A data transmission method, apparatus, device, and storage medium

Abstract

The application discloses a data transmission method, device, equipment and storage medium. The method comprises the following steps: obtaining target data to be transmitted; determining a first target user for transmitting the target data and a second target user for receiving the target data; performing identity authentication on the target users and determining whether the authentication is successful; if yes, performing encryption processing on the target data to obtain first ciphertext data; obtaining a generation time of the first ciphertext data, an internet protocol address and a user name of the second target user; marking the first ciphertext data by using the generation time, the internet protocol address and the user name of the second target user to obtain second ciphertext data; and sending the second ciphertext data to the second target user to complete data transmission. The scheme can guarantee the authenticity, confidentiality and integrity of the data.

Description

Technical Field

[0001] This application relates to the field of data transmission technology, specifically to a data transmission method, apparatus, device, and storage medium. Background Technology

[0002] Data transmission is the process of transferring data from a data source to a data terminal according to certain procedures through one or more data links. Its main function is to realize the transmission and exchange of information between points. In a typical data transmission system, the input and output devices are terminals or computers, and the data information sent by each party is usually letters, numbers, symbols, or combinations thereof. To ensure the security, authenticity, and integrity of data transmission, the transmitted data needs to be encrypted or otherwise processed to ensure that the data is not easily leaked during transmission.

[0003] However, the current data transmission process still has many vulnerabilities and cannot truly guarantee the security, authenticity, and integrity of the transmitted data, which can easily lead to data transmission chaos. Summary of the Invention

[0004] In view of this, this application provides a data transmission method, apparatus, device, and storage medium to address the problem that current data transmission processes still have many loopholes, cannot truly guarantee the security, authenticity, and integrity of transmitted data, and are prone to causing data transmission chaos.

[0005] To achieve the above objectives, the following solution is proposed:

[0006] Firstly, a data transmission method includes:

[0007] Obtain the target data to be transmitted;

[0008] Identify a first target user to transmit the target data, and a second target user to receive the target data;

[0009] The first target user is authenticated, and it is determined whether the authentication was successful.

[0010] If so, the target data is encrypted to obtain the first ciphertext data;

[0011] Obtain the generation time, Internet Protocol address, and username of the second target user of the first encrypted data;

[0012] Using the generation time, Internet Protocol address, and username of the second target user, the first ciphertext data is marked to obtain the second ciphertext data;

[0013] The second encrypted data is sent to the second target user to complete the data transmission.

[0014] Preferably, the step of authenticating the first target user and determining whether the authentication was successful includes:

[0015] Obtain the login password of the first target user when transmitting the target data, and determine the password level of the login password;

[0016] Determine whether the password level of the login password is greater than a preset threshold level;

[0017] If so, obtain the historical transmission records of the first target user, and determine whether the first target user has triggered an error warning based on the historical transmission records;

[0018] If the first target user has not triggered any error warnings, then the first target user is confirmed to have been successfully verified.

[0019] If the first target user has triggered an error warning, the number of times the first target user has triggered an error warning is determined. If the number of times is not greater than the first preset threshold, the first target user is determined to have successfully verified.

[0020] If the number of attempts exceeds a first preset threshold, then the verification of the first target user is determined to have failed.

[0021] Preferably, the step of encrypting the target data to obtain the first ciphertext data includes:

[0022] Determine the key length and encryption parameters corresponding to the target data;

[0023] The target key is generated according to the stated key length and using a pre-acquired random number generator.

[0024] The target data is encrypted using the target key and encryption parameters to obtain ciphertext data.

[0025] Preferably, the step of using the generation time, Internet Protocol address, and username of the second target user to mark the first ciphertext data to obtain the second ciphertext data includes:

[0026] Set the barcode length, and convert the generation time into a first target barcode according to the barcode length;

[0027] The Internet Protocol address is converted into a second target barcode according to the stated barcode length;

[0028] The username of the second target user is converted into a third target barcode according to the barcode length.

[0029] The first target barcode, the second target barcode, and the third target barcode are combined to obtain a comprehensive target barcode;

[0030] The integrated target barcode is used as a label to mark the first encrypted data to obtain the second encrypted data.

