Data transmission method, device, electronic device and storage medium

Abstract

The present application provides a data transmission method, device, electronic device and storage medium. The data transmission method is applied to a communication network including multiple nodes. In the communication network, each node can simultaneously receive data sent by other nodes and can also simultaneously send data to other nodes. The data transmission method includes: obtaining the target data to be transmitted; determining the transmission channel of the target data; judging whether each node in the transmission channel is normal; if so, transmitting the target data through the transmission channel; if not, selecting a new transmission channel, each node in the new transmission channel is normal, and transmitting the target data through the new transmission channel. It can ensure that the target data passes through the transmission channel smoothly and then reaches the target location. It avoids the problem of data loss due to node abnormality during data transmission, and improves the reliability of data transmission.

Description

Technical Field

[0001] The present application relates to the field of network communication technology, and in particular to a data transmission method, device, electronic device and storage medium. Background Art

[0002] A Virtual Private Network (VPN) is a temporary, secure connection established through a public network (usually the Internet). It is a secure, stable tunnel that passes through a chaotic public network. Using a public network to build a private network can achieve secure and reliable data transmission over an insecure public network.

[0003] At present, data transmission based on VPN mainly takes the following steps: 1. The sender and the receiver need to authenticate each other through passwords, digital certificates, etc. After the authentication is passed, the two parties establish a connection. 2. The sender uses symmetric encryption, asymmetric encryption, etc. to encrypt the data to be sent. 3. A secure tunnel is established through VPN. The sender encapsulates the data in the VPN protocol header, adds the tunnel protocol header, and finally transmits it in the public network. 4. After receiving the data, the receiver unpacks the VPN protocol header and the tunnel protocol header, and then sends the data to the target device. 5. After receiving the data, the target device decrypts the data to obtain the plaintext data.

[0004] However, in VPN, the intermediate nodes in the tunnel can only jump in the form of proxy protocol, that is, the data transmission path, transmission direction, and protocol in each intermediate node are fixed and cannot be selected and controlled. Once an intermediate node in the data transmission is abnormal, the data cannot be smoothly transmitted to the receiver, and the transmission data is lost, which reduces the reliability of data transmission. Summary of the invention

[0005] The purpose of the embodiments of the present application is to provide a data transmission method, device, electronic device and storage medium to improve the reliability of data transmission.

[0006] In order to solve the above technical problems, the embodiments of the present application provide the following technical solutions:

[0007] A first aspect of the present application provides a data transmission method, which is applied to a communication network including multiple nodes. In the communication network, each node can simultaneously receive data sent by other nodes and can also simultaneously send data to other nodes. The method includes: obtaining target data to be transmitted; determining a transmission channel for transmitting the target data from the communication network; judging whether each node in the transmission channel is normal; if not, selecting a new transmission channel, each node in the new transmission channel is normal, and transmitting the target data through the new transmission channel.

[0008] The second aspect of the present application provides a data transmission device, which is applied to a communication network including multiple nodes. In the communication network, each node can simultaneously receive data sent by other nodes, and can also simultaneously send data to other nodes. The device includes: an acquisition module, used to acquire target data to be transmitted; a determination module, used to determine a transmission channel for transmitting the target data from the communication network; a judgment module, used to judge whether each node in the transmission channel is normal; if not, enter the transmission module; a transmission module, used to select a new transmission channel, each node in the new transmission channel is normal, and transmit the target data through the new transmission channel.

[0009] The third aspect of the present application provides an electronic device, comprising: a processor, a memory, and a bus; wherein the processor and the memory communicate with each other via the bus; and the processor is used to call program instructions in the memory to execute the method in the first aspect.

[0010] A fourth aspect of the present application provides a computer-readable storage medium, the storage medium comprising: a stored program; wherein, when the program is executed, the device where the storage medium is located is controlled to execute the method in the first aspect.

[0011] Compared with the prior art, the data transmission method provided in the first aspect of the present application is applied in a communication network, wherein the communication network includes multiple nodes, each node can simultaneously receive data sent by other nodes, and can also simultaneously send data to other nodes. After obtaining the target data to be transmitted, the transmission channel of the target data is first determined from the communication network, and then the nodes in the transmission channel are judged to be normal. If all nodes are normal, it means that when the target data is transmitted in the transmission channel, there will be no transmission failure due to abnormality of the nodes therein, and the target data can be transmitted through the transmission channel. If there is an abnormal node, it means that when the target data is transmitted in the transmission channel, there will be a transmission failure due to abnormality of the nodes therein, and a new transmission channel needs to be selected, and each node in the new transmission channel is normal, and then the target data is transmitted through the new transmission channel. In this way, it can ensure that the target data passes through the transmission channel smoothly and then reaches the target location. The problem of data loss due to abnormal nodes during data transmission is avoided, and the reliability of data transmission is improved.

[0012] The data transmission device provided in the second aspect, the electronic device provided in the third aspect, and the computer-readable storage medium provided in the fourth aspect of the present application have the same or similar beneficial effects as the data transmission method provided in the first aspect. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] By reading the detailed description below with reference to the accompanying drawings, the above and other purposes, features and advantages of the exemplary embodiments of the present application will become easy to understand. In the accompanying drawings, several embodiments of the present application are shown in an exemplary and non-limiting manner, and the same or corresponding reference numerals represent the same or corresponding parts, wherein:

[0014] Figure 1 The data transmission method in this embodiment is shown in FIG. Figure 1 ;

[0015] Figure 2 The data transmission method in this embodiment is shown in FIG. Figure 2 ;

[0016] Figure 3 This is a schematic diagram of the structure of the communication networking layer in the embodiment of the present application;

[0017] Figure 4 This is a schematic diagram of the structure of a data transmission device in an embodiment of the present application;

[0018] Figure 5 Schematic diagram of the structure of an electronic device in an embodiment of the present application. DETAILED DESCRIPTION

[0019] The exemplary embodiments of the present application will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present application are shown in the accompanying drawings, it should be understood that the present application can be implemented in various forms and should not be limited by the embodiments described herein. On the contrary, these embodiments are provided in order to enable a more thorough understanding of the present application and to fully convey the scope of the present application to those skilled in the art.

[0020] It should be noted that, unless otherwise specified, the technical terms or scientific terms used in this application should have the common meanings understood by technicians in the field to which this application belongs.

[0021] At present, for data transmission based on VPN, the path, direction and protocol of data transmission are fixed. Data can only be transmitted according to the fixed path, direction and protocol. Once an abnormality occurs at a node in the transmission process, data transmission will fail, reducing the reliability of data transmission.

