Industrial Internet digital information encryption transmission method and system

Abstract

The present invention provides an industrial Internet digital information encryption transmission method and system, belonging to the field of encryption transmission technology, and the method includes: obtaining a generation port and transmission requirements of information to be transmitted based on the industrial Internet of Things; matching a plurality of first channels that match the generation port from a transmission channel list, and parsing the transmission requirements to select a second channel from the plurality of first channels; obtaining a first transmission field of the transmission starting point of the second channel and setting a first encryption symbol, and at the same time, obtaining a second transmission field of the transmission end point of the second channel and setting a second encryption symbol; respectively obtaining the node attributes of the transmission nodes involved in the second channel, and constructing a node encryption pool; encrypting the information to be transmitted and the second channel according to the first encryption symbol, the second encryption symbol, the port attributes of the generation port and the node encryption pool, and realizing encrypted transmission. Flexible encryption of the information to be transmitted and the second channel is realized, and effective protection of data is realized.

Description

Technical Field

[0001] The present invention relates to the field of encrypted transmission technology, and in particular to an industrial Internet digital information encrypted transmission method and system. Background Art

[0002] The Industrial Internet is a new type of infrastructure, application model and industrial ecology that is a deep integration of the new generation of information and communication technology and the industrial economy. By fully connecting people, machines, objects, systems, etc., it builds a new manufacturing and service system covering the entire industrial chain and the entire value chain, providing a way to achieve the digitalization, networking and intelligent development of industry and even the industry. As more and more digital information is generated, the secure transmission of digital information becomes particularly important.

[0003] The common method now is to encrypt the digital information itself to achieve data transmission, and generally the system encrypts the digital information in a fixed manner according to the encryption method originally set by the system, which is unique, and transmits it on the channel specified by the system after encryption. During the transmission process, it is generally based on the set firewall and other methods to resist external intrusions. That is, during the information transmission process, the channel will not be encrypted based on the information itself. The encryption method is not flexible and is not conducive to data protection.

[0004] Therefore, the present invention proposes an industrial Internet of Things digital information encryption transmission method and system. Summary of the invention

[0005] The present invention provides an industrial Internet digital information encryption transmission method and system, which is used to determine the reliability of the initial transmission by matching the transmission requirements of the information to be transmitted with the transmission channel, and subsequently realize flexible encryption of the information to be transmitted and the second channel through comprehensive analysis of the nodes in the channel and the information to be transmitted, thereby realizing effective protection of the data.

[0006] The present invention provides an industrial Internet digital information encryption transmission method, comprising:

[0007] Step 1: Obtain information to be transmitted based on the industrial Internet of Things and a port where the information to be transmitted is generated, and at the same time, obtain transmission requirements for the information to be transmitted;

[0008] Step 2: Matching a plurality of first channels matching the generating port from the transmission channel list, and parsing the transmission requirement to select a second channel from the plurality of first channels;

[0009] Step 3: Obtain a first transmission field of the transmission start point of the second channel and set a first encryption symbol, and at the same time, obtain a second transmission field of the transmission end point of the second channel and set a second encryption symbol;

[0010] Step 4: respectively obtain the node attributes of the transmission nodes involved in the second channel, and build a node encryption pool;

[0011] Step 5: Encrypt the information to be transmitted and the second channel according to the first encryption symbol, the second encryption symbol, the port attribute of the generating port and the node encryption pool to achieve encrypted transmission.

[0012] Preferably, parsing the transmission requirement and selecting a second channel from the plurality of first channels comprises:

[0013] Inputting the transmission requirement into a requirement parsing model to obtain a number of parsing parameters;

[0014] Match all parsing parameters with the parameter-condition comparison table to obtain the corresponding channel transmission conditions;

[0015] The channel transmission condition is sequentially compared with the set transmission condition of each first channel for similarity, and the channel with the highest similarity is selected as the second channel.

[0016] Preferably, the node attribute is related to the historical transmission information type of the node and the information encryption method under different historical transmission information types.

[0017] Preferably, building a node encryption pool includes:

[0018] Determine from the node log database the first number of times each communication node is applied to different transmission channels and the channel lengths of the different transmission channels applied;

[0019] Determine the encryption capacity coefficient of each communication node based on the first number and the channel length;

[0020] ;

[0021] in, represents the encryption capacity coefficient of the corresponding communication node; represents the application weight of the corresponding communication node applied to the i1th transmission channel; Indicates the overall security of the i1th transmission channel applied by the corresponding communication node; represents the first number of times the corresponding communication node is applied to the i1th transmission channel; Indicates the number of nodes involved in the i1th transmission channel applied to the corresponding communication node;

[0022] It represents the channel length between the corresponding communication node and its left neighbor node after being applied to the i1th transmission channel; It represents the channel length between the corresponding communication node and its right neighbor node after being applied to the i1th transmission channel; The channel length of the i1th transmission channel applied to the corresponding communication node; represents the safety-capacity conversion factor;

[0023] Based on the encryption capacity coefficient, determining the pool capacity of the corresponding communication node from the coefficient-pool comparison table;

[0024] According to the historical transmission information type and information encryption method, statistics are obtained on the encryption method of the corresponding communication node;

[0025] If the total capacity of all involved encryption methods is less than the pool capacity, an encryption pool is formed based on all involved encryption methods;

[0026] Otherwise, the sub-capacity and sub-security of each encryption method involved are determined, and the methods are screened from all encryption methods involved to form an encryption pool.

