Data security transmission method, device, equipment and storage medium

Abstract

The present application discloses a data security transmission method, device, equipment and storage medium, relates to the field of data processing technology, and discloses a data security transmission method, including: obtaining current operation data, and obtaining the user's current network environment according to the current operation data; evaluating the trust of the user's current network environment to obtain the comprehensive trust of the environment; obtaining the data credibility of the data to be transmitted based on the comprehensive trust of the environment; generating round keys according to the comprehensive trust of the environment and the data credibility, and encrypting the data to be transmitted to obtain encrypted data; transmitting the encrypted data, the comprehensive trust of the environment and the data credibility; the method generates a key to encrypt the data to be transmitted according to the evaluation data after multi-faceted evaluation of the user's network environment security and the credibility of the data to be transmitted, which not only guarantees the environmental security and data security of data transmission in advance, but also can generate targeted keys according to different data to encrypt the data to be transmitted, thereby ensuring the security of data transmission.

Description

Technical Field

[0001] The present application relates to the field of data processing technology, and in particular to a data security transmission method, device, equipment and storage medium. Background Art

[0002] Data transmission is the transmission of data from a data source to a data terminal through one or more data links in accordance with certain procedures. Its main function is to realize the transmission and exchange of information between points. A good data transmission method can improve the real-time and reliability of data transmission. With the rapid increase of IoT devices, more and more data transmission adopts wireless network transmission.

[0003] However, currently, users rely on wireless networks to transmit data. There are many open network environments that can directly connect mobile devices without passwords. However, in such network environments, the security of data transmission on mobile devices is relatively weak. Once the network environment is not secure, data may be stolen at any time. Therefore, it has become a technical problem that needs to be solved to ensure the security of the user's personal network environment and user data information when the user transmits data, so as to avoid data loss during user data transmission, resulting in economic losses and personal information security risks.

[0004] The above contents are only used to assist in understanding the technical solution of the present application and do not constitute an admission that the above contents are prior art. Summary of the invention

[0005] The main purpose of this application is to provide a data security transmission method, device, equipment and storage medium, aiming to solve the current technical problem that the security of the user's personal network environment and the security of user data information cannot be guaranteed when the user transmits data, resulting in data loss during user data transmission, causing economic losses and bringing potential risks to personal information security.

[0006] To achieve the above objectives, the present application proposes a data security transmission method, which includes:

[0007] Acquire the user's current operation data, and obtain the user's current network environment according to the current operation data;

[0008] Conducting a trust evaluation on the user's current network environment to obtain comprehensive trust of the environment and data credibility;

[0009] Generate a round key according to the comprehensive trust of the environment and the credibility of the data, and encrypt the data to be transmitted according to the round key to obtain encrypted data;

[0010] Data transmission is performed according to the encrypted data, the comprehensive trust of the environment and the data credibility.

[0011] In one embodiment, the acquiring the current operation data of the user and obtaining the current network environment of the user according to the current operation data includes:

[0012] Get the user's current operation data;

[0013] Obtaining data to be transmitted and network environment parameters according to the current operation data, wherein the network environment parameters include a network address, a network state, and a network performance;

[0014] Determining a data transmission mode according to the data to be transmitted;

[0015] The current network environment of the user is obtained based on the data transmission mode and the data to be transmitted.

[0016] In one embodiment, the trust evaluation of the user's current network environment to obtain the comprehensive trust of the environment and the credibility of the data includes:

[0017] Analyze the current network environment to obtain a network status level, a network address type, a network performance level, and a data transmission level;

[0018] According to the membership function, membership values ​​of the network status level, network address type, network performance level and data transmission level are obtained;

[0019] Obtaining a membership correction value according to the usage frequency of the data to be transmitted;

[0020] Obtaining the comprehensive trust of the environment according to the membership value and the membership correction value;

[0021] The data credibility of the data to be transmitted is obtained based on the comprehensive trust of the environment.

[0022] In one embodiment, after obtaining the membership values ​​of the network status level, the network address type, the network performance level, and the data transmission level according to the membership function, the method further includes:

[0023] Obtaining an initial network status level, an initial network address type, an initial network performance, and an initial data transmission level according to the membership function;

[0024] Obtaining target network performance according to the data to be transmitted and the initial data transmission level;

[0025] When the initial network status level is lower than the status level threshold or the initial network address type does not belong to the preset type or the initial network performance does not meet the target network performance, the preset membership value is used as the membership value.

[0026] In one embodiment, obtaining the data credibility of the data to be transmitted based on the comprehensive credibility of the environment includes:

[0027] When the comprehensive trust of the environment meets the trust threshold, identifying the integrity of the data to be transmitted;

[0028] Acquire the data source of the data to be transmitted, and obtain the validity according to the data source;

[0029] The data credibility of the data to be transmitted is obtained according to the integrity and the validity.

[0030] In one embodiment, generating a round key according to the comprehensive trust of the environment and the credibility of the data, and encrypting the data to be transmitted according to the round key to obtain encrypted data includes:

[0031] Generate a plaintext matrix according to the data to be transmitted;

[0032] Generate initial conditions and the number of keys according to the comprehensive trust of the environment and the credibility of the data;

[0033] Based on the plaintext matrix, the initial condition and the number of keys, a chaotic sequence is obtained by performing polarity discretization processing on the chaotic system;

[0034] A round key is obtained according to the chaotic sequence, and the data to be transmitted is encrypted according to the round key and a preset initial key to obtain encrypted data.

