Information interaction system based on network security

Abstract

The invention discloses an information interaction system based on network security, and relates to the technical field of information security interaction, and the system comprises an interaction center which is connected with a data collection module, a data matching module, a data processing module and an inspection module. Sending data and receiving data of two interaction parties are collected through a data collection module, a data matching module is used for matching a corresponding uploading channel according to the obtained sending data to obtain to-be-sent information, and the obtained to-be-sent information is processed through a data processing module to obtain a ciphertext field; decrypting the obtained ciphertext field through an inspection module to obtain a decrypted field, and verifying the decrypted field; the security and integrity of interaction information are greatly improved, the consistency of identities of two interaction parties is effectively ensured, and the leakage of privacy information in the interaction process is prevented, so that the organization and individuals are protected from potential loss.

Description

Technical Field

[0001] The present invention relates to the technical field of information security interaction, and in particular to an information interaction system based on network security. Background Art

[0002] With the popularization and development of the Internet, information security issues have attracted more and more attention. In the network environment, information security mainly involves the confidentiality, integrity and availability of data. In order to ensure these security attributes of information, people have proposed many security technologies and protocols, such as encryption algorithms, identity authentication, access control, etc. However, these technologies and protocols often require complex calculations and interactions, which will affect the efficiency and convenience of information interaction. Therefore, designing an efficient and secure information interaction system has important theoretical and practical significance.

[0003] How to use information security interaction technology to collect the interaction data generated by the two parties, match the sent data with the corresponding upload channel, obtain the information to be sent, encrypt and decrypt the information to be sent, and verify the decrypted data is the problem we need to solve; for this purpose, an information interaction system based on network security is now provided. Summary of the invention

[0004] The purpose of the present invention can be achieved through the following technical solutions: An information interaction system based on network security comprises an interaction center, wherein the interaction center is connected with a data collection module, a data matching module, a data processing module and a verification module; The data collection module is used to collect interaction data between two interacting parties, the two interacting parties include a sending object and a receiving object, and the interaction data includes sending data and receiving data; The process of the data collection module collecting the interaction data of the two parties includes: Setting a queue unit, wherein the queue unit is used to collect the sending data and the sending object corresponding to the sending data; Register accounts for the sender and the receiver, review the registered accounts through the interaction center, and generate corresponding login accounts for the approved registered accounts; Splitting the obtained transmission data to obtain element data, combining the element data contained in each transmission data to obtain an initial interaction queue of each transmission data, wherein the initial interaction queue includes a plurality of element data, marking the first element data in the initial interaction queue as a head of the queue, and marking the last element data in the initial interaction queue as a tail of the queue; Set an add unit and a get unit, wherein the add unit is used to add the initial interaction queue to the queue unit, and the get unit is used to obtain the initial interaction queue stored in the queue unit; Associating the obtained sending data with the corresponding sending object, inserting the login account of the receiving object before the end of the initial interaction queue, and marking the initial interaction queue into which the login account is inserted as an interaction queue; Capturing the sending data associated with the sending object, encapsulating the sending object and the sending data, obtaining a data tuple, and adding the obtained data tuple to the interaction queue of the queue unit; Construct a user object based on the obtained sending data, simulate interaction with the sending data, obtain user data, and capture the obtained user data into the interaction queue; The user data in the interaction queue is obtained, and the obtained user data is marked as interaction data.

[0005] The process of the data matching module for matching the sending data with the corresponding upload channel includes: According to a number of element data in the interaction queue corresponding to the obtained interaction data, feature extraction is performed on the element data to obtain feature elements of the interaction queue; Associating the obtained characteristic element with the head of the interaction queue, and marking the associated head of the interaction queue as an identification element; An upload channel is set according to the obtained characteristic elements, and a grab point is set at the channel entrance of the upload channel, wherein the grab point is set with a boundary feature; The boundary features of the obtained grasping points are matched with the identification elements of the interaction queue, the interaction queue is uploaded to the upload channel with successful matching, and the interaction queue in the upload channel is marked as waiting information.

[0006] The process of the data processing module processing the obtained information to be sent includes: Performing character string conversion on the obtained information to be sent to obtain a binary byte sequence, and marking the obtained binary byte sequence as initial data; Shift the obtained initial data right by a positions to obtain right-shifted data; Obtaining a moving difference value according to the obtained right-shifted data and the initial data; The obtained movement difference is shifted rightward by a bits to obtain the end point movement data, and the obtained end point movement data is encrypted.

