A network communication security protection system based on big data
By dynamically adjusting the size of data blocks and randomly selecting communication paths, the problems of insufficient data transmission delay and security in the prior art are solved, and a more efficient and reliable network communication security protection system is realized.
Patent Information
- Application Number
- CN202410593964.5
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2024-05-14
- Publication Date
- 2024-12-13
- Estimated Expiration
- 2044-05-14
AI Technical Summary
In the prior art, the five equally uniform segmentation method with fixed data segmentation strategy does not adapt to the complexity and dynamic changes of the network environment, resulting in an extended transmission time, and a single communication path is easily intercepted and tampered by attackers in complex networks, resulting in data Leaked or damaged.
The data block size is dynamically adjusted through the data blocking module, and the communication path is randomly selected in combination with the node path selection module. The data block is encrypted using the encryption algorithm, and the data transmission security is ensured through the reception and reorganization module and the error and retransmission module. Integrity.
Optimize network resource utilization, reduce transmission delay and congestion, reduce the risk of data intercept or tampering, ensure data continuity and reliability, adapt to different network topology and business needs, and improve system stability and availability. .
Smart Images

Figure CN118337777B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of network communication technology, and in particular to a network communication security protection system based on big data. Background Art
[0002] In the Chinese invention application with application publication number CN116506201A, a network communication security protection system based on big data is disclosed, which includes an information acquisition unit, a data segmentation unit, a data encryption unit, an information storage unit, a data recovery unit, and an information output unit. It relates to the field of communication security protection technology and solves the technical problems of large capacity and slow transmission speed, and secondly, the technical problem that large-capacity information may be stolen during the transmission process.
[0003] In combination with the above invention applications, the prior art has the following deficiencies:
[0004] 1. The current data segmentation strategy uses a fixed five-part even segmentation method, which does not take into account the complexity and dynamic changes of the actual network environment. This static segmentation method may not be suitable for all situations, especially in environments with fluctuating network bandwidth, varying delays, or high packet loss rates, which results in longer transmission time and even packet loss.
[0005] 2. Data transmission relies on a single communication path. This transmission method has obvious limitations in security. In a complex network environment, single-path transmission can be easily intercepted and tampered with by potential attackers, resulting in data leakage or damage. Summary of the invention
[0006] 1. Technical issues to be resolved
[0007] In view of the shortcomings of the prior art, the present invention provides a network communication security protection system based on big data, which optimizes the utilization of network resources and reduces unnecessary network congestion and delays by segmenting data and dynamically adjusting the size of data blocks. The random selection of communication paths makes it difficult for attackers to predict and track the transmission path of data, thereby reducing the risk of data being intercepted or tampered with, thereby solving the technical problems recorded in the background technology.
[0008] (II) Technical solution
[0009] To achieve the above objectives, the present invention is implemented through the following technical solutions: A network communication security protection system based on big data, including: a data block module, a node path selection module, a data block encryption module, a data block allocation and transmission module, a receiving and reassembly module, and an error and retransmission module; wherein,
[0010] The data block module initializes the data block size, calculates the network communication efficiency coefficient and the network communication stability coefficient through bandwidth, delay, jitter and packet loss rate, calculates the data block adjustment coefficient through the network communication efficiency coefficient and the network communication stability coefficient, adjusts the data block initial value according to the data block adjustment coefficient, and divides the data into several data blocks;
[0011] The node path selection module identifies different alternative communication paths according to the network topology, obtains the network communication efficiency coefficient and the network communication stability coefficient of each alternative communication path, calculates the communication quality evaluation value of each alternative communication path, sorts all the alternative communication paths from small to large according to the communication quality evaluation value, and selects the first several alternative communication paths from the sorted path list as the formal communication paths;
[0012] A data block encryption module encrypts each data block using an encryption algorithm, wherein the encryption algorithm includes a symmetric encryption algorithm and an asymmetric encryption algorithm;
[0013] The data block allocation and transmission module selects a formal communication path from the list and transmits the encrypted data block through the formal communication path until all the data blocks are transmitted;
[0014] The receiving and reassembling module receives data blocks from the data sender, stores the data blocks in a buffer, and takes out corresponding data blocks from the buffer to reassemble them in sequence;
[0015] The error and retransmission module counts the number of data blocks, determines the missing data blocks, returns the identification of the missing data blocks to the data sender, requests the retransmission of the missing data blocks, and closes the formal communication path that originally transmitted the missing data blocks.