[0035] In one embodiment, obtaining a round key according to the chaotic sequence, and encrypting the data to be transmitted according to the round key and a preset initial key to obtain encrypted data includes:

[0036] Acquire a reference coefficient of the chaotic sequence, and generate a round key according to the reference coefficient;

[0037] Obtain a key matrix according to the round key, and obtain a matrix to be transmitted according to the data to be transmitted;

[0038] Obtaining element XOR positions according to the key matrix;

[0039] Based on the element XOR position, the matrix to be transmitted is XORed with the preset initial key to obtain an encrypted matrix, and encrypted data is obtained according to the encrypted matrix.

[0040] In addition, to achieve the above-mentioned purpose, the present application also proposes a data security transmission device, the data security transmission device comprising:

[0041] A data acquisition module is used to acquire the user's current operation data and obtain the user's current network environment according to the current operation data;

[0042] An evaluation module is used to perform a trust evaluation on the user's current network environment to obtain a comprehensive trust level of the environment and data credibility;

[0043] A data transmission module, used to generate a round key according to the comprehensive trust of the environment and the credibility of the data, and encrypt the data to be transmitted according to the round key to obtain encrypted data;

[0044] The data transmission module is further used to transmit data according to the encrypted data, the comprehensive trust of the environment and the credibility of the data.

[0045] In addition, to achieve the above-mentioned purpose, the present application also proposes a data security transmission device, which includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, and the computer program is configured to implement the steps of the data security transmission method described above.

[0046] In addition, to achieve the above-mentioned purpose, the present application also proposes a storage medium, which is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by the processor, the steps of the data security transmission method described above are implemented.

[0047] In addition, to achieve the above-mentioned purpose, the present application also provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, it implements the steps of the data security transmission method described above.

[0048] One or more technical solutions proposed in this application have at least the following technical effects:

[0049] After a comprehensive assessment of the user's network environment security and the credibility of the data to be transmitted, a key is generated based on the assessment data to encrypt the data to be transmitted. This not only ensures the environmental security and data security of data transmission in advance, but also generates targeted keys to encrypt the data to be transmitted based on different data, thereby ensuring data transmission security. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0051] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0052] Figure 1 A flowchart of the first embodiment of the data security transmission method of the present application is provided;

[0053] Figure 2 This is a schematic diagram of the encryption step flow of an embodiment of the data security transmission method of the present application;

[0054] Figure 3 This is a schematic diagram of the round key generation process of an embodiment of the data security transmission method of the present application;

[0055] Figure 4 A flowchart of the second embodiment of the data security transmission method of the present application is provided;

[0056] Figure 5 This is a schematic diagram of the module structure of the data security transmission device according to an embodiment of the present application;

[0057] Figure 6 This is a schematic diagram of the device structure of the hardware operating environment involved in the data security transmission method in the embodiment of the present application. DETAILED DESCRIPTION

[0058] It should be understood that the specific embodiments described herein are only used to explain the technical solutions of the present application and are not used to limit the present application.

[0059] In order to better understand the technical solution of the present application, a detailed description will be given below in conjunction with the accompanying drawings and specific implementation methods.

[0060] The main solutions of the embodiments of this application are:

[0061] In this embodiment, for ease of description, the following description is made by taking the identification of a data security transmission device as the execution subject.

[0062] Since the existing data transmission technology is to transmit data from the data source to the data terminal through one or more data links in accordance with certain procedures, its main function is to realize the transmission and exchange of information between points; a good data transmission method can improve the real-time and reliability of data transmission; with the rapid increase of Internet of Things devices, more and more data transmission adopts wireless network transmission.

[0063] However, currently, users rely on wireless networks to transmit data. There are many open network environments that can directly connect mobile devices without passwords. However, in such network environments, the security of data transmission on mobile devices is relatively weak. Once the network environment is not secure, data may be stolen at any time. Therefore, it has become a technical problem that needs to be solved to ensure the security of the user's personal network environment and user data information when the user transmits data, so as to avoid data loss during user data transmission, resulting in economic losses and personal information security risks.

[0064] The present application provides a solution, which, after a multi-faceted assessment of the user's network environment security and the credibility of the data to be transmitted, generates a key based on the assessment data to encrypt the data to be transmitted. This not only ensures the environmental security and data security of data transmission in advance, but also generates targeted keys based on different data to encrypt the data to be transmitted, thereby ensuring the security of data transmission.

[0065] It can be seen from the above embodiments that the present application obtains the current operation data of the user, obtains the current network environment of the user according to the current operation data; performs a trust assessment on the current network environment of the user to obtain a comprehensive trust of the environment; obtains the data credibility of the data to be transmitted based on the comprehensive trust of the environment; generates round keys according to the comprehensive trust of the environment and the data credibility, encrypts the data to be transmitted according to the round keys, and obtains encrypted data; transmits data according to the encrypted data, the comprehensive trust of the environment, and the data credibility; the method performs a multi-faceted assessment of the security of the user's network environment and the credibility of the data to be transmitted, and then generates a key according to the assessment data to encrypt the data to be transmitted, which not only guarantees the environmental security and data security of the data transmission in advance, but also can generate targeted keys according to different data to encrypt the data to be transmitted, thereby ensuring the security of data transmission.

