VCX protocol-based private network data stream encryption and decryption method and system

Abstract

The invention discloses a VCX protocol-based private network data stream encryption and decryption method and system, and the method comprises the steps: S1, carrying out the real-time collection operation of data through a data collection end, and sequentially carrying out the encryption operation of the collected data through a VCX encryption network bridge for multiple times; s2, transmitting the data encrypted for multiple times to a data storage end through a wireless local area network; and S3, the VCX decryption network bridge sequentially carries out multiple times of decryption and reduction on the multiple times of encrypted data received by the data storage end, and the data storage end carries out storage operation on the reduced data. According to the method, the direct insertion type VCX encryption network bridge and the direct insertion type VCX decryption network bridge are adopted, the VCX encryption network bridge and the VCX decryption network bridge are subjected to three-layer encryption and decryption processing, the data safety is greatly improved, symmetric cryptography algorithms are adopted as encryption algorithms and decryption algorithms, it is guaranteed that the algorithms are simple and efficient, large-data-volume encryption and decryption operation can be conveniently carried out, and the encryption and decryption efficiency is improved. The problem of unsafe data transmission in the existing private network is effectively solved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of data decryption, in particular, especially relates to a special network data stream encryption and decryption method and system based on VCX protocol. BACKGROUND

[0002] In various special networks, there will be various confidential data to be transmitted, but if additional monitoring and packet capturing equipment is added in the special network, the security of the confidential data cannot be guaranteed, such as audio and video monitoring data of government, medical treatment, enterprise, specific control data, specific information data, etc., all exist such risk of being invaded. The existing solution is to increase data encryption function in the data acquisition end itself, but this technology cannot solve the data security problem of the laid acquisition end, and the data types of the acquisition end are various in different fields and industries, and to realize complete encryption transmission, it may be necessary to replace all original non-encryption equipment, which has large workload and cost; therefore, the special network data stream encryption and decryption method and system based on VCX protocol are provided to solve the above problems. SUMMARY

[0003] One of the purposes of the present application is to provide a special network data stream encryption and decryption method and system based on VCX protocol, so as to solve the problem of insecure data transmission in the existing special network.

[0004] The special network data stream encryption and decryption method and system based on VCX protocol can be realized through the following technical scheme: The special network data stream encryption and decryption method based on VCX protocol comprises: S1, the data acquisition end performs real-time acquisition operation on the data, and the acquired data is sequentially subjected to multiple encryption operations through the VCX encryption bridge; S2, the multiple encrypted data is transmitted to the data storage end through the wireless local area network; S3, the VCX decryption bridge sequentially performs multiple decryption and restoration on the multiple encrypted data received by the data storage end, and the data storage end stores the restored data.

[0005] In one of the embodiments, the encryption process of the VCX encryption bridge is as follows: after the data acquisition end identifies the VCX encryption bridge through a first preset key, the VCX encryption bridge performs first XOR encryption processing on the data acquired by the data acquisition end; then the VCX encryption bridge obtains shift and / or transposition encryption data by shifting and / or transposing the first XOR encrypted data; the VCX encryption bridge further obtains a first random code generated dynamically according to the VCX communication protocol field, and uses the first random code as an encryption key to perform second XOR encryption processing on the shift and / or transposition encrypted data.

[0006] In one embodiment, the decryption process of the VCX decryption bridge is that the data storage end identifies the port of the VCX decryption bridge through a second preset key, the VCX decryption bridge performs first XOR decryption processing on the data received by the data storage end, then obtains shift and / or transposition decryption data by performing shift and / or transposition on the first XOR decryption data, and then performs second XOR decryption processing on the shift and / or transposition decryption data according to a second random code dynamically generated according to a VCX communication protocol field, and takes the second random code as a decryption key.

[0007] The application discloses a special network data stream encryption and decryption system based on a VCX protocol, which comprises a plurality of data collection ends for collecting corresponding real-time data, respectively; a plurality of VCX encryption bridges which are electrically connected to the corresponding data collection ends, respectively, and perform multiple encryption operations on the data collected by the data collection ends in sequence; a data storage end, the data collection ends transmit the multiple encrypted data to the data storage end through a wireless local area network, and the data storage end stores the restored data; and a CX decryption bridge which is electrically connected to the data storage end, and performs multiple decryption and restoration operations on the multiple encrypted data received by the data storage end in sequence.

