Information transmission method and apparatus, storage medium, and electronic device

Abstract

The application provides an information transmission method and device, a storage medium and an electronic device, and comprises the following steps: obtaining message information to be encrypted sent by a server; obtaining key chain parameters matched with a target communication link through a key chain application module, wherein the key chain application module is arranged in a communication module of a target Linux system, and the target communication link is a communication link established between the server and a target router; encrypting the message information by using the key chain parameters in the key chain application module to obtain first encrypted information; and transmitting the first encrypted information to the target router through the target communication link. Thus, the technical problem of low security of information transmission in the Linux system is solved.

Description

TECHNICAL FIELD

[0001] Embodiments of the present application relate to the field of communication, and in particular, to an information transmission method and device, a storage medium and an electronic device. BACKGROUND

[0002] In the era of SDN controller, the controller needs to respond to network state changes, issue paths to routers, and try to ensure that services are not interrupted. The network state changes are mainly provided by the BGP server, which maintains communication with the router and notifies the controller of the changes in the network state according to the information reported by the router. The path issuing function is mainly provided by the PCEP server, which sends the path information calculated by the controller to the router, and the router forwards service packets according to the latest path. The transmission security of the BGP, PCEP server and the router is crucial to the correctness of the service.

[0003] In the traditional deployment scenario, the BGP and PCEP servers are directly deployed on the Linux server, and the Linux server itself does not support the keychain function. Therefore, although the router supports the keychain function, the BGP and PCEP servers still cannot use the keychain function to achieve secure transmission. That is, the existing information transmission method in the linux system has the technical problem of low security of information transmission.

[0004] At present, there is no effective solution to the above problems SUMMARY

[0005] Embodiments of the present application provide an information transmission method and device, a storage medium and an electronic device to at least solve the problem of low security of information transmission in the linux system in the related art.

[0006] According to an embodiment of the present application, an information transmission method is provided, which includes: obtaining message information to be encrypted sent by a server; obtaining a key chain parameter matched with a target communication link through a key chain application module, wherein the key chain application module is configured in a communication module of a target linux system, and the target communication link is a communication link established between the server and a target router; encrypting the message information in the key chain application module by using the key chain parameter to obtain first encrypted information; and transmitting the first encrypted information to the target router through the target communication link.

[0007] According to another embodiment of the present application, another information transmission method is provided, which comprises: sending, by a server installed in a target Linux system, a key chain parameter determined from a pre-configured key chain parameter set to a communication module in the target Linux system; and transmitting, to the communication module, message information to be encrypted, so that the communication module sends first encrypted information obtained by encrypting the message information to a target router via a target communication link, wherein the first encrypted information is obtained by a key chain application module configured in the communication module by encrypting the message information using the key chain parameter, and the key chain parameter matches the target communication link.

[0008] According to still another embodiment of the present application, an information transmission apparatus is provided, which comprises: a first obtaining unit configured to obtain message information to be encrypted sent by a server; a second obtaining unit configured to obtain a key chain parameter matching a target communication link via a key chain application module, wherein the key chain application module is configured in a communication module of a target Linux system, and the target communication link is a communication link established between the server and a target router; an encrypting unit configured to encrypt the message information using the key chain parameter in the key chain application module to obtain first encrypted information; and a transmitting unit configured to transmit the first encrypted information to the target router via the target communication link.

[0009] According to still another embodiment of the present application, another information transmission apparatus is provided, which comprises: a sending unit configured to send, by a server installed in a target Linux system, a key chain parameter determined from a pre-configured key chain parameter set to a communication module in the target Linux system; and a transmitting unit configured to transmit, to the communication module, message information to be encrypted, so that the communication module sends first encrypted information obtained by encrypting the message information to a target router via a target communication link, wherein the first encrypted information is obtained by a key chain application module configured in the communication module by encrypting the message information using the key chain parameter, and the key chain parameter matches the target communication link.

[0010] According to still another embodiment of the present application, a computer readable storage medium is also provided, which stores a computer program, wherein the computer program is configured to execute the steps in any of the method embodiments when running.