[0007] The process of encrypting data in motion at the endpoint includes: Set two different prime numbers and mark the obtained prime numbers respectively; Obtain a public modulus and Euler function according to the obtained two different prime numbers; Select an integer e, e satisfies 1<e<Euler function and e is coprime with Euler function; Obtain the hidden modulus according to the obtained Euler function and the integer e; Obtain a public key and a private key according to the obtained public modulus, the integer e, and the hidden modulus; Obtain encrypted endpoint movement data according to the obtained endpoint movement data, the integer e, and the public modulus, and mark the obtained encrypted endpoint movement data as a ciphertext field; The login account of the receiving object is obtained through the interaction center, the login account of the interactive object is encrypted, the encrypted receiving account is obtained, and the encrypted receiving account is associated with the private key.

[0008] The inspection module includes a matching unit and a verification unit. The matching unit is used to match the ciphertext field with the corresponding receiving object. The verification unit is used to decrypt the matched ciphertext field, obtain the decrypted field, and verify the decrypted field.

[0009] The process of the matching unit matching the ciphertext field with the corresponding receiving object includes: Extract the ciphertext field, obtain the encrypted login password at the corresponding position of the ciphertext field, and mark the encrypted login password at the corresponding position of the ciphertext field as a ciphertext object; The obtained ciphertext object is compared with the encrypted receiving account. If they are consistent, the ciphertext field matches the corresponding receiving object successfully, the successfully matched ciphertext field is marked as a matching ciphertext field, and the matching ciphertext field is uploaded to the verification unit for verification; if they are inconsistent, the ciphertext field does not match the receiving object, the ciphertext field that does not match the receiving object is marked as an abnormal ciphertext field, and a warning message is generated based on the obtained abnormal ciphertext field, and the warning message is uploaded to the interaction center.

[0010] The verification process performed by the verification unit includes: Obtaining a private key associated with the matching ciphertext field, and obtaining a decrypted field based on the obtained private key and the matching ciphertext field; According to the obtained decrypted field, remove the login account corresponding to the position of the decrypted field to obtain the first destination movement data; Acquire received data of the receiving object, perform character string conversion on the received data to obtain a binary byte sequence, and mark the obtained binary byte sequence as second initial data; Shift the obtained second initial data rightward by a positions to obtain second right-shifted data; Obtain a second shift difference value according to the obtained second right-shifted data and the second initial data; Shift the obtained movement difference rightward by a positions to obtain the second end point movement data; The obtained first destination movement data and second destination movement data are compared. If they are consistent, the received data of the receiving object is correct. If they are inconsistent, the received data of the receiving object is wrong.

[0011] Compared with the prior art, the present invention has the following beneficial effects: by setting a queue unit to collect the sent data, the obtained sent data is split and combined to obtain an initial interaction queue, the login account of the sending object is inserted into the initial interaction queue to obtain an interaction queue, the captured sending object and the sent data are encapsulated to obtain a data tuple, and the data tuple is added to the interaction queue, and the obtained sending data is simulated for interaction by constructing a user object to obtain interaction data; The obtained interaction queue is feature extracted to obtain feature elements, the boundary features are matched with the identification elements of the interaction queue, and the successfully matched interaction queue is uploaded to the corresponding upload channel and recorded as the information to be sent; the information to be sent is data shifted and encrypted to obtain ciphertext data, and the ciphertext data is matched with the corresponding receiving object, the successfully matched ciphertext data is decrypted to obtain the decrypted data, and the decrypted data is verified; the security and integrity of the interactive information are greatly improved, a safe information interaction environment is provided, the consistency of the identities of the two parties to the interaction is effectively guaranteed, and the leakage of privacy information and data theft during the interaction are prevented, so as to protect organizations and individuals from potential losses. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0013] Figure 1 It is a schematic diagram of the present invention. DETAILED DESCRIPTION