[0008] In one embodiment, the data collection end comprises one or more of a camera device, a recording device and a positioning device.

[0009] In one embodiment, the VCX encryption bridge is provided with a VCX encryption chip, and the VCX encryption chip performs first XOR encryption processing, shift and transposition encryption processing and second XOR encryption processing on the collected data in sequence.

[0010] In one embodiment, the VCX decryption bridge is provided with a VCX decryption chip, and the VCX decryption chip performs first XOR decryption processing, shift and transposition decryption processing and second XOR decryption processing on the multiple encrypted data in sequence.

[0011] In one embodiment, the main processor of the VCX encryption bridge and the VCX decryption bridge only performs communication and VCX protocol analysis operations.

[0012] In one embodiment, the VCX encryption bridge and the VCX decryption bridge are both provided with MCUs, and the MCUs perform encryption and decryption operation processing operations on the data, respectively.

[0013] In one of the embodiments, the data storage end comprises a plurality of storage hard disks, and the CX decryption bridge stores the data decrypted and restored by the CX decryption bridge through the plurality of storage hard disks.

[0014] Compared with the prior art, the VCX protocol-based special network data stream encryption and decryption method and system has the following advantages: The VCX protocol-based special network data stream encryption and decryption method and system adopts the VCX encryption bridge and the VCX decryption bridge, and performs three-layer encryption through the first XOR encryption and decryption processing, the shift transposition encryption and decryption processing and the second XOR encryption and decryption processing in sequence, so that the processing security is good, the data security is greatly improved, the encryption algorithm and the decryption algorithm are symmetric cryptography algorithms, the algorithm is simple and efficient under the premise of ensuring data security, the encryption and decryption operation of large data is facilitated, and the problem of insecure data transmission in the existing special network is solved. The VCX protocol-based special network data stream encryption and decryption method and system does not need to replace the original acquisition end device, only needs to insert the VCX encryption bridge after the original acquisition end uplink port, directly reuses the original device, does not need to change the original acquisition end function and system code, and does not need to customize the encryption function for different types of acquisition ends and upgrade the system, realizes encryption through the bridge port feature recognition, has no invasiveness to the original system, reuses the original device to avoid the hardware cost of device procurement and replacement, reduces the software development and debugging manpower and time cost without customizing and upgrading the system, can significantly reduce the overall investment of enterprise application, and thus effectively reduces the cost. The VCX protocol-based special network data stream encryption and decryption method and system adopts the parallel processing mode, the main processor in the VCX encryption bridge and the VCX decryption bridge is responsible for communication and VCX protocol analysis, and the data encryption and decryption operation is processed by the independent MCU in the VCX encryption bridge and the VCX decryption bridge, so that the data flow and real-time performance are improved, and the real-time encryption and decryption demand of large data is met. BRIEF DESCRIPTION OF DRAWINGS

[0015] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the following will briefly introduce the drawings needed to be used in the embodiments. It should be understood that the following drawings only show some embodiments of the present application, and therefore should not be regarded as a limitation on the scope, and for those skilled in the art, other related drawings can also be obtained without creative labor.

[0016] Figure 1 is a flowchart of the VCX protocol-based special network data stream encryption and decryption method of the present application. Figure 2is a sectional structure schematic diagram of a special network data stream encryption and decryption method and system based on a VCX protocol.

[0017] Indicated in the figure: 10, data acquisition end; 11, VCX encryption bridge; 20, data storage end; 21, VCX decryption bridge; 30, wireless local area network. DETAILED DESCRIPTION

[0018] In order to make the purpose, technical scheme and advantages of the embodiments of the present application clearer, the technical scheme in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are a part of the embodiments of the present application, rather than all the embodiments. The components of the embodiments of the present application described and shown in the drawings can be arranged and designed in various different configurations.

[0019] Therefore, the following detailed description of the embodiments of the present application provided in the drawings is not intended to limit the scope of the claimed present application, but only represents selected embodiments of the present application. All other embodiments obtained by those of ordinary skill in the art based on the embodiments in the present application without creative labor are within the scope of protection of the present application.

