Financial network communication system and device and communication data secure transmission system

Abstract

The invention discloses a financial network communication system and device and a communication data security transmission system, and the method comprises the steps: building a topological connection between different communication devices through a building module, obtaining a plurality of communication data links, and generating a communication data link graph; the monitoring module monitors financial communication data of the communication data link graph and judges whether the current financial network state is abnormal or not according to the financial communication data; when the monitoring module monitors that the current financial network state is abnormal, the acquisition module determines an abnormal communication data link in the communication data link graph and a financial communication task identifier corresponding to the abnormal communication data link; based on the financial communication task identifier, respectively obtaining traceability information corresponding to the financial communication task from a plurality of types of communication nodes of the communication data link graph; and the determination module inputs the traceability information into a pre-trained risk identification model, and determines and displays risk information corresponding to the traceability information. And the efficiency and the security of financial network communication are improved.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a financial network communication system, device and communication data security transmission system. Background Art

[0002] At present, with the development of communication technology, especially the popularization of the Internet, people are increasingly dependent on the network, resulting in a large amount of data browsing and network communication interaction every day. However, as the amount of data increases, traditional network communication faces great challenges, resulting in low network communication efficiency and network communication security risks. Especially in financial network communication, the communication requirements are high, and there is a lack of overall and local monitoring of the communication process. It is impossible to systematically determine whether the current financial network status is abnormal, and it is also impossible to determine specific risk information, which poses a huge network communication security risk. Summary of the invention

[0003] The present invention aims to solve at least one of the technical problems in the above-mentioned technologies to a certain extent. To this end, the first purpose of the present invention is to propose a financial network communication system, which performs overall monitoring and local monitoring of the financial communication process, and systematically determines whether the current financial network status is abnormal based on the overall monitoring. When it is determined that an abnormality occurs, specific risk information is determined based on local monitoring, thereby eliminating network communication security risks and improving the efficiency and security of financial network communication.

[0004] A second objective of the present invention is to provide a financial network communication device.

[0005] The third objective of the present invention is to provide a communication data secure transmission system.

[0006] To achieve the above-mentioned purpose, a first aspect of the present invention provides a financial network communication system, including: An establishment module is used to establish topological connections between different communication devices, obtain a number of communication data links, and generate a communication data link diagram; A monitoring module is used to monitor the financial communication data of the communication data chain diagram and determine whether the current financial network status is abnormal based on the financial communication data; Get modules for: When the monitoring module detects that the current financial network state is abnormal, determine the abnormal communication data link in the communication data link diagram and the financial communication task identifier corresponding to the abnormal communication data link; Based on the financial communication task identifier, the traceability information corresponding to the financial communication task is obtained from multiple types of communication nodes in the communication data chain diagram; The determination module is used to input the traceability information into a pre-trained risk identification model, determine the risk information corresponding to the traceability information and display it.

[0007] According to some embodiments of the present invention, the system further includes: an execution module for executing different network adjustment measures according to different output risk information; the network adjustment measures include switching networks, enhancing network nodes, and changing communication protocols and methods.

[0008] According to some embodiments of the present invention, when executing network adjustment measures for switching networks, the execution module authorizes the communication device's application for access to a backup network. After the communication device is authorized to log into this network, the communication device will give priority to accessing this network the next time it accesses the network; emergency backup is performed on data being transmitted by the abnormal financial network, and the data is resent after the communication device switches networks.

[0009] According to some embodiments of the present invention, the monitoring module includes: A scanning module, used to scan the communication data chain diagram based on a scanning tool to obtain financial communication data; the financial communication data includes device information, service information, open port information and operating system information in the financial network; A construction module is used to set construction rules for a secure channel according to security requirements and network architecture; the construction rules include communication protocols, encryption methods, and access control; The screening module is used to screen the financial communication data according to the construction rules of the security channel. When the data that does not meet the construction rules is screened out, it means that the current financial network status is abnormal; otherwise, it means that the current financial network status is normal.

[0010] According to some embodiments of the present invention, the system further comprises: a transmission module, configured to determine the financial data to be transmitted when the monitoring module determines that the current financial network status is normal; Perform feature extraction on the financial data to be transmitted to obtain data features; Generate a data encapsulation instruction based on the data feature; the data encapsulation instruction is used to instruct to encapsulate and encrypt the financial data to be transmitted to obtain encapsulated encrypted data; Based on the data features, the corresponding communication data link is matched in the communication data link diagram as the target communication data link; and the encapsulated encrypted data is transmitted based on the target communication data link.

[0011] According to some embodiments of the present invention, the system further comprises: a communication quality assessment module, configured to: In the process of transmitting the encapsulated encrypted data based on the target communication data link, calculating an estimated transmission signal for transmitting the encapsulated encrypted data from the sender to the receiver based on the target communication data link; The actual transmission signal of the transmitting end transmitting the encapsulated encrypted data to the receiving end based on the target communication data link is collected; The communication quality level of the encapsulated encrypted data transmitted by the sender to the receiving end based on the target communication data link is determined according to the estimated transmission signal and the actual transmission signal. When it is determined that the communication quality level is less than the preset level threshold, an alarm prompt is issued.

[0012] According to some embodiments of the present invention, the system further comprises: The cluster analysis module is used to perform cluster analysis on the communication data chain diagram, and divide the financial network into several local networks according to the cluster analysis results; Configuration modules for: Obtain communication requirements, analyze the communication requirements, determine the corresponding local network, and configure it as the target local network; Data communication is achieved based on the communication demand of the target local network, and the target local network is monitored during the communication process.

[0013] According to some embodiments of the present invention, the cluster analysis module includes: Settings module for: In the communication sequence diagram, the communication node with the most neighbor nodes within the specified range is taken as the first cluster center point; then, according to the distance to the previous cluster center and the number of its own neighbor nodes, the point farthest from the previous cluster center and with the most neighbor nodes is taken as the next cluster center using the normalized weighted method; in this way, K cluster centers are obtained. (j=1, 2, ..., K), where K is determined according to the communication range and the number of communication nodes; Set the iterative convergence condition F; Compute module for: Calculate the degree of membership of each communication node to each cluster center; in, is the membership of the i-th communication node to the j-th cluster; are the coordinates of each communication node; is the jth cluster center; is the kth cluster center; m is the fuzzy weighted index, which is 2; is the total length of the communication data chain in the communication sequence diagram; Calculate cluster center error; in, is the cluster center error; n is the number of communication nodes; If the cluster center error is greater than the convergence condition F, the new cluster center is recalculated; Iterate the calculation, and when the cluster center error is less than the convergence condition F, stop the iteration, obtain the membership degree of each communication node with respect to each cluster center and the cluster center coordinates, and get the cluster analysis results.

[0014] To achieve the above objective, a second aspect of the present invention provides a financial network communication device, including the financial network communication system as described above.

[0015] To achieve the above-mentioned purpose, a third aspect of the present invention provides a communication data secure transmission system, including the financial network communication device as described above.

[0016] The present invention proposes a financial network communication system, device and communication data security transmission system. Through reasonable topology design, data link configuration and topology map drawing, the stability and security of the system can be ensured, and the efficiency and reliability of data transmission can be improved. Based on the monitoring module, abnormal situations in the network can be discovered and responded to in a timely manner from the overall monitoring level, which helps to prevent potential security threats and losses. Based on the acquisition module, the abnormal communication data link and the financial communication task identifier corresponding to the abnormal communication data link are determined from the local monitoring level, and then the traceability information corresponding to the financial communication task is determined; the traceability information is identified through the risk identification model, the specific risk information is determined, the potential safety hazards of network communication are eliminated, and the efficiency and security of financial network communication are improved.

[0017] Other features and advantages of the present invention will be described in the following description, and partly become apparent from the description, or understood by practicing the present invention. The purpose and other advantages of the present invention can be realized and obtained by the structures particularly pointed out in the written description and the accompanying drawings.

[0018] The technical solution of the present invention is further described in detail below through the accompanying drawings and embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the present invention and do not constitute a limitation of the present invention. In the accompanying drawings: Figure 1 is a block diagram of a financial network communication system according to an embodiment of the present invention; Figure 2 is a block diagram of a monitoring module according to an embodiment of the present invention; Figure 3 is a block diagram of a financial network communication system according to yet another embodiment of the present invention. DETAILED DESCRIPTION

[0020] The preferred embodiments of the present invention are described below in conjunction with the accompanying drawings. It should be understood that the preferred embodiments described herein are only used to illustrate and explain the present invention, and are not used to limit the present invention.

[0021] like Figure 1 As shown, the first embodiment of the present invention proposes a financial network communication system, including: An establishment module is used to establish topological connections between different communication devices, obtain a number of communication data links, and generate a communication data link diagram; A monitoring module is used to monitor the financial communication data of the communication data chain diagram and determine whether the current financial network status is abnormal based on the financial communication data; Get modules for: When the monitoring module detects that the current financial network state is abnormal, determine the abnormal communication data link in the communication data link diagram and the financial communication task identifier corresponding to the abnormal communication data link; Based on the financial communication task identifier, the traceability information corresponding to the financial communication task is obtained from multiple types of communication nodes in the communication data chain diagram; The determination module is used to input the traceability information into a pre-trained risk identification model, determine the risk information corresponding to the traceability information and display it.

[0022] Working principle of the above technical solution: In this embodiment, in the financial network communication system, establishing a topological connection between different communication devices is a key step to ensure smooth data transmission and efficient communication. Communication equipment includes servers, routers, switches, firewalls, etc. These communication devices are located in different geographical locations and need to be connected to each other by network. In the financial network communication system, due to the large amount of data and high security requirements, a star or mesh topology is adopted to ensure the fast transmission and security of data. Use physical cables (such as optical fibers, network cables, etc.) or logical connections (such as virtual local area networks, VPNs, etc.) to connect communication devices. The communication data link refers to the path for data to be transmitted between communication devices. In the financial network communication system, the data link involves multiple devices and multiple transmission paths. Determine the starting point and end point of each data link, the starting point is usually the sender of the data, and the end point is the receiver of the data. Configure routing and switching rules on network devices (such as routers and switches) to ensure that data can be transmitted along the predetermined path. Rules include static routing, dynamic routing protocols (such as OSPF, BGP, etc.), and VLAN configuration of switches. Draw a topology diagram of the system based on network topology drawing tools (such as Visio, Cisco Packet Tracer, etc.). In the diagram, each communication device is represented as a node, and the connection between nodes represents a data link. Mark the starting point, end point, transmission path and related configuration information of each data link on the topology diagram.

[0023] In this embodiment, the monitoring module monitors the financial communication data of the communication data chain diagram, and determines whether the current financial network state is abnormal based on the financial communication data; the determination of abnormality can be made by determining whether there is data in the financial communication data that does not meet the construction rules of the secure channel. This facilitates timely discovery and response to abnormal situations in the network from the overall monitoring level, and helps prevent potential security threats and losses.

[0024] In this embodiment, the monitoring module uses a predefined anomaly detection algorithm to analyze the network status data to identify any abnormalities or signs of deviation from normal behavior patterns. Anomalies may manifest as a surge in traffic, increased latency, increased packet loss rate, unauthorized access attempts, etc. Once an anomaly is detected, the monitoring module further analyzes the network traffic data to locate the communication data link that caused the anomaly. This process involves tracking the source, destination, transmission path, and communication nodes involved in the data packet. For the located abnormal communication data link, the metadata or context information in the data packet is parsed to identify the financial communication task identifier associated with it. Anomaly detection algorithms include: Statistical anomaly detection: Use historical data to establish a statistical model and monitor the network status data in real time to detect any anomalies that deviate from the normal statistical distribution. Machine learning-based anomaly detection: Use machine learning algorithms (such as clustering, classification, regression, etc.) to train the model to identify abnormal patterns in the network state. Deep learning-based anomaly detection: Use deep learning techniques (such as neural networks, convolutional neural networks, etc.) to process and analyze network status data to detect complex abnormal patterns. The acquisition module can monitor the network status in real time, and quickly locate and identify the relevant abnormal communication data link and its corresponding financial communication task identification when an abnormality is detected, so as to facilitate the determination of specific abnormal information from the level of local monitoring.

[0025] In this embodiment, the financial communication task identifier is a unique identifier assigned by the system to each financial communication task, which can be a number, a letter, or a combination thereof. This identifier is used to uniquely identify a financial communication task in the system, such as a transaction, a query request, or a payment instruction. The financial communication task identifier is parsed to locate all communication nodes related to the task. For each relevant communication node, the traceability information related to it is extracted. The traceability information includes the IP address, MAC address, port number, device type, operating system version, software version, etc. of the node. The log information of the node when processing the financial communication task is also extracted, such as the task arrival time, processing time, processing result, etc. The traceability information extracted from each node is integrated to form a complete traceability chain. This traceability chain shows the entire process of the financial communication task from initiation, transmission to processing, as well as all the equipment and operations involved. Obtaining the traceability information corresponding to the financial communication task from multiple types of communication nodes in the communication data chain diagram based on the financial communication task identifier is an important means to ensure the security, traceability and compliance of financial transactions, and can more effectively manage and monitor its communication network, improving the overall security and reliability.

[0026] In this embodiment, the risk identification model is an algorithm based on machine learning, which can identify potential risks related to financial communication tasks after being trained with a large amount of historical data. The risk identification model analyzes the input traceability information and outputs the identified risk information. The risk information includes risk type (such as malicious attack, etc.), risk level (such as high, medium, low, etc.) and related risk description. When determining the risk identification model, the machine learning method is determined to be a neural network; and a large amount of historical data is used for training. These data include known risk cases and normal transaction cases so that the model can learn the characteristics that distinguish the two. During the training process, the parameters of the model need to be adjusted to optimize its performance, such as improving accuracy and reducing false alarm rate. After the training is completed, the model needs to be verified to ensure its effectiveness in practical applications. The verification process can be carried out by applying the model to a new, unseen data set. Based on the verification results, the model can be further tuned to improve its performance. The determination module can monitor the risks in financial network communications in real time, and issue warnings in time when potential risks are found, thereby improving the security of financial communications.

[0027] The beneficial effects of the above technical solution are as follows: through reasonable topology design, data link configuration and topology map drawing, the stability and security of the system can be ensured, and the efficiency and reliability of data transmission can be improved. Based on the monitoring module, it can timely discover and respond to abnormal situations in the network from the overall monitoring level, which helps to prevent potential security threats and losses. Based on the acquisition module, the abnormal communication data link and the financial communication task identifier corresponding to the abnormal communication data link are determined from the local monitoring level, and then the traceability information corresponding to the financial communication task is determined; the traceability information is identified through the risk identification model, the specific risk information is determined, the potential safety hazards of network communication are eliminated, and the efficiency and security of financial network communication are improved.

[0028] In one embodiment, after the communication data chain diagram is generated, the chain processing is performed to determine the corresponding blockchain and the evidence storage node in the blockchain. When the monitoring module detects that the current financial network status is abnormal, it can quickly identify the affected communication tasks and extract relevant traceability information from the preset blockchain evidence storage node. This information covers all operation details from the preparation stage to completion.

[0029] According to some embodiments of the present invention, the system further includes: an execution module for executing different network adjustment measures according to different output risk information; the network adjustment measures include switching networks, enhancing network nodes, and changing communication protocols and methods.

[0030] The working principle and beneficial effects of the above technical solution: The execution module analyzes the received risk information to determine the type, severity and impact scope of the risk. Based on the results of the risk analysis, the execution module selects the most appropriate measure from the predefined network adjustment measure library.

[0031] These network adjustment measures include switching networks, strengthening network nodes, changing communication protocols and methods, etc. Switching networks: When a network security threat is detected, the execution module may choose to switch to an alternative network or a more secure network environment. Strengthening network nodes: For weak links or vulnerable points in the network, the execution module may choose to enhance the security of these nodes, including adding firewalls, intrusion detection systems (IDS), intrusion prevention systems (IPS) and other security devices. Changing communication protocols and methods: When a communication protocol is detected to have loopholes or is vulnerable to attacks, the execution module may choose to change the communication protocol or method. For example, switch from plain text transmission to encrypted transmission, or adopt a more secure communication protocol such as TLS / SSL. The execution module can dynamically adjust the network configuration based on real-time risk information to quickly respond to potential threats. This helps to ensure the security and stability of the system and reduce losses caused by network attacks or failures. Significantly reduce the risk of the system being attacked by a network and improve the speed and efficiency of data transmission.

[0032] According to some embodiments of the present invention, when executing network adjustment measures for switching networks, the execution module authorizes the communication device's application for access to a backup network. After the communication device is authorized to log into this network, the communication device will give priority to accessing this network the next time it accesses the network; emergency backup is performed on data being transmitted by the abnormal financial network, and the data is resent after the communication device switches networks.

[0033] The working principle and beneficial effects of the above technical solution: When the execution module decides to switch the network, it will first authorize the communication device to apply for access to a backup network. The authorization process involves verifying the identity of the communication device, checking its permissions, and confirming whether it meets the conditions for accessing the backup network. Once the authorization is successful, the communication device will be allowed to log in to the backup network. After the communication device successfully logs in to the backup network, the execution module will update the network configuration (modify the network access policy, update the DNS or routing table, etc.) to ensure that the communication device can preferentially access this backup network the next time it accesses the network. Before switching the network, if the execution module detects that an abnormal financial network is transmitting data, it will immediately start the data emergency backup mechanism. Once the communication device successfully switches to the backup network, the execution module will check the previously backed up data and resend it to the target node as needed. During the data retransmission process, the execution module will ensure the integrity, accuracy and security of the data. The execution module can ensure the access authorization and priority access settings of the communication device when switching networks, while protecting the data being transmitted from being affected. The execution module ensures that the device can use the previously authenticated secure channel first when it reconnects to the network; and automatically backs up unfinished data transmission when network problems occur, and continues to send it when conditions permit, thereby minimizing data loss caused by network problems. This module integrates domestic network management software to ensure rapid response and recovery in emergency situations.

[0034] like Figure 2 As shown, according to some embodiments of the present invention, the monitoring module includes: A scanning module, used to scan the communication data chain diagram based on a scanning tool to obtain financial communication data; the financial communication data includes device information, service information, open port information and operating system information in the financial network; A construction module is used to set construction rules for a secure channel according to security requirements and network architecture; the construction rules include communication protocols, encryption methods, and access control; The screening module is used to screen the financial communication data according to the construction rules of the security channel. When the data that does not meet the construction rules is screened out, it means that the current financial network status is abnormal; otherwise, it means that the current financial network status is normal.

[0035] The working principle and beneficial effects of the above technical solution: The scanning module conducts an in-depth scan of the communication data chain diagram based on advanced scanning tools to collect key financial communication data. These data cover multiple key aspects of the financial network, including device information (such as device type, IP address, etc.), service information (such as the type of service provided, version number, etc.), open port information (such as which ports are open and the services they support) and operating system information (such as the type and version of the operating system, etc.). Based on financial communication data, it is easy to discover potential security vulnerabilities, unauthorized services or devices, and possible malware or attack behaviors.

[0036] The building module sets the rules for building secure channels based on the security needs and network architecture of financial institutions. These rules define in detail the selection of communication protocols (such as TCP / IP, HTTP, HTTPS, etc.), the application of encryption methods (such as SSL / TLS, AES, etc.), and the implementation of access control (such as role-based access control, policy-based access control, etc.). By setting these rules, the building module ensures the confidentiality, integrity and availability of data communications in financial networks. It helps prevent data leakage, tampering and unauthorized access, thereby protecting sensitive information and customer data of financial institutions.

[0037] The screening module strictly screens the financial communication data collected by the scanning module according to the security channel construction rules set by the construction module. It checks whether each communication data complies with these rules, especially the requirements on communication protocol, encryption method and access control. When the screening module finds data that does not comply with the construction rules, it will immediately mark it as abnormal and trigger the corresponding alarm or response mechanism. This indicates that there may be security risks or threats in the current financial network status. On the contrary, if all communication data complies with the construction rules, the screening module will consider the current financial network status to be normal. The monitoring module realizes comprehensive monitoring and anomaly detection of the financial network through the collaborative work of the three sub-modules of scanning, construction and screening. Once abnormal data is detected, the monitoring module can quickly trigger an alarm and take necessary response measures to reduce potential security risks. The construction module allows flexible configuration according to the specific needs and network architecture of financial institutions to adapt to different security requirements and scenarios to ensure the security and stability of the financial network.

[0038] According to some embodiments of the present invention, the system further comprises: a transmission module, configured to determine the financial data to be transmitted when the monitoring module determines that the current financial network status is normal; Perform feature extraction on the financial data to be transmitted to obtain data features; Generate a data encapsulation instruction based on the data feature; the data encapsulation instruction is used to instruct to encapsulate and encrypt the financial data to be transmitted to obtain encapsulated encrypted data; Based on the data features, the corresponding communication data link is matched in the communication data link diagram as the target communication data link; and the encapsulated encrypted data is transmitted based on the target communication data link.

[0039] The working principle and beneficial effects of the above technical solution: When the monitoring module confirms that the financial network status is normal, the transmission module begins to play its key role. The primary task of the transmission module is to identify and lock the financial data that needs to be transmitted. These data may come from various business scenarios such as financial transactions, customer information updates, and market data synchronization. In order to ensure the safe transmission of data, the transmission module first extracts features of the financial data to be transmitted. These features include key information such as data type, size, priority, and destination. Based on the extracted data features, the transmission module generates corresponding data encapsulation instructions. These instructions specify key parameters such as data encapsulation method, encryption level, and transmission priority in detail. By generating these instructions, the transmission module ensures the security and integrity of the data during transmission. According to the instructions, the financial data is encapsulated into a specific data packet format for transmission in the communication network. Advanced encryption algorithms are used to encrypt the data packets to ensure that the data will not be stolen or tampered with by unauthorized third parties during transmission. All transmitted data will undergo a strict encryption and encapsulation process and then be transmitted according to the specified secure channel. After the transmission is completed, the system will also perform necessary cleanup work, such as clearing sensitive information such as used temporary keys, to further enhance the security of the entire process. The encryption algorithm adopts the domestic encryption standard recommended by the National Cryptography Administration to ensure the confidentiality and integrity of the data.

[0040] Based on the matching of key information such as communication protocol, port number, IP address, etc., the transmission module will search for matching communication data links in the communication data link diagram according to data characteristics. Once a matching communication data link is found, the transmission module will transmit the encapsulated and encrypted data through the data link. During the transmission process, the transmission module will monitor the data transmission status in real time to ensure the integrity and timeliness of the data.

[0041] Through feature extraction, encapsulation encryption and precise matching of communication data links, the transmission module ensures the security and integrity of financial data during transmission.

[0042] In one embodiment, blockchain technology is used to record detailed logs of each communication event, so that each communication attempt can be traced, which helps to analyze security vulnerabilities in historical patterns. By continuously learning from past cases, the risk identification model is continuously improved to better prevent possible problems in the future. The blockchain platform uses domestically developed open source projects and supports national encryption algorithms to ensure the immutability and transparency of data.

[0043] According to some embodiments of the present invention, the system further comprises: a communication quality assessment module, configured to: In the process of transmitting the encapsulated encrypted data based on the target communication data link, calculating an estimated transmission signal for transmitting the encapsulated encrypted data from the sender to the receiver based on the target communication data link; The actual transmission signal of the transmitting end transmitting the encapsulated encrypted data to the receiving end based on the target communication data link is collected; The communication quality level of the encapsulated encrypted data transmitted by the sender to the receiving end based on the target communication data link is determined according to the estimated transmission signal and the actual transmission signal. When it is determined that the communication quality level is less than the preset level threshold, an alarm prompt is issued.

[0044] The working principle and beneficial effects of the above technical solution: The communication quality of the process of transmitting encapsulated encrypted data based on the target communication data link is monitored. First, the estimated transmission signal of the sender transmitting the encapsulated encrypted data to the receiving end based on the target communication data link is calculated. Secondly, the actual transmission signal is determined, and the absolute value of the difference between the actual transmission signal and the estimated transmission signal is calculated. Then, the ratio of the absolute value to the estimated transmission signal is calculated. The closer the ratio is to 0, the higher the communication quality level is. A threshold level for evaluating communication quality is set when the level threshold is preset. When it is determined that the communication quality level is less than the preset level threshold, an alarm prompt is issued, indicating that there may be abnormalities in the process of transmitting encapsulated encrypted data based on the target communication data link, such as data packet loss, data delay, or data theft, etc., which need to be checked and processed in time to improve the efficiency and security of data transmission.

[0045] In one embodiment, calculating an estimated transmission signal for transmitting encapsulated encrypted data to a receiving end based on a target communication data link by a transmitting end includes: When the sender transmits the encapsulated encrypted data based on the target communication data link, the transmission signal is transmitted in the transmission channel as a raised cosine shaped waveform. for: in, is the period of the raised cosine shaped waveform; is the reduction coefficient of the raised cosine waveform, ; is the independent variable, the time parameter; Transmission signal from the sender for: in, is the communication factor corresponding to the communication distance between the sender and the receiver, and its value is (0,1); Estimated transmission signal transmitted to the receiving end : in, is the channel gain of the transmission channel corresponding to the target communication data link; is the transmission delay of the transmission channel; is the additive Gaussian white noise introduced into the transmission channel, with a mean of 0.

[0046] The working principle and beneficial effects of the above technical solution: T is the period of the raised cosine shaping waveform, which represents the duration of a symbol; Determines the roll-off characteristics of the waveform. It reflects the influence of communication distance on signal strength. The larger the communication distance, The smaller. It is the channel gain of the transmission channel corresponding to the target communication data link, which indicates the amplification or attenuation of the signal strength by the channel. It is the transmission delay of the transmission channel, which indicates the time required for the signal to travel from the transmitter to the receiver. It comprehensively considers factors such as the waveform of the transmitted signal, channel gain, transmission delay, and channel noise, and accurately determines the estimated transmission signal transmitted to the receiver, which is convenient for improving the accuracy of judging the communication quality level.

[0047] like Figure 3 As shown, according to some embodiments of the present invention, the system further includes: The cluster analysis module is used to perform cluster analysis on the communication data chain diagram, and divide the financial network into several local networks according to the cluster analysis results; Configuration modules for: Obtain communication requirements, analyze the communication requirements, determine the corresponding local network, and configure it as the target local network; Data communication is achieved based on the communication demand of the target local network, and the target local network is monitored during the communication process.

[0048] The working principle and beneficial effects of the above technical solution: The cluster analysis module is mainly responsible for in-depth cluster analysis of the communication data link diagram, and divides the financial network into several relatively independent local networks based on factors such as the correlation and transmission characteristics between the communication data links. Through cluster analysis, the system can have a clearer understanding of the structure and characteristics of the network, so as to carry out targeted network optimization and resource allocation. The division of local networks helps to isolate potential security risks within a smaller range and reduce the risk level of the overall network. Data communication within a local network is usually more efficient because the communication path is shorter and the delay and packet loss rate of data transmission are lower.

[0049] The configuration module first obtains the communication requirements, and then conducts in-depth analysis of these requirements to determine the corresponding local network (i.e., the target local network). After that, the configuration module will implement data communication for the communication requirements based on the target local network, and continuously monitor the target local network during the communication process.

[0050] The introduction of cluster analysis module and configuration module further improves the flexibility and efficiency of the system. The two modules work together to not only help optimize the network structure, but also ensure smooth and secure data communication, avoid waste of computing resources, and improve monitoring efficiency. The entire network structure is grouped using intelligent algorithms, and independent monitoring points are set in each small area, so that refined security management can be achieved without affecting the overall operation. The algorithm is based on a high-performance computing framework developed by domestic research institutions and can operate efficiently in a large-scale network environment.

[0051] According to some embodiments of the present invention, the cluster analysis module includes: Settings module for: In the communication sequence diagram, the communication node with the most neighbor nodes within the specified range is taken as the first cluster center point; then, according to the distance to the previous cluster center and the number of its own neighbor nodes, the point farthest from the previous cluster center and with the most neighbor nodes is taken as the next cluster center using the normalized weighted method; in this way, K cluster centers are obtained. (j=1, 2, ..., K), where K is determined according to the communication range and the number of communication nodes; Set the iterative convergence condition F; Compute module for: Calculate the degree of membership of each communication node to each cluster center; in, is the membership of the i-th communication node to the j-th cluster; are the coordinates of each communication node; is the jth cluster center; is the kth cluster center; m is the fuzzy weighted index, which is 2; is the total length of the communication data chain in the communication sequence diagram; Calculate cluster center error; in, is the cluster center error; n is the number of communication nodes; If the cluster center error is greater than the convergence condition F, the new cluster center is recalculated; Iterate the calculation, and when the cluster center error is less than the convergence condition F, stop the iteration, obtain the membership degree of each communication node with respect to each cluster center and the cluster center coordinates, and get the cluster analysis results.

[0052] The working principle and beneficial effects of the above technical solution: The setting module is mainly responsible for determining the initial conditions and parameters of the cluster analysis, including the selection of cluster centers and the setting of iterative convergence conditions. In the communication sequence diagram, the setting module will first identify the communication node with the most neighbor nodes within the specified range, and use it as the first cluster center point. Then, based on the distance to the previous cluster center and the number of its own neighbor nodes, a normalized weighted method is used to select the point farthest from the previous cluster center and with the largest number of neighbor nodes as the next cluster center. In this way, the setting module will determine K cluster centers in turn. (j=1,2,...,K), where the value of K is dynamically determined according to the communication range and the number of communication nodes. The setting module also sets an iterative convergence condition F to determine whether the cluster center has reached a stable state. The convergence condition F is related to the stability of the clustering results. The calculation module is responsible for the specific clustering calculation process, including membership calculation and cluster center update. The calculation module repeats the membership calculation and cluster center update process until the cluster center error is less than the set convergence condition F. When the convergence condition is met, the iterative process stops, and the calculation module outputs the membership of each communication node with respect to each cluster center and the coordinates of the cluster center as the result of cluster analysis. The network can be divided according to the clustering results to form several local networks, thereby optimizing the network structure and resource allocation. The correlation and communication quality between communication nodes can be evaluated based on the membership information, providing a basis for network monitoring and troubleshooting. It is also possible to focus on optimizing and monitoring local networks with poor communication quality in combination with the results of the communication quality evaluation module. The cluster analysis module plays a vital role. It helps optimize the network structure, improve communication efficiency, and reduce potential security risks by clustering the nodes in the communication sequence diagram. The normalized weighted method is used to determine multiple cluster centers and divide the network composed of transmission nodes into several local areas. Each local area can be monitored or called separately to achieve more sophisticated security management and resource allocation.

[0053] To achieve the above objective, a second aspect of the present invention provides a financial network communication device, including the financial network communication system as described above.

[0054] To achieve the above-mentioned purpose, a third aspect of the present invention provides a communication data secure transmission system, including the financial network communication device as described above.

[0055] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. A financial network communication system, characterized in that: include: An establishment module is used to establish topological connections between different communication devices, obtain a number of communication data links, and generate a communication data link diagram; A monitoring module is used to monitor the financial communication data of the communication data chain diagram and determine whether the current financial network status is abnormal based on the financial communication data; Get modules for: When the monitoring module detects that the current financial network state is abnormal, determine the abnormal communication data link in the communication data link diagram and the financial communication task identifier corresponding to the abnormal communication data link; Based on the financial communication task identifier, the traceability information corresponding to the financial communication task is obtained from multiple types of communication nodes in the communication data chain diagram; The determination module is used to input the traceability information into a pre-trained risk identification model, determine the risk information corresponding to the traceability information and display it.

2. The financial network communication system according to claim 1, characterized in that: The system also includes: an execution module, which is used to execute different network adjustment measures according to the output of different risk information; the network adjustment measures include switching networks, strengthening network nodes, and changing communication protocols and methods.

3. The financial network communication system according to claim 2, characterized in that: When executing the network adjustment measures for switching networks, the execution module authorizes the communication device's application for access to a backup network. After the communication device is authorized to log into this network, the communication device will give priority to accessing this network the next time it accesses the network; it performs emergency backup of the data being transmitted on the abnormal financial network, and resends the data after the communication device switches the network.

4. The financial network communication system according to claim 1, characterized in that: The monitoring module comprises: A scanning module, used to scan the communication data chain diagram based on a scanning tool to obtain financial communication data; the financial communication data includes device information, service information, open port information and operating system information in the financial network; A construction module is used to set construction rules for a secure channel according to security requirements and network architecture; the construction rules include communication protocols, encryption methods, and access control; The screening module is used to screen the financial communication data according to the construction rules of the security channel. When the data that does not meet the construction rules is screened out, it means that the current financial network status is abnormal; otherwise, it means that the current financial network status is normal.

5. The financial network communication system according to claim 1, characterized in that: The system further includes: a transmission module, for determining the financial data to be transmitted when the monitoring module determines that the current financial network status is normal; Perform feature extraction on the financial data to be transmitted to obtain data features; Generate a data encapsulation instruction based on the data feature; the data encapsulation instruction is used to instruct to encapsulate and encrypt the financial data to be transmitted to obtain encapsulated encrypted data; Based on the data features, the corresponding communication data link is matched in the communication data link diagram as the target communication data link; and the encapsulated encrypted data is transmitted based on the target communication data link.

6. The financial network communication system according to claim 5, characterized in that: The system also includes: a communication quality assessment module, which is used to: In the process of transmitting the encapsulated encrypted data based on the target communication data link, calculating an estimated transmission signal for transmitting the encapsulated encrypted data from the sender to the receiver based on the target communication data link; The actual transmission signal of the transmitting end transmitting the encapsulated encrypted data to the receiving end based on the target communication data link is collected; The communication quality level of the encapsulated encrypted data transmitted by the sender to the receiving end based on the target communication data link is determined according to the estimated transmission signal and the actual transmission signal. When it is determined that the communication quality level is less than the preset level threshold, an alarm prompt is issued.

7. The financial network communication system according to claim 1, characterized in that: The system also includes: The cluster analysis module is used to perform cluster analysis on the communication data chain diagram, and divide the financial network into several local networks according to the cluster analysis results; Configuration modules for: Obtain communication requirements, analyze the communication requirements, determine the corresponding local network, and configure it as the target local network; Data communication is achieved based on the communication demand of the target local network, and the target local network is monitored during the communication process.

8. The financial network communication system according to claim 7, characterized in that: The cluster analysis module comprises: Settings module for: In the communication sequence diagram, the communication node with the most neighbor nodes within the specified range is taken as the first cluster center point; then, according to the distance to the previous cluster center and the number of its own neighbor nodes, the point farthest from the previous cluster center and with the most neighbor nodes is taken as the next cluster center using the normalized weighted method; in this way, K cluster centers are obtained. (j=1, 2, ..., K), where K is determined according to the communication range and the number of communication nodes; Set the iterative convergence condition F; Compute module for: Calculate the degree of membership of each communication node to each cluster center; in, is the membership of the i-th communication node to the j-th cluster; are the coordinates of each communication node; is the jth cluster center; is the kth cluster center; m is the fuzzy weighted index, which is 2; is the total length of the communication data chain in the communication sequence diagram; Calculate cluster center error; in, is the cluster center error; n is the number of communication nodes; If the cluster center error is greater than the convergence condition F, the new cluster center is recalculated; Iterate the calculation, and when the cluster center error is less than the convergence condition F, stop the iteration, obtain the membership degree of each communication node with respect to each cluster center and the cluster center coordinates, and get the cluster analysis results.

9. A financial network communication device, characterized in that: Comprising a financial network communication system as described in any one of claims 1-8.

10. A communication data secure transmission system, characterized in that: Comprising the financial network communication device as claimed in claim 9.

Images