Data transmission method and device, electronic equipment and readable medium

Abstract

The embodiment of the invention provides a data transmission method and device, electronic equipment and a readable medium. The method comprises the following steps: respectively confusing a source IP address and a target IP address expressed in an IPv6 form in an IPv6 data packet to obtain a confused IPv6 data packet containing a confused source IP address and a confused target IP address; establishing an IPv4 communication tunnel between a sending end corresponding to the source IP address and a receiving end corresponding to the target IP address; and sending the confused IPv6 data packet from the sending end to the receiving end by adopting the IPv4 communication tunnel. Therefore, double encryption can be carried out on the source IP address and the target IP address expressed in the IPv6 form by adopting confusion and tunnel transmission modes at the same time, protection on network address privacy can be effectively improved, and the security of data transmission in a network is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of data transmission, and in particular to a data transmission method, a data transmission device, an electronic device and a computer-readable medium. Background Art

[0002] In network communications, IP addresses play a vital role as a way to uniquely identify and locate devices on the network. Especially in the IPv6 (Internet Protocol version 6) scenario, electronic devices can have a relatively fixed IPv6 public network address.

[0003] During the communication process, the network communication address carried in the data packet is often directly exposed to the public network environment, which may expose the network address to attacks by network attackers, resulting in data leakage or network paralysis. Especially in the IPv6 scenario, the exposure of the IPv6 network address of electronic devices may affect the security of electronic devices. Summary of the invention

[0004] The embodiments of the present invention provide a data transmission method, device, electronic device and computer-readable storage medium to solve the problem of low network transmission security.

[0005] An embodiment of the present invention discloses a data transmission method, including:

[0006] Obfuscating the source IP address and the destination IP address represented in the IPv6 form in the IPv6 data packet respectively, to obtain an obfuscated IPv6 data packet including the obfuscated source IP address and the obfuscated destination IP address;

[0007] Establishing an IPv4 communication tunnel between a sending end corresponding to the source IP address and a receiving end corresponding to the target IP address;

[0008] The obfuscated IPv6 data packet is sent from the sending end to the receiving end using the IPv4 communication tunnel.

[0009] Optionally, the step of respectively obfuscating the source IP address and the destination IP address represented in the IPv6 form in the IPv6 data packet to obtain an obfuscated IPv6 data packet including the obfuscated source IP address and the obfuscated destination IP address comprises:

[0010] Determining a target obfuscation strategy from among a plurality of obfuscation strategies according to at least one of a traffic type, a security requirement, and a performance requirement corresponding to the IPv6 data packet;

[0011] The target obfuscation strategy is adopted to obfuscate the source IP address and the target IP address represented in the IPv6 form in the IPv6 data packet respectively, so as to obtain an obfuscated IPv6 data packet including the obfuscated source IP address and the obfuscated target IP address.

[0012] Optionally, the obfuscation strategy includes at least one of random replacement, encryption obfuscation or dynamic obfuscation.

[0013] Optionally, the step of determining a target obfuscation strategy from a plurality of obfuscation strategies according to at least one of a traffic type, a security requirement, and a performance requirement corresponding to the IPv6 data packet comprises:

[0014] Based on the computing resource consumption of the obfuscation strategy and the bandwidth of the data transmission environment, selecting an obfuscation strategy that matches the traffic type and the performance requirement from the multiple obfuscation strategies as a target obfuscation strategy; and / or,

[0015] Based on the security of the data transmission environment, an obfuscation strategy matching the security requirement is selected from the multiple obfuscation strategies as a target obfuscation strategy.

[0016] Optionally, the step of establishing an IPv4 communication tunnel between a sending end corresponding to the source IP address and a receiving end corresponding to the target IP address includes:

[0017] Determining a target tunnel mode among multiple tunnel modes according to at least one of a traffic type, a security requirement, and a performance requirement corresponding to the IPv6 data packet;

[0018] The target tunnel mode is adopted to establish an IPv4 communication tunnel between the sending end corresponding to the source IP address and the receiving end corresponding to the target IP address.

[0019] Optionally, the tunnel mode includes at least one of an IPsec tunnel, a GRE tunnel, and an MPLS tunnel.

[0020] Optionally, the step of determining a target tunnel mode from a plurality of tunnel modes according to at least one of a traffic type, a security requirement, and a performance requirement corresponding to the IPv6 data packet comprises:

[0021] Based on the computing resource consumption of the tunnel mode and the bandwidth of the data transmission environment, a tunnel mode matching the traffic type and the performance requirement is selected from multiple tunnel modes as the target tunnel mode; and / or,

[0022] Based on the security of the data transmission environment, a tunnel mode matching the security requirement is selected from multiple tunnel modes as a target tunnel mode.

[0023] Optionally, the step of establishing an IPv4 communication tunnel between a sending end corresponding to the source IP address and a receiving end corresponding to the target IP address includes:

[0024] Based on the unique device identifier of the receiving end, searching for a temporary IPv4 address corresponding to the receiving end;

[0025] Based on the temporary IPv4 address, an IPv4 communication tunnel is established between a sending end corresponding to the source IP address and a receiving end corresponding to the target IP address.

[0026] Optionally, the method further comprises:

[0027] During data transmission, the traffic is analyzed to identify whether there are security risks in the data transmission process.

[0028] An embodiment of the present invention further provides a data transmission device, including:

[0029] The obfuscation module is used to respectively obfuscate the source IP address and the target IP address represented in the IPv6 form in the IPv6 data packet to obtain an obfuscated IPv6 data packet including the obfuscated source IP address and the obfuscated target IP address;

[0030] A tunnel establishment module, used to establish an IPv4 communication tunnel between a sending end corresponding to the source IP address and a receiving end corresponding to the target IP address;

[0031] A transmission module is used to use the IPv4 communication tunnel to send the obfuscated IPv6 data packet from the sending end to the receiving end.

[0032] Optionally, the obfuscation module includes:

[0033] A target obfuscation strategy determination submodule, configured to determine a target obfuscation strategy from among a plurality of obfuscation strategies according to at least one of a traffic type, a security requirement, and a performance requirement corresponding to the IPv6 data packet;

[0034] The obfuscation submodule is used to adopt the target obfuscation strategy to respectively obfuscate the source IP address and the target IP address represented in the IPv6 form in the IPv6 data packet, and obtain an obfuscated IPv6 data packet containing the obfuscated source IP address and the obfuscated target IP address.