[0011] According to still another embodiment of the present application, an electronic device is also provided, which comprises a memory and a processor, wherein the memory stores a computer program, and the processor is configured to execute the computer program to perform the steps in any of the method embodiments.

[0012] Through the above embodiment of the present application, the message information to be encrypted sent by the server is acquired; the key chain parameters matched with the target communication link are acquired by the key chain application module, wherein the key chain application module is configured in the communication module of the target linux system, and the target communication link is the communication link established between the server and the target router; the message information is encrypted by using the key chain parameters in the key chain application module to obtain first encrypted information; and the first encrypted information is transmitted to the target router through the target communication link, thereby solving the problem of low security of information transmission in the linux system. BRIEF DESCRIPTION OF DRAWINGS

[0013] Figure 1 is a schematic diagram of a computer terminal structure according to an embodiment of the present application;

[0014] Figure 2 is a flowchart of an information transmission method according to an embodiment of the present application;

[0015] Figure 3 is a schematic diagram of an environment of an information transmission method according to an embodiment of the present application;

[0016] Figure 4 is a flowchart of an environment configuration method according to another embodiment of the present application;

[0017] Figure 5 is a timing diagram of an information transmission method according to an embodiment of the present application;

[0018] Figure 6 is a schematic diagram of an information transmission device structure according to an embodiment of the present application;

[0019] Figure 7 is a schematic diagram of an information transmission device structure according to another embodiment of the present application. DETAILED DESCRIPTION

[0020] Hereinafter, embodiments of the present application will be described in detail with reference to the accompanying drawings and in conjunction with embodiments.

[0021] It should be noted that the terms "first", "second", and the like in the specification and claims of the present application and in the above-described drawings are used to distinguish similar objects, and do not necessarily have to be used to describe a specific order or sequence.

[0022] First, the terms involved in the present application are explained:

[0023] PCEP server: PCEP is a network transmission protocol, and the PCEP server communicates with the router by using the PCEP protocol, sends instructions to the router, or the router reports the network situation to the PCEP server.

[0024] SDN: software define network, software defined network.

[0025] SDN controller: controller for implementing SDN, by obtaining network state, dynamically modifying network.

[0026] Management system: gateway and SDN controller combine to jointly manage and control the network, realize SDN.

[0027] Key chain: key chain, including some keys and encryption algorithms.

[0028] Docker container: a system running based on docker container technology.

[0029] Kubernetes: an open source system for automatically deploying, expanding and managing containerized applications. It combines containers that make up an application into logical units for ease of management and service discovery.

[0030] Kubernetes IP address: IP address displayed by the kubernetes system to the external network.

[0031] Linux operating system: Linux is a free and open source UNIX-like operating system.

[0032] TCP / IP module: a module in the Linux operating system that is specifically used to create and maintain TCP links.

[0033] Socket: handle or identifier of TCP link.

[0034] The method embodiments provided in the embodiments of the application can be executed in a mobile terminal, a computer terminal or a similar computing device. Taking the case of running on a computer terminal, Figure 1 is a hardware structure block diagram of a computer terminal running an information transmission method of an embodiment of the application. As Figure 1 shown, the computer terminal can include one or more (only one is shown in Figure 1 ) processor 102 (the processor 102 can include but is not limited to processing devices such as microprocessor MCU or programmable logic device FPGA) and memory 104 for storing data, wherein the above computer terminal can further include transmission device 106 for communication function and input and output device 108. Those skilled in the art can understand, Figure 1 the structure shown is only schematic, which does not limit the structure of the above computer terminal. For example, the computer terminal can further include more or less components than Figure 1 shown, or have a different configuration from Figure 1 shown.

[0035] The memory 104 can be used to store computer programs, such as software programs of application software and modules, such as a computer program corresponding to the information transmission method in the embodiments of the present application. The processor 102 executes various functional applications and data processing, i.e., implements the above method, by running the computer program stored in the memory 104. The memory 104 can include a high-speed random access memory, and can further include a non-volatile memory, such as one or more magnetic storage devices, flash memories, or other non-volatile solid-state memories. In some examples, the memory 104 can further include a memory remotely arranged with respect to the processor 102, which can be linked to the mobile terminal through a network. Examples of the above network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and a combination thereof.