[0014] The technical solution of the present invention will be clearly and completely described below in conjunction with the embodiments. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0015] like Figure 1 As shown, an information interaction system based on network security includes an interaction center, and the interaction center is connected to a data collection module, a data matching module, a data processing module and a verification module; The data collection module is used to collect interaction data between two interacting parties, the two interacting parties include a sending object and a receiving object, and the interaction data includes sending data and receiving data; Setting a queue unit, wherein the queue unit is used to collect the sending data and the sending object corresponding to the sending data; It should be further explained that, in the specific implementation process, the sender and the receiver register accounts, and the registered accounts are reviewed by the interaction center. For the registered accounts that pass the review, corresponding login accounts are generated according to the mobile phone numbers, where the mobile phone numbers are the mobile phone numbers associated with the ID cards of the sender or the receiver; Splitting the obtained transmission data to obtain element data, combining the element data contained in each transmission data to obtain an initial interaction queue of each transmission data, wherein the initial interaction queue includes a plurality of element data, marking the first element data in the initial interaction queue as the head of the queue, and marking the last element data as the tail of the queue; The obtained initial interaction queue is marked as i, where i=1, 2, 3, ..., m1, where m1 is a positive integer; It should be further explained that, in the specific implementation process, the initial interaction queue is represented as: head → [element 1, element 2, element 3, ..., element n] → tail, where n is a positive integer, and element data can only be accessed and deleted from the head of the queue, and new element data is always added to the tail of the initial interaction queue. In particular, when an element data is taken out, the element data behind it will move forward in sequence to fill the vacant position; Set an add unit and a get unit, wherein the add unit is used to add the initial interaction queue to the queue unit, and the get unit is used to obtain the initial interaction queue stored in the queue unit; It should be further explained that, in the specific implementation process, a queue safety lock is set, and the queue safety lock is used to ensure that when the add unit adds multiple sending data at the same time, it will not cause confusion of the sending data, and the multiple sending data are operated independently; after obtaining all the initial interaction queues, the sending data stored in the queue unit is cleared so that the sending data can be stored next time; Associating the obtained sending data with the corresponding sending object, inserting the login account of the receiving object before the end of the initial interaction queue, and marking the initial interaction queue into which the login account is inserted as an interaction queue; Capturing the sending data associated with the sending object, encapsulating the sending object and the sending data, obtaining a data tuple, and adding the obtained data tuple to the interaction queue of the queue unit; Construct a user object according to the obtained sending data, wherein the user object is used to simulate the interaction process; According to the obtained sending data of the user object, simulate the interaction with the obtained sending data to obtain the user data, and capture the obtained user data into the interaction queue; Obtain user data in the interaction queue, mark the obtained user data as interaction data, and print them one by one to display each user and the interaction data corresponding to the user; In this embodiment, the collection of interaction data is based on the code design of the InteractionQueue module, and the code is as follows: import threading # Define a thread-safe queue class for collecting interaction data class InteractionQueue: def __init__(self): self.queue = [] self.lock = threading.Lock() def add_data(self, data): with self.lock: self.queue.append(data) def get_data(self): with self.lock: data = self.queue self.queue = [] # Clear the queue return data # Define an interactive class class Interaction: def __init__(self, user): self.user = user def capture_data(self, data): interaction_queue.add_data((self.user, data)) # Create an interactive queue instance interaction_queue = InteractionQueue() # Define an interactive user class class User: def __init__(self, name): self.name = name def interact(self, data): interaction = Interaction(self.name) interaction.capture_data(data) # Create multiple user objects and interact with them user1 = User("Alice") user2 = User("Bob") user3 = User("Charlie") user1.interact("Hello") user2.interact("How are you?") user3.interact("Nice to meet you") # Get and print all data in the interaction queue data = interaction_queue.get_data() for user, message in data: print(f"{user}: {message}") The data matching module is used to match the corresponding upload channel according to the obtained sending data. The specific matching process includes: According to the obtained interaction data corresponding to the element data in the interaction queue, feature extraction is performed on the element data to obtain feature elements of the interaction queue. It should be further explained that in the specific implementation process, the feature elements include element length, keywords and the number of keywords. For example, the element length can be 10 fields or 5 fields, and the keywords can be name, mobile phone number, commodity profit, etc., and the number of corresponding keywords can be 1, 2, 3, etc.; The obtained characteristic element is associated with the head of the interactive queue, and the head of the associated queue is marked as an identification element, denoted as j, where j=1, 2, 3, ..., m2, where m2 is a positive integer; An upload channel is set according to the obtained characteristic elements, and a grab point is set at the channel entrance of the upload channel, wherein the grab point is used to match the characteristic elements according to the characteristic limits, wherein the characteristic limits include an element length threshold, a keyword setting, and a keyword number threshold; It should be further explained that, in a specific implementation process, the element length threshold may be greater than 10 fields, between 10 and 15 fields, etc., the keyword setting indicates that the corresponding keywords are set according to the upload channel for searching and matching the keywords of the feature elements, and the keyword number threshold indicates the number of keywords matched after the search; The boundary features of the obtained grasping points are matched with the identification elements of the interaction queue. If the match is successful, the interaction queue is uploaded to the corresponding matching upload channel, and the interaction queue in the upload channel is marked as pending information. If the match is unsuccessful, the interaction queue cannot be uploaded to the upload channel.