[0031] Preferably, before sending the second encrypted data to the second target user, the method further includes:

[0032] Traffic identification is performed on the second ciphertext data to determine the different data streams of the second ciphertext data;

[0033] Analyze the network traffic of each of the data streams to determine if any potential problems exist in each of the data streams;

[0034] Treat each data stream with potential problems as a separate problem data stream;

[0035] For each problematic data stream, determine whether the problematic data stream will trigger a preset alarm mechanism;

[0036] If none of the aforementioned problematic data streams trigger the alarm mechanism, then the second encrypted data will be sent to the second target user.

[0037] Preferably, after the second target user receives the second encrypted data, the process includes:

[0038] Obtain the tagging information of the second ciphertext data;

[0039] The tagging information is parsed to obtain the time information, address information, and name information.

[0040] Determine whether the name information is the same as the username in the second encrypted data;

[0041] If so, decrypt the second ciphertext data.

[0042] In a second aspect, a data transmission device includes:

[0043] The target data acquisition module is used to acquire the target data to be transmitted.

[0044] The user determination module is used to determine a first target user that transmits the target data and a second target user that is to receive the target data;

[0045] The authentication module is used to authenticate the first target user and determine whether the authentication is successful.

[0046] An encryption processing module is used to encrypt the target data if the condition is met, to obtain first ciphertext data.

[0047] The information acquisition module is used to acquire the generation time of the first encrypted data, the Internet Protocol address, and the username of the second target user;

[0048] The tagging module is used to tag the first ciphertext data using the generation time, Internet Protocol address, and username of the second target user to obtain the second ciphertext data.

[0049] The sending module is used to send the second encrypted data to the second target user to complete the data transmission.

[0050] Preferably, the authentication module includes:

[0051] The password determination module is used to obtain the login password corresponding to the first target user when transmitting the target data, and to determine the password level of the login password;

[0052] The first judgment module is used to determine whether the password level of the login password is greater than a preset threshold level;

[0053] The second judgment module is used to obtain the historical transmission records of the first target user if the condition is met, and to determine whether the first target user has triggered an error warning based on the historical transmission records.

[0054] The first verification success module is used to determine that the first target user has been successfully verified if the first target user has not triggered any error warnings.

[0055] The second verification success module is used to determine the number of times the first target user has triggered an error warning if the first target user has triggered an error warning, and to determine that the first target user has successfully verified if the number of times is not greater than the first preset threshold.

[0056] The verification failure module is used to determine that the verification of the first target user has failed if the number of failures exceeds a first preset threshold.

[0057] Thirdly, a data transmission device includes a memory and a processor;

[0058] The memory is used to store programs;

[0059] The processor is configured to execute the program to implement the various steps of the data transmission method as described in the first aspect.

[0060] Fourthly, a storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the data transmission method as described in the first aspect.

[0061] As can be seen from the above technical solution, this application obtains the target data to be transmitted; determines the first target user to transmit the target data and the second target user to receive the target data; authenticates the target user and determines whether the authentication is successful; if so, the target data is encrypted to obtain first ciphertext data; obtains the generation time, Internet Protocol address, and username of the second target user of the first ciphertext data; marks the first ciphertext data using the generation time, Internet Protocol address, and username of the second target user to obtain second ciphertext data; and sends the second ciphertext data to the second target user to complete the data transmission. This solution first authenticates the first target user to ensure the security of the user's identity. If the authentication is successful, the target data to be transmitted is encrypted to obtain first ciphertext data. Then, double protection is implemented, namely, obtaining multiple features of the first ciphertext data: generation time and Internet Protocol address, and then marking the first ciphertext data using the username of the second target user, thereby ensuring correspondence with the second ciphertext data while performing secondary encryption on the data, and finally sending it to the second target user. This can guarantee the authenticity, confidentiality, and integrity of the data. Attached Figure Description

[0062] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on the provided drawings without creative effort.

[0063] Figure 1 An optional flowchart of a data transmission method provided in an embodiment of this application;

[0064] Figure 2 This is a schematic diagram of the structure of a data transmission device provided in an embodiment of this application;

[0065] Figure 3 This is a schematic diagram of the structure of a data transmission device provided in an embodiment of this application. Detailed Implementation

[0066] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0067] Data transmission is the process of transferring data from a data source to a data terminal according to certain procedures through one or more data links. Its main function is to realize the transmission and exchange of information between points. In a typical data transmission system, the input and output devices are terminals or computers, and the data information sent by each party is usually letters, numbers, symbols, or combinations thereof. To ensure the security, authenticity, and integrity of data transmission, the transmitted data needs to be encrypted or otherwise processed to ensure that the data is not easily leaked during transmission.