[0036] The transmission device 106 is used to receive or send data via a network. Specific examples of the above network can include a wireless network provided by a communication provider of a computer terminal. In one example, the transmission device 106 includes a network adapter (NIC), which can be linked with other network devices through a base station so as to be able to communicate with the Internet. In one example, the transmission device 106 can be a radio frequency (RF) module, which is used to communicate with the Internet in a wireless manner.

[0037] In the present embodiment, an information transmission method is provided, which can be implemented by a communication module in a linux system, Figure 2 is a flowchart of the information transmission method according to the embodiments of the present application, as shown in Figure 2 The flowchart includes the following steps:

[0038] In step S202, message information to be encrypted sent by a server is acquired.

[0039] As an optional mode, the above server can be one of a BGP or PCEP server running in a linux system. It should be noted that in the era of an SDN controller, the controller needs to respond to network state changes, issue paths to routers, and try to ensure that services are not interrupted. The network state changes are mainly provided by a BGP server, which keeps communication with a router, and notifies the controller of changes in the network state according to information reported by the router. The path issuing function is mainly provided by a PCEP server, which sends path information calculated by the controller to the router, and the router forwards service messages according to the latest path.

[0040] In the above embodiments of this application, the communication module in the Linux system can be used as the execution subject to obtain the message information to be encrypted by the BGP or PCEP server.

[0041] Step S204: Obtain key chain parameters that match the target communication link through the key chain application module. The key chain application module is configured in the communication module of the target Linux system, and the target communication link is the communication link established between the server and the target router.

[0042] Step S206: In the key chain application module, the message information is encrypted using the key chain parameters to obtain the first encrypted information;

[0043] Step S208: Transmit the first encrypted information to the target router through the target communication link.

[0044] In one exemplary embodiment, a Kubernetes environment runs on the target Linux system, and a key chain configuration module is configured in the server deployed within the Kubernetes environment. The key chain configuration module is used to obtain a key chain parameter set, and the server includes a first server for detecting network state changes and a second server for calculating information transmission paths.

[0045] like Figure 3 The diagram illustrates an optional information transmission method in this embodiment. As an optional approach, the aforementioned keychain application module can be a keychain application module configured in the TCP / IP module of the Linux system. It stores the keychain parameters bound to a specific TCP connection and the Kubernetes virtual IP address, and performs special processing on connections bound to keychain parameters. For example, when sending messages, it adds encrypted fields based on the keychain parameters and the Kubernetes IP address; when receiving messages, it performs authentication based on the keychain parameters and the Kubernetes IP address. The encryption algorithm is one already supported by the Linux operating system.

[0046] like Figure 3As shown, the first server and the second server (i.e., the PCEP server and the BGP server in the figure) can be configured with a key chain configuration module. The key chain configuration module can be a key chain configuration module, which functions to configure key chain parameters, kubernetes IP addresses in a browser by a user, provides a configuration interface, and stores the configuration. When the BGP and PCEP servers establish a link with the router, the key chain configuration module sets the key chain parameters and the IP addresses of the kubernetes to the key chain application module in the Linux operating system TCP / IP module.

[0047] The following describes the method in detail in combination with Figure 3 The environment in which the method can be performed is further described. As shown in Figure 3 The linux system processes the message to be sent through the TCP / IP module and communicates with the router outside the system through the NAT gateway. In a specific implementation, Figure 3 The linux system shown in the figure can run a kubernetes environment. The linux system running the kubernetes environment is also pre-configured with a PCEP server and a BGP server. The user can further configure the PCEP server and the BGP server through a browser, such as configuring key chain parameters in the PCEP server and the BGP server. The PCEP server and the BGP server need to establish communication with the router through the TCP / IP module in the linux system. The TCP / IP module configured with the key chain application module is used to encrypt the message sent by the PCEP server and the BGP server using the key chain parameters, assemble the encrypted message, and send it to the router.

[0048] In one example embodiment, before obtaining the message information sent by the server, the method further includes receiving a link identifier of the target communication link sent by the server, and a key chain parameter pre-configured for the target router; and binding the key chain parameter and the link identifier.

