A security monitoring method and system based on wireless communication of remote modules
Through the security monitoring method of remote module wireless communication, the communication encryption model is used to analyze the public network network structure and transmission path, calculate the adaptation index and generate early warning information, which solves the problem of insufficient accuracy of security monitoring of public wireless communications and improves the security monitoring effect of 4G communication.
Patent Information
- Application Number
- CN202310490821.7
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Priority Date
- 2023-01-29
- Filing Date
- 2023-05-04
- Publication Date
- 2025-05-27
- Estimated Expiration
- 2043-05-04
AI Technical Summary
In the prior art, the security monitoring of public network wireless communications is insufficient, resulting in poor security monitoring of 4G communications.
Through the security monitoring method based on wireless communication of remote modules, the encryption method is obtained using the communication encryption model, the network structure information and transmission path of the target public network are analyzed, the first adaptation index is calculated, the encryption verification data set, the key change data set and the channel ciphertext data set are obtained, the security index is generated and the early warning information is generated.
It improves the accuracy of security monitoring of public network wireless communications, improves the security monitoring quality of 4G communications, and provides strong guarantees for 4G communication security.
Smart Images

Figure CN116528226B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of communication security monitoring. Specifically, it relates to a security monitoring method and system based on remote module wireless communication. Background Art
[0002] With the continuous development of data communication requirements, 4G communication technology is deeply favored by people for its advantages such as fast data transmission speed, wide network spectrum, and strong communication flexibility. The public network is one of the application fields of 4G communication technology. The public network is a collection of computer networks formed by connecting computer networks such as local area networks, metropolitan area networks, and wide area networks at different locations and scales around the world. With the continuous development of wireless communication technology, the application services of public network wireless communication are increasing and the application scope is expanding. At the same time, the security and privacy of public network wireless communication have received extensive attention, and the requirements for security monitoring of public network wireless communication are getting higher and higher. Research and design a method for optimizing the security monitoring of public network wireless communication, which has very important practical significance.
[0003] In the prior art, there are technical problems such as insufficient accuracy of security monitoring for public network wireless communication, which in turn leads to poor security monitoring effects for public network wireless communication. Summary of the Invention
[0004] The present application provides a security monitoring method and system based on remote module wireless communication. It solves the technical problem of insufficient accuracy of security monitoring for public network wireless communication in the prior art, which in turn leads to poor security monitoring effects for 4G communication. It achieves the technical effects of improving the accuracy of security monitoring for public network wireless communication, enhancing the quality of security monitoring for 4G communication, and providing a strong guarantee for 4G communication security.
[0005] In view of the above problems, the present application provides a security monitoring method and system based on remote module wireless communication.
[0006] In a first aspect, the present application provides a security monitoring method based on remote module wireless communication. The method is applied to a security monitoring system based on remote module wireless communication, and the method includes: connecting to the communication encryption model to obtain the communication encryption method; obtaining the network structure information and network transmission path of the target public network; analyzing the communication encryption method according to the network structure information and the network transmission path to obtain a first adaptation index, where the first adaptation index is the adaptation degree between the target public network and the encryption method; determining whether the first adaptation index is greater than a preset adaptation index. If the first adaptation index is greater than or equal to the preset adaptation index, a first acquisition instruction is obtained; according to the first acquisition instruction, an encryption verification data set, a key change data set, and a channel ciphertext data set are obtained; a first security index is obtained according to the encryption verification data set, the key change data set, and the channel ciphertext data set; and a first warning message is generated based on the first security index.
[0007] In a second aspect, the present application further provides a security monitoring system based on remote module wireless communication. The system includes: an encryption method acquisition module for connecting to the communication encryption model to obtain the communication encryption method; a public network information acquisition module for obtaining the network structure information and network transmission path of the target public network; an adaptation index acquisition module for analyzing the communication encryption method according to the network structure information and the network transmission path to obtain a first adaptation index, where the first adaptation index is the adaptation degree between the target public network and the encryption method; a collection instruction acquisition module for determining whether the first adaptation index is greater than a preset adaptation index. If the first adaptation index is greater than or equal to the preset adaptation index, a first collection instruction is obtained; a data set acquisition module for obtaining an encryption verification data set, a key change data set, and a channel ciphertext data set according to the first collection instruction; a security index acquisition module for obtaining a first security index according to the encryption verification data set, the key change data set, and the channel ciphertext data set; and a warning message generation module for generating a first warning message based on the first security index.
[0008] In a third aspect, the present application further provides an electronic device, including: a memory for storing executable instructions; and a processor for implementing a security monitoring method based on remote module wireless communication provided by the present application when executing the executable instructions stored in the memory.
[0009] Fourthly, the present application also provides a computer-readable storage medium storing a computer program, which when executed by a processor, implements a security monitoring method based on remote module wireless communication provided by the present application.