[0068] However, the current data transmission process still has many vulnerabilities and cannot truly guarantee the security, authenticity, and integrity of the transmitted data, which can easily lead to data transmission chaos.

[0069] This invention provides a data transmission method that can be applied to various computer terminals or smart terminals. The executing entity can be the processor or server of the computer terminal or smart terminal. The method flowchart is shown below. Figure 1 As shown, it specifically includes:

[0070] S1: Obtain the target data to be transmitted.

[0071] The data transmission method provided in this application can be applied to various types of data, including voice data, video data, transaction data, etc., and this embodiment does not impose any limitations on this. This application first acquires the target data to be transmitted for subsequent operations.

[0072] S2: Determine the first target user to transmit the target data, and the second target user to receive the target data.

[0073] For the target data that needs to be transmitted, there are corresponding first target users (transmitter / sender) and second target users (receiver / transmission object), so this step needs to clarify these two users.

[0074] S3: Verify the identity of the first target user and determine whether the verification was successful.

[0075] Specifically, authenticating the first target user can protect the security of the transmission channel or transmission system, preventing malicious transmission from affecting the second target user, or malicious users from transmitting illegal data from affecting the transmission of normal data. If the first target user is successfully authenticated, subsequent operations can continue; if the first target user fails to authenticate, the background can be intercepted to stop the transmission of target data, or the target data can be sent back to the first target user for modification.

[0076] S4: If so, the target data is encrypted to obtain the first ciphertext data.

[0077] Encrypting target data can prevent it from being stolen or tampered with by malicious users or malware, thus ensuring its security, authenticity, and integrity. The AES encryption algorithm can be used, which improves encryption efficiency and allows for different cipher standards to achieve higher levels of encryption.

[0078] S5: Obtain the generation time of the first encrypted data, the Internet Protocol address, and the username of the second target user.

[0079] S6: Using the generation time, Internet Protocol address, and username of the second target user, mark the first ciphertext data to obtain the second ciphertext data.

[0080] After encryption, the first ciphertext data is obtained. The time of encryption completion is used as the generation time of the first ciphertext data. The Internet Protocol address of the first ciphertext data can indicate its source. The authenticity of the first ciphertext data can be determined based on the Internet Protocol address. The user's username is unique. Adding the username of the second target user can ensure that the second target user is the real data recipient. Combining the generation time, Internet Protocol address, and the username of the second target user to mark the first ciphertext data can make the target data more secure.

[0081] S7: Send the second encrypted data to the second target user to complete the data transmission.

[0082] As can be seen from the above technical solution, this application obtains the target data to be transmitted; determines the first target user to transmit the target data and the second target user to receive the target data; authenticates the target user and determines whether the authentication is successful; if so, the target data is encrypted to obtain first ciphertext data; obtains the generation time, Internet Protocol address, and username of the second target user of the first ciphertext data; marks the first ciphertext data using the generation time, Internet Protocol address, and username of the second target user to obtain second ciphertext data; and sends the second ciphertext data to the second target user to complete the data transmission. This solution first authenticates the first target user to ensure the security of the user's identity. If the authentication is successful, the target data to be transmitted is encrypted to obtain first ciphertext data. Then, double protection is implemented, namely, obtaining multiple features of the first ciphertext data: generation time and Internet Protocol address, and then marking the first ciphertext data using the username of the second target user, thereby ensuring correspondence with the second ciphertext data while performing secondary encryption on the data, and finally sending it to the second target user. This can guarantee the authenticity, confidentiality, and integrity of the data.

[0083] The process of authenticating the first target user and determining whether the authentication is successful, as provided in the embodiments of the present invention, is described in detail below:

[0084] Obtain the login password of the first target user when transmitting the target data, and determine the password level of the login password;

[0085] Determine whether the password level of the login password is greater than a preset threshold level;

[0086] If so, obtain the historical transmission records of the first target user, and determine whether the first target user has triggered an error warning based on the historical transmission records;

[0087] If the first target user has not triggered any error warnings, then the first target user is confirmed to have been successfully verified.

