A network data security transmission method and system

Abstract

The present invention relates to the field of digital information transmission technology, and in particular to a network data security transmission method and system, comprising: obtaining a user account password sequence in a network; determining the attack possibility of each user account password according to the password characteristics of each user account password in the user account password sequence; performing block calculation on the attack possibility of each user account password using a preset block strategy until the calculation result meets a preset error, and obtaining a user account password sequence after block calculation; and transmitting the user account password sequence after block calculation using a hash function. The present invention can reduce the transmission cost of user account passwords.

Description

Technical Field

[0001] The present invention relates to the technical field of digital information transmission, and in particular to a network data security transmission method and system. Background Art

[0002] Account numbers and passwords are the main means for users to authenticate their identities in network services. They ensure that only authorized users can access personal accounts and related information and services. As sensitive information of users, their security is directly related to the privacy and account security of users. If they are intercepted or stolen during transmission, hackers can use these passwords to perform illegal operations, resulting in user property losses and personal information leakage. Therefore, it is very important to ensure the secure transmission of all user account numbers and passwords in the network.

[0003] At present, hash verification is generally used to ensure the security of user account and password data in the network. Specifically, a hash function is used to generate a summary of the account and password of all users in the network, and the summary and data are compared to determine whether the data has been tampered with by an attack. However, due to the one-way nature and avalanche effect of the hash function, all user account and passwords need to be retransmitted once they do not match, which increases the transmission cost of user account and password. Summary of the invention

[0004] In order to solve the technical problem that all user accounts and passwords need to be retransmitted once there is a mismatch due to the unidirectionality and avalanche effect of the hash function, the purpose of the present invention is to provide a method and system for secure transmission of network data. The technical solution adopted is as follows:

[0005] Get the user account and password sequence in the network;

[0006] Determine the attack possibility of each user account password according to the password characteristics of each user account password in the user account password sequence;

[0007] The attack probability of each user account and password is calculated in blocks using a preset block strategy until the calculation result meets the preset error, and the user account and password sequence after block division is obtained;

[0008] The hash function is used to transmit the blocked user account password sequence.

[0009] Preferably, when the password feature includes password strength, determining the attack possibility of each user account password according to the password feature of each user account password in the user account password sequence includes:

[0010] Determine the password strength of each user account password based on the length of each user account password and the password character set of each user account password;

[0011] At least based on the password strength of each user account password, the possibility of attack on each user account password is determined.

[0012] Preferably, when the password feature also includes the historical account password of the user account password before the password is changed, the possibility of attack of each user account password is determined at least according to the password strength of each user account password, including:

[0013] Determine the password strength of each historical account password based on the length of each historical account password and the password character set of each historical account password;

[0014] According to the password strength of each historical account password and the password strength of each user account password, determine the single-dimensional attack possibility of each user account password;

[0015] The attack possibility of each user account password is determined based on at least a single-dimensional attack possibility of each user account password.

[0016] Preferably, the possibility of a single-dimensional attack on each user account password is determined based on the password strength of each historical account password and the password strength of each user account password, including:

[0017] The password strength of each historical account password is modified by using the changes of each user account password and its historical account password to obtain the historical influence coefficient of each user account password;

[0018] According to the historical influence coefficient of each user account password and the password strength of each user account password, the single-dimensional attack possibility of each user account password is determined.

[0019] Preferably, the method for determining the changes of each user account password and its historical account password includes:

[0020] According to the edit distance between each user account password and its historical account password and the time difference between each user account password and its historical account password, the change status of each user account password and its historical account password is determined.

[0021] Preferably, when the password feature further includes the IP address of the user account password, determining the attack possibility of each user account password at least according to the single-dimensional attack possibility of each user account password includes:

[0022] Determine u user accounts and passwords in the user account and password sequence that are close to the IP address of the Qth user account and password;

[0023] The single-dimensional attack possibilities of u user accounts and passwords are used to determine the spatial influence of the Q-th user account and password, and the multi-dimensional attack possibility of the Q-th user account and password is obtained, and the multi-dimensional attack possibility of the Q-th user account and password is determined as the attack possibility of the Q-th user account and password; wherein u and Q are positive integers.