[0035] Optionally, the obfuscation strategy includes at least one of random replacement, encryption obfuscation or dynamic obfuscation.

[0036] Optionally, the target obfuscation strategy determination submodule includes:

[0037] A first target obfuscation strategy determination unit is configured to select, from the plurality of obfuscation strategies, an obfuscation strategy that matches the traffic type and the performance requirement as a target obfuscation strategy based on the computing resource consumption of the obfuscation strategy and the bandwidth of the data transmission environment; and / or

[0038] The second target obfuscation strategy determination unit is used to select an obfuscation strategy that matches the security requirement from the multiple obfuscation strategies as a target obfuscation strategy based on the security of the data transmission environment.

[0039] Optionally, the tunnel establishment module includes:

[0040] A target tunnel mode determination submodule, configured to determine a target tunnel mode from among a plurality of tunnel modes according to at least one of a traffic type, a security requirement, and a performance requirement corresponding to the IPv6 data packet;

[0041] The first tunnel establishment submodule is used to establish an IPv4 communication tunnel between the sending end corresponding to the source IP address and the receiving end corresponding to the target IP address by adopting the target tunnel mode.

[0042] Optionally, the tunnel mode includes at least one of an IPsec tunnel, a GRE tunnel, and an MPLS tunnel.

[0043] Optionally, the target tunnel mode determination submodule includes:

[0044] a first target tunnel mode determination unit, configured to select a tunnel mode that matches the traffic type and the performance requirement from a plurality of tunnel modes as a target tunnel mode based on the computing resource consumption of the tunnel mode and the bandwidth of the data transmission environment; and / or

[0045] The second target tunnel mode determination unit is used to select a tunnel mode that matches the security requirement from multiple tunnel modes as a target tunnel mode based on the security of the data transmission environment.

[0046] Optionally, the tunnel establishment module includes:

[0047] An address search submodule, used for searching a temporary IPv4 address corresponding to the receiving end based on a unique device identifier of the receiving end;

[0048] The second tunnel establishment submodule is used to establish an IPv4 communication tunnel between the sending end corresponding to the source IP address and the receiving end corresponding to the target IP address based on the temporary IPv4 address.

[0049] Optionally, the device further comprises:

[0050] The risk identification module is used to analyze traffic during data transmission and identify whether there are security risks in the data transmission process.

[0051] The embodiment of the present invention further discloses an electronic device, comprising a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other via the communication bus;

[0052] The memory is used to store computer programs;

[0053] The processor is used to implement the method described in the embodiment of the present invention when executing the program stored in the memory.

[0054] The embodiment of the present invention further discloses one or more computer-readable media on which instructions are stored. When executed by one or more processors, the processors are enabled to execute the method described in the embodiment of the present invention.

[0055] The embodiments of the present invention include the following advantages:

[0056] The data transmission method provided by the embodiment of the present invention obtains an obfuscated IPv6 data packet containing an obfuscated source IP address and an obfuscated target IP address by obfuscating the source IP address and the target IP address in the IPv6 data packet respectively; establishes an IPv4 communication tunnel between the sending end corresponding to the source IP address and the receiving end corresponding to the target IP address; and uses the IPv4 communication tunnel to send the obfuscated IPv6 data packet from the sending end to the receiving end. Thus, the source IP address and the target IP address expressed in the IPv6 form can be double encrypted by using both obfuscation and tunnel transmission, which can effectively improve the protection of network address privacy and improve the security of data transmission in the network. BRIEF DESCRIPTION OF THE DRAWINGS

[0057] Figure 1 is a flowchart of a data transmission method provided in an embodiment of the present invention;

[0058] Figure 2 is a flowchart of another data transmission method provided in an embodiment of the present invention;

[0059] Figure 3 is a structural block diagram of a data transmission device provided in an embodiment of the present invention;

[0060] Figure 4 is a block diagram of an electronic device provided in an embodiment of the present invention;

[0061] Figure 5 is a schematic diagram of a computer-readable medium provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0062] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments.

[0063] Reference Figure 1 , shows a flow chart of a data transmission method provided in an embodiment of the present invention, which may specifically include the following steps:

[0064] Step 101, obfuscating the source IP address and the target IP address represented in the IPv6 format in the IPv6 data packet respectively, to obtain an obfuscated IPv6 data packet including the obfuscated source IP address and the obfuscated target IP address;

[0065] In a specific implementation, there may be an IPv6 data packet that uses the IPv6 protocol for data transmission, and the data packet may record a source IP address and a destination IP address expressed in IPv6 format.

[0066] The source IP address can be the IP address of the sending device that sends the data packet. When a device (such as a computer, server, or router) sends a data packet, it can insert its own IP address as the source IP address in the header of the data packet. The source IP address identifies the starting point of the data packet, and the receiving end can use the source IP address to send a response or return data.

[0067] The destination IP address can be the destination of the data packet, that is, the IP address of the receiving end. When a device sends a data packet, it can insert the destination IP address in the header of the data packet. The destination IP address identifies the final recipient of the data packet.

[0068] In an IPv6 data packet, the source IP address and the destination IP address can each occupy 16 bytes of space.

[0069] In order to improve the security of data transmission and prevent the relatively fixed IPv6 address from being leaked, the source IP address and the destination IP address expressed in IPv6 format in the IPv6 data packet can be obfuscated separately. By obfuscating, third parties cannot normally identify the source IP address and the destination IP address, thereby protecting the security of the source IP address and the destination IP address expressed in IPv6 format, and the real IPv6 addresses of the communicating parties cannot be identified and tracked.

[0070] Step 102, establishing an IPv4 communication tunnel between a sending end corresponding to the source IP address and a receiving end corresponding to the target IP address;

[0071] Subsequently, in order to further improve the security of data transmission and prevent data leakage, an IPv4 (Internet Protocol version 4) communication tunnel can be established between the sender corresponding to the source IP address and the receiver corresponding to the target IP address.

[0072] The communication tunnel can be an encrypted communication path between two devices, the sender and the receiver. The sender and the receiver can protect the privacy and integrity of the data by sending encrypted data packets to prevent the data from being intercepted, tampered or eavesdropped during transmission.