[0088] If the first target user has triggered an error warning, the number of times the first target user has triggered an error warning is determined. If the number of times is not greater than the first preset threshold, the first target user is determined to have successfully verified.

[0089] If the number of attempts exceeds a first preset threshold, then the verification of the first target user is determined to have failed.

[0090] Understandably, verifying the login password of the primary target user can determine the security of the user's account. The higher the password strength, the more secure the account and the less likely it is to be stolen. In addition, it is necessary to obtain the primary target user's historical transmission records to check the user's "reputation". If the primary target user has not triggered any error warnings, that is, has good reputation, then it can be regarded as a high-quality user, and the data transmitted by it can be considered safe and compliant. If the primary target user has triggered error warnings, then it is necessary to determine the number of error warnings triggered. The higher the number of warnings, the less secure the user is.

[0091] In the above scheme, role-based access control (RBAC) and task-based access control (TBAC) can be set to strengthen the management of the first target user and the second target user. Risk assessment can also be performed on the first target user and the second target user to ensure the success rate of data transmission.

[0092] Optionally, after the first target user initiates data transmission, anomaly monitoring can be performed on both the first and second target users. Anomaly detection technology can be used to detect any abnormal activity, and if any abnormal behavior is detected, their operations will be immediately frozen and data transmission will be stopped. Additionally, the conversations and chats between the first and second target users can also be monitored; if any anomalies are detected, the chat window can be controlled. Furthermore, the login and online status of both the first and second target users can be monitored to prevent third-party users from stealing accounts or forcibly interfering. All of the above monitoring processes and results can be saved and backed up for later verification.

[0093] The above embodiments describe the process of authenticating the first target user and determining whether the authentication is successful in this application. The following describes in detail the steps of encrypting the target data to obtain the first ciphertext data.

[0094] Determine the key length and encryption parameters corresponding to the target data;

[0095] The target key is generated according to the stated key length and using a pre-acquired random number generator.

[0096] The target data is encrypted using the target key and encryption parameters to obtain ciphertext data.

[0097] Specifically, the encryption parameters include features such as encryption mode and padding mode, and the key length can be set to 256 bits; this embodiment does not impose this limitation. When the second target user performs decryption, the correct key length and encryption parameters must be used to successfully decrypt and obtain the target data.

[0098] The following embodiments provide a detailed description of the steps in this application for marking the first ciphertext data using the generation time, Internet Protocol address, and username of the second target user to obtain the second ciphertext data.

[0099] Set the barcode length, and convert the generation time into a first target barcode according to the barcode length;

[0100] The Internet Protocol address is converted into a second target barcode according to the stated barcode length;

[0101] The username of the second target user is converted into a third target barcode according to the barcode length.

[0102] The first target barcode, the second target barcode, and the third target barcode are combined to obtain a comprehensive target barcode;

[0103] The integrated target barcode is used as a label to mark the first encrypted data to obtain the second encrypted data.

[0104] The barcode length can be set to 8 bits. For example, if the generation time of the first encrypted data is 20230101, then the first target barcode can be 10103202 / 20230101 / 01012023 / 02321010. Alternatively, a binary method can be used for conversion. The three target barcodes can be combined using normal addition or binary arithmetic.

[0105] Furthermore, before sending the second encrypted data to the second target user, this application also includes:

[0106] Traffic identification is performed on the second ciphertext data to determine the different data streams of the second ciphertext data;

[0107] Analyze the network traffic of each of the data streams to determine if any potential problems exist in each of the data streams;

[0108] Treat each data stream with potential problems as a separate problem data stream;

[0109] For each problematic data stream, determine whether the problematic data stream will trigger a preset alarm mechanism;

[0110] If none of the aforementioned problematic data streams trigger the alarm mechanism, then the second encrypted data will be sent to the second target user.

[0111] Specifically, if problematic data streams exist, they can be tracked, including their connection status and port information, and then traced, identified, and recorded. Problematic data streams can also be filtered and controlled to prevent unnecessary and harmful traffic from being transmitted and harming the transmission environment. Furthermore, traffic identification results, network traffic analysis results, filtering, warnings, and control results can all be saved as transmission logs for subsequent tracing.

