Network communication method and system based on type identification

Abstract

The invention relates to the technical field of network communication, in particular to a network communication method and system based on type identification, non-public network equipment is connected with a host I through a wired signal, a host II is connected with target user equipment through a wired signal, the non-public network equipment establishes a type identification signal, and the host II establishes a type identification signal. The first host transmits a type identification signal to a sending end through a source port in a UCB packet encryption mode, a target port of the second host receives the encrypted type identification signal, a ciphertext is decrypted into a plaintext, the plaintext is displayed on the second host, and then the plaintext is transmitted to target user equipment. According to the network communication method and system based on the type identification, distribution of all link resources is completed by adopting an iterative optimization mode during redistribution of the network throughput, the network throughput is improved on the premise of considering the actual communication capability of a transmission link and the current task execution state, a higher communication effect is achieved, and the network throughput is improved. And the communication requirement of the user is met.

Description

Technical Field

[0001] The present invention relates to the technical field of network communication, and in particular to a network communication method and system based on type identification. Background Art

[0002] When specific events occur in certain scenarios, the communication and interconnection of network devices is the key to solving specific events. For example, A deploys a Type A independent non-public network to support communication of devices belonging to A; B deploys a Type B independent non-public network in the vicinity of A to support communication of devices belonging to B; the Type B independent non-public network communicates and interconnects with the Type A independent non-public network, which is conducive to providing a larger network coverage when the available public network is limited or the public network is saturated. At this time, the attached devices of other independent non-public networks cannot communicate and interconnect with any of the independent non-public networks and their attached devices in A and B.

[0003] The client of the two-tier architecture C / S (Client / Server) and B / S (Browser / Server) architecture is directly connected to the server. The three-tier architecture is divided into: client, communication end and server. The server generally refers to the server that stores the database. The client in the three-tier architecture is connected to the server through the communication end, which is dedicated to the client and can help the client execute commands to operate the server.

[0004] In the context of the ever-increasing demand for communication efficiency, the application of short-range wireless communication technology with D2D communication (Device-to-Device, direct communication between devices) as the core is becoming more and more widespread. At present, in the three-layer architecture, when the client needs to operate the server, the communication end will open a thread for the client to connect to the server. When the client operation is completed, the communication end will retract this thread. Generally, the transmission of data in the communication network requires the help of a relay structure. If the network throughput is insufficient, it will cause a sharp increase in user requests in a certain period of time, or a significant increase in the number of users. The relay nodes in the communication network are overloaded, affecting the final transmission efficiency and communication delay. Summary of the invention

[0005] The purpose of the present invention is to provide a network communication method and system based on type identification to solve the problems raised in the above background technology.

[0006] To achieve the above-mentioned purpose, the present invention provides the following technical solutions: a network communication system based on type identification, comprising a non-public network device, a host one, a host two and a target user device, wherein the host one and the host two are connected via a signal connection between a sending end and a receiving end, and a network resource allocator is used to redistribute network throughput between the sending end and the receiving end.

[0007] The non-public network device is connected to the host one via a wired signal, and the host two and the target user device are connected via a wired signal. The non-public network device establishes a type identification signal. The host one transmits the type identification signal from the source port to the sending end in the form of UCB packet encryption. The sending end transmits it to the receiving end via a wireless signal. The target port of the host two receives the encrypted type identification signal, decrypts the ciphertext into plain text, displays it on the host two, and then transmits it to the target user device.

[0008] Preferably, the UCB block encryption adopts a combination of a sequence cipher and a block cipher to simplify the computational complexity and amount of computation when the node performs encryption / decryption.

[0009] Preferably, when each block is encrypted, the key used is different from the standard block cipher, and when two different messages are encrypted, the subkey will be updated accordingly.

[0010] Preferably, the network resource allocator between the transmitting end and the receiving end is implemented in a communication network centered on a core base station, where the area covered by the communication network is under a full load state.

[0011] Preferably, the network throughput is redistributed by using an iterative optimization method to complete the allocation of all link resources.