[0010] One or more technical solutions provided in the present application have at least the following technical effects or advantages:
[0011] Utilize a communication encryption model to obtain an encryption method; collect information from the target public network to obtain network structure information and network transmission paths; analyze the encryption method based on the network structure information and network transmission paths to obtain a first adaptation index; determine whether the first adaptation index is greater than a preset adaptation index. If the first adaptation index is greater than or equal to the preset adaptation index, obtain a first collection instruction; according to the first collection instruction, obtain an encryption verification data set, a key change data set, and a channel ciphertext data set; obtain a first security index through the encryption verification data set, the key change data set, and the channel ciphertext data set; generate a first warning message with the first security index. It achieves the technical effect of improving the accuracy of security monitoring for public network wireless communication, enhancing the quality of security monitoring for 4G communication, and providing a strong guarantee for 4G communication security. The above description is only an overview of the technical solutions of the present application. In order to be able to understand the technical means of the present application more clearly, it can be implemented according to the content of the specification. And in order to make the above and other purposes, features, and advantages of the present application more obvious and understandable, the specific embodiments of the present application are specifically given below. BRIEF DESCRIPTION OF THE DRAWINGS
[0012] In order to more clearly illustrate the technical solutions of the embodiments of the present disclosure, the drawings of the embodiments of the present disclosure will be briefly introduced below. Obviously, the drawings described below only relate to some embodiments of the present disclosure and do not limit the present disclosure.
[0013] Figure 1 It is a schematic flowchart of a security monitoring method based on remote module wireless communication of the present application;
[0014] Figure 2 It is a schematic flowchart of updating network structure information and network transmission paths in a security monitoring method based on remote module wireless communication of the present application;
[0015] Figure 3 It is a schematic structural diagram of a security monitoring system based on remote module wireless communication of the present application;
[0016] Figure 4 It is a schematic structural diagram of an exemplary electronic device of the present application.
[0017] Explanation of the accompanying drawings: encryption method acquisition module 11, public network information acquisition module 12, adaptation index acquisition module 13, collection instruction acquisition module 14, data set acquisition module 15, security index acquisition module 16, warning information generation module 17, processor 31, memory 32, input device 33, output device 34. DETAILED DESCRIPTION
[0018] This application provides a security monitoring method and system based on remote module wireless communication. It solves the technical problem that the security monitoring accuracy of public network wireless communication in the prior art is insufficient, which leads to poor security monitoring effect of 4G communication. It achieves the technical effect of improving the accuracy of security monitoring of public network wireless communication, improving the security monitoring quality of 4G communication, and providing strong guarantee for 4G communication security.
[0019] Embodiment 1
[0020] Please see attached Figure 1 The present application provides a security monitoring method based on remote module wireless communication, wherein the method is applied to a security monitoring system based on remote module wireless communication, the system is communicatively connected with a communication encryption model, and the method specifically comprises the following steps:
[0021] Step S100: connecting to the communication encryption model to obtain the communication encryption method;
[0022] Step S200: Acquire the network structure information and network transmission path of the target public network;
[0023] Specifically, connect to the communication encryption model to obtain the communication encryption method. Furthermore, collect information from the target public network to obtain network structure information and network transmission paths. Among them, the communication encryption model is a model that includes encryption algorithms. The communication encryption model encrypts the input plaintext through the encryption algorithm to obtain ciphertext, thereby improving the confidentiality, security, and integrity of communication. The communication encryption method includes an encryption algorithm, an encryption key, and a key type. The encryption algorithm is a data encryption processing technology that processes the original plaintext data to make it into unreadable code ciphertext, and only after inputting the corresponding key of the code ciphertext can the original plaintext data be displayed. The encryption key includes the encryption parameters for converting the plaintext into ciphertext. The key type includes the type information of the encryption key. The target public network can be any public network that uses the intelligent communication security monitoring system based on remote module wireless communication for intelligent communication security monitoring. The network structure information includes node layer information and node quantity information. The node quantity information includes the quantity parameters of multiple computers connected to the target public network. The node layer information includes the connection method between the target public network and multiple computers. The network transmission path includes the data transmission path of the target public network and transmission distance information. It achieves the technical effect of determining the communication encryption method, network structure information, and network transmission path, laying a foundation for subsequent adaptability analysis of the encryption method.
[0024] Further, as shown in the appendix Figure 2 it is shown that step S200 of this application further includes:
[0025] Step S210: Monitor the target public network to obtain real-time monitoring results;
[0026] Step S220: Determine whether the target public network is in the state of node server update according to the real-time monitoring results. If it is in the state of node server update, obtain a data update instruction;
[0027] Step S230: Update the network structure information and network transmission path according to the data update instruction.