[0024] Preferably, the attack probability of each user account and password is calculated in blocks using a preset block strategy until the calculation result meets the preset error, and the user account and password sequence after block is obtained, including:

[0025] When the difference between the expected sum of the attack possibilities of the first k blocks among the m blocks and the sum of the attack possibilities of the user account and password corresponding to the first k blocks satisfies the preset error, a user account and password sequence divided into m blocks is obtained; wherein m and k are positive integers and k is not greater than m.

[0026] Preferably, the method for determining the expected sum of the attack probabilities of the first k blocks among the m blocks includes:

[0027] Calculate the ratio of the sum of the attack possibilities of each user account and password to m to get the expected average value;

[0028] Multiplying k by the expected average value obtains the expected sum of the attack probabilities of the first k blocks among the m blocks.

[0029] Preferably, the block-wise user account and password sequence is transmitted using a hash function, including:

[0030] Use the hash function to calculate each block and get the hash value corresponding to each block;

[0031] The hash value corresponding to each block is used to transmit the user account password sequence after block division.

[0032] The present invention also provides a network data security transmission system, comprising:

[0033] An acquisition module is used to obtain the user account and password sequence in the network;

[0034] An attack possibility calculation module, used to determine the attack possibility of each user account password according to the password characteristics of each user account password in the user account password sequence;

[0035] A processing module is used to calculate the attack possibility of each user account and password by block by block using a preset block strategy until the calculation result meets the preset error, and obtain the user account and password sequence after block;

[0036] The transmission module is used to transmit the divided user account password sequence using a hash function.

[0037] The present invention has the following beneficial effects:

[0038] Obtain a user account password sequence in the network; determine the attack possibility of each user account password according to the password characteristics of each user account password in the user account password sequence; use a preset block strategy to calculate the attack possibility of each user account password in blocks until the calculation result meets the preset error, and obtain the user account password sequence after block; use a hash function to transmit the user account password sequence after block. In this way, the attack possibility of each user account password is determined by the password characteristics, and then the attack possibility of each user account password is processed in blocks according to the preset block strategy. Even if the hash value does not match during data transmission, there is no need to retransmit all user account passwords, which reduces the problem of excessively high transportation costs caused by the unidirectionality and avalanche problem of the hash function, thereby reducing the transmission cost of user account passwords. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] In order to more clearly illustrate the technical solutions and advantages in the embodiments of the present invention or the prior art, the drawings required for use in the embodiments or the prior art descriptions are briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0040] Figure 1 A method flow chart of a network data security transmission method provided by an embodiment of the present invention;

[0041] Figure 2 A specific method flow chart of step S120 of a method for securely transmitting network data provided by one embodiment of the present invention;

[0042] Figure 3 A specific method flow chart of step S220 of a method for securely transmitting network data provided by one embodiment of the present invention;

[0043] Figure 4 A specific method flow chart of step S330 of a method for securely transmitting network data provided by one embodiment of the present invention;

[0044] Figure 5 A schematic diagram of block division in a network data security transmission method provided by an embodiment of the present invention;

[0045] Figure 6A schematic diagram of a network data security transmission system provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0046] In order to further explain the technical means and effects adopted by the present invention to achieve the predetermined invention purpose, the following is a detailed description of a network data security transmission method and system proposed by the present invention, its specific implementation method, structure, features and effects, in conjunction with the accompanying drawings and preferred embodiments. In the following description, different "one embodiment" or "another embodiment" does not necessarily refer to the same embodiment. In addition, specific features, structures or characteristics in one or more embodiments may be combined in any suitable form.

[0047] Unless defined otherwise, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs.

[0048] A specific scheme of a network data secure transmission method provided by the present invention is described in detail below with reference to the accompanying drawings.