[0020] Please refer to Figure 1 The special network data stream encryption and decryption method based on the VCX protocol includes the following steps: S1, the data acquisition end 10 performs real-time acquisition operation on data, and the acquired data is sequentially subjected to multiple encryption operations by the VCX encryption bridge 11; specifically, the VCX encryption bridge 11 is electrically connected to the network uplink port of the data acquisition end 10; the data acquisition end 10 performs port identification on the VCX encryption bridge 11 by using a first preset key, and after the first preset key identification is successful, the VCX encryption bridge 11 performs first XOR encryption processing on the acquired data; then, the VCX encryption bridge 11 performs shifting and / or transposition on the first XOR encrypted data according to a preset shifting and transposition rule to obtain shifted and transposed encrypted data; the VCX encryption bridge 11 further obtains a first random code generated dynamically according to a VCX communication protocol field, and uses the first random code as an encryption key to perform second XOR encryption processing on the shifted and transposed encrypted data; S2, the multiple encrypted data is transmitted to the data storage end 20 through the wireless local area network 30; The VCX decryption bridge 21 is electrically connected to the network access port of the data storage end 20; the data storage end 20 performs port identification on the VCX decryption bridge 21 through a second preset key, after the second preset key identification succeeds, the VCX decryption bridge 21 performs first XOR decryption processing on the data received by the data storage end 20; then the VCX decryption bridge 21 performs shift and / or transposition on the first XOR decryption data according to a preset shift and / or transposition rule to obtain shift and transposition decryption data; the VCX decryption bridge 21 further obtains a second random code generated dynamically according to a VCX communication protocol field, and performs second XOR decryption processing on the shift and transposition decryption data by taking the second random code as a decryption key, so as to obtain the restored data; and the data storage end 20 performs storage operation on the restored data.

[0021] Please refer to Figure 2 As shown in the figure, the special network data stream encryption and decryption system based on the VCX protocol includes a plurality of data collection ends 10, a plurality of VCX encryption bridges 11, a data storage end 20, a VCX decryption bridge 21 and a wireless local area network 30; the plurality of data collection ends 10 respectively perform real-time collection operation on data, the plurality of VCX encryption bridges 11 are respectively electrically connected to the corresponding data collection ends 10 and can respectively communicate with the corresponding data collection ends 10, the VCX encryption bridge 11 performs multiple encryption operations on the data collected by the data collection end 10 in turn, and the data collection end 10 transmits the multiple encrypted data to the data storage end 20 through the wireless local area network 30; the VCX decryption bridge 21 is electrically connected to the data storage end 20 and can communicate with the data storage end 20, and the VCX decryption bridge 21 performs multiple decryption and restoration on the multiple encrypted data received by the data storage end 20 in turn, and the restored data is stored in the data storage end 20.

[0022] Specifically, the data collection end 10 includes but is not limited to a camera device, a recording device and a positioning device, etc.; the data storage end 20 includes a plurality of storage hard disks, and the restored data is stored by the plurality of storage hard disks; the VCX encryption bridge 11 is provided with a VCX encryption chip, and the VCX encryption chip performs first XOR encryption processing, shift and transposition encryption processing and second XOR encryption processing on the data collected by the data collection end 10 in turn; the VCX decryption bridge 21 is provided with a VCX decryption chip, and the VCX decryption chip performs first XOR decryption processing, shift and transposition decryption processing and second XOR decryption processing on the multiple encrypted data in turn. Preferably, the VCX encryption bridge 11 and the VCX decryption bridge 21 are both based on a mature wireless bridge series product (such as VAP11S-232-CX).

[0023] Specifically, in order to improve the efficiency of encryption and decryption so as to realize large data volume encryption and decryption operation in real time, the main processor in the VCX encryption bridge 11 and the VCX decryption bridge 21 performs communication and VCX protocol analysis operation, and the independent MCU in the VCX encryption bridge 11 and the VCX decryption bridge 21 respectively performs encryption and decryption operation processing operation on data, so that communication and encryption and decryption operation are performed in parallel, thereby greatly improving data flow and real-time performance.

[0024] The technical features of the above-described embodiments can be combined in any manner. In order to make the description simple, all possible combinations of the technical features in the above-described embodiments are not described, but as long as the combinations of the technical features do not contradict, they should be considered as falling within the scope of the present disclosure.