[0028] Specifically, by monitoring the target public network, real-time monitoring results are obtained. The real-time monitoring results include the real-time operating parameters of the target public network and the real-time status information of the node servers. If the real-time status information of the node servers indicates that the node servers are in an update state, then the target public network is in a state of node server update, a data update instruction is obtained, and the network structure information and the network transmission path are updated according to the data update instruction. Among them, the node servers include the network node servers of the target public network. The data update instruction is used to represent that the target public network is in a state of node server update and it is necessary to update the network structure information and the network transmission path. The technical effect is achieved of obtaining real-time monitoring results by monitoring the target public network and adaptively generating a data update instruction according to the real-time monitoring results, thereby updating the network structure information and the network transmission path, improving the reliability and real-time performance of the network structure information and the network transmission path, and enhancing the accuracy of the security monitoring of 4G communication.
[0029] Step S300: Analyze the communication encryption method according to the network structure information and the network transmission path to obtain a first adaptation index, where the first adaptation index is the adaptation degree between the target public network and the encryption method;
[0030] Further, step S300 of the present application further includes:
[0031] Step S310: Obtain node layer information and node quantity information according to the network structure information;
[0032] Step S320: Perform analysis for the communication network scale using the node layer information and the node quantity information to obtain a network scale index;
[0033] Step S330: Obtain transmission distance information according to the network transmission path;
[0034] Step S340: Generate a network transmission index using the transmission distance information;
[0035] Specifically, node layer information and node quantity information are extracted from the network structure information. By evaluating the node layer information and the node quantity information, a network scale index is obtained. The network scale index is parameter information used to characterize the network scale of the target public network. The more computers the target public network is connected to, and the more complex the connection method between the target public network and the computers, the larger the corresponding network scale index. Exemplarily, when obtaining the network scale index, historical data queries are performed based on the node layer information and the node quantity information to obtain multiple historical node layer information, multiple historical node quantity information, and multiple historical network scale indices. The corresponding relationship between the multiple historical node layer information, the multiple historical node quantity information, and the multiple historical network scale indices is analyzed to obtain a node-index mapping relationship. The multiple historical node layer information, the multiple historical node quantity information, and the multiple historical network scale indices are arranged according to the node-index mapping relationship to obtain a network scale analysis database. The node layer information and the node quantity information are used as input information and input into the network scale analysis database, and the network scale index is obtained through scale index matching by the network scale analysis database.
[0036] Furthermore, transmission distance information is extracted from the network transmission path. By evaluating the transmission distance information, a network transmission index is generated. Exemplarily, when obtaining the network transmission index, multiple public network communication analysis experts evaluate the transmission distance information respectively to obtain multiple network transmission evaluation coefficients. The greater the transmission distance, the higher the corresponding network transmission evaluation coefficient. The maximum and minimum network transmission evaluation coefficients are obtained by performing maximum and minimum value screening on the multiple network transmission evaluation coefficients. The maximum network transmission evaluation coefficient and the minimum network transmission evaluation coefficient among the multiple network transmission evaluation coefficients are deleted to obtain a network transmission evaluation data set. The average value of the network transmission evaluation data set is calculated to obtain the network transmission index. The technical effect of obtaining a reliable network scale index by evaluating the node layer information and the node quantity information and analyzing the transmission distance information to obtain a reliable network transmission index, providing data support for the subsequent generation of the first adaptation index is achieved.
[0037] Step S350: Analyze the communication encryption method according to the network scale index and the network transmission index to obtain the first adaptation index.
[0038] Furthermore, step S350 of the present application further includes:
[0039] Step S351: Obtain the encryption algorithm, encryption key, and key type according to the communication encryption method;
[0040] Step S352: Analyze the encryption algorithm, the encryption key, and the key type to obtain an encryption scale index and an encryption transmission index;
[0041] Step S353: According to the encryption scale index and the encryption transmission index, perform exponential adaptation with the network scale index and the network transmission index respectively to obtain a scale adaptation index and a transmission adaptation index;
[0042] Step S354: Obtain the first adaptation index according to the scale adaptation index and the transmission adaptation index.
[0043] Specifically, extract the encryption algorithm, encryption key, and key type from the communication encryption method. By analyzing the encryption algorithm, encryption key, and key type, obtain the encryption scale index and the encryption transmission index. Exemplarily, when obtaining the encryption scale index and the encryption transmission index, perform historical data query based on the encryption algorithm, encryption key, and key type to obtain a constructed data set. The constructed data set includes multiple historical encryption algorithms, multiple historical encryption keys, multiple historical key types, multiple historical encryption scale indexes, and multiple historical encryption transmission indexes. Continuously self-train and learn the constructed data set until it reaches a convergence state, and then the encryption analysis model can be obtained. The encryption analysis model includes an input layer, a hidden layer, and an output layer. Take the encryption algorithm, encryption key, and key type as input information, input them into the encryption analysis model, and use the encryption analysis model to evaluate the encryption scale parameters and match the encryption transmission parameters of the encryption algorithm, encryption key, and key type to obtain the encryption scale index and the encryption transmission index.