[0112] The data transmission method provided in this application can be used in an event management system to record the occurrence time, location, cause, impact, and handling records of each time node during the data transmission process, and generate an analysis report.

[0113] Applying the data transmission method provided in this embodiment to the power industry, the execution entity of this method is a data transmission terminal. This terminal can be connected to an access control unit, an anti-tampering unit, a risk assessment database, and a real-time monitoring module. The access control unit controls access to the stored data transmission process, allowing only authorized personnel to access it. The anti-tampering unit can sign the data transmission channel and provide outer protection for the data during transmission. The risk assessment database is a local database that can record the risk assessment results of the data transmission process in various power operations and perform data analysis and risk assessment. The real-time monitoring module uses sensors and monitoring equipment to monitor and collect data on the data transmission process between power equipment in real time.

[0114] Furthermore, after the second target user receives the second encrypted data, this method further includes:

[0115] Obtain the tagging information of the second ciphertext data;

[0116] The tagging information is parsed to obtain the time information, address information, and name information.

[0117] Determine whether the name information is the same as the username in the second encrypted data;

[0118] If so, decrypt the second ciphertext data.

[0119] Specifically, the second target user can use a Message Authentication Code (MAC) to verify the integrity of the second ciphertext data. The HMAC-SHA256 authentication algorithm is used for verification to ensure that the second ciphertext data is exactly the same as the target data, and to identify whether the target data has been tampered with.

[0120] and Figure 1 Corresponding to the method described above, embodiments of the present invention also provide a data transmission device for transmitting data. Figure 1In a specific implementation of the method, the data transmission device provided in this embodiment of the invention can be used in a computer terminal or various mobile devices, in conjunction with... Figure 2 The text describes the data transmission device, such as... Figure 2 As shown, the device may include:

[0121] Target data acquisition module 10 is used to acquire target data to be transmitted;

[0122] User determination module 20 is used to determine a first target user that transmits the target data and a second target user that is to receive the target data;

[0123] The authentication module 30 is used to authenticate the first target user and determine whether the authentication is successful.

[0124] The encryption processing module 40 is used to encrypt the target data if the condition is met, to obtain the first ciphertext data.

[0125] Information acquisition module 50 is used to acquire the generation time of the first encrypted data, the Internet Protocol address, and the username of the second target user;

[0126] The tagging module 60 is used to tag the first ciphertext data using the generation time, Internet Protocol address and the username of the second target user to obtain the second ciphertext data;

[0127] The sending module 70 is used to send the second encrypted data to the second target user to complete the data transmission.

[0128] As can be seen from the above technical solution, this application obtains the target data to be transmitted; determines the first target user to transmit the target data and the second target user to receive the target data; authenticates the target user and determines whether the authentication is successful; if so, the target data is encrypted to obtain first ciphertext data; obtains the generation time, Internet Protocol address, and username of the second target user of the first ciphertext data; marks the first ciphertext data using the generation time, Internet Protocol address, and username of the second target user to obtain second ciphertext data; and sends the second ciphertext data to the second target user to complete the data transmission. This solution first authenticates the first target user to ensure the security of the user's identity. If the authentication is successful, the target data to be transmitted is encrypted to obtain first ciphertext data. Then, double protection is implemented, namely, obtaining multiple features of the first ciphertext data: generation time and Internet Protocol address, and then marking the first ciphertext data using the username of the second target user, thereby ensuring correspondence with the second ciphertext data while performing secondary encryption on the data, and finally sending it to the second target user. This can guarantee the authenticity, confidentiality, and integrity of the data.

[0129] In one example, the authentication module 30 may include:

[0130] The password determination module is used to obtain the login password corresponding to the first target user when transmitting the target data, and to determine the password level of the login password;

[0131] The first judgment module is used to determine whether the password level of the login password is greater than a preset threshold level;

[0132] The second judgment module is used to obtain the historical transmission records of the first target user if the condition is met, and to determine whether the first target user has triggered an error warning based on the historical transmission records.

[0133] The first verification success module is used to determine that the first target user has been successfully verified if the first target user has not triggered any error warnings.

[0134] The second verification success module is used to determine the number of times the first target user has triggered an error warning if the first target user has triggered an error warning, and to determine that the first target user has successfully verified if the number of times is not greater than the first preset threshold.

