[0047] Receiving end determination module: Based on the encrypted transmission of the key change trajectory, the predicted decryption path of the potential receiving node is obtained, and the key change trajectory of the transmitting node and the predicted decryption path of the potential receiving node are verified by hash matching method. The target receiving node is determined in the set of potential receiving nodes and serves as the data receiving terminal for wireless transmission.

[0048] The beneficial effects of the present invention are as follows:

[0049] 1. Through the dynamic key update and channel quality linkage mechanism, combined with hash trajectory matching to verify the legitimacy of the receiver, a multi-layered security system of "channel state perception - dynamic key evolution - receiver identity verification" has been established to resist risks such as eavesdropping and man-in-the-middle attacks in wireless transmission, and improve the security of encrypted data transmission;

[0050] 2. High-quality receiving nodes are selected through signal quality assessment, and key update strategies are dynamically adjusted based on channel occupancy to ensure stable communication links, reduce packet loss and transmission delays, optimize resource utilization efficiency, and adapt to complex scenarios with multiple devices competing, such as smart homes and industrial IoT, to achieve efficient and reliable data encryption transmission.

[0051] 3. By accurately identifying potential receiving nodes and dynamically maintaining node sets, devices participating in data transmission can have stable receiving capabilities. Combined with real-time channel traffic analysis, key updates are triggered, matching key evolution with channel status, enhancing encryption dynamics while reducing the risk of key leakage.

[0052] 4. The best receiving end is selected through hash sequence matching to ensure key synchronization consistency. Ultimately, while improving the security of wireless WIFI project data transmission, it optimizes link quality and resource utilization, achieving an encrypted transmission effect with strong anti-interference ability and high transmission efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0053] The present invention will be further described below with reference to the accompanying drawings.

[0054] Figure 1 This is a flow chart of the steps of a data encryption transmission method for wireless WIFI engineering of the present invention;

[0055] Figure 2 This is a logical judgment diagram of the step 1 process in the data encryption transmission method for wireless WIFI engineering of the present invention.

[0056] Figure 3 This is an architecture diagram of a data encryption transmission system for wireless WIFI engineering according to the present invention. DETAILED DESCRIPTION

[0057] In order to make the technical means, creative features, objectives and effects achieved by the present invention easier to understand, the present invention is further described below in conjunction with specific implementation methods.

[0058] Example 1

[0059] See also Figure 1 and Figure 2 As shown, a data encryption transmission method for wireless WIFI engineering according to an embodiment of the present invention includes the following steps:

[0060] Step 1: Determine the transmitting node for wireless transmission, identify preliminary candidate devices capable of receiving data frames through channel scanning within the coverage area of ​​the transmitting node, verify the receiving capabilities of the preliminary candidate devices, and use the verified preliminary candidate devices as potential receiving nodes for wireless transmission to build a potential receiving node set;

[0061] In step 1, the process includes defining and presetting the transmitting node and channel parameter configuration, scanning multiple channels and discovering preliminary candidate devices, verifying the receiving capabilities of the preliminary candidate devices, and finally constructing a potential node set.

[0062] Specifically: The definition and preset of the transmitting node and channel parameter configuration are as follows:

[0063] First, it is necessary to define that the transmitting node is a wireless access point or a terminal device with data transmission capability, and the preset configuration is the working frequency band, channel number, SSID, and transmission power;

[0064] For example, the operating frequency band is set to 2.4GHz / 5GHz; the channel number is set to 1 / 6 / 11; the SSID is set to the service set identifier, such as "HomeWiFi" for a home network and "Company_Guest" for an enterprise network; and the transmission power is set to 20dBm.

[0065] Set scanning parameters, including scanning period, signal strength threshold, and device survival time threshold;

[0066] Furthermore, the scanning period is a time interval for setting the polling scan of each channel, for example, it is set to 100ms / channel;

[0067] The signal strength threshold is the preset minimum received signal strength. For example, it is set to -70dBm to filter out long-distance or weak signal devices.

[0068] The device survival time is the timeout period after which a candidate device fails to respond. For example, it can be set to 30 seconds for collection maintenance.