[0073] Specifically, the communication tunnel can be an IPv4 communication tunnel, that is, the IPv6 over IPv4 technology is used to transmit the obfuscated IPv6 data packet through the transmission of IPv4. It can usually further encapsulate the obfuscated IPv6 data packet to form an IPv4 data packet, so that the obfuscated IPv6 data packet can be transmitted through the IPv4 network like an ordinary IPv4 data packet. In this case, even if the source IP address and the target IP address represented in the form of IPv6 are obfuscated, data transmission can be achieved through the IP address under the IPv4 network, avoiding the source IP address and the target IP address represented in the form of IPv6 from being leaked during the transmission process. At the same time, since the IPv4 communication tunnel is used for data transmission under the IPv4 network, it protects the privacy and integrity of the data by sending encrypted data packets, so that the use of the IPv4 network can also have good security.

[0074] Step 103, using the IPv4 communication tunnel, sends the obfuscated IPv6 data packet from the sending end to the receiving end.

[0075] In the specific implementation, after the IPv4 communication tunnel is established, the obfuscated IPv6 data packet can be sent from the sender to the receiver using the IPv4 communication tunnel. This allows data transmission to be completed under the double-layer encryption protection of obfuscation and tunnel transmission, and ensures the security of the source IP address and the target IP address represented in the IPv6 format of the sender and receiver.

[0076] The data transmission method provided by the embodiment of the present invention obtains an obfuscated IPv6 data packet containing an obfuscated source IP address and an obfuscated target IP address by obfuscating the source IP address and the target IP address in the IPv6 data packet respectively; establishes an IPv4 communication tunnel between the sending end corresponding to the source IP address and the receiving end corresponding to the target IP address; and uses the IPv4 communication tunnel to send the obfuscated IPv6 data packet from the sending end to the receiving end. Thus, the source IP address and the target IP address expressed in the IPv6 form can be double encrypted by using both obfuscation and tunnel transmission, which can effectively improve the protection of network address privacy and improve the security of data transmission in the network.

[0077] Reference Figure 2 , shows a flowchart of another data transmission method provided in an embodiment of the present invention, which may specifically include the following steps:

[0078] Step 201, determining a target obfuscation strategy from a plurality of obfuscation strategies according to at least one of a traffic type, a security requirement, and a performance requirement corresponding to an IPv6 data packet;

[0079] In a specific implementation, there may be an IPv6 data packet that uses the IPv6 protocol for data transmission, and the data packet may record a source IP address and a destination IP address expressed in IPv6 format.

[0080] The source IP address can be the IP address of the sending device that sends the data packet. When a device (such as a computer, server, or router) sends a data packet, it can insert its own IP address as the source IP address in the header of the data packet. The source IP address identifies the starting point of the data packet, and the receiving end can use the source IP address to send a response or return data.

[0081] The destination IP address can be the destination of the data packet, that is, the IP address of the receiving end. When a device sends a data packet, it can insert the destination IP address in the header of the data packet. The destination IP address identifies the final recipient of the data packet.

[0082] In an IPv6 data packet, the source IP address and the destination IP address can each occupy 16 bytes of space.

[0083] In order to improve the security of data transmission and prevent the relatively fixed IPv6 address from being leaked, the source IP address and the destination IP address expressed in IPv6 format in the IPv6 data packet can be obfuscated separately. By obfuscating, third parties cannot normally identify the source IP address and the destination IP address, thereby protecting the security of the source IP address and the destination IP address expressed in IPv6 format, and the real IPv6 addresses of the communicating parties cannot be identified and tracked.

[0084] In a specific implementation, the obfuscation strategy may include multiple strategies, such as random replacement, encryption obfuscation, or dynamic obfuscation.

[0085] Random replacement may refer to randomly replacing certain characters in the IPv6 address with other characters to change the representation of the IPv6 address, thereby achieving obfuscation of the IPv6 address.

[0086] Cryptographic obfuscation can refer to the use of encryption algorithms to transform data so that it cannot be understood without decryption. Cryptographic obfuscation can be symmetric, that is, the encrypting party and the decrypting party can use the same key to encrypt and decrypt the IPv6 address. Cryptographic obfuscation can also be asymmetric, that is, there can be a pair of public and private keys. The public key can usually be used to encrypt the IPv6 address, and the holder of the private key can use the private key to decrypt the encrypted IPv6 address.

[0087] Dynamic obfuscation can refer to dynamically changing the encryption method of IPv6 addresses during data transmission, making the decryption of IPv6 addresses more difficult.

[0088] In a specific implementation, different obfuscation strategies may have different advantages and disadvantages. Therefore, a suitable obfuscation strategy may be selected according to at least one of the traffic type, security requirements, and performance requirements during data transmission.

[0089] Specifically, during the data transmission process, different traffic types may be used depending on the type of data being transmitted. For example, if the data type currently required to be transmitted is data related to scenarios such as web browsing and chat message transmission, then the current data type may be considered to be a low-traffic data type. If the data type currently required to be transmitted is data related to scenarios such as video streaming and large file transmission, then the current data type may be considered to be a high-traffic data type.

[0090] During the data transmission process, different security requirements may be required. For example, there may be an environment with higher data security requirements, where the data to be transmitted may have higher security, or there may be an environment with lower data security requirements, where the data to be transmitted may not require excessively high security.

[0091] During the data transmission process, different performance requirements may be required. For example, a higher data transmission speed may be required, that is, a higher bandwidth requirement may be required. A lower data transmission delay may also be required, which may not necessarily have a higher data transmission speed, but the network delay is expected to be lower.

[0092] Therefore, according to the characteristics of different obfuscation strategies, an obfuscation strategy that is more suitable for current data transmission needs can be selected, thereby ensuring security while avoiding obvious adverse effects on the user's network experience.