[0044] Furthermore, calculate the difference between the network scale index and the encryption scale index to obtain the scale adaptation index. The scale adaptation index includes the difference information between the network scale index and the encryption scale index. Calculate the difference between the network transmission index and the encryption transmission index to obtain the transmission adaptation index. The transmission adaptation index includes the difference information between the network transmission index and the encryption transmission index. Then, perform weighted calculation on the scale adaptation index and the transmission adaptation index according to the preset scale adaptation weight coefficient and transmission adaptation weight coefficient determined in advance to obtain the first adaptation index. Exemplarily, perform multiplication calculation between the scale adaptation weight coefficient and the scale adaptation index to obtain the scale adaptation calculation result. Perform multiplication calculation between the transmission adaptation weight coefficient and the transmission adaptation index to obtain the transmission adaptation calculation result. Output the sum of the scale adaptation calculation result and the transmission adaptation calculation result as the first adaptation index. It achieves the technical effect of analyzing the encryption method through the network scale index and the network transmission index, obtaining an accurate first adaptation index, and thus improving the reliability of the security monitoring of 4G communication.
[0045] Step S400: Determine whether the first adaptation index is greater than the preset adaptation index. If the first adaptation index is greater than or equal to the preset adaptation index, obtain a first acquisition instruction;
[0046] Step S500: Obtain an encrypted verification data set, a key change data set, and a channel ciphertext data set according to the first acquisition instruction;
[0047] Specifically, determine whether the first adaptation index is greater than a preset adaptation index. If the first adaptation index is greater than or equal to the preset adaptation index, obtain the first acquisition instruction. Collect relevant information on the encryption method according to the first acquisition instruction to obtain an encrypted verification data set, a key change data set, and a channel ciphertext data set. Among them, the preset adaptation index includes a first adaptation index threshold set in advance. The first acquisition instruction is instruction information for characterizing that the first adaptation index is greater than or equal to the preset adaptation index and collecting relevant information on the encryption method. The encrypted verification data set includes multiple historical identity verification exception information corresponding to the encryption method. The key change data set includes multiple historical high-frequency changed keys corresponding to the encryption method. The channel ciphertext data set includes multiple historical unencrypted security parameters corresponding to multiple historical unencrypted data, and multiple encrypted security parameters after encrypting multiple historical unencrypted data using the encryption method. It achieves the technical effect of laying a foundation for obtaining the first security index by obtaining the encrypted verification data set, the key change data set, and the channel ciphertext data set according to the first acquisition instruction.
[0048] Step S600: Obtain a first security index according to the encrypted verification data set, the key change data set, and the channel ciphertext data set;
[0049] Furthermore, step S600 of this application further includes:
[0050] Step S610: Use the encrypted verification data set, the key change data set, and the channel ciphertext data set as input information and input them into a security index evaluation model, where the security index evaluation model includes a verification security evaluation layer, a key security evaluation layer, and a transmission security evaluation layer;
[0051] Step S620: Generate a first security evaluation result, a second security evaluation result, and a third security evaluation result according to the verification security evaluation layer, the key security evaluation layer, and the transmission security evaluation layer;
[0052] Step S630: Obtain the first security index based on the first security evaluation result, the second security evaluation result, and the third security evaluation result.
[0053] Step S700: Generate a first warning message based on the first security index.
[0054] Specifically, the security index evaluation model includes a verification security evaluation layer, a key security evaluation layer, and a transmission security evaluation layer. The encrypted verification data set is used as input information and input into the verification security evaluation layer to obtain a first security evaluation result. The key change data set is used as input information and input into the key security evaluation layer to obtain a second security evaluation result. The channel ciphertext data set is used as input information and input into the transmission security evaluation layer to obtain a third security evaluation result. Based on the first security evaluation result, the second security evaluation result, and the third security evaluation result, a first security index is obtained, and a first warning message is generated according to the first security index. Among them, the first security evaluation result includes a verification security evaluation coefficient corresponding to the encrypted verification data set. The second security evaluation result includes a key security evaluation coefficient corresponding to the key change data set. The third security evaluation result includes a transmission security evaluation coefficient corresponding to the channel ciphertext data set. The first security index includes the first security evaluation result, the second security evaluation result, and the third security evaluation result.
[0055] Exemplarily, when generating the first warning message, warning constraint conditions can be adaptively set. The warning constraint conditions include a verification security evaluation coefficient threshold, a key security evaluation coefficient threshold, and a transmission security evaluation coefficient threshold. It is determined whether the first security index meets the warning constraint conditions. If any information in the first security index does not meet the warning constraint conditions, a first warning message is obtained. Adaptive verification security warning, key security warning, and transmission security warning are performed through the first warning message.
[0056] Exemplarily, when constructing the verification security evaluation layer, historical data queries are performed based on the encrypted verification data set to obtain multiple historical encrypted verification data sets and multiple historical verification security evaluation coefficients. The multiple historical encrypted verification data sets and multiple historical verification security evaluation coefficients are continuously self-trained and learned until a convergence state is reached, and then the verification security evaluation layer can be obtained. The verification security evaluation layer has the function of intelligently analyzing the input encrypted verification data set and matching verification security evaluation parameters. The key security evaluation layer and the transmission security evaluation layer are constructed in the same way as the verification security evaluation layer. For the sake of brevity of the specification, they will not be elaborated here.