[0049] In one example embodiment, before obtaining the message information sent by the server, the method further includes configuring a key chain application module in the communication module of the initial linux system to obtain a target linux system; installing a kubernetes environment in the target linux system; and deploying a first server for detecting network state changes and a second server for calculating information transmission paths in the kubernetes environment, wherein the first server and the second server are each configured with a set of key chain parameters, and the servers include the first server and the second server.

[0050] The following description is made in conjunction with Figure 4 An environment configuration method of the present application is described as follows:

[0051] S402, install a linux operating system supporting keychain function;

[0052] S404, install kubernetes;

[0053] S406, install BGP, PCEP server;

[0054] It can be understood that this step can be installed when installing the management version, or BGP, PCEP can be installed separately. The BGP, PCEP server integrates the keychain configuration module, and provides a configuration interface for users to configure all parameters.

[0055] S408, configure keychain parameters and kubernetes IP addresses on the BGP, PCEP server;

[0056] It should be noted that since the BGP, PCEP server connects one or more routers, the keychain parameters bound by these routers can be the same or different, so the keychain configuration module on the BGP, PCEP server supports setting default keychain parameters and setting keychain parameters of a certain router. The kubernetes IP address is the external IP address of the kubernetes environment.

[0057] S410, configure keychain parameters on the router;

[0058] The keychain parameters of one or more routers can be configured on the network management, or the keychain parameters can be configured on the router, and then the network management is triggered to synchronize the configuration from the router.

[0059] S412, configure router parameters on the BGP, PCEP server;

[0060] The set of routers that the BGP, PCEP server can connect is configured. When the router is configured, it can be set whether the router uses the keychain function.

[0061] S414, the BGP, PCEP server and the router perform encrypted transmission based on the keychain parameters.

[0062] It can be understood that before the information transmission starts, it is determined whether to use the keychain function, if the keychain function is used, and the user also configures the keychain parameter bound by the router in S408, the bound keychain parameter is used for encrypted transmission; if the user does not configure the keychain parameter for the router in S408, the default keychain parameter is used for encrypted transmission. If it is determined not to use the keychain function before the transmission starts, normal TCP / IP communication is performed.

[0063] As an optional way, the above method can also provide a user interface, and the user needs to configure the keychain parameter, the kubernetes IP address, whether the router enables the keychain function, and the keychain parameter bound by the router on the gateway interface or similar network management tool. The user can also set the default keychain parameter, bind the default keychain parameter for some routers in batches, and reduce user operation.

[0064] In an example embodiment, the above-mentioned encryption of the message information by the keychain parameter in the keychain application module to obtain the first encrypted information includes: encrypting the message information based on the keychain parameter to obtain an encrypted field; obtaining the message header and the message content of the message information, and packaging the message header, the message content and the encrypted field into the first encrypted information.

[0065] In an example embodiment, after the above-mentioned sending of the first encrypted information to the target router through the target communication link, it further includes: obtaining the second encrypted information sent by the target router through the target communication link, wherein the second encrypted information is the encrypted information obtained by the target router by encrypting the message information to be transmitted to the server by using the keychain parameter; performing security verification on the second encrypted information based on the keychain parameter; in the case of verification passing, sending the second encrypted information to the server; in the case of verification failure, discarding the second encrypted information.

[0066] In an example embodiment, the above-mentioned encryption of the message information by the keychain parameter in the keychain application module to obtain the first encrypted information further includes: obtaining the first communication address configured for the target linux system, wherein the first communication address is a virtual address corresponding to the kubernetes environment of the target linux system and pre-configured; replacing the second communication address in the message information with the first communication address to obtain reference message information, wherein the second communication address is the communication address of the server; encrypting the reference message content in the reference message information based on the keychain parameter to obtain a reference encrypted field; and composing the reference message header, the reference message content and the reference encrypted field in the reference message information into the first encrypted information.