[0135] The verification failure module is used to determine that the verification of the first target user has failed if the number of failures exceeds a first preset threshold.

[0136] Furthermore, embodiments of this application provide a data transmission device. Optionally, Figure 3 The hardware structure block diagram of the data transmission device is shown, with reference to... Figure 3 The hardware structure of the data transmission device may include: at least one processor 01, at least one communication interface 02, at least one memory 03, and at least one communication bus 04.

[0137] In this embodiment, the number of processor 01, communication interface 02, memory 03 and communication bus 04 is at least one, and processor 01, communication interface 02 and memory 03 communicate with each other through communication bus 04.

[0138] Processor 01 may be a central processing unit (CPU), an application-specific integrated circuit (ASIC), or one or more integrated circuits configured to implement embodiments of the present invention.

[0139] Memory 03 may include high-speed RAM, and may also include non-volatile memory, such as at least one disk storage device.

[0140] The memory stores a program, which the processor can call to execute. The program is used to perform the following data transfer methods, including:

[0141] Obtain the target data to be transmitted;

[0142] Identify a first target user to transmit the target data, and a second target user to receive the target data;

[0143] The first target user is authenticated, and it is determined whether the authentication was successful.

[0144] If so, the target data is encrypted to obtain the first ciphertext data;

[0145] Obtain the generation time, Internet Protocol address, and username of the second target user of the first encrypted data;

[0146] Using the generation time, Internet Protocol address, and username of the second target user, the first ciphertext data is marked to obtain the second ciphertext data;

[0147] The second encrypted data is sent to the second target user to complete the data transmission.

[0148] Optionally, the refined and extended functions of the program can be found in the description of the data transmission method in the method embodiments.

[0149] This application embodiment also provides a storage medium that can store a program suitable for execution by a processor. When the program runs, it controls the device where the storage medium is located to execute the following data transmission method, including:

[0150] Obtain the target data to be transmitted;

[0151] Identify a first target user to transmit the target data, and a second target user to receive the target data;

[0152] The first target user is authenticated, and it is determined whether the authentication was successful.

[0153] If so, the target data is encrypted to obtain the first ciphertext data;

[0154] Obtain the generation time, Internet Protocol address, and username of the second target user of the first encrypted data;

[0155] Using the generation time, Internet Protocol address, and username of the second target user, the first ciphertext data is marked to obtain the second ciphertext data;

[0156] The second encrypted data is sent to the second target user to complete the data transmission.

[0157] Specifically, the storage medium can be a computer-readable storage medium, which can be an electronic storage device such as flash memory, EEPROM (Electrically Erasable Programmable Read-Only Memory), EPROM, hard disk, or ROM.

[0158] Optionally, the refined and extended functions of the program can be found in the description of the data transmission method in the method embodiments.

[0159] Furthermore, the functional modules in the various embodiments of this disclosure can be integrated together to form an independent part, or each module can exist independently, or two or more modules can be integrated to form an independent part. If the function is implemented as a software functional module and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this disclosure, in essence, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, a live streaming device, or a network device, etc.) to execute all or part of the steps of the methods in the various embodiments of this disclosure.

[0160] Finally, it should be noted that in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0161] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on the differences from other embodiments. The same or similar parts between the various embodiments can be referred to each other.

[0162] The above description of the disclosed embodiments enables those skilled in the art to make or use this application. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of this application. Therefore, this application is not to be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A data transmission method, characterized in that, include: Obtain the target data to be transmitted; Identify a first target user to transmit the target data, and a second target user to receive the target data; The first target user is authenticated, and it is determined whether the authentication was successful. If so, the target data is encrypted to obtain the first ciphertext data; Obtain the generation time, Internet Protocol address, and username of the second target user of the first encrypted data; Using the generation time, Internet Protocol address, and username of the second target user, the first encrypted data is marked to obtain the second encrypted data; this includes: setting a barcode length and converting the generation time into a first target barcode according to the barcode length; converting the Internet Protocol address into a second target barcode according to the barcode length; converting the username of the second target user into a third target barcode according to the barcode length; combining the first target barcode, the second target barcode, and the third target barcode to obtain a composite target barcode; and using the composite target barcode as a label to mark the first encrypted data to obtain the second encrypted data. The second encrypted data is sent to the second target user to complete the data transmission; after the second target user receives the second encrypted data, the tag information of the second encrypted data is obtained; the tag information is parsed to obtain the time information, address information and name information in the tag information; it is determined whether the name information is the same as the username of the second encrypted data; if so, the second encrypted data is decrypted.