[0069] The specific process of multi-channel scanning and discovering preliminary candidate devices is as follows:

[0070] The transmitting node sends a probe request frame on the current channel;

[0071] The probe request frame carries: its own MAC address, supported 802.11 protocol version (such as ax / ac / n); optional fields: requested device capability information, including but not limited to: supported data rates, encryption methods;

[0072] Listen to channel responses, receive probe response frames returned by candidate devices, and extract device MAC addresses, supported frequency bands (2.4G / 5G), and maximum data rate information;

[0073] Listen to the beacon frames sent by candidate devices in the channel and extract the MAC address, supported data rate, and signal strength information from the beacon frames;

[0074] Monitor the periodic broadcast of beacon frames in the channel (usually set to once every 100ms) and extract the sender's MAC address, signal strength, and supported rate set;

[0075] The monitored devices are those discovered by the transmitting node actively sending probe request frames and passively monitoring channel responses (including probe response frames and beacon frames);

[0076] The monitored candidate devices are screened and filtered to obtain a preliminary candidate device set. The specific screening and filtering rules are as follows: candidate devices with signal strength greater than the signal strength threshold and device survival time greater than the device survival time threshold are retained. The retained devices are the preliminary candidate devices;

[0077] The device lifetime is calculated as follows: When a candidate device is first discovered, the MAC address and discovery timestamp are recorded. In subsequent scans, if the candidate device does not respond (for example, it does not return a probe response or beacon frame), the difference between the current time and the last discovery time is checked. This difference is the device lifetime.

[0078] The purpose of signal strength screening is to exclude devices that are far away or severely blocked by obstacles to ensure communication quality. The purpose of device survival time screening is to dynamically maintain the candidate list and promptly remove offline or failed devices.

[0079] It should be noted that in a multi-channel environment, the transmitting node performs polling scans according to the preset channel list to avoid missing cross-channel devices;

[0080] That is, a test data packet is sent to each channel and a confirmation frame is monitored. If no confirmation frame is received within a preset time, the channel is determined to be unavailable; if a confirmation frame is received within a preset time, the channel is determined to be available. The preset time is set by those skilled in the art based on experience, for example, 50ms.

[0081] The specific process of verifying the receiving capability of preliminary candidate equipment is as follows:

[0082] An out-of-band test frame is sent to the initially identified candidate device. The frame contains: a random challenge value; a capability verification flag; if a confirmation frame that meets the format is received, the preliminary candidate device is determined to have the ability to receive data frames; if there is no response after the timeout or the response format is incorrect, after N retries (usually N ≤ 3 times), if there is still no response after the timeout or the response format is incorrect, the preliminary candidate device is eliminated;

[0083] Perform signal quality assessment based on preliminary candidate devices capable of receiving data frames;

[0084] Send M test frames continuously (e.g., M = 5 frames) and calculate the reception success rate. The reception success rate is the ratio of the number of successfully received and correctly parsed frames to the total number of frames sent, usually expressed as a percentage.

[0085] Calculate the standard deviation of the signal strength; perform normalization on the standard deviation of the signal strength. The normalization formula is: ;in, It represents the standard deviation of the signal intensity after normalization, S represents the standard deviation of the signal intensity; the smaller S is, the more stable the signal is;

[0086] The weighted sum of the reception success rate and the standard deviation of the normalized signal strength is used as the signal quality evaluation coefficient;

[0087] The standard deviation of signal strength indicates fluctuations in signal strength and is used to assess link stability and filter out devices with excessive signal fluctuations. The reception success rate indicates the ability to correctly receive and parse test packets within the test period. A higher reception success rate indicates a greater probability of stable data reception under the current channel environment.

[0088] If the signal quality assessment coefficient is greater than the signal quality assessment coefficient threshold, it means that the corresponding preliminary candidate device has passed the verification; if the signal quality assessment coefficient is less than or equal to the signal quality assessment coefficient threshold, it means that the corresponding preliminary candidate device has failed the verification;

[0089] For example, the transmitting node sends a probe request frame, and device A replies with a probe response frame. Device A is a preliminary candidate device. The transmitting node sends a test frame to device A, and device A replies with a confirmation frame. If the verification is successful, device A enters the set of potential receiving nodes.

