Network security transmission method, system, device and storage medium

Abstract

The present invention discloses a network security transmission method, system, device and storage medium, which relates to the technical field of network communication, and comprises a data generation module, a delay analysis module, a data division module and a data transmission module; the data generation module is used to generate a transmission data packet, output preparation transmission information and preparation output signal; the delay analysis module is used to detect network delay and output communication judgment information; the data division module is used to divide the transmission data and output the divided data packet; the present invention is used to solve the problem that the prior art lacks a method for analyzing the quality of network communication between devices that need to communicate before network transmission, which leads to the problem that when the data size of the data packet is too large, during the network transmission process, the large data flow will cause significant delay, which will affect the transmission efficiency of the network transmission during the data transmission process.

Description

Technical Field

[0001] The present invention relates to the field of network communication technology, and in particular to a network security transmission method, system, device and storage medium. Background Art

[0002] The network uses physical links to connect isolated workstations or hosts together to form data links, thereby achieving the purpose of resource sharing and communication; communication is the exchange and transmission of information between people through some kind of media; network communication is based on network communication protocols, which connect various isolated devices through the network and realize communication between people, people and computers, and computers through information exchange.

[0003] Existing improvements for network security transmission usually increase the complexity of data packet encryption to make the encrypted data packets more difficult to decipher. For example, in the Chinese patent with publication number CN115883264A, an information security transmission system and an information security transmission method are disclosed. The scheme converts the data packet into an image format through binary encoding based on the data packet. By transmitting the data packet in the image format, the probability of the original information being deciphered when the data is leaked can be reduced. However, in the existing improved method, before network transmission, there is a lack of a method for analyzing the quality of network communication between devices that need to communicate. When the data size of the data packet is too large, the large data flow will cause significant delays during the network transmission process; and if the connection is disconnected during the transmission process, the entire data flow will be lost and need to be retransmitted, which will affect the transmission efficiency of the network transmission during the data transmission process. In view of this, it is necessary to improve the existing network security transmission. Summary of the invention

[0004] The present invention aims to solve at least one of the technical problems in the prior art to a certain extent. By improving network secure transmission, it is used to solve the problem in the prior art that there is a lack of a method for analyzing the quality of network communication between devices that need to communicate before network transmission. When the data size of the data packet is too large, the large data flow will cause significant delays during the network transmission, which will affect the transmission efficiency of the network transmission during the data transmission process.

[0005] To achieve the above object, in a first aspect, the present invention provides a network security transmission method, comprising the following steps:

[0006] Generate a transmission data packet, output ready-to-transmit information and a ready-to-output signal, wherein the ready-to-transmit information includes a target address;

[0007] Receive the ready-to-output signal, detect network delay, and output communication judgment information;

[0008] Dividing the transmission data based on the communication judgment information and outputting a plurality of divided data packets;

[0009] Transmit the divided data packets, perform integrity verification on the divided data packets, and output transmission completion information or data retransmission information based on the integrity verification result.

[0010] Furthermore, receiving a ready output signal, detecting network delay, and outputting communication judgment information include: configuring three delay detection data packets with different data sizes, respectively marked as first to third delay detection data packets, the delay detection data packets are used to be transmitted to the target device through the data transmission module, and when the target device receives the delay detection data packet, it returns a response data packet including the receiving time.

[0011] Furthermore, receiving the ready-to-output signal, detecting the network delay, and outputting the communication determination information further includes:

[0012] When the transmission preparation information is received, the first to third delay detection data packets are respectively subjected to the same data encapsulation processing, wherein the data encapsulation processing includes:

[0013] Encapsulating IP header labels for the first to third delay detection data packets based on the TCP / IP protocol, wherein the IP header labels include a source address and a destination address; marking the first to third delay detection data packets after data encapsulation processing as first to third data link frames respectively;

[0014] transmitting first to third data link frames to the target device using the internet network, and storing the start transmission time of each data link frame;

[0015] Receive a response data packet, and calculate the delay time using a delay calculation formula, wherein the delay calculation formula is configured as: SYi=XTi-STi; wherein SY is the delay time, XT is the receiving time, ST is the start transmission time, and i is any integer from 1 to 3;

[0016] In particular, when no response data packet is received within the first time, the corresponding delay time is set to YZ+1, where YZ is the delay judgment threshold.