[0049] See also Figure 1 , which shows a method flow chart of a network data security transmission method provided by an embodiment of the present invention. In an exemplary embodiment, a network data security transmission method is provided, comprising:

[0050] S110, obtaining a user account and password sequence in the network;

[0051] S120, determining the attack possibility of each user account password according to the password characteristics of each user account password in the user account password sequence;

[0052] S130, using a preset block strategy to calculate the attack probability of each user account and password in blocks until the calculation result meets the preset error, and obtain a user account and password sequence after block division;

[0053] S140. Transmit the divided user account and password sequence using a hash function.

[0054] In step S110, illustratively, all user accounts and passwords that have appeared in a set time period (the set time period can be a custom value) in the network are obtained as the user account and password used for transmission. The user account and password are sorted according to the timestamp information to obtain a user account and password sequence to ensure that the data is arranged in order.

[0055] In this embodiment, a network packet capture tool such as Wireshark is used to capture network data packets (Wireshark can monitor the local interface and capture network communication data, including information such as account passwords). In Wireshark, all user account passwords that have appeared in a set time period can be captured by filtering specific protocols (such as PPP PAP, Password Authentication Protocol). And record the user's time, that is, use the current timestamp to record the login time. The user's login IP address can also be recorded, that is, use $_SERVER['REMOTE_ADDR'] to obtain the user's IP address. Then store the captured user account password, IP address and timestamp information in the database, and create a corresponding table structure in the database, including fields such as account, password, IP address and timestamp.

[0056] In step S120, illustratively, the password features include: password strength, historical account passwords of the user account password before the password is changed, and the IP address of the user account password.

[0057] Alternatively, if Figure 2 As shown, in the case where the password feature includes password strength, step S120 includes:

[0058] S210, determining the password strength of each user account password according to the length of each user account password and the password character set of each user account password;

[0059] S220: Determine the possibility of attack on each user account password at least based on the password strength of each user account password.

[0060] Specifically, for each user account password, first look at itself. If the password strength is low, it is more vulnerable to brute force cracking, dictionary attacks and other attack methods, so the single point is more vulnerable. Therefore, password strength is an effective feature for judging the possibility of being attacked. In this embodiment, information entropy is generally used to represent password strength. The higher the information entropy, the higher the security of the password. The lower the information entropy, the more vulnerable it is to brute force cracking, dictionary attacks and other attack methods. Information entropy calculation formula: H = L × , H is the entropy of the password, L is the length of the password, and N is the size of the password character set.

[0061] Therefore, the possibility of a user account password being attacked is inversely proportional to the information entropy (the inverse of exp is used to represent this inverse proportional relationship). The calculation formula for the inverse proportional relationship of the password strength after normalization based on the maximum and minimum values ​​is constructed:

[0062]

[0063] in, represents the password strength of the Qth user account password, exp represents an exponential function with the natural constant e as the base, Indicates the length of the Qth user account password, Indicates the size of the password character set of the Qth user account password. Indicates all user accounts and passwords The smallest value, Indicates all user accounts and passwords The largest value.

[0064] In this way, the password strength of each user account password can be directly used as the possibility of attack of each user account password.

[0065] Furthermore, if Figure 3 As shown, in the case where the password feature also includes the historical account password of the user account password before the password is changed, step S220 includes:

[0066] S310, determining the password strength of each historical account password according to the length of each historical account password and the password character set of each historical account password;

[0067] S320, determining the single-dimensional attack possibility of each user account password according to the password strength of each historical account password and the password strength of each user account password;

[0068] S330: Determine the attack possibility of each user account and password at least based on the single-dimensional attack possibility of each user account and password.

[0069] For example, from the perspective of account password changes in the time dimension, for the last change, the closer the distance and the more similar the passwords, the greater the impact of the last password on the time dimension on the current password due to the continuity of the cracking strategy. If the last password is also easy to attack when the impact is large, then the impact of this weak password may be extended in the time dimension, and the vulnerability to attack in the time dimension will be higher. Therefore, it is necessary to obtain the historical account passwords of each user account password before the password change. In this embodiment, the closest password change in the time dimension is selected as the historical account password. The historical account passwords are all calculated using the above-mentioned password strength calculation formula. Specifically, the Qth user account password is compared with the previous historical account password. Multiply them together to get the single-dimensional attack probability of the Q-th user account password.

[0070] Preferably, step S320 includes: using the changes of each user account password and its historical account password to correct the password strength of each historical account password, and obtain the historical influence coefficient of each user account password;

[0071] According to the historical influence coefficient of each user account password and the password strength of each user account password, the single-dimensional attack possibility of each user account password is determined.

[0072] For example, if the password changes are similar, the attacker can use the information of the previous password to infer the next password. This strategy is based on the continuity of password changes, that is, assuming that the new version of the password may be similar to the old version or follow a pattern in some aspects. Therefore, it is necessary to first determine the time-dimensional impact of the last password change on the Q-th user account password, that is, the changes of the user account password and its historical account password.

[0073] Optionally, the method for determining the change status of each user account password and its historical account password includes: determining the change status of each user account password and its historical account password based on the editing distance between each user account password and its historical account password and the time difference between each user account password and its historical account password.

[0074] Specifically, the edit distance is the minimum number of insertion, deletion, and replacement operations required to convert one password into another. The formula for the transformation of a user's account password and its historical account password is as follows:

[0075]

[0076] in, represents the changes of the user account password and its historical account password (i.e., the time-dimensional impact of the last password change on the Q-th user account password), f represents the maximum and minimum value normalization function, exp represents the exponential function with the natural constant e as the base, Represents historical account passwords in the time dimension The edit distance with the Qth user account password, Indicates the timestamp corresponding to the Qth user account and password. Represents historical account passwords in the time dimension The corresponding timestamp.

[0077] Due to the continuity of the cracking strategy, if the last password in the time dimension has a greater impact on the current password, the last password is also easy to attack, then the impact of this weak password may be extended in the time dimension, and the susceptibility to attack in the time dimension will be higher. Therefore, the following formula is constructed to determine the single-dimensional attack possibility of the user account password Q:

[0078]

[0079] in, Indicates the single-dimensional attack possibility of the Qth user account and password, Indicates the Qth user account password and its historical account passwords The transformation of Indicates historical account password Password strength, Indicates the password strength of the Qth user account password. Represents the historical influence coefficient of the Qth user account and password.

[0080] In this way, the above-calculated single-dimensional attack possibility of the user account password can be directly used as the attack possibility of the user account password. Considering the attack possibility of the user account password from multiple dimensions such as time and password strength improves the accuracy of the calculation result of the attack possibility of the user account password.

[0081] Furthermore, if Figure 4 As shown, in the case where the password feature also includes the IP address of the user account password, step S330 includes:

[0082] S410, determining u user accounts and passwords in the user account and password sequence that are close to the IP address of the Qth user account and password;

[0083] S420. Determine the spatial influence of the Qth user account and password using the single-dimensional attack possibilities of the u user accounts and passwords, obtain the multi-dimensional attack possibilities of the Qth user account and password, and determine the multi-dimensional attack possibilities of the Qth user account and password as the attack possibilities of the Qth user account and password.

[0084] For example, since users with similar IP addresses may be in the same social circle or organization, it may make it easier for attackers to obtain sensitive information through social engineering. Therefore, if the u accounts and passwords with the closest IP addresses are more vulnerable to attack, the vulnerability of each user's account and password will also be higher. Therefore, the account and password corresponding to the u IP addresses with the closest IP distance to the account and password D are first calculated. .

[0085] Specifically, convert the IP address of each user account password into a 32-bit integer. For example, convert the IP address 192.168.1.1 into an integer: . Calculate the integer value difference of each IP address. The calculated integer value difference is screened according to the preset distance threshold, and u user account passwords whose integer value difference is less than the preset distance threshold are selected as the user account passwords with a close distance to the IP address of the Qth user account password. Among them, the preset distance threshold can be set according to actual needs and is not limited here.

[0086] The calculation formula for the attack probability of the Qth user account password is as follows:

[0087]

[0088] in, It indicates the multi-dimensional attack possibility of the Q-th user account and password. u indicates that u accounts and passwords with the IP addresses closest to the Q-th user account and password are selected. It indicates the single-dimensional attack possibility of the i-th user account and password among the u accounts and passwords that are closest to the IP address of the Q-th user account and password, Indicates the single-dimensional attack possibility of the Q-th user account and password.

[0089] In this way, the calculated multi-dimensional attack possibility is determined as the attack possibility of the Qth user account and password. The possibility of the user account and password being attacked is considered from multiple dimensions of time, space, and password strength, thereby improving the accuracy of the calculation result of the attack possibility of the user account and password.

[0090] In step S130, the preset block strategy is to merge the user account passwords with low attack possibilities into larger parts, so that the sorted n user account password data are divided into m blocks, so as to reduce the cost of retransmission. Specifically, if the attack possibilities of adjacent user account passwords are all lower than the preset threshold, they are merged. The preset threshold is set according to the actual situation and is not limited here.

[0091] Preferably, step S130 includes: obtaining a user account password sequence divided into m blocks when the difference between the expected sum of the attack possibilities of the first k blocks among the m blocks and the sum of the attack possibilities of the user account passwords corresponding to the first k blocks satisfies a preset error; wherein m and k are positive integers and k is not greater than m.

[0092] Optionally, the method for determining the expected sum of the attack possibilities of the first k blocks among the m blocks includes: calculating the ratio of the sum of the attack possibilities of each user account password to m to obtain an expected average value; multiplying k by the expected average value to obtain the expected sum of the attack possibilities of the first k blocks among the m blocks.

[0093] Specifically, in order to determine the dividing point of the blocks of the user account password sequence, the following equation is constructed to determine the corresponding function when dividing the kth block:

[0094]

[0095] in, Indicates the user account and password sequence number at the end of the first k blocks divided. Indicates the multi-dimensional vulnerability of the g-th user account password in the sequence number, represents the error, n represents that there are n user account passwords in the user account password sequence, and m represents that it is planned to be divided into m blocks. Indicates the possibility of attack on the j-th user account password in the sequence number. represents the expected average value of each block, Represents the expected sum of the attack probabilities of the first k blocks.

[0096] It can be understood that the above equation is used to obtain To meet the preset error, in this embodiment, Minimum, we can get , divide the user account and password sequence number corresponding to the kth block. Figure 5 As shown, by substituting 1, 2…m into k respectively, all n user account passwords can be divided into m blocks according to their attack possibilities.

[0097] In step S140, illustratively, a hash function is an algorithm that accepts input data of any size and converts it into an output string of a fixed size through a series of complex operations. This output string is usually called a hash value or a hash code. Hash functions include MD5 (Message-Digest Algorithm 5), SHA-1 (Secure Hash Algorithm 1), SHA-256 (Secure Hash Algorithm 256), etc.

[0098] Preferably, step S140 includes: using a hash function to calculate each block to obtain a hash value corresponding to each block; and using the hash value corresponding to each block to transmit the user account password sequence after the block.

[0099] In this embodiment, before each block is transmitted, the sender uses a hash function (such as SHA-256) to perform hash calculation on all user account password data to be transmitted in this block to generate a hash value of fixed length. This hash value is attached to the block, or the hash value is transmitted as a separate message digest. The sender sends all user account passwords and corresponding hash digests of this block to the receiver through the network or other transmission media. The receiver uses the same hash function (such as SHA-256) to calculate the hash value of the block, and compares the calculated hash value with the received hash digest. If the two hash values ​​match, it means that the data has not been tampered with during the transmission process, and the receiver can trust the integrity of the data and continue to process the data. If they do not match, it means that the data may be tampered with or damaged. The receiver can refuse to process the data and request to change the password and retransmit it.

[0100] In this way, each block of user account and password is securely transmitted, preventing data from being intercepted or tampered with during transmission, protecting the confidentiality and integrity of user account and password, reducing the risk of data leakage, and enhancing the overall security of the system. Ultimately, ensuring the secure transmission of data also enhances user trust in the system.

[0101] In the technical solution of the present invention, a user account password sequence in the network is obtained; the possibility of attack of each user account password is determined according to the password characteristics of each user account password in the user account password sequence; the possibility of attack of each user account password is calculated in blocks using a preset block strategy until the calculation result meets the preset error, and the user account password sequence after block is obtained; the user account password sequence after block is transmitted using a hash function. In this way, the possibility of attack of each user account password is determined by the password characteristics, and then the possibility of attack of each user account password is processed in blocks according to the preset block strategy combined with the possibility of attack of each user account password. Even if the hash value does not match during data transmission, there is no need to retransmit all user account passwords, which reduces the problem of excessively high transportation costs caused by the unidirectionality and avalanche problem of the hash function, thereby reducing the transmission cost of user account passwords.

[0102] See also Figure 6 , which shows a schematic diagram of a network data security transmission system provided by an embodiment of the present invention. In an exemplary embodiment, a network data security transmission system is provided, including:

[0103] The acquisition module 610 is used to acquire the user account password sequence in the network;

[0104] The attack possibility calculation module 620 is used to determine the attack possibility of each user account password according to the password characteristics of each user account password in the user account password sequence;

[0105] Processing module 630, used to calculate the attack possibility of each user account and password by block by block using a preset block strategy until the calculation result meets the preset error, and obtain the user account and password sequence after block;

[0106] The transmission module 640 is used to transmit the divided user account password sequence using a hash function.

[0107] The network data security transmission system provided in this embodiment belongs to the same application concept as the network data security transmission method provided in the above embodiment of the present invention, and can execute the network data security transmission method provided in any of the above embodiments of the present invention, and has the corresponding functional modules and beneficial effects of executing a network data security transmission method. For technical details not fully described in this embodiment, please refer to the specific processing content of the network data security transmission method provided in the above embodiment of the present invention, and will not be repeated here.

[0108] In other embodiments, a device is also provided, including a memory and a processor. The memory is used to store executable program code, and the processor is used to call and run the executable program code from the memory, so that the device executes the above-mentioned network data security transmission method. The device can be a chip, a component or a module, and the chip may include a connected processor and a memory; wherein the memory is used to store instructions, and when the processor calls and executes the instructions, the chip can execute a network data security transmission method provided in the above embodiment.

[0109] In other embodiments, a computer program product is also provided. When the computer program product is run on a computer, the computer is enabled to execute the above-mentioned related steps to implement a network data security transmission method provided in the above-mentioned embodiment.

[0110] In other embodiments, a computer-readable storage medium is also provided, in which a computer program code is stored. When the computer program code runs on a computer, the computer executes the above-mentioned related method steps to implement a network data security transmission method provided in the above-mentioned embodiment.

[0111] Among them, the provided systems, devices, computer program products, and computer-readable storage media are all used to execute the corresponding methods provided above. Therefore, the beneficial effects that can be achieved can refer to the beneficial effects in the corresponding methods provided above and will not be repeated here.

[0112] It should be noted that the sequence of the above embodiments of the present invention is only for description and does not represent the advantages and disadvantages of the embodiments. The processes depicted in the accompanying drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0113] The various embodiments in this specification are described in a progressive manner, and the same or similar parts between the various embodiments can be referenced to each other, and each embodiment focuses on the differences from other embodiments.

Claims

1. A network data security transmission method, characterized in that the method include: Get the user account and password sequence in the network; Determine the attack possibility of each user account password according to the password characteristics of each user account password in the user account password sequence; The attack probability of each user account and password is calculated in blocks using a preset block strategy until the calculation result meets the preset error, and the user account and password sequence after block division is obtained; Use hash functions to transmit the divided user account and password sequences; In the case where the password characteristics include password strength, the possibility of attack of each user account password is determined according to the password characteristics of each user account password in the user account password sequence, including: Determine the password strength of each user account password based on the length of each user account password and the password character set of each user account password; Determine the attack potential of each user account password based at least on the password strength of each user account password; In the case where the password feature also includes the historical account password of the user account password before the password is changed, determining the attack possibility of each user account password at least based on the password strength of each user account password includes: Determine the password strength of each historical account password based on the length of each historical account password and the password character set of each historical account password; According to the password strength of each historical account password and the password strength of each user account password, determine the single-dimensional attack possibility of each user account password; Determine the attack probability of each user account password based on at least a single-dimensional attack probability of each user account password; In the case where the password feature also includes the IP address of the user account password, determining the attack probability of each user account password based on at least the single-dimensional attack probability of each user account password includes: Determine u user accounts and passwords in the user account and password sequence that are close to the IP address of the Qth user account and password; The single-dimensional attack possibilities of u user accounts and passwords are used to determine the spatial influence of the Q-th user account and password, and the multi-dimensional attack possibility of the Q-th user account and password is obtained, and the multi-dimensional attack possibility of the Q-th user account and password is determined as the attack possibility of the Q-th user account and password; wherein u and Q are positive integers.