[0066] It should be noted that the execution subject of this embodiment can be a computing service device with data processing, network communication and program running functions, such as a tablet computer, a personal computer, a mobile phone, etc., or an electronic device capable of realizing the above functions, a data security transmission device, etc. The following takes a data security transmission device as an example to illustrate this embodiment and the following embodiments.

[0067] Based on this, the present application embodiment provides a data security transmission method, referring to Figure 1 , Figure 1 This is a flow chart of the first embodiment of the data security transmission method of the present application.

[0068] In this embodiment, the data security transmission method includes steps S10 to S40:

[0069] Step S10, obtaining the user's current operation data, and obtaining the user's current network environment according to the current operation data.

[0070] It is understandable that the current operation data may be data generated when the user performs operations under a personal account, such as click content, web page address, etc.

[0071] It should be understood that the user's current network environment may refer to whether the network is secure when the user is performing the current operation, whether the data is secure and correct, or it may be simply understood as the network status. The user's current network environment includes whether data can be transmitted or whether data transmission is not recommended.

[0072] In a feasible implementation, step S10 may include steps A11 to A14:

[0073] Step A11, obtaining the user's current operation data.

[0074] It should be noted that the user's current operation data can be obtained based on the user's operation log, or from the user's real-time information and personal hardware information, such as real-time network speed, data throughput, hardware data processing capabilities, etc.

[0075] Step A12, obtaining the data to be transmitted and the network environment parameters according to the current operation data, wherein the network environment parameters include the network address, network status and network performance.

[0076] It is understandable that the data to be transmitted by the user, the destination of the data to be transmitted by the user, the environmental status of the user's current network and the status of the data to be transmitted can be identified based on the user's operation data.

[0077] It should be understood that there may be corresponding operation logs for user operations in the system or application. By analyzing the operation logs, the relevant operation content can be obtained, and then the data to be transmitted by the user, the destination of the user's data transmission, the environmental status of the user's current network, and the status of the data to be transmitted can be obtained.

[0078] It should be noted that a network address refers to an identifier used to identify and locate a device or service in a computer network, and is usually composed of a unique string of numbers or letters. In network communications, the network address plays a vital role, ensuring that data packets can be accurately routed to the target device and achieving communication between networks. The network address in this embodiment can be the network address when the user is performing the current operation, and based on the network address, it can be further determined whether the network is secure when the user uploads data.

[0079] It should be noted that the network status can be understood as the network signal. The network status can be divided into strong signal, general signal, poor signal, no signal and other states. Based on the network status, it can be preliminarily determined whether the network signal can support data transmission at this time.

[0080] It should be noted that network performance may include data transmission rate, data delay and bandwidth. Based on the network performance and the data to be transmitted, the time required for data transmission and possible data delay and other information can be roughly estimated.

[0081] It should be emphasized that when it is known from the network address that the current user network address is secure, the signal is strong, the data transmission rate is average, and there is network delay, etc., it can be known that the current network transmission mode is partial transmission; when the current user network address is not secure and / or there is no signal or the network delay is long, the current network transmission mode is stop transmission; when the current user network address is secure, the signal is strong / the signal is average, there is no network delay / the network delay is short, and the network performance is good, the current network transmission mode is full transmission.

[0082] Step A13: determining a data transmission mode according to the data to be transmitted.

[0083] It is understandable that the data transmission method may be direct transmission of all data, transmission of a portion of data, or other transmission methods.

[0084] It should be noted that the amount of data to be transmitted can be known based on the data to be transmitted, and the transmission time of the data to be transmitted can also be estimated based on the data to be transmitted and the current network speed. When the amount of data to be transmitted exceeds the unit data amount or the transmission time exceeds the unit time, the transmission mode can be set to partial transmission; if the amount of data to be transmitted does not exceed the unit data amount or the transmission time does not exceed the unit time, the transmission mode can be set to full transmission; the unit time and unit data amount can be set according to the actual situation, and this application does not limit this.

[0085] Step A14, obtaining the user's current network environment based on the data transmission mode and the data to be transmitted.

[0086] It is understandable that, according to the determined data transmission mode and the data to be transmitted, it can be determined whether the current user network environment allows data transmission or does not recommend data transmission.

[0087] It should be noted that when the data transmission mode is stop transmission, the current user network environment does not recommend data transmission; when the data transmission mode is full transmission and the data to be transmitted is too large, the current user network environment does not recommend data transmission, and data transmission is possible in other cases.

[0088] It should be emphasized that when the data is too large and needs to be transmitted in multiple times, the data can be divided into multiple batches according to the network status and data size; the size of each batch should ensure that the transmission can be completed within a reasonable time when the network status is good; a certain buffer time can be set between batches to cope with network fluctuations. During the data transmission process, the batch division and transmission strategy are dynamically adjusted according to the real-time network status. If the network status deteriorates, the batch size can be reduced or low-priority transmission can be suspended.

[0089] In this embodiment, the data to be transmitted is obtained through the user's operation, and parameters such as the network address, network status, and network performance are obtained according to the operation data. The data transmission method is determined based on these parameters and the data to be transmitted. The environmental security of data transmission can be preliminarily analyzed according to the network status and the data to be transmitted, and whether it is suitable for transmission and the transmission method can be preliminarily analyzed according to the content of the data to be transmitted.

[0090] The above are only two feasible implementations of step S10 provided in this embodiment, and this embodiment does not specifically limit the specific implementation of step S10.

[0091] Step S20, performing a trust evaluation on the user's current network environment to obtain a comprehensive trust level of the environment and data credibility.

