Secure data transmission method based on national cryptographic algorithm

Abstract

The invention discloses a data security transmission method based on a national cryptographic algorithm, which mainly solves the problem of low data transmission security of the existing low-power-consumption embedded chip and data compression transmission method. The method comprises the following steps: S1, a transmission end combines data to be transmitted with carrier data, and encrypts the combined data by adopting a national cryptographic algorithm; s2, sending the encrypted data to a transit server by using a wireless transmission channel, and compressing and storing the encrypted data; s3, the receiving end sends data to the transit server to receive request instruction ciphertext data, and the private key of the transit server decrypts the request instruction ciphertext; s4, after the transit server completes decryption verification, the compressed and stored data are forwarded to the receiving end; and S5, the receiving end performs data decryption on the compressed and stored data, and reconstructs the decrypted data and the carrier data, thereby realizing secure transmission of the data. According to the data transmission method, encryption transmission is carried out in a mode of combining the to-be-transmitted data with the carrier data, and meanwhile, the transit server compresses and stores the encrypted data, so that the problem of data packet drop and leakage in the transmission process caused by data redundancy in the data transmission process can be effectively solved.

Description

Technical Field

[0001] The present invention belongs to the technical field of network security, and in particular, relates to a data security transmission method based on a national secret algorithm. Background Art

[0002] With the development of science and technology, data is becoming more and more important to people's lives, because professionals can see people's consumption types and the peak and off-peak seasons of product types from the data, and then arrange the production mode of products more reasonably. Big data is generally stored in terminal devices, and sometimes it is necessary to use data to call between terminal devices. In the context of the big data era, everyone's life is no longer an absolute secret, but only a relative "secret". Because by analyzing the data information on the Internet, you can understand a person's life traces, so you must recognize the importance of information security, especially in the context of big data, and ensure the security of information.

[0003] With the continuous progress of low-power embedded chips, data compression and other technologies in recent years, the defects of wireless data communication have been optimized. However, due to the limitations of the data access and data transmission capabilities of the wireless system, it cannot meet the requirements well in application scenarios with many data transmission objects and high data transmission security requirements. Therefore, it is necessary to improve the existing data transmission methods to ensure the real-time, accuracy and security of data transmission. Summary of the invention

[0004] The purpose of the present invention is to provide a data security transmission method based on a national secret algorithm, mainly to solve the problem of low data transmission security existing in existing low-power embedded chips and data compression transmission methods.

[0005] To achieve the above purpose, the technical solution adopted by the present invention is as follows:

[0006] A data security transmission method based on a national secret algorithm comprises the following steps:

[0007] S1, the transmission end combines the data to be transmitted with the carrier data, and encrypts the combined data using the national encryption algorithm;

[0008] S2, using a wireless transmission channel to send the encrypted data to the transfer server, and after receiving the encrypted data, the transfer server compresses and stores the encrypted data;

[0009] S3, the receiving end sends a data receiving request instruction ciphertext data to the transit server, and the transit server receives the request instruction ciphertext data and decrypts the request instruction ciphertext data using the private key of the transit server;

[0010] S4, after the transfer server completes the decryption verification, it forwards the compressed and stored data to the receiving end;

[0011] S5, the receiving end decrypts the compressed and stored data, and reconstructs the decrypted data and the carrier data, thereby achieving secure data transmission.

[0012] Furthermore, in step S1, the specific manner of combining the data to be transmitted with the carrier data is:

[0013] The transmission end groups the data to be transmitted, selects one from multiple grouped data as regular carrier data, and stores the grouped data in the data cache of each transmission channel respectively; if the cache is full, the tail node of the carrier data is deleted and the new grouped data is inserted in the head node.

[0014] Furthermore, in step S2, the specific steps for implementing compressed storage are:

[0015] S21, the transfer server identifies the original information header data of the encrypted data and compresses the data using the LZ77 algorithm;

[0016] S22, determining a starting position and a size of a data block in the available storage space based on the information header data of the compressed data;

[0017] S23, querying the storage route of the compressed data according to the starting position of the available storage space of the transit server; determining the hash information of the compressed data storage address based on the hash information of the starting position of the storage address and the data block size, and the storage route of the compressed data is determined based on the hash information of the compressed data storage address;

[0018] S24, the transit server stores the compressed data based on the storage module pointed to by the storage route of the compressed data.

[0019] Furthermore, in step S3, the specific steps of decrypting the request instruction ciphertext are as follows:

[0020] S31, the transit server randomly selects a storage module as the initial traversal address for decryption;

[0021] S32, traversing the storage module decryption keys from the transit server until the decryption key of the storage module with priority decryption is obtained;

[0022] S33, using the address of the current storage module as the decryption start address, decrypting all storage modules according to a fixed decryption direction.

[0023] Furthermore, in step S5, the specific steps of reconstructing the decrypted data and the carrier data are as follows:

[0024] S51, determining correlation characteristic coefficients under different influencing factors according to characteristic dimensions of correlation characteristic values ​​of the carrier data under different influencing factors;

[0025] S52, sending the correlation characteristic dimensions of the grouped data under different influencing factors to the receiving end, and the receiving end determines the correlation characteristic coefficients of the to-be-transmitted data under different influencing factors based on the correlation characteristic coefficients of the grouped data under different influencing factors;

[0026] S53, the receiving end reports the correlation characteristic coefficients under different influencing factors, and determines the correlation characteristic value of each group data according to the correlation characteristic coefficients under different influencing factors;

[0027] S54, reconstructing the decrypted data based on the associated eigenvalues.

[0028] Compared with the prior art, the present invention has the following beneficial effects:

[0029] (1) In the data transmission method of the present invention, the data to be transmitted is encrypted and transmitted by combining the data to be transmitted with the carrier data, and the encrypted data is compressed and stored by the transit server, which can effectively solve the problem of data packet leakage during the transmission process due to data redundancy. At the same time, the present invention also performs key verification on the data request of the receiving end to ensure the legitimacy of the data transmission, further improving the security and reliability of the data transmission process.

[0030] (2) The present invention uses the LZ77 algorithm to compress data during compression storage, which has the characteristics of being simple and efficient, fast decompression, and low memory consumption. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] Figure 1 Flow chart of the method of the present invention. DETAILED DESCRIPTION

[0032] The present invention is further described below in conjunction with the accompanying drawings and embodiments. The embodiments of the present invention include but are not limited to the following embodiments.

[0033] Example

[0034] like Figure 1 As shown, the present invention discloses a data security transmission method based on a national secret algorithm, comprising the following steps: the transmission end combines the data to be transmitted with the carrier data, and encrypts the combined data using a national secret algorithm. Among them, the national secret algorithm is a domestic cryptographic algorithm recognized by the State Cryptography Bureau, and adopts an existing mature encryption algorithm.

[0035] First, the transmission end groups the data to be transmitted, selects one from multiple grouped data as regular carrier data, and stores the grouped data in the data cache of each transmission channel respectively; if the cache is full, the tail node of the carrier data is deleted and the new grouped data is inserted into the head node.

[0036] Subsequently, the encrypted data is sent to the transfer server via a wireless transmission channel. After receiving the encrypted data, the transfer server compresses and stores the encrypted data. The transfer server identifies the original header data of the encrypted data and compresses the data using the LZ77 algorithm. The LZ77 algorithm is simple, efficient, fast to decompress, and consumes little memory.

[0037] Based on the information header data of the compressed data, the starting position and the size of the data block in the available storage space are determined. The storage route of the compressed data is queried according to the starting position of the available storage space of the transit server; the hash information of the compressed data storage address is determined based on the hash information of the starting position of the storage address and the size of the data block, and the storage route of the compressed data is determined based on the hash information of the compressed data storage address; the transit server stores the compressed data based on the storage module pointed to by the storage route of the compressed data.

[0038] The receiving end sends the data receiving request instruction ciphertext data to the relay server. The relay server receives the request instruction ciphertext data and decrypts the request instruction ciphertext data through the private key of the relay server. The relay server randomly selects a storage module as the initial traversal address for decryption; traverses the storage module decryption key from the relay server until the decryption key of the storage module with priority decryption is obtained; uses the address of the current storage module as the decryption starting address, and decrypts all storage modules in a fixed decryption direction.

[0039] Next, after the transfer server completes the decryption verification, it forwards the compressed and stored data to the receiving end; finally, the receiving end decrypts the compressed and stored data and reconstructs the decrypted data with the carrier data, thereby achieving secure data transmission. The specific steps of reconstruction are as follows:

[0040] According to the characteristic dimensions of the associated characteristic values ​​of the carrier data under different influencing factors, the associated characteristic coefficients under different influencing factors are determined; the associated characteristic dimensions of the grouped data under different influencing factors are sent to the receiving end, and the receiving end determines the associated characteristic coefficients of the data to be transmitted under different influencing factors based on the associated characteristic coefficients of the grouped data under different influencing factors; the receiving end reports the associated characteristic coefficients under different influencing factors, and determines the associated characteristic values ​​of each grouped data according to the associated characteristic coefficients under different influencing factors; and the reconstruction of the decrypted data is realized based on the associated characteristic values.

[0041] Through the above design, in the data transmission method of the present invention, the data to be transmitted is encrypted and transmitted by combining the data to be transmitted with the carrier data, and the encrypted data is compressed and stored by the transit server, which can effectively solve the problem of data packet leakage during the transmission process due to data redundancy. At the same time, the present invention also performs key verification on the data request of the receiving end to ensure the legitimacy of the data transmission, further improving the security and reliability of the data transmission process.

[0042] The above embodiment is only one of the preferred implementation modes of the present invention and should not be used to limit the protection scope of the present invention. Any changes or modifications that are made to the main design concept and spirit of the present invention and have no substantive significance, and the technical problems they solve are still consistent with the present invention, should be included in the protection scope of the present invention.

Claims

1. A data security transmission method based on national secret algorithm, characterized in that: The following steps are involved: S1, the transmission end combines the data to be transmitted with the carrier data, and encrypts the combined data using the national encryption algorithm; S2, using a wireless transmission channel to send the encrypted data to the transfer server, and after receiving the encrypted data, the transfer server compresses and stores the encrypted data; S3, the receiving end sends a data receiving request instruction ciphertext data to the transit server, and the transit server receives the request instruction ciphertext data and decrypts the request instruction ciphertext data using the private key of the transit server; S4, after the transfer server completes the decryption verification, it forwards the compressed and stored data to the receiving end; S5, the receiving end decrypts the compressed and stored data, and reconstructs the decrypted data and the carrier data, thereby achieving secure data transmission.

2. According to the method of claim 1, the data security transmission method based on the national secret algorithm is characterized in that: In step S1, the specific method of combining the data to be transmitted with the carrier data is: The transmission end groups the data to be transmitted, selects one of the multiple grouped data as regular carrier data, and stores the grouped data in the data buffer of each transmission channel respectively; If the buffer is full, the tail node of the carrier data is deleted and the new packet data is inserted into the head node.

3. According to claim 2, a data security transmission method based on a national secret algorithm is characterized in that: In step S2, the specific steps for implementing compressed storage are: S21, the transfer server identifies the original information header data of the encrypted data and compresses the data using the LZ77 algorithm; S22, determining a starting position and a size of a data block in the available storage space based on the information header data of the compressed data; S23, querying the storage route of the compressed data according to the starting position of the available storage space of the transit server; determining the hash information of the compressed data storage address based on the hash information of the starting position of the storage address and the data block size, and the storage route of the compressed data is determined based on the hash information of the compressed data storage address; S24, the transit server stores the compressed data based on the storage module pointed to by the storage route of the compressed data.

4. According to claim 3, a data security transmission method based on a national secret algorithm is characterized in that: In step S3, the specific steps of decrypting the request instruction ciphertext are as follows: S31, the transit server randomly selects a storage module as the initial traversal address for decryption; S32, traversing the storage module decryption keys from the transit server until the decryption key of the storage module with priority decryption is obtained; S33, using the address of the current storage module as the decryption start address, decrypting all storage modules according to a fixed decryption direction.

5. According to claim 4, a data security transmission method based on a national secret algorithm is characterized in that: In step S5, the specific steps of reconstructing the decrypted data and the carrier data are as follows: S51, determining correlation characteristic coefficients under different influencing factors according to characteristic dimensions of correlation characteristic values ​​of the carrier data under different influencing factors; S52, sending the correlation characteristic dimensions of the grouped data under different influencing factors to the receiving end, and the receiving end determines the correlation characteristic coefficients of the to-be-transmitted data under different influencing factors based on the correlation characteristic coefficients of the grouped data under different influencing factors; S53, the receiving end reports the correlation characteristic coefficients under different influencing factors, and determines the correlation characteristic value of each group data according to the correlation characteristic coefficients under different influencing factors; S54, reconstructing the decrypted data based on the associated eigenvalues.

Images