[0027] Preferably, encrypting the information to be transmitted and the second channel includes:

[0028] Performing cluster analysis on the information to be transmitted to obtain a number of sub-clustering information, and determining the clustering cluster of each sub-clustering information respectively;

[0029] Based on the port attribute of the port generating the information to be transmitted, determine the cluster weight of the corresponding cluster cluster, and number all sub-cluster information as needed according to the cluster weight;

[0030] According to the on-demand numbering of each sub-cluster information, a matching encryption method is obtained from the information encryption pool and the corresponding sub-cluster information is encrypted.

[0031] Preferably, encrypting the information to be transmitted and the second channel further includes:

[0032] Determine the number of extracted encryptions for each transmission node according to the transmission matching degree between the information to be transmitted and each transmission node, and determine the information importance of the information to be transmitted according to the transmission requirements;

[0033] When the extracted encryption quantity is 1, a matching first mode is extracted from the corresponding node encryption pool according to the importance of the information, and attached to the transmission channel between the corresponding transmission node and the adjacent previous transmission node;

[0034] When the extracted encryption quantity is not 1, the information to be transmitted is split according to the matching level, and the breadth, depth and accuracy of each split information are respectively obtained to construct the initial coordinates;

[0035] The initial coordinates of each split information are marked in a blank three-dimensional coordinate system, and the marked results are subjected to surface fitting and drawing in order according to the matching level to obtain a three-dimensional surface;

[0036] Locking the three-dimensional coordinates of the eight outermost endpoints in the three-dimensional surface, and obtaining the line lengths of any two outermost endpoints in turn, and then screening the matching level to which the two three-dimensional coordinates with the longest length belong;

[0037] According to the sub-importance of the split information under each matching level, a second matching method is extracted from the corresponding node encryption pool in turn;

[0038] According to the lengths of the first encryption symbol and the second encryption symbol, respectively, the mod function is used to obtain the corresponding first remainder ys1 and second remainder ys2;

[0039] Obtain the starting encryption method that matches (ys1, ys2) and the ending encryption method that matches (ys2, ys1) from the double remainder encryption pool;

[0040] Sequence encoding is performed on each second mode, and position alignment and binary symbol supplementation of blank positions are performed to construct a coding matrix;

[0041] The symbols in the same column code under the coding matrix are randomly exchanged, and the adjustment method corresponding to each row vector in the matrix after the analysis and exchange is combined with the starting point encryption method and the end point encryption method to be attached to the transmission channel of the corresponding transmission node and the adjacent previous transmission node according to the random order of collection;

[0042] Among them, the corresponding importance is related to the encryption security of the encryption method.

[0043] Preferably, the adjustment method corresponding to each row vector in the matrix after the analysis and exchange is combined with the starting point encryption method and the end point encryption method, including:

[0044] When the security of the second method under the same vector is less than the security of the corresponding adjustment method, Select from the starting point encryption method and the end point encryption method, where: Indicates the safety of the corresponding adjustment method; Indicates the security corresponding to the second method; Indicates unit safety quantity;

[0045] like At this time, the starting point encryption method and the end point encryption method are combined with the adjustment method under the corresponding row vector, where Indicates the security of the encryption method at the starting point; Indicates the security of the endpoint encryption method;

[0046] like ,At this time, the starting point encryption method is combined with the adjustment method under the corresponding row vector;

[0047] like , at this time, a method is randomly selected from the starting point encryption method and the end point encryption method to be combined with the adjustment method under the corresponding row vector;

[0048] like ,At this time, the endpoint encryption method is combined with the adjustment method under the corresponding row vector.

[0049] Preferably, determining the extraction encryption quantity of each transmission node includes:

[0050] Calculating the transmission matching degree Cp between the information to be transmitted and each transmission node;

[0051] ;

[0052] in, A function representing the number of matching types of all information types involved in the information to be transmitted s1 and the set transmission type of the corresponding transmission node; represents the historical transmission probability of the corresponding transmission node based on the j1th matching type; Indicates all The maximum value in ; Indicates all The variance of ; ln represents the sign of logarithmic function; represents the total number of types of the set transmission type for the corresponding transmission node, and ;

[0053] Calculate the extraction encryption quantity Jn of the corresponding transmission node based on the transmission matching degree;

[0054] ;

[0055] in, represents the transmission failure probability of the corresponding transmission node based on the j1th matching type; Indicates the type transmission weight of the j1th matching type under the corresponding transmission node; Indicates that the corresponding transmission node is based on and The setting failure probability function; Indicates the corresponding transmission node Matching type transmission weight; Indicates the floor symbol; max is the maximum value symbol.

[0056] The present invention provides an industrial Internet digital information encryption transmission system, comprising:

[0057] An acquisition module is used to acquire information to be transmitted based on the industrial Internet of Things and a port for generating the information to be transmitted, and at the same time, acquire a transmission requirement for the information to be transmitted;

[0058] A channel screening module, used for matching a plurality of first channels matching the generating port from a transmission channel list, and parsing the transmission requirement to screen a second channel from the plurality of first channels;

[0059] A symbol setting module, used for acquiring a first transmission field of a transmission start point of the second channel and setting a first encryption symbol, and at the same time, acquiring a second transmission field of a transmission end point of the second channel and setting a second encryption symbol;

[0060] An encryption pool construction module, used to respectively obtain node attributes of the transmission nodes involved in the second channel and construct a node encryption pool, wherein the node attributes are related to the historical transmission information type of the node and the information encryption method under different historical transmission information types;

[0061] The encryption transmission module is used to encrypt the information to be transmitted and the second channel according to the first encryption symbol, the second encryption symbol, the port attribute of the generating port and the node encryption pool to realize encrypted transmission.

[0062] Compared with the prior art, the beneficial effects of this application are:

[0063] The reliability of the initial transmission is determined by matching the transmission requirements of the information to be transmitted with the transmission channel, and then through comprehensive analysis of the nodes in the channel and the information to be transmitted, flexible encryption of the information to be transmitted and the second channel is achieved to achieve effective protection of the data.

[0064] Other features and advantages of the present invention will be described in the following description, and partly become apparent from the description, or understood by practicing the present invention. The purpose and other advantages of the present invention can be realized and obtained by the structures particularly pointed out in the written description and the accompanying drawings.

[0065] The technical solution of the present invention is further described in detail below through the accompanying drawings and embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0066] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the present invention and do not constitute a limitation of the present invention. In the accompanying drawings:

[0067] Figure 1This is a flow chart of an industrial Internet digital information encryption transmission method in an embodiment of the present invention;

[0068] Figure 2 This is a structural diagram of an industrial Internet digital information encryption transmission system in an embodiment of the present invention. DETAILED DESCRIPTION

[0069] The preferred embodiments of the present invention are described below in conjunction with the accompanying drawings. It should be understood that the preferred embodiments described herein are only used to illustrate and explain the present invention, and are not used to limit the present invention.

[0070] The present invention provides an industrial Internet digital information encryption transmission method, such as Figure 1 As shown, including:

[0071] Step 1: Obtain information to be transmitted based on the industrial Internet of Things and a port where the information to be transmitted is generated, and at the same time, obtain transmission requirements for the information to be transmitted;

[0072] Step 2: Matching a plurality of first channels matching the generating port from the transmission channel list, and parsing the transmission requirement to select a second channel from the plurality of first channels;

[0073] Step 3: Obtain a first transmission field of the transmission start point of the second channel and set a first encryption symbol, and at the same time, obtain a second transmission field of the transmission end point of the second channel and set a second encryption symbol;

[0074] Step 4: respectively obtain the node attributes of the transmission nodes involved in the second channel, and build a node encryption pool;

[0075] Step 5: Encrypt the information to be transmitted and the second channel according to the first encryption symbol, the second encryption symbol, the port attribute of the generating port and the node encryption pool to achieve encrypted transmission.

[0076] Preferably, the node attribute is related to the historical transmission information type of the node and the information encryption method under different historical transmission information types.

[0077] In this embodiment, the information to be transmitted refers to a file that needs to be transmitted securely, such as an industrial ecological resource file retrieved based on the Internet. At this time, the file needs to be transmitted.

[0078] In this embodiment, the generating port refers to a port that generates a file to be transmitted.

[0079] In this embodiment, the transmission requirements are described in relation to the transmission rate, the transmission security level, etc. After parsing, the values ​​of the transmission rate and the transmission security level can be directly obtained, thereby facilitating locking of the second channel.

[0080] In this embodiment, the transmission channel list includes several transmission channels, and the transmission channels match the protocol. If communication protocol 1 is used to achieve communication, then the transmission channel needs to use a channel consistent with communication protocol 1 and is regarded as the first channel.

[0081] Since the standard rate and standard security level of each channel are pre-set, that is, they are determined through communication tests before the channel is put into actual use, it is possible to directly match the transmission rate, transmission security level, etc. to obtain the most matching channel, which is regarded as the second channel.

[0082] In this embodiment, for example, information is transmitted from end A to end B, and in this process, different communication nodes are used to realize information transmission. For example, end A--communication node 1--communication node 2--communication node 3--end B is regarded as the second channel, wherein end A is regarded as the starting point of transmission, end B is regarded as the end point of transmission, and the generating port is set at end A.

[0083] In this embodiment, the transmission field refers to a field representing the original security protection status of the A end and the B end, for example, At this time, according to the field-symbol comparison table, we can get Symbols that match one by one, for example: , at this time, the encryption symbol is: .

[0084] In this embodiment, the field-symbol comparison table includes different fields and encryption symbols matching the fields, which are pre-set to facilitate matching with the transmission field and provide convenience for encryption of subsequent information and channels, wherein the transmission field of each end is known and unique.

[0085] In this embodiment, the historical transmission information types include: one or more combinations of text types, picture types, video types, etc., and the information encryption methods include: symmetric encryption, asymmetric encryption, hybrid encryption, message authentication code, digital signature, etc.

[0086] In this embodiment, each transmission node corresponds to an encryption pool, and the encryption pool contains several encryption methods.

[0087] The beneficial effect of the above technical solution is: relying on the transmission requirements of the information to be transmitted to match the transmission channel to determine the reliability of the initial transmission, and subsequently through comprehensive analysis of the nodes in the channel and the information to be transmitted, flexible encryption of the information to be transmitted and the second channel is achieved, thereby achieving effective protection of the data.

[0088] The present invention provides an industrial Internet digital information encryption transmission method, which analyzes the transmission requirements and selects a second channel from the plurality of first channels, comprising:

[0089] Inputting the transmission requirement into a requirement parsing model to obtain a number of parsing parameters;

[0090] Match all parsing parameters with the parameter-condition comparison table to obtain the corresponding channel transmission conditions;

[0091] The channel transmission condition is sequentially compared with the set transmission condition of each first channel for similarity, and the channel with the highest similarity is selected as the second channel.

[0092] In this embodiment, the requirement parsing model is obtained by training the neural network model for samples based on the transmission requirements and the specific parameters and values ​​involved in the transmission requirements, and then the parsing parameters can be directly obtained according to the transmission requirements, and the parsing parameters include the transmission rate and transmission security.

[0093] In this embodiment, the parameter-condition comparison table includes different analysis parameters and channel transmission conditions for the parameters, and can be directly matched. For example, the communication transmission conditions are: the transmission rate value range under the analysis parameters is: a1 < transmission rate < a2, and the security level value range is: b1 < security level < b2. It should be noted that the transmission rate of the analysis parameter is the middle value of the corresponding value range, and the security level of the analysis parameter is the middle value of the corresponding value range.

[0094] In this embodiment, the transmission conditions are set: the rate ss is set, and the level sd is set.

[0095] In this embodiment, similarity comparison refers to comparing the rate and level in the set transmission conditions with the corresponding range. The closer to the middle value, the higher the corresponding similarity is considered to be, and the second channel can be obtained.

[0096] The beneficial effects of the above technical solution are: it is convenient to obtain parameters through the model to analyze the requirements, and it is convenient to obtain the channel transmission conditions by matching with the comparison table, and then obtain the second channel to provide a basis for subsequent transmission.

[0097] The present invention provides an industrial Internet digital information encryption transmission method, which constructs a node encryption pool, including:

[0098] Determine from the node log database the first number of times each communication node is applied to different transmission channels and the channel lengths of the different transmission channels applied;

[0099] Determine the encryption capacity coefficient of each communication node based on the first number and the channel length;

[0100] ;

[0101] in, represents the encryption capacity coefficient of the corresponding communication node; represents the application weight of the corresponding communication node applied to the i1th transmission channel; Indicates the overall security of the i1th transmission channel applied by the corresponding communication node; represents the first number of times the corresponding communication node is applied to the i1th transmission channel; Indicates the number of nodes involved in the i1th transmission channel applied to the corresponding communication node; It represents the channel length between the corresponding communication node and its left neighbor node after being applied to the i1th transmission channel; It represents the channel length between the corresponding communication node and its right neighbor node after being applied to the i1th transmission channel; The channel length of the i1th transmission channel applied to the corresponding communication node; represents the safety-capacity conversion factor;

[0102] Based on the encryption capacity coefficient, determining the pool capacity of the corresponding communication node from the coefficient-pool comparison table;

[0103] According to the historical transmission information type and information encryption method, statistics are obtained on the encryption method of the corresponding communication node;

[0104] If the total capacity of all involved encryption methods is less than the pool capacity, an encryption pool is formed based on all involved encryption methods;

[0105] Otherwise, the sub-capacity and sub-security of each encryption method involved are determined, and the methods are screened from all encryption methods involved to form an encryption pool.

[0106] In this embodiment, the node log database contains the transmission conditions involved in different communication nodes, including the transmission usage of the node and the communication length of the channel corresponding to the node, etc., so that the application status of each node can be directly determined. The same node can be used in different transmission channels, and the same transmission channel may be used multiple times.

[0107] In this embodiment, The value range is 0 to 1.

[0108] In this embodiment, the channel lengths of adjacent nodes in different transmission channels may be different.

[0109] In this embodiment, The purpose is to Standardization is performed to facilitate the comparison and matching of subsequent coefficients.

[0110] In this embodiment, the coefficient-pool comparison table includes different encryption capacity coefficients and the storage capacity of the encryption pool matching the coefficients, mainly for storing the encryption method to ensure the reasonable calling of the subsequent encryption method.

[0111] In this embodiment, the encryption method involved refers to all encryption methods involved in the historical transmission process. For example, the encryption method of information type 01 at node 1 is 1, and the encryption method at node 2 is 2. The encryption methods of information type 02 at node 1 are 2, 3, and 4. At this time, the encryption methods for node 1 are: encryption method 1, encryption method 2, encryption method 3, and encryption method 4.

[0112] In this embodiment, since the implementation of each encryption method is uniquely based on code settings and there is a corresponding encryption algorithm package, the capacity (sub-capacity) occupied by the encryption algorithm package is determined, and then the sum of all capacities of the encryption methods is considered as the total capacity. The pool capacity is pre-set and the value is r1. If the total capacity is less than r1, encryption method 1, encryption method 2, encryption method 3, and encryption method 4 are placed in the encryption pool of the corresponding node.

[0113] In this embodiment, the sub-security of each encryption method is pre-set and will be put into use only after the security is set.

[0114] In this embodiment, first, the number of occurrences of each encryption method involved in the node is counted, and all the occurrences are sorted by size;

[0115] Secondly, the total capacity of the encryption methods after screening size sorting is just smaller than the encryption methods of the pool capacity. At this time, the encryption security of the screened encryption methods is determined. If there is a similar encryption security and a higher-level encryption security does not exist in the screened encryption methods, at this time, a method with a capacity basically consistent with the encryption method with similar encryption security is matched from the higher-level encryption method to replace it, and so on, to obtain the remaining encryption methods.

[0116] The beneficial effects of the above technical solution are: calculating the encryption capacity coefficient based on the number of times and the channel length provides an accurate basis for the subsequent matching with the reference table, and subsequently matching the size with the capacity by counting the confidentiality of the nodes, and combining the analysis of sub-capacity and sub-security to ensure the rationality of the encryption pool construction, ensure the reliability of the encryption method used by the node, ensure the security after encryption, and avoid the possibility of too many encryption methods causing the running program to be too full.

[0117] The present invention provides an industrial Internet digital information encryption transmission method, which encrypts the information to be transmitted and the second channel, including:

[0118] Performing cluster analysis on the information to be transmitted to obtain a number of sub-clustering information, and determining the clustering cluster of each sub-clustering information respectively;

[0119] Based on the port attribute of the port generating the information to be transmitted, determine the cluster weight of the corresponding cluster cluster, and number all sub-cluster information as needed according to the cluster weight;

[0120] According to the on-demand numbering of each sub-cluster information, a matching encryption method is obtained from the information encryption pool and the corresponding sub-cluster information is encrypted.

[0121] In this embodiment, cluster analysis is implemented based on K-maens algorithm, which belongs to the prior art. The determined cluster centers can be regarded as cluster clusters.

[0122] In this embodiment, the port attribute refers to the information generation type corresponding to the production port, and there may be multiple information types in each information to be transmitted.

[0123] In this embodiment, the cluster weight ,in, The type weight determined based on the port attributes for the corresponding information type, is the amount of information corresponding to the sub-cluster information, is the total amount of information to be transmitted.

[0124] In this embodiment, the on-demand numbering refers to numbering after sorting by cluster weight and combining with information type.

[0125] In this embodiment, the information encryption pool refers to obtaining an encryption method that is consistent with the number, and the encryption pool contains different numbers. For example, the number @cq1 corresponds to encryption method 1, and the number is Corresponding to encryption method 2, and so on, where It can be understood as the information type, and cq1 and cq2 can be understood as the size of the cluster weight.

[0126] The beneficial effect of the above technical solution is: by clustering the information and calculating the cluster weight in combination with the port attributes, on-demand numbering is achieved, thereby achieving reliable encryption of the information.

[0127] The present invention provides an industrial Internet digital information encryption transmission method, which encrypts the information to be transmitted and the second channel, and also includes:

[0128] Determine the number of extracted encryptions for each transmission node according to the transmission matching degree between the information to be transmitted and each transmission node, and determine the information importance of the information to be transmitted according to the transmission requirements;

[0129] When the extracted encryption quantity is 1, a matching first mode is extracted from the corresponding node encryption pool according to the importance of the information, and attached to the transmission channel between the corresponding transmission node and the adjacent previous transmission node;

[0130] When the extracted encryption quantity is not 1, the information to be transmitted is split according to the matching level, and the breadth, depth and accuracy of each split information are respectively obtained to construct the initial coordinates;

[0131] The initial coordinates of each split information are marked in a blank three-dimensional coordinate system, and the marked results are subjected to surface fitting and drawing in order according to the matching level to obtain a three-dimensional surface;

[0132] Locking the three-dimensional coordinates of the eight outermost endpoints in the three-dimensional surface, and obtaining the line lengths of any two outermost endpoints in turn, and then screening the matching level to which the two three-dimensional coordinates with the longest length belong;

[0133] According to the sub-importance of the split information under each matching level, a second matching method is extracted from the corresponding node encryption pool in turn;

[0134] According to the lengths of the first encryption symbol and the second encryption symbol, respectively, the mod function is used to obtain the corresponding first remainder ys1 and second remainder ys2;

[0135] Obtain the starting encryption method that matches (ys1, ys2) and the ending encryption method that matches (ys2, ys1) from the double remainder encryption pool;

[0136] Sequence encoding is performed on each second mode, and position alignment and binary symbol supplementation of blank positions are performed to construct a coding matrix;

[0137] The symbols in the same column code under the coding matrix are randomly exchanged, and the adjustment method corresponding to each row vector in the matrix after the analysis and exchange is combined with the starting point encryption method and the end point encryption method to be attached to the transmission channel of the corresponding transmission node and the adjacent previous transmission node according to the random order of collection;

[0138] Among them, the corresponding importance is related to the encryption security of the encryption method.

[0139] Preferably, determining the extraction encryption quantity of each transmission node includes:

[0140] Calculating the transmission matching degree Cp between the information to be transmitted and each transmission node;

[0141] ;

[0142] in, A function representing the number of matching types of all information types involved in the information to be transmitted s1 and the set transmission type of the corresponding transmission node; represents the historical transmission probability of the corresponding transmission node based on the j1th matching type; Indicates all The maximum value in ; Indicates all The variance of ; ln represents the sign of logarithmic function; represents the total number of types of the set transmission type for the corresponding transmission node, and ;

[0143] Calculate the extraction encryption quantity Jn of the corresponding transmission node based on the transmission matching degree;

[0144] ;

[0145] in, represents the transmission failure probability of the corresponding transmission node based on the j1th matching type; Indicates the type transmission weight of the j1th matching type under the corresponding transmission node; Indicates that the corresponding transmission node is based on and The setting failure probability function; Indicates the corresponding transmission node Matching type transmission weight; Indicates the floor symbol; max is the maximum value symbol.

[0146] In this embodiment, the importance of information is obtained based on matching a level-rate-degree comparison table, and the comparison table includes different transmission security levels, transmission rates and the corresponding information importance, and the value range of the information importance is 0 to 1. Generally, the higher the transmission security level, the higher the corresponding information importance.

[0147] In this embodiment, each encryption method in the node encryption pool has its corresponding security protection level, and the importance of information corresponds to the security protection level one by one, so it can be directly matched to the corresponding method.

[0148] In this embodiment, for example, transmission node 1--transmission node 2, at this time, the first method for transmission node 2 is obtained and attached to the channel between transmission node 1 and transmission node 2. The purpose of the attachment is to protect the security of information and prevent the channel from being attacked and causing data anomalies. The corresponding encryption can be performed according to the extracted encryption method, and the encryption methods are all existing algorithms.