[0057] It achieves the technical effect of accurately and efficiently performing security evaluations on the encrypted verification data set, the key change data set, and the channel ciphertext data set through the security index evaluation model, obtaining the first security index, and performing adaptive verification security warning, key security warning, and transmission security warning based on the first security index, thereby improving the accuracy and comprehensiveness of the security monitoring of 4G communication.
[0058] Furthermore, step S630 of this application further includes:
[0059] Step S631: Perform an abnormal synchronization analysis on the encrypted verification data set, the key change data set, and the channel ciphertext data set to obtain an interactive security evaluation result;
[0060] Step S632: Optimize the first security index based on the interactive security evaluation result to obtain a second security index.
[0061] Specifically, by performing an abnormal synchronization analysis on the encrypted verification data set, the key change data set, and the channel ciphertext data set, an interactive security evaluation result is obtained, and the first security index is optimized according to the interactive security evaluation result to obtain a second security index. Exemplarily, the data with abnormalities existing simultaneously in the encrypted verification data set, the key change data set, and the channel ciphertext data set are counted to obtain an abnormal synchronization data set. The amount of abnormal synchronization data is obtained by counting the amount of data in the abnormal synchronization data set. The total amount of data is obtained by counting the amount of data in the encrypted verification data set, the key change data set, and the channel ciphertext data set. The ratio of the amount of abnormal synchronization data to the total amount of data is calculated to obtain an interactive security evaluation result. The interactive security evaluation result is multiplied by the first security index to obtain a second security index, and the first security index is updated with the second security index, thereby improving the accuracy of the first security index.
[0062] Further, step S400 of the present application further includes:
[0063] Step S410: If the first adaptation index is less than the preset adaptation index, obtain an adaptation index difference;
[0064] Step S420: Generate an encryption algorithm database, where the encryption algorithm database includes a feature set of each algorithm;
[0065] Step S430: Using the adaptation index difference as a response target, traverse the encryption algorithm database to obtain a first response result, where the first response result is an optimized encryption algorithm;
[0066] Step S440: Supplement the encryption method in the communication encryption model based on the optimized encryption algorithm.
[0067] Specifically, when determining whether the first adaptation index is greater than the preset adaptation index, if the first adaptation index is less than the preset adaptation index, the difference between the first adaptation index and the preset adaptation index is calculated to obtain the adaptation index difference. Furthermore, taking the adaptation index difference as the response target, an optimized encryption algorithm is matched through the encryption algorithm database to obtain the first response result, and the encryption method in the communication encryption model is supplemented according to the optimized encryption algorithm to improve the real-time performance and comprehensiveness of the communication encryption model. Among them, the adaptation index difference includes the difference information between the first adaptation index and the preset adaptation index. The encryption algorithm database includes multiple encryption algorithms and multiple algorithm feature sets. The multiple algorithm feature sets include the specific algorithm parameters and algorithm features corresponding to the multiple encryption algorithms. The first response result includes the optimized encryption algorithm corresponding to the adaptation index difference. Exemplarily, the adaptation index difference indicates that the original encryption method is prone to data loss or imperfection during long-distance transmission and is not suitable for long-distance transmission. Then, the first response result is the encryption algorithm applicable to long-distance transmission in the encryption algorithm database.
[0068] In summary, a security monitoring method based on remote module wireless communication provided by the present application has the following technical effects:
[0069] 1. By using the communication encryption model, the encryption method is obtained; by collecting information on the target public network, the network structure information and the network transmission path are obtained; according to the network structure information and the network transmission path, the encryption method is analyzed to obtain the first adaptation index; it is determined whether the first adaptation index is greater than the preset adaptation index. If the first adaptation index is greater than or equal to the preset adaptation index, the first collection instruction is obtained; according to the first collection instruction, the encryption verification data set, the key change data set, and the channel ciphertext data set are obtained; through the encryption verification data set, the key change data set, and the channel ciphertext data set, the first security index is obtained; and the first warning information is generated based on the first security index. The technical effect of improving the accuracy of the security monitoring of public network wireless communication, enhancing the security monitoring quality of 4G communication, and providing a strong guarantee for 4G communication security is achieved.
[0070] 2. By monitoring the target public network, the real-time monitoring result is obtained, and according to the real-time monitoring result, a data update instruction is adaptively generated, so as to update the network structure information and the network transmission path, improving the reliability and real-time performance of the network structure information and the network transmission path, and enhancing the accuracy of the security monitoring of public network wireless communication.
[0071] 3. Through the security index evaluation model, accurate and efficient security evaluation of the encryption verification data set, the key change data set, and the channel ciphertext data set is carried out, the first security index is obtained, and adaptive verification security warning, key security warning, and transmission security warning are carried out according to the first security index, improving the accuracy and comprehensiveness of the security monitoring of public network wireless communication.