[0090] The specific process of constructing the potential node set is:

[0091] The verified preliminary candidate devices are used as potential receiving nodes, their relevant information is recorded, and a set of potential receiving nodes is constructed;

[0092] Among them, relevant information includes: MAC address, signal strength, supported data rate, last active time, and reception success rate;

[0093] This step has the following effects: By actively sending probe request frames and passively listening for beacon frames, devices are screened based on signal strength thresholds and lifetime thresholds, eliminating long-distance, weak-signal, or offline devices. This ensures that candidate devices have a stable communication foundation and improves the success rate of subsequent transmissions.

[0094] By filtering out failed devices through survival time, the resources occupied by invalid nodes are reduced, the real-time and validity of the set of potential receiving nodes are ensured, and the risk of transmission link interruption is reduced;

[0095] The receiving capability is verified through out-of-band test frames. The quality assessment coefficient is calculated by combining the reception success rate and signal strength standard deviation to ensure that the selected nodes have reliable data frame reception capabilities and reduce the packet loss rate during transmission.

[0096] Step 2: Calculate the theoretical transmission time based on the real-time transmission rate of the transmitting node and the size of the data packet to be transmitted. Analyze the dynamic characteristics of the channel traffic within the theoretical transmission time through traffic monitoring. Combined with the dynamic key pre-configured by the transmitting node and the key evolution algorithm, predict and derive the key change trajectory.

[0097] Among them, the key evolution algorithm can adopt the four-way handshake key derivation mechanism in the IEEE802.11i standard;

[0098] In step 2, the theoretical transmission time is calculated as follows:

[0099] The transmitting node obtains the actual transmission rate of the current channel through physical layer feedback;

[0100] For example, the actual transmission rate is: the rate corresponding to the MCS index of 802.11n, in Mbps;

[0101] Get the size of the data packet to be transmitted. Since the unit of the data packet size to be transmitted is bytes, it is necessary to convert the unit of the data packet size to be transmitted from bytes to bits. One byte equals eight bits. Then calculate the theoretical transmission time, which is the ratio of the converted data packet size to the actual transmission rate.

[0102] In step 2, the process of analyzing the dynamic characteristics of channel traffic is as follows:

[0103] Among them, the dynamic characteristics of channel traffic include channel occupancy rate and conflict rate;

[0104] By monitoring the idle channel of the channel to evaluate the signal, the channel occupancy rate and collision rate within the theoretical transmission time are calculated;

[0105] Specifically, the channel occupancy rate is calculated by: monitoring the channel status in real time, where the channel status includes idle and busy; counting the busy time, and calculating the ratio of the busy time to the theoretical transmission time as the channel occupancy rate;

[0106] The channel occupancy rate directly reflects the channel load. A high occupancy rate means that channel resources are tight, which may cause transmission delays or packet loss.

[0107] The collision rate is calculated as follows: the number of collisions detected within the theoretical transmission time is counted and the ratio of this value to the total number of transmissions is calculated as the collision rate.

[0108] The number of collisions is defined as the number of data packet collisions caused by multiple devices sending data simultaneously within the statistical theoretical transmission time.

[0109] The collision detection process is as follows: the MAC layer monitors abnormal frames (such as frames that fail the CRC check and frames that time out without receiving an ACK); records collision events, and each collision corresponds to a retransmission (for example, in 802.11, CSMA / CA is used, and collisions are indirectly reflected through the backoff mechanism;

[0110] The collision rate indicates the intensity of contention on the channel. Frequent collisions may mean that multiple devices are competing for the channel, resulting in reduced transmission efficiency.

[0111] In step 2, the process of deriving the key change trajectory is as follows:

[0112] The channel occupancy rate and the conflict rate are weighted and summed to calculate the channel quality index;

[0113] For the calculation of the channel quality index, the channel occupancy rate reflects the degree to which channel resources are effectively utilized. A higher channel occupancy rate indicates channel load saturation, which may cause transmission delays or packet loss. The collision rate reflects the intensity of competition between devices. A higher collision rate indicates frequent retransmissions and backoffs, which reduces transmission efficiency. Characterizing the channel status from the two dimensions of resource allocation and contention behavior can comprehensively evaluate the channel health.