[0093] In one embodiment of the present invention, the step of determining a target obfuscation strategy from a plurality of obfuscation strategies according to at least one of a traffic type, a security requirement, and a performance requirement corresponding to an IPv6 data packet includes:

[0094] S11, based on the computing resource consumption of the obfuscation strategy and the bandwidth of the data transmission environment, selecting an obfuscation strategy that matches the traffic type and performance requirements from multiple obfuscation strategies as a target obfuscation strategy; and / or,

[0095] In a specific implementation, the traffic type and performance requirements may affect the selection of the computing resource consumption of the obfuscation strategy. At the same time, an obfuscation strategy that is more adaptable to the traffic type and performance requirements under the bandwidth of the current data transmission environment may be selected. Thus, based on the computing resource consumption of the obfuscation strategy and the bandwidth of the data transmission environment, an obfuscation strategy that matches the traffic type and performance requirements may be selected from multiple obfuscation strategies as the target obfuscation strategy.

[0096] As a specific example of the present invention, when the current traffic type belongs to a large traffic type, it is necessary to maintain a high data transmission speed. At this time, you can consider adopting a relatively fast obfuscation strategy such as a random replacement obfuscation strategy, which can complete the obfuscation of the source IP address and the target IP address with lower computing resource consumption, thereby avoiding the obfuscation process affecting the data transmission speed.

[0097] At the same time, if the current traffic type is a large traffic type, if the bandwidth is large, that is, the network itself already has a good data transmission speed, then even if a more secure obfuscation strategy is adopted, it may not have a significant impact on the data transmission speed. In this case, a more secure obfuscation strategy such as encryption obfuscation can be selected. If the bandwidth is small, in order to avoid a significant impact on the data transmission speed, an obfuscation strategy with less bandwidth consumption such as random replacement obfuscation strategy can be used. Avoid the increase in data packets that may be caused by complex encryption methods.

[0098] When the current traffic type is a low traffic type, the demand for data transmission speed can be relatively low. Since the amount of data is small, even if the data transmission speed is slightly reduced, it will not significantly affect the user experience. At this time, according to actual needs, you can select an obfuscation strategy with higher security, such as encryption obfuscation or dynamic obfuscation, to further improve data security.

[0099] At the same time, if the current traffic type is a small traffic type, if the bandwidth is large, that is, the network itself already has a good data transmission speed, then even if a more secure obfuscation strategy is adopted, it will not have a significant impact on the data transmission speed. At this time, you can choose a more secure obfuscation strategy such as encryption obfuscation. If the bandwidth is small, then at this time, due to the small traffic, even if the more secure obfuscation strategy continues to be adopted, it will not have a significant impact on the data transmission speed. According to actual needs, you can use an obfuscation strategy that consumes less bandwidth, such as a random replacement obfuscation strategy, or use a more secure encryption obfuscation strategy or dynamic obfuscation strategy.

[0100] When the current performance requirement is a high bandwidth requirement, that is, a higher data transmission speed is required, a relatively fast obfuscation strategy such as a random replacement obfuscation strategy can be considered, which can complete the obfuscation of the source IP address and the target IP address with lower computing resource consumption, thereby avoiding the obfuscation process affecting the data transmission speed.

[0101] When the current performance requirement is a low latency requirement, in order to avoid the obfuscation process increasing data latency, it is usually possible to consider adopting a relatively fast obfuscation strategy such as a random replacement obfuscation strategy.

[0102] If the current performance requirements do not place high demands on bandwidth or latency, you can use obfuscation strategies that consume less bandwidth, such as random replacement obfuscation strategies, or use more secure encryption obfuscation strategies or dynamic obfuscation strategies according to actual needs.

[0103] S12, based on the security of the data transmission environment, selecting an obfuscation strategy that matches the security requirements from multiple obfuscation strategies as a target obfuscation strategy.

[0104] In a specific implementation, the data transmission environment may have corresponding security. For example, when data is transmitted in a public Wi-Fi environment, or when the data being transmitted is sensitive data, it can be considered that the security of the data transmission environment is relatively low. In this case, in order to protect the user's data security, higher security requirements may generally be required. When data is transmitted in an internal environment, or when the data being transmitted is non-sensitive data, it can be considered that the security of the data transmission environment is relatively high. In this case, even if higher security requirements are not adopted, user data is relatively safe.

[0105] Therefore, the corresponding security requirements can be determined according to the security of the data transmission environment, and the appropriate obfuscation strategy can be selected as the target obfuscation strategy. For example, when the security of the data transmission environment is low and the security requirements are high, encryption methods with higher security such as encryption obfuscation and dynamic obfuscation can be used. When the security of the data transmission environment is high and the security requirements are relatively low, methods such as random replacement obfuscation strategies can be used to quickly complete the obfuscation of the source IP address and the target IP address.

[0106] Step 202, adopting a target obfuscation strategy, obfuscates the source IP address and the target IP address represented in IPv6 format in the IPv6 data packet respectively, and obtains an obfuscated IPv6 data packet including an obfuscated source IP address and an obfuscated target IP address.

[0107] After determining the target obfuscation strategy, the corresponding obfuscation strategy can be adopted to respectively obfuscate the source IP address and the target IP address represented in IPv6 form in the IPv6 data packet, and obtain an obfuscated IPv6 data packet containing the obfuscated source IP address and the obfuscated target IP address, thereby improving the security of the source IP address and the target IP address represented in IPv6 form.

[0108] Step 203, establishing an IPv4 communication tunnel between a sending end corresponding to the source IP address and a receiving end corresponding to the target IP address;

[0109] Subsequently, in order to further improve the security of data transmission and prevent data leakage, an IPv4 (Internet Protocol version 4) communication tunnel can be established between the sender corresponding to the source IP address and the receiver corresponding to the target IP address.

[0110] The communication tunnel can be an encrypted communication path between two devices, the sender and the receiver. The sender and the receiver can protect the privacy and integrity of the data by sending encrypted data packets to prevent the data from being intercepted, tampered or eavesdropped during transmission.

[0111] Specifically, the communication tunnel can be an IPv4 communication tunnel, that is, the IPv6 over IPv4 technology is used to transmit the obfuscated IPv6 data packet through the transmission of IPv4. It can usually further encapsulate the obfuscated IPv6 data packet to form an IPv4 data packet, so that the obfuscated IPv6 data packet can be transmitted through the IPv4 network like an ordinary IPv4 data packet. In this case, even if the source IP address and the target IP address represented in the form of IPv6 are obfuscated, data transmission can be achieved through the IP address under the IPv4 network, avoiding the source IP address and the target IP address represented in the form of IPv6 from being leaked during the transmission process. At the same time, since the IPv4 communication tunnel is used for data transmission under the IPv4 network, it protects the privacy and integrity of the data by sending encrypted data packets, so that the use of the IPv4 network can also have good security.

[0112] In one embodiment of the present invention, the step of establishing an IPv4 communication tunnel between a sending end corresponding to a source IP address and a receiving end corresponding to a target IP address includes:

[0113] S21, determining a target tunnel mode from a plurality of tunnel modes according to at least one of a traffic type, a security requirement, and a performance requirement corresponding to the IPv6 data packet;

[0114] In order to improve the security of data transmission and prevent IPv6 addresses from being leaked in IPv4 transmission scenarios, a target tunnel mode suitable for current needs can be determined from multiple tunnel modes according to at least one of the traffic type, security requirements, and performance requirements corresponding to the IPv6 data packet.

[0115] In a specific implementation, the tunnel mode includes at least one of an IPsec tunnel, a GRE tunnel, and an MPLS tunnel.

[0116] Among them, IPsec (Internet Protocol Security) tunnel can be a protocol suite for protecting the security of IP data packets. IPsec tunnel mode encrypts and transmits data packets by constructing the sending end and the receiving end as two IPsec endpoints and establishing a communication tunnel between the two IPsec endpoints to ensure the secure transmission of data packets on the public Internet.

[0117] GRE (Generic Routing Encapsulation) tunnels allow the transmission of data packets of multiple network layer protocols on IP networks. It can encapsulate non-IPv4 data packets in IPv4 data packets, so that data packets can be transmitted on IPv4 networks, and can select appropriate encryption methods to achieve encrypted transmission according to actual needs.

[0118] MPLS (Multiprotocol Label Switching) tunnel is a technology that works between network layer 3 (L3) and network layer 2 (L2) and can use labels to forward data packets. MPLS tunnel mode enables data packets to be transmitted quickly and efficiently in an MPLS network by attaching a short, fixed-length label to the data packet.

[0119] In a specific implementation, different tunnel modes may have different advantages and disadvantages. Therefore, a suitable tunnel mode may be selected according to at least one of the traffic type, security requirements, and performance requirements during data transmission.

[0120] In one embodiment of the present invention, the step of determining a target tunnel mode among multiple tunnel modes according to at least one of a traffic type, a security requirement, and a performance requirement corresponding to an IPv6 data packet includes:

[0121] S31, based on the computing resource consumption of the tunnel mode and the bandwidth of the data transmission environment, selecting a tunnel mode that matches the traffic type and performance requirements from multiple tunnel modes as a target tunnel mode; and / or,

[0122] In a specific implementation, the traffic type and performance requirements may affect the selection of the computing resource consumption of the tunnel mode. At the same time, a tunnel mode that is more adaptable to the traffic type and performance requirements under the bandwidth of the current data transmission environment may be selected. Thus, based on the computing resource consumption of the tunnel mode and the bandwidth of the data transmission environment, a tunnel mode that matches the traffic type and performance requirements may be selected from multiple tunnel modes as the target tunnel mode.

[0123] As a specific example of the present invention, when the current traffic type belongs to a large traffic type, it is necessary to maintain a high data transmission speed. At this time, it is possible to consider adopting a tunnel mode that adapts to high bandwidth efficiency requirements, such as a GRE tunnel or an MPLS tunnel. The tunnel communication of IPv4 data packets can be completed with lower computing resource consumption, keeping the transmission at high bandwidth efficiency.

[0124] At the same time, if the current traffic type is a large traffic type, if the bandwidth is large, that is, the network itself has a good data transmission speed, then any tunnel mode can be used at this time, and it will not have a significant impact on the data transmission speed. At this time, you can arbitrarily choose the preferred tunnel mode. If the bandwidth is small, in order to avoid a significant impact on the data transmission speed, you can use a GRE tunnel or MPLS tunnel that will not have a significant impact on the bandwidth.

[0125] When the current traffic type is a small traffic type, the demand for data transmission speed can be relatively low. Since the amount of data is small, even if the data transmission speed is slightly reduced, it will not significantly affect the user experience. At this time, you can select the preferred tunnel mode according to actual needs.

[0126] At the same time, if the current traffic type is a small traffic type, if the bandwidth is large, that is, the network itself has a good data transmission speed, then any tunnel mode can be used at this time, and it will not have a significant impact on the data transmission speed. At this time, you can arbitrarily choose the preferred tunnel mode. If the bandwidth is small, then at this time, due to the small traffic, even if the tunnel mode that affects the bandwidth is continued to be used, it will not have a significant impact on the data transmission speed, and any tunnel mode can also be used.

[0127] When the current performance requirement is high bandwidth demand, that is, a higher data transmission speed is required, you can consider using a tunnel mode that adapts to high bandwidth efficiency requirements, such as a GRE tunnel or an MPLS tunnel. This can complete tunnel communication for IPv4 data packets with lower computing resource consumption and keep the transmission at high bandwidth efficiency.

[0128] When the current performance requirement is a low latency requirement, in order to avoid data delay, the IPsec tunnel mode can be selected because it has an advantage in achieving low latency.

[0129] If the current performance requirements do not place high demands on bandwidth or latency, you can choose the preferred tunnel mode according to actual needs.

[0130] S32, based on the security of the data transmission environment, selecting a tunnel mode that matches the security requirements from multiple tunnel modes as the target tunnel mode.

[0131] In a specific implementation, the data transmission environment may have corresponding security. For example, when data is transmitted in a public Wi-Fi environment, or when the data being transmitted is sensitive data, it can be considered that the security of the data transmission environment is relatively low. In this case, in order to protect the user's data security, higher security requirements may generally be required. When data is transmitted in an internal environment, or when the data being transmitted is non-sensitive data, it can be considered that the security of the data transmission environment is relatively high. In this case, even if higher security requirements are not adopted, user data is relatively safe.

