A safe data transmission communication cabinet

Abstract

The present invention discloses a secure data transmission communication cabinet. The secure data transmission communication cabinet comprises: a hardware module; a security module; a management module; and an auxiliary module. The present invention obtains first security data by performing data conversion on the security data to be transmitted, encrypts the first security data using a data encryption algorithm before data transmission, and then monitors the internal equipment operation status and environmental status of the communication cabinet in real time during the first security data transmission process, observes abnormal behavior of the first security data during the transmission process, then optimizes the transmission process, and finally performs security update and optimization on the communication cabinet, thereby achieving improved security during the data transmission process, and solving the problem of low security during the data transmission process in the prior art.

Description

Technical Field

[0001] The present invention relates to the technical field of secure transmission, and in particular to a secure data transmission communication cabinet. Background Art

[0002] With the rapid development of information technology, the continuous expansion of network scale, and the widespread application of technologies such as cloud computing, big data, and the Internet of Things, the explosive growth of data volume has led to an increasing demand for data transmission. At the same time, security incidents such as hacker attacks, malware, and data leaks occur frequently, posing a serious threat to the security and privacy of data. Therefore, how to ensure the security and integrity of data during transmission has become an urgent problem to be solved. In order to solve these problems, a new type of secure data transmission communication cabinet has emerged. This cabinet uses advanced security technologies such as data encryption, intrusion detection, and access control to ensure the confidentiality and integrity of data during transmission. At the same time, the cabinet also uses efficient data transmission technology, which can further enhance the cabinet's security protection capabilities and data transmission efficiency.

[0003] In the prior art, the transmission of secure data by communication cabinets is achieved by adopting technical means such as data encryption, identity authentication, data integrity verification and channel encryption, while also ensuring that the secure data is not tampered with or stolen during the transmission process.

[0004] For example, the secure data transmission system disclosed in the publication number: CN115836312A includes: transmitting first data in a first data format to a secure transmission network through a sender computing device of the secure data transmission system, then converting the first data into desired data using a consensus network associated with a distributed ledger technology, and finally transmitting the desired data using a receiver computing device of the secure data transmission system. At the same time, the study also found a transmission line corridor communication coverage and data transmission method announced in CN111667381 B; however, in the process of implementing the technical solution of the invention in the embodiment of the present application, the present application found that the above technology has at least the following technical problems:

[0005] In the prior art, communication cabinets are unable to cope with large-scale data transmission needs, and data leakage, tampering, or even loss may occur easily during the transmission process, resulting in low security during the data transmission process. Summary of the invention

[0006] The embodiment of the present application solves the problem of low security in the data transmission process in the prior art by providing a secure data transmission communication cabinet, thereby improving the security in the data transmission process.

[0007] The embodiment of the present application provides a secure data transmission communication cabinet, including: a hardware module, a security module, a management module and an auxiliary module;

[0008] The hardware module is used to perform data conversion on the security data to be transmitted to obtain first security data, where the first security data is the security data to be transmitted after data conversion;

[0009] The security module is used to perform security protection operations on the first security data, and the security protection operations include encryption operations, identity authentication operations and abnormality monitoring operations;

[0010] The encryption operation is used to protect the privacy of the first security data during transmission; the identity authentication operation is used to set the permission to access the first security data; the anomaly detection operation is used to monitor abnormal behavior occurring during the transmission of the first security data, wherein the abnormal behavior includes intrusion attempts and frequent access;

[0011] The management module is used to manage the internal equipment operation status and environmental status of the communication cabinet in real time during the first secure data transmission process and optimize the transmission process, and the real-time management includes key management, troubleshooting management, and software update management;

[0012] The auxiliary module is used to perform security updates and optimization on the communication cabinet, and the security updates include vulnerability repairs, software updates, and patch updates.

[0013] Further, the security module includes an encryption unit, an access control unit, a firewall unit and an intrusion detection unit;

[0014] The encryption unit is used to encrypt the first security data using a data encryption algorithm before data transmission;

[0015] The access control unit is used to control the access of the access user to the first security data through an identity authentication operation, wherein the identity authentication operation includes identity authentication and authority management;

[0016] The firewall unit is used to filter malicious access records and frequent access records of the first security data; the intrusion detection unit is used to monitor abnormal behaviors of the first security data during transmission according to the intrusion detection principle.

[0017] Further, the management module includes a remote management unit, a device monitoring unit, a log recording unit and a performance detection unit;

[0018] The remote management unit is used to monitor the communication cabinet in real time and change the equipment configuration coefficient, wherein the equipment configuration coefficient includes a data transmission coefficient and a software operation coefficient, wherein the data transmission coefficient is an accuracy index of the first safety data during the transmission process, and the software operation coefficient is an accuracy index of the first safety data during the operation of the software program;

[0019] The device monitoring unit is used to monitor the internal device operation status and environmental status of the communication cabinet during the first secure data transmission process to timely discover device abnormalities and failures. The internal device operation status is used to describe the utilization rate, processing speed and resource consumption of the internal device. The environmental status includes temperature, humidity, pressure and device power supply;

[0020] The log recording unit is used to record the operation log and fault events of the internal equipment of the communication cabinet during the first secure data transmission process and generate an alarm signal mark, wherein the alarm signal mark is used to feedback the fault event of the communication cabinet;

[0021] The performance detection unit is used to detect the transmission performance index of the communication cabinet when transmitting the first safety data and optimize the transmission process according to the detection result. The transmission performance index includes a central processing unit utilization index, a first safety data transmission error rate index and a disk waiting time index. The central processing unit utilization index is used to measure the utilization degree of the corresponding central processing unit in the first safety data transmission process. The first safety data transmission error rate index is used to evaluate the frequency of sending errors of the first safety data during the transmission process. The disk waiting time index is the response speed and response time of the disk during the transmission of the first safety data.

[0022] Furthermore, the specific process of the data encryption is: generate a key corresponding to the first security data according to a data encryption algorithm, the data encryption algorithm includes a symmetric encryption algorithm and an asymmetric encryption algorithm; input the first security data into the communication cabinet and determine the type of data encryption algorithm used in combination with the encryption mode coefficient, if it is a symmetric encryption algorithm, convert the input first security data into binary data, otherwise convert the input first security data into quaternary data, the encryption mode coefficient is a judgment indicator for the type of data encryption algorithm; obtain the ciphertext data of the first security data according to the type of the data encryption algorithm and in combination with the corresponding key, and transmit the ciphertext data to a preset target location, the ciphertext data includes binary data and quaternary data.