[0092] It is understandable that the trust evaluation of the current network environment of the user may be performed based on the network address, network status, network performance, and transmission mode.

[0093] It should be understood that network addresses can be divided into internal URLs, ordinary URLs and risky URLs; they can also be divided into commonly used URLs, unfamiliar URLs, safe URLs and public URLs, etc., according to different requirements; network status can be divided into strong signal network, normal network, delayed network and no network; network performance can be divided into good performance, average performance and poor performance.

[0094] It should be noted that the membership value is obtained by performing membership calculation based on the network address, network status and network performance, the comprehensive trust of the environment is obtained based on the membership value, and then the data credibility is obtained based on the comprehensive trust of the environment and the data to be transmitted.

[0095] Step S30, generating a round key according to the comprehensive trust of the environment and the credibility of the data, and encrypting the data to be transmitted according to the round key to obtain encrypted data.

[0096] It is understandable that multiple rounds of encryption are performed on the data to be transmitted, wherein round keys are generated according to the comprehensive trust of the environment and the credibility of the data.

[0097] It should be understood that the key for transforming the data to be transmitted in each round, in short, the encryption method of the data to be transmitted will be changed in each round according to the round key.

[0098] In a feasible implementation, step S30 may include steps A31 to A33:

[0099] Step A31, generating a plaintext matrix according to the data to be transmitted.

[0100] It is understandable that the plaintext matrix may be a two-dimensional array or matrix storing data to be transmitted.

[0101] Step A32, generating initial conditions and the number of keys according to the comprehensive trust of the environment and the credibility of the data.

[0102] It is understandable that generating the initial conditions and the number of keys according to the comprehensive trust of the environment and the credibility of the data can be a conversion of the comprehensive trust of the environment and the credibility of the three data into a format acceptable to the chaotic system.

[0103] It should be understood that the initial conditions of the chaotic system are generated using the preprocessed environmental information and data credibility, wherein the initial conditions are usually a set of parameter values ​​of the chaotic system, which are used to determine the initial state of the system. Some characteristic values ​​of the environmental information can be directly used as the initial conditions, or the environmental information and data credibility can be combined to generate the initial conditions by means such as a hash function, a pseudo-random number generator, etc. The specific initial condition generation method can refer to the following formula:

[0104]

[0105] Among them, α represents environmental information / environmental information characteristics, β represents data credibility, i represents the maximum number of environmental information, and m is the required number of matrices set by the chaotic system, which can be set according to actual needs.

[0106] In a specific implementation, the data value of the comprehensive trust of the environment is discretized, or multiple parameters are merged into one or more parameters, and a hash function, encoding technology or feature extraction method can be used to preprocess the environmental information.

[0107] It should be noted that the number of keys is determined based on the data credibility and the complexity of the environmental information, and the number of keys can be adjusted according to specific security requirements and application scenarios.

[0108] In a specific implementation, the data credibility is converted into a numerical value (such as a floating point number between 0 and 1), and then the numerical value is used to calculate the number of keys. For example, a function can be used to map the credibility value to an integer range, which represents the number of possible keys. It is also possible to combine environmental synthesis and data credibility, and perform parameter combination or transformation to generate multiple keys (such as numerical addition or numerical multiplication or other methods), which can ensure the diversity and complexity of the keys.

[0109] Step A33, obtaining a chaotic sequence by performing polarity discretization processing on the chaotic system based on the plaintext matrix, the initial conditions and the number of keys.

[0110] It is understandable that a chaotic system is used to discretize the polarity of the plaintext matrix and generate a chaotic sequence based on the initial conditions and the number of keys.

[0111] In the specific implementation, a suitable chaotic system is selected, such as Logistic mapping, Chen system, Lorenz system, etc., and the initial state of the chaotic system is set according to the given initial conditions (such as random numbers within a certain range or calculated values ​​based on the comprehensive trust of the environment). The initial conditions determine the starting point of the chaotic sequence; the chaotic system is used to iteratively generate the chaotic sequence. The value of the chaotic sequence will serve as the basis for the subsequent polarity discretization processing. According to the number of keys, the length of the iteratively generated chaotic sequence can be determined; the values ​​in the chaotic sequence are polarity discretized, that is, the elements in the plaintext matrix are converted into binary or other forms of polarity representation according to the values ​​in the chaotic sequence.

[0112] Among them, the state equation of the chaotic system can be expressed as:

[0113]

[0114] Among them, x1-x4 are system state variables, that is, the initial conditions of the system. a, b, c, d, e, f, g are the built-in parameters of the chaotic system, α and β are the preset memristor parameters, K1-K4 are the multidimensional states of the chaotic system, and the chaotic coefficients are generated based on the multidimensional states.

[0115] It can be understood that the values ​​in the chaotic sequence are mapped to a certain threshold range, such as [-1, 1]. Then, the polarity of the corresponding element in the plaintext matrix is ​​determined according to whether the value in the chaotic sequence is greater than 0 (or some other threshold) (such as 1 for positive, 0 for negative or vice versa); the values ​​in the chaotic sequence can be used to calculate a more complex function or mapping, which converts the values ​​in the chaotic sequence into a specific value or range for polarity discretization.

[0116] It should be noted that the number of keys can be used to determine the specific method or parameters used in the polarity discretization process; for example, multiple different thresholds can be selected according to the number of keys to map the values ​​in the chaotic sequence to different polarity ranges; different chaotic systems can be selected or the parameters of the chaotic system can be adjusted according to the number of keys to generate multiple different chaotic sequences and use them for polarity discretization processing.