[0017] Further, the communication judgment information includes communication smooth information, communication blocking information, communication congestion information and communication interruption information; receiving a ready output signal, detecting a network delay, and outputting the communication judgment information also includes:

[0018] Execute a delay determination loop, the delay determination loop comprising:

[0019] Set the initial value of i to 3, calculate the difference between SYi and YZ, and mark it as the delay judgment value;

[0020] The positive and negative value of the delay judgment value is judged, and when the delay judgment value is negative or 0, the communication is smooth information is output;

[0021] When the delay judgment value is positive, the value of i is reduced by one;

[0022] Calculate the delay judgment value again and judge its positive or negative value. If it is negative or 0, output the communication congestion information.

[0023] When the delay judgment value is positive, the value of i is reduced by one;

[0024] Calculate the delay judgment value again and judge its positive or negative value. If it is negative or 0, output the communication congestion information.

[0025] When the delay judgment value is positive, the value of i is reduced by one;

[0026] The delay judgment value is calculated again and the positive or negative value is judged. When it is a negative number or 0, the communication congestion information is output. When the delay judgment value is a positive number, the communication interruption information is output.

[0027] Further, dividing the transmission data based on the communication judgment information, and outputting a plurality of divided data packets includes:

[0028] Receive communication judgment information, and when receiving communication interruption information, output reconnection analysis information;

[0029] When receiving the communication smooth information, the transmission data packet is divided once every third delay detection data packet in order from left to right, and the divided transmission packets are output; and the divided transmission packets are numbered in the order of division, and the numbers are processed out of order, and the out of order processing includes:

[0030] Starting from the numbers greater than the first value, the first number of numbers are divided into the same group, which is marked as a number group;

[0031] Calculate the average value in the number group and mark it as average number;

[0032] Update the number in the number group to the number plus the average number;

[0033] When receiving the communication congestion information, the transmission data packet is divided once every second delay detection data packet in order from left to right, and the divided transmission packets are output; and the divided transmission packets are numbered in the order of division, and the numbers are processed out of order;

[0034] When communication congestion information is received, the transmission data packet is divided once at each interval of the data size of the first delay detection data packet from left to right, and the divided transmission packets are output; and the divided transmission packets are numbered in the order of division, and the numbers are processed out of order.

[0035] Further, dividing the transmission data based on the communication determination information and outputting a plurality of divided data packets further comprises:

[0036] When the reconnection analysis information is received, the delay analysis strategy, the delay calculation strategy, and the data partitioning strategy are executed once after a first time interval starting from the current time.

[0037] Further, transmitting the divided data packets, performing integrity verification on the divided data packets, and outputting transmission completion information or data retransmission information based on the integrity verification result includes:

[0038] Data encapsulation is performed on the divided data packets and the numbers of the divided data packets, and a data link frame corresponding to each divided data packet and the number is output;

[0039] Transmit all data link frames to the target device using the internet;

[0040] The target device decapsulates all received data link frames to obtain divided data packets and numbers; restores the numbers, sorts all divided data packets according to the size of the numbers, and obtains a number sequence;

[0041] Determine whether the numbers in the numbering sequence are continuous, and if the determination result is yes, output the transmission completion information;

[0042] When the judgment result is no, data retransmission information is output, and the data retransmission information also includes the missing number in the number sequence.