[0012] A network communication method based on type identification, characterized in that it includes the following steps:

[0013] S1: When a target independent non-public network device to be interconnected establishes a unified network communication with at least one independent non-public network device to be communicated, the target independent non-public network device constructs a unified type identifier for verifying the authority for network communication between the user device and the object to be connected under the network communication;

[0014] The target independent non-public network device controls each independent non-public network device under the network communication to send the type identifier to the user device connected to each independent non-public network device under the network communication; the target user device sends a network communication request including the type identifier to the object to be connected based on the acquired type identifier;

[0015] S2: Host 1 transmits the type identification signal from the source port to the sender in the form of UCB packet encryption. During the transmission process, it passes through the network resource allocator, which uses an iterative optimization method to complete the allocation of all link resources, thereby increasing the network throughput;

[0016] S3: The sender transmits the information to the receiver via wireless signals. The target port of host 2 receives the encrypted type identification signal, decrypts the ciphertext into plaintext, displays it on host 2, and then transmits it to the target user device.

[0017] S4: The target user equipment establishes network communication with the object to be connected in response to a signal indicating that the object to be connected has authenticated the type identifier included in the network communication request.

[0018] Preferably, the object to be connected includes at least one of the following items: an independent non-public network device to be connected and a user device to be connected.

[0019] Preferably, when the transmitting end transmits a signal to the receiving end via a wireless signal, the anti-interference capability of the transmitted signal is enhanced by continuously adjusting the weight coefficient.

[0020] Preferably, the sequence cipher in the UCB block encryption is transmitted in text form using a Rabin key.

[0021] Preferably, the target port of host two will load and decrypt the data and judge the correctness of the decryption. If the decryption result is correct, the data information will be displayed in plain text for the user to browse. If the decryption is wrong, the data information will still be displayed in cipher text.

[0022] Compared with the prior art, the present invention has the following beneficial effects:

[0023] 1. This type identification-based network communication method and system uses an iterative optimization method to complete the allocation of all link resources when using network throughput redistribution. Under the premise of considering the actual communication capacity of the transmission link and the current task execution status, the network throughput is improved, with higher communication effects, and the communication needs of users are met.

[0024] 2. This type identification-based network communication method and system, combined with the risks of computer web page information data, UCB block encryption adopts a combination of sequence ciphers and block ciphers to simplify the computational complexity and amount of calculation when the node performs encryption / decryption. According to the application principle of data encryption technology, a systematic and complete technical application measure is formulated to achieve the purpose of protecting web page data information. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative labor.

[0026] Figure 1 is a network communication flow chart of the present invention;

[0027] Figure 2 This is a data information encryption flow chart of the present invention. DETAILED DESCRIPTION

[0028] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0029] In the present invention, unless otherwise clearly specified and limited, the terms "installed", "connected", "connected", "fixed" and the like should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium, it can be the internal connection of two elements or the interaction relationship between two elements. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0030] See also Figure 1-Figure 2 , the present invention provides a technical solution:

[0031] A network communication system based on type identification, comprising a non-public network device, a host 1, a host 2 and a target user device, wherein the host 1 and the host 2 are connected via a signal of a sending end and a receiving end, and a network throughput is redistributed between the sending end and the receiving end via a network resource allocator;

[0032] The non-public network device is connected to the host one via a wired signal, and the host two and the target user device are connected via a wired signal. The non-public network device establishes a type identification signal. The host one transmits the type identification signal from the source port to the sending end in the form of UCB packet encryption. The sending end transmits it to the receiving end via a wireless signal. The target port of the host two receives the encrypted type identification signal, decrypts the ciphertext into plain text, displays it on the host two, and then transmits it to the target user device.

[0033] The UCB block encryption adopts a combination of a sequence cipher and a block cipher to simplify the computational complexity and amount of computation when a node performs encryption / decryption.