[0117] Among them, it should be emphasized that the number of iterations or sequence length is determined, and the number of iterations or generation length of the chaotic sequence is determined according to the number of keys to generate a sufficient number of chaotic values ​​for polarity discretization. After polarity discretization, what is finally obtained will be a chaotic sequence generated based on the plaintext matrix, initial conditions and number of keys.

[0118] Step A34, obtaining a round key according to the chaotic sequence, and encrypting the data to be transmitted according to the round key and a preset initial key to obtain encrypted data.

[0119] It is understandable that the transmitted data is encrypted by performing multiple rounds of encryption according to the round key and the preset initial key to obtain the encrypted data. The specific encryption complete steps can be referred to Figure 2 , where reg represents the content encrypted by the key.

[0120] It should be noted that the method of obtaining a round key according to the chaotic sequence, encrypting the data to be transmitted according to the round key and a preset initial key to obtain encrypted data includes: obtaining a reference coefficient of the chaotic sequence, generating a round key according to the reference coefficient; obtaining a key matrix according to the round key, obtaining a matrix to be transmitted according to the data to be transmitted; obtaining an element XOR position according to the key matrix; performing element XOR processing on the matrix to be transmitted according to the preset initial key based on the element XOR position to obtain an encrypted matrix, and obtaining encrypted data according to the encrypted matrix.

[0121] Among them, it can be understood that the reference coefficient of the chaotic sequence can be the parameter value of the specified position in the chaotic sequence; generating the round key according to the reference coefficient can be to split the initial key into several bytes and arrange them in sequence to form an initial round key, and it is necessary to use different constant values ​​in each round starting from the second round to generate a new sub-key based on the sub-key generated in the previous round.

[0122] It should be noted that the specific operations for generating a new round of keys include: cyclically shifting the last 4 bytes of the previous round to the left by one position. Substitute the last 4 bytes of the previous round into the S-box for transformation and XOR with a constant value. The S-box is a fixed nonlinear mapping table that increases the randomness of encryption by replacing the input bytes; XOR the XOR result with the first 4 bytes of the previous round bit by bit to obtain the 4 bytes of this round. The 4 bytes generated in this round are used as subkeys; all subkeys are arranged in order to form a complete round key. The specific steps for generating the specific round key can be referred to. Figure 3 .

[0123] It should be noted that, the element XOR position is obtained according to the key matrix; based on the element XOR position, the matrix to be transmitted is XORed according to the preset initial key to obtain an encryption matrix, and encrypted data is obtained according to the encryption matrix.

[0124] In this implementation, the initial state of the chaotic system is set by the comprehensive trust of the environment and the credibility of the data, and a chaotic sequence is generated based on the initial state, so that the data to be transmitted is encrypted by the round key generated by the chaotic sequence. This can not only encrypt the data to be transmitted in combination with the environmental information of different data to be transmitted, but also enable the data to be transmitted to be transmitted more securely.

[0125] The above are only two feasible implementations of step S10 provided in this embodiment, and this embodiment does not specifically limit the specific implementation of step S10.

[0126] Step S40: transmitting data according to the encrypted data, the comprehensive trust of the environment and the credibility of the data.

[0127] It is understandable that after the encrypted data is transmitted to the destination, the security of the information to be transmitted can be preliminarily judged based on the comprehensive trust of the environment and the credibility of the data to determine whether to receive it. After receiving it, the initial state and number of keys of the chaotic system can be obtained based on the comprehensive trust of the environment and the credibility of the data, and the encrypted data can be decrypted to obtain the data to be transmitted.

[0128] This embodiment provides a method for secure data transmission. After a multi-faceted evaluation of the user's network environment security and the credibility of the data to be transmitted, a key is generated based on the evaluation data to encrypt the data to be transmitted. This not only ensures the environmental security and data security of data transmission in advance, but also generates targeted keys based on different data to encrypt the data to be transmitted, thereby ensuring data transmission security.

[0129] Based on the first embodiment of the present application, in the second embodiment of the present application, the same or similar contents as those in the above-mentioned embodiment 1 can be referred to the above introduction, and will not be repeated in the following. Figure 4, step S20, including steps S21 to S25:

[0130] Step S21, analyzing the current network environment to obtain a network status level, a network address type, a network performance level, and a data transmission level.

[0131] It is understandable that the current network environment includes the current user's network signal strength, network address type, network performance parameters, and data to be transmitted.

[0132] It should be understood that the network status is divided into different levels according to different network signal strengths, and different network address sources are divided into different network address types; different network performance levels are divided according to different network performance parameter values; the transmission type can be obtained according to the size of the data to be transmitted or the estimated transmission time of the data to be transmitted, and the data transmission level can be determined according to the transmission type.

[0133] Step S22, obtaining the membership values ​​of the network status level, network address type, network performance level and data transmission level according to the membership function.

[0134] It should be noted that a corresponding design membership function is set in advance according to the network status, network address type, network performance and data transmission method. These functions map the actual measured values ​​(network status level: good, medium, poor; network address type: IPv4, IPv6, private address, public address; network performance level: high, medium, low; data transmission level: stable, fluctuating, unstable) to membership values ​​between [0, 1].