[0067] In one example embodiment, after the first encrypted information is sent to the target router through the target communication link, the method further comprises: obtaining third encrypted information sent by the target router through the target communication link, wherein the third encrypted information is encrypted information obtained by the target router using the key chain parameter on message information to be transmitted to the server, and the communication address carried in the third encrypted information is the first communication address; performing security verification on the third encrypted information based on the key chain parameter; in the case of passing the verification, replacing the first communication address in the third encrypted information with the second communication address, and sending the third encrypted information to the server; in the case of failing the verification, discarding the third encrypted information.

[0068] In the above embodiment of the application, the message information to be encrypted sent by the server is obtained; the key chain parameter matched with the target communication link is obtained through the key chain application module, wherein the key chain application module is configured in the communication module of the target Linux system, and the target communication link is a communication link established between the server and the target router; the message information is encrypted using the key chain parameter in the key chain application module to obtain the first encrypted information; and the first encrypted information is transmitted to the target router through the target communication link. Thus, the technical problem of low security of information transmission in the Linux system is solved.

[0069] In this embodiment, another information transmission method is provided, which can be implemented by a PCEP server or a BGP server in the Figure 3 In this embodiment, another information transmission method is provided, which can be implemented by a PCEP server or a BGP server in the

[0070] In one example embodiment, before the key chain parameter determined from the pre-configured key chain parameter set is sent to the communication module in the target Linux system, the method further comprises: searching for the key chain parameter matched with the target router in the key chain parameter set, wherein the key chain parameter set stores a plurality of router identifiers and a plurality of key chain parameters pre-configured respectively.

[0071] In an example embodiment, further comprising: sending a link establishment request to the communication module to establish a target communication link between the server and the target router through the communication module; and obtaining a link identifier matched with the target communication link in a case that the target communication link is successfully established.

[0072] In an example embodiment, further comprising: running a kubernetes environment in the target linux system, and configuring a key chain configuration module in a server deployed by the kubernetes environment, wherein the key chain configuration module is configured to obtain a set of key chain parameters, and the server comprises a first server configured to detect a network state change and a second server configured to calculate an information transmission path.

[0073] In an example embodiment, after the above-mentioned sending the message information to be encrypted to the communication module to send the first encrypted information to the target router through the target communication link, further comprising: obtaining second encrypted information sent by the communication module, wherein the second encrypted information is encrypted information obtained by the target router using the key chain parameters on message information to be transmitted to the server, and the second encrypted information has passed the security verification of the communication module.

[0074] In an example embodiment, the above-mentioned transmitting the message information to be encrypted to the communication module further comprises: sending a first communication address currently configured for the target linux system to the communication module to send the encrypted information based on the first communication address through the communication module, wherein the first communication address is a virtual address corresponding to the kubernetes environment of the target linux system and pre-configured in the target linux system.

[0075] In an example embodiment, after the above-mentioned sending the message information to be encrypted to the communication module, further comprising: obtaining third encrypted information sent by the communication module, wherein the third encrypted information is encrypted information that has passed the security verification, and a communication address carried in the third encrypted information is a second communication address, wherein the second communication address is a communication address of the server.

[0076] In order to facilitate the understanding of the technical solutions provided by the present application, the specific working coordination process of each module of the present application will be described in detail below with reference to the embodiments of specific scenarios.

[0077] As shown in the information transmission method timing diagram of Figure 5 , the specific working coordination process of each module of the present application is described as follows:

[0078] As shown in steps S502 to S506, the user configures the default keychain parameter, the kubernetes IP address, and adds the configuration of router A (including the keychain parameter) on the BGP or PCEP server, and triggers the BGP or PCEP server to actively build a chain to router A;

[0079] Then, as step S508 to step S512, the BGP or PCEP server attempts to establish a TCP link with router A, and the TCP / IP module of the Linux operating system requests the establishment of a TCP link with router A through the gateway of kubernetes according to the IP address of router A. After the link is successfully established, the TCP / IP module returns the socket of the link to the BGP or PCEP server;

[0080] As step S514 and step S516, the keychain configuration module in the server finds that router A has bound the keychain parameters, and configures the keychain parameters bound by router A and the kubernetes IP address to the keychain application module through the socket. The keychain application module binds the keychain parameters and the kubernetes IP address to the socket.