[0132] Thus, the security of the data transmission environment can be considered, and a tunnel mode that matches the security requirements can be selected from multiple tunnel modes as the target tunnel mode. For example, when the security of the data transmission environment is low and the security requirements are high, the IPsec tunnel mode with a high level of security can be used. It needs to encrypt data during the transmission process, and at the same time perform data integrity check and source authentication, which can ensure that the data is safely transmitted on the Internet with low security. When the security of the data transmission environment is high and the security requirements are relatively low, the GRE tunnel mode and the MPLS tunnel mode can be selected according to actual needs. The GRE tunnel mode and the MPLS tunnel mode do not have built-in authentication mechanisms and data encryption mechanisms. They can be used in conjunction with other authentication mechanisms or data encryption mechanisms. Thus, data processing rules with higher authentication and encryption efficiency can be selected according to actual needs, and the present invention does not limit this.

[0133] S22, adopting the target tunnel mode, establishes an IPv4 communication tunnel between the sending end corresponding to the source IP address and the receiving end corresponding to the target IP address.

[0134] After determining the target tunnel mode, the corresponding tunnel model can be used to establish an IPv4 communication tunnel between the sender corresponding to the source IP address and the receiver corresponding to the target IP address, thereby improving the security of the source IP address and the target IP address represented in IPv6 form.

[0135] In one embodiment of the present invention, the step of establishing an IPv4 communication tunnel between a sending end corresponding to a source IP address and a receiving end corresponding to a target IP address includes:

[0136] S41, based on the unique device identifier of the receiving end, searching for a temporary IPv4 address corresponding to the receiving end;

[0137] In a specific implementation, in order to improve the security of data transmission, the IPv4 address corresponding to the receiving end can be temporarily allocated, which can be updated according to actual needs. After the receiving end obtains the allocated IPv4 address, it can establish a mapping relationship between the temporary IPv4 address and the device unique identifier of the receiving end. Thus, the sending end can find the temporary IPv4 address corresponding to the receiving end based on the device unique identifier.

[0138] Among them, the device unique identifier of the receiving end can be a hardware-related address in the receiving end, such as a MAC address (Media Access Control Address), a device serial number, a device IMEI (International Mobile Equipment Identity), or an identifier generated by software in the device, such as a UUID (Universally unique identifier), a GUID (globally unique identifier), etc., and the present invention does not impose any restrictions on this.

[0139] S42, based on the temporary IPv4 address, establish an IPv4 communication tunnel between the sending end corresponding to the source IP address and the receiving end corresponding to the target IP address.

[0140] After determining the temporary IPv4 address of the receiver, the sender can establish an IPv4 communication tunnel between the sender corresponding to the source IP address and the receiver corresponding to the target IP address based on the temporary IPv4 address, thereby further improving the security of data transmission.

[0141] Step 204, using the IPv4 communication tunnel, sends the obfuscated IPv6 data packet from the sending end to the receiving end.

[0142] In the specific implementation, after the IPv4 communication tunnel is established, the obfuscated IPv6 data packet can be sent from the sender to the receiver using the IPv4 communication tunnel. This allows data transmission to be completed under the double-layer encryption protection of obfuscation and tunnel transmission, and ensures the security of the source IP address and the target IP address represented in the IPv6 format of the sender and receiver.

[0143] In one embodiment of the present invention, the method further comprises:

[0144] S51, during the data transmission process, the traffic is analyzed to identify whether there is a security risk in the data transmission process.

[0145] In a specific implementation, in order to further improve the security of data transmission, the traffic generated during the data transmission process may be analyzed to identify whether there are security risks in the data transmission process.

[0146] Specifically, network monitoring tools can be used to capture and analyze network traffic to identify abnormal or suspicious data packets to confirm whether there may be security risks. Traffic analysis can also be used to identify traffic patterns, detect abnormal traffic, and identify potential DDoS attacks.

[0147] Optionally, in order to further improve data security, a data encryption mechanism and a data authentication mechanism may be set during the data transmission process.

[0148] The data encryption mechanism can use symmetric encryption, asymmetric encryption, hybrid encryption and other methods on the obfuscated IPv6 data packets as a whole, and further convert the obfuscated IPv6 data packets into unreadable data.

[0149] The data authentication mechanism can verify the source and integrity of the obfuscated IPv6 data packet to ensure that the obfuscated IPv6 data packet has not been tampered with during transmission. For example, a digital signature can be used to verify the integrity of the data and the identity of the sender of the data. A message authentication code can also be used to add information used as a message authentication code to the obfuscated IPv6 data packet, so that the integrity and source of the message can be verified based on the message authentication code.

[0150] The data transmission method provided by the embodiment of the present invention determines a target obfuscation strategy from multiple obfuscation strategies according to at least one of the traffic type, security requirements, and performance requirements corresponding to the IPv6 data packet; adopts the target obfuscation strategy to obfuscate the source IP address and the target IP address represented in the IPv6 form in the IPv6 data packet, respectively, to obtain an obfuscated IPv6 data packet containing an obfuscated source IP address and an obfuscated target IP address; establishes an IPv4 communication tunnel between the sending end corresponding to the source IP address and the receiving end corresponding to the target IP address; adopts the IPv4 communication tunnel to send the obfuscated IPv6 data packet from the sending end to the receiving end. Therefore, the source IP address and the target IP address represented in the IPv6 form can be double encrypted by using both obfuscation and tunnel transmission, which can effectively improve the protection of network address privacy and improve the security of data transmission in the network.

[0151] It should be noted that, for the sake of simplicity, the method embodiments are described as a series of action combinations, but those skilled in the art should be aware that the embodiments of the present invention are not limited by the order of the actions described, because according to the embodiments of the present invention, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

[0152] Reference Figure 3 , shows a structural block diagram of a data transmission device provided in an embodiment of the present invention, which may specifically include the following modules:

[0153] The obfuscation module 301 is used to respectively obfuscate the source IP address and the target IP address represented in the IPv6 form in the IPv6 data packet to obtain an obfuscated IPv6 data packet including the obfuscated source IP address and the obfuscated target IP address;

[0154] A tunnel establishment module 302 is used to establish an IPv4 communication tunnel between a sending end corresponding to a source IP address and a receiving end corresponding to a target IP address;

[0155] The transmission module 303 is used to use the IPv4 communication tunnel to send the obfuscated IPv6 data packet from the sending end to the receiving end.

[0156] Optionally, the obfuscation module includes:

[0157] A target obfuscation strategy determination submodule, used to determine a target obfuscation strategy from a plurality of obfuscation strategies according to at least one of a traffic type, a security requirement, and a performance requirement corresponding to an IPv6 data packet;

[0158] The obfuscation submodule is used to adopt a target obfuscation strategy to obfuscate the source IP address and the target IP address represented in the IPv6 form in the IPv6 data packet respectively, and obtain an obfuscated IPv6 data packet containing the obfuscated source IP address and the obfuscated target IP address.

[0159] Optionally, the obfuscation strategy includes at least one of random replacement, encryption obfuscation or dynamic obfuscation.

[0160] Optionally, the target obfuscation strategy determination submodule includes:

[0161] a first target obfuscation strategy determination unit, configured to select an obfuscation strategy that matches the traffic type and performance requirements from among multiple obfuscation strategies as a target obfuscation strategy based on the computing resource consumption of the obfuscation strategy and the bandwidth of the data transmission environment; and / or

[0162] The second target obfuscation strategy determination unit is used to select an obfuscation strategy that matches the security requirement from multiple obfuscation strategies as a target obfuscation strategy based on the security of the data transmission environment.

[0163] Optionally, the tunnel establishment module includes:

[0164] A target tunnel mode determination submodule, configured to determine a target tunnel mode from among multiple tunnel modes according to at least one of a traffic type, a security requirement, and a performance requirement corresponding to an IPv6 data packet;

[0165] The first tunnel establishment submodule is used to establish an IPv4 communication tunnel between a sending end corresponding to a source IP address and a receiving end corresponding to a target IP address by adopting a target tunnel mode.

[0166] Optionally, the tunnel mode includes at least one of an IPsec tunnel, a GRE tunnel, and an MPLS tunnel.

[0167] Optionally, the target tunnel mode determination submodule includes:

[0168] a first target tunnel mode determination unit, configured to select a tunnel mode that matches the traffic type and performance requirements from among multiple tunnel modes as a target tunnel mode based on the computing resource consumption of the tunnel mode and the bandwidth of the data transmission environment; and / or,

[0169] The second target tunnel mode determination unit is used to select a tunnel mode that matches the security requirement from multiple tunnel modes as the target tunnel mode based on the security of the data transmission environment.

[0170] Optionally, the tunnel establishment module includes:

[0171] The address search submodule is used to search for the temporary IPv4 address corresponding to the receiving end based on the unique device identifier of the receiving end;

[0172] The second tunnel establishment submodule is used to establish an IPv4 communication tunnel between a sending end corresponding to a source IP address and a receiving end corresponding to a target IP address based on a temporary IPv4 address.

[0173] Optionally, the device further comprises:

[0174] The risk identification module is used to analyze traffic during data transmission and identify whether there are security risks in the data transmission process.

[0175] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0176] In addition, an embodiment of the present invention further provides an electronic device, such as Figure 4 As shown, it includes a processor 401, a communication interface 402, a memory 404 and a communication bus 404, wherein the processor 401, the communication interface 402, and the memory 404 communicate with each other through the communication bus 404.

[0177] Memory 404, used for storing computer programs;

[0178] The processor 401 is used to execute the program stored in the memory 404 to implement the following steps:

[0179] Obfuscating the source IP address and the destination IP address represented in the IPv6 form in the IPv6 data packet respectively, to obtain an obfuscated IPv6 data packet including the obfuscated source IP address and the obfuscated destination IP address;

[0180] Establish an IPv4 communication tunnel between the sender corresponding to the source IP address and the receiver corresponding to the target IP address;

[0181] Using IPv4 communication tunnel, obfuscated IPv6 data packets are sent from the sender to the receiver.

[0182] Optionally, the step of respectively obfuscating the source IP address and the destination IP address represented in the IPv6 form in the IPv6 data packet to obtain an obfuscated IPv6 data packet including the obfuscated source IP address and the obfuscated destination IP address comprises:

[0183] Determining a target obfuscation strategy from among multiple obfuscation strategies according to at least one of a traffic type, a security requirement, and a performance requirement corresponding to the IPv6 data packet;

[0184] The target obfuscation strategy is adopted to obfuscate the source IP address and the target IP address represented in the IPv6 form in the IPv6 data packet respectively, so as to obtain an obfuscated IPv6 data packet including the obfuscated source IP address and the obfuscated target IP address.

[0185] Optionally, the obfuscation strategy includes at least one of random replacement, encryption obfuscation or dynamic obfuscation.

[0186] Optionally, the step of determining a target obfuscation strategy from a plurality of obfuscation strategies according to at least one of a traffic type, a security requirement, and a performance requirement corresponding to the IPv6 data packet comprises:

[0187] Based on the computing resource consumption of the obfuscation strategy and the bandwidth of the data transmission environment, selecting an obfuscation strategy that matches the traffic type and performance requirements from multiple obfuscation strategies as a target obfuscation strategy; and / or,

[0188] Based on the security of the data transmission environment, an obfuscation strategy that matches the security requirements is selected from multiple obfuscation strategies as the target obfuscation strategy.

[0189] Optionally, the step of establishing an IPv4 communication tunnel between a sending end corresponding to the source IP address and a receiving end corresponding to the target IP address includes:

[0190] Determine a target tunnel mode among multiple tunnel modes according to at least one of a traffic type, a security requirement, and a performance requirement corresponding to the IPv6 data packet;

[0191] The target tunnel mode is adopted to establish an IPv4 communication tunnel between the sender corresponding to the source IP address and the receiver corresponding to the target IP address.

[0192] Optionally, the tunnel mode includes at least one of an IPsec tunnel, a GRE tunnel, and an MPLS tunnel.

[0193] Optionally, the step of determining a target tunnel mode from a plurality of tunnel modes according to at least one of a traffic type, a security requirement, and a performance requirement corresponding to the IPv6 data packet includes:

[0194] Based on the computing resource consumption of the tunnel mode and the bandwidth of the data transmission environment, a tunnel mode matching the traffic type and performance requirements is selected from multiple tunnel modes as the target tunnel mode; and / or,

[0195] Based on the security of the data transmission environment, a tunnel mode that matches the security requirements is selected from multiple tunnel modes as the target tunnel mode.

[0196] Optionally, the step of establishing an IPv4 communication tunnel between a sending end corresponding to the source IP address and a receiving end corresponding to the target IP address includes:

[0197] Based on the unique identifier of the receiving device, find the temporary IPv4 address corresponding to the receiving device;

[0198] Based on the temporary IPv4 address, an IPv4 communication tunnel is established between a sending end corresponding to the source IP address and a receiving end corresponding to the target IP address.