[0016] Furthermore, the network performance tool is used to monitor the network environment data, including bandwidth, delay, jitter, and packet loss rate. The bandwidth, delay, jitter, and packet loss rate are normalized and calculated as follows:
[0017]
[0018] Among them, Ba i Denotes bandwidth, i Indicates delay, Jt i Indicates jitter, Pl i represents the packet loss rate, i represents the number of the monitoring data, i=1, 2, ..., N, where N is a positive integer.
[0019] Furthermore, the network communication efficiency coefficient and the network communication stability coefficient are calculated by normalizing the bandwidth, delay, jitter and packet loss rate. The calculation formula is as follows:
[0020]
[0021] Among them, Nc i Represents the network communication efficiency coefficient, Ns i Indicates the network communication stability coefficient, Ba i Denotes bandwidth, i Indicates delay, Jt i Indicates jitter, Rl i represents the packet loss rate, i represents the number of the monitoring data, i=1, 2, ..., N, where N is a positive integer.
[0022] Furthermore, the network communication efficiency coefficient and the network communication stability coefficient are dimensionlessly processed to calculate the data block adjustment coefficient. The calculation formula is as follows:
[0023]
[0024] Where Dc represents the data block adjustment coefficient, Nc i Represents the network communication efficiency coefficient, Ns i represents the network communication stability coefficient, i represents the number of the monitoring data, i=1, 2,…, N, N is a positive integer.
[0025] Furthermore, the initial value of the data block is adjusted according to the data block adjustment coefficient, and the data block adjustment value is calculated. The calculation formula is as follows:
[0026] Bs=Dc*Bs0
[0027] Among them, Bs represents the adjusted data block adjustment value, Dc represents the data block adjustment coefficient, and Bs0 represents the data block initial value.
[0028] Furthermore, the network communication efficiency coefficient and the network communication stability coefficient of each candidate communication path are obtained, and the communication quality evaluation value of each candidate communication path is calculated. The calculation formula is as follows:
[0029]
[0030] Where Cq represents the communication quality evaluation value of each candidate communication path, Nc i Represents the network communication efficiency coefficient, Ns i represents the network communication stability coefficient, i represents the number of the monitoring data, i=1, 2,…, N, N is a positive integer.
[0031] Furthermore, the specific steps of transmitting through the formal communication path include: establishing a list of formal communication paths, using a random algorithm to randomly select a formal communication path from the list, transmitting the encrypted data block through the selected formal communication path, and after a data block is transmitted, checking whether there are any remaining data blocks to be transmitted. If there are remaining data blocks, repeating the above-mentioned random path selection and data block transmission process until all data blocks are transmitted.
[0032] Furthermore, the specific steps of taking out corresponding data blocks from the buffer and reorganizing them in sequence include:
[0033] Monitor the designated communication port or interface, capture the data blocks from the data sender, including ordinary data blocks and index data blocks, manage one or more buffers for temporarily storing the received data blocks, and when the index data block is received, parse the order of the data block identifiers therein, take out the corresponding data blocks from the buffer according to the parsed order, and reorganize them in the correct order.
[0034] Furthermore, the specific steps of requesting retransmission of the missing data block include:
[0035] Receive data blocks from the data sender, count the number of received data blocks in real time, associate each received data block with its data block identifier, and record it in the local database;
[0036] Compare the number of received data blocks with the total number of data blocks expected to be received. When the two are not equal, query the received data block identifier list in the local database, and identify the missing data block identifier by comparing the expected received data block identifier list with the received data block identifier list;
[0037] Once the missing data block identifier is determined, a retransmission request is generated, and the identifier of the missing data block is included in the request, which is sent to the data sender to request it to retransmit the missing data block;
[0038] When the data sender receives the retransmission request, it resends the corresponding data block according to the missing data block identifier in the request, closes the formal communication path that originally transmitted the missing data block, and selects another formal communication path from the formal communication path list for transmission.
[0039] (III) Beneficial effects
[0040] The present invention provides a network communication security protection system based on big data, which has the following beneficial effects:
[0041] (1) By segmenting data and dynamically adjusting the data block size, we can optimize the utilization of network resources and reduce unnecessary network congestion and delay. When bandwidth is limited, appropriately reducing the data block size can ensure faster data transmission; when bandwidth is sufficient, appropriately increasing the data block size can improve transmission efficiency.
[0042] (2) By evaluating the communication quality assessment value of each alternative communication path, the path with the highest efficiency and the best stability can be selected for data transmission, thereby reducing data transmission time and cost, ensuring the continuity and reliability of communication, and dynamically identifying and adjusting alternative communication paths to adapt to changes in network topology and new business needs.
[0043] (3) Randomly selecting communication paths makes it difficult for attackers to predict and track the data transmission path, thereby reducing the risk of data being intercepted or tampered with. The establishment of a formal communication path list helps to flexibly configure and manage communication paths, adding or deleting paths according to actual needs. The algorithm for randomly selecting communication paths can also be adjusted and optimized according to the network environment and business needs to adapt to different application scenarios and scenario changes.
[0044] (4) When a communication path fails, it can quickly identify and close the path to prevent further data loss. At the same time, it can also request the data sender to retransmit the missing data blocks to ensure data continuity and integrity. It can quickly recover and continue to operate in the event of a failure, thereby improving availability and stability. BRIEF DESCRIPTION OF THE DRAWINGS
[0045] Figure 1 It is a schematic diagram of the structure of the network communication security protection system based on big data of the present invention. DETAILED DESCRIPTION
[0046] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.
[0047] See also Figure 1 The present invention provides a network communication security protection system based on big data, including: a data segmentation module, a node path selection module, a data block encryption module, a data block allocation and transmission module, a receiving and reassembly module, and an error and retransmission module; wherein,
[0048] The data block module initializes the data block size, calculates the network communication efficiency coefficient and the network communication stability coefficient through bandwidth, delay, jitter and packet loss rate, calculates the data block adjustment coefficient through the network communication efficiency coefficient and the network communication stability coefficient, adjusts the data block initial value according to the data block adjustment coefficient, and divides the data into several data blocks;
[0049] Specifically, the data block size is initialized, a range of the data block size is pre-set, for example, a range of 1MB to 100MB, and a value within the range is selected as the data block initial value, for example, a median value of the range;
[0050] Use network performance tools to monitor network environment data, including bandwidth, delay, jitter, and packet loss rate. Normalize bandwidth, delay, jitter, and packet loss rate. The calculation formula is as follows:
[0051]
[0052] Among them, Ba i Denotes bandwidth, i Indicates delay, Jt i Indicates jitter, Pl i represents the packet loss rate, i represents the number of the monitoring data, i=1, 2, ..., N, N is a positive integer;
[0053] It should be noted that bandwidth refers to the amount of data that a network can transmit per unit time. High bandwidth means faster data transmission speed. Latency refers to the time required for a data packet to travel from the sender to the receiver. Low latency means faster network response speed. Jitter, also known as delay variation, refers to the instability of the arrival time of data packets. Low jitter is essential for real-time communications such as voice and video. Packet loss rate refers to the ratio of the number of data packets lost during transmission to the total number of data packets sent. Low packet loss rate means higher data transmission reliability.
[0054] The network communication efficiency coefficient and network communication stability coefficient are calculated by normalizing the bandwidth, delay, jitter and packet loss rate. The calculation formula is as follows:
[0055]
[0056] Among them, Nc i Represents the network communication efficiency coefficient, Ns i Indicates the network communication stability coefficient, Ba i Denotes bandwidth, i Indicates delay, Jt i Indicates jitter, Pl i represents the packet loss rate, i represents the number of the monitoring data, i=1, 2, ..., N, N is a positive integer;
[0057] The data block adjustment coefficient is calculated by dimensionless processing through the network communication efficiency coefficient and the network communication stability coefficient. The calculation formula is as follows:
[0058]
[0059] Where Dc represents the data block adjustment coefficient, Nc i Represents the network communication efficiency coefficient, Ns i represents the network communication stability coefficient, i represents the number of the monitoring data, i=1, 2, ..., N, N is a positive integer;
[0060] The initial value of the data block is adjusted according to the data block adjustment coefficient, and the data block adjustment value is calculated. The calculation formula is as follows:
[0061] Bs=Dc*Bs0
[0062] Wherein, Bs represents the adjusted data block adjustment value, Dc represents the data block adjustment coefficient, and Bs0 represents the data block initial value;
[0063] The data is divided into blocks according to the data block adjustment value, and a unique check value or hash value, namely the data block identifier, is generated for each data block.
[0064] It should be noted that based on the adjustment of the network communication efficiency coefficient and the network communication stability coefficient, it is possible to dynamically adapt to changes in the network environment. In the case of a high packet loss rate or large jitter, reducing the data block size can reduce the error probability of data transmission and improve communication stability.
[0065] By segmenting data and dynamically adjusting the size of data blocks, we can optimize the utilization of network resources and reduce unnecessary network congestion and delays. When bandwidth is limited, appropriately reducing the size of data blocks can ensure faster data transmission; and when bandwidth is sufficient, appropriately increasing the size of data blocks can improve transmission efficiency.
[0066] The node path selection module identifies different alternative communication paths according to the network topology, obtains the network communication efficiency coefficient and the network communication stability coefficient of each alternative communication path, calculates the communication quality evaluation value of each alternative communication path, sorts all the alternative communication paths from small to large according to the communication quality evaluation value, and selects the first several alternative communication paths from the sorted path list as the formal communication paths;
[0067] Specifically, obtaining network communication information, including a communication sender, a communication receiver, and a network topology structure, and identifying different alternative communication paths based on the network topology structure;
[0068] It should be noted that by analyzing the network topology, we can understand the location and connection relationship of each node in the network (such as routers, switches, servers, etc.). Through the topology, we can identify potential communication paths, which are composed of a series of interconnected nodes;
[0069] The network communication efficiency coefficient and network communication stability coefficient of each candidate communication path are obtained, and the communication quality evaluation value of each candidate communication path is calculated. The calculation formula is as follows:
[0070]
[0071] Where Cq represents the communication quality evaluation value of each candidate communication path, Nc i Represents the network communication efficiency coefficient, Ns i represents the network communication stability coefficient, i represents the number of the monitoring data, i=1, 2, ..., N, N is a positive integer;
[0072] All candidate communication paths are sorted from small to large according to the communication quality evaluation values, and the first several candidate communication paths are selected from the sorted path list as formal communication paths.
[0073] It should be noted that when the communication quality evaluation value of the communication path is smaller, the communication quality of the communication path is higher, and conversely, when the communication quality evaluation value is larger, the communication quality of the communication path is lower, and the number of communication paths can be adjusted according to actual needs;
[0074] By evaluating the communication quality assessment value of each alternative communication path, the path with the highest efficiency and the best stability can be selected for data transmission, thereby reducing data transmission time and cost, ensuring the continuity and reliability of communication, and dynamically identifying and adjusting alternative communication paths to adapt to changes in network topology and new business needs.
[0075] A data block encryption module encrypts each data block using an encryption algorithm, wherein the encryption algorithm includes a symmetric encryption algorithm and an asymmetric encryption algorithm;
[0076] Symmetric encryption algorithm is a commonly used encryption method. The characteristic of this algorithm is that the same key is used for encryption and decryption. In the symmetric encryption algorithm, the data sender processes the plaintext (original data) and the encryption key together through a special encryption algorithm to generate a complex encrypted ciphertext for sending. After receiving the ciphertext, the data receiver uses the same key and algorithm to decrypt it to restore it to readable plaintext.
[0077] Asymmetric encryption algorithms use a pair of keys: a public key and a private key. The public key is used to encrypt information and anyone can obtain and use the public key, while the private key is used to decrypt information and only the owner of the private key can use it. This algorithm is particularly suitable for data encryption in distributed systems because the public key can be distributed publicly, while the private key is kept by each user. The asymmetric encryption algorithm has the function of digital signature, which can verify the authenticity and integrity of the data. In addition, since each user's private key is unique, the public key can be used to verify the authenticity of the source of the information, and the digital signature can be used to ensure that the sender cannot deny having sent the information.