[0023] Furthermore, the encryption mode coefficient is obtained by calculating the key cracking difficulty coefficient and data complexity coefficient of the first security data; the key cracking difficulty coefficient is the difficulty of cracking the data encryption algorithm, and the data complexity coefficient is the complexity of the plaintext data block and the ciphertext data block in the first security data, and the data complexity coefficient includes the plaintext data block complexity and the ciphertext data block complexity; the encryption mode coefficient is calculated by the following formula: Where, p is the number of data transmissions, p = 1, 2, ...., X, X is the total number of data transmissions, e is a natural constant, ξp represents the encryption mode coefficient of the p-th data transmission, ΔJ0 represents the reference deviation of the key cracking difficulty coefficient, J0 represents the key cracking difficulty reference coefficient, Jp represents the key cracking difficulty coefficient of the p-th data transmission, φ1 represents the correction factor of the relative deviation of the key cracking difficulty coefficient;

[0024] ΔF0 represents the reference deviation of the complexity of the plaintext data block, F0 represents the reference complexity of the plaintext data block, Fp represents the complexity of the plaintext data block of the pth data transmission, φ2 represents the correction factor of the relative deviation of the complexity of the plaintext data block, ΔE0 represents the reference deviation of the complexity of the ciphertext data block, E0 represents the reference complexity of the ciphertext data block, Ep represents the complexity of the ciphertext data block of the pth data transmission, and φ3 represents the correction factor of the relative deviation of the complexity of the ciphertext data block.

[0025] Furthermore, the specific steps of the identity authentication operation include: authenticating the access user based on the identity information provided by the access user and authorizing the access user who has successfully authenticated the identity, and recording the authorized access user as an authorized user; grading the permissions of the authorized users according to the permission grading index and establishing an access control list, the permission grading index is the access permission level of different authorized users, and the access control list is used to record the authorized user's access behavior to the communication cabinet, and the access behavior includes decryption operations, data access and function access; regularly reviewing the permissions of authorized users and conducting security awareness training for authorized users to obtain permission management data, and the permission management data is used to discover and correct problems existing in the first security data during the access period.

[0026] Furthermore, the specific method for obtaining the permission classification index includes: obtaining a data access permission coefficient and a function access permission coefficient by analyzing the data access and function access of the authorized user, and obtaining a data access permission coefficient relative deviation and a function access permission coefficient relative deviation in combination with the corresponding reference value and reference deviation, wherein the data access permission coefficient is a permission index for the authorized user to access the first security data, and the function access permission coefficient is a permission index for the authorized user to access the communication cabinet function;

[0027] The audit tracking coefficient in the access control unit and the key management coefficient in the management module are obtained, and the relative deviation of the audit tracking coefficient and the relative deviation of the key management coefficient are obtained in combination with the corresponding reference value and the reference deviation. The audit tracking coefficient is an accuracy index for recording the access behavior of the authorized user, and the key management coefficient is the accuracy rate of the authorized user using the key to perform a decryption operation to obtain the first security data; the total authority classification coefficient is obtained in combination with the authority classification correction factor, and the authority classification index is obtained in combination with the obtained total authority classification coefficient. The authority classification correction factor includes a first correction factor, a second correction factor, a third correction factor and a fourth correction factor. The total authority classification coefficient includes a total data access permission coefficient, a total function access permission coefficient, a total audit tracking coefficient and a total key management coefficient. The total data access permission coefficient is the product of the relative deviation of the data access permission coefficient and the first correction factor, the total function access permission coefficient is the product of the relative deviation of the function access permission coefficient and the second correction factor, the total audit tracking coefficient is the product of the relative deviation of the audit tracking coefficient and the third correction factor, and the total key management coefficient is the product of the relative deviation of the key management coefficient and the fourth correction factor;

[0028] The authority classification index is calculated by the following formula: Wherein, ψp represents the permission classification index of the p-th data transmission, Δα0 represents the reference deviation of the data access permission coefficient, α0 represents the data access permission reference coefficient, αp represents the data access permission coefficient of the p-th data transmission, and a1 represents the first correction factor;

[0029] Δβ0 represents the reference deviation of the function access permission coefficient, β0 represents the function access permission reference coefficient, βp represents the function access permission coefficient of the pth data transmission, and a2 represents the second correction factor;

[0030] Δγ0 represents the reference deviation of the audit tracking coefficient, γ0 represents the audit tracking reference coefficient, γp represents the audit tracking coefficient of the p-th data transmission, a3 represents the third correction factor, Δλ0 represents the reference deviation of the key management coefficient, λ0 represents the key management reference coefficient, λp represents the key management coefficient of the p-th data transmission, and a4 represents the fourth correction factor.

[0031] Furthermore, the specific steps of performing security updates and optimization on the communication cabinet include: S11, scanning the communication cabinet using a vulnerability scanning tool within a preset time period and performing a risk assessment, wherein the risk assessment is used to assess unauthorized access to the first security data and the intrusion of malicious software within the preset time period; S12, analyzing the current operating status and configuration of the communication cabinet according to the risk assessment results to determine the hardware and software components that need to be updated; S13, performing a performance test on the communication cabinet based on the analysis results and in combination with the performance evaluation index to verify whether the performance evaluation index is equal to the preset performance evaluation index, and if so, executing S14, otherwise returning to S1 2. The performance evaluation index is an indicator for evaluating the performance of the communication cabinet based on the throughput coefficient, availability coefficient and scalability coefficient. The throughput coefficient is an indicator for measuring the accuracy of the communication cabinet in transmitting the first security data. The availability coefficient is the ratio of the normal operation time of the communication cabinet to the preset total time. The scalability coefficient is an indicator of the expansion capability of the communication cabinet under high load and high complexity scenarios. S14. Evaluate the communication cabinet according to the results of the performance test and the feedback logs collected from authorized users, and formulate corresponding optimization strategies to optimize the communication cabinet according to the evaluation results. The optimization includes adjusting resource allocation, optimizing storage layout and adjusting optimization strategies.