[0114] If the channel quality index is less than or equal to the channel quality index threshold, the key update process is not triggered, that is, the transmitting node maintains the current key period and related parameters, and does not start the derivation and update operation of the new key;

[0115] If the channel quality index is greater than the channel quality index threshold, the key update process is triggered;

[0116] Specifically, the key update process is as follows:

[0117] The transmitting node pre-stores the basic key and the basic key update period parameters. The basic key is usually configured through an offline secure channel (such as out-of-band transmission). The offline secure channel includes but is not limited to: out-of-band transmission;

[0118] Based on the current channel quality value CQ and the key basic update period T1, the new key period T2 is output comprehensively. The calculation formula of the new key period T2 is: ;

[0119] IEEE802.11i four-way handshake key derivation mechanism: First handshake: The transmitting node sends a message containing ANonce (a random number generated by the transmitting node) to the potential node;

[0120] Second handshake: The potential node returns SNonce (a random number generated by the potential receiving node), which is the first half of the locally calculated PTK: , where PRF is a pseudo-random function (such as HMAC-SHA1), PMK is a pre-shared key or a master key obtained through authentication, PTK is a temporary key derived from PMK, and T2 is the new key period;

[0121] The third handshake: The transmitting node completes the calculation of the full PTK, encrypts the MIC check value and the group key GTK (group temporary key) through KCK (key confirmation key), and sends the update package;

[0122] Fourth handshake: The transmitting node sends the MIC (message integrity check) and returns an acknowledgment frame. Both parties synchronize and update to the new PTK and record the key version number.

[0123] Each time the key is updated, based on the current PTK and timestamp t, Generate a new key and record the update time and corresponding key to form a key change track; Indicates a newly generated key, and update indicates a fixed string label used to identify the key update operation;

[0124] Key change trajectory for: ; n represents the total number of timestamps, K represents the key, and t represents the timestamp;

[0125] This step has the following effects: It calculates the theoretical transmission time based on the real-time transmission rate and packet size, generates a channel quality index based on the channel occupancy rate and collision rate, determines the channel congestion or contention status, triggers a key update, and reduces the risk of key leakage due to channel quality deterioration;

[0126] Dynamically adjust the key update cycle based on channel quality and generate key change trajectories using a key evolution algorithm to match the key update strategy with the channel environment, enhancing the encryption mechanism's anti-attack capabilities.

[0127] Pre-store basic keys and configure them through offline secure channels to reduce security risks in online key transmission. Record key update timestamps and traces to facilitate key backtracking and management, improving system security and traceability.

[0128] Step 3: Based on the encrypted transmission of the key change trajectory, the predicted decryption path of the potential receiving node is obtained. The key change trajectory of the transmitting node is verified with the predicted decryption path of the potential receiving node through a hash matching method. The target receiving node is determined from the set of potential receiving nodes and serves as the data receiving terminal for wireless transmission.

[0129] In step 3, the generation process of the predicted decryption path of the potential receiving node includes: key trajectory broadcast and receiver synchronization, as well as traffic perception and decryption path generation of the potential receiving node;

[0130] Specifically, the process of key trajectory broadcasting and receiving end synchronization is as follows: the transmitting node transmits the derived key change trajectory, including the key sequence, timestamp, and new key period T2;

[0131] Broadcast to a set of potential receiving nodes via a secure channel. The broadcast content includes: a hash summary of the key change trajectory; the latest key version number and corresponding timestamp; dynamic encryption parameters based on the current channel quality index, including but not limited to: encryption algorithm type and key length;

[0132] Exemplarily, the transmitting node sends a key change trajectory data packet through an out-of-band transmission channel (such as Bluetooth Low Energy), the packet structure of which is [version number][timestamp list][key hash chain][channel quality index parameter], and is encrypted using the current PTK;

[0133] The process of traffic perception and decryption path generation for potential receiving nodes is as follows: real-time monitoring of dynamic parameters such as channel occupancy and collision rate, and verification of whether the signal quality index broadcast by the transmitting node is consistent;

[0134] If they are consistent, the subsequent key sequence is derived based on the received key change trajectory, combined with the locally maintained basic key (PMK) and key evolution algorithm; the predicted decryption path is generated based on the derived key sequence and timestamp , ; Represents the decryption key;

[0135] If there is any inconsistency, a resynchronization mechanism is triggered, such as requesting the transmitting node to rebroadcast the key change trajectory and verifying whether the local channel monitoring parameters are abnormal, so as to ensure that both parties have the same understanding of the channel status and avoid key derivation errors caused by signal quality index deviation;

[0136] In step 3, trajectory matching is performed to determine the final receiving end:

[0137] The transmitting node sends the hash sequence of the local trajectory Send to candidate receiving nodes;

[0138] Potential receiving nodes will predict the hash sequence of the path Back to the transmitter;

[0139] The dynamic time warping algorithm is used to align two hash sequences and calculate the matching rate of the hash sequences of the transmitting node and the potential receiving node. The matching rate is the ratio of the number of successfully matched hashes to the total number.