[0072] Embodiment 2
[0073] Based on the security monitoring method based on wireless communication of remote modules in the foregoing embodiment and with the same inventive concept, the present invention further provides a security monitoring system based on wireless communication of remote modules. The system is communicatively connected to a communication encryption model. Please refer to the attached Figure 3 , the system includes:
[0074] Encryption method acquisition module 11, which is used to connect to the communication encryption model and acquire the communication encryption method;
[0075] Public network information acquisition module 12, which is used to acquire the network structure information and network transmission path of the target public network;
[0076] Adaptation index acquisition module 13, which is used to analyze the communication encryption method according to the network structure information and the network transmission path to obtain a first adaptation index, where the first adaptation index is the adaptation degree of the target public network to the encryption method;
[0077] Collection instruction acquisition module 14, which is used to judge whether the first adaptation index is greater than a preset adaptation index. If the first adaptation index is greater than or equal to the preset adaptation index, a first collection instruction is obtained;
[0078] Data set acquisition module 15, which is used to acquire an encryption verification data set, a key change data set, and a channel ciphertext data set according to the first collection instruction;
[0079] Security index acquisition module 16, which is used to acquire a first security index according to the encryption verification data set, the key change data set, and the channel ciphertext data set;
[0080] Early warning information generation module 17, which is used to generate a first early warning information with the first security index.
[0081] Furthermore, the system further includes:
[0082] Node information determination module, which is used to obtain node layer information and node quantity information according to the network structure information;
[0083] Network scale index determination module, which is used to perform communication network scale analysis with the node layer information and the node quantity information to obtain a network scale index;
[0084] A transmission distance information determination module, which is used to obtain transmission distance information according to the network transmission path;
[0085] A network transmission index determination module, which is used to generate a network transmission index based on the transmission distance information;
[0086] A first adaptation index determination module, which is used to analyze the communication encryption method according to the network scale index and the network transmission index to obtain the first adaptation index.
[0087] Furthermore, the system further includes:
[0088] A first execution module, which is used to obtain an encryption algorithm, an encryption key, and a key type according to the communication encryption method;
[0089] A second execution module, which is used to analyze the encryption algorithm, the encryption key, and the key type to obtain an encryption scale index and an encryption transmission index;
[0090] An index adaptation module, which is used to perform index adaptation on the encryption scale index and the encryption transmission index respectively with the network scale index and the network transmission index to obtain a scale adaptation index and a transmission adaptation index;
[0091] A third execution module, which is used to obtain the first adaptation index according to the scale adaptation index and the transmission adaptation index.
[0092] Furthermore, the system further includes:
[0093] An adaptation index difference acquisition module, which is used to obtain an adaptation index difference if the first adaptation index is less than the preset adaptation index;
[0094] An algorithm database generation module, which is used to generate an encryption algorithm database, where the encryption algorithm database includes a feature set of each algorithm;
[0095] A first response result acquisition module, which is used to traverse the encryption algorithm database with the adaptation index difference as a response target to obtain a first response result, where the first response result is an optimized encryption algorithm;
[0096] A supplement module, which is used to supplement the encryption method in the communication encryption model based on the optimized encryption algorithm.
[0097] Further, the system further includes:
[0098] A fourth execution module, which is configured to input the encrypted verification data set, the key change data set, and the channel ciphertext data set as input information into a security index evaluation model, where the security index evaluation model includes a verification security evaluation layer, a key security evaluation layer, and a transmission security evaluation layer;
[0099] A security evaluation result generation module, which is configured to generate a first security evaluation result, a second security evaluation result, and a third security evaluation result according to the verification security evaluation layer, the key security evaluation layer, and the transmission security evaluation layer;
[0100] A fifth execution module, which is configured to obtain the first security index based on the first security evaluation result, the second security evaluation result, and the third security evaluation result.
[0101] Further, the system further includes:
[0102] An abnormal synchronization analysis module, which is configured to perform abnormal synchronization analysis on the encrypted verification data set, the key change data set, and the channel ciphertext data set to obtain an interactive security evaluation result;
[0103] A sixth execution module, which is configured to optimize the first security index based on the interactive security evaluation result to obtain a second security index.
[0104] Further, the system further includes:
[0105] A monitoring module, which is configured to monitor the target public network to obtain a real-time monitoring result;
[0106] An update instruction acquisition module, which is configured to determine whether the target public network is in a state of node server update according to the real-time monitoring result, and if it is in a state of node server update, acquire a data update instruction;
[0107] A data update module, which is configured to update the network structure information and the network transmission path according to the data update instruction.
[0108] The security monitoring system based on remote module wireless communication provided by the embodiment of the present invention can execute the security monitoring method based on remote module wireless communication provided by any embodiment of the present invention, and has corresponding functional modules and beneficial effects for executing the method.