[0032] Furthermore, the performance evaluation index is calculated by the following formula:

[0033]

[0034] Wherein, i is the number of the preset time period, i=1,2,...,Y, Y is the total number of the preset time period, ζi represents the performance evaluation index in the i-th preset time period, e is a natural constant, and δ represents the weight factor of the performance evaluation index;

[0035] ΔC represents the reference deviation of the throughput coefficient, Ci represents the throughput coefficient of the communication cabinet in the i-th preset time period, C0 represents the throughput reference coefficient, μ1 represents the weight factor of the throughput relative coefficient, ΔD represents the reference deviation of the availability coefficient, Di represents the availability coefficient of the communication cabinet in the i-th preset time period, D0 represents the availability reference coefficient, μ2 represents the weight factor of the availability relative coefficient, ΔG represents the reference deviation of the scalability coefficient, Gi represents the scalability coefficient of the communication cabinet in the i-th preset time period, G0 represents the scalability reference coefficient, and μ3 represents the weight factor of the scalability relative coefficient.

[0036] Furthermore, the specific detection process of the transmission performance indicator is as follows: before the first safety data is transmitted, a benchmark performance indicator is established to record the benchmark performance indicator data of the communication cabinet, and the benchmark performance indicator data is the performance data of the communication cabinet under normal operating conditions; the first safety data is monitored in real time and compared with the benchmark performance indicator to obtain a relative curve wave change rate, and the relative curve wave change rate is the relative deviation between the performance indicator of the communication cabinet and the benchmark performance indicator; it is determined whether the fluctuation amplitude of the relative curve wave change rate meets the preset fluctuation amplitude, and if so, the monitored performance data is recorded and transmitted to the communication cabinet for backup, otherwise, exception processing is performed and reflected to the operation administrator, and the exception processing includes starting the backup mechanism and triggering the alarm mechanism; corresponding improvement measures and optimization strategies are formulated according to the results of the performance indicator detection, and the changes in the performance indicators of the communication cabinet are continuously monitored during the first safety data transmission.

[0037] One or more technical solutions provided in the embodiments of the present application have at least the following technical effects or advantages:

[0038] The first security data is obtained by converting the security data to be transmitted, and the first security data is encrypted by a data encryption algorithm before data transmission. Then, during the transmission of the first security data, the internal equipment operating status and environmental status of the communication cabinet are monitored in real time and the transmission process is optimized. Finally, the communication cabinet is securely updated and optimized, thereby achieving more accurate optimization in the data transmission process, and then achieving improved security in the data transmission process, effectively solving the problem of low security in the data transmission process in the prior art.

[0039] A key corresponding to the first security data is generated through a data encryption algorithm, and then the first security data is input into the communication cabinet and the type of data encryption algorithm used is determined in combination with the encryption mode coefficient. If it is a symmetric encryption algorithm, the input first security data is converted into binary data, otherwise the input first security data is converted into quaternary data. Finally, the ciphertext data of the first security data is obtained according to the type of data encryption algorithm and the corresponding key, and the ciphertext data is transmitted to the preset target location, thereby achieving accurate acquisition of the ciphertext data and further achieving more precise encryption of the first security data.

[0040] The access user is authenticated through the identity information provided by the access user and the access user who successfully authenticates the identity is authorized. At the same time, the authorized access user is recorded as the authorized user. Then, the authorized users are classified according to the permission classification index and an access control list is established. Finally, the permissions of the authorized users are reviewed regularly and security awareness training is provided to the authorized users to obtain permission management data, thereby realizing accurate verification of the identity of the access user and further improving the confidentiality of the secure data transmission communication cabinet. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] Figure 1 A schematic diagram of the structure of a secure data transmission communication cabinet provided in an embodiment of the present application;

[0042] Figure 2 A schematic diagram of the structure of a security module in a secure data transmission communication cabinet provided in an embodiment of the present application;

[0043] Figure 3 A schematic diagram of the structure of a management module in a secure data transmission communication cabinet provided in an embodiment of the present application;

[0044] Figure 4 A flowchart of data encryption provided in an embodiment of the present application;

[0045] Figure 5 A flowchart for securely updating and optimizing a communication cabinet is provided in an embodiment of the present application. DETAILED DESCRIPTION

[0046] The embodiment of the present application solves the problem of low security in the data transmission process in the prior art by providing a secure data transmission communication cabinet. The hardware module performs data conversion on the secure data to be transmitted to obtain the first secure data. The security module then generates a key corresponding to the first secure data according to the data encryption algorithm before data transmission. At the same time, the permission to access the first secure data is set, and the abnormal behavior of the first secure data during the transmission process is monitored. Then, the management module performs real-time monitoring of the communication cabinet and changes the data transmission coefficient and the software operation coefficient. In addition, the internal equipment operation status and environmental status of the communication cabinet are monitored during the first secure data transmission to timely discover equipment abnormalities and failures.

[0047] At the same time, the operation logs and fault events of the internal equipment of the communication cabinet during the transmission of the first security data are recorded and an alarm signal mark is generated. The transmission performance indicators of the communication cabinet when transmitting the first security data are then detected and the transmission process is optimized according to the detection results. Finally, the auxiliary module uses a vulnerability scanning tool to scan the communication cabinet within a preset time period and conducts a risk assessment to analyze the current operating status and configuration of the communication cabinet, and based on the analysis results and combined with the performance evaluation index, the communication cabinet is performance tested and optimized, thereby improving the security during data transmission.

[0048] The technical solution in the embodiment of the present application is to solve the problem of low security in the above data transmission process, and the overall idea is as follows:

[0049] The first security data is obtained by performing data conversion on the security data to be transmitted, and the first security data is encrypted by using a data encryption algorithm before data transmission. Then, during the transmission of the first security data, the internal equipment operation status and environmental status of the communication cabinet are monitored in real time, and the abnormal behavior of the first security data during the transmission process is observed. Then, the transmission process is optimized, and finally, the communication cabinet is securely updated and optimized, thereby achieving the effect of improving the security during data transmission.

[0050] In order to better understand the above technical solution, the above technical solution will be described in detail below in conjunction with the accompanying drawings and specific implementation methods.