[0078] The data block allocation and transmission module establishes a list of formal communication paths, randomly selects a formal communication path from the list using a random algorithm, and transmits the encrypted data block through the selected formal communication path until all data blocks are transmitted;
[0079] In the data block allocation and transmission module, a list of formal communication paths is established, and a formal communication path is randomly selected from the list using a random algorithm. The random algorithm can be a simple pseudo-random number generator or a more complex algorithm, such as a random number generator based on a hash function or an encryption algorithm;
[0080] The encrypted data blocks are transmitted through the selected formal communication path. After a data block is transmitted, the data block allocation and transmission module will check whether there are any remaining data blocks to be transmitted. If there are remaining data blocks, the above-mentioned random path selection and data block transmission process will be repeated until all data blocks are transmitted.
[0081] Randomly selecting communication paths makes it difficult for attackers to predict and track data transmission paths, thereby reducing the risk of data being intercepted or tampered with. The establishment of a formal communication path list helps to flexibly configure and manage communication paths, adding or deleting paths according to actual needs. The algorithm for randomly selecting communication paths can also be adjusted and optimized according to the network environment and business needs to adapt to different application scenarios and scenario changes.
[0082] The receiving and reassembling module receives data blocks from the data sender and stores the data blocks in a buffer. When receiving the index data block, it parses the data block identifier arrangement order therein, and takes out the corresponding data blocks from the buffer according to the parsed order and reassembles them in order.
[0083] Responsible for monitoring the specified communication port or interface to capture data blocks from the data sender. These data blocks may contain actual data content or exist as index data blocks, which indicate the reorganization order of other data blocks.
[0084] Manage one or more buffers for temporarily storing received data blocks. These buffers ensure that data blocks are not lost or damaged during the data reassembly process.
[0085] When receiving the index data block, parse the data block identifier arrangement order, convert this information into instructions that the module can understand, and provide necessary guidance for the reorganization of the data block;
[0086] Once the parsing of the index data blocks is completed, the corresponding data blocks are taken out from the buffer according to the parsed order and reassembled in the correct order.
[0087] The error and retransmission module counts the number of data blocks. When the number of received data blocks is not equal to the total number of data blocks expected to be received, a data identification query is performed to determine the missing data blocks, the identification of the missing data blocks is returned to the data sender, the missing data blocks are requested to be retransmitted, and the formal communication path for the original transmission of the missing data blocks is closed;
[0088] The error and retransmission module receives data blocks from the data sender, counts the number of received data blocks in real time, associates each received data block with its data block identifier, and records it in the local database;
[0089] Compare the number of received data blocks with the total number of expected received data blocks. If the two are not equal, it means that there are missing data blocks.
[0090] Querying a local database for a list of received data block identifiers, and identifying missing data block identifiers by comparing the list of expected data block identifiers with the list of received data block identifiers;
[0091] Once the missing data block identifier is determined, a retransmission request is generated, and the identifier of the missing data block is included in the request, which is sent to the data sender to request it to retransmit the missing data block;
[0092] When the data sender receives the retransmission request, it resends the corresponding data block according to the missing data block identifier in the request, closes the formal communication path that originally transmitted the missing data block, and selects another formal communication path from the formal communication path list for transmission.
[0093] When a communication path fails, it can quickly identify and close the path to prevent further data loss. At the same time, it can also request the data sender to retransmit the missing data blocks to ensure data continuity and integrity. It can quickly recover and continue to operate in the event of a failure, thereby improving availability and stability.
[0094] In the application, the several formulas involved are all calculated by removing dimensions and taking their numerical values. The formula is a formula of the most recent real situation obtained by collecting a large amount of data and performing software simulation. The coefficients in the formula are set by technicians in this field according to actual conditions.
[0095] The above embodiments may be implemented in whole or in part by software, hardware, firmware or any other combination thereof. When implemented by software, the above embodiments may be implemented in whole or in part in the form of a computer program product. A person of ordinary skill in the art may appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein may be implemented in combination with electronic hardware, computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution.
[0096] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, and may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.
[0097] The above description is only a specific implementation manner of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application.