[0022] The inventor has found through research that if a multi-directional hybrid network can be established in VPN, the nodes in the network can communicate with each other, then during data transmission, if there is an abnormality in a node, the path of other normal nodes can be replaced for data transmission. In this way, data can be smoothly transmitted to the target node or device.

[0023] In view of this, the embodiment of the present application provides a data transmission method, device, electronic device and storage medium, in a communication network, including multiple nodes, each node can simultaneously receive data sent by other nodes, and can also simultaneously send data to other nodes, after obtaining the target data to be transmitted, first determine the transmission channel of the target data from the communication network, and then determine whether each node in the transmission channel is normal, if each node is normal, it means that when the target data is transmitted in the transmission channel, there will be no transmission failure due to abnormality of the nodes therein, and the target data can be transmitted through the transmission channel, and if there is an abnormal node, it means that when the target data is transmitted in the transmission channel, there will be a transmission failure due to abnormality of the nodes therein, and a new transmission channel needs to be selected, and each node in the new transmission channel is normal, and then the target data is transmitted through the new transmission channel. In this way, it can ensure that the target data passes through the transmission channel smoothly and then reaches the target location. Avoid the problem of data loss due to node abnormality during data transmission, and improve the reliability of data transmission.

[0024] First, the data transmission method provided in the embodiment of the present application is described in detail.

[0025] The data transmission method provided in the embodiment of the present application is applied to communication networking. In the communication networking, multiple nodes are included, each of which can simultaneously receive data sent by other nodes and can also simultaneously send data to other nodes. In other words, when data transmission is required, several nodes can be arbitrarily selected in the communication networking to complete the data transmission. The specific selection of which nodes in the communication networking are used for data transmission is not limited here.

[0026] Figure 1 The data transmission method in this embodiment is shown in FIG. Figure 1 , see Figure 1 As shown, the method may include:

[0027] S101: Acquire target data to be transmitted.

[0028] When device A needs to send data to device B, the data sent is the target data to be transmitted. In actual applications, the target data can be text, pictures, audio and video, etc. The specific content of the target data is not limited here.

[0029] S102: Determine a transmission channel for transmitting target data from the communication network.

[0030] When device A needs to send data to device B through a communication network, a tunnel is established in the communication network. In the tunnel, it is specified how the data flows from device A to device B. In other words, there are multiple channels in the tunnel, and each channel can allow data to flow from device A to device B. The transmission channel here is a channel in the tunnel. The target data will first be determined to be transmitted from the transmission channel. Which channel is selected from the multiple channels in the tunnel as the transmission channel for the target data is not specifically limited here.

[0031] S103: Determine whether each node in the transmission channel is normal. If yes, execute S104; if no, execute S105.

[0032] After determining the transmission channel of the target data, the target data is not immediately sent into the transmission channel for transmission, but first determine whether each node in the transmission channel is normal. Because the data needs to pass through each node in the transmission channel in sequence, once there is an abnormality in one node, the data cannot pass through the node to the next node, causing data transmission interruption and data transmission failure. Therefore, it is necessary to determine whether each node in the transmission channel is normal before sending the data into the transmission channel.

[0033] In the process of judging whether each node in the transmission channel is normal, each node in the transmission channel can be determined to be normal only after all nodes in the transmission channel are judged to be normal. If a node in the transmission channel is judged to be abnormal, then each node in the transmission channel is determined to be abnormal.

[0034] When judging whether a node is normal, you can directly judge through the node. That is, check the operating parameters of the node, or send a message to the node to check the response of the node. You can also judge through the neighboring nodes of the node. That is, the neighboring node sends a confirmation request to the node, and the neighboring node determines whether the node is normal based on the response of the node, and then obtains the conclusion of whether the node is normal from the neighboring node. The specific method of judging whether each node in the transmission channel is normal is not limited here.

[0035] S104: Transmit the target data through the transmission channel.

[0036] After confirming that each node in the transmission channel is normal, it means that the target data can pass through each node in the transmission channel smoothly, and the target data transmission will not be blocked due to the abnormality of a certain node. Therefore, the target data can be transmitted through the transmission channel, so that the target data can reach the target location smoothly.

[0037] S105: Select a new transmission channel, all nodes in the new transmission channel are normal, and transmit target data through the new transmission channel.

[0038] After determining that each node in the transmission channel is abnormal, it means that there is an abnormal node in the transmission channel. If the target data is transmitted in the transmission channel, when the target data is transmitted to the abnormal node, the abnormal node will be abnormal and cannot be smoothly transmitted to the next node, resulting in the obstruction of target data transmission and the failure of target data transmission. Therefore, it is necessary to abandon the use of the transmission channel for target data transmission and reselect a new transmission channel. After selecting a new transmission channel, it is also necessary to determine whether each node in the new transmission channel is normal. If so, the target data is transmitted through this new transmission channel. If not, continue to select new transmission channels until each node in the selected new transmission channel is normal, and then transmit the target data through the last selected new transmission channel.

[0039] It should be noted here that the nodes in the initial transmission channel and the new transmission channel can be completely different, or they can be partially repeated. However, the nodes repeated in the new transmission channel and the initial transmission channel do not include the nodes judged to be abnormal in the initial transmission channel. For example: the transmission channel of the target data is node a-node b-node c-node d, and node b in the transmission channel is judged to be abnormal, then the new transmission channel can be node e-node f-node g-node h, or node a-node e-node c-node d. For the specific nodes in the new transmission channel, as long as they can transmit the target data from the sending device to the receiving device like the initial transmission channel, there is no specific limitation.

[0040] Finally, it should be noted that the execution subject of the embodiment of the present application can be an agent (ie, Agent). When the target data needs to be sent from the sending device to the receiving device, the Agent obtains the target data from the sending device, then determines the transmission channel of the target data, and determines whether each node in the transmission channel is normal. If so, the target data is sent to the transmission channel for transmission. If not, a new transmission channel in which each node is normal is selected, and the target data is sent to the new transmission channel for transmission. Of course, the execution subject of the embodiment of the present application can also be any node in the communication network of the target data. The specific execution subject in the embodiment of the present application is not limited here.