[0051] like Figure 1 As shown, it is a structural schematic diagram of a secure data transmission communication cabinet provided in an embodiment of the present application; a secure data transmission communication cabinet provided in an embodiment of the present application includes: a hardware module, a security module, a management module and an auxiliary module;

[0052] The hardware module is used to perform data conversion on the security data to be transmitted to obtain first security data, where the first security data is the security data to be transmitted after data conversion;

[0053] The security module is used to perform security protection operations on the first security data. The security protection operations include encryption operations, identity authentication operations, and abnormality monitoring operations. The encryption operations are used to protect the privacy of the first security data during transmission. The identity authentication operations are used to set permissions for accessing the first security data. The abnormality detection operations are used to monitor abnormal behaviors that occur during transmission of the first security data. The abnormal behaviors include intrusion attempts and frequent accesses.

[0054] The management module is used to manage the internal equipment operation status and environmental status of the communication cabinet in real time during the first secure data transmission process and optimize the transmission process. The real-time management includes key management, troubleshooting management, and software update management;

[0055] The auxiliary module is used to perform security updates and optimization on the communication cabinet. Security updates include vulnerability fixes, software updates, and patch updates.

[0056] In this embodiment, the internal devices include data transmission equipment, power cooling equipment, monitoring equipment and security maintenance equipment; abnormal monitoring is used to monitor unusual activities or suspicious behaviors in the transmission process of the first security data, that is, there is a security threat to data transmission. Frequent access in abnormal behavior is usually caused by potential data leakage and unauthorized access attempts. When abnormal behavior is detected, an alarm device will be triggered and corresponding countermeasures will be taken, such as isolating the affected equipment, recording more detailed logs and initiating a higher level of security mechanism, thereby improving the security of data transmission.

[0057] Further, such as Figure 2 As shown, it is a structural schematic diagram of a security module in a secure data transmission communication cabinet provided in an embodiment of the present application, the security module includes an encryption unit, an access control unit, a firewall unit and an intrusion detection unit; the encryption unit: is used to encrypt the first security data using a data encryption algorithm before data transmission; the access control unit: is used to control the access of the access user to the first security data through identity authentication operation, and the identity authentication operation includes identity authentication and permission management; the firewall unit: is used to filter malicious access records and frequent access records of the first security data; the intrusion detection unit: is used to monitor the abnormal behavior of the first security data during the transmission process according to the intrusion detection principle.

[0058] In this embodiment, after the access user passes the identity authentication, the access control unit will determine whether the user has the authority to access specific resources, which is usually based on a predefined access control policy or role-based access control (RBAC). Through identity authentication and permission management, the access control unit ensures that only authorized users can access the first security data, thereby protecting the integrity of the first security data during transmission; the intrusion detection principle means that the first security data during the transmission process is integrated into the security information management platform and intrusion detection is performed, thereby improving the stability of the first security data during transmission.

[0059] Further, such as Figure 3As shown, it is a structural schematic diagram of a management module in a secure data transmission communication cabinet provided by an embodiment of the present application, the management module includes a remote management unit, a device monitoring unit, a log recording unit and a performance detection unit; the remote management unit: is used to monitor the communication cabinet in real time and change the device configuration coefficient, the device configuration coefficient includes a data transmission coefficient and a software operation coefficient, the data transmission coefficient is an accuracy index of the first security data during the transmission process, and the software operation coefficient is an accuracy index of the first security data during the software program operation; the device monitoring unit: is used to monitor the internal device operation status and environmental status of the communication cabinet during the first security data transmission process to timely discover device anomalies and failures, the internal device operation status is used to describe the utilization rate, processing speed and resource consumption of the internal device, and the environmental status includes temperature, humidity, pressure and equipment Backup power supply status; log recording unit: used to record the operation log and fault events of the internal equipment of the communication cabinet during the first safety data transmission and generate an alarm signal mark, and the alarm signal mark is used to feedback the fault event of the communication cabinet; performance detection unit: used to detect the transmission performance index of the communication cabinet when transmitting the first safety data and optimize the transmission process according to the detection result. The transmission performance indicators include the central processing unit utilization index, the first safety data transmission error rate index and the disk waiting time index. The central processing unit utilization index is used to measure the utilization degree of the corresponding central processing unit in the first safety data transmission process. The first safety data transmission error rate index is used to evaluate the frequency of sending errors of the first safety data during the transmission process. The disk waiting time index is the response speed and response time of the disk during the transmission of the first safety data.

[0060] In this embodiment, the performance detection unit ensures that the communication cabinet maintains optimal performance when transmitting the first security data by monitoring and analyzing the transmission performance indicators, and promptly discovers and resolves performance problems. When the disk waiting time is long, it will cause data transmission delays and performance degradation. Therefore, it is necessary to optimize the transmission process according to the disk waiting time indicator, which helps to efficiently, stably and securely transmit the first security data, thereby improving data transmission efficiency.

[0061] Further, such as Figure 4As shown, it is a flow chart of data encryption provided in an embodiment of the present application, and the specific process of data encryption is: according to the data encryption algorithm, a key corresponding to the first security data is generated, and the data encryption algorithm includes a symmetric encryption algorithm and an asymmetric encryption algorithm; the first security data is input into the communication cabinet and the type of data encryption algorithm used is determined in combination with the encryption mode coefficient. If it is a symmetric encryption algorithm, the input first security data is converted into binary data, otherwise the input first security data is converted into quaternary data, and the encryption mode coefficient is a judgment indicator of the data encryption algorithm type; according to the type of data encryption algorithm and in combination with the corresponding key, the ciphertext data of the first security data is obtained, and the ciphertext data is transmitted to the preset target location, and the ciphertext data includes binary data and quaternary data.

[0062] In this embodiment, a symmetric encryption algorithm uses the same key (private key) for encryption and decryption, such as DES (Data Encryption Standard) and AES (Advanced Encryption Standard). The difficulty of cracking a symmetric encryption algorithm is usually lower because the same key is used for encryption and decryption. If the key is leaked, the security of the entire encryption system will be threatened. A symmetric encryption algorithm generally processes smaller data blocks. When using a block cipher (such as DES, AES) for symmetric encryption, the plaintext data block will be divided into fixed-size data blocks. These data blocks need to meet specific length requirements, otherwise they need to be padded or truncated; an asymmetric encryption algorithm uses a pair of keys, namely a public key and a private key. The public key is used for encryption and the private key is used for decryption, such as ECC (Elli ptic Curve Cryptography). The difficulty of cracking an asymmetric encryption algorithm is usually higher. An asymmetric encryption algorithm can process larger data blocks. Unlike a symmetric encryption algorithm, an asymmetric encryption algorithm usually does not need to consider the size and divisibility of the data block, thereby achieving high efficiency and stability of first secure data transmission.