[0135] It should be noted that after obtaining the membership values ​​of the network status level, network address type, network performance level and data transmission level according to the membership function, it also includes: obtaining the initial network status level, initial network address type, initial network performance and initial data transmission level according to the membership function; obtaining the target network performance according to the data to be transmitted and the initial data transmission level; and using the preset membership value as the membership value when the initial network status level is lower than the status level threshold or the initial network address type does not belong to the preset type or the initial network performance does not meet the target network performance.

[0136] Among them, it can be understood that when the user's current URL is judged to be particularly unsafe based on the network address type, or when the current network performance is very poor, or when the current network signal characteristics are poor, the preset membership value is directly used as the membership value to be calculated. The preset membership value can be 0 or 0.3, which can be limited according to actual conditions. In simple terms, it can be understood that if any of the above conditions occurs, data transmission will not be performed, which can better improve the security of data transmission.

[0137] It should be noted that the status level threshold can be a delayed network level, that is, no data transmission is performed when there is no network in the current network status; the target network performance can be calculated based on the real-time data transmission level and the data to be transmitted; the preset types can include commonly used URLs and secure URLs.

[0138] In a specific implementation, data related to network status, address type, performance, and data transmission are collected in advance; the membership value corresponding to each evaluation indicator is calculated using the collected data and the designed membership function.

[0139] For example, we have a membership function about network delay to determine the network status level; this function may be defined as follows: If the delay is less than 50ms, the network status is "good", and the membership function returns a value close to 1 (for example, 0.9). If the delay is between 50ms and 150ms, the network status is "medium", and the membership function returns between 0.1 and 0.9 according to the specific value of the delay. If the delay is higher than 150ms, the network status is "poor", and the membership function returns a value close to 0 (for example, 0.1). Then, you use the actual delay data to substitute this function to get the membership value corresponding to the network status level.

[0140] It should be noted that for network address types, network performance levels, and data transmission levels, you may need to combine the membership values ​​of multiple evaluation indicators to make a final evaluation; this can be achieved through fuzzy comprehensive evaluation method, weighted average method, or other methods.

[0141] Step S23, obtaining a membership correction value according to the usage frequency of the data to be transmitted.

[0142] It is understandable that the usage frequency of the data to be transmitted may be the frequency at which the data is accessed, processed or transmitted.

[0143] It should be understood that the membership correction value may be between -1 and 1. If the usage frequency is lower than the frequency threshold, the membership correction value may be a negative value. The higher the usage frequency, the greater the membership correction value.

[0144] It should be noted that the membership correction value may also be 0-1, and the higher the usage frequency, the greater the membership correction value.

[0145] Step S24, obtaining the comprehensive trust of the environment according to the membership value and the membership correction value.

[0146] It is understandable that when the membership correction value is between -1 and 1, the comprehensive trust of the environment can be obtained by adding the membership value to the membership correction value; when the membership function belongs to 0-1, the comprehensive trust of the environment can be obtained by multiplying the membership function by the membership correction value; other calculation methods can also be used, and this embodiment does not limit this.

[0147] Step S25, obtaining the data credibility of the data to be transmitted based on the comprehensive credibility of the environment.

[0148] It is understandable that data credibility can be an evaluation value of whether the data to be transmitted is safe and complete.

[0149] It should be noted that the data credibility of the data to be transmitted based on the comprehensive trust of the environment includes: when the comprehensive trust of the environment meets the trust threshold, identifying the integrity of the data to be transmitted; obtaining the data source of the data to be transmitted, and obtaining the validity based on the data source; and obtaining the data credibility of the data to be transmitted based on the integrity and the validity.

[0150] It is understandable that the environmental comprehensive trust threshold may be 0.6 or other values, which are set according to the range of environmental comprehensive trust, and this embodiment does not limit this.

[0151] It should be noted that identifying the integrity of the data to be transmitted can be done by checking whether each field in the data to be transmitted is filled, especially the key fields; for structured data (such as records in a database), queries can be written to identify empty or missing fields. It can also be done by using a database management system (DBMS) or other data integrity tools to check the integrity of the data. These tools may provide built-in data integrity checking functions, such as constraints, triggers, and stored procedures.

[0152] Among them, it should be understood that the data source can be different sources such as internal data, crawler data, public data, etc.; it can be understood that the clearer the data source, the higher the validity. The data validity is 0-1, and it can be calculated based on the proportion of internal data, public data, and crawler data. For example, the internal data weight is set to 0.9, the public data weight is 0.5, the crawler data weight is 0.4, and the others are 0.1. Then, the internal data accounts for 0.4 of the data to be transmitted, and the public data accounts for 0.6. The data validity is 0.9*0.4+0.5*0.6.

[0153] It should be noted that the data credibility of the data to be transmitted can be obtained according to the integrity and the validity by adding the integrity and the validity. The higher the credibility, the higher the security of the data to be transmitted.

[0154] This embodiment provides a method for secure data transmission, which obtains the network status level, network address level, network performance level and data transmission level through the current network environment, and then calculates the comprehensive trust of the current network environment based on the membership function combined with the data usage frequency, and further evaluates the security of the data to be transmitted to obtain the data credibility. The data can be evaluated from the security of the data itself and the security of the data environment, thereby ensuring the security of data transmission and improving the security of data transmission.

[0155] It should be noted that the above examples are only used to understand the present application and do not constitute a limitation on the data security transmission method of the present application. More simple transformations based on this technical concept are all within the scope of protection of the present application.