[0041] As can be seen from the above, the data transmission method provided by the embodiment of the present application is applied in a communication network, wherein the communication network includes a plurality of nodes, each node can simultaneously receive data sent by other nodes, and can also simultaneously send data to other nodes, after obtaining the target data to be transmitted, first determine the transmission channel of the target data from the communication network, and then determine whether each node in the transmission channel is normal, if each node is normal, it means that when the target data is transmitted in the transmission channel, there will be no transmission failure due to abnormality of the nodes therein, and the target data can be transmitted through the transmission channel, and if there is an abnormal node, it means that when the target data is transmitted in the transmission channel, there will be a transmission failure due to abnormality of the nodes therein, and a new transmission channel needs to be selected, and each node in the new transmission channel is normal, and then the target data is transmitted through the new transmission channel. In this way, it can be ensured that the target data passes through the transmission channel smoothly and then reaches the target position. The problem of data loss due to abnormal nodes during data transmission is avoided, and the reliability of data transmission is improved.

[0042] Further, as a refinement of the above step S103, in the process of judging whether each node in the transmission channel is normal, the judgment may be made based on the status confirmation result of each node by its adjacent nodes for the corresponding node.

[0043] Specifically, the above step S103 may include:

[0044] Step A1: Acquire connection status confirmation information of each node in the transmission channel for its adjacent nodes.

[0045] Step A2: Determine whether each node in the transmission channel is normal according to the connection status confirmation information.

[0046] When the connection status confirmation information indicates that the corresponding node is normally connected, it is determined that the corresponding node is normal.

[0047] In a communication network, there are multiple nodes. When some nodes are connected to each other, they can form a transmission channel.

[0048] Identity authentication is first required between each node. In practical applications, identity authentication can be performed between nodes through the BIP32 protocol. The BIP32 protocol is a protocol that obtains N private keys through hierarchical deterministic derivation based on a random number seed. Each private key can be derived from the seed, which can simplify the difficulty of private key management and enhance verification security.

[0049] After each node has passed mutual authentication, each node can confirm the connection status of its adjacent node to confirm whether its adjacent node is online. In the specific implementation process, a node can send a connection status confirmation request to its adjacent node. If the adjacent node is online, it will receive the request and feedback a response based on the request to inform the node that it is online. In this way, a node can determine that its adjacent node is online, and then the connection status confirmation information includes the information that the adjacent node is online. If the adjacent node is not online, it will not receive the request and will not respond based on the request. In this way, a node will not receive the response of the adjacent node. After a period of time, a node can determine that its adjacent node is not online, and then the connection status confirmation information includes the information that the adjacent node is offline. When it is necessary to determine whether each node in the transmission channel is normal, the connection status confirmation information in the corresponding node can be obtained, and then the adjacent node of the corresponding node is determined to be normal (i.e., whether it is online) based on the information.

[0050] For example, the adjacent node of node a is node b. Node a sends a request to node b to obtain the information that node b is online, and node a records the information that node b is online in the connection status confirmation information. When it is necessary to determine whether node b is normal, the connection status confirmation information can be obtained from node a, and node b can be learned from the connection status confirmation information that node b is online, thereby determining that node b is normal.

[0051] It should be noted that the status confirmation between adjacent nodes is not a one-time thing, but a periodic thing, that is, each node needs to confirm its status once every period of time. In addition, for a certain node, if multiple nodes have confirmed its status, it can be determined that the node is online only after multiple nodes have confirmed that it is online, or it can be determined that the node is online only after most of the multiple nodes have confirmed that it is online, which is not specifically limited here.

[0052] From the above content, it can be seen that the connection status is confirmed through adjacent nodes, and whether each node is normal is determined based on the connection status information. Since the connection status confirmation between adjacent nodes is simpler and more direct, it is not easy to miss a node, so it can improve the efficiency and comprehensiveness of the connection status confirmation of each node, and further improve the data transmission efficiency and reliability.

[0053] Furthermore, as an extension of the above step S105, before transmitting the target data through the transmission channel, the target data needs to be disguised by a protocol other than the VPN dedicated protocol. This is because: the communication traffic encapsulated by the VPN dedicated protocol has very obvious characteristics and is very easy to be identified, leaving security risks for data transmission. Therefore, protocol disguise of the target data can prevent the data transmitted in the VPN from being easily identified, thereby improving the security of data transmission.

[0054] Specifically, before the above step S105, the method may further include:

[0055] Step B: Encapsulate the target data using the camouflage protocol to obtain encapsulated data.

[0056] The disguised protocol is any protocol that is different from the dedicated protocol of the target data in the new transmission channel.

[0057] In VPN transmission, there are dedicated protocols. At this time, for the target data, after being encapsulated with a dedicated protocol, it can also be disguised as any non-dedicated protocol by encoding. In this way, the disguised target data will not be easily identified as VPN transmission during the transmission process, thereby ensuring the transmission security of the target data.

[0058] In practical applications, the disguised protocol may be HTTP, HTTPS, WEBSOCKET, RTP, etc. The specific type of the disguised protocol is not limited here.

[0059] Accordingly, the above step S105 may include: transmitting the encapsulated data through a new transmission channel.

[0060] It should be noted that the above step B and its related specific steps are also applicable before the above step S104 is executed. That is to say, no matter it is the initially determined transmission channel or the latest determined transmission channel, after the transmission channel for the final transmission of the target data is determined, various operations such as protocol camouflage need to be performed on the target data.

[0061] From the above content, it can be seen that disguising the target data for transmission through the camouflage protocol can make the characteristics of the target data difficult to identify during transmission, reduce the probability of the target data being identified and obtained during transmission, and improve the security of data transmission.

[0062] Furthermore, as a refinement of the above step B, the encapsulated data can be transmitted in the transmission channel using the same camouflage protocol all the time. However, in order to make the transmission more covert, different camouflage protocols can be used for data transmission between different nodes.

[0063] Specifically, the above step B may include:

[0064] Step B11: Encapsulate the target data using the first camouflage protocol to obtain first encapsulated data.

[0065] Accordingly, the above step S105 may include:

[0066] Step B12: Transmitting the first encapsulated data between the first node and the second node in the new transmission channel.

[0067] That is to say, after the target data is encapsulated using a certain camouflage protocol, the encapsulated data is only transmitted between two nodes in the new transmission channel, or between several consecutive nodes, rather than in the entire new transmission channel. In this way, it is more difficult for the transmitted data to be identified through the protocol, and the security of the transmitted data is better protected.

[0068] The first node and the second node here only represent any two adjacent nodes in the new transmission channel. When data is sent from the first node to the second node, the data is one step closer to reaching the receiving device. The specific positions of the first node and the second node in the new transmission channel are not limited here.

[0069] Step B13: At the second node, decapsulate the first encapsulated data to obtain target data.