[0063] Furthermore, the encryption mode coefficient is obtained by calculating the key cracking difficulty coefficient and data complexity coefficient of the first security data; the key cracking difficulty coefficient is the difficulty of cracking the data encryption algorithm, and the data complexity coefficient is the complexity of the plaintext data block and the ciphertext data block in the first security data, and the data complexity coefficient includes the plaintext data block complexity and the ciphertext data block complexity; the encryption mode coefficient can be obtained by a more accurate calculation method in addition to being obtained by a machine learning algorithm:

[0064]

[0065] Where, p is the number of data transmissions, p = 1, 2, ...., X, X is the total number of data transmissions, e is a natural constant, ξp represents the encryption mode coefficient of the p-th data transmission, ΔJ0 represents the reference deviation of the key cracking difficulty coefficient, J0 represents the key cracking difficulty reference coefficient, Jp represents the key cracking difficulty coefficient of the p-th data transmission, φ1 represents the correction factor of the relative deviation of the key cracking difficulty coefficient;

[0066] ΔF0 represents the reference deviation of the complexity of the plaintext data block, F0 represents the reference complexity of the plaintext data block, Fp represents the complexity of the plaintext data block of the pth data transmission, φ2 represents the correction factor of the relative deviation of the complexity of the plaintext data block, ΔE0 represents the reference deviation of the complexity of the ciphertext data block, E0 represents the reference complexity of the ciphertext data block, Ep represents the complexity of the ciphertext data block of the pth data transmission, and φ3 represents the correction factor of the relative deviation of the complexity of the ciphertext data block.

[0067] In this embodiment, the encryption mode coefficient comprehensively considers the key cracking difficulty coefficient and the data complexity coefficient. The randomness, redundancy and compression degree of the data will affect the difficulty of cracking the ciphertext data. In the actual calculation process, the calculation of the encryption mode coefficient is a continuous process and needs to be updated and adjusted according to changes in security threats. In addition, different encryption mode coefficient calculation methods are required for different application scenarios and data types, thereby achieving the improvement of the confidentiality and reliability of the first security data.

[0068] Furthermore, the specific steps of the identity authentication operation include: authenticating the access user based on the identity information provided by the access user and authorizing the access user who has successfully authenticated the identity, and recording the authorized access user as an authorized user; grading the permissions of the authorized users according to the permission grading index and establishing an access control list, the permission grading index is the access permission level of different authorized users, and the access control list is used to record the authorized user's access behavior to the communication cabinet, and the access behavior includes decryption operations, data access and function access; regularly reviewing the permissions of authorized users and conducting security awareness training for authorized users to obtain permission management data, and the permission management data is used to discover and correct problems existing in the first security data during the access period.

[0069] In this embodiment, predefined verification mechanisms (such as password hash comparison, certificate verification, and biometrics) are used to verify the accuracy of the identity information provided by the accessing user, and all permission management activities of the accessing user and the authorized user, including permission allocation, modification, and revocation, are recorded during security awareness training for subsequent audits and reviews, thereby reducing the risk of unauthorized access and achieving improved confidentiality and availability of the first security data during transmission and processing.

[0070] Furthermore, in addition to being obtained through machine learning algorithms, the permission classification index can also be obtained through the following methods. The specific obtaining method includes: obtaining a data access permission coefficient and a function access permission coefficient by analyzing the data access and function access of the authorized user, and obtaining a data access permission coefficient relative deviation and a function access permission coefficient relative deviation in combination with the corresponding reference value and reference deviation, wherein the data access permission coefficient is a permission indicator for the authorized user to access the first security data, and the function access permission coefficient is a permission indicator for the authorized user to access the communication cabinet function;

[0071] The audit tracking coefficient in the access control unit and the key management coefficient in the management module are obtained, and the relative deviation of the audit tracking coefficient and the relative deviation of the key management coefficient are obtained by combining the corresponding reference value and reference deviation. The audit tracking coefficient is an accuracy index for recording the access behavior of authorized users, and the key management coefficient is the accuracy rate of the authorized user using the key to perform decryption operation to obtain the first security data; the total authority classification coefficient is obtained by combining the authority classification correction factor, and the authority classification index is obtained by combining the obtained total authority classification coefficient; the authority classification correction factor includes the first correction factor, the second correction factor, the third correction factor and the fourth correction factor, the total authority classification coefficient includes the total data access permission coefficient, the total function access permission coefficient, the total audit tracking coefficient and the total key management coefficient, the total data access permission coefficient is the product of the relative deviation of the data access permission coefficient and the first correction factor, the total function access permission coefficient is the product of the relative deviation of the function access permission coefficient and the second correction factor, the total audit tracking coefficient is the product of the relative deviation of the audit tracking coefficient and the third correction factor, and the total key management coefficient is the product of the relative deviation of the key management coefficient and the fourth correction factor;

[0072] The authority classification index is calculated using the following formula:

[0073]

[0074] Wherein, ψp represents the permission classification index of the p-th data transmission, Δα0 represents the reference deviation of the data access permission coefficient, α0 represents the data access permission reference coefficient, αp represents the data access permission coefficient of the p-th data transmission, and a1 represents the first correction factor;

[0075] Δβ0 represents the reference deviation of the function access permission coefficient, β0 represents the function access permission reference coefficient, βp represents the function access permission coefficient of the pth data transmission, and a2 represents the second correction factor;

[0076] Δγ0 represents the reference deviation of the audit tracking coefficient, γ0 represents the audit tracking reference coefficient, γp represents the audit tracking coefficient of the p-th data transmission, a3 represents the third correction factor, Δλ0 represents the reference deviation of the key management coefficient, λ0 represents the key management reference coefficient, λp represents the key management coefficient of the p-th data transmission, and a4 represents the fourth correction factor; more accurate acquisition of the authority classification index is achieved.