[0156] This application also provides a data security transmission device, please refer to Figure 5 , the data security transmission device comprises:

[0157] The data acquisition module 10 is used to acquire the current operation data of the user and obtain the current network environment of the user according to the current operation data;

[0158] An evaluation module 20 is used to perform a trust evaluation on the user's current network environment to obtain a comprehensive trust level of the environment and data credibility;

[0159] A data transmission module 30, configured to generate a round key according to the comprehensive trust of the environment and the credibility of the data, and encrypt the data to be transmitted according to the round key to obtain encrypted data;

[0160] The data transmission module 30 is further used to transmit data according to the encrypted data, the comprehensive trust of the environment and the credibility of the data.

[0161] The data security transmission device provided by the present application adopts the data security transmission method in the above embodiment, which can solve the technical problem that the user's personal network environment security and user data information security cannot be guaranteed when the user transmits data, resulting in data loss when the user transmits data. Compared with the prior art, the beneficial effects of the data security transmission device provided by the present application are the same as the beneficial effects of the data security transmission method provided by the above embodiment, and the other technical features in the data security transmission device are the same as the features disclosed in the above embodiment method, which will not be repeated here.

[0162] The present application provides a data security transmission device, which includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the data security transmission method in the above-mentioned embodiment one.

[0163] Reference below Figure 6 , which shows a schematic diagram of the structure of a data security transmission device suitable for implementing the embodiment of the present application. The data security transmission device in the embodiment of the present application may include but is not limited to mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (Personal Digital Assistants), PADs (Portable Application Descriptions), PMPs (Portable Media Players), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. Figure 6 The data security transmission device shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0164] like Figure 6 As shown, the data security transmission device may include a processing device 1001 (such as a central processing unit, a graphics processor, etc.), which can perform various appropriate actions and processes according to the program stored in the read-only memory (ROM: Read Only Memory) 1002 or the program loaded from the storage device 1003 to the random access memory (RAM: Random Access Memory) 1004. In RAM1004, various programs and data required for the operation of the xxx device are also stored. The processing device 1001, ROM1002 and RAM1004 are connected to each other through a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Generally, the following systems can be connected to the I / O interface 1006: an input device 1007 including, for example, a touch screen, a touch pad, a keyboard, a mouse, an image sensor, a microphone, an accelerometer, a gyroscope, etc.; an output device 1008 including, for example, a liquid crystal display (LCD: Liquid Crystal Display), a speaker, a vibrator, etc.; a storage device 1003 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 1009. The communication device 1009 can allow the data security transmission device to communicate with other devices wirelessly or by wire to exchange data. Although the data security transmission device with various systems is shown in the figure, it should be understood that it is not required to implement or have all the systems shown. More or fewer systems can be implemented or have alternatively.

[0165] In particular, according to the embodiments disclosed in the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present application include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device, or installed from a storage device 1003, or installed from a ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiment disclosed in the present application are executed.

[0166] The data security transmission device provided by the present application adopts the data security transmission method in the above embodiment to solve the technical problem of data security transmission. Compared with the prior art, the beneficial effects of the data security transmission device provided by the present application are the same as the beneficial effects of the data security transmission method provided by the above embodiment, and the other technical features in the data security transmission device are the same as the features disclosed in the method of the previous embodiment, which will not be repeated here.

[0167] It should be understood that the various parts disclosed in this application can be implemented by hardware, software, firmware or a combination thereof. In the description of the above embodiments, specific features, structures, materials or characteristics can be combined in any one or more embodiments or examples in a suitable manner.

[0168] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0169] The present application provides a computer-readable storage medium having computer-readable program instructions (ie, computer programs) stored thereon, wherein the computer-readable program instructions are used to execute the data security transmission method in the above-mentioned embodiment.

[0170] The computer-readable storage medium provided in the present application may be, for example, a USB flash drive, but is not limited to electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems, systems or devices, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM: Random Access Memory), a read-only memory (ROM: Read Only Memory), an erasable programmable read-only memory (EPROM: Erasable Programmable Read Only Memory or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM: CD-Read Only Memory), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program, which may be used by or in combination with an instruction execution system, system or device. The program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (Radio Frequency: Radio Frequency), etc., or any suitable combination of the above.

[0171] The computer-readable storage medium may be included in the data security transmission device; or may exist independently without being assembled into the data security transmission device.

[0172] The computer-readable storage medium carries one or more programs. When the one or more programs are executed by the data security transmission device, the data security transmission device implements the data security transmission method.

[0173] Computer program code for performing the operations of the present application may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0174] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present application. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0175] The modules involved in the embodiments described in this application may be implemented by software or hardware, wherein the name of the module does not constitute a limitation on the unit itself in some cases.

[0176] The readable storage medium provided by the present application is a computer-readable storage medium, which stores computer-readable program instructions (i.e., computer programs) for executing the above-mentioned data security transmission method, and can solve the current technical problem that the user's personal network environment security and user data information security cannot be guaranteed when the user transmits data, resulting in data loss when the user transmits data. Compared with the prior art, the beneficial effects of the computer-readable storage medium provided by the present application are the same as the beneficial effects of the data security transmission method provided by the above-mentioned embodiment, and will not be repeated here.

[0177] The present application also provides a computer program product, including a computer program, which implements the steps of the above-mentioned data security transmission method when executed by a processor.

[0178] The computer program product provided by this application can solve the technical problem of secure data transmission. Compared with the prior art, the beneficial effects of the computer program product provided by this application are the same as the beneficial effects of the secure data transmission method provided by the above embodiment, which will not be repeated here.

[0179] The above descriptions are only some embodiments of the present application, and are not intended to limit the patent scope of the present application. All equivalent structural changes made using the contents of the present application specification and drawings under the technical concept of the present application, or direct / indirect applications in other related technical fields are included in the patent protection scope of the present application.

Claims

1. A data security transmission method, characterized in that: The data security transmission method comprises: Acquire the user's current operation data, and obtain the user's current network environment according to the current operation data; Conducting a trust evaluation on the user's current network environment to obtain comprehensive trust of the environment and data credibility; Generate a round key according to the comprehensive trust of the environment and the credibility of the data, and encrypt the data to be transmitted according to the round key to obtain encrypted data; Performing data transmission according to the encrypted data, the comprehensive trust of the environment, and the credibility of the data; The step of generating a round key according to the comprehensive trust of the environment and the credibility of the data, and encrypting the data to be transmitted according to the round key to obtain encrypted data includes: Generate a plaintext matrix according to the data to be transmitted; Generate initial conditions and the number of keys according to the comprehensive trust of the environment and the credibility of the data; Based on the plaintext matrix, the initial condition and the number of keys, a chaotic sequence is obtained by performing polarity discretization processing on the chaotic system; A round key is obtained according to the chaotic sequence, and the data to be transmitted is encrypted according to the round key and a preset initial key to obtain encrypted data.

2. The data security transmission method according to claim 1, characterized in that: The acquiring the current operation data of the user and obtaining the current network environment of the user according to the current operation data includes: Get the user's current operation data; Obtaining data to be transmitted and network environment parameters according to the current operation data, wherein the network environment parameters include a network address, a network state, and a network performance; Determining a data transmission mode according to the data to be transmitted; The current network environment of the user is obtained based on the data transmission mode and the data to be transmitted.

3. The data security transmission method according to claim 1, characterized in that: The trust evaluation of the user's current network environment to obtain the comprehensive trust of the environment and the credibility of the data includes: Analyze the current network environment to obtain a network status level, a network address type, a network performance level, and a data transmission level; According to the membership function, membership values ​​of the network status level, network address type, network performance level and data transmission level are obtained; Obtaining a membership correction value according to the usage frequency of the data to be transmitted; Obtaining the comprehensive trust of the environment according to the membership value and the membership correction value; The data credibility of the data to be transmitted is obtained based on the comprehensive trust of the environment.

4. The data security transmission method according to claim 3, characterized in that: After obtaining the membership values ​​of the network status level, the network address type, the network performance level and the data transmission level according to the membership function, the method further includes: Obtaining an initial network status level, an initial network address type, an initial network performance, and an initial data transmission level according to the membership function; Obtaining target network performance according to the data to be transmitted and the initial data transmission level; When the initial network status level is lower than the status level threshold or the initial network address type does not belong to the preset type or the initial network performance does not meet the target network performance, the preset membership value is used as the membership value.

5. The data security transmission method according to claim 3, characterized in that: The obtaining of the data credibility of the data to be transmitted based on the comprehensive credibility of the environment includes: When the comprehensive trust of the environment meets the trust threshold, identifying the integrity of the data to be transmitted; Acquire the data source of the data to be transmitted, and obtain the validity according to the data source; The data credibility of the data to be transmitted is obtained according to the integrity and the validity.

6. The data security transmission method according to claim 1, characterized in that: The step of obtaining a round key according to the chaotic sequence, and encrypting the data to be transmitted according to the round key and a preset initial key to obtain encrypted data comprises: Acquire a reference coefficient of the chaotic sequence, and generate a round key according to the reference coefficient; Obtain a key matrix according to the round key, and obtain a matrix to be transmitted according to the data to be transmitted; Obtaining element XOR positions according to the key matrix; Based on the element XOR position, the matrix to be transmitted is XORed with the preset initial key to obtain an encrypted matrix, and encrypted data is obtained according to the encrypted matrix.

7. A data security transmission device, characterized in that: The data security transmission device comprises: A data acquisition module is used to acquire the user's current operation data and obtain the user's current network environment according to the current operation data; An evaluation module is used to perform a trust evaluation on the user's current network environment to obtain a comprehensive trust level of the environment and data credibility; A data transmission module, used to generate a round key according to the comprehensive trust of the environment and the credibility of the data, and encrypt the data to be transmitted according to the round key to obtain encrypted data; The data transmission module is further used to transmit data according to the encrypted data, the comprehensive trust of the environment and the credibility of the data; The data transmission module is also used to generate a plaintext matrix according to the data to be transmitted; generate initial conditions and the number of keys according to the comprehensive trust of the environment and the credibility of the data; obtain a chaotic sequence by performing polarity discretization processing of a chaotic system based on the plaintext matrix, the initial conditions and the number of keys; obtain round keys according to the chaotic sequence, and encrypt the data to be transmitted according to the round keys and a preset initial key to obtain encrypted data.

8. A data security transmission device, characterized in that: The device comprises: a memory, a processor, and a data security transmission program stored in the memory and executable on the processor, wherein the data security transmission program is configured to implement the data security transmission method according to any one of claims 1 to 6.

9. A storage medium, characterized in that: The storage medium stores a data security transmission program, and when the data security transmission program is executed by the processor, the data security transmission method according to any one of claims 1 to 6 is implemented.

Images