2. The method according to claim 1, characterized in that, The step of authenticating the first target user and determining whether the authentication was successful includes: Obtain the login password of the first target user when transmitting the target data, and determine the password level of the login password; Determine whether the password level of the login password is greater than a preset threshold level; If so, obtain the historical transmission records of the first target user, and determine whether the first target user has triggered an error warning based on the historical transmission records; If the first target user has not triggered any error warnings, then the first target user is confirmed to have been successfully verified. If the first target user has triggered an error warning, the number of times the first target user has triggered an error warning is determined. If the number of times is not greater than a first preset threshold, the first target user is determined to have successfully verified. If the number of attempts exceeds a first preset threshold, then the verification of the first target user is determined to have failed.

3. The method according to claim 1, characterized in that, The encryption process of the target data to obtain the first ciphertext data includes: Determine the key length and encryption parameters corresponding to the target data; The target key is generated according to the stated key length and using a pre-acquired random number generator. The target data is encrypted using the target key and encryption parameters to obtain ciphertext data.

4. The method according to claim 1, characterized in that, Before sending the second encrypted data to the second target user, the method further includes: Traffic identification is performed on the second ciphertext data to determine the different data streams of the second ciphertext data; Analyze the network traffic of each of the data streams to determine if any potential problems exist in each of the data streams; Treat each data stream with potential problems as a separate problem data stream; For each problematic data stream, determine whether the problematic data stream will trigger a preset alarm mechanism; If none of the aforementioned problematic data streams trigger the alarm mechanism, then the second encrypted data will be sent to the second target user.

5. A data transmission device, characterized in that, include: The target data acquisition module is used to acquire the target data to be transmitted. The user determination module is used to determine a first target user that transmits the target data and a second target user that is to receive the target data; The authentication module is used to authenticate the first target user and determine whether the authentication is successful. An encryption processing module is used to encrypt the target data if the condition is met, to obtain first ciphertext data. The information acquisition module is used to acquire the generation time of the first encrypted data, the Internet Protocol address, and the username of the second target user; A tagging module is used to tag the first encrypted data using the generation time, Internet Protocol address, and username of the second target user to obtain second encrypted data. The module includes: setting a barcode length and converting the generation time into a first target barcode according to the barcode length; converting the Internet Protocol address into a second target barcode according to the barcode length; converting the username of the second target user into a third target barcode according to the barcode length; combining the first target barcode, the second target barcode, and the third target barcode to obtain a composite target barcode; and using the composite target barcode as a tag to tag the first encrypted data to obtain the second encrypted data. The sending module is used to send the second encrypted data to the second target user to complete the data transmission; after the second target user receives the second encrypted data, it obtains the tag information of the second encrypted data; it parses the tag information to obtain the time information, address information and name information in the tag information; it determines whether the name information is the same as the username of the second encrypted data; if so, it decrypts the second encrypted data.

6. The apparatus according to claim 5, characterized in that, The authentication module includes: The password determination module is used to obtain the login password corresponding to the first target user when transmitting the target data, and to determine the password level of the login password; The first judgment module is used to determine whether the password level of the login password is greater than a preset threshold level; The second judgment module is used to obtain the historical transmission records of the first target user if the condition is met, and to determine whether the first target user has triggered an error warning based on the historical transmission records. The first verification success module is used to determine that the first target user has been successfully verified if the first target user has not triggered any error warnings. The second verification success module is used to determine the number of times the first target user has triggered an error warning if the first target user has triggered an error warning, and to determine that the first target user has successfully verified if the number of times is not greater than a first preset threshold. The verification failure module is used to determine that the verification of the first target user has failed if the number of failures exceeds a first preset threshold.

7. A data transmission device, characterized in that, Including memory and processor; The memory is used to store programs; The processor is configured to execute the program to implement the various steps of the data transmission method as described in any one of claims 1-4.

8. A storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the various steps of the data transmission method as described in any one of claims 1-4.

Images