[0077] In this embodiment, the relative deviation of the data access permission coefficient is the ratio of the absolute value of the difference between the data access permission coefficient and the data access permission reference coefficient to the data access permission coefficient reference deviation, the relative deviation of the function access permission coefficient is the ratio of the absolute value of the difference between the function access permission coefficient and the function access permission reference coefficient to the function access permission coefficient reference deviation, the relative deviation of the audit tracking coefficient is the ratio of the absolute value of the difference between the audit tracking coefficient and the audit tracking reference coefficient to the audit tracking coefficient reference deviation, and the relative deviation of the key management coefficient is the ratio of the absolute value of the difference between the key management coefficient and the key management reference coefficient to the key management coefficient reference deviation.

[0078] Further, such as Figure 5 As shown, it is a flowchart of performing security update and optimization on a communication cabinet provided in an embodiment of the present application. The specific steps of performing security update and optimization on a communication cabinet include:

[0079] S11, scanning the communication cabinet using a vulnerability scanning tool within a preset time period and performing a risk assessment, wherein the risk assessment is used to assess unauthorized access to the first security data and intrusion of malware within the preset time period;

[0080] S12, analyzing the current operating status and configuration of the communication cabinet according to the risk assessment results to determine the hardware and software components that need to be updated;

[0081] S13, based on the analysis results and in combination with the performance evaluation index, the communication cabinet is subjected to a performance test to verify whether the performance evaluation index is equal to the preset performance evaluation index. If so, S14 is executed, otherwise S12 is returned. The performance evaluation index is an indicator for evaluating the performance of the communication cabinet according to the throughput coefficient, the availability coefficient and the scalability coefficient. The throughput coefficient is an indicator for measuring the accuracy of the communication cabinet in transmitting the first safety data. The availability coefficient is the ratio of the normal operation time of the communication cabinet to the preset total time. The scalability coefficient is an indicator of the expansion capability of the communication cabinet under high load and high complexity scenarios.

[0082] S14, evaluating the communication cabinet according to the results of the performance test and the collected feedback logs of authorized users, and formulating corresponding optimization strategies to optimize the communication cabinet according to the evaluation results, wherein the optimization includes adjusting resource allocation, optimizing storage layout and adjusting optimization strategies.

[0083] In this embodiment, the scalability coefficient takes into account whether the communication cabinet can smoothly expand resources, maintain performance and adapt to future growth needs when facing pressure, and conducts a comprehensive performance evaluation of the communication cabinet in combination with performance test results and user feedback logs. By calculating the performance evaluation index, the performance of the communication cabinet in various aspects can be quantitatively understood, thereby achieving a more accurate evaluation of the communication cabinet.

[0084] Furthermore, the performance evaluation index can be obtained not only through machine learning algorithms but also through more precise calculation methods:

[0085]

[0086] Wherein, i is the number of the preset time period, i=1,2,...,Y, Y is the total number of the preset time period, ζi represents the performance evaluation index in the i-th preset time period, e is a natural constant, and δ represents the weight factor of the performance evaluation index;

[0087] ΔC represents the reference deviation of the throughput coefficient, Ci represents the throughput coefficient of the communication cabinet in the i-th preset time period, C0 represents the throughput reference coefficient, and μ1 represents the weight factor of the throughput relative coefficient;

[0088] ΔD represents the reference deviation of the availability coefficient, Di represents the availability coefficient of the communication cabinet in the i-th preset time period, D0 represents the availability reference coefficient, μ2 represents the weight factor of the relative availability coefficient, ΔG represents the reference deviation of the scalability coefficient, Gi represents the scalability coefficient of the communication cabinet in the i-th preset time period, G0 represents the scalability reference coefficient, and μ3 represents the weight factor of the relative scalability coefficient.

[0089] In this embodiment, the throughput relative coefficient is the ratio of the absolute value of the difference between the throughput coefficient and the throughput reference coefficient to the reference deviation of the throughput coefficient, the availability relative coefficient is the ratio of the absolute value of the difference between the availability coefficient and the availability reference coefficient to the reference deviation of the availability coefficient, and the scalability relative coefficient is the ratio of the absolute value of the difference between the scalability coefficient and the scalability reference coefficient to the reference deviation of the scalability coefficient; the performance evaluation index is usually used to comprehensively evaluate the performance of a system and equipment, thereby improving the reliability and accuracy of the performance evaluation index.

[0090] Furthermore, the specific detection process of the transmission performance indicator is as follows: before the first safe data is transmitted, a benchmark performance indicator is established to record the benchmark performance indicator data of the communication cabinet, and the benchmark performance indicator data is the performance data of the communication cabinet under normal operating conditions; the first safety data is monitored in real time and compared with the benchmark performance indicator to obtain the relative curve wave change rate, and the relative curve wave change rate is the relative deviation between the performance indicator of the communication cabinet and the benchmark performance indicator; whether the fluctuation amplitude of the relative curve wave change rate meets the preset fluctuation amplitude, if so, the monitored performance data is recorded and transmitted to the communication cabinet for backup, otherwise, exception processing is performed and reflected to the operation administrator, and the exception processing includes starting the backup mechanism and triggering the alarm mechanism; formulate corresponding improvement measures and optimization strategies according to the results of the performance indicator detection, and continuously monitor the changes in the performance indicators of the communication cabinet during the first safe data transmission.

[0091] In this embodiment, before the first secure data transmission, it is first necessary to select a suitable performance indicator, record the performance indicator data within a preset time period under no load or low load conditions, and calculate the average value of the performance indicator data as the benchmark performance indicator data to ensure that the communication cabinet is always maintained in the best state, thereby achieving more accurate detection of performance indicators.

[0092] The technical solution in the above-mentioned embodiment of the present application has at least the following technical effects or advantages: relative to the secure data transmission system of the public application with publication number: CN115836312A, the embodiment of the present application generates a key corresponding to the first security data through a data encryption algorithm, and then inputs the first security data into the communication cabinet and determines the type of data encryption algorithm used in combination with the encryption mode coefficient. If it is a symmetric encryption algorithm, the input first security data is converted into binary data, otherwise the input first security data is converted into quaternary data. Finally, the ciphertext data of the first security data is obtained according to the type of data encryption algorithm and in combination with the corresponding key, and the ciphertext data is transmitted to the preset target location, thereby achieving accurate Obtain ciphertext data, thereby achieving more accurate encryption of the first security data; relative to a transmission line corridor communication coverage and data transmission method announced with announcement number: CN111667381B, the embodiment of the present application authenticates the access user through the identity information provided by the access user and authorizes the access user who has successfully authenticated the identity, and at the same time records the authorized access user as an authorized user, and then classifies the authorized user according to the authority classification index and establishes an access control list, and finally regularly reviews the authority of the authorized user and conducts security awareness training for the authorized user to obtain authority management data, thereby achieving accurate verification of the identity of the access user, and then achieving improved confidentiality of the secure data transmission communication cabinet.