[0043] In a second aspect, a network security transmission system includes: a data generation module, a delay analysis module, a data partitioning module and a data transmission module; the data generation module is used to generate a transmission data packet, output ready-to-transmit information and a ready-to-output signal, wherein the ready-to-transmit information includes a target address;

[0044] The delay analysis module is used to receive the ready-to-output signal, detect network delay, and output communication judgment information;

[0045] The data division module is used to divide the transmission data based on the communication judgment information and output a plurality of divided data packets;

[0046] The data transmission module is used to transmit the divided data packets, perform integrity verification on the divided data packets, and output transmission completion information or data retransmission information based on the integrity verification result.

[0047] In a third aspect, the present application provides an electronic device, including a processor and a memory, wherein the memory stores computer-readable instructions, and when the computer-readable instructions are executed by the processor, the steps in the method described above are executed.

[0048] In a fourth aspect, the present application provides a storage medium having a computer program stored thereon, and when the computer program is executed by a processor, the steps in the method described above are executed.

[0049] Beneficial effects of the present invention: The present invention detects the receiving time of three delay detection data packets of different data sizes, calculates and analyzes the receiving time, obtains communication judgment information, and then divides the transmission data packet based on the communication judgment information to obtain multiple divided data packets; the advantage is that by dividing the transmission data packet into multiple smaller divided data packets, each divided data packet does not need to pass through the same path from the source address to the destination address. If one path is blocked or disconnected, the remaining messages can reach the destination address from the alternative path, thereby realizing multi-path transmission; the efficiency and intelligence of network transmission are improved;

[0050] The present invention also numbers the divided data packets, performs disorderly processing on the numbers, then performs data encapsulation on the divided data packets and the numbers, and finally outputs them; the advantage of this is that the disorderly processing makes the numbers after disorderly processing discontinuous; if some data link frames are intercepted and interpreted during the transmission process, the divided data packets cannot be correctly sorted by the numbers obtained by the interpretation; and after the target device analyzes and obtains the missing numbers after decapsulation, it only needs to retransmit the corresponding divided data packets, thereby improving the security of network transmission.

[0051] Other features and advantages of the present application will be described in the following description, and partly become apparent from the description, or be understood by practicing the present application. The purpose and other advantages of the present application can be realized and obtained by the structures specifically pointed out in the written description, claims, and drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0052] Figure 1 is a functional block diagram of the system of the present invention;

[0053] Figure 2 is a schematic diagram of network transmission details of the present invention;

[0054] Figure 3 The figure is a flow chart of the steps of the method of the present invention. DETAILED DESCRIPTION

[0055] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0056] Embodiment 1, in the first aspect, as shown in 1, the present invention provides a network security transmission system, including: a data generation module, a delay analysis module, a data division module and a data transmission module; the data generation module is used to generate a transmission data packet, output ready-to-transmit information and a ready-to-output signal, and the ready-to-transmit information includes a target address;

[0057] The delay analysis module is used to receive a signal to prepare for output, detect network delay, and output communication judgment information; the delay analysis module is configured with three delay detection data packets of different data sizes, which are marked as first to third delay detection data packets respectively, and the delay detection data packets are used to be transmitted to the target device through the data transmission module, and when the target device receives the delay detection data packet, it returns a response data packet including the receiving time; in a specific implementation, the data size of the first delay detection data packet is set to 50KB, the data size of the second delay detection data packet is set to 100KB, and the data size of the third delay detection data packet is set to 200KB, where KB is the data unit: kilobytes.

[0058] The delay analysis module is configured with delay analysis strategies, which include:

[0059] When the transmission preparation information is received, the first to third delay detection data packets are respectively subjected to the same data encapsulation processing, the data encapsulation processing comprising:

[0060] Based on the TCP / IP protocol, IP header tags are encapsulated for the first to third delay detection data packets, and the IP header tags include a source address and a destination address; the first to third delay detection data packets after data encapsulation are marked as first to third data link frames respectively; the specific data encapsulation processing varies depending on the transmission method. Taking the transmission method as a network server transmitting data to a client as an example, during the data encapsulation process, the transmission data packet is an HTML page, and the data encapsulation process is as follows: the first step is to add an application protocol HTTP message header before the HTML data; the second step is that the HTTP application layer protocol sends the HTML formatted web page data to the TCP transport layer; the third step is to add IP information before the TCP information; the fourth step is to add the Ethernet protocol to both ends of the IP message.