[0016] The data processing module is used to encode and encrypt the acquired information to be sent, and the specific processing process includes: The obtained information to be sent is converted into a character string to obtain a binary byte sequence, and the obtained binary byte sequence is marked as initial data, which is recorded as s. It should be further explained that in the specific implementation process, the converted binary byte sequence is a 256-bit binary sequence; The obtained initial data is shifted right by a bits to obtain right-shifted data, and the obtained right-shifted data is marked as y, wherein the number of bits a of the right shift is used to control the data length of the terminal moving data, and the maximum value of a is 256; It should be further explained that, in a specific implementation process, for example: the initial data is shifted right by one bit to obtain the first shifted data; the obtained initial data is shifted right by two bits to obtain the second shifted data; the obtained initial data is shifted right by 255 bits, that is, moved to the last bit, to obtain the right-shifted data; The moving difference is obtained according to the obtained right-shifted data and the initial data, and the obtained moving difference is marked as ∆s, where ∆s=ys; The obtained movement difference is shifted rightward by a positions to obtain the end point movement data, and the obtained end point movement data is marked as k; Set two different prime numbers and mark the obtained prime numbers as P1 and P2 respectively; Obtain a public modulus according to the obtained two different prime numbers, and mark the obtained public modulus as q, where q=P1*P2; The Euler function is obtained according to the two different prime numbers obtained, and the obtained Euler function is marked as ,in, =(P1-1)*(P2-1); Choose an integer e that satisfies the following conditions and is less than A positive integer, the conditions include: 1<e< And e and mutually prime; The hidden modulus is obtained according to the obtained Euler function and the integer e, and the obtained hidden modulus is marked as d, where d = , d represents the modulus of e The multiplicative inverse of ; According to the obtained public modulus, integer e and hidden modulus, the public key is (e, q) and the private key is (d, q); The terminal mobile data is encrypted according to the obtained terminal mobile data, integer e, and public modulus to obtain a ciphertext field, and the obtained ciphertext field is marked as c, where c= %q, % is the modulo operator, and z<q; Similarly, the login account of the receiving object is obtained through the interaction center, the login account of the interactive object is encrypted, the encrypted receiving account is obtained, and the encrypted receiving account is associated with the private key.

[0017] The verification module includes a matching unit and a verification unit, wherein the matching unit is used to match the ciphertext field with the corresponding receiving object, and the verification unit is used to decrypt the matched ciphertext field to obtain the decrypted field and verify the decrypted field; The process of the matching unit matching the ciphertext field with the corresponding receiving object includes: Extract the ciphertext field, obtain the encrypted login password at the corresponding position of the ciphertext field, and mark the encrypted login password at the corresponding position of the ciphertext field as a ciphertext object; The obtained ciphertext object is compared with the encrypted receiving account. If they are consistent, the ciphertext field and the corresponding receiving object are matched successfully, the successfully matched ciphertext field is marked as the matching ciphertext field, and the matching ciphertext field is uploaded to the verification unit for verification; if they are inconsistent, the ciphertext field is not matched successfully, the unmatched ciphertext field is marked as an abnormal ciphertext field, and a warning message is generated according to the obtained abnormal ciphertext field, and the warning message is uploaded to the interaction center, and the interactive double-sending is stopped through the interaction center for data sending.

[0018] The verification process performed by the verification unit includes: Obtain the private key associated with the matching ciphertext field, obtain the decrypted field based on the obtained private key and the matching ciphertext field, and mark the obtained decrypted field as k1, where k1= %q; Obtain the decrypted field, remove the login account corresponding to the interaction queue in the decrypted field, and obtain the first destination movement data; Obtaining the received data of the receiving object, performing character string conversion on the received data to obtain a binary byte sequence, and marking the obtained binary byte sequence as the second initial data, recorded as s'; Shift the obtained second initial data rightward by a bits to obtain second right-shifted data, and mark the obtained second right-shifted data as y'; Obtain a second shift difference value according to the obtained second right-shifted data and the second initial data, and mark the obtained second shift difference value as ∆s', where ∆s=y'-s'; Shift the obtained movement difference rightward by a bits to obtain the second end point movement data, and mark the obtained second end point movement data as k'; Comparing the obtained first destination movement data with the second destination movement data, if they are consistent, the received data of the receiving object is correct, if they are inconsistent, the received data of the receiving object is wrong; The sending object corresponding to the erroneous received data is authenticated, and the public key and private key are regenerated to encrypt and decrypt the sending data, and the verification process of the above verification unit is repeated.

[0019] The preferred embodiments of the present invention disclosed above are only used to help explain the present invention. The preferred embodiments do not describe all the details in detail, nor do they limit the invention to only specific implementation methods. Obviously, many modifications and changes can be made according to the content of this specification. This specification selects and specifically describes these embodiments in order to better explain the principles and practical applications of the present invention, so that those skilled in the art can understand and use the present invention well. The present invention is limited only by the claims and their full scope and equivalents.

Claims

1. An information interaction system based on network security, comprising an interaction center, characterized in that: The interaction center is connected to a data collection module, a data matching module, a data processing module and a verification module; The data collection module is used to collect interaction data between two interacting parties, the two interacting parties include a sending object and a receiving object, and the interaction data includes sending data and receiving data; The data matching module is used to match the corresponding upload channel according to the obtained sending data to obtain the information to be sent; The data processing module is used to process the obtained information to be sent to obtain a ciphertext field; The verification module is used to decrypt the obtained ciphertext field, obtain the decrypted field, