A secure wireless communication system based on communication technology

Abstract

The present invention relates to the field of wireless communication technology, and in particular to a secure wireless communication system based on communication technology. The system includes a wireless communication traffic real-time monitoring module, a traffic instant discarding module under denial of service attack, a normal communication data spectrum utilization transmission module, and a communication data transmission congestion dynamic secure transmission module, which can establish a wireless connection communication channel through communication technology and perform real-time monitoring of communication traffic and access request torrent division to generate request torrent data streams and non-request torrent data streams; delete the request torrent data streams for denial of attack behavior and retain the non-rejection attack behavior data streams, and perform time-series merging and communication frequency band congestion perception analysis on the non-request torrent data streams and non-rejection attack behavior data streams, and perform dynamic allocation and transmission processing of network communication resources to obtain the traffic data stream congestion resource dynamic allocation and secure transmission results. The present invention can ensure the stability and security of the wireless communication process.

Description

Technical Field

[0001] The present invention relates to the field of wireless communication technology, and in particular to a secure wireless communication system based on communication technology. Background Art

[0002] The secure wireless communication method based on communication technology is an innovative technology designed to solve the challenges of security and privacy protection in traditional wireless communication. With the development of encryption algorithms and security protocols, the corresponding secure wireless communication method has become a key means to ensure data confidentiality, integrity and availability, and can bring new solutions to a wide range of communication application fields. It can reliably encrypt and protect communication data by adopting advanced symmetric encryption (such as AES) and asymmetric encryption (such as RSA) algorithms, and key management technology ensures the secure generation, storage, distribution and update of encryption keys to prevent key leakage and unauthorized access, thereby effectively preventing data theft and tampering risks. It also combines the mechanism of security authentication and access control, through identity authentication technology (such as certificate-based authentication) and access control strategy, it can verify the legitimacy of the identity of communication participants and control access to data and service resources according to their authority level. This mechanism not only ensures the two-way authentication and security of communication, but also effectively prevents unauthorized user intrusion and data leakage risks. However, traditional wireless communication technology, especially in scenarios involving sensitive data transmission and privacy protection, has security issues such as information tampering and network denial of service attacks. Summary of the invention

[0003] Based on this, it is necessary for the present invention to provide a secure wireless communication system based on communication technology to solve at least one of the above technical problems.

[0004] To achieve the above purpose, a secure wireless communication system based on communication technology includes the following modules:

[0005] A wireless communication traffic real-time monitoring module is used to establish a wireless connection communication channel between an information sending end and an information receiving end through communication technology, and to obtain information incoming and outgoing communication traffic monitoring nodes and information communication traffic discarding buffer areas by deploying communication traffic monitoring nodes in the wireless connection communication channel; and to perform real-time monitoring of communication traffic on the wireless connection communication channel using the information incoming and outgoing communication traffic monitoring nodes to obtain a real-time monitoring data stream of wireless communication traffic;

[0006] The module for instantly discarding traffic under denial of service attack is used to divide the access request flood into the data stream of wireless communication traffic monitored in real time, so as to generate the wireless communication traffic access request flood data stream and the wireless communication traffic access non-request flood data stream; to filter the wireless communication traffic access request flood data stream for traffic request denial of attack behavior, so as to obtain the traffic request flood denial of service attack behavior data stream and the traffic request flood non-attack behavior data stream; to redirect the traffic request flood denial of service attack behavior data stream to the information communication traffic discard buffer area through the wireless connection communication channel, and to automatically delete all the traffic request flood denial of service attack behavior data streams in the information communication traffic discard buffer area according to the preset information communication transmission delay;

[0007] The normal communication data spectrum utilization transmission module is used to perform time-series merging of the wireless communication traffic access non-request flood data flow and the traffic request flood non-attack behavior data flow to obtain a set of normal data flows requested for transmission by the wireless communication traffic; perform access communication spectrum transmission on the set of normal data flows requested for transmission by the wireless communication traffic through the wireless connection communication channel to obtain wireless communication traffic transmission data flows under different access communication frequency band sub-channels;

[0008] The communication data transmission congestion dynamic and secure transmission module is used to perform communication frequency band congestion perception analysis on the wireless communication traffic transmission data flow under different access communication frequency band sub-channels, and obtain the wireless communication frequency band network congestion transmission data flow; use the wireless connection communication channel to dynamically allocate network communication resources for the wireless communication frequency band network congestion transmission data flow, and obtain the traffic data flow congestion resource dynamic allocation and secure transmission result.

[0009] Furthermore, the wireless communication traffic real-time monitoring module includes the following functions:

[0010] Collecting the network physical locations of the information sending end and the information receiving end to obtain the network physical location of the information sending end and the network physical location of the information receiving end;

[0011] Based on the network physical location of the information sending end and the network physical location of the information receiving end, a network topology design is performed on the information sending end and the information receiving end to generate a network topology structure between the sending end and the receiving end;

[0012] Perform multipath transmission selection and establishment on the network topology structure between the sending end and the receiving end to obtain the network pre-transmission multipath between the sending end and the receiving end; perform wireless communication connection processing on the network pre-transmission multipath between the sending end and the receiving end through communication technology to obtain a wireless connection communication channel between the sending end and the receiving end;

[0013] By deploying a communication flow monitoring node and a communication flow discarding buffer area in a wireless connection communication channel between a transmitting end and a receiving end, an information incoming and outgoing communication flow monitoring node and an information communication flow discarding buffer area are obtained;

[0014] The information incoming and outgoing communication flow monitoring node is used to monitor the communication flow of the wireless connection communication channel between the sending end and the receiving end in real time, and the wireless communication flow real-time monitoring data flow is obtained.

[0015] Furthermore, the module for immediately discarding traffic when it is attacked by a denial of service includes the following functions:

[0016] Capturing access requests for real-time monitoring data streams of wireless communication traffic to obtain access request capacity packets for the wireless communication traffic data streams;

[0017] Based on the access request capacity package of the wireless communication traffic data flow, the corresponding wireless communication traffic real-time monitoring data flow is divided into access request floods to generate wireless communication traffic access request flood data flows and wireless communication traffic access non-request flood data flows;

[0018] Performing traffic request denial attack behavior screening on the wireless communication traffic access request flood data flow to obtain the traffic request flood denial of service attack behavior data flow and the traffic request flood non-attack behavior data flow;

[0019] Redirecting the traffic request flood denial of service attack behavior data flow to the information communication traffic discard buffer area through the wireless connection communication channel, and monitoring the cache delay of the traffic request flood denial of service attack behavior data flow in the information communication traffic discard buffer area to obtain the actual cache delay of the attack behavior data flow in the buffer area;

[0020] The actual cache delay of the attack behavior data flow in the cache area is compared and judged according to the preset information communication transmission delay. When the actual cache delay of the attack behavior data flow in the cache area exceeds the preset information communication transmission delay, the corresponding traffic request flood denial of service attack behavior data flow in the information communication traffic discarding cache area is automatically deleted. Otherwise, the cache delay of the traffic request flood denial of service attack behavior data flow in the information communication traffic discarding cache area continues to be monitored until all the traffic request flood denial of service attack behavior data flows in the information communication traffic discarding cache area are deleted.

[0021] Further, the access request torrent division of the corresponding wireless communication traffic real-time monitoring data stream based on the wireless communication traffic data stream being accessed by the access request capacity package includes:

[0022] Based on the access request capacity package of the wireless communication traffic data stream, the total access request frequency of the corresponding wireless communication traffic real-time monitoring data stream is counted to obtain the total access request frequency of each wireless communication traffic data stream;

[0023] Performing request frequency statistics analysis on the total frequency of access requests for each wireless communication traffic data stream to obtain the access request frequency of the wireless communication traffic data stream;

[0024] Performing network transmission protocol extraction processing on the real-time monitoring data stream of wireless communication traffic to obtain the network transmission protocol of the wireless communication traffic data stream;

[0025] Based on the wireless communication traffic data stream network transmission protocol, the frequency of requests for the same protocol is counted for each corresponding accessed request in the accessed request capacity package of the wireless communication traffic data stream to obtain the frequency of requests for the same transmission protocol of the wireless communication traffic data stream; according to the frequency of requests for the same transmission protocol of the wireless communication traffic data stream, the frequency of requests for the same protocol is quantitatively calculated for each corresponding accessed request in the accessed request capacity package of the wireless communication traffic data stream to obtain the frequency of requests for the same transmission protocol of the data stream;

[0026] The real-time monitoring data flow of wireless communication traffic corresponding to the access request frequency of wireless communication traffic data flow exceeding 50% or the request frequency of the same transmission protocol of the data flow exceeding 35% is divided into the wireless communication traffic access request flood data flow, otherwise it is divided into the wireless communication traffic access non-request flood data flow.

[0027] Further, the filtering of the traffic request denial attack behavior on the wireless communication traffic access request flood data flow includes:

[0028] Performing request fluctuation graph conversion on corresponding accessed requests in the wireless communication traffic access request flood data flow to generate an accessed request fluctuation graph of the communication traffic request flood data flow;

[0029] Performing a fluctuation amplitude and frequency statistical analysis on a fluctuation graph of access requests for a request flood data flow of communication traffic, and obtaining a fluctuation amplitude of access requests for a request flood data flow and a fluctuation frequency of access requests for a request flood data flow;

[0030] Based on the fluctuation amplitude of the access request flood data flow and the fluctuation frequency of the access request flood data flow, the request fluctuation pattern recognition analysis is performed on the wireless communication traffic access request flood data flow to obtain the traffic request flood access request fluctuation pattern;

[0031] Performing a request connection establishment behavior pattern mining and analysis on the corresponding accessed request in the wireless communication traffic access request flood data flow to obtain the traffic request flood accessed request connection establishment behavior pattern;

[0032] According to the traffic request flood access request fluctuation pattern and the traffic request flood access request connection establishment behavior pattern, the corresponding wireless communication traffic access request flood data flow is screened for traffic request denial attack behavior; when the traffic request flood access request fluctuation pattern has large-scale access request fluctuation or the traffic request flood access request connection establishment behavior pattern has abnormal connection establishment behavior, the corresponding wireless communication traffic access request flood data flow is marked as a traffic request flood denial of service attack behavior data flow, otherwise it is marked as a traffic request flood non-attack behavior data flow.

[0033] Furthermore, the normal communication data spectrum utilization transmission module includes the following functions:

[0034] Performing time-series synchronization processing on the wireless communication traffic access unsolicited flood data flow and the traffic request flood non-attack behavior data flow to obtain the communication traffic unsolicited flood data flow and the request flood non-attack behavior data flow in the same time dimension;

[0035] Merging the communication traffic non-request flood data flow and the request flood non-attack behavior data flow in the same time dimension to obtain a normal data flow set of wireless communication traffic request transmission;

[0036] The wireless communication traffic request transmission normal data flow set is accessed for communication spectrum transmission through the wireless connection communication channel to obtain the wireless communication traffic transmission data flow under different access communication frequency band sub-channels.

[0037] Further, the accessing of the communication spectrum transmission for the wireless communication traffic request transmission of the normal data flow set through the wireless connection communication channel includes:

[0038] Performing a network transmission bandwidth analysis on each communication traffic transmission normal data flow in the wireless communication traffic request transmission normal data flow set to obtain a network transmission bandwidth of each communication traffic transmission normal data flow;

[0039] Performing statistical calculation of the network transmission interference degree for each communication traffic transmission normal data flow in the wireless communication traffic request transmission normal data flow set, so as to obtain the network transmission interference degree of each communication traffic transmission normal data flow;

[0040] Based on the network transmission bandwidth of each communication traffic transmission normal data stream and the degree of network transmission interference, a communication frequency band sub-channel is dynamically selected for the corresponding communication traffic transmission normal data stream in the wireless communication traffic request transmission normal data stream set through the wireless connection communication channel, so as to obtain a communication frequency band sub-channel suitable for access corresponding to each communication traffic transmission normal data stream;

[0041] According to the sub-channel suitable for accessing the communication frequency band corresponding to each normal data stream of communication traffic transmission, the corresponding normal data stream of communication traffic transmission in the normal data stream set of wireless communication traffic request transmission is split, transmitted and reorganized to obtain the wireless communication traffic transmission data stream under different accessing communication frequency band sub-channels.

[0042] Furthermore, the communication data transmission congestion dynamic security transmission module includes the following functions:

[0043] Conduct frequency band bandwidth utilization evaluation and analysis on wireless communication traffic transmission data streams under different access communication frequency band sub-channels to obtain network transmission frequency band bandwidth utilization of traffic transmission data streams under different access communication frequency bands;

[0044] Performing data packet loss rate evaluation and analysis on wireless communication traffic transmission data streams under different access communication frequency band sub-channels to obtain data packet loss rates of traffic transmission data streams under different access communication frequency bands;

[0045] Based on the network transmission band bandwidth utilization rate and data packet loss rate of traffic transmission data streams under different access communication frequency bands, the communication frequency band network congestion degree calculation formula is used to quantitatively calculate the congestion degree of wireless communication traffic transmission data streams under different access communication frequency band sub-channels to obtain the network transmission congestion degree of traffic transmission data streams under different frequency bands;

[0046] Based on the network transmission congestion degree of traffic transmission data flow under different frequency bands, the frequency band congestion perception analysis is performed on the corresponding wireless communication traffic transmission data flow under different access communication frequency band sub-channels to obtain the wireless communication frequency band network congestion transmission data flow;

[0047] The wireless connection communication channel is used to dynamically allocate network communication resources for transmission processing of network congestion transmission data flow in the wireless communication frequency band, and the result of dynamic allocation of traffic data flow congestion resources and secure transmission is obtained.

[0048] Furthermore, the calculation formula for the communication frequency band network congestion degree is specifically as follows:

[0049]

[0050] In the formula, To access the communication band The degree of network transmission congestion under To access the measurement variable parameters of the communication band, To access the communication band set, To access the communication band The bandwidth utilization of the network transmission band for the downlink traffic data flow. To access the communication band The packet loss rate of the traffic transmission data flow, To access the communication band The transmission signal power of the downstream transmission data stream, To access the communication band The network transmission noise power of the downlink traffic data flow, To access the communication band The adjacent frequency band sub-channel interference power of the downlink traffic transmission data stream, is the network congestion assessment interval, is the time variable parameter, To access the communication band The network traffic load size of the downlink traffic transmission data flow, It is the correction factor for the degree of network transmission congestion.

[0051] Furthermore, the method of using the wireless connection communication channel to dynamically allocate network communication resources for transmission processing of the wireless communication frequency band network congestion transmission data flow includes:

[0052] Conduct network communication load evaluation and analysis on the network congestion transmission data flow of the wireless communication frequency band to obtain the size of the network communication transmission load of the wireless communication frequency band;

[0053] Based on the transmission load size of the wireless communication frequency band network communication, a network transmission window is dynamically set for the wireless communication frequency band network congestion transmission data flow using a wireless connection communication channel to obtain a dynamic transmission window for the wireless communication frequency band network congestion;

[0054] Based on the dynamic window of network congestion transmission in the wireless communication frequency band, a dynamic control strategy of network communication resources is analyzed for the data flow of network congestion transmission in the wireless communication frequency band, so as to generate a dynamic control strategy of network congestion transmission resources in the wireless communication frequency band;

[0055] According to the dynamic control strategy of wireless communication frequency band network congestion transmission resources, the corresponding wireless communication frequency band network congestion transmission data flow is dynamically allocated and transmitted, and the traffic data flow congestion resource dynamic allocation and safe transmission result is obtained.

[0056] Beneficial effects of the present invention:

[0057] The secure wireless communication system based on communication technology proposed in the present invention is composed of a wireless communication traffic real-time monitoring module, a traffic denial of service attack instant discarding module, a normal communication data spectrum utilization transmission module, and a communication data transmission congestion dynamic security transmission module. Compared with the prior art, the beneficial effect of the present application is to establish a corresponding wireless connection communication channel between the information sending end and the information receiving end by using advanced wireless communication technology to realize the wireless communication channel between the sending end and the receiving end. The establishment of the wireless communication connection is a key step to ensure the smooth transmission of data. It not only involves the transmission and reception of signals, but also includes the monitoring and optimization of signal quality. Through effective communication technology, the stability and reliability of the wireless communication channel can be ensured on the basis of the network transmission path. This connection method can adapt to complex network environments and different communication requirements, and provide solid technical support for subsequent processing. The communication traffic monitoring node and the communication traffic discarding buffer area are also deployed in the wireless connection communication channel between the sending end and the receiving end to realize the monitoring and management of the information incoming and outgoing communication traffic, wherein the communication traffic monitoring node is responsible for real-time recording and analysis of the traffic situation of data transmission, including the amount of data incoming and outgoing, the transmission rate and other information. In addition, the communication traffic discard buffer is used to temporarily store and process data flows with denial of service attack behaviors in the communication traffic during the transmission process, so as to improve the stability and security of data transmission. At the same time, by using the information incoming and outgoing communication traffic monitoring node to monitor the communication traffic of the wireless connection communication channel between the sender and the receiver in real time, this monitoring process covers various parameters and indicators of the communication channel, such as delay, packet loss rate, bandwidth utilization, etc. Through real-time monitoring data flow analysis, potential communication problems can be discovered and solved in time, and network performance can be optimized. The real-time monitoring data of wireless communication traffic not only provides an important basis for network operation and maintenance, but also helps to optimize and improve the design and management strategy of communication systems. Secondly, by dividing the access request torrent of the real-time monitoring data flow of wireless communication traffic, the purpose of this step is to divide the data flow into wireless communication traffic access request torrent data flow and access non-request torrent data flow according to different access requests. Through this division, normal communication requests and abnormal torrent requests can be effectively distinguished and managed, thereby providing an effective basis for subsequent security screening and traffic control. Based on the previous step, the wireless communication traffic access request flood data flow is further screened for traffic request denial attack behavior. This process aims to identify and filter out data flows with denial of service attack behaviors, while retaining communication data flows with non-attack behaviors. Through effective attack behavior screening, the ability to detect and respond to malicious attacks can be improved, and the stability and security of the communication network can be guaranteed, thereby reducing the situation of information tampering in the wireless connection communication channel and reducing the security issues of network denial of service attack behaviors.By using the wireless connection communication channel, the data stream identified as the denial of service attack behavior is redirected and transmitted to the information communication traffic discard buffer. In this buffer, the actual cache delay of the attack behavior data stream can be monitored and recorded, and the traffic request flood denial of service attack behavior data stream corresponding to the preset information communication transmission delay is automatically deleted according to the preset information communication transmission delay. The importance of this step is to isolate and process the attack behavior data in time to prevent it from affecting the normal communication service, thereby ensuring that the normal communication traffic is not affected. The automation and real-time nature of this process ensures the rapid response and processing of the information communication traffic discard buffer to potential attack behaviors, thereby effectively maintaining the security and stability of the communication network. Then, by performing time-series merging of wireless communication traffic access non-request flood data streams and traffic request flood non-attack behavior data streams, the purpose of this step is to integrate the scattered data streams into a unified wireless communication traffic request transmission normal data stream set. Through data stream merging, the complexity of data processing and storage can be effectively reduced, while ensuring the integrity and consistency of the data stream, providing a clear time-series data basis for subsequent spectrum transmission and analysis. The wireless communication traffic request transmission normal data flow set is also accessed by using the wireless connection communication channel to perform communication spectrum transmission. This step is to effectively transmit and manage the wireless communication traffic data flow under different access communication frequency band sub-channels. By accessing the communication spectrum transmission, the utilization of the communication spectrum can be optimized, the efficiency and stability of data transmission can be ensured, and the communication requirements under different frequency band sub-channels can be met. Finally, the frequency band congestion perception analysis is performed on the wireless communication traffic transmission data flow under different access communication frequency band sub-channels. This analysis helps to accurately identify and locate the factors affecting the communication quality and network performance by deeply understanding the congestion situation under each frequency band. Through the frequency band congestion perception analysis, the data transmission strategy can be monitored and adjusted in real time to ensure that stable and efficient communication services can still be provided under high load and complex network environments. In addition, the network communication resource dynamic allocation transmission processing is performed on the analyzed wireless communication frequency band network congestion transmission data flow by using the wireless connection communication channel. This process aims to dynamically allocate communication resources according to the real-time congestion situation and transmission requirements, and optimize the security and efficiency of data transmission. Through dynamic resource allocation, it is possible to quickly respond to changes in network load in different frequency bands, improve the response speed of data transmission and the overall performance of the network, thereby ensuring continuous optimization of user experience and service quality. BRIEF DESCRIPTION OF THE DRAWINGS

[0058] Other features, objects and advantages of the present invention will become more apparent from the detailed description of non-limiting embodiments thereof made with reference to the following drawings:

[0059] Figure 1A schematic diagram of a secure wireless communication system based on communication technology of the present invention;

[0060] Figure 2 for Figure 1 Schematic diagram of the functional flow of the wireless communication traffic real-time monitoring module;

[0061] Figure 3 for Figure 1 Schematic diagram of the functional flow of the module that immediately discards traffic under denial of service attack. DETAILED DESCRIPTION

[0062] The technical method of the present invention is described clearly and completely below in conjunction with the accompanying drawings. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by technicians in this field without creative work are within the scope of protection of the present invention.

[0063] In addition, the accompanying drawings are only schematic illustrations of the present invention and are not necessarily drawn to scale. The same reference numerals in the figures represent the same or similar parts, and their repeated description will be omitted. Some of the block diagrams shown in the accompanying drawings are functional entities and do not necessarily correspond to physically or logically independent entities. The functional entities can be implemented in software form, or implemented in one or more hardware modules or integrated circuits, or implemented in different networks and / or processor methods and / or microcontroller methods.

[0064] It should be understood that, although the terms "first", "second", etc. may be used herein to describe various units, these units should not be limited by these terms. These terms are used only to distinguish one unit from another unit. For example, without departing from the scope of the exemplary embodiments, the first unit may be referred to as the second unit, and similarly the second unit may be referred to as the first unit. The term "and / or" used herein includes any and all combinations of one or more of the listed associated items.

[0065] To achieve this, please refer to Figures 1 to 3 The present invention provides a secure wireless communication system based on communication technology, and the method includes the following modules:

[0066] A wireless communication traffic real-time monitoring module is used to establish a wireless connection communication channel between an information sending end and an information receiving end through communication technology, and to obtain information incoming and outgoing communication traffic monitoring nodes and information communication traffic discarding buffer areas by deploying communication traffic monitoring nodes in the wireless connection communication channel; and to perform real-time monitoring of communication traffic on the wireless connection communication channel using the information incoming and outgoing communication traffic monitoring nodes to obtain a real-time monitoring data stream of wireless communication traffic;

[0067] The module for instantly discarding traffic under denial of service attack is used to divide the access request flood into the data stream of wireless communication traffic monitored in real time, so as to generate the wireless communication traffic access request flood data stream and the wireless communication traffic access non-request flood data stream; to filter the wireless communication traffic access request flood data stream for traffic request denial of attack behavior, so as to obtain the traffic request flood denial of service attack behavior data stream and the traffic request flood non-attack behavior data stream; to redirect the traffic request flood denial of service attack behavior data stream to the information communication traffic discard buffer area through the wireless connection communication channel, and to automatically delete all the traffic request flood denial of service attack behavior data streams in the information communication traffic discard buffer area according to the preset information communication transmission delay;

[0068] The normal communication data spectrum utilization transmission module is used to perform time-series merging of the wireless communication traffic access non-request flood data flow and the traffic request flood non-attack behavior data flow to obtain a set of normal data flows requested for transmission by the wireless communication traffic; perform access communication spectrum transmission on the set of normal data flows requested for transmission by the wireless communication traffic through the wireless connection communication channel to obtain wireless communication traffic transmission data flows under different access communication frequency band sub-channels;

[0069] The communication data transmission congestion dynamic and secure transmission module is used to perform communication frequency band congestion perception analysis on the wireless communication traffic transmission data flow under different access communication frequency band sub-channels, and obtain the wireless communication frequency band network congestion transmission data flow; use the wireless connection communication channel to dynamically allocate network communication resources for the wireless communication frequency band network congestion transmission data flow, and obtain the traffic data flow congestion resource dynamic allocation and secure transmission result.

[0070] In the embodiment of the present invention, please refer to Figure 1 FIG. 1 is a schematic diagram of a secure wireless communication system based on communication technology of the present invention. In this example, the secure wireless communication system based on communication technology includes the following modules:

[0071] S1: A wireless communication traffic real-time monitoring module, which is used to establish a wireless connection communication channel between an information sending end and an information receiving end through communication technology, and to obtain information incoming and outgoing communication traffic monitoring nodes and information communication traffic discarding buffer areas by deploying communication traffic monitoring nodes in the wireless connection communication channel; and to perform real-time monitoring of communication traffic on the wireless connection communication channel using the information incoming and outgoing communication traffic monitoring nodes to obtain a real-time monitoring data stream of wireless communication traffic;

[0072] In an embodiment of the present invention, a multipath transmission path is selected and established between an information transmitter and an information receiver by using a multipath transmission technology to consider multiple different transmission paths to increase the stability and fault tolerance of data transmission. For example, in a secure wireless communication system, data is transmitted by selecting a direct path and multiple backup paths passing through a relay node at the same time to cope with existing signal interference or node failures, and an actual wireless connection channel is established by using an appropriate wireless communication technology (such as Wi-Fi, LTE, or other customized wireless protocols) to establish a multipath transmission path between the transmitter and the receiver previously established. For example, multiple parallel wireless links are established by combining multiple transmission paths between the transmitter and the receiver with corresponding wireless communication technologies to ensure that data can be transmitted through multiple paths at the same time, thereby improving the transmission speed and the fault tolerance of the system, thereby obtaining a wireless connection communication channel between the transmitter and the receiver. Then, a corresponding traffic monitoring device is deployed on a wireless router or a network center node in the wireless connection communication channel between the transmitter and the receiver previously established, to design a corresponding communication traffic monitoring node to monitor the incoming and outgoing data in real time, thereby obtaining an information incoming and outgoing communication traffic monitoring node. A communication traffic discard buffer with large space capacity is also deployed and designed in the wireless connection communication channel to help temporarily store and process data flows with denial of service attack behaviors in the communication traffic during the transmission process, and ensure the smoothness of wireless communication and the security of data, thereby obtaining an information communication traffic discard buffer. In addition, the communication traffic of the wireless connection communication channel between the sending end and the receiving end is monitored in real time by using the traffic monitoring device in the previously deployed information incoming and outgoing communication traffic monitoring node, so as to continuously capture and record the data traffic information passing through the wireless communication channel, including the source, destination, transmission rate and abnormal conditions of the traffic data, and finally obtain the real-time monitoring data flow of the wireless communication traffic.

[0073] S2: Traffic is immediately discarded when it is attacked by a denial of service, which is used to divide the access request flood into a data stream monitored in real time by wireless communication traffic, so as to generate a wireless communication traffic access request flood data stream and a wireless communication traffic access non-request flood data stream; to perform traffic request denial attack behavior screening on the wireless communication traffic access request flood data stream, so as to obtain a traffic request flood denial of service attack behavior data stream and a traffic request flood non-attack behavior data stream; to redirect the traffic request flood denial of service attack behavior data stream to the information communication traffic discard buffer area through the wireless connection communication channel, and to automatically delete all the traffic request flood denial of service attack behavior data streams in the information communication traffic discard buffer area according to the preset information communication transmission delay;

[0074] In an embodiment of the present invention, a network traffic analysis tool or device is used to capture access requests of a wireless communication traffic real-time monitoring data stream previously obtained through real-time monitoring, so as to intercept and record the access request status of the traffic data on the wireless communication channel on the monitoring node, and accurately record and obtain the characteristics and source data of each access request, and at the same time encapsulate each access request information data into a capacity package, and divide the corresponding wireless communication traffic real-time monitoring data stream into request torrents according to the request status of the access request sequence in the capacity package (including the access request frequency and the frequency of the same request), so as to distinguish those data streams with a large number of requests pouring in at the same time, which usually indicate that there may be corresponding denial of service attack behaviors (including denial of service attacks DoS and distributed denial of service attacks DDoS), and relatively normal and stable data streams, thereby dividing and generating wireless communication traffic access request torrent data streams and wireless communication traffic access non-request torrent data streams. Secondly, by further screening the traffic request denial attack behavior of the wireless communication traffic access request flood data flow obtained by the previous division, the data flow involving the denial of service attack behavior can be further screened out from all the data flows marked as request floods. For example, by adopting deep packet inspection technology or behavioral analysis algorithm, data flows with typical attack characteristics are identified, such as abnormal request frequency, source distribution pattern or data packet size, and the corresponding data flows with denial of service attack behavior and without denial of service attack behavior (that is, normal high-frequency access requests) are screened out, thereby obtaining traffic request flood denial of service attack behavior data flows and traffic request flood non-attack behavior data flows.Then, the filtered traffic request flood denial of service attack behavior data flow is redirected and transmitted to the previously deployed information communication traffic discard buffer area by using the previously established wireless connection communication channel, and the cache delay of these attack behavior data flows in the information communication traffic discard buffer area is monitored. This process aims to measure and record the length of time each cached attack behavior data flow stays in the cache area, for example, by using timestamps and packet sequence numbers to track the entry and exit time of each data flow, thereby calculating their actual cache delay, and by using the preset information communication transmission delay (that is, the time between the data sending end and the information The actual cache delay of the attack behavior data flow in the previously monitored cache area is compared and judged. If it exceeds the preset information communication transmission delay, the deletion operation is automatically performed in the information communication traffic discarding cache area, that is, the corresponding attack behavior data flow in the information communication traffic discarding cache area is removed. On the contrary, if it does not exceed the preset information communication transmission delay, that is, it is still within an acceptable range, monitoring and evaluation will continue to ensure that the attack behavior data flow in all cache areas can be cleaned up and processed at the appropriate time until the traffic request flood denial of service attack behavior data flow in the information communication traffic discarding cache area is completely deleted.

[0075] S3: A normal communication data spectrum utilization transmission module is used to perform time-series merging of wireless communication traffic access non-request flood data flows and traffic request flood non-attack behavior data flows to obtain a set of normal data flows requested for transmission by wireless communication traffic; access communication spectrum transmission is performed on the set of normal data flows requested for transmission by wireless communication traffic through a wireless connection communication channel to obtain wireless communication traffic transmission data flows under different access communication frequency band sub-channels;

[0076] In an embodiment of the present invention, the wireless communication traffic access non-request flood data stream and the traffic request flood non-attack behavior data stream obtained by previous division are synchronized in time sequence to synchronize the two data streams in the order of their occurrence, ensuring that they are accurately captured and processed in the same time dimension, and the non-request flood data stream and the request flood non-attack behavior data stream obtained in the same time dimension after the timing synchronization processing are merged to form a normal data stream set for wireless communication traffic request transmission, and the data streams from different sources are integrated into a unified transmission unit or data packet, thereby obtaining a normal data stream set for wireless communication traffic request transmission. Then, by using the wireless connection communication channel, the communication spectrum is processed for each communication traffic transmission normal data stream in the wireless communication traffic request transmission normal data stream set, so as to dynamically select the optimal transmission frequency band sub-channel for data transmission according to the current wireless environment and communication requirements of the corresponding transmission data stream. For example, after the spectrum analysis, a suitable transmission frequency band sub-channel is selected for its corresponding transmission data stream according to the current network load and interference conditions to ensure that each data stream can be transmitted under the best channel conditions, while ensuring the security and integrity of the transmission data stream, and gathering into a new transmission data stream in the corresponding frequency band sub-channel according to the transmission order, and finally obtaining the wireless communication traffic transmission data stream under different access communication frequency band sub-channels.

[0077] S4: Communication data transmission congestion dynamic secure transmission module, used to perform communication band congestion perception analysis on the wireless communication traffic transmission data flow under different access communication frequency band sub-channels, and obtain the wireless communication frequency band network congestion transmission data flow; use the wireless connection communication channel to dynamically allocate network communication resources for the wireless communication frequency band network congestion transmission data flow, and obtain the traffic data flow congestion resource dynamic allocation and secure transmission result.

[0078] In an embodiment of the present invention, a data statistics method is used to evaluate and analyze the bandwidth utilization and data packet loss rate of wireless communication traffic transmission data streams previously divided under different access communication frequency band sub-channels, so as to monitor and evaluate the bandwidth utilization of data traffic in each access frequency band (such as 700MHz, 1800MHz, etc.), and quantitatively calculate the corresponding data packet loss rate, and quantitatively calculate the congestion degree of the wireless communication traffic transmission data streams under different access communication frequency band sub-channels according to the corresponding bandwidth utilization and data packet loss rate, so as to quantitatively calculate the network transmission congestion degree of the data stream under each frequency band, and at the same time, by using a preset network transmission congestion threshold, the network transmission congestion degree of the traffic transmission data streams under different frequency bands previously quantitatively calculated is compared and judged, so as to screen out the wireless communication traffic transmission data streams corresponding to the preset network transmission congestion threshold and mark them as transmission data streams with network congestion, so as to analyze and identify whether there is a specific congestion problem in each access communication frequency band, and realize that all transmission data streams with network congestion are screened out, so as to obtain wireless communication frequency band network congestion transmission data streams. Then, by using the wireless connection communication channel, the network communication resources are dynamically allocated to the network congested transmission data flow corresponding to the wireless communication frequency band determined to have network congestion, so as to dynamically adjust the communication resource allocation of the data flow in each frequency band with network congestion according to the previous analysis results to ensure that the data can be transmitted safely and efficiently. For example, if a certain LTE frequency band is identified as highly congested, the channel allocation of the corresponding base station will be dynamically adjusted by using the wireless connection communication channel to increase the transmission bandwidth of the data flow in the frequency band or adjust the transmission priority to alleviate the congestion pressure and ensure the security and stability of communication, so as to respond to the congestion in different frequency bands in real time, and finally obtain the result of dynamic allocation of congestion resources for traffic data flow and safe transmission.

[0079] Furthermore, the wireless communication traffic real-time monitoring module includes the following functions:

[0080] Collecting the network physical locations of the information sending end and the information receiving end to obtain the network physical location of the information sending end and the network physical location of the information receiving end;

[0081] Based on the network physical location of the information sending end and the network physical location of the information receiving end, a network topology design is performed on the information sending end and the information receiving end to generate a network topology structure between the sending end and the receiving end;

[0082] Perform multipath transmission selection and establishment on the network topology structure between the sending end and the receiving end to obtain the network pre-transmission multipath between the sending end and the receiving end; perform wireless communication connection processing on the network pre-transmission multipath between the sending end and the receiving end through communication technology to obtain a wireless connection communication channel between the sending end and the receiving end;

[0083] By deploying a communication flow monitoring node and a communication flow discarding buffer area in a wireless connection communication channel between a transmitting end and a receiving end, an information incoming and outgoing communication flow monitoring node and an information communication flow discarding buffer area are obtained;

[0084] The information incoming and outgoing communication flow monitoring node is used to monitor the communication flow of the wireless connection communication channel between the sending end and the receiving end in real time, and the wireless communication flow real-time monitoring data flow is obtained.

[0085] As an embodiment of the present invention, refer to Figure 2 As shown, Figure 1 The function flow diagram of the wireless communication traffic real-time monitoring module in this embodiment includes:

[0086] S11: Collecting the network physical locations of the information sending end and the information receiving end to obtain the network physical location of the information sending end and the network physical location of the information receiving end;

[0087] In an embodiment of the present invention, the network physical address locations of the corresponding information sending end and information receiving end are determined by using network physical address allocation technology to determine the network physical locations (i.e., IP addresses) of the corresponding mobile devices at the information sending end and the information receiving end, and finally the network physical locations of the information sending end and the information receiving end are obtained.

[0088] S12: performing network topology design for the information sending end and the information receiving end based on the network physical location of the information sending end and the network physical location of the information receiving end, so as to generate a network topology structure between the sending end and the receiving end;

[0089] In an embodiment of the present invention, the network topology connection design of the mobile devices at the information sending end and the information receiving end is performed by combining the previously determined network physical location of the information sending end and the network physical location of the information receiving end with network topology technology, so as to design effective communication routes and connection methods according to the location information of the mobile devices to ensure the security and efficiency of data transmission. For example, assuming that a fixed secure communication network needs to be established, the optimal network topology structure will be designed according to the location arrangement of different sending and receiving mobile devices to ensure that data can be efficiently transmitted from the sending end to the receiving end, and finally the network topology structure between the sending end and the receiving end is designed and generated.

[0090] S13: performing multipath transmission selection and establishment on the network topology structure between the transmitting end and the receiving end to obtain a network pre-transmission multipath between the transmitting end and the receiving end; performing wireless communication connection processing on the network pre-transmission multipath between the transmitting end and the receiving end through communication technology to obtain a wireless connection communication channel between the transmitting end and the receiving end;

[0091] In an embodiment of the present invention, a multipath transmission path is selected and established for the network topology structure between the transmitter and the receiver obtained by the previous design by using a multipath transmission technology, so as to consider multiple different transmission paths to increase the stability and fault tolerance of data transmission. For example, in a secure wireless communication system, by selecting to use both a direct path and a backup path passing through a relay node to transmit data, in order to cope with existing signal interference or node failures, this multipath selection strategy can improve the reliability of the system and ensure that data can be smoothly transmitted even when some paths are blocked or interfered, thereby obtaining a network pre-transmission multipath between the transmitter and the receiver. At the same time, by using appropriate wireless communication technology (such as Wi-Fi, LTE, or other customized wireless protocols) to establish a previously established network pre-transmission multipath between the transmitter and the receiver, an actual wireless connection channel is established. For example, by combining multiple transmission paths between the transmitter and the receiver with corresponding wireless communication technologies to establish multiple parallel wireless links, it is ensured that data can be transmitted through multiple paths at the same time, thereby improving the transmission speed and the fault tolerance of the system, and finally obtaining a wireless connection communication channel between the transmitter and the receiver.

[0092] S14: Deploy a communication flow monitoring node and a communication flow discarding buffer area in the wireless connection communication channel between the transmitting end and the receiving end to obtain an information incoming and outgoing communication flow monitoring node and an information communication flow discarding buffer area;

[0093] In the embodiment of the present invention, by deploying corresponding traffic monitoring equipment on a wireless router or a network center node in a wireless connection communication channel between a transmitting end and a receiving end obtained by previously establishing a connection, a corresponding communication traffic monitoring node is designed to monitor the incoming and outgoing data in real time, so as to effectively manage and evaluate the security of the data flow, thereby obtaining an information incoming and outgoing communication traffic monitoring node. A communication traffic discarding buffer area with a large space capacity is also deployed and designed in the wireless connection communication channel to help temporarily store and process data flows with denial of service attack behaviors in the communication traffic during the transmission process, and to ensure the smoothness of wireless communication and the security of data, and finally obtain an information communication traffic discarding buffer area.

[0094] S15: Using the information incoming and outgoing communication flow monitoring node to perform real-time monitoring of the communication flow of the wireless connection communication channel between the sending end and the receiving end, and obtain a real-time monitoring data flow of the wireless communication flow.

[0095] In an embodiment of the present invention, by using the traffic monitoring device in the previously deployed information incoming and outgoing communication traffic monitoring node, the real-time monitoring of the communication traffic of the wireless connection communication channel between the sending end and the receiving end is performed to continuously capture and record the data traffic information passing through the wireless communication channel, including the source, destination, transmission rate and existing abnormal conditions of the traffic data, and finally obtain the real-time monitoring data stream of the wireless communication traffic.

[0096] Furthermore, the module for immediately discarding traffic when it is attacked by a denial of service includes the following functions:

[0097] Capturing access requests for real-time monitoring data streams of wireless communication traffic to obtain access request capacity packets for the wireless communication traffic data streams;

[0098] Based on the access request capacity package of the wireless communication traffic data flow, the corresponding wireless communication traffic real-time monitoring data flow is divided into access request floods to generate wireless communication traffic access request flood data flows and wireless communication traffic access non-request flood data flows;

[0099] Performing traffic request denial attack behavior screening on the wireless communication traffic access request flood data flow to obtain the traffic request flood denial of service attack behavior data flow and the traffic request flood non-attack behavior data flow;

[0100] Redirecting the traffic request flood denial of service attack behavior data flow to the information communication traffic discard buffer area through the wireless connection communication channel, and monitoring the cache delay of the traffic request flood denial of service attack behavior data flow in the information communication traffic discard buffer area to obtain the actual cache delay of the attack behavior data flow in the buffer area;

[0101] The actual cache delay of the attack behavior data flow in the cache area is compared and judged according to the preset information communication transmission delay. When the actual cache delay of the attack behavior data flow in the cache area exceeds the preset information communication transmission delay, the corresponding traffic request flood denial of service attack behavior data flow in the information communication traffic discarding cache area is automatically deleted. Otherwise, the cache delay of the traffic request flood denial of service attack behavior data flow in the information communication traffic discarding cache area continues to be monitored until all the traffic request flood denial of service attack behavior data flows in the information communication traffic discarding cache area are deleted.

[0102] As an embodiment of the present invention, refer to Figure 3 As shown, Figure 1The function flow diagram of the module for immediately discarding traffic under a denial of service attack is shown in FIG. 1 . In this embodiment, the functions of the module for immediately discarding traffic under a denial of service attack include:

[0103] S21: capturing access requests for real-time monitoring data flows of wireless communication traffic to obtain access request capacity packets for the wireless communication traffic data flows;

[0104] In an embodiment of the present invention, a network traffic analysis tool or device is used to capture access requests for the real-time monitoring data stream of wireless communication traffic previously obtained by real-time monitoring, so as to intercept and record the access requests of the traffic data passing through the wireless communication channel on the monitoring node, and accurately record and obtain the characteristics and source data of each access request, and at the same time encapsulate each access request information data into a capacity package, and finally obtain the access request capacity package of the wireless communication traffic data stream.

[0105] S22: dividing the corresponding wireless communication traffic real-time monitoring data flow into access request floods based on the access request capacity package of the wireless communication traffic data flow, so as to generate a wireless communication traffic access request flood data flow and a wireless communication traffic access non-request flood data flow;

[0106] In an embodiment of the present invention, the access request capacity package of the wireless communication traffic data stream obtained by previous encapsulation is parsed to obtain each access request sequence, and the corresponding wireless communication traffic real-time monitoring data stream is divided into request torrents according to the request conditions of the access request sequence (including the access request frequency and the frequency of the same request), so as to distinguish those data streams with a large number of requests pouring in at the same time, which usually indicate that there may be corresponding denial of service attack behaviors (including denial of service attacks DoS and distributed denial of service attacks DDoS), and relatively normal and stable data streams, and finally the wireless communication traffic access request torrent data stream and the wireless communication traffic access non-request torrent data stream are generated by division.

[0107] S23: Performing traffic request denial attack behavior screening on the wireless communication traffic access request flood data flow to obtain a traffic request flood denial of service attack behavior data flow and a traffic request flood non-attack behavior data flow;

[0108] In an embodiment of the present invention, the wireless communication traffic access request flood data stream obtained by the previous division is further screened for traffic request denial attack behavior, so as to further screen out data streams involving denial of service attack behavior from all data streams marked as request floods. For example, by adopting deep packet inspection technology or behavioral analysis algorithm, data streams with typical attack characteristics are identified, such as abnormal request frequency, source distribution pattern or data packet size, etc., so as to screen out data streams with corresponding denial of service attack behavior and data streams without denial of service attack behavior (that is, normal high-frequency access requests), and finally obtain traffic request flood denial of service attack behavior data streams and traffic request flood non-attack behavior data streams.

[0109] S24: redirecting and transmitting the traffic request flood denial of service attack behavior data flow to the information communication traffic discard buffer area through the wireless connection communication channel, and monitoring the cache delay of the traffic request flood denial of service attack behavior data flow in the information communication traffic discard buffer area to obtain the actual cache delay of the attack behavior data flow in the buffer area;

[0110] In an embodiment of the present invention, the screened traffic request flood denial of service attack behavior data flow is redirected and transmitted to the previously deployed information communication traffic discard cache area by using the previously established wireless connection communication channel, and at the same time, the cache delay of these attack behavior data flows in the information communication traffic discard cache area is monitored. This process aims to measure and record the length of time each cached attack behavior data flow stays in the cache area, for example, by using timestamps and data packet sequence numbers to track the entry and exit times of each data flow, thereby calculating their actual cache delays, and finally obtaining the actual cache delays of the attack behavior data flows in the cache area.

[0111] S25: Compare and judge the actual cache delay of the attack behavior data flow in the cache area according to the preset information communication transmission delay. When the actual cache delay of the attack behavior data flow in the cache area exceeds the preset information communication transmission delay, the corresponding traffic request flood denial of service attack behavior data flow in the information communication traffic discarding cache area is automatically deleted. Otherwise, the cache delay of the traffic request flood denial of service attack behavior data flow in the information communication traffic discarding cache area continues to be monitored until all the traffic request flood denial of service attack behavior data flows in the information communication traffic discarding cache area are deleted.

[0112] In the embodiment of the present invention, by using the preset information communication transmission delay (that is, the maximum round-trip delay of data between the information sending end and the information receiving end) to compare and judge the actual cache delay of the attack behavior data flow in the previously monitored cache area, if the actual cache delay of the attack behavior data flow in the cache area exceeds the preset information communication transmission delay, then the deletion operation is automatically performed in the information communication traffic discarding cache area, that is, the corresponding attack behavior data flow in the information communication traffic discarding cache area is removed, and the attack behavior data flow is isolated and processed in time to prevent it from affecting the normal communication service, thereby ensuring that the normal communication traffic is not affected. On the contrary, if the data flow If the actual cache delay does not exceed the preset information communication transmission delay, that is, it is still within an acceptable range, monitoring and evaluation will continue to ensure that all attack behavior data flows in the cache area can be cleaned and processed at the appropriate time. For example, assuming the preset information transmission delay is 5 minutes, if an attack behavior data flow stays in the cache area for more than this time limit, it will be determined that its threat to the communication system has increased. Therefore, these data flows will be deleted immediately to reduce the existing hidden threats, ensuring that the wireless communication system can be protected from malicious attacks and maintain its normal operation until the information communication traffic discards the traffic request flood in the cache area and all the denial of service attack behavior data flows are deleted.

[0113] Further, the access request torrent division of the corresponding wireless communication traffic real-time monitoring data stream based on the wireless communication traffic data stream being accessed by the access request capacity package includes:

[0114] Based on the access request capacity package of the wireless communication traffic data stream, the total access request frequency of the corresponding wireless communication traffic real-time monitoring data stream is counted to obtain the total access request frequency of each wireless communication traffic data stream;

[0115] In an embodiment of the present invention, by combining the corresponding access request sequence in the access request capacity package of the wireless communication traffic data stream determined previously, the corresponding wireless communication traffic real-time monitoring data stream is statistically calculated for the number of access requests, so as to count the request sequence for accessing each data stream in the wireless connection communication channel through a monitoring device or system to record the total number of access requests for each wireless communication traffic data stream. For example, assuming that a wireless network monitoring system is analyzing data traffic on a specific frequency band, the monitoring device will continue to record the corresponding number of access requests on each data stream, regardless of whether it is a communication request from a user device or a denial of service access request from outside the system, and finally obtain the total frequency of access requests for each wireless communication traffic data stream.

[0116] Preferably, a request frequency statistical analysis is performed on the total frequency of access requests for each wireless communication traffic data stream to obtain the access request frequency of the wireless communication traffic data stream;

[0117] In an embodiment of the present invention, a statistical calculation of the request frequency is performed on the total frequency of access requests for each wireless communication traffic data stream previously counted in combination with a corresponding time period length, so as to obtain the access request frequency of each data stream by statistical calculation, that is, the access request frequency of the data stream within a certain time period. For example, by calculating the number of access requests for a certain data stream per minute, hour or day, the access request frequency of the wireless communication traffic data stream is finally obtained.

[0118] Preferably, the wireless communication traffic real-time monitoring data stream is subjected to network transmission protocol extraction processing to obtain the wireless communication traffic data stream network transmission protocol;

[0119] In an embodiment of the present invention, the network transmission protocol is extracted from the wireless communication traffic real-time monitoring data stream previously obtained by real-time monitoring to identify and extract the network transmission protocol information of each data stream, such as TCP, UDP, etc. For example, by analyzing the header information or payload data of the data packet on the corresponding wireless communication traffic real-time monitoring data stream, the type of transmission protocol used is extracted therefrom, and finally the network transmission protocol of the wireless communication traffic data stream is obtained.

[0120] Preferably, based on the wireless communication traffic data stream network transmission protocol, the frequency of requests for the same protocol is counted for each corresponding accessed request in the accessed request capacity package of the wireless communication traffic data stream to obtain the frequency of requests for the same transmission protocol of the wireless communication traffic data stream; according to the frequency of requests for the same transmission protocol of the wireless communication traffic data stream, the frequency of requests for the same protocol is quantitatively calculated for each corresponding accessed request in the accessed request capacity package of the wireless communication traffic data stream to obtain the frequency of requests for the same transmission protocol of the data stream;

[0121] In an embodiment of the present invention, by combining the wireless communication traffic data stream network transmission protocol previously obtained, the network transmission protocol situation corresponding to each accessed request in the accessed request capacity package of the wireless communication traffic data stream is counted for the same protocol requests, so as to further refine and analyze the network transmission protocol situation corresponding to each accessed request in the accessed request capacity package and count them, especially the request frequency under the same transmission protocol as the corresponding traffic data stream, for example, by counting each TCP connection or each UDP connection, the specific frequency of these requests within a period of time is counted, so as to obtain the request frequency of the same transmission protocol of the wireless communication traffic data stream. At the same time, by combining the frequency of requests for the same transmission protocol of the wireless communication traffic data stream obtained by previous statistical counting, the frequency of each accessed request corresponding to the access request capacity package of the wireless communication traffic data stream is quantitatively calculated, so as to convert the frequency of requests for the same protocol obtained in the previous step into a frequency measurement, thereby quantifying the frequency of accessed requests under the same transmission protocol in the data stream. For example, for HTTPS requests of the TLS protocol, the frequency percentage of accessed requests under the same transmission protocol in the overall traffic will be calculated based on its frequency. This measurement can help determine which accessed requests under the same transmission protocol are the main components of the traffic, and finally obtain the frequency of requests for the same transmission protocol of the data stream.

[0122] Preferably, the real-time monitoring data flow of wireless communication traffic corresponding to the access request frequency of the wireless communication traffic data flow exceeding 50% or the request frequency of the same transmission protocol of the data flow exceeding 35% is divided into a wireless communication traffic access request flood data flow, otherwise it is divided into a wireless communication traffic access non-request flood data flow.

[0123] In an embodiment of the present invention, by comparing the access request frequency of the wireless communication traffic data flow obtained by previous quantitative calculation or the request frequency of the same transmission protocol of the data flow with a preset threshold (that is, 50% request frequency or 35% frequency), if the HTTPS request frequency in a certain data flow exceeds 50%, or the frequency of a specific type of HTTPS request exceeds 35%, the data flow is divided into an access request flood data flow, otherwise, it is divided into a non-request flood data flow. This division can help distinguish the request type that has a greater impact on network traffic, and finally the wireless communication traffic access request flood data flow and the wireless communication traffic access non-request flood data flow are obtained.

[0124] Further, the filtering of the traffic request denial attack behavior on the wireless communication traffic access request flood data flow includes:

[0125] Performing request fluctuation graph conversion on corresponding accessed requests in the wireless communication traffic access request flood data flow to generate an accessed request fluctuation graph of the communication traffic request flood data flow;

[0126] In an embodiment of the present invention, corresponding access request data in the wireless communication traffic access request flood data flow are first collected, such as connection requests issued by user devices to base stations, and these request data contain the access requirements of different devices to the network at different time points. Time series analysis and graphical processing are performed on these access request data to convert the access request volume in each time period into a request fluctuation graph, thereby revealing the periodicity and change trend of the access requests, and finally generating an access request fluctuation graph of the communication traffic request flood data flow.

[0127] Preferably, a fluctuation amplitude and frequency statistical analysis is performed on a fluctuation graph of a request flood data flow being accessed by a communication traffic request, to obtain a fluctuation amplitude of a request flood data flow being accessed by a request, and a fluctuation frequency of a request flood data flow being accessed by a request;

[0128] In an embodiment of the present invention, a mathematical statistical method is used to perform a statistical analysis of the digital characteristics of request fluctuations on the access request fluctuation graph of the communication traffic request flood data stream generated by the previous conversion, so as to achieve a detailed analysis of the fluctuation amplitude and frequency in the fluctuation graph, thereby quantitatively calculating the highest access request peak value and the frequency distribution of access requests in a specific time period, and identifying the intensity and frequency of the access request fluctuations, and finally obtaining the access request fluctuation amplitude of the request flood data stream and the access request fluctuation frequency of the request flood data stream.

[0129] Preferably, based on the fluctuation amplitude of the access request flood data flow and the fluctuation frequency of the access request flood data flow, the request fluctuation pattern recognition analysis is performed on the wireless communication traffic access request flood data flow to obtain the traffic request flood access request fluctuation pattern;

[0130] In an embodiment of the present invention, a behavioral pattern recognition method is used to identify and analyze the request fluctuation pattern of the corresponding wireless communication traffic access request flood data flow by combining the access request fluctuation amplitude of the request flood data flow and the access request fluctuation frequency of the request flood data flow obtained by previous statistical calculations. This includes using data mining technology and pattern recognition algorithms to identify typical access request fluctuation patterns. For example, it can be identified that there are large-scale access request concentrations or sudden access request changes in certain time periods, and finally the corresponding traffic request flood access request fluctuation pattern is identified.

[0131] Preferably, a request connection establishment behavior pattern mining and analysis is performed on the corresponding accessed request in the wireless communication traffic access request flood data flow to obtain the traffic request flood accessed request connection establishment behavior pattern;

[0132] In an embodiment of the present invention, data mining technology is used to mine and analyze the connection establishment behavior patterns of the corresponding accessed requests in the previously divided wireless communication traffic access request flood data flow, so as to mine, analyze and identify the connection establishment behavior of the accessed requests in the communication traffic. For example, the behavior patterns of abnormal connection requests in certain cases can be analyzed, such as a large number of connection requests in a short period of time or frequent connection disconnection and reconnection behaviors, or the corresponding normal connection request behavior patterns. The mining of such behavior patterns helps to discover potential malicious activities or abnormal network usage, and ultimately obtains the connection establishment behavior patterns of the traffic request flood and the accessed request.

[0133] Preferably, the corresponding wireless communication traffic access request flood data flow is screened for traffic request denial attack behavior according to the traffic request flood access request fluctuation pattern and the traffic request flood access request connection establishment behavior pattern; when the traffic request flood access request fluctuation pattern contains large-scale access request fluctuation or the traffic request flood access request connection establishment behavior pattern contains abnormal connection establishment behavior, the corresponding wireless communication traffic access request flood data flow is marked as a traffic request flood denial of service attack behavior data flow, otherwise it is marked as a traffic request flood non-attack behavior data flow.

[0134] In an embodiment of the present invention, the corresponding wireless communication traffic access request flood data flow is screened out for a denial of service attack behavior pattern by combining the specific behavior change trends of the traffic request flood access request fluctuation pattern and the traffic request flood access request connection establishment behavior pattern obtained by previous analysis. If the traffic request flood access request fluctuation pattern has a large-scale access request fluctuation or the traffic request flood access request connection establishment behavior pattern has an abnormal connection establishment behavior, it indicates that the corresponding wireless communication traffic access request flood data flow has a denial of service attack behavior (that is, there is a denial of service attack DoS and a distributed denial of service attack DDoS), then the corresponding wireless communication traffic access request flood data flow is marked as a traffic request flood denial of service attack behavior data flow, conversely, if it is a relatively normal and stable data flow under other behavior patterns, then the corresponding wireless communication traffic access request flood data flow is marked as a traffic request flood non-attack behavior data flow.

[0135] Furthermore, the normal communication data spectrum utilization transmission module includes the following functions:

[0136] Performing time-series synchronization processing on the wireless communication traffic access unsolicited flood data flow and the traffic request flood non-attack behavior data flow to obtain the communication traffic unsolicited flood data flow and the request flood non-attack behavior data flow in the same time dimension;

[0137] In an embodiment of the present invention, the wireless communication traffic access non-request flood data stream and the traffic request flood non-attack behavior data stream obtained by the previous division are synchronized in time sequence, so as to synchronize the two data streams in the time sequence of their occurrence, and ensure that they are accurately captured and processed in the same time dimension. In this way, various received data streams are synchronized through timestamps or other time marking mechanisms. For example, assuming that non-request flood data streams (such as ordinary data transmission) and request flood non-attack behavior data streams (such as high-load but non-attack behavior data requests) are received from different user devices, these data streams will be arranged in time sequence according to the received time information, so as to ensure that the time relationship between their occurrence is accurately reflected during the processing process, and finally the communication traffic non-request flood data stream and request flood non-attack behavior data stream in the same time dimension are obtained.

[0138] Preferably, data streams of the communication traffic non-request flood data stream and the request flood non-attack behavior data stream in the same time dimension are merged to obtain a set of normal data streams of wireless communication traffic request transmission;

[0139] In an embodiment of the present invention, the non-request flood data streams and the request flood non-attack behavior data streams obtained in the same time dimension after timing synchronization processing are merged to form a normal data stream set for wireless communication traffic request transmission. In secure wireless communication processing, this means that the data streams previously obtained through timing synchronization processing need to be merged to create a complete communication traffic data set, thereby integrating data streams from different sources into a unified transmission unit or data packet. For example, by combining data streams from multiple user devices according to specific protocols or communication rules to form a comprehensive transmission data stream set, these data streams represent all normal transmission requests currently processed by the system, and finally a normal data stream set for wireless communication traffic request transmission is obtained.

[0140] Preferably, the wireless communication traffic request transmission normal data stream set is accessed for communication spectrum transmission through the wireless connection communication channel to obtain the wireless communication traffic transmission data stream under different access communication frequency band sub-channels.

[0141] In an embodiment of the present invention, a wireless connection communication channel is used to perform communication spectrum transmission processing on each communication traffic transmission normal data stream in a set of wireless communication traffic transmission normal data streams, so as to dynamically select the optimal transmission frequency band sub-channel for data transmission according to the current wireless environment and communication requirements of the corresponding transmission data stream. For example, after spectrum analysis, a suitable transmission frequency band sub-channel is selected for its corresponding transmission data stream according to the current network load and interference conditions to ensure that each data stream can be transmitted under the best channel conditions, while ensuring the security and integrity of the transmission data stream, and combining them into a new transmission data stream in the corresponding frequency band sub-channel according to the transmission order, so as to finally obtain the wireless communication traffic transmission data stream under different access communication frequency band sub-channels.

[0142] Further, the accessing of the communication spectrum transmission for the wireless communication traffic request transmission of the normal data flow set through the wireless connection communication channel includes:

[0143] Performing a network transmission bandwidth analysis on each communication traffic transmission normal data flow in the wireless communication traffic request transmission normal data flow set to obtain a network transmission bandwidth of each communication traffic transmission normal data flow;

[0144] In an embodiment of the present invention, a statistical analysis of the transmission bandwidth is performed on each communication traffic transmission normal data stream in the wireless communication traffic request transmission normal data stream set obtained after the timing merging, so as to evaluate the transmission demand of each data stream and determine the corresponding transmission bandwidth required therefrom, including measuring the amount of data transmitted by each data stream per unit time, usually quantified in bits per second (bps) or its derivative units, thereby measuring its data transmission rate, and accurately calculating the corresponding transmission bandwidth according to the data transmission rate, and finally obtaining the network transmission bandwidth of each communication traffic transmission normal data stream.

[0145] Preferably, a network transmission interference degree is statistically calculated for each communication traffic transmission normal data flow in the wireless communication traffic request transmission normal data flow set, so as to obtain a network transmission interference degree for each communication traffic transmission normal data flow;

[0146] In an embodiment of the present invention, a network interference assessment algorithm is used to perform a statistical calculation of the degree of network transmission interference for each normal data stream of wireless communication traffic request transmission within a normal data stream set. In secure wireless communication processing, network transmission interference may be caused by environmental electromagnetic interference, signal attenuation, or other wireless signal conflicts. In this way, the interference conditions encountered during the transmission of each data stream are collected and analyzed to quantify the degree of their impact. For example, if a normal data stream is subject to signal interference from an adjacent wireless device, resulting in a drop in transmission rate or data packet loss, these interferences will be statistically calculated, and the degree of transmission interference for each data stream will be evaluated and quantified accordingly, ultimately obtaining the degree of network transmission interference for each normal data stream of communication traffic transmission.

[0147] Preferably, based on the network transmission bandwidth of each communication traffic transmission normal data stream and the network transmission interference degree, a communication frequency band sub-channel is dynamically selected for the corresponding communication traffic transmission normal data stream in the wireless communication traffic request transmission normal data stream set through the wireless connection communication channel, so as to obtain a communication frequency band sub-channel suitable for access corresponding to each communication traffic transmission normal data stream;

[0148] In an embodiment of the present invention, by combining the network transmission bandwidth and interference level of each communication traffic transmission normal data stream obtained by previous analysis, a wireless connection communication channel is used to dynamically select a communication frequency band sub-channel for its corresponding communication traffic transmission normal data stream. This means that the communication frequency band sub-channel will be dynamically adjusted according to real-time transmission requirements and environmental conditions to maximize communication efficiency and quality. For example, in a wireless communication system that requires high security, a suitable transmission frequency band sub-channel will be selected for its corresponding transmission data stream based on the current network load and interference conditions to ensure that each data stream can be transmitted under the best channel conditions, and finally a suitable access communication frequency band sub-channel corresponding to each communication traffic transmission normal data stream is obtained.

[0149] Preferably, according to the sub-channel suitable for accessing the communication frequency band corresponding to each communication traffic transmission normal data stream, the corresponding communication traffic transmission normal data stream in the wireless communication traffic request transmission normal data stream set is subjected to data stream segmentation, transmission and reorganization to obtain the wireless communication traffic transmission data stream under different accessing communication frequency band sub-channels.

[0150] In an embodiment of the present invention, by combining the suitable access communication frequency band sub-channel corresponding to each communication traffic transmission normal data stream obtained by dynamic selection previously, the communication traffic transmission normal data stream corresponding to the wireless communication traffic request transmission normal data stream set is divided, transmitted and reorganized, so that the corresponding data stream is divided into the channel for transmission according to the dynamically selected frequency band sub-channel, and a new transmission data stream is assembled in the corresponding frequency band sub-channel according to the transmission order, and finally the wireless communication traffic transmission data stream under different access communication frequency band sub-channels is obtained.

[0151] Furthermore, the communication data transmission congestion dynamic security transmission module includes the following functions:

[0152] Conduct frequency band bandwidth utilization evaluation and analysis on wireless communication traffic transmission data streams under different access communication frequency band sub-channels to obtain network transmission frequency band bandwidth utilization of traffic transmission data streams under different access communication frequency bands;

[0153] In an embodiment of the present invention, a data statistics method is used to evaluate and analyze the bandwidth utilization of the wireless communication traffic transmission data stream under different access communication frequency band sub-channels previously divided, so as to monitor and evaluate the bandwidth utilization of the data traffic in each access frequency band (such as 700MHz, 1800MHz, etc.), and finally obtain the network transmission frequency band bandwidth utilization of the traffic transmission data stream under different access communication frequency bands.

[0154] Preferably, a data packet loss rate evaluation and analysis is performed on the wireless communication traffic transmission data stream under different access communication frequency band sub-channels to obtain the data packet loss rate of the traffic transmission data stream under different access communication frequency bands;

[0155] In an embodiment of the present invention, the packet loss rate of the wireless communication traffic transmission data stream under different access communication frequency band sub-channels is evaluated and analyzed, wherein the packet loss rate is an indicator to measure the proportion of data packets lost during data transmission, which directly affects the communication quality and user experience. For example, in a Wi-Fi network, the packet loss amount of each sub-channel under different frequency bands is first monitored, and then the packet loss amount is divided by the transmission data packet amount to quantify and calculate the corresponding packet loss rate. In this way, it can be determined which frequency bands have transmission problems or need to increase network coverage to improve the reliability of data packet transmission, and finally the packet loss rate of the traffic transmission data stream under different access communication frequency bands is obtained.

[0156] Preferably, based on the network transmission frequency band bandwidth utilization rate and data packet loss rate of the traffic transmission data stream under different access communication frequency bands, the communication frequency band network congestion degree calculation formula is used to quantitatively calculate the congestion degree of the wireless communication traffic transmission data stream under different access communication frequency band sub-channels, so as to obtain the network transmission congestion degree of the traffic transmission data stream under different frequency bands;

[0157] In an embodiment of the present invention, a suitable communication frequency band network congestion degree calculation formula is formed by combining the measurement variable parameters of the access communication frequency band, the access communication frequency band set, the network transmission frequency band bandwidth utilization, the data packet loss rate, the transmission signal power, the network transmission noise power, the adjacent frequency band sub-channel interference power, the time variable parameter, the network congestion assessment time interval, the network traffic load size and related parameters to quantify the congestion degree of the wireless communication traffic transmission data stream under different access communication frequency band sub-channels, so as to quantify the network transmission congestion degree of the data stream under each frequency band, and finally obtain the network transmission congestion degree of the traffic transmission data stream under different frequency bands.

[0158] Preferably, based on the network transmission congestion degree of the traffic transmission data stream under different frequency bands, the corresponding wireless communication traffic transmission data stream under different access communication frequency band sub-channels is subjected to frequency band congestion perception analysis to obtain the wireless communication frequency band network congestion transmission data stream;

[0159] In an embodiment of the present invention, a preset network transmission congestion threshold is used to compare and judge the network transmission congestion levels of traffic transmission data streams in different frequency bands obtained by previous quantitative calculation, so as to screen out the wireless communication traffic transmission data streams in the corresponding access communication frequency band sub-channels whose network transmission congestion levels are greater than or equal to the preset network transmission congestion threshold and mark them as transmission data streams with network congestion, thereby analyzing and identifying the specific congestion problems existing in each access communication frequency band, and screening out all transmission data streams with network congestion, and finally obtaining the wireless communication frequency band network congestion transmission data streams.

[0160] Preferably, a wireless connection communication channel is used to perform network communication resource dynamic allocation and transmission processing on a network congestion transmission data flow in a wireless communication frequency band, so as to obtain a traffic data flow congestion resource dynamic allocation and secure transmission result.

[0161] In an embodiment of the present invention, a wireless connection communication channel is used to dynamically allocate network communication resources for network congestion transmission data flows corresponding to wireless communication frequency bands determined to have network congestion, so as to dynamically adjust the communication resource allocation of data flows in each frequency band with network congestion according to the previous analysis results to ensure that data can be transmitted safely and efficiently. For example, if a certain LTE frequency band is identified as highly congested, the channel allocation of the corresponding base station is dynamically adjusted by using the wireless connection communication channel to increase the transmission bandwidth of the data flow in the frequency band or adjust the transmission priority to alleviate the congestion pressure and ensure the security and stability of communication, so as to respond to congestion situations occurring in different frequency bands in real time, and finally obtain the result of dynamic allocation of congestion resources for traffic data flows and safe transmission.

[0162] The calculation formula for the communication frequency band network congestion degree is specifically:

[0163]

[0164] In the formula, To access the communication band The degree of network transmission congestion under To access the measurement variable parameters of the communication band, To access the communication band set, To access the communication band The bandwidth utilization of the network transmission band for the downlink traffic data flow. To access the communication band The packet loss rate of the traffic transmission data flow, To access the communication band The transmission signal power of the downstream transmission data stream, To access the communication band The network transmission noise power of the downlink traffic data flow, To access the communication band The adjacent frequency band sub-channel interference power of the downlink traffic transmission data stream, is the network congestion assessment interval, is the time variable parameter, To access the communication band The network traffic load size of the downlink traffic transmission data flow, It is the correction factor for the degree of network transmission congestion.

[0165] The present invention obtains a communication frequency band network congestion degree calculation formula by using a specific mathematical model and after verification, which is used to quantitatively calculate the congestion degree of wireless communication traffic transmission data streams under different access communication frequency band sub-channels. The communication frequency band network congestion degree calculation formula comprehensively considers multiple key factors, such as bandwidth utilization, data packet loss rate, signal power, noise power and interference power. The comprehensive evaluation of these factors can more comprehensively describe the network load and interference situation in each frequency band. Through the operation of the calculation formula, the specific network transmission congestion degree of each frequency band can be accurately calculated, thereby providing an accurate quantitative indicator to evaluate network performance and resource utilization. The calculated congestion degree can be used as a basis for optimizing the allocation of wireless communication network resources. For example, in a frequency band with a high degree of congestion, signal adjustment can be strengthened or the amount of data transmission can be reduced to improve communication quality and stability. For operators or network administrators, these data can guide the formulation of more effective communication strategies to ensure that a good service level can be maintained during high-load periods. Therefore, the formula fully considers the congestion degree of accessing the communication frequency band. The degree of network transmission congestion under , access the measurement variable parameters of the communication band , access the communication band set , in accessing the communication band The bandwidth utilization of the network transmission band for downlink traffic transmission data flow , in accessing the communication band Packet loss rate of the downlink traffic transmission data flow , in accessing the communication band Transmission signal power of the downlink transmission data stream , in accessing the communication band Network transmission noise power for downlink traffic data flow , in accessing the communication band The adjacent frequency band sub-channel interference power of the downlink traffic transmission data flow , network congestion assessment time interval , time variable parameter Accessing the communication band The network traffic load size of the downlink traffic transmission data flow , correction factor for network transmission congestion , according to the access communication band The degree of network transmission congestion under The correlation between the above parameters constitutes a functional relationship This formula can realize the quantitative calculation process of the congestion degree of wireless communication traffic transmission data flow under different access communication frequency band sub-channels, and at the same time, the correction coefficient of network transmission congestion degree is used The introduction of can be adjusted according to the error situation in the calculation process, thereby improving the accuracy and applicability of the calculation formula for the degree of network congestion in the communication frequency band.

[0166] Furthermore, the method of using the wireless connection communication channel to dynamically allocate network communication resources for transmission processing of the wireless communication frequency band network congestion transmission data flow includes:

[0167] Conduct network communication load evaluation and analysis on the network congestion transmission data flow of the wireless communication frequency band to obtain the size of the network communication transmission load of the wireless communication frequency band;

[0168] In an embodiment of the present invention, a network load statistics method is used to evaluate and analyze the network communication load of the wireless communication frequency band network congestion transmission data flow that has been previously analyzed to have network congestion, so as to perform a detailed evaluation and analysis on the load situation of the network information data flow in the current communication frequency band to determine the current network transmission load size. For example, considering a city's mobile communication network, the operator needs to monitor the data traffic of all base stations and user equipment in a specific frequency band, and quantify and analyze the actual situation of the network communication load by analyzing indicators such as the size, frequency and delay of the data flow, and finally obtain the network communication transmission load size of the wireless communication frequency band.

[0169] Preferably, based on the wireless communication band network communication transmission load size, the wireless connection communication channel is used to dynamically set the network transmission window for the wireless communication band network congestion transmission data flow to obtain the wireless communication band network congestion transmission dynamic window;

[0170] In an embodiment of the present invention, by combining the wireless communication frequency band network communication transmission load size obtained by previous analysis, the wireless connection communication channel obtained by previous construction is used to dynamically set the transmission window of the wireless communication frequency band network congestion transmission data flow corresponding to the network transmission load size, so as to dynamically adjust the transmission window size of the wireless communication according to the transmission load size obtained by previous evaluation. The transmission window determines the amount of data that can be sent to the network at any given time and is an important parameter for controlling the data transmission rate. For example, if the evaluation shows that the data flow of a certain frequency band is large and there is corresponding network congestion, the transmission window will be reduced accordingly to limit the amount of data transmitted at the same time, thereby reducing the risk of network congestion. In this way, the data transmission efficiency and stability can be optimized according to the real-time network load situation, and finally the dynamic window of the wireless communication frequency band network congestion transmission is dynamically set.

[0171] Preferably, a network communication resource dynamic control strategy analysis is performed on the wireless communication frequency band network congestion transmission data flow based on the wireless communication frequency band network congestion transmission dynamic window to generate a wireless communication frequency band network congestion transmission resource dynamic control strategy;

[0172] In an embodiment of the present invention, a dynamic control analysis of network communication resources is performed on the corresponding wireless communication frequency band network congestion transmission data flow by combining the wireless communication frequency band network congestion transmission dynamic window obtained by the previous dynamic setting, so as to formulate a resource control strategy suitable for the current network state according to the set network transmission window size, so as to optimize the transmission efficiency and prevent the occurrence of network congestion. For example, the performance of the currently adopted dynamic window size under different network load conditions will be analyzed, and the resource allocation strategy will be adjusted according to factors such as real-time data traffic, channel status and equipment capabilities. If it is detected that certain frequency bands begin to show signs of congestion, measures such as increasing the number of data retransmissions or adjusting the transmission priority will be taken to ensure that the corresponding communication traffic data flow with network congestion can be transmitted safely and efficiently, while maintaining communication quality and stability, and finally generating a dynamic control strategy for wireless communication frequency band network congestion transmission resources.

[0173] Preferably, according to the dynamic control strategy of the wireless communication frequency band network congestion transmission resources, the corresponding wireless communication frequency band network congestion transmission data flow is dynamically allocated resources for transmission processing to obtain the traffic data flow congestion resource dynamic allocation and safe transmission result.

[0174] In an embodiment of the present invention, communication resources are dynamically allocated to the corresponding wireless communication frequency band network congestion transmission data flow by combining the previously generated wireless communication frequency band network congestion transmission resource dynamic control strategy. This step involves applying the formulated resource control strategy to the actual data flow transmission process. For example, if network congestion occurs in a specific frequency band, the transmission priority of the data flow will be adjusted or more communication resources will be allocated according to the previously formulated network transmission resource dynamic control strategy to ensure the safe transmission of critical data, thereby effectively responding to sudden network load changes and congestion, and ultimately obtaining the result of dynamic allocation of traffic data flow congestion resources for safe transmission.

[0175] Therefore, the embodiments should be regarded as illustrative and non-restrictive from all points, and the scope of the present invention is limited by the appended claims rather than the above description, and it is therefore intended that all changes falling within the meaning and range of equivalent elements of the application documents are included in the present invention.

[0176] The above description is only a specific embodiment of the present invention, so that those skilled in the art can understand or implement the present invention. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to the embodiments shown herein, but should conform to the widest scope consistent with the principles and novel features invented herein.

Claims

1. A secure wireless communication system based on communication technology, characterized in that: Includes the following modules: A wireless communication traffic real-time monitoring module is used to establish a wireless connection communication channel between an information sending end and an information receiving end through communication technology, and to obtain information incoming and outgoing communication traffic monitoring nodes and information communication traffic discarding buffer areas by deploying communication traffic monitoring nodes in the wireless connection communication channel; and to perform real-time monitoring of communication traffic on the wireless connection communication channel using the information incoming and outgoing communication traffic monitoring nodes to obtain a real-time monitoring data stream of wireless communication traffic; The module for instantly discarding traffic under denial of service attack is used to divide the access request flood into the data flow of the real-time monitoring of the wireless communication traffic, so as to generate the wireless communication traffic access request flood data flow and the wireless communication traffic access non-request flood data flow; Performing traffic request denial attack behavior screening on the wireless communication traffic access request flood data flow to obtain the traffic request flood denial of service attack behavior data flow and the traffic request flood non-attack behavior data flow; Redirecting the traffic request flood denial of service attack behavior data flow to the information communication traffic discard buffer area through the wireless connection communication channel, and automatically deleting all the traffic request flood denial of service attack behavior data flow in the information communication traffic discard buffer area according to the preset information communication transmission delay; The normal communication data spectrum utilization transmission module is used to perform time-series merging of the wireless communication traffic access non-request flood data flow and the traffic request flood non-attack behavior data flow to obtain a wireless communication traffic request transmission normal data flow set; Accessing the communication spectrum transmission of the normal data flow set of wireless communication traffic request transmission through the wireless connection communication channel to obtain the wireless communication traffic transmission data flow under different access communication frequency band sub-channels; The communication data transmission congestion dynamic and secure transmission module is used to perform communication frequency band congestion perception analysis on the wireless communication traffic transmission data flow under different access communication frequency band sub-channels, and obtain the wireless communication frequency band network congestion transmission data flow; use the wireless connection communication channel to dynamically allocate network communication resources for the wireless communication frequency band network congestion transmission data flow, and obtain the traffic data flow congestion resource dynamic allocation and secure transmission result.

2. The secure wireless communication system based on communication technology according to claim 1, characterized in that: The wireless communication traffic real-time monitoring module includes the following functions: Collecting the network physical locations of the information sending end and the information receiving end to obtain the network physical location of the information sending end and the network physical location of the information receiving end; Based on the network physical location of the information sending end and the network physical location of the information receiving end, a network topology design is performed on the information sending end and the information receiving end to generate a network topology structure between the sending end and the receiving end; Perform multipath transmission selection and establishment on the network topology structure between the sending end and the receiving end to obtain the network pre-transmission multipath between the sending end and the receiving end; perform wireless communication connection processing on the network pre-transmission multipath between the sending end and the receiving end through communication technology to obtain a wireless connection communication channel between the sending end and the receiving end; By deploying a communication flow monitoring node and a communication flow discarding buffer area in a wireless connection communication channel between a transmitting end and a receiving end, an information incoming and outgoing communication flow monitoring node and an information communication flow discarding buffer area are obtained; The information incoming and outgoing communication flow monitoring node is used to monitor the communication flow of the wireless connection communication channel between the sending end and the receiving end in real time, and the wireless communication flow real-time monitoring data flow is obtained.

3. The secure wireless communication system based on communication technology according to claim 1, characterized in that: The module for immediately discarding traffic under denial of service attack includes the following functions: Capturing access requests for real-time monitoring data streams of wireless communication traffic to obtain access request capacity packets for the wireless communication traffic data streams; Based on the access request capacity package of the wireless communication traffic data flow, the corresponding wireless communication traffic real-time monitoring data flow is divided into access request floods to generate wireless communication traffic access request flood data flows and wireless communication traffic access non-request flood data flows; Performing traffic request denial attack behavior screening on the wireless communication traffic access request flood data flow to obtain the traffic request flood denial of service attack behavior data flow and the traffic request flood non-attack behavior data flow; Redirecting the traffic request flood denial of service attack behavior data flow to the information communication traffic discard buffer area through the wireless connection communication channel, and monitoring the cache delay of the traffic request flood denial of service attack behavior data flow in the information communication traffic discard buffer area to obtain the actual cache delay of the attack behavior data flow in the buffer area; The actual cache delay of the attack behavior data flow in the cache area is compared and judged according to the preset information communication transmission delay. When the actual cache delay of the attack behavior data flow in the cache area exceeds the preset information communication transmission delay, the corresponding traffic request flood denial of service attack behavior data flow in the information communication traffic discarding cache area is automatically deleted. Otherwise, the cache delay of the traffic request flood denial of service attack behavior data flow in the information communication traffic discarding cache area continues to be monitored until all the traffic request flood denial of service attack behavior data flows in the information communication traffic discarding cache area are deleted.

4. The secure wireless communication system based on communication technology according to claim 3, characterized in that: The access request torrent division of the corresponding wireless communication traffic real-time monitoring data stream based on the access request capacity packet of the wireless communication traffic data stream comprises: Based on the access request capacity package of the wireless communication traffic data stream, the total access request frequency of the corresponding wireless communication traffic real-time monitoring data stream is counted to obtain the total access request frequency of each wireless communication traffic data stream; Performing request frequency statistics analysis on the total frequency of access requests for each wireless communication traffic data stream to obtain the access request frequency of the wireless communication traffic data stream; Performing network transmission protocol extraction processing on the real-time monitoring data stream of wireless communication traffic to obtain the network transmission protocol of the wireless communication traffic data stream; Based on the wireless communication traffic data stream network transmission protocol, the frequency of requests for the same protocol is counted for each corresponding accessed request in the accessed request capacity package of the wireless communication traffic data stream to obtain the frequency of requests for the same transmission protocol of the wireless communication traffic data stream; according to the frequency of requests for the same transmission protocol of the wireless communication traffic data stream, the frequency of requests for the same protocol is quantitatively calculated for each corresponding accessed request in the accessed request capacity package of the wireless communication traffic data stream to obtain the frequency of requests for the same transmission protocol of the data stream; The real-time monitoring data flow of wireless communication traffic corresponding to the access request frequency of wireless communication traffic data flow exceeding 50% or the request frequency of the same transmission protocol of the data flow exceeding 35% is divided into the wireless communication traffic access request flood data flow, otherwise it is divided into the wireless communication traffic access non-request flood data flow.

5. The secure wireless communication system based on communication technology according to claim 3, characterized in that: The method of screening the traffic request denial attack behavior of the wireless communication traffic access request flood data flow includes: Performing request fluctuation graph conversion on corresponding accessed requests in the wireless communication traffic access request flood data flow to generate an accessed request fluctuation graph of the communication traffic request flood data flow; Performing a fluctuation amplitude and frequency statistical analysis on a fluctuation graph of access requests for a request flood data flow of communication traffic, and obtaining a fluctuation amplitude of access requests for a request flood data flow and a fluctuation frequency of access requests for a request flood data flow; Based on the fluctuation amplitude of the access request flood data flow and the fluctuation frequency of the access request flood data flow, the request fluctuation pattern recognition analysis is performed on the wireless communication traffic access request flood data flow to obtain the traffic request flood access request fluctuation pattern; Performing a request connection establishment behavior pattern mining and analysis on the corresponding accessed request in the wireless communication traffic access request flood data flow to obtain the traffic request flood accessed request connection establishment behavior pattern; According to the traffic request flood access request fluctuation pattern and the traffic request flood access request connection establishment behavior pattern, the corresponding wireless communication traffic access request flood data flow is screened for traffic request denial attack behavior; when the traffic request flood access request fluctuation pattern has large-scale access request fluctuation or the traffic request flood access request connection establishment behavior pattern has abnormal connection establishment behavior, the corresponding wireless communication traffic access request flood data flow is marked as a traffic request flood denial of service attack behavior data flow, otherwise it is marked as a traffic request flood non-attack behavior data flow.

6. The secure wireless communication system based on communication technology according to claim 1, characterized in that: The normal communication data spectrum utilization transmission module includes the following functions: Performing time-series synchronization processing on the wireless communication traffic access unsolicited flood data flow and the traffic request flood non-attack behavior data flow to obtain the communication traffic unsolicited flood data flow and the request flood non-attack behavior data flow in the same time dimension; Merging the communication traffic non-request flood data flow and the request flood non-attack behavior data flow in the same time dimension to obtain a normal data flow set of wireless communication traffic request transmission; The wireless communication traffic request transmission normal data flow set is accessed for communication spectrum transmission through the wireless connection communication channel to obtain the wireless communication traffic transmission data flow under different access communication frequency band sub-channels.

7. The secure wireless communication system based on communication technology according to claim 6, characterized in that: The accessing communication spectrum transmission of the normal data flow set for the wireless communication traffic request transmission through the wireless connection communication channel includes: Performing a network transmission bandwidth analysis on each communication traffic transmission normal data flow in the wireless communication traffic request transmission normal data flow set to obtain a network transmission bandwidth of each communication traffic transmission normal data flow; Performing statistical calculation of the network transmission interference degree for each communication traffic transmission normal data flow in the wireless communication traffic request transmission normal data flow set, so as to obtain the network transmission interference degree of each communication traffic transmission normal data flow; Based on the network transmission bandwidth of each communication traffic transmission normal data stream and the degree of network transmission interference, a communication frequency band sub-channel is dynamically selected for the corresponding communication traffic transmission normal data stream in the wireless communication traffic request transmission normal data stream set through the wireless connection communication channel, so as to obtain a communication frequency band sub-channel suitable for access corresponding to each communication traffic transmission normal data stream; According to the sub-channel suitable for accessing the communication frequency band corresponding to each normal data stream of communication traffic transmission, the corresponding normal data stream of communication traffic transmission in the normal data stream set of wireless communication traffic request transmission is split, transmitted and reorganized to obtain the wireless communication traffic transmission data stream under different accessing communication frequency band sub-channels.

8. The secure wireless communication system based on communication technology according to claim 1, characterized in that: The communication data transmission congestion dynamic security transmission module includes the following functions: Conduct frequency band bandwidth utilization evaluation and analysis on wireless communication traffic transmission data streams under different access communication frequency band sub-channels to obtain network transmission frequency band bandwidth utilization of traffic transmission data streams under different access communication frequency bands; Performing data packet loss rate evaluation and analysis on wireless communication traffic transmission data streams under different access communication frequency band sub-channels to obtain data packet loss rates of traffic transmission data streams under different access communication frequency bands; Based on the network transmission band bandwidth utilization rate and data packet loss rate of traffic transmission data streams under different access communication frequency bands, the communication frequency band network congestion degree calculation formula is used to quantitatively calculate the congestion degree of wireless communication traffic transmission data streams under different access communication frequency band sub-channels to obtain the network transmission congestion degree of traffic transmission data streams under different frequency bands; Based on the network transmission congestion degree of traffic transmission data flow under different frequency bands, the frequency band congestion perception analysis is performed on the corresponding wireless communication traffic transmission data flow under different access communication frequency band sub-channels to obtain the wireless communication frequency band network congestion transmission data flow; The wireless connection communication channel is used to dynamically allocate network communication resources for transmission processing of network congestion transmission data flow in the wireless communication frequency band, and the result of dynamic allocation of traffic data flow congestion resources and secure transmission is obtained.

9. The secure wireless communication system based on communication technology according to claim 8, characterized in that: The calculation formula for the communication frequency band network congestion degree is specifically: In the formula, To access the communication band The degree of network transmission congestion under To access the measurement variable parameters of the communication band, To access the communication band set, To access the communication band The bandwidth utilization of the network transmission band for the downlink traffic data flow. To access the communication band The packet loss rate of the traffic transmission data flow, To access the communication band The transmission signal power of the downstream transmission data stream, To access the communication band The network transmission noise power of the downlink traffic data flow, To access the communication band The adjacent frequency band sub-channel interference power of the downlink traffic transmission data stream, is the network congestion assessment interval, is the time variable parameter, To access the communication band The network traffic load size of the downlink traffic transmission data flow, It is the correction factor for the degree of network transmission congestion.

10. The secure wireless communication system based on communication technology according to claim 8, characterized in that: The method of using the wireless connection communication channel to dynamically allocate network communication resources for the wireless communication frequency band network congestion transmission data flow includes: Conduct network communication load evaluation and analysis on the network congestion transmission data flow of the wireless communication frequency band to obtain the size of the network communication transmission load of the wireless communication frequency band; Based on the transmission load size of the wireless communication frequency band network communication, a network transmission window is dynamically set for the wireless communication frequency band network congestion transmission data flow using a wireless connection communication channel to obtain a dynamic transmission window for the wireless communication frequency band network congestion; Based on the dynamic window of network congestion transmission in the wireless communication frequency band, a dynamic control strategy of network communication resources is analyzed for the data flow of network congestion transmission in the wireless communication frequency band, so as to generate a dynamic control strategy of network congestion transmission resources in the wireless communication frequency band; According to the dynamic control strategy of wireless communication frequency band network congestion transmission resources, the corresponding wireless communication frequency band network congestion transmission data flow is dynamically allocated and transmitted, and the traffic data flow congestion resource dynamic allocation and safe transmission result is obtained.

Images