[0093] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0094] The present invention is described with reference to flowcharts and / or block diagrams of systems, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0095] These computer program instructions may also be stored in a computer readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0096] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0097] Although the preferred embodiments of the present invention have been described, those skilled in the art may make other changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the present invention.

[0098] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. A secure data transmission communication cabinet, characterized in that: Includes hardware module, security module, management module and auxiliary module; The hardware module is used to perform data conversion on the security data to be transmitted to obtain first security data, where the first security data is the security data to be transmitted after data conversion; The security module is used to perform a security protection operation on the first security data, wherein the security protection operation includes an encryption operation, an identity authentication operation, and an anomaly detection operation, wherein the encryption operation is used to protect the privacy of the first security data during transmission, the identity authentication operation is used to set the permission to access the first security data, and the anomaly detection operation is used to monitor abnormal behaviors occurring during transmission of the first security data, wherein the abnormal behaviors include intrusion attempts and frequent accesses; The management module is used to manage the internal equipment operation status and environmental status of the communication cabinet in real time during the first secure data transmission process and optimize the transmission process, and the real-time management includes key management, troubleshooting management, and software update management; The auxiliary module is used to perform security updates and optimization on the communication cabinet, and the security updates include vulnerability repairs, software updates, and patch updates; The security module includes an encryption unit, an access control unit, a firewall unit and an intrusion detection unit; The encryption unit is used to encrypt the first security data using a data encryption algorithm before data transmission; The access control unit is used to control the access of the access user to the first security data through an identity authentication operation, wherein the identity authentication operation includes identity authentication and authority management; The firewall unit is used to filter malicious access records and frequent access records of the first security data; The intrusion detection unit is used to monitor abnormal behavior of the first security data during transmission according to the intrusion detection principle; The management module includes a remote management unit, a device monitoring unit, a log recording unit and a performance detection unit; The remote management unit is used to monitor the communication cabinet in real time and change the equipment configuration coefficient, wherein the equipment configuration coefficient includes a data transmission coefficient and a software operation coefficient, wherein the data transmission coefficient is an accuracy index of the first safety data during the transmission process, and the software operation coefficient is an accuracy index of the first safety data during the operation of the software program; The device monitoring unit is used to monitor the internal device operation status and environmental status of the communication cabinet during the first secure data transmission process to timely discover device abnormalities and failures. The internal device operation status is used to describe the utilization rate, processing speed and resource consumption of the internal device. The environmental status includes temperature, humidity, pressure and device power supply; The log recording unit is used to record the operation log and fault events of the internal equipment of the communication cabinet during the first secure data transmission process and generate an alarm signal mark, wherein the alarm signal mark is used to feedback the fault event of the communication cabinet; The performance detection unit is used to detect the transmission performance index of the communication cabinet when transmitting the first safety data and optimize the transmission process according to the detection result, wherein the transmission performance index includes a central processing unit utilization index, a first safety data transmission error rate index and a disk waiting time index, wherein the central processing unit utilization index is used to measure the utilization degree of the corresponding central processing unit in the first safety data transmission process, the first safety data transmission error rate index is used to evaluate the frequency of sending errors of the first safety data in the transmission process, and the disk waiting time index is the response speed and response time of the disk in the transmission process of the first safety data; The specific process of data encryption is as follows: Generate a key corresponding to the first security data according to a data encryption algorithm, wherein the data encryption algorithm includes a symmetric encryption algorithm and an asymmetric encryption algorithm; Input the first security data into the communication cabinet and determine the type of data encryption algorithm used in combination with the encryption mode coefficient. If it is a symmetric encryption algorithm, convert the input first security data into binary data; otherwise, convert the input first security data into quaternary data. The encryption mode coefficient is a determination indicator of the type of data encryption algorithm. Obtaining ciphertext data of the first security data according to the type of the data encryption algorithm and in combination with the corresponding key, and transmitting the ciphertext data to a preset target location, wherein the ciphertext data includes binary data and quaternary data; The encryption mode coefficient is obtained by calculating the key cracking difficulty coefficient and the data complexity coefficient of the first security data; The key cracking difficulty coefficient is the difficulty of cracking the data encryption algorithm, and the data complexity coefficient is the complexity of the plaintext data block and the ciphertext data block in the first security data, and the data complexity coefficient includes the complexity of the plaintext data block and the complexity of the ciphertext data block; The encryption mode coefficient is calculated by the following formula: Wherein, e is a natural constant, p is the number of data transmissions, p = 1, 2, ..., X, X is the total number of data transmissions, ξp represents the encryption mode coefficient of the p-th data transmission, ΔJ0 represents the reference deviation of the key cracking difficulty coefficient, J0 represents the key cracking difficulty reference coefficient, Jp represents the key cracking difficulty coefficient of the p-th data transmission, φ1 represents the correction factor of the relative deviation of the key cracking difficulty coefficient; ΔF0 represents the reference deviation of the complexity of the plaintext data block, F0 represents the reference complexity of the plaintext data block, Fp represents the complexity of the plaintext data block of the pth data transmission, φ2 represents the correction factor of the relative deviation of the complexity of the plaintext data block, ΔE0 represents the reference deviation of the complexity of the ciphertext data block, E0 represents the reference complexity of the ciphertext data block, Ep represents the complexity of the ciphertext data block of the pth data transmission, and φ3 represents the correction factor of the relative deviation of the complexity of the ciphertext data block.

2. A secure data transmission communication cabinet as claimed in claim 1, characterized in that: The specific steps of the identity verification operation include: Authentication of the access user is performed based on the identity information provided by the access user, and the access user who has successfully authenticated the identity is authorized, and the authorized access user is recorded as the authorized user; According to the authority classification index, the authorized users are classified and an access control list is established. The authority classification index is the access authority level of different authorized users. The access control list is used to record the access behavior of the authorized users to the communication cabinet, and the access behavior includes decryption operation, data access and function access; The rights of authorized users are reviewed regularly and security awareness training is performed on authorized users to obtain rights management data, where the rights management data is used to discover and correct problems that exist during access to the first security data.

3. A secure data transmission communication cabinet as claimed in claim 2, characterized in that: The specific method for obtaining the authority classification index includes: The data access permission coefficient and the function access permission coefficient are obtained by analyzing the data access and function access of the authorized user, and the relative deviation of the data access permission coefficient and the relative deviation of the function access permission coefficient are obtained by combining the corresponding reference value and reference deviation, wherein the data access permission coefficient is the permission index of the authorized user to access the first security data, and the function access permission coefficient is the permission index of the authorized user to access the communication cabinet function; Obtaining an audit tracking coefficient in the access control unit and a key management coefficient in the management module and combining the corresponding reference value and reference deviation to obtain an audit tracking coefficient relative deviation and a key management coefficient relative deviation, wherein the audit tracking coefficient is an accuracy index for recording the access behavior of the authorized user, and the key management coefficient is an accuracy rate of the authorized user using the key to perform a decryption operation to obtain the first security data; The authority grading total coefficient is obtained in combination with the authority grading correction factor, and the authority grading index is obtained in combination with the obtained authority grading total coefficient, wherein the authority grading correction factor includes a first correction factor, a second correction factor, a third correction factor and a fourth correction factor, and the authority grading total coefficient includes a data access permission total coefficient, a function access permission total coefficient, an audit tracking total coefficient and a key management total coefficient, wherein the data access permission total coefficient is the product of the data access permission coefficient relative deviation and the first correction factor, the function access permission total coefficient is the product of the function access permission coefficient relative deviation and the second correction factor, the audit tracking total coefficient is the product of the audit tracking coefficient relative deviation and the third correction factor, and the key management total coefficient is the product of the key management coefficient relative deviation and the fourth correction factor; The authority classification index is calculated by the following formula: Wherein, ψp represents the permission classification index of the p-th data transmission, Δα0 represents the reference deviation of the data access permission coefficient, α0 represents the data access permission reference coefficient, αp represents the data access permission coefficient of the p-th data transmission, and a1 represents the first correction factor; Δβ0 represents the reference deviation of the function access permission coefficient, β0 represents the function access permission reference coefficient, βp represents the function access permission coefficient of the pth data transmission, and a2 represents the second correction factor; Δγ0 represents the reference deviation of the audit tracking coefficient, γ0 represents the audit tracking reference coefficient, γp represents the audit tracking coefficient of the p-th data transmission, a3 represents the third correction factor, Δλ0 represents the reference deviation of the key management coefficient, λ0 represents the key management reference coefficient, λp represents the key management coefficient of the p-th data transmission, and a4 represents the fourth correction factor.

4. A secure data transmission communication cabinet as claimed in claim 1, characterized in that: The specific steps of performing security update and optimization on the communication cabinet include: S11, scanning the communication cabinet using a vulnerability scanning tool within a preset time period and performing a risk assessment, wherein the risk assessment is used to assess unauthorized access to the first security data and intrusion of malware within the preset time period; S12, analyzing the current operating status and configuration of the communication cabinet according to the risk assessment results to determine the hardware and software components that need to be updated; S13, based on the analysis results and in combination with the performance evaluation index, the communication cabinet is subjected to a performance test to verify whether the performance evaluation index is equal to a preset performance evaluation index. If so, S14 is executed, otherwise S12 is returned. The performance evaluation index is an index for evaluating the performance of the communication cabinet according to the throughput coefficient, the availability coefficient and the scalability coefficient. The throughput coefficient is an index for measuring the accuracy of the communication cabinet in transmitting the first security data. The availability coefficient is a ratio of the normal operation time of the communication cabinet to the preset total time. The scalability coefficient is an index for the expansion capability of the communication cabinet under high load and high complexity scenarios. S14, evaluating the communication cabinet according to the results of the performance test and the collected feedback logs of authorized users, and formulating corresponding optimization strategies to optimize the communication cabinet according to the evaluation results, wherein the optimization includes adjusting resource allocation, optimizing storage layout and adjusting optimization strategies.

5. A secure data transmission communication cabinet as claimed in claim 4, characterized in that: The performance evaluation index is calculated by the following formula: Wherein, i is the number of the preset time period, i=1,2,...,Y, Y is the total number of the preset time period, ζi represents the performance evaluation index in the i-th preset time period, e is a natural constant, and δ represents the weight factor of the performance evaluation index; ΔC represents the reference deviation of the throughput coefficient, Ci represents the throughput coefficient of the communication cabinet in the i-th preset time period, C0 represents the throughput reference coefficient, μ1 represents the weight factor of the throughput relative coefficient, ΔD represents the reference deviation of the availability coefficient, Di represents the availability coefficient of the communication cabinet in the i-th preset time period, D0 represents the availability reference coefficient, μ2 represents the weight factor of the availability relative coefficient, ΔG represents the reference deviation of the scalability coefficient, Gi represents the scalability coefficient of the communication cabinet in the i-th preset time period, G0 represents the scalability reference coefficient, and μ3 represents the weight factor of the scalability relative coefficient.

6. A secure data transmission communication cabinet as claimed in claim 3, characterized in that: The specific detection process of the transmission performance index is as follows: Establishing a baseline performance indicator to record baseline performance indicator data of the communication cabinet before the first secure data transmission, wherein the baseline performance indicator data is performance data of the communication cabinet under normal operating conditions; Performing real-time monitoring on the first safety data and performing comparative analysis with the benchmark performance index to obtain a relative curve wave change rate, wherein the relative curve wave change rate is a relative deviation degree between the performance index of the communication cabinet and the benchmark performance index; Determine whether the fluctuation amplitude of the relative curve wave change rate meets the preset fluctuation amplitude. If so, record the monitored performance data and transmit it to the communication cabinet for backup. Otherwise, perform abnormal processing and reflect it to the operation administrator. The abnormal processing includes starting the backup mechanism and triggering the alarm mechanism. Develop corresponding improvement measures and optimization strategies based on the results of performance indicator testing, and continuously monitor changes in communication cabinet performance indicators during the first safety data transmission process.

Images