[0025] The above-described embodiments only express several embodiments of the present application, and the description is relatively specific and detailed, but it should not be understood as a limitation on the scope of the patent. It should be pointed out that for those skilled in the art, without departing from the concept of the present application, a number of modifications and improvements can be made, which are all within the scope of protection of the present application. Therefore, the scope of protection of the present application should be subject to the appended claims.

Claims

1. A method for encrypting and decrypting dedicated network data streams based on the VCX protocol, characterized in that, include: S1, The data acquisition terminal performs real-time data acquisition operations, and the acquired data is encrypted multiple times sequentially through the VCX encryption bridge; S2, the encrypted data is transmitted to the data storage terminal via wireless LAN; The S3, VCX decryption bridge decrypts and restores the encrypted data received by the data storage terminal multiple times in sequence, and the data storage terminal stores the restored data.

2. The method for encrypting and decrypting dedicated network data streams based on the VCX protocol according to claim 1, characterized in that, The encryption process of the VCX encrypted bridge is as follows: After the data acquisition terminal identifies the port of the VCX encrypted bridge using a first preset key, the VCX encrypted bridge performs an initial XOR encryption on the data acquired by the data acquisition terminal; then, the VCX encrypted bridge shifts and / or transposes the initially XOR encrypted data to obtain shifted and transposed encrypted data; the VCX encrypted bridge then obtains a dynamically generated first random code according to the VCX communication protocol field, and uses the first random code as the encryption key to perform a second XOR encryption on the shifted and transposed encrypted data.

3. The method for encrypting and decrypting dedicated network data streams based on the VCX protocol according to claim 2, characterized in that, The decryption process of the VCX decryption bridge is as follows: After the data storage terminal identifies the port of the VCX decryption bridge using the second preset key, the VCX decryption bridge performs an initial XOR decryption process on the data received by the data storage terminal; then, the VCX decryption bridge shifts and / or transposes the initially XOR decrypted data to obtain shifted and transposed decrypted data; the VCX decryption bridge then obtains a dynamically generated second random code according to the VCX communication protocol field, and uses the second random code as the decryption key to perform another XOR decryption process on the shifted and transposed decrypted data.

4. A dedicated network data stream encryption and decryption system based on the VCX protocol, applied in the dedicated network data stream encryption and decryption method according to any one of claims 1-3, characterized in that, include: Each of the multiple data acquisition terminals performs a corresponding real-time data acquisition operation; Multiple VCX encryption bridges are electrically connected to corresponding data acquisition terminals, and the VCX encryption bridges perform multiple encryption operations on the data acquired by the data acquisition terminals in sequence. The data storage terminal transmits the encrypted data to the data storage terminal via the wireless local area network, and the data storage terminal stores the decrypted and restored data. The CX decryption bridge is electrically connected to the data storage terminal, and the VCX decryption bridge decrypts and restores the encrypted data received by the data storage terminal in sequence.

5. A dedicated network data stream encryption and decryption system based on the VCX protocol according to claim 4, characterized in that, The data acquisition terminal includes one or more of the following: camera equipment, recording equipment, and positioning equipment.

6. A dedicated network data stream encryption and decryption system based on the VCX protocol according to claim 4, characterized in that, The VCX encrypted bridge is equipped with a VCX encryption chip, which sequentially performs first XOR encryption, shift and transpose encryption, and second XOR encryption on the collected data.

7. A dedicated network data stream encryption and decryption system based on the VCX protocol according to claim 6, characterized in that, The VCX decryption bridge is equipped with a VCX decryption chip, which sequentially performs initial XOR decryption, shift and transpose decryption, and subsequent XOR decryption on multiple encrypted data.

8. A dedicated network data stream encryption and decryption system based on the VCX protocol according to claim 4, characterized in that, The main processors in both the VCX encryption bridge and the VCX decryption bridge only perform communication and VCX protocol parsing operations.

9. A dedicated network data stream encryption and decryption system based on the VCX protocol according to claim 8, characterized in that, Both the VCX encryption bridge and the VCX decryption bridge are equipped with MCUs, which perform encryption and decryption operations on the data respectively.

10. A dedicated network data stream encryption and decryption system based on the VCX protocol according to claim 4, characterized in that, The data storage terminal includes multiple storage hard drives, which are used to store the data decrypted and restored by the CX decryption bridge.

Images