[0061] transmitting first to third data link frames to the target device using the internet network, and storing the start transmission time of each data link frame;

[0062] Receive the response data packet, and use the delay calculation formula to calculate the delay time. The delay calculation formula is configured as: SYi=XTi-STi; where SY is the delay time, XT is the receiving time, ST is the start transmission time, and i is any integer from 1 to 3;

[0063] It should be noted that when i is 1, it means that SY1 is the delay time corresponding to the first delayed data packet; and so on, when i is 3, SY3 is the delay time of the second delayed data packet;

[0064] In particular, when no response data packet is received within the first time, the corresponding delay time is set to YZ+1, where YZ is the delay judgment threshold; the first time and YZ are both set to 10s; since sufficient time is required to determine whether the communication is interrupted, the settings of the first time and YZ should not be too small; considering the efficiency of judging whether the communication is interrupted, the first time and YZ are both set to 10.

[0065] The delay analysis module is also configured with a delay calculation strategy, which includes: executing a delay judgment loop, which includes: setting the initial value of i to 3, calculating the difference between SYi and YZ, and marking it as a delay judgment value; judging the positive and negative nature of the delay judgment value, and when the delay judgment value is negative or 0, outputting communication smooth information;

[0066] When the delay judgment value is a positive number, the value of i is reduced by one; the delay judgment value is calculated again, and the positive and negative values ​​are judged. When it is a negative number or 0, the communication congestion information is output;

[0067] When the delay judgment value is a positive number, the value of i is reduced by one; the delay judgment value is calculated again, and the positive and negative values ​​are judged. When it is a negative number or 0, the communication congestion information is output;

[0068] When the delay judgment value is a positive number, the value of i is reduced by one; the delay judgment value is calculated again, and the positivity is judged. When it is a negative number or 0, the communication congestion information is output; when the delay judgment value is a positive number, the communication interruption information is output.

[0069] It should be noted that, taking the three groups of delay time in the delay time table in Table 1 as an example,

[0070] Table 1 Delay schedule

[0071]

[0072]

[0073] In the case of the first group of delay time, the delay judgment loop is to calculate SY3-10=-5, which is a negative number, and output the communication smooth information;

[0074] In the case of the second group of delay time, the delay judgment loop is to calculate SY3-10=-4, which is a negative number, and output the communication smooth information;

[0075] In the case of the third group of delay time, the delay judgment loop is to calculate SY3-10=1, which is a positive number, and then calculate SY2-10=4, which is a negative number, and output the communication congestion information;

[0076] See also Figure 2 As shown, Figure 2 Transmission path 1 transmits a first delay detection data packet, transmission path 2 transmits a second delay detection data packet, and transmission path 3 transmits a third delay detection data packet; wherein transmission path 1 is not sent to the target device in the case of data loss, and transmission path 3 is not sent to the target device in the case of network transmission congestion;

[0077] In the cases of the second and third groups, the first delay detection data packet did not receive a response data packet, but there were response data packets of other delay detection data packets. It can be judged that the first delay detection data packet selected a congested path during network transmission, which is not sufficient to judge that the network communication is interrupted; analyzing SY3 to SY1 in sequence in the delay judgment loop can reduce the amount of calculation required for the analysis.

[0078] The data division module is used to divide the transmission data based on the communication judgment information and output a plurality of divided data packets;

[0079] The data partitioning module is configured with a data partitioning strategy, which includes: receiving communication judgment information, and when receiving communication interruption information, outputting reconnection analysis information;

[0080] When receiving the communication smooth information, the transmission data packet is divided once every third delay detection data packet in order from left to right, and the divided transmission packets are output; and the divided transmission packets are numbered in the order of division, and the numbers are processed out of order, and the out of order processing includes:

[0081] Starting from the numbers greater than the first value, the first number of numbers are divided into the same group, which is marked as a number group;

[0082] Calculate the average value in the number group and mark it as average number;

[0083] Update the number in the number group to the number plus the average number;

[0084] When communication congestion information is received, the transmission data packet is divided once every second delay detection data packet in order from left to right, and the divided transmission packets are output; and the divided transmission packets are numbered in the order of division, and the numbers are processed out of order.