[0034] Symmetric block cipher is used, and the encryption algorithm can be RC5 or Skipjack algorithm. Each group of ciphertext depends not only on its plaintext, but also on the previous ciphertext group (the first group of ciphertext depends on the initial vector IV).

[0035] The mathematical language of CBC mode is as follows:

[0036] Combining the advantages of the stream cipher in generating subkeys and encryption, the key used when encrypting each group is also different from the single key like the standard block cipher, and the subkey will be updated accordingly when encrypting two different messages.

[0037] Before encryption, the plaintext is interleaved. The concept of interleaving originates from the principle of communication. In order to ensure that the loss of a certain block of the data stream in the channel will not lead to the inability to restore the entire information, the interleaving method is used to disperse the blocks of the original data into various parts of the transmission signal, and then the signal is restored at the receiving end through deinterleaving and error correction code. Here, interleaving can be used to disperse the distribution of data bits, so that the analyst cannot crack the encryption key through a simple XOR unless he can guess the complete plaintext during analysis. Moreover, even if the encryption key is deciphered, the decipher still cannot obtain the seed key T due to the update mechanism of the subkey.

[0038] The encryption / decryption part uses serial cipher encryption, so the encryption and decryption calculations are represented by XOR, and each group of plaintext encryption uses an independent key K i The mathematical expression of encryption and decryption calculation can be expressed as:

[0039]

[0040] Among them C i =5, i = 1, 2, 3 ... 29. The packet length is 8 bits (i.e. 1 byte), and each packet has a corresponding independent key when encrypted. The message format is the same as TinyOS, and the default support is up to 29 bytes of data.

[0041] The subkey generation algorithm uses an improved serial cipher algorithm based on the RC4 framework. The RC4 algorithm prototype has the advantages of being easy to implement, fast (about 10 times that of DES), and good security, and is suitable for transplantation into WSN applications. By combining the "pseudo-one group one secret" CBC block encryption mode proposed in Section 12 of this article, RC4 as a serial cipher can also work in WSN and ensure a certain degree of security. In order to further ensure the security performance of rinySB-Sec, this article further modifies the RC4 algorithm to improve the randomness of its sequence output and prevent some cracking of the RC4 algorithm features.

[0042] This improved key sequence generation algorithm uses a 128-byte seed key r and adds a chaotic mapping algorithm to the pseudo-random sub-cipher generation algorithm (PRGA) of the RC4 prototype to enhance the randomness of the sub-key sequence. The chaotic mapping model is as follows:

[0043] X n+1 =μX n (1-X n )

[0044] μ∈[0,4],X∈(0,1)

[0045] The initial value X0 uses a 7-bit unsigned binary number with an accuracy of 1 / 128, which can be accurate to 2 decimal places. In the process of improving the algorithm, it is found that when the initial value X0 of the chaotic map changes very little, the differences in the initial iteration values ​​are very small.

[0046] The inserted mapping initial value X0 is determined by the modulo 16 value of the IVth element of the seed key r. Since IV contains the counter Ctr, the update of IV will drive the update of the initial value X0, achieving the effect of automatic update of the subkey sequence. When the subkey is finally generated, adding the iteration value can avoid destroying the structure of the original algorithm while increasing the randomness of the output subkey sequence, and prevent the occurrence of weak key situations.

[0047] In the case of 2 decimal places of precision, a small change in the initial value 5 leads to a small difference in the first 4 rounds of iteration values. Therefore, when used in the algorithm, 4 rounds of pre-iteration are performed first to ensure the effectiveness of adding chaotic mapping.

[0048] When each block is encrypted, the key used is different from the standard block cipher, and when two different messages are encrypted, the subkey will be updated accordingly.

[0049] The network resource allocator between the transmitting end and the receiving end is implemented in a communication network centered on a core base station when the area covered by the communication network is in a fully loaded state.

[0050] When the network throughput is redistributed, an iterative optimization method is adopted to complete the allocation of all link resources.

[0051] The communication channel allocation objective function can be expressed as:

[0052] minT=min[max∑E(v i )],i=n

[0053] Where: minT is the channel communication transmission task overhead, E(v i ) is used to execute v i The energy required for the transmission rate, n is the total number of nodes in the communication network. The transmission rate of the i relay node in the communication network is affected by the corresponding channel bandwidth, energy loss and noise, so its calculation method can be expressed as:

[0054] Where: d ij is the channel bandwidth of the corresponding transmission link between relay node i and relay node j in the communication network; λ is the loss coefficient of the link; α is the disturbance coefficient of the noise; B is the noise intensity acting on the link.

[0055] Combining the communication channel allocation objective function and calculation method, the objective function of network communication resource allocation can be expressed as:

[0056] Using this as an allocation target, communication resources are allocated.

[0057] S1: Set any D2D link in the communication network as an initialization individual, and all D2D links in the network form an initialization population. Based on the transmission phase, a v is randomly given in the population. i The initial value x is substituted into the above formula to calculate the corresponding objective function value. The temperature at this time is the initial temperature. The calculation result at this time is only the transmission between two nodes.

[0058] S2: Iterate the calculation results of S1 and calculate the difference between the objective function value of the new individual and the current result, which can be expressed as ε = minT(x) = minT(x i ), where ε is the increment of the objective function value.

[0059] S3: Individual optimization. When ε<0, the new individual will be retained and the calculation of the next individual will continue. When ε>0, the calculation of the next individual will continue based on the current individual until the analysis of the initialized population is completed. The individual obtained after the analysis will be used as the optimal individual to proceed to the next step.

[0060] S4: Based on the newly determined individual corresponding node as the benchmark, execute steps 1-3 until the receiving node is obtained, and the allocation of all link resources is completed. However, it should be noted that when implementing the resource allocation under the multi-user concurrent transmission request according to the above method, the utilization rate of the node at the current moment is not only affected by the execution of the transmission task, but also the usage of the node in the allocation stage is also one of the key issues to be considered. Therefore, in order to avoid the transmission efficiency problem caused by the node overlap under the multi-source allocation request, the time parameter can be introduced on the basis of the above, and it can be used to realize the accurate calculation of the stage utilization rate.

[0061] A network communication method based on type identification comprises the following steps:

[0062] S1: When a target independent non-public network device to be interconnected establishes a unified network communication with at least one independent non-public network device to be communicated, the target independent non-public network device constructs a unified type identifier for verifying the authority of the user device to communicate with the object to be connected under the network communication;

[0063] The target independent non-public network device controls each independent non-public network device under the network communication to send the type identifier to the user device connected to each independent non-public network device under the network communication; the target user device sends a network communication request including the type identifier to the object to be connected based on the acquired type identifier;

[0064] S2: Host 1 transmits the type identification signal from the source port to the sender in the form of UCB packet encryption. During the transmission process, it passes through the network resource allocator, which uses an iterative optimization method to complete the allocation of all link resources, thereby increasing the network throughput;

[0065] S3: The sender transmits the information to the receiver via wireless signals. The target port of host 2 receives the encrypted type identification signal, decrypts the ciphertext into plaintext, displays it on host 2, and then transmits it to the target user device.

[0066] S4: The target user equipment establishes network communication with the object to be connected in response to a signal indicating that the object to be connected has authenticated the type identifier included in the network communication request.

[0067] The object to be connected includes at least one of the following items: an independent non-public network device to be connected and a user device to be connected.

[0068] When the transmitting end transmits a wireless signal to the receiving end, the anti-interference ability of the transmission signal is enhanced by continuously adjusting the weight coefficient; during the wireless signal transmission process, the power inversion algorithm based on the minimum mean square error LMS algorithm is used to enhance the anti-interference ability of the transmission signal. The power inversion algorithm enhances the anti-interference ability of the transmission signal in the following ways:

[0069] Assume that the number of antenna elements is N, and the power inversion array selection weight vector is W = [W1, W2, ..., W N ]T. The weight coefficient of the output power of the first array element is a constant. The weight coefficients of the other N-1 array elements are adjustable. Set up four antenna array elements and analyze their antenna radiation patterns. At this time, the weight coefficient is: W = [W1, W2, W3, W4]T. In the power inversion algorithm, the strongest signal component in the received signal should be suppressed to the greatest extent. Therefore, in the implementation of the adaptive filter, the received signal of a certain array element is selected as the desired signal. Usually, the received signal of the reference array element is selected as the desired signal. Without loss of generality, W1 can be set to 1.

[0070] The input signal is:

[0071] s(t)=[s1(t), s2(t), s3(t), s4(t),]T

[0072] The expected signal is:

[0073] d(n)=W1s1(t)

[0074] The output of the filter is:

[0075] y(n)=w·sT

[0076] The array output is an error signal expressed as:

[0077] e(n)=d(n)-y(n)

[0078] Under the gradient algorithm, the weight coefficient update expression is:

[0079]

[0080] Where μ is the iteration step size of the gradient algorithm.

[0081] In actual situations, the antenna array is generally a four-element array, and four antenna array elements with a square array shape and an array element interval of λ / 2 (λ is the signal wavelength) are selected to form the antenna array.

[0082] The core of the LMS adaptive algorithm is to continuously adjust the weight coefficients. Before sending a resource allocation signal for the communication link, the processor will perform A / D analog-to-digital conversion on the electrical signal of the current environmental data, compare the current data with the local database, and set the weight coefficient that best suits the current environment based on the actual situation, so that the array output power of the interference signal is as small as possible, that is, when the interference signal power is small, the power of the output interference signal increases with the increase of the input interference signal; and when the interference signal power is higher than a certain limit value, the stronger the input interference signal, the smaller the output interference signal power. After the interference signal power is reduced, the quality of the transmission signal will improve, that is, the anti-interference ability of the transmission signal will be enhanced.

[0083] The sequence cipher in the UCB block encryption is transmitted in text form using the Rabin key.

[0084] The target port of the host 2 will load and decrypt the data and judge the correctness of the decryption. If the decryption result is correct, the data information will be displayed in plain text for the user to browse. If the decryption is wrong, the data information will still be displayed in cipher text.

[0085] The Rabin cryptosystem is an improvement of the RSA cryptosystem. The Rabin cryptosystem can be considered as an RSA cryptosystem with constant values ​​of e and d, e = 2, d = 1 / 2. That is, encryption is c = m^2modn, and decryption is m = c^(1 / 2)modn.

[0086] Rabin key generation:

[0087] Given a prime number p, z* p A member g on the matrix, 1<g<p, and an element y, find an integer x (0≤x≤p-2) such that g x =ymodp.

[0088] The public key is (p,g,y), which is published to the public; the private key is x, which is kept privately by host 2.

[0089] The encrypted data information is published on the host 2. When other target users open the web page to browse the data, the configuration server of the target user's device will load and decrypt the data and judge the correctness of the decryption.

[0090] Send plaintext m to host 2, where 0<m<p. Select a random number k, (k,p-1)=1, and calculate: y1=g k modp, and then use the public key y to calculate: y2 = my k modp.

[0091] The ciphertext is composed of y1 and y2 in series, that is, the ciphertext c = y1||y2.

[0092] If the decryption result is correct, the data information will be displayed in plain text on the target user's device for the user to browse. If the decryption result is incorrect, the data information will still be displayed in cipher text on the target user's device.

[0093] After receiving the ciphertext c, host 2 uses its own private key x to calculate:

[0094] m=y2 / y1 x

[0095] =my k / (g k ) x

[0096] =mg xk / g xk modp

[0097] When generating a digital signature, select a large prime number p, select g as the primitive element of the field GF(p), select a positive integer x, and calculate y=g x (modp). The public key is (p, g, y), the private key is x, send data information m to host 2, use H to process data information m, get h = H (m), select a random number k, satisfy 0 < k < p-1, and (k, p-1) = 1, calculate: The webpage sends the signature (m, r, s) to the browsing user. After receiving the message m and the signature (r, s), the browsing user calculates: h = H (m) and uses the public key (p, g, y) to verify whether y r r s =g H(m) (modp), if so, then (m,r,s) is the signature information of the data transmission user.