2. A network data security transmission method according to claim 1, characterized in that: Based on the password strength of each historical account password and each user account password, determine the single-dimensional attack possibility of each user account password, including: The password strength of each historical account password is modified by using the changes of each user account password and its historical account password to obtain the historical influence coefficient of each user account password; According to the historical influence coefficient of each user account password and the password strength of each user account password, the single-dimensional attack possibility of each user account password is determined.

3. A network data security transmission method according to claim 2, characterized in that: Methods for determining changes in each user account password and its historical account password include: According to the edit distance between each user account password and its historical account password and the time difference between each user account password and its historical account password, the change status of each user account password and its historical account password is determined.

4. A network data security transmission method according to claim 1, characterized in that: The attack probability of each user account and password is calculated in blocks using the preset block strategy until the calculation result meets the preset error, and the user account and password sequence after block is obtained, including: When the difference between the expected sum of the attack possibilities of the first k blocks among the m blocks and the sum of the attack possibilities of the user account and password corresponding to the first k blocks satisfies the preset error, a user account and password sequence divided into m blocks is obtained; wherein m and k are positive integers and k is not greater than m.

5. A network data security transmission method according to claim 4, characterized in that: The method for determining the expected sum of the attack possibilities of the first k blocks among the m blocks includes: Calculate the ratio of the sum of the attack possibilities of each user account and password to m to get the expected average value; Multiplying k by the expected average value obtains the expected sum of the attack probabilities of the first k blocks among the m blocks.

6. A network data secure transmission method according to any one of claims 1 to 5, characterized in that: The block-based user account and password sequence is transmitted using a hash function, including: Use the hash function to calculate each block and get the hash value corresponding to each block; The hash value corresponding to each block is used to transmit the user account password sequence after block division.

7. A network data security transmission system, characterized in that: include: An acquisition module is used to obtain the user account and password sequence in the network; An attack possibility calculation module, used to determine the attack possibility of each user account password according to the password characteristics of each user account password in the user account password sequence; A processing module is used to calculate the attack possibility of each user account and password by block by block using a preset block strategy until the calculation result meets the preset error, and obtain the user account and password sequence after block; A transmission module, used to transmit the divided user account password sequence using a hash function; In the case where the password characteristics include password strength, the possibility of attack of each user account password is determined according to the password characteristics of each user account password in the user account password sequence, including: Determine the password strength of each user account password based on the length of each user account password and the password character set of each user account password; Determine the attack potential of each user account password based at least on the password strength of each user account password; In the case where the password feature also includes the historical account password of the user account password before the password is changed, determining the attack possibility of each user account password at least based on the password strength of each user account password includes: Determine the password strength of each historical account password based on the length of each historical account password and the password character set of each historical account password; According to the password strength of each historical account password and the password strength of each user account password, determine the single-dimensional attack possibility of each user account password; Determine the attack probability of each user account password based on at least a single-dimensional attack probability of each user account password; In the case where the password feature also includes the IP address of the user account password, determining the attack probability of each user account password based on at least the single-dimensional attack probability of each user account password includes: Determine u user accounts and passwords in the user account and password sequence that are close to the IP address of the Qth user account and password; The single-dimensional attack possibilities of u user accounts and passwords are used to determine the spatial influence of the Q-th user account and password, and the multi-dimensional attack possibility of the Q-th user account and password is obtained, and the multi-dimensional attack possibility of the Q-th user account and password is determined as the attack possibility of the Q-th user account and password; wherein u and Q are positive integers.

Images