[0081] As step S518, the BGP or PCEP server calls the TCP / IP module according to the protocol, and sends messages to and from router A based on the socket. When the TCP / IP module sends a message to router A using the socket, the keychain application module adds an encryption field to the message according to the keychain parameters and the kubernetes IP address bound to the socket.

[0082] As step S520 to step S524, when router A receives the message, it performs security authentication using the encryption field. If the authentication is passed, router A replies to the BGP or PCEP server with a message. If the authentication is not passed, router A discards the message. Similarly, when router A sends a message to the BGP or PCEP server, it also adds an encryption field. When the TCP / IP module of the BGP or PCEP server receives the encrypted message on the socket, the keychain application module performs security authentication on the message according to the keychain parameters and the kubernetes IP address bound to the socket. If the authentication is passed, the TCP / IP module delivers the message to the BGP or PCEP server for processing. If the authentication is not passed, the TCP / IP module discards the message.

[0083] Through the above-mentioned embodiments of the present application, the message information to be encrypted sent by the server is acquired; the key chain parameter matched with the target communication link is acquired through the key chain application module, wherein the key chain application module is configured in the communication module of the target Linux system, and the target communication link is the communication link established between the server and the target router; the message information is encrypted in the key chain application module by using the key chain parameter to obtain first encrypted information; and the first encrypted information is transmitted to the target router through the target communication link. The kubernetes-based keychain secure transmission is realized, the communication security can be improved, the security problem can be avoided, and the business can be prevented from being attacked and interrupted, so that the technical problem of low security of information transmission in the Linux system is solved.

[0084] Through the above description of the embodiments, those skilled in the art can clearly understand that the method according to the above embodiments can be realized by means of software necessary for a general hardware platform, and of course, it can also be realized by hardware, but in many cases, the former is a better embodiment. Based on such understanding, the technical solutions of the present application can be embodied in the form of a software product, which is stored in a storage medium (such as a ROM / RAM, a magnetic disk, or an optical disk), and includes a plurality of instructions for causing a terminal device (which can be a mobile phone, a computer, a server, or a network device) to execute the method described in each embodiment of the present application.

[0085] In the present embodiment, an information transmission device is also provided, which is used to implement the above-mentioned embodiments and preferred embodiments, and will not be described again. As used below, the term "module" can be a combination of software and / or hardware that implements a predetermined function. Although the device described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware is also possible and is contemplated.

[0086] Figure 6 is a structural schematic diagram of the information transmission device according to the embodiments of the present application, as shown in Figure 6 , the information transmission device includes a first acquisition unit 602, a second acquisition unit 604, an encryption unit 606, and a transmission unit 608.

[0087] The first acquisition unit 602 is configured to acquire message information to be encrypted sent by a server.

[0088] The second acquisition unit 604 is configured to acquire a key chain parameter matched with a target communication link through a key chain application module, wherein the key chain application module is configured in a communication module of a target Linux system, and the target communication link is a communication link established between the server and the target router.

[0089] The encryption unit 606 is configured to encrypt the message information by using the key chain parameter in the key chain application module to obtain first encrypted information.

[0090] The transmission unit 608 is configured to transmit the first encrypted information to the target router through the target communication link.

[0091] Figure 7 FIG. 7 is a structural schematic diagram of an information transmission device according to another embodiment of the present application. Figure 7 The information transmission device includes a sending unit 702 and a transmission unit 704.

[0092] The sending unit 702 is configured to send the key chain parameter determined from the pre-configured key chain parameter set to a communication module in the target Linux system through a server installed in the target Linux system.

[0093] The transmission unit 704 is configured to transmit the message information to be encrypted to the communication module, so that the communication module sends the first encrypted information obtained by encrypting the message information to the target router through the target communication link, wherein the first encrypted information is obtained by encrypting the message information by using the key chain parameter in the key chain application module configured in the communication module, and the key chain parameter matches the target communication link.

[0094] It should be noted that the above-mentioned modules can be implemented by software or hardware, and for the latter, the following implementation manners can be used, but are not limited thereto: the above-mentioned modules are located in the same processor; or the above-mentioned modules are located in different processors in any combination.

[0095] Embodiments of the present application also provide a computer readable storage medium, which stores a computer program, wherein the computer program is configured to execute the steps in any of the above method embodiments when running.

[0096] In an example embodiment, the above-mentioned computer readable storage medium can include, but is not limited to: a U disk, a read-only memory (ROM), a random access memory (RAM), a mobile hard disk, a magnetic disk or an optical disk, and various computer program storage media.

[0097] Embodiments of the present application also provide an electronic device, which includes a memory storing a computer program and a processor configured to execute the computer program to perform the steps in any of the above method embodiments.

[0098] In one exemplary embodiment, the electronic device described above can further include a transmission device linked to the processor and an input / output device linked to the processor.

[0099] The specific examples in the embodiments can refer to the examples described in the above embodiments and exemplary implementation, which will not be repeated here.

[0100] Obviously, those skilled in the art should understand that the modules or steps of the present application described above can be realized by general computing devices, which can be concentrated on a single computing device or distributed on a network composed of multiple computing devices, which can be realized by program codes executable by the computing devices, so that they can be stored in storage devices and executed by the computing devices, and in some cases, the steps shown or described can be executed in different order, or they can be made into individual integrated circuit modules, or multiple modules or steps can be made into a single integrated circuit module. Thus, the present application is not limited to any specific combination of hardware and software.

[0101] The above only describes the preferred embodiments of the present application and is not intended to limit the present application. Those skilled in the art can make various modifications and changes to the present application. Any modification, equivalent replacement, improvement, etc. within the principles of the present application shall be included in the protection scope of the present application.

Claims

1. An information transmission method, comprising: obtaining message information to be encrypted sent by a server; obtaining key chain parameters matched with a target communication link through a key chain application module, wherein the key chain application module is configured in a communication module of a target Linux system, and the target communication link is a communication link established between the server and a target router; encrypting the message information in the key chain application module using the key chain parameters to obtain first encrypted information; transmitting the first encrypted information to the target router through the target communication link.

2. The method of claim 1, wherein, Before the step of obtaining the message information sent by the server, the method further comprises: receiving a link identifier of the target communication link sent by the server and the key chain parameters pre-configured for the target router; binding the key chain parameters and the link identifier.

3. The method of claim 2, wherein, A kubernetes environment is running in the target Linux system, and a key chain configuration module is configured in a server deployed in the kubernetes environment, wherein the key chain configuration module is used to obtain a set of key chain parameters, and the server includes a first server for detecting network state changes and a second server for calculating an information transmission path.

4. The method of claim 1, wherein, The step of encrypting the message information in the key chain application module using the key chain parameters to obtain first encrypted information comprises: encrypting the message information based on the key chain parameters to obtain an encrypted field; obtaining a message header and message content of the message information, and packing the message header, the message content, and the encrypted field into the first encrypted information.

5. The method of claim 1, wherein, After the step of transmitting the first encrypted information to the target router through the target communication link, the method further comprises: obtaining second encrypted information sent by the target router through the target communication link, wherein the second encrypted information is encrypted information obtained by the target router by encrypting message information to be transmitted to the server using the key chain parameters; performing security verification on the second encrypted information based on the key chain parameters; in the case of verification passing, transmitting the second encrypted information to the server; in the case of verification failure, discarding the second encrypted information.

6. The method of claim 1, wherein, The step of encrypting the message information in the key chain application module using the key chain parameters to obtain first encrypted information further comprises: obtaining a first communication address configured for the target Linux system, wherein the first communication address is a virtual address pre-configured for a kubernetes environment corresponding to the target Linux system; replacing a second communication address in the message information with the first communication address to obtain reference message information, wherein the second communication address is a communication address of the server; encrypting reference message content in the reference message information based on the key chain parameters to obtain a reference encrypted field; composing a reference message header in the reference message information, the reference message content, and the reference encrypted field into the first encrypted information.

7. The method of claim 6, wherein, The method further comprises, after sending the first encrypted information to the target router through the target communication link: obtaining third encrypted information sent by the target router through the target communication link, wherein the third encrypted information is encrypted information obtained by the target router by encrypting message information to be transmitted to the server using the key chain parameter, and the communication address carried in the third encrypted information is the first communication address; performing security verification on the third encrypted information based on the key chain parameter; in the case of verification, replacing the first communication address in the third encrypted information with the second communication address, and sending the third encrypted information to the server; in the case of verification failure, discarding the third encrypted information.

8. An information transmission method characterized by comprising: The method comprises: sending the key chain parameter determined from the pre-configured key chain parameter set to the communication module in the target Linux system through the server installed in the target Linux system; transmitting the message information to be encrypted to the communication module, so that the communication module sends first encrypted information obtained by encrypting the message information to the target router through the target communication link, wherein the first encrypted information is obtained by encrypting the message information using the key chain parameter by the key chain application module configured in the communication module, and the key chain parameter matches the target communication link.

9. The method of claim 8, wherein, Before sending the key chain parameter determined from the pre-configured key chain parameter set to the communication module in the target Linux system, the method further comprises: finding the key chain parameter matching the target router in the key chain parameter set, wherein the key chain parameter set stores a plurality of router identifiers and a plurality of key chain parameters pre-configured respectively.

10. The method of claim 9, wherein, The method further comprises: sending a link establishment request to the communication module to establish the target communication link between the server and the target router through the communication module; in the case of successful establishment of the target communication link, obtaining a link identifier matching the target communication link.

11. The method of claim 9, wherein, The kubernetes environment is running in the target Linux system, and the server deployed in the kubernetes environment is configured with a key chain configuration module, wherein the key chain configuration module is used to obtain the key chain parameter set, and the server comprises a first server for detecting network state changes and a second server for calculating information transmission path.

12. The method of claim 8, wherein, After sending the message information to be encrypted to the communication module to send the first encrypted information to the target router through the target communication link, the method further comprises: obtaining second encrypted information sent by the communication module, wherein the second encrypted information is encrypted information obtained by the target router by encrypting message information to be transmitted to the server using the key chain parameter, and the second encrypted information has passed the security verification of the communication module.

13. The method of claim 8, wherein, The method further comprises: The communication module is sent a first communication address currently configured for the target Linux system, so that the communication module sends the encrypted information based on the first communication address, wherein the first communication address is a virtual address pre-configured for a Kubernetes environment of the target Linux system.

14. The method of claim 13, wherein, After the message information to be encrypted is sent to the communication module, the method further includes: The third encrypted information sent by the communication module is obtained, wherein the third encrypted information is encrypted information that passes security verification, and a communication address carried in the third encrypted information is a second communication address, wherein the second communication address is a communication address of the server.

15. An information transmission apparatus characterized by comprising: The method includes: The server sends message information to be encrypted. The second obtaining unit is configured to obtain key chain parameters matched with a target communication link through a key chain application module, wherein the key chain application module is configured in a communication module of the target Linux system, and the target communication link is a communication link established between the server and a target router. The encryption unit is configured to encrypt the message information by using the key chain parameters in the key chain application module to obtain first encrypted information. The transmission unit is configured to transmit the first encrypted information to the target router through the target communication link.

16. An information transmission apparatus characterized by comprising: The method includes: The sending unit is configured to send, through a server installed in a target Linux system, key chain parameters determined from a pre-configured set of key chain parameters to a communication module in the target Linux system. The transmission unit is configured to transmit message information to be encrypted to the communication module, so that the communication module sends first encrypted information obtained by encrypting the message information to a target router through a target communication link, wherein the first encrypted information is obtained by encrypting the message information by using key chain parameters in a key chain application module configured in the communication module, and the key chain parameters are matched with the target communication link.

17. A computer-readable storage medium, characterized in that, The computer readable storage medium stores a computer program, wherein the computer program is executed by the processor to implement the steps of the method in any one of claims 1 to 7 or 8 to 14.

18. An electronic device, comprising: The computer readable storage medium stores a computer program, wherein the computer program is executed by the processor to implement the steps of the method in any one of claims 1 to 7 or 8 to 14.

Images