[0199] Optionally, the method further comprises:

[0200] During data transmission, the traffic is analyzed to identify whether there are security risks in the data transmission process.

[0201] The communication bus mentioned in the above terminal can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The communication bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus.

[0202] The communication interface is used for communication between the above terminal and other devices.

[0203] The memory may include a random access memory (RAM) or a non-volatile memory, such as at least one disk memory. Optionally, the memory may also be at least one storage device located away from the aforementioned processor.

[0204] The above-mentioned processor can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components.

[0205] like Figure 5 As shown, in another embodiment provided by the present invention, a computer-readable storage medium 501 is also provided, in which instructions are stored. When the computer-readable storage medium is run on a computer, the computer executes the data transmission method described in the above embodiment.

[0206] In another embodiment of the present invention, a computer program product including instructions is provided. When the computer program product is run on a computer, the computer executes the data transmission method described in the above embodiment.

[0207] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented by software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the process or function described in the embodiment of the present invention is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions can be transmitted from a website site, computer, server or data center to another website site, computer, server or data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that includes one or more available media integrated. The available medium can be a magnetic medium (e.g., a floppy disk, a hard disk, a tape), an optical medium (e.g., a DVD), or a semiconductor medium (e.g., a solid-state hard disk Solid State Disk (SSD)), etc.

[0208] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0209] Each embodiment in this specification is described in a related manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0210] The above description is only a preferred embodiment of the present invention and is not intended to limit the protection scope of the present invention. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention are included in the protection scope of the present invention.

Claims

1. A data transmission method, characterized in that: include: Obfuscating the source IP address and the destination IP address represented in the IPv6 form in the IPv6 data packet respectively, to obtain an obfuscated IPv6 data packet including the obfuscated source IP address and the obfuscated destination IP address; Establishing an IPv4 communication tunnel between a sending end corresponding to the source IP address and a receiving end corresponding to the target IP address; The obfuscated IPv6 data packet is sent from the sending end to the receiving end using the IPv4 communication tunnel.

2. The method according to claim 1, characterized in that The step of respectively obfuscating the source IP address and the target IP address represented in the IPv6 form in the IPv6 data packet to obtain an obfuscated IPv6 data packet containing the obfuscated source IP address and the obfuscated target IP address comprises: Determining a target obfuscation strategy from among a plurality of obfuscation strategies according to at least one of a traffic type, a security requirement, and a performance requirement corresponding to the IPv6 data packet; The target obfuscation strategy is adopted to obfuscate the source IP address and the target IP address expressed in IPv6 format in the IPv6 data packet respectively, so as to obtain an obfuscated IPv6 data packet including the obfuscated source IP address and the obfuscated target IP address.

3. The method according to claim 2, characterized in that The obfuscation strategy includes at least one of random replacement, encryption obfuscation or dynamic obfuscation.

4. The method according to claim 2 or 3, characterized in that: The step of determining a target obfuscation strategy from a plurality of obfuscation strategies according to at least one of a traffic type, a security requirement, and a performance requirement corresponding to the IPv6 data packet comprises: Based on the computing resource consumption of the obfuscation strategy and the bandwidth of the data transmission environment, selecting an obfuscation strategy that matches the traffic type and the performance requirement from the multiple obfuscation strategies as a target obfuscation strategy; and / or, Based on the security of the data transmission environment, an obfuscation strategy matching the security requirement is selected from the multiple obfuscation strategies as a target obfuscation strategy.

5. The method according to claim 1, characterized in that The step of establishing an IPv4 communication tunnel between a sending end corresponding to the source IP address and a receiving end corresponding to the target IP address comprises: Determining a target tunnel mode among multiple tunnel modes according to at least one of a traffic type, a security requirement, and a performance requirement corresponding to the IPv6 data packet; The target tunnel mode is adopted to establish an IPv4 communication tunnel between the sending end corresponding to the source IP address and the receiving end corresponding to the target IP address.

6. The method according to claim 5, characterized in that The tunnel mode includes at least one of an IPsec tunnel, a GRE tunnel, and an MPLS tunnel.

7. The method according to claim 5 or 6, characterized in that: The step of determining a target tunnel mode from a plurality of tunnel modes according to at least one of a traffic type, a security requirement, and a performance requirement corresponding to the IPv6 data packet comprises: Based on the computing resource consumption of the tunnel mode and the bandwidth of the data transmission environment, a tunnel mode matching the traffic type and the performance requirement is selected from multiple tunnel modes as a target tunnel mode; and / or, Based on the security of the data transmission environment, a tunnel mode matching the security requirement is selected from multiple tunnel modes as a target tunnel mode.

8. The method according to claim 1, characterized in that The step of establishing an IPv4 communication tunnel between a sending end corresponding to the source IP address and a receiving end corresponding to the target IP address comprises: Based on the unique device identifier of the receiving end, searching for a temporary IPv4 address corresponding to the receiving end; Based on the temporary IPv4 address, an IPv4 communication tunnel is established between a sending end corresponding to the source IP address and a receiving end corresponding to the target IP address.

9. The method according to claim 1, characterized in that: The method further comprises: During data transmission, the traffic is analyzed to identify whether there are security risks in the data transmission process.

10. A data transmission device, characterized in that: include: The obfuscation module is used to respectively obfuscate the source IP address and the target IP address represented in the IPv6 form in the IPv6 data packet to obtain an obfuscated IPv6 data packet including the obfuscated source IP address and the obfuscated target IP address; A tunnel establishment module, used to establish an IPv4 communication tunnel between a sending end corresponding to the source IP address and a receiving end corresponding to the target IP address; A transmission module is used to use the IPv4 communication tunnel to send the obfuscated IPv6 data packet from the sending end to the receiving end.

11. An electronic device, characterized in that: It includes a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other through the communication bus; The memory is used to store computer programs; The processor is used to implement the method according to any one of claims 1 to 9 when executing the program stored in the memory.

12. A computer-readable medium having instructions stored thereon, which, when executed by one or more processors, cause the processors to perform the method according to any one of claims 1 to 9.

Images