[0070] After the first encapsulated data is transmitted to the second node, the first encapsulated data can be decapsulated to restore the target data. The target data is disguised by the protocol to obtain the first encapsulated data, and the first encapsulated data is reversely disguised by the protocol, that is, decapsulated, to obtain the target data.

[0071] Step B14: Encapsulate the target data using the second camouflage protocol to obtain second encapsulated data.

[0072] The second disguised protocol is different from the first disguised protocol, and both the first disguised protocol and the second disguised protocol are any protocols different from the dedicated protocol of the target data in the transmission channel.

[0073] The specific implementation method of using the second encapsulation protocol to disguise the target data is the same as that of using the first encapsulation protocol to disguise the target data. Please refer to the relevant instructions in the above step B, which will not be repeated here.

[0074] Step B15: Transmit the second encapsulated data between the second node and the third node of the new transmission channel.

[0075] After the target data is again subjected to protocol disguise, the target data after protocol disguise can be sent to the next node of the second node, that is, the third node, so as to gradually complete the transmission of the target data in the new transmission channel.

[0076] From the above content, it can be seen that using different camouflage protocols to encapsulate target data between different nodes can avoid the exposure of target data during transmission to the greatest extent, increase the difficulty of identification, and further ensure the security of data transmission.

[0077] Furthermore, as a refinement of the above step B, when the target data is subjected to protocol camouflage, the header of the data processed by the camouflage protocol may be used as the header of this camouflage.

[0078] Specifically, the above step B may include:

[0079] Step B21: Obtain the header data of the data packet encapsulated by the masquerade protocol.

[0080] The camouflage protocol is not only used to camouflage the target data this time, but also to encapsulate other data before that. At this time, it is necessary to obtain the data packet encapsulated by the camouflage protocol before, and then obtain the header data from the header of the data packet.

[0081] Step B22: Place the header data in the header of the target data to obtain encapsulated data.

[0082] After obtaining the header data of other data packets encapsulated by the camouflage protocol, the header data can be placed in the header of the target data, that is, imitating the header characteristics of other network protocol data packets, camouflaging a header data, and then treating the target data as the buffer part of this protocol. In this way, the target data is disguised as a data packet of other protocols, that is, encapsulated data.

[0083] From the above content, it can be seen that by obtaining the header data of the data packet encapsulated by the camouflage protocol and disguising it as the header data, the protocol camouflage of the target data can be made more realistic, more difficult to identify during the transmission process, and the security of data transmission can be further improved.

[0084] Furthermore, as an extension of the above step B, the target data may be encrypted before being encapsulated by the protocol to prevent the content of the target data from being directly exposed.

[0085] Specifically, before the above step B, the method may further include:

[0086] Step C: Encrypt the target data to obtain encrypted data.

[0087] Before the target data is disguised by the protocol, the target data is first encrypted to obtain the encrypted data. In this way, the encrypted data is then encapsulated by the protocol, and the encapsulated data is transmitted in the transmission channel. Even if it is identified, the content in the target data will not be easily obtained because the target data is still encrypted, thus ensuring the security of the data content.

[0088] In practical applications, the target data may be encrypted using any encryption method, such as encrypting using TLS or DTLS protocols, encrypting using symmetric encryption or Hash algorithms, etc. The specific encryption method is not specifically limited here.

[0089] Correspondingly, the above step B may include: using a camouflage protocol to encapsulate the encrypted data to obtain encapsulated data.

[0090] From the above content, it can be seen that before the target data is encapsulated by the protocol, the target data is first encrypted. In this way, even if the target data is identified during the transmission process, the content of the target data will not be directly obtained, further ensuring the security of data transmission.

[0091] Furthermore, as a refinement of the above step C, the target data may be encrypted using different encryption methods according to different VPN-specific protocols corresponding to the target data.

[0092] Specifically, the above step C may include:

[0093] Step C1: Determine the dedicated protocol corresponding to the target data.

[0094] The dedicated protocol here may refer to the protocol that the target data originally needs to use in VPN transmission. In actual applications, the dedicated protocol may be TCP protocol, UDP protocol, etc. The specific protocol used as the dedicated protocol may be determined according to actual needs and is not specifically limited here.

[0095] Step C2: Obtain the target encryption method corresponding to the dedicated protocol from the correspondence between the preset protocols and encryption methods.

[0096] Since data must be encrypted and protocol encapsulated before transmission, and encapsulation includes encapsulation of special protocols and disguise of other protocols, if the encryption method is suitable for the encapsulated protocol, the encrypted and encapsulated data will not be prone to errors. Therefore, a corresponding relationship is established between the appropriate encryption method and the protocol in advance. After determining the special protocol corresponding to the target data, the same protocol as the special protocol can be found in the corresponding relationship, and then the encryption method corresponding to the protocol can be used as the target encryption method for subsequent encryption of the target data.

[0097] In actual applications, the correspondence between the preset protocols and encryption methods may include: TCP protocol-TLS encryption method, UDP protocol-DTLS encryption method, etc. Among them, TLS may refer to a security protocol used to provide confidentiality and data integrity between two communication applications, with the purpose of providing security and data integrity protection for Internet communications. DTLS may refer to a transport layer security protocol that is extended on the basis of TLS and is used to provide transmission security for data packets transmitted on UDP.

[0098] Step C3: Encrypt the target data using a target encryption method to obtain encrypted data.

[0099] After obtaining a target encryption method suitable for the dedicated protocol of the target data in the VPN, the target encryption method can be used to encrypt the target data, thereby obtaining encrypted data.

[0100] From the above content, it can be seen that by selecting an encryption method suitable for the dedicated protocol of the target data in VPN transmission, and then using this encryption method to encrypt the target data first, errors in the encrypted and encapsulated data can be avoided, thereby improving the accuracy of data transmission.

[0101] Further, as a refinement of the above step S105, when the target data needs to be transmitted, a connection between the sender and the receiver of the target data is established in the communication network, and a specific path is selected in the connection to transmit the target data. In addition, each node in the communication network is managed by an agent, so that the transmission data can be uniformly managed on the basis of flexible transmission.

[0102] Specifically, the transmission channel is a duplex channel in a duplex tunnel for transmitting target data, the duplex tunnel is used to establish a connection between a sender and a receiver of target data in a communication network, and the duplex channel is used to transmit target data. Each node in the communication network is managed by an agent.