[0085] When communication congestion information is received, the transmission data packet is divided once at each interval of the data size of the first delay detection data packet from left to right, and the divided transmission packets are output; and the divided transmission packets are numbered in the order of division, and the numbers are processed out of order.

[0086] In a specific implementation, the first value and the first number are both set to 3. The purpose of not processing the divided data packets numbered 1 to 3 in an unordered manner is to create an illusion of continuous numbers after being intercepted and interpreted, thereby protecting the subsequent divided data packets; the first number is set to 3 to facilitate the subsequent decapsulation process to restore the numbers, as shown in Table 2-1 Number Grouping Table and Table 2-2 Update Number Table:

[0087] Table 2-1 Number grouping table

[0088]

[0089] Table 2-2 Update number table

[0090]

[0091] By analyzing the data in Table 2-1 and Table 2-2, we can know that the smallest number in each number group can be divided by 3 after updating; in the number group, the middle number minus 1 can be divided by 3, and the largest number in the number group plus 1 can be divided by 3; in the number group, the middle number in the number group is updated to twice the original number. Based on this rule, the method of number restoration during the decapsulation process is given as an example:

[0092] If the number obtained after decapsulation is 100, 100 is not divisible by 3; subtract 1 from 100 to get 99, which is divisible by 3. Then 100 is a number in the number group [99, 100, 101] obtained after the number group [49, 50, 51] is processed in disorder, and 100 is restored to 50;

[0093] In another case, if the decapsulated number is 203, which is not divisible by 3; subtract 1 from 203 to get 202, which is still not divisible by 3; add 1 to 203 to get 204, which is divisible by 3, then 203 is the number in the number group [201, 202, 203] after the unordered processing, and 203 is restored to 102.

[0094] The data partitioning module is also configured with a reconnection analysis strategy, which includes:

[0095] When the reconnection analysis information is received, the delay analysis strategy, the delay calculation strategy, and the data partitioning strategy are executed once after a first time interval starting from the current time.

[0096] The data transmission module is used to transmit the divided data packets, perform integrity verification on the divided data packets, and output transmission completion information or data retransmission information based on the integrity verification results.

[0097] The data transmission module is configured with a transmission verification strategy, which includes:

[0098] Data encapsulation is performed on the divided data packets and the numbers of the divided data packets, and a data link frame corresponding to each divided data packet and the number is output;

[0099] Transmit all data link frames to the target device using the internet;

[0100] The target device decapsulates all received data link frames to obtain divided data packets and numbers; restores the numbers, sorts all divided data packets according to the size of the numbers, and obtains a number sequence;

[0101] Determine whether the numbers in the numbering sequence are continuous, and if the determination result is yes, output the transmission completion information;

[0102] It should be noted that, in the process of dividing the transmission data packet, if the number of numbers remaining at the end is exactly 3, the largest number after the disorder processing is encapsulated with the stop information; if the number of numbers remaining at the end is less than 3, the remaining numbers are not processed in disorder, and the last number is encapsulated with the stop information and disorder information during the data encapsulation process. After decapsulation, the continuity of the number is judged according to the stop information, and the number of the disorder information is not restored; if the divided data packet containing the stop information is not received, the output data retransmission information includes the stop information;

[0103] When the judgment result is no, data retransmission information is output, and the data retransmission information also includes the missing number in the number sequence.