Claims
1. A network communication security protection system based on big data, Features: include: The data block module initializes the data block size, calculates the network communication efficiency coefficient and the network communication stability coefficient through the network environment data, calculates the data block adjustment coefficient through the network communication efficiency coefficient and the network communication stability coefficient, adjusts the data block initial value according to the data block adjustment coefficient, and divides the data into several data blocks; The node path selection module identifies different alternative communication paths according to the network topology, obtains the network communication efficiency coefficient and the network communication stability coefficient of each alternative communication path, calculates the communication quality evaluation value of each alternative communication path, sorts all the alternative communication paths from small to large according to the communication quality evaluation value, and selects the first several alternative communication paths from the sorted path list as the formal communication paths; A data block encryption module encrypts each data block using an encryption algorithm, wherein the encryption algorithm includes a symmetric encryption algorithm and an asymmetric encryption algorithm; The data block allocation and transmission module selects a formal communication path from the list and transmits the encrypted data block through the formal communication path until all the data blocks are transmitted; The receiving and reassembling module receives data blocks from the data sender, stores the data blocks in a buffer, and takes out corresponding data blocks from the buffer to reassemble them in sequence; The error and retransmission module counts the number of data blocks, determines the missing data blocks, returns the identification of the missing data blocks to the data sender, requests the retransmission of the missing data blocks, and closes the formal communication path that originally transmitted the missing data blocks; Use network performance tools to monitor network environment data, including bandwidth, delay, jitter, and packet loss rate. Normalize bandwidth, delay, jitter, and packet loss rate. The calculation formula is as follows: Among them, Ba i Denotes bandwidth, i Indicates delay, Jt i Indicates jitter, Pl i represents the packet loss rate, i represents the number of the monitoring data, i=1,2,…,N, N is a positive integer; The network communication efficiency coefficient and network communication stability coefficient are calculated by normalizing the bandwidth, delay, jitter and packet loss rate. The calculation formula is as follows: Among them, Nc i Represents the network communication efficiency coefficient, Ns i Represents the network communication stability coefficient, Ba i Denotes bandwidth, i Indicates delay, Jt i Indicates jitter, Pl i represents the packet loss rate, i represents the number of the monitoring data, i=1,2,…,N, N is a positive integer; The data block adjustment coefficient is calculated by dimensionless processing through the network communication efficiency coefficient and the network communication stability coefficient. The calculation formula is as follows: Wherein, Dc represents the data block adjustment coefficient.
2. According to the big data-based network communication security protection system described in claim 1, Features: The initial value of the data block is adjusted according to the data block adjustment coefficient, and the data block adjustment value is calculated. The calculation formula is as follows: Bs=Dc*BSo Among them, Bs represents the adjusted data block adjustment value, Bs 0 Indicates the initial value of the data block.
3. According to the big data-based network communication security protection system of claim 1, Features: The network communication efficiency coefficient and network communication stability coefficient of each candidate communication path are obtained, and the communication quality evaluation value of each candidate communication path is calculated. The calculation formula is as follows: Wherein, Cq represents the communication quality evaluation value of each candidate communication path.
4. According to the big data-based network communication security protection system of claim 1, Features: The specific steps for transmission through the formal communication path include: Establish a list of formal communication paths, use a random algorithm to randomly select a formal communication path from the list, and transmit the encrypted data block through the selected formal communication path. After a data block is transmitted, check whether there are any remaining data blocks to be transmitted. If there are remaining data blocks, repeat the above-mentioned random path selection and data block transmission process until all data blocks are transmitted.
5. According to the big data-based network communication security protection system described in claim 1, Features: The specific steps of taking out the corresponding data blocks from the buffer and reorganizing them in sequence include: Monitor the designated communication port or interface, capture the data blocks from the data sender, including ordinary data blocks and index data blocks, manage one or more buffers for temporarily storing the received data blocks, and when the index data block is received, parse the order of the data block identifiers therein, take out the corresponding data blocks from the buffer according to the parsed order, and reorganize them in order.
6. According to the big data-based network communication security protection system of claim 1, Features: The specific steps of requesting retransmission of missing data blocks include: Receive data blocks from the data sender, count the number of received data blocks in real time, associate each received data block with its data block identifier, and record it in the local database; Compare the number of received data blocks with the total number of data blocks expected to be received. When the two are not equal, query the received data block identifier list in the local database, and identify the missing data block identifier by comparing the expected received data block identifier list with the received data block identifier list; Once the missing data block identifier is determined, a retransmission request is generated, and the identifier of the missing data block is included in the request, which is sent to the data sender to request it to retransmit the missing data block; When the data sender receives the retransmission request, it resends the corresponding data block according to the missing data block identifier in the request, closes the formal communication path that originally transmitted the missing data block, and selects another formal communication path from the formal communication path list for transmission.