[0149] In this embodiment, the sub-importance is obtained based on the matching level mapping of the split information, and there is a level-importance comparison table that can be directly obtained. The sub-importance is related to security and corresponds one to one, so that an encryption method that matches the sub-importance one to one can be obtained.

[0150] The mod function is obtained by dividing the length of the encryption symbol by 512.

[0151] In this embodiment, the double remainder encryption pool includes encryption methods corresponding to different combinations of remainders, and the encryption methods corresponding to different combinations of the same two numbers will also be different, and the starting point encryption method and the end point encryption method are both one of the existing encryption methods.

[0152] In this embodiment, the sequence number is obtained by matching from the method-code database, and the code corresponding to each encryption method is pre-planned, for example:

[0153] Encoding of encryption method 1: ,The encoding of encryption method 2 is: ;

[0154] Alignment is: ,at this time, It is a blank position. In this case, fill the blank position with 1.

[0155] .

[0156] In this embodiment, the random position exchange is, for example, exchanging i and o in the second column.

[0157] In this embodiment, the information to be transmitted is split according to the information type to obtain information 1, information 2, information 3, and information 4, wherein information 1 and information 2 are for type r1, information 3 is for type r2, and information 4 is for type r3. The matching between the split information type and the information of the type received by the corresponding node history is calculated according to the similarity function. That is, when the split information completely belongs to the information of the type received by the corresponding node history, the matching level is regarded as 1;

[0158] Otherwise, the matching level is obtained according to the split information based on the information of this type received by the corresponding node history and belonging to the part / the whole of the corresponding split information.

[0159] In this embodiment, the groups with the same matching level are grouped together to obtain corresponding split information.

[0160] In this embodiment, breadth refers to the number of types involved in the corresponding split information, depth refers to the information capacity of the corresponding type involved in the corresponding split information, and the maximum capacity is extracted from it. Accuracy refers to 1-the probability that the information of the corresponding type involved in the corresponding split information may be tampered with, and the minimum value is obtained from the calculation result as the accuracy.

[0161] In this embodiment, initial coordinates = (width, depth, accuracy).

[0162] In this embodiment, the horizontal coordinate of the blank three-dimensional coordinate system is related to the breadth, the vertical coordinate is related to the depth, and the vertical coordinate is related to the accuracy.

[0163] In this embodiment, the surface fitting drawing refers to connecting the initial coordinate points in order according to the size of the matching level and then performing surface fitting on the connected curve in a three-dimensional coordinate system, and the surface fitting belongs to the prior art.

[0164] In this embodiment, the outermost endpoints refer to the points belonging to the outermost edges of the three-dimensional surface, and 8 of them are selected, generally 8 for three-dimensional and 4 for two-dimensional.

[0165] In this embodiment, the line length is determined after any two of the eight endpoints are connected, and the connection is a straight line connection.

[0166] The beneficial effects of the above technical solution are: by extracting the number of encryptions, a basis is provided for the subsequent setting of the number of encryption methods, thereby achieving effective encryption, and by determining the importance of information, the extraction of methods is facilitated, and further by breadth, depth, and accurate construction of coordinates and drawing of three-dimensional surfaces, it is convenient to determine the second method under the matching level, and the flexible and reliable acquisition of the implementation method ensures its security, and by encoding the second method, supplementing symbols, and randomly exchanging positions, the randomness of the encryption is further achieved, thereby ensuring the security of the encryption.

[0167] The present invention provides an industrial Internet digital information encryption transmission method, which combines the adjustment method corresponding to each row vector in the matrix after analysis and exchange with the starting point encryption method and the end point encryption method, including:

[0168] When the security of the second method under the same vector is less than the security of the corresponding adjustment method, Select from the starting point encryption method and the end point encryption method, where: Indicates the safety of the corresponding adjustment method; Indicates the security corresponding to the second method; Indicates unit safety quantity;

[0169] like At this time, the starting point encryption method and the end point encryption method are combined with the adjustment method under the corresponding row vector, where Indicates the security of the encryption method at the starting point; Indicates the security of the endpoint encryption method;

[0170] like ,At this time, the starting point encryption method is combined with the adjustment method under the corresponding row vector;

[0171] like , at this time, a method is randomly selected from the starting point encryption method and the end point encryption method to be combined with the adjustment method under the corresponding row vector;

[0172] like ,At this time, the endpoint encryption method is combined with the adjustment method under the corresponding row vector.

[0173] In this embodiment, since the safety of different methods is pre-set, a direct comparison can be made. After the adjustment method is determined, the safety can be directly obtained by performing a safety test according to the method.

[0174] In this embodiment, the value of the unit safety amount is generally 0.2.

[0175] In this embodiment, the combination result is: the corresponding encryption method involved.

[0176] The beneficial effect of the above technical solution is that by comparing the security levels, it is convenient to effectively determine the combined encryption method of the adjustment method, thereby further improving the security of information and channel encryption.

[0177] The present invention provides an industrial Internet digital information encryption transmission system, such as Figure 2 As shown, including:

[0178] An acquisition module is used to acquire information to be transmitted based on the industrial Internet of Things and a port for generating the information to be transmitted, and at the same time, acquire a transmission requirement for the information to be transmitted;

[0179] A channel screening module, used for matching a plurality of first channels matching the generated one from a transmission channel list, and parsing the transmission requirement to screen a second channel from the plurality of first channels;

[0180] A symbol setting module, used for acquiring a first transmission field of a transmission start point of the second channel and setting a first encryption symbol, and at the same time, acquiring a second transmission field of a transmission end point of the second channel and setting a second encryption symbol;

[0181] An encryption pool construction module, used to respectively obtain node attributes of the transmission nodes involved in the second channel and construct a node encryption pool, wherein the node attributes are related to the historical transmission information type of the node and the information encryption method under different historical transmission information types;

[0182] The encryption transmission module is used to encrypt the information to be transmitted and the second channel according to the first encryption symbol, the second encryption symbol, the generation port and the port attribute and the node encryption pool to realize encrypted transmission.

[0183] The beneficial effect of the above technical solution is: relying on the transmission requirements of the information to be transmitted to match the transmission channel to determine the reliability of the initial transmission, and subsequently through comprehensive analysis of the nodes in the channel and the information to be transmitted, flexible encryption of the information to be transmitted and the second channel is achieved, thereby achieving effective protection of the data.

[0184] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. A method for encrypting and transmitting digital information in the industrial Internet, characterized in that: include: Step 1: Obtain information to be transmitted based on the industrial Internet of Things and a port where the information to be transmitted is generated, and at the same time, obtain transmission requirements for the information to be transmitted; Step 2: Matching a plurality of first channels matching the generating port from the transmission channel list, and parsing the transmission requirement to select a second channel from the plurality of first channels; Step 3: Obtain a first transmission field of the transmission start point of the second channel and set a first encryption symbol, and at the same time, obtain a second transmission field of the transmission end point of the second channel and set a second encryption symbol; Step 4: respectively obtain the node attributes of the transmission nodes involved in the second channel, and build a node encryption pool; Step 5: Encrypt the information to be transmitted and the second channel according to the first encryption symbol, the second encryption symbol, the port attribute of the generating port and the node encryption pool to achieve encrypted transmission; The node attributes are related to the historical transmission information type of the node and the information encryption method under different historical transmission information types; Among them, building a node encryption pool includes: Determine from the node log database the first number of times each communication node is applied to different transmission channels and the channel lengths of the different transmission channels applied; Determine the encryption capacity coefficient of each communication node based on the first number and the channel length; ； in, represents the encryption capacity coefficient of the corresponding communication node; represents the application weight of the corresponding communication node applied to the i1th transmission channel; Indicates the overall security of the i1th transmission channel applied by the corresponding communication node; represents the first number of times the corresponding communication node is applied to the i1th transmission channel; Indicates the number of nodes involved in the i1th transmission channel applied to the corresponding communication node; It represents the channel length between the corresponding communication node and its left neighbor node after being applied to the i1th transmission channel; It represents the channel length between the corresponding communication node and its right neighbor node after being applied to the i1th transmission channel; The channel length of the i1th transmission channel applied to the corresponding communication node; represents the safety-capacity conversion factor; Based on the encryption capacity coefficient, determining the pool capacity of the corresponding communication node from the coefficient-pool comparison table; According to the historical transmission information type and information encryption method, statistics are obtained on the encryption method of the corresponding communication node; If the total capacity of all involved encryption methods is less than the pool capacity, an encryption pool is formed based on all involved encryption methods; Otherwise, the sub-capacity and sub-security of each encryption method involved are determined, and the methods are screened from all encryption methods involved to form an encryption pool.

2. The method for encrypting and transmitting industrial Internet digital information according to claim 1, characterized in that: Parsing the transmission requirement and selecting a second channel from the plurality of first channels includes: Inputting the transmission requirement into a requirement parsing model to obtain a number of parsing parameters; Match all parsing parameters with the parameter-condition comparison table to obtain the corresponding channel transmission conditions; The channel transmission condition is sequentially compared with the set transmission condition of each first channel for similarity, and the channel with the highest similarity is selected as the second channel.

3. The method for encrypting and transmitting industrial Internet digital information according to claim 1, characterized in that: Encrypting the information to be transmitted and the second channel includes: Performing cluster analysis on the information to be transmitted to obtain a number of sub-clustering information, and determining the clustering cluster of each sub-clustering information respectively; Based on the port attribute of the port generating the information to be transmitted, determine the cluster weight of the corresponding cluster cluster, and number all sub-cluster information as needed according to the cluster weight; According to the on-demand numbering of each sub-cluster information, a matching encryption method is obtained from the information encryption pool and the corresponding sub-cluster information is encrypted.

4. The method for encrypting and transmitting industrial Internet digital information according to claim 3 is characterized in that: Encrypting the information to be transmitted and the second channel also includes: Determine the number of extracted encryptions for each transmission node according to the transmission matching degree between the information to be transmitted and each transmission node, and determine the information importance of the information to be transmitted according to the transmission requirements; When the extracted encryption quantity is 1, a matching first mode is extracted from the corresponding node encryption pool according to the importance of the information, and attached to the transmission channel between the corresponding transmission node and the adjacent previous transmission node; When the extracted encryption quantity is not 1, the information to be transmitted is split according to the matching level, and the breadth, depth and accuracy of each split information are respectively obtained to construct the initial coordinates; The initial coordinates of each split information are marked in a blank three-dimensional coordinate system, and the marked results are subjected to surface fitting and drawing in order according to the matching level to obtain a three-dimensional surface; Locking the three-dimensional coordinates of the eight outermost endpoints in the three-dimensional surface, and obtaining the line lengths of any two outermost endpoints in turn, and then screening the matching level to which the two three-dimensional coordinates with the longest length belong; According to the sub-importance of the split information under each matching level, a second matching method is extracted from the corresponding node encryption pool in turn; According to the lengths of the first encryption symbol and the second encryption symbol, respectively, the mod function is used to obtain the corresponding first remainder ys1 and second remainder ys2; Obtain the starting encryption method that matches (ys1, ys2) and the ending encryption method that matches (ys2, ys1) from the double remainder encryption pool; Sequence encoding is performed on each second mode, and position alignment and binary symbol supplementation of blank positions are performed to construct a coding matrix; The symbols in the same column code under the coding matrix are randomly exchanged, and the adjustment method corresponding to each row vector in the matrix after the analysis and exchange is combined with the starting point encryption method and the end point encryption method to be attached to the transmission channel of the corresponding transmission node and the adjacent previous transmission node according to the random order of collection; Among them, the corresponding importance is related to the encryption security of the encryption method.

5. The method for encrypting and transmitting digital information on the industrial Internet according to claim 4 is characterized in that: The adjustment method corresponding to each row vector in the matrix after the analysis and exchange is combined with the starting point encryption method and the end point encryption method, including: When the security of the second method under the same vector is less than the security of the corresponding adjustment method, Select from the starting point encryption method and the end point encryption method, where: Indicates the safety of the corresponding adjustment method; Indicates the security corresponding to the second method; Indicates unit safety quantity; like At this time, the starting point encryption method and the end point encryption method are combined with the adjustment method under the corresponding row vector, where Indicates the security of the starting point encryption method; Indicates the security of the endpoint encryption method; like ,At this time, the starting point encryption method is combined with the adjustment method under the corresponding row vector; like , at this time, a method is randomly selected from the starting point encryption method and the end point encryption method to be combined with the adjustment method under the corresponding row vector; like ,At this time, the endpoint encryption method is combined with the adjustment method under the corresponding row vector.

6. The method for encrypting and transmitting digital information on the industrial Internet according to claim 4 is characterized in that: Determine the amount of ingest encryption for each transport node, including: Calculating the transmission matching degree Cp between the information to be transmitted and each transmission node; ； in, A function representing the number of matching types of all information types involved in the information to be transmitted s1 and the set transmission type of the corresponding transmission node; represents the historical transmission probability of the corresponding transmission node based on the j1th matching type; Indicates all The maximum value in ; Indicates all The variance of ; ln represents the sign of logarithmic function; represents the total number of types of the set transmission type for the corresponding transmission node, and ; Calculate the extraction encryption quantity Jn of the corresponding transmission node based on the transmission matching degree; ； in, represents the transmission failure probability of the corresponding transmission node based on the j1th matching type; Indicates the type transmission weight of the j1th matching type under the corresponding transmission node; Indicates that the corresponding transmission node is based on and The setting failure probability function; Indicates the corresponding transmission node The matching type transmission weight; └ ┘ indicates the rounding down symbol; max is the maximum value symbol.

7. An industrial Internet digital information encryption transmission system, used to execute the industrial Internet digital information encryption transmission method according to claim 1, characterized in that: include: An acquisition module is used to acquire information to be transmitted based on the industrial Internet of Things and a port for generating the information to be transmitted, and at the same time, acquire a transmission requirement for the information to be transmitted; A channel screening module, used for matching a plurality of first channels matching the generating port from a transmission channel list, and parsing the transmission requirement to screen a second channel from the plurality of first channels; A symbol setting module, used for acquiring a first transmission field of a transmission start point of the second channel and setting a first encryption symbol, and at the same time, acquiring a second transmission field of a transmission end point of the second channel and setting a second encryption symbol; An encryption pool construction module, used to respectively obtain node attributes of the transmission nodes involved in the second channel and construct a node encryption pool, wherein the node attributes are related to the historical transmission information type of the node and the information encryption method under different historical transmission information types; An encryption transmission module, used for encrypting the information to be transmitted and the second channel according to the first encryption symbol, the second encryption symbol, the port attribute of the generating port and the node encryption pool to realize encrypted transmission; The node attributes are related to the historical transmission information type of the node and the information encryption method under different historical transmission information types; Among them, the encryption pool building module is used to: Determine from the node log database the first number of times each communication node is applied to different transmission channels and the channel lengths of the different transmission channels applied; Determine the encryption capacity coefficient of each communication node based on the first number and the channel length; ； in, represents the encryption capacity coefficient of the corresponding communication node; represents the application weight of the corresponding communication node applied to the i1th transmission channel; Indicates the overall security of the i1th transmission channel applied by the corresponding communication node; represents the first number of times the corresponding communication node is applied to the i1th transmission channel; Indicates the number of nodes involved in the i1th transmission channel applied to the corresponding communication node; It represents the channel length between the corresponding communication node and its left neighbor node after being applied to the i1th transmission channel; It represents the channel length between the corresponding communication node and its right neighbor node after being applied to the i1th transmission channel; The channel length of the i1th transmission channel applied to the corresponding communication node; represents the safety-capacity conversion factor; Based on the encryption capacity coefficient, determining the pool capacity of the corresponding communication node from the coefficient-pool comparison table; According to the historical transmission information type and information encryption method, statistics are obtained on the encryption method of the corresponding communication node; If the total capacity of all involved encryption methods is less than the pool capacity, an encryption pool is formed based on all involved encryption methods; Otherwise, the sub-capacity and sub-security of each encryption method involved are determined, and the methods are screened from all encryption methods involved to form an encryption pool.

Images