[0140] If the matching rate is greater than or equal to the matching rate threshold, the trajectory matching is determined to be successful;

[0141] If multiple candidate nodes are matched through trajectories, the transmitting node selects the potential node with the highest matching rate as the data receiving terminal;

[0142] If the matching rate is less than the matching rate threshold, the matching is considered to have failed;

[0143] This step has the following effects: the transmitting node broadcasts the key change trajectory, and the potential receiving node verifies the consistency of the channel quality index and derives the decryption path in combination with the local algorithm, synchronizing the key evolution logic of both parties and preventing decryption failures caused by channel state perception bias.

[0144] By comparing the key trajectory hash sequence through hash matching and dynamic time warping algorithms, a high matching rate ensures that the receiving end has the correct key evolution logic, effectively resisting man-in-the-middle attacks or illegal node impersonation, and ensuring the security of data transmission;

[0145] The node with the highest matching rate among multiple potential receiving nodes is selected as the final receiving end to ensure optimal link key synchronization, improve the efficiency and stability of data encryption transmission, and reduce decryption errors or transmission delays;

[0146] This embodiment has at least the following effects: dynamic key updates are linked to channel quality, and combined with hash trajectory matching to verify the receiving end, a multi-layered security mechanism of "channel perception - dynamic key evolution - receiving end legitimacy verification" is formed, effectively resisting attacks such as eavesdropping and forgery;

[0147] Ensure communication link quality through signal quality assessment and dynamic node screening;

[0148] Adjust key strategies based on channel status to reduce transmission failures caused by channel congestion and improve data transmission stability.

[0149] Example 2

[0150] Based on the same inventive concept as the data encryption transmission method for wireless WIFI engineering in the above embodiment, Figure 2 As shown, the present application provides a data encryption transmission system for wireless WIFI engineering, wherein the system specifically includes:

[0151] Potential receiving node acquisition module: determines the transmitting node of wireless transmission, identifies preliminary candidate devices with data frame receiving capabilities through channel scanning within the coverage area of ​​the transmitting node, verifies the receiving capabilities of the preliminary candidate devices, and uses the verified preliminary candidate devices as potential receiving nodes for wireless transmission to build a potential receiving node set;

[0152] Identify the transmitting node and preset parameters. Initial candidate devices are discovered by transmitting probe request frames and listening for beacon frames. Devices with qualified signal strength and survival time are screened out. Test frames with random challenge values ​​are then sent to the initial candidate devices to verify their reception capabilities. The reception success rate and signal strength standard deviation are calculated by sending multiple test frames. These are weighted to obtain a signal quality assessment coefficient, which is then used to screen out devices that meet the criteria. Finally, a set of potential receiving nodes is constructed, containing information such as MAC addresses and signal strengths.

[0153] Key change generation module: This module calculates the theoretical transmission time based on the real-time transmission rate of the transmitting node and the size of the data packet to be transmitted. It analyzes the dynamic characteristics of the channel traffic within the theoretical transmission time through traffic monitoring. It then combines the dynamic key pre-configured by the transmitting node and the key evolution algorithm to predict and derive the key change trajectory.

[0154] First, based on the real-time transmission rate of the transmitting node and the size of the data packet to be transmitted, the data packet size is converted into bits and the theoretical transmission time is calculated. During this time, the channel occupancy rate and collision rate are calculated by monitoring the channel, and a weighted channel quality index is obtained. If the index exceeds the threshold, a key update is triggered. Based on the pre-stored basic key and the basic key update period, combined with the channel quality value, a new key period is calculated. The new key is generated using the IEEE802.11i four-way handshake mechanism. The key and the corresponding timestamp are recorded to form a key change trajectory.