[0104] Example 2, second aspect, please refer to Figure 3 As shown, the present invention also provides a network security transmission method, comprising: step S1, generating a transmission data packet, outputting ready transmission information and a ready output signal, wherein the ready transmission information includes a target address;

[0105] Step S2, receiving a signal to prepare for output, detecting network delay, and outputting communication judgment information; Step S2 also includes the following sub-steps:

[0106] Step S201, when the transmission preparation information is received, the first to third delay detection data packets are respectively subjected to the same data encapsulation processing, the data encapsulation processing comprising:

[0107] Step S202, encapsulating IP header labels for the first to third delay detection data packets based on the TCP / IP protocol, wherein the IP header labels include a source address and a destination address; marking the first to third delay detection data packets after data encapsulation processing as first to third data link frames respectively;

[0108] Step S203, transmitting the first to third data link frames to the target device using the Internet, and storing the start transmission time of each data link frame;

[0109] Step S204, receiving a response data packet, and calculating the delay time using a delay calculation formula, wherein the delay calculation formula is configured as: SYi=XTi-STi; wherein SY is the delay time, XT is the receiving time, ST is the start transmission time, and i is any integer from 1 to 3;

[0110] Step S205, in particular, when no response data packet is received within the first time, the corresponding delay time is set to YZ+1, where YZ is the delay judgment threshold.

[0111] Step S206, executing a delay determination loop, the delay determination loop comprising:

[0112] Set the initial value of i to 3, calculate the difference between SYi and YZ, and mark it as the delay judgment value;

[0113] The positive and negative value of the delay judgment value is judged, and when the delay judgment value is negative or 0, the communication is smooth information is output;

[0114] When the delay judgment value is positive, the value of i is reduced by one;

[0115] Calculate the delay judgment value again and judge its positive or negative value. If it is negative or 0, output the communication congestion information.

[0116] When the delay judgment value is positive, the value of i is reduced by one;

[0117] Calculate the delay judgment value again and judge its positive or negative value. If it is negative or 0, output the communication congestion information.

[0118] When the delay judgment value is positive, the value of i is reduced by one;

[0119] The delay judgment value is calculated again and the positive or negative value is judged. When it is a negative number or 0, the communication congestion information is output. When the delay judgment value is a positive number, the communication interruption information is output.

[0120] Step S3, dividing the transmission data based on the communication judgment information, and outputting a plurality of divided data packets; Step S3 also includes the following sub-steps:

[0121] Step S3011, receiving communication judgment information, and when receiving communication interruption information, outputting reconnection analysis information;

[0122] Step S3012, when receiving the communication smooth information, in order from left to right, the transmission data packet is divided once every data size of the third delay detection data packet, and the divided transmission packets are output; and the divided transmission packets are numbered in the order of division, and the numbers are processed out of order, and the out of order processing includes:

[0123] Step S3013, starting from the numbers greater than the first value, the first number of numbers are divided into the same group, which is marked as a number group;

[0124] Step S3014, calculating the average value in the number grouping, marking it as the average number;

[0125] Step S3015, updating the number in the number group to the number plus the average number;

[0126] Step S302, when communication congestion information is received, the transmission data packet is divided once every second delay detection data packet in order from left to right, and the divided transmission packets are output; and the divided transmission packets are numbered in the order of division, and the numbers are processed out of order.

[0127] Step S303, when receiving communication congestion information, divide the transmission data packet once according to the data size of the first delay detection data packet from left to right, and output the divided transmission packets; and number the divided transmission packets according to the order of division, and process the numbers in an unordered manner.

[0128] Step S304: when the reconnection analysis information is received, starting from the current time, the delay analysis strategy, the delay calculation strategy and the data partitioning strategy are executed once at every first time interval.

[0129] Step S4, transmitting the divided data packets, performing integrity verification on the divided data packets, and outputting transmission completion information or data retransmission information based on the integrity verification result; Step S4 also includes the following sub-steps:

[0130] Step S401, encapsulating the divided data packets and the numbers of the divided data packets, and outputting the data link frames corresponding to each divided data packet and the number;

[0131] Step S402, transmitting all data link frames to the target device using the Internet;

[0132] Step S403, the target device decapsulates all received data link frames to obtain divided data packets and numbers; restores the numbers, sorts all divided data packets according to the size of the numbers, and obtains a number sequence;

[0133] Step S404, judging whether the numbers in the numbering sequence are continuous, and when the judgment result is yes, outputting transmission completion information; when the judgment result is no, outputting data retransmission information, and the data retransmission information also includes the missing numbers in the numbering sequence.