[0098] When the user logs in to the target user device, he needs to provide a verification code to Host 2 to browse the data. Host 2 determines whether the user is qualified to access the network by the correctness of the verification code. Host 2 itself performs security scans regularly to discover and clean up its own security vulnerabilities.

[0099] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the statement "comprise a ..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0100] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A network communication system based on type identification, comprising a non-public network device, a host 1, a host 2 and a target user device, characterized in that: The host 1 and the host 2 are connected via a signal connection between a transmitting end and a receiving end, and a network throughput is redistributed between the transmitting end and the receiving end via a network resource allocator; The non-public network device is connected to the host one via a wired signal, and the host two and the target user device are connected via a wired signal. The non-public network device establishes a type identification signal. The host one transmits the type identification signal from the source port to the sending end in the form of UCB packet encryption. The sending end transmits it to the receiving end via a wireless signal. The target port of the host two receives the encrypted type identification signal, decrypts the ciphertext into plain text, displays it on the host two, and then transmits it to the target user device.

2. A network communication system based on type identification according to claim 1, characterized in that: The UCB block encryption adopts a combination of a sequence cipher and a block cipher to simplify the computational complexity and amount of computation when a node performs encryption / decryption.

3. A network communication system based on type identification according to claim 1, characterized in that: When each block is encrypted, the key used is different from the standard block cipher, and when two different messages are encrypted, the subkey will be updated accordingly.

4. A network communication system based on type identification according to claim 1, characterized in that: The network resource allocator between the transmitting end and the receiving end is implemented in a communication network centered on a core base station when the area covered by the communication network is in a fully loaded state.

5. A network communication system based on type identification according to claim 1, characterized in that: When the network throughput is redistributed, an iterative optimization method is adopted to complete the allocation of all link resources.

6. A network communication method based on type identification according to any one of claims 1 to 5, characterized in that: The following steps are involved: S1: When a target independent non-public network device to be interconnected establishes a unified network communication with at least one independent non-public network device to be communicated, the target independent non-public network device constructs a unified type identifier for verifying the authority for network communication between the user device and the object to be connected under the network communication; The target independent non-public network device controls each independent non-public network device under the network communication to send the type identifier to the user device connected to each independent non-public network device under the network communication; the target user device sends a network communication request including the type identifier to the object to be connected based on the acquired type identifier; S2: Host 1 transmits the type identification signal from the source port to the sender in the form of UCB packet encryption. During the transmission process, it passes through the network resource allocator, which uses an iterative optimization method to complete the allocation of all link resources, thereby increasing the network throughput; S3: The sender transmits the information to the receiver via wireless signals. The target port of host 2 receives the encrypted type identification signal, decrypts the ciphertext into plaintext, displays it on host 2, and then transmits it to the target user device. S4: The target user equipment establishes network communication with the object to be connected in response to a signal indicating that the object to be connected has authenticated the type identifier included in the network communication request.

7. A network communication method based on type identification according to claim 6, characterized in that: The object to be connected includes at least one of the following items: an independent non-public network device to be connected and a user device to be connected.

8. A network communication method based on type identification according to claim 6, characterized in that: When the transmitting end transmits a wireless signal to the receiving end, the anti-interference capability of the transmitted signal is enhanced by continuously adjusting the weight coefficient.

9. A network communication method based on type identification according to claim 6, characterized in that: The sequence cipher in the UCB block encryption is transmitted in text form using the Rabin key.

10. A network communication method based on type identification according to claim 6, characterized in that: The target port of the host 2 will load and decrypt the data and judge the correctness of the decryption. If the decryption result is correct, the data information will be displayed in plain text for the user to browse. If the decryption is wrong, the data information will still be displayed in cipher text.

Images