[0155] The receiving end determination module obtains the predicted decryption path of the potential receiving node based on the encrypted transmission of the key change trajectory. The key change trajectory of the transmitting node is verified with the predicted decryption path of the potential receiving node through a hash matching method. The target receiving node is determined from the set of potential receiving nodes and serves as the data receiving terminal for wireless transmission.

[0156] The transmitting node broadcasts information such as the hash summary of the key change trajectory to potential receiving nodes through a secure channel. The potential receiving nodes monitor the channel parameters in real time, verify the channel quality index, derive the subsequent key sequence based on the local basic key and the key evolution algorithm, and generate a predicted decryption path. The transmitting node and the potential receiving node exchange hash sequences, use the dynamic time warping algorithm to calculate the matching rate, and select the potential node with the highest matching rate and that meets the standards as the data receiving terminal.

[0157] The basic principles, main features, and advantages of the present invention are shown and described above. Those skilled in the art should understand that the present invention is not limited to the foregoing embodiments. The foregoing embodiments and descriptions are merely illustrative of the principles of the present invention. Various changes and modifications may be made to the present invention without departing from the spirit and scope of the present invention. Such changes and modifications are intended to fall within the scope of the present invention. The scope of protection claimed in the present invention is defined by the appended claims and their equivalents.

Claims

1. A data encryption transmission method for wireless WIFI engineering, characterized by: The following steps are involved: Determine the transmitting node of wireless transmission, identify preliminary candidate devices capable of receiving data frames through channel scanning within the coverage area of ​​the transmitting node, verify the receiving capabilities of the preliminary candidate devices, and use the verified preliminary candidate devices as potential receiving nodes for wireless transmission to build a potential receiving node set; The theoretical transmission time is calculated based on the real-time transmission rate of the transmitting node and the size of the data packet to be transmitted. The dynamic characteristics of the channel traffic within the theoretical transmission time are analyzed through traffic monitoring to determine whether the key update process is triggered. If the key update process is triggered, the key change trajectory is predicted and derived by combining the dynamic key pre-configured by the transmitting node and the key evolution algorithm; Based on the encrypted transmission of key change trajectory, the predicted decryption path of the potential receiving node is obtained. The key change trajectory of the transmitting node and the predicted decryption path of the potential receiving node are verified by hash matching method. The target receiving node is determined in the set of potential receiving nodes and serves as the data receiving terminal for wireless transmission.

2. The data encryption transmission method for wireless WIFI engineering according to claim 1, characterized in that: The identification process of the preliminary candidate device is as follows: The transmitting node sends a probe request frame on the current channel; monitors the channel response, receives the probe response frame returned by the candidate device, and extracts the device MAC address, supported frequency band, and maximum data rate information; Listen to the beacon frames sent by candidate devices in the channel and extract the MAC address, supported data rate, and signal strength information in the beacon frames; listen to the periodic broadcast of beacon frames in the channel and extract the sender's MAC address, signal strength, and supported rate set; The monitored devices are those discovered by the transmitting node actively sending probe request frames and passively monitoring channel responses; Candidate devices whose signal strength is greater than the signal strength threshold and whose device survival time is greater than the device survival time threshold are retained. The retained devices are preliminary candidate devices.

3. The data encryption transmission method for wireless WIFI engineering according to claim 1, characterized in that: The process of constructing the potential receiving node set is as follows: The preliminary candidate devices that have passed the signal quality evaluation are obtained as potential receiving nodes, their relevant information is recorded, and a set of potential receiving nodes is constructed.

4. The data encryption transmission method for wireless WIFI engineering according to claim 3, characterized in that: The signal quality evaluation and verification process is as follows: Send an out-of-band test frame to the initially identified candidate device; if a confirmation frame that meets the format is received, it is determined that the preliminary candidate device has the ability to receive data frames; For preliminary candidate devices with data frame receiving capabilities, send multiple test frames continuously and calculate the reception success rate; Calculate the standard deviation of signal strength; The standard deviation of the signal strength is normalized, and the reception success rate and the standard deviation of the normalized signal strength are synthesized and output to obtain the signal quality evaluation coefficient; If the signal quality assessment coefficient is greater than the signal quality assessment coefficient threshold, the corresponding preliminary candidate device passes the verification.