[0134] Embodiment 3, in the third aspect, the present application provides an electronic device, including a processor and a memory, the memory storing computer-readable instructions, and when the computer-readable instructions are executed by the processor, the steps in the above method are executed. Through the above technical solution, the processor and the memory are interconnected and communicate with each other through a communication bus and / or other forms of connection mechanisms, and the memory stores a computer program executable by the processor. When the electronic device is running, the processor executes the computer program to execute the method in any optional implementation of the above embodiment to achieve the following functions: generate a transmission data packet, output ready-to-transmit information and a ready-to-output signal; receive a ready-to-output signal, detect network delay, and output communication judgment information; divide the transmission data and output multiple divided data packets; transmit divided data packets, perform integrity verification on the divided data packets, and output transmission completion information or data retransmission information based on the integrity verification results.

[0135] Embodiment 4, in the fourth aspect, the present application provides a storage medium on which a computer program is stored, and when the computer program is executed by a processor, the steps in the above method are executed. Through the above technical solution, when the computer program is executed by the processor, the method in any optional implementation of the above embodiment is executed to achieve the following functions: generate a transmission data packet, output ready-to-transmit information and ready-to-output signal; receive ready-to-output signal, detect network delay, and output communication judgment information; divide the transmission data and output multiple divided data packets; transmit divided data packets, perform integrity verification on the divided data packets, and output transmission completion information or data retransmission information based on the integrity verification result.

[0136] In the above embodiments of the present application, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, please refer to the relevant description of other embodiments.

[0137] It should be understood by those skilled in the art that the embodiments of the present invention can be provided as methods, systems or computer program products. Therefore, the present invention can take the form of a complete hardware embodiment, a complete software embodiment or an embodiment combining software and hardware. Moreover, the present invention can take the form of a computer program product implemented on one or more computer-usable storage media containing computer-usable program codes. Among them, the storage medium can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (Static Random Access Memory, referred to as SRAM), electrically erasable programmable read-only memory (Electrically Erasable Programmable Read-Only Memory, referred to as EEPROM), erasable programmable read-only memory (Erasable Programmable Read Only Memory, referred to as EPROM), programmable read-only memory (Programmable Read-Only Memory, referred to as PROM), read-only memory (Read-Only Memory, referred to as ROM), magnetic memory, flash memory, disk or optical disk. These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0138] In the embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. The device embodiments described above are merely schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some communication interfaces, and the indirect coupling or communication connection of devices or units can be electrical, mechanical or other forms.