[0103] That is to say, when data needs to be transmitted through a communication network, a duplex tunnel will be established between the sender and the receiver of the data in the communication network. In the duplex tunnel, it is specified how the data flows from the sender to the receiver. In the duplex tunnel, there are multiple duplex channels. The target data is transmitted through one of the duplex channels. When other data is transmitted between the sender and the receiver, it can be transmitted through other duplex channels in the duplex tunnel. The establishment and selection of duplex tunnels and duplex channels, and even the subsequent transmission of data between the nodes of the duplex channels, can be controlled by the agent program.

[0104] The above step S105 may include:

[0105] Step D1: From each duplex channel of the duplex tunnel, select a target duplex channel whose nodes are all normal.

[0106] The specific implementation method of step D1 here is the same as that of the aforementioned step S105, and will not be repeated here.

[0107] Step D2: Acquire channel information of the target duplex channel and tunnel information of the duplex tunnel.

[0108] The channel information here may be a unique identification number (Identity Document, ID) that identifies the channel used for the target data transmission here. In practical applications, the ID may be a 16-bit unsigned integer.

[0109] The tunnel information here may be a unique identification number (Identity Document, ID) that identifies the tunnel used for the target data transmission here. In practical applications, the ID may be a 32-bit unsigned integer.

[0110] Step D2: Add the channel information to the target data to obtain the channel data.

[0111] Step D3: Add the tunnel information to the channel data to obtain tunnel data.

[0112] After obtaining the channel information and tunnel information of the target data transmission, the channel information and tunnel information are added to the target data in sequence. In this way, the dedicated protocol encapsulation of the target data is completed, so that the target data can be encrypted.

[0113] In the process of adding channel information and tunnel information to the target data, the channel information and tunnel information can be added to the front, back, or one before and one after the target data. There is no limitation on the position where the channel information and tunnel information are added to the target data.

[0114] Step D4: In the target duplex channel, the tunnel data is transmitted between the nodes through the agent program.

[0115] After determining the duplex channel for transmitting the target data and adding the channel tunnel information to the target data, the target data with the added information can be controlled by the agent program, that is, the tunnel data is transmitted between the nodes of the target duplex channel.

[0116] In the process of the agent controlling each node, when the tunnel data is transmitted from one node to another, the agent obtains the tunnel data from the other node, processes the tunnel data to obtain the next node, and then reversely processes the data and sends it back to the other node, and informs the other node of the next node to be transmitted, so that the other node sends the data to the next node. After the data arrives at the next node, it is repeated in the same way as last time until the data is transmitted to the receiver.

[0117] From the above content, it can be seen that by adding both channel information and tunnel information to the target data, and controlling the transmission of the target data in each node through the agent program, the target data can be uniformly managed during the transmission process, ensuring that it is transmitted in the correct transmission tunnel and transmission channel, thereby ensuring the correctness of the data transmission path.

[0118] Furthermore, as an extension of the above step S101, before using the communication network to transmit data, it is necessary to first confirm whether the identity of each node in the communication network meets the requirements to avoid malicious nodes from being mixed into the communication network and threatening the security of data transmission.

[0119] Specifically, before the above step S101, the method may include:

[0120] Step E1: In the communication network, each node performs identity authentication through the BIP32 protocol. If the authentication is successful, proceed to step E2. If the authentication fails, proceed to step E3.

[0121] The BIP32 protocol is a protocol that obtains N private keys through hierarchical deterministic derivation based on a random number seed. Each private key can be derived from the seed, which simplifies the difficulty of private key management and enhances verification security.

[0122] It should be noted here that if a node is verified by different nodes and different conclusions are obtained, then the verification result of the node can be directly failed verification, or it can be the majority conclusion among different conclusions. For example: Node a is verified as passed by Node b, Node a is verified as failed by Node c, and Node a is verified as passed by Node d. When the identity authentication requirements between nodes are high, that is, the data transmission security requirements are high, Node a is verified with a failed conclusion, so it is determined that Node a has failed verification. When the identity authentication requirements between nodes are not high, that is, the data transmission security requirements are not high, two nodes determine that Node a has passed verification, one node determines that Node a has failed verification, and Node a is verified by the majority of nodes, so it is determined that Node a has passed verification.

[0123] Step E2: Retain the corresponding node in the communication network.

[0124] Once a node in the communication network passes identity authentication, it means that the identity of the node is not suspicious, and the node can remain in the communication network and be selected for use in subsequent data transmission.

[0125] Step E3: Delete the corresponding node in the communication network.

[0126] If a node in the communication network fails to pass identity authentication, it means that the node's identity is suspicious. In order to ensure the security of data transmission in the communication network, the node needs to be deleted from the communication network. After confirming that the node's identity is not suspicious, the node can be added to the communication network again.

[0127] From the above content, it can be seen that in the communication network, identity authentication is performed between two nodes through the BIP32 protocol. Based on the characteristics of the BIP32 protocol, it is possible to more conveniently authenticate the identities of each node in the communication network. While improving the security of the communication network, it can speed up the efficiency of node identity authentication, thereby improving the efficiency of data transmission.

[0128] Finally, the data transmission method provided in the embodiment of the present application is described again with a complete embodiment.

[0129] Figure 2 The data transmission method in this embodiment is shown in FIG. Figure 2 , the data transmission method is implemented by a communication networking agent. Multiple node programs are connected to each other to form a network channel of a multi-directional hybrid network. At the link layer, each node program can simultaneously open multiple listening services and network connection services to achieve two-way data transmission. Identity authentication is performed between node programs through the BIP32 protocol.

[0130] On the basis of two-way transmission, the node program confirms and maintains the connection status of adjacent nodes through the business layer protocol. When there is a need for data transmission, a duplex tunnel is established based on the TCP, UDP, ICMP and other underlying protocols with the unique ID of each node program as the path. The duplex tunnel uses KCP technology to maintain the stability of the flow data. Each duplex tunnel establishes and maintains multiple duplex channels for business data transmission.

[0131] Among them, the business layer protocol refers to the protocol for the communication node to confirm the connection of the adjacent node through the proxy program, the connection confirmation response and the connection status refresh, which is used for the node to confirm the status of the adjacent node and provide the information basis for the establishment of the tunnel. A duplex tunnel refers to a data tunnel that can transmit data bidirectionally between proxy programs, with the unique identification ID of the proxy program as the path, according to the user data transmission direction. A duplex channel refers to a channel established in a duplex tunnel for bidirectional data transmission. It is a lightweight encapsulation of a duplex tunnel, and each duplex tunnel can maintain multiple duplex channels. KCP refers to a fast and reliable protocol that can reduce the average delay by 30-40% and the maximum delay by 3 times at the cost of wasting 10-20% of the bandwidth compared to TCP. It is implemented with pure algorithms and is not responsible for the sending and receiving of the underlying protocol. The user needs to define the sending method of the lower layer data packet by himself and provide it to KCP in the form of a callback function. There is no internal system call. It is used here to maintain the flow data of the duplex tunnel, ensure the flow order, and maintain data integrity.