[0109] The various modules included are only divided according to functional logic, but are not limited to the above division, as long as the corresponding functions can be achieved; in addition, the specific names of the functional modules are only for the convenience of mutual distinction and do not limit the protection scope of the present invention.
[0110] Embodiment III
[0111] Figure 4 FIG. is a schematic structural diagram of an electronic device provided in Embodiment III of the present invention, showing a block diagram of an exemplary electronic device suitable for implementing the embodiments of the present invention. Figure 4 The displayed electronic device is only an example and should not impose any limitations on the functions and usage scope of the embodiments of the present invention. As Figure 4 shown, the electronic device includes a processor 31, a memory 32, an input device 33, and an output device 34; the number of processors 31 in the electronic device can be one or more. Figure 4 Taking one processor 31 as an example, the processor 31, the memory 32, the input device 33, and the output device 34 in the electronic device can be connected by a bus or other means. Figure 4 Taking the connection by bus as an example.
[0112] The memory 32, as a computer-readable storage medium, can be used to store software programs, computer-executable programs, and modules, such as program instructions / modules corresponding to a security monitoring method based on remote module wireless communication in the embodiments of the present invention. The processor 31 executes various functional applications and data processing of the computer device by running the software programs, instructions, and modules stored in the memory 32, that is, implements the above-mentioned security monitoring method based on remote module wireless communication.
[0113] The present application provides a security monitoring method based on wireless communication of remote modules. Among them, the method is applied to a security monitoring system based on wireless communication of remote modules, and the method includes: using a communication encryption model to obtain an encryption method; collecting information from the target public network to obtain network structure information and network transmission paths; analyzing the encryption method according to the network structure information and network transmission paths to obtain a first adaptation index; determining whether the first adaptation index is greater than a preset adaptation index. If the first adaptation index is greater than or equal to the preset adaptation index, a first collection instruction is obtained; according to the first collection instruction, an encryption verification data set, a key change data set, and a channel ciphertext data set are obtained; a first security index is obtained through the encryption verification data set, the key change data set, and the channel ciphertext data set; a first warning message is generated with the first security index. The technical problem in the prior art that the accuracy of security monitoring for public network wireless communication is insufficient, thereby resulting in poor security monitoring effect of 4G communication, is solved. The technical effect of improving the accuracy of security monitoring for public network wireless communication, enhancing the security monitoring quality of 4G communication, and providing a strong guarantee for 4G communication security is achieved.
[0114] Note that the above is only a preferred embodiment of the present invention and the technical principles applied. Those skilled in the art will understand that the present invention is not limited to the specific embodiments described herein. Various obvious changes, re-adjustments, and substitutions can be made by those skilled in the art without departing from the protection scope of the present invention. Therefore, although the present invention has been described in detail through the above embodiments, the present invention is not limited to the above embodiments. Without departing from the concept of the present invention, more other equivalent embodiments can be included, and the scope of the present invention is determined by the scope of the appended claims.
Claims
1. A security monitoring method based on wireless communication of remote modules, characterized in that, the method is applied to a security monitoring system for public network wireless communication, the system is communicatively connected to a communication encryption model, and the method includes: Connect to the communication encryption model and obtain the communication encryption method; Obtain the network structure information and network transmission path of the target public network; Analyze the communication encryption method according to the network structure information and the network transmission path to obtain a first adaptation index, where the first adaptation index is the adaptation degree between the target public network and the encryption method; Judge whether the first adaptation index is greater than a preset adaptation index. If the first adaptation index is greater than or equal to the preset adaptation index, obtain a first collection instruction; According to the first collection instruction, obtain an encryption verification data set, a key change data set, and a channel ciphertext data set; Obtain a first security index according to the encryption verification data set, the key change data set, and the channel ciphertext data set. The encryption verification data set includes multiple historical identity verification exception information corresponding to the encryption method, the key change data set includes multiple historical high-frequency changed keys corresponding to the encryption method, the channel ciphertext data set includes multiple historical unencrypted security parameters corresponding to multiple historical unencrypted data, and multiple encrypted security parameters after encrypting multiple historical unencrypted data using the encryption method; generate a first warning message with the first security index.
2. The method according to claim 1, characterized in that, the method further includes: Obtain node layer information and node quantity information according to the network structure information; Conduct a communication network scale analysis on the node layer information and node quantity information to obtain a network scale index; Obtain transmission distance information according to the network transmission path; Generate a network transmission index with the transmission distance information; Analyze the communication encryption method according to the network scale index and the network transmission index to obtain the first adaptation index.