Claims

1. A network security transmission method, characterized in that: The steps include: Generate a transmission data packet, output ready-to-transmit information and a ready-to-output signal, wherein the ready-to-transmit information includes a target address; Receive the ready-to-output signal, detect network delay, and output communication judgment information; Dividing the transmission data packet based on the communication judgment information and outputting a plurality of divided data packets; Transmit the divided data packets, perform integrity verification on the divided data packets, and output transmission completion information or data retransmission information based on the integrity verification result; Receiving a signal to prepare for output, detecting network delay, and outputting communication judgment information includes: configuring three delay detection data packets with different data sizes, respectively marked as first to third delay detection data packets, the delay detection data packets are used to be transmitted to the target device through the data transmission module, and when the target device receives the delay detection data packet, it returns a response data packet including the receiving time; Receiving the ready output signal, detecting network delay, and outputting communication judgment information also include: When the transmission preparation information is received, the first to third delay detection data packets are respectively subjected to the same data encapsulation processing, wherein the data encapsulation processing includes: Encapsulating IP header labels for the first to third delay detection data packets based on the TCP / IP protocol, wherein the IP header labels include a source address and a destination address; marking the first to third delay detection data packets after data encapsulation processing as first to third data link frames respectively; transmitting first to third data link frames to the target device using the internet network, and storing the start transmission time of each data link frame; Receive a response data packet, and calculate the delay time using a delay calculation formula, wherein the delay calculation formula is configured as: SYi=XTi-STi; wherein SY is the delay time, XT is the receiving time, ST is the start transmission time, and i is any integer from 1 to 3; If no response data packet is received within the first time, the corresponding delay time is set to YZ+1, where YZ is the delay judgment threshold; The communication judgment information includes communication smooth information, communication jam information, communication congestion information and communication interruption information; receiving a ready output signal, detecting network delay, and outputting communication judgment information also includes: Execute a delay determination loop, the delay determination loop comprising: Set the initial value of i to 3, calculate the difference between SYi and YZ, and mark it as the delay judgment value; The positive and negative value of the delay judgment value is judged, and when the delay judgment value is negative or 0, the communication is smooth information is output; When the delay judgment value is positive, the value of i is reduced by one; Calculate the delay judgment value again and judge its positive or negative value. If it is negative or 0, output the communication congestion information. When the delay judgment value is positive, the value of i is reduced by one; Calculate the delay judgment value again and judge its positive or negative value. If it is negative or 0, output the communication congestion information. Dividing the transmission data packet based on the communication judgment information, and outputting a plurality of divided data packets include: When the communication is smooth information is received, the transmission data packet is divided once every third delay detection data packet in order from left to right, and the divided data packets are output; and the divided data packets are numbered in the order of division, and the numbers are processed out of order, and the out of order processing includes: Starting from the numbers greater than the first value, the first number of numbers are divided into the same group, which is marked as a number group; Calculate the average of the numbers in the number group and mark it as average number; Update the number in the number group to the number plus the average number; When receiving the communication congestion information, the transmission data packet is divided once every second delay detection data packet in order from left to right, and the divided data packets are output; and the divided data packets are numbered in the order of division, and the numbers are processed out of order; When communication congestion information is received, the transmission data packet is divided once at the data size of the first delay detection data packet from left to right, and the divided data packets are output; and the divided data packets are numbered in the order of division, and the numbers are processed out of order.

2. A network security transmission method according to claim 1, characterized in that: Transmitting divided data packets, performing integrity verification on the divided data packets, and outputting transmission completion information or data retransmission information based on the integrity verification result include: Data encapsulation is performed on the divided data packets and the numbers of the divided data packets, and a data link frame corresponding to each divided data packet and the number is output; Transmit all data link frames to the target device using the internet; The target device decapsulates all received data link frames to obtain divided data packets and numbers; restores the numbers, sorts all divided data packets according to the size of the numbers, and obtains a number sequence; Determine whether the numbers in the numbering sequence are continuous, and if the determination result is yes, output the transmission completion information; When the judgment result is no, data retransmission information is output, and the data retransmission information also includes the missing number in the number sequence.

3. A network security transmission system, applicable to a network security transmission method according to claim 1 or 2, characterized in that: include: Data generation module, delay analysis module, data partitioning module and data transmission module; The data generation module is used to generate a transmission data packet, output ready-to-transmit information and a ready-to-output signal, wherein the ready-to-transmit information includes a target address; The delay analysis module is used to receive the ready-to-output signal, detect network delay, and output communication judgment information; The data division module is used to divide the transmission data packet based on the communication judgment information and output a plurality of divided data packets; The data transmission module is used to transmit the divided data packets, perform integrity verification on the divided data packets, and output transmission completion information or data retransmission information based on the integrity verification result.

4. An electronic device, characterized in that: The method comprises a processor and a memory, wherein the memory stores computer-readable instructions. When the computer-readable instructions are executed by the processor, the steps in the method according to claim 1 or 2 are executed.

5. A storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps in the method according to claim 1 or 2 are executed.

Images