[0132] Business data is encrypted using TLS or DTLS before transmission. TLS is used to encrypt the TCP protocol, and DTLS is used to encrypt the UDP protocol. TLS is a security protocol used to provide confidentiality and data integrity between two communication applications. Its purpose is to provide security and data integrity for Internet communications. DTLS is a transport layer security protocol that is extended from TLS to provide transmission security for data packets transmitted over UDP.

[0133] The data in the duplex channel is disguised by data protocol in the upper layer, and any protocol is simulated by coding. Currently, there are HTTP, HTTPS, WEBSOCKET, RTP and other protocols. Among them, protocol disguise refers to a data disguise method that disguises the original data into a specific network protocol through coding, so as to trigger the whitelist, confuse data traffic, and prevent the request traffic characteristics from being exposed.

[0134] The above is the network environment structure. Next, the user sends user data to another node through the proxy function provided by the node program according to his own needs.

[0135] The data transmission method may include:

[0136] S201: User data is input.

[0137] S202: Analyze user data.

[0138] S203: Select a node and establish a tunnel.

[0139] Here, the node program establishes a duplex tunnel for data transmission according to the tunnel protocol based on the data transmission requirements. The tunnel protocol confirms the communication direction through the preset path in the proxy program and gradually establishes a tunnel leading to the data transmission end point.

[0140] The tunnel protocol refers to the protocol rules used for planning the tunnel path, selecting nodes, and dynamically switching the path when the tunnel is established.

[0141] S204: Confirm the node status.

[0142] S205: Determine whether there is an offline node. If yes, execute S203; if no, execute S206.

[0143] After determining the duplex tunnel, you need to obtain the current status of each node in the tunnel and determine whether there are offline nodes among these nodes. If there are offline nodes, it means that the data cannot pass through the tunnel to the target node smoothly, and you need to re-determine the duplex tunnel. If there are no offline nodes, it means that the data can pass through the tunnel to the target node smoothly, and you can proceed to the next step.

[0144] S206: Establish a passage in the tunnel.

[0145] That is to say, a channel for transmitting user data is determined within the tunnel.

[0146] After the channel is established, the user data can be encapsulated with duplex channel information locally and the channel information can be added. Also, the user data can be encapsulated with duplex tunnel information locally and the tunnel information can be added.

[0147] The channel information refers to the unique identification ID used to identify the duplex channel used for this information transmission, which is a 16-bit unsigned integer. The tunnel information refers to the unique identification ID used to identify the duplex tunnel used for this information transmission, which is a 32-bit unsigned integer.

[0148] S207: User data encryption.

[0149] S208: Encrypted data protocol camouflage.

[0150] The disguised data is sent to the next node through a duplex channel.

[0151] S209: The next node receives data.

[0152] S210: Restoring the disguised data.

[0153] S211: Decrypt data, and then return to S202.

[0154] After receiving the data, the next node restores the protocol disguised data to obtain the business data. Then, it decrypts the business data to obtain the original data. Then, by analyzing the original data, it determines whether the data transmission is complete.

[0155] After returning to S202, S212: determine whether it is the final node. If so, execute S213, if not, execute S214.

[0156] S213: Data transmission is completed.

[0157] S214: Analyze the next node information and then proceed to S207.

[0158] Here, it is necessary to obtain the next node transmission information based on the original data information. Then the data is encrypted and the protocol is disguised again, and the data is sent to the next node, and so on, until the data is transmitted to the destination node. The destination node refers to the node to which the user data wants to be transmitted, which is the end point of this transmission task.

[0159] After receiving the data, the destination node performs protocol analysis, data decryption and data structure analysis on the data in the channel to restore the plaintext user data.

[0160] In order to more clearly understand the execution order of each layer in the communication network of the data transmission method provided in the embodiment of the present application, Figure 3 This is a schematic diagram of the structure of the communication network layer in the embodiment of the present application, see Figure 3 As shown in the figure, the communication network consists of 6 levels. After receiving the user's plaintext data, each node performs the following operations in the order of the following levels:

[0161] 1. Channel protocol layer:

[0162] Used to maintain data information channels. Encapsulate user plaintext data into channel data.

[0163] 2. Tunnel protocol layer:

[0164] Used for node management, dynamic switching, and tunnel maintenance (KCP) in the tunnel. Encapsulate user data into tunnel data.

[0165] 3. Business protocol layer:

[0166] Used to confirm and maintain connections between nodes. Confirm node status.

[0167] 4. Data encryption layer:

[0168] Used for TLS and DTLS encryption. Encrypts transmitted data.

[0169] 5. Network protocol camouflage layer:

[0170] Used for HTTP, HTTPS, WEBSOCKET, RTP protocol disguise. Perform data protocol disguise.

[0171] 6. Bottom layer communication protocol:

[0172] Used for TCP, UDP, and ICMP communications. Implements data sending.

[0173] The current node performs the above operations, and after sending the data, the next node receives the data and performs the above operations in reverse. That is, in the next node, starting from the underlying communication protocol layer and ending at the channel protocol layer, the following operations are performed in sequence: receiving data, protocol camouflage restoration, original data decryption, tunnel protocol unsealing, channel protocol unsealing, and data parsing, and finally obtaining the user's plaintext data. Then, the next node starts from the channel protocol layer and ends at the underlying communication protocol, processes the user's plaintext data, and then sends it to the next node. And so on, until the destination node receives the data and obtains the user's plaintext data.

[0174] It can be seen that, through the multi-point hybrid multi-directional network connection networking provided by the embodiment of the present application, at the link layer, each agent program can open multiple listening and connection ports, and can simultaneously receive data from multiple nodes and send data to multiple nodes. At the network layer, according to the data flow requirements, multiple agents can build multiple data duplex tunnels to achieve the communication requirements between any nodes. Each tunnel can establish multiple data channels, and the data between channels are independently transmitted without interfering with each other and can be carried out simultaneously. On this basis, the entire networking architecture can simultaneously perform multiple network data transmission tasks in different directions, presenting multi-point hybridity, and the network data flow presents multi-directionality. During the tunnel establishment process, when the preset tunnel intermediate node loses connection under unexpected circumstances, the networking node program can dynamically adjust the tunnel path through other nodes, bypass the offline node in the best way, and re-form the communication tunnel for data communication.

[0175] Furthermore, through the mixed camouflage of polymorphic protocols, the risk of identifying network traffic characteristics is avoided and the concealment of network traffic is improved. In the process of protocol camouflage, it is not restricted by the protocol type and can support any network protocol encoding implementation, making the network traffic characteristics diversified. The protocol camouflage method between nodes is generated by autonomous negotiation between nodes and does not conflict with the protocol camouflage methods between other nodes, which greatly changes the traffic characteristics in the tunnel and reduces the risk of being tracked and analyzed by traffic.

[0176] In addition, by using the BIP32 protocol for reliable identity authentication between nodes, a tree structure can be generated from a random seed to store multiple sets of private keys and public keys, which can be easily backed up and transferred to other compatible devices, and hierarchical permission control can be easily implemented. The parent key can generate a child key, which can be derived from a grandchild key, and so on. This authentication method greatly reduces the difficulty of storing private and public keys, and facilitates node expansion and network access verification without reducing the reliability of authentication.

[0177] In addition, the TLS / DTLS data encryption algorithm ensures that during data transmission, except for the inlet and outlet, there is no plaintext data in the intermediate network traffic, and the encryption method is reliable. The protocol camouflage function reduces the risk of traffic being identified by traffic characteristics during transmission.

[0178] Based on the same inventive concept, as an implementation of the above method, the embodiment of the present application also provides a data transmission device. The device is applied to a communication network including multiple nodes, in which each node can simultaneously receive data sent by other nodes and can also simultaneously send data to other nodes. Figure 4 This is a schematic diagram of the structure of the data transmission device in the embodiment of the present application, see Figure 4 As shown, the device may include:

[0179] An acquisition module 401 is used to acquire target data to be transmitted;

[0180] A determination module 402 is used to determine a transmission channel for transmitting the target data from the communication network;

[0181] The judgment module 403 is used to judge whether each node in the transmission channel is normal; if so, enter the transmission module 404;

[0182] The transmission module 404 is used to select a new transmission channel, in which all nodes are normal, and transmit the target data through the new transmission channel.

[0183] Furthermore, the judgment module is specifically used to obtain connection status confirmation information of each node in the transmission channel for its adjacent nodes; judge whether each node in the transmission channel is normal based on the connection status confirmation information, and when the connection status confirmation information indicates that the corresponding node is normally connected, determine that the corresponding node is normal.

[0184] Furthermore, the device further comprises: a camouflage module, configured to encapsulate the target data using a camouflage protocol to obtain encapsulated data, wherein the camouflage protocol is any protocol different from a dedicated protocol of the target data in the new transmission channel;

[0185] The transmission module is specifically configured to transmit the encapsulated data through the new transmission channel.

[0186] Furthermore, the camouflage module is specifically used to encapsulate the target data using a first camouflage protocol to obtain first encapsulated data;

[0187] The transmission module is specifically used to transmit the first encapsulated data between the first node and the second node in the new transmission channel; decapsulate the first encapsulated data at the second node to obtain the target data; encapsulate the target data using a second camouflage protocol to obtain second encapsulated data, wherein the second camouflage protocol is different from the first camouflage protocol; and transmit the second encapsulated data between the second node and the third node in the new transmission channel.

[0188] Furthermore, the camouflage module is specifically used to obtain header data of a data packet encapsulated by the camouflage protocol; and place the header data in the header of the target data to obtain the encapsulated data.

[0189] Furthermore, the device further comprises: an encryption module, configured to encrypt the target data to obtain encrypted data;

[0190] The camouflage module is specifically used to encapsulate the encrypted data using a camouflage protocol to obtain the encapsulated data.

[0191] Furthermore, the encryption module is specifically used to determine the dedicated protocol corresponding to the target data; obtain the target encryption method corresponding to the dedicated protocol from the correspondence between the preset protocol and the encryption method; and encrypt the target data using the target encryption method to obtain the encrypted data.

[0192] Further, the transmission channel is a duplex channel in a duplex tunnel for transmitting the target data, the duplex tunnel is used to establish a connection between a sender and a receiver of the target data in the communication network, the duplex channel is used to transmit the target data, and each node in the communication network is managed by an agent program.

[0193] The transmission module is specifically used to select a target duplex channel whose nodes are all normal from each duplex channel of the duplex tunnel; obtain channel information of the target duplex channel and tunnel information of the duplex tunnel; add the channel information to the target data to obtain channel data; add the tunnel information to the channel data to obtain tunnel data; in the target duplex channel, control the transmission of the tunnel data between each node through the agent program.

[0194] Furthermore, the device also includes: a verification module, which is used to perform identity authentication between two nodes in the communication network through the BIP32 protocol; if the verification passes, the corresponding node is retained in the communication network; if the verification fails, the corresponding node is deleted in the communication network.

[0195] It should be noted here that the description of the above device embodiment is similar to the description of the above method embodiment, and has similar beneficial effects as the method embodiment. For technical details not disclosed in the device embodiment of the present application, please refer to the description of the method embodiment of the present application for understanding.

[0196] Based on the same inventive concept, an embodiment of the present application also provides an electronic device. Figure 5 This is a schematic diagram of the structure of the electronic device in the embodiment of the present application, see Figure 5 As shown, the electronic device may include: a processor 501, a memory 502, and a bus 503; wherein the processor 501 and the memory 502 communicate with each other via the bus 503; the processor 501 is used to call program instructions in the memory 502 to execute the methods in one or more of the above embodiments.

[0197] It should be noted that the description of the above electronic device embodiment is similar to the description of the above method embodiment, and has similar beneficial effects as the method embodiment. For technical details not disclosed in the electronic device embodiment of this application, please refer to the description of the method embodiment of this application for understanding.

[0198] Based on the same inventive concept, an embodiment of the present application further provides a computer-readable storage medium, which may include: a stored program; wherein, when the program is running, the device where the storage medium is located is controlled to execute the method in one or more of the above embodiments.

[0199] It should be noted here that the description of the above storage medium embodiment is similar to the description of the above method embodiment, and has similar beneficial effects as the method embodiment. For technical details not disclosed in the storage medium embodiment of the present application, please refer to the description of the method embodiment of the present application for understanding.

[0200] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A data transmission method, characterized in that: The method is applied to a communication network including a multi-directional hybrid network composed of multiple nodes, in which each node can simultaneously receive data sent by other nodes and can also simultaneously send data to other nodes, and the method includes: After each node has authenticated each other, each node confirms the connection status of its neighboring node to confirm whether its neighboring node is online; Obtain target data to be transmitted; Determining a transmission channel for transmitting the target data from the communication network; Determining whether each node in the transmission channel is normal; If not, a new transmission channel is selected, each node in the new transmission channel is normal, and the target data is transmitted through the new transmission channel; Wherein, the determining whether each node in the transmission channel is normal includes: Check the operating parameters of the corresponding node, or send a message to the corresponding node to check the response of the corresponding node; and, Acquire connection status confirmation information of each node in the transmission channel for its adjacent nodes; determine whether each node in the transmission channel is normal according to the connection status confirmation information, and determine that the corresponding node is normal when the connection status confirmation information indicates that the corresponding node is normally connected; for each node, if multiple nodes confirm its status, then the corresponding node is determined to be online after multiple nodes confirm that it is online, or the corresponding node is determined to be online after the majority of the multiple nodes confirm that it is online; Before transmitting the target data through the new transmission channel, the method further includes: Encapsulating the target data using a disguised protocol to obtain encapsulated data, wherein the disguised protocol is any protocol different from a dedicated protocol for the target data in the new transmission channel; The transmitting the target data through the new transmission channel includes: Transmitting the encapsulated data through the new transmission channel; The step of encapsulating the target data using a camouflage protocol to obtain encapsulated data includes: Encapsulating the target data using a first camouflage protocol to obtain first encapsulated data; The transmitting the encapsulated data through the new transmission channel includes: Transmitting the first encapsulated data between the first node and the second node in the new transmission channel; At the second node, decapsulating the first encapsulated data to obtain the target data; encapsulating the target data using a second camouflage protocol to obtain second encapsulated data, wherein the second camouflage protocol is different from the first camouflage protocol; transmitting the second encapsulated data between the second node and the third node of the new transmission channel; Wherein, before encapsulating the target data by using the camouflage protocol to obtain the encapsulated data, the method further includes: Encrypting the target data to obtain encrypted data; The adopting of the camouflage protocol to encapsulate the target data to obtain encapsulated data includes: Encapsulating the encrypted data using a camouflage protocol to obtain the encapsulated data; The step of encrypting the target data to obtain encrypted data includes: Determining a dedicated protocol corresponding to the target data; Obtaining the target encryption method corresponding to the dedicated protocol from the correspondence between the preset protocols and the encryption methods; The target data is encrypted using the target encryption method to obtain the encrypted data.

2. The method according to claim 1, characterized in that The adopting of the camouflage protocol to encapsulate the target data to obtain encapsulated data includes: Obtaining header data of a data packet encapsulated by the camouflage protocol; The header data is placed in the header of the target data to obtain the encapsulated data.

3. The method according to claim 1, characterized in that The transmission channel is a duplex channel in a duplex tunnel for transmitting the target data, the duplex tunnel is used to establish a connection between a sender and a receiver of the target data in the communication network, the duplex channel is used to transmit the target data, each node in the communication network is managed by an agent program, the new transmission channel is selected, each node in the new transmission channel is normal, and the target data is transmitted through the new transmission channel, including: Selecting a target duplex channel with normal nodes from each duplex channel of the duplex tunnel; Acquire channel information of the target duplex channel and tunnel information of the duplex tunnel; Adding the channel information to the target data to obtain channel data; Adding the tunnel information to the channel data to obtain tunnel data; In the target duplex channel, the tunnel data is transmitted between nodes through the agent program.

4. The method according to claim 1, characterized in that Before acquiring the target data to be transmitted, the method further includes: In the communication network, identity authentication is performed between two nodes through the BIP32 protocol; If the verification is successful, the corresponding node is retained in the communication network; If the verification fails, the corresponding node is deleted from the communication network.

5. A data transmission device, characterized in that: The device is applied to a communication network including a multi-directional hybrid network composed of multiple nodes, in which each node can simultaneously receive data sent by other nodes and can also simultaneously send data to other nodes. After each node passes mutual authentication, each node confirms the connection status of its adjacent node to confirm whether its adjacent node is online; the device includes: An acquisition module, used for acquiring target data to be transmitted; A determination module, used to determine a transmission channel for transmitting the target data from the communication network; A judgment module, used to judge whether each node in the transmission channel is normal; if not, entering the transmission module; A transmission module, used for selecting a new transmission channel, in which each node is normal, and transmitting the target data through the new transmission channel; The judgment module is specifically used to check the operating parameters of the corresponding node, or send a message to the corresponding node to check the response of the corresponding node; and obtain the connection status confirmation information of each node in the transmission channel for its adjacent node; judge whether each node in the transmission channel is normal according to the connection status confirmation information, and when the connection status confirmation information indicates that the corresponding node is normally connected, determine that the corresponding node is normal; for each node, if multiple nodes confirm its status, then after multiple nodes confirm that it is online, determine that the corresponding node is online, or after most of the multiple nodes confirm that it is online, determine that the corresponding node is online; The device further comprises: a camouflage module, configured to encapsulate the target data using a camouflage protocol to obtain encapsulated data, wherein the camouflage protocol is any protocol different from a dedicated protocol of the target data in the new transmission channel; The transmission module is specifically configured to transmit the encapsulated data through the new transmission channel; The camouflage module is specifically used to encapsulate the target data using a first camouflage protocol to obtain first encapsulated data; The transmission module is specifically used to transmit the first encapsulated data between the first node and the second node in the new transmission channel; decapsulate the first encapsulated data at the second node to obtain the target data; encapsulate the target data using a second camouflage protocol to obtain second encapsulated data, where the second camouflage protocol is different from the first camouflage protocol; and transmit the second encapsulated data between the second node and the third node in the new transmission channel; The device further comprises: an encryption module, configured to encrypt the target data to obtain encrypted data; The camouflage module is specifically used to encapsulate the encrypted data using a camouflage protocol to obtain the encapsulated data; The encryption module is specifically used to determine the dedicated protocol corresponding to the target data; obtain the target encryption method corresponding to the dedicated protocol from the correspondence between the preset protocol and the encryption method; and encrypt the target data using the target encryption method to obtain the encrypted data.

6. An electronic device, characterized in that: The electronic device comprises: a processor, a memory, and a bus; wherein the processor and the memory communicate with each other via the bus; and the processor is used to call program instructions in the memory to execute the method as claimed in any one of claims 1 to 4.

7. A computer-readable storage medium, characterized in that: The storage medium comprises: a stored program; wherein, when the program is running, the device where the storage medium is located is controlled to execute the method as claimed in any one of claims 1 to 4.

Images