3. The method according to claim 2, characterized in that, the method further includes: Obtain an encryption algorithm, an encryption key, and a key type according to the communication encryption method; Through analyzing the encryption algorithm, the encryption key, and the key type, obtain an encryption scale index and an encryption transmission index. Based on the encryption algorithm, encryption key, and key type, conduct a historical data query to obtain a construction data set. The construction data set includes multiple historical encryption algorithms, multiple historical encryption keys, multiple historical key types, multiple historical encryption scale indexes, and multiple historical encryption transmission indexes. Continuously self-train and learn the construction data set until it converges to obtain an encryption analysis model. The encryption analysis model includes an input layer, a hidden layer, and an output layer. Use the encryption algorithm, encryption key, and key type as input information, input them into the encryption analysis model, and through the encryption analysis model, conduct an encryption scale parameter evaluation and encryption transmission parameter matching on the encryption algorithm, encryption key, and key type to obtain the encryption scale index and the encryption transmission index; According to the encryption scale index and the encryption transmission index, perform exponential adaptation with the network scale index and the network transmission index respectively to obtain a scale adaptation index and a transmission adaptation index; Obtain the first adaptation index according to the scale adaptation index and the transmission adaptation index.
4. The method according to claim 1, wherein, after determining whether the first adaptation index is greater than a preset adaptation index, the method further includes: if the first adaptation index is less than the preset adaptation index, obtain an adaptation index difference; Generate an encryption algorithm database, wherein the encryption algorithm database includes a feature set of each algorithm; Traverse the encryption algorithm database with the adaptation index difference as the response target to obtain a first response result, where the first response result is an optimized encryption algorithm; Supplement the encryption method in the communication encryption model based on the optimized encryption algorithm.
5. The method according to claim 1, wherein, According to the encryption verification data set, the key change data set and the channel ciphertext data set, obtain a first security index, and the method further includes: Use the encryption verification data set, the key change data set and the channel ciphertext data set as input information and input them into a security index evaluation model, where the security index evaluation model includes a verification security evaluation layer, a key security evaluation layer and a transmission security evaluation layer; Generate a first security evaluation result, a second security evaluation result and a third security evaluation result according to the verification security evaluation layer, the key security evaluation layer and the transmission security evaluation layer; Obtain the first security index with the first security evaluation result, the second security evaluation result and the third security evaluation result.
6. The method according to claim 5, wherein, The method further includes: Perform abnormal synchronization analysis on the encryption verification data set, the key change data set and the channel ciphertext data set to obtain an interactive security evaluation result, count the data that is abnormal at the same time in the encryption verification data set, the key change data set and the channel ciphertext data set to obtain an abnormal synchronization data set, count the data volume of the abnormal synchronization data set to obtain an abnormal synchronization data volume, count the data volume of the encryption verification data set, the key change data set and the channel ciphertext data set to obtain a total data volume, and calculate the ratio of the abnormal synchronization data volume to the total data volume to obtain an interactive security evaluation result; Optimize the first security index based on the interactive security evaluation result to obtain a second security index.
7. The method according to claim 1, wherein, The method further includes: Monitor the target public network to obtain a real-time monitoring result; Judge whether the target public network is in the state of node server update according to the real-time monitoring result. If it is in the state of node server update, obtain a data update instruction; Update the network structure information and the network transmission path according to the data update instruction.
8. A security monitoring system based on remote module wireless communication, wherein, The system is communicatively connected to a communication encryption model, and the system includes: Encryption method acquisition module, which is used to connect to the communication encryption model and obtain the communication encryption method; Public network information acquisition module, which is used to obtain the network structure information and network transmission path of the target public network, where the target public network is any public network that uses the intelligent communication security monitoring system based on remote module wireless communication for intelligent communication security monitoring; Adaptation index acquisition module, which is used to analyze the communication encryption method according to the network structure information and the network transmission path to obtain a first adaptation index, where the first adaptation index is the adaptation degree between the target public network and the encryption method; Collection instruction acquisition module, which is used to determine whether the first adaptation index is greater than a preset adaptation index. If the first adaptation index is greater than or equal to the preset adaptation index, a first collection instruction is obtained; Data set acquisition module, which is used to obtain an encryption verification data set, a key change data set, and a channel ciphertext data set according to the first collection instruction; Security index acquisition module, which is used to obtain a first security index according to the encryption verification data set, the key change data set, and the channel ciphertext data set. The encryption verification data set includes multiple historical identity verification exception information corresponding to the encryption method, the key change data set includes multiple historical high-frequency changed keys corresponding to the encryption method, the channel ciphertext data set includes multiple historical unencrypted security parameters corresponding to multiple historical unencrypted data, and multiple encrypted security parameters after encrypting multiple historical unencrypted data using the encryption method; Early warning information generation module, which is used to generate a first early warning information based on the first security index.
9. An electronic device, characterized in that, the electronic device includes: a memory for storing executable instructions; a processor, which, when executing the executable instructions stored in the memory, implements the security monitoring method based on remote module wireless communication according to any one of claims 1 to 7.
10. A computer-readable medium, on which a computer program is stored, characterized in that, when the program is executed by a processor, it implements the security monitoring method based on remote module wireless communication according to any one of claims 1 to 7.
Citation Information
Patent Citations
Data transmission method and device, computer equipment and storage medium
CN111740827A
Performance evaluation method of encryption algorithm and storage medium
CN112039730A