5. The data encryption transmission method for wireless WIFI engineering according to claim 1, characterized in that: The calculation process of the theoretical transmission time is: The transmitting node obtains the actual transmission rate of the current channel through physical layer feedback; The size of the data packet to be transmitted is obtained, the unit of the size of the data packet to be transmitted is converted from bytes to bits, and the ratio of the converted size of the data packet to be transmitted to the actual transmission rate is used as the theoretical transmission time.

6. The data encryption transmission method for wireless WIFI engineering according to claim 1, characterized in that: The process of analyzing the dynamic characteristics of channel traffic and triggering the key update process is as follows: Real-time monitoring of channel status, including idle and busy; Count the busy time and calculate the ratio of the busy time to the theoretical transmission time as the channel occupancy rate; The number of collisions detected within the theoretical transmission time is counted and the ratio of this to the total number of transmissions is calculated as the collision rate. The number of collisions is the number of data packet collisions caused by multiple devices sending data simultaneously within the statistical theoretical transmission time; The channel occupancy rate and conflict rate are comprehensively output to obtain the channel quality index; If the channel quality index is greater than the channel quality index threshold, the key update process is triggered.

7. The data encryption transmission method for wireless WIFI engineering according to claim 6, characterized in that: The process of predicting and deriving the key change trajectory is as follows: The transmitting node pre-stores the basic key and the key basic update cycle parameters. The basic key is usually configured through an offline secure channel; Based on the current channel quality value and the key base update period, a new key period is output and the key is updated in combination with the key evolution algorithm; Each time the key is updated, a new key is generated based on the current temporary key and timestamp, and the update time point and corresponding key are recorded to form a key change track.

8. The data encryption transmission method for wireless WIFI engineering according to claim 1, characterized in that: The process of generating the predicted decryption path is as follows: The transmitting node will derive the key change trajectory, including the key sequence, timestamp and new key period; Broadcast to a set of potential receiving nodes through a secure channel; Monitor dynamic parameters such as channel occupancy rate and conflict rate in real time to verify whether the signal quality index broadcast by the transmitting node is consistent; If they are consistent, the subsequent key sequence is derived based on the received key change trajectory, combined with the locally maintained basic key and key evolution algorithm; and a predicted decryption path is generated based on the derived key sequence and timestamp.

9. The data encryption transmission method for wireless WIFI engineering according to claim 1, characterized in that: The process of trajectory matching verification by hash matching is as follows: The transmitting node sends the hash sequence of the local trajectory to the potential receiving node; the potential receiving node sends the hash sequence of the predicted path back to the transmitting end; The dynamic time warping algorithm is used to align two hash sequences and calculate the matching rate of the hash sequences of the transmitting node and the potential receiving node. The matching rate is the ratio of the number of successfully matched hashes to the total number. If the matching rate is greater than or equal to the matching rate threshold, the trajectory matching is determined to be successful; the potential node with the highest matching rate is selected as the data receiving terminal.

10. A data encryption transmission system for wireless WIFI engineering, characterized in that: The system is used to execute the method according to any one of claims 1 to 9, and the system comprises: Potential receiving node acquisition module: determines the transmitting node of wireless transmission, identifies preliminary candidate devices with data frame receiving capabilities through channel scanning within the coverage area of ​​the transmitting node, verifies the receiving capabilities of the preliminary candidate devices, and uses the verified preliminary candidate devices as potential receiving nodes for wireless transmission to build a potential receiving node set; Key change generation module: This module calculates the theoretical transmission time based on the real-time transmission rate of the transmitting node and the size of the data packet to be transmitted. It then analyzes the dynamic characteristics of the channel traffic within the theoretical transmission time through traffic monitoring to determine if the key update process is triggered. If the key update process is triggered, it combines the dynamic key pre-configured by the transmitting node and the key evolution algorithm to predict and derive the key change trajectory. Receiving end determination module: Based on the encrypted transmission of the key change trajectory, the predicted decryption path of the potential receiving node is obtained, and the key change trajectory of the transmitting node and the predicted decryption path of the potential receiving node are verified by hash matching method. The target receiving node is determined in the set of potential receiving nodes and serves as the data receiving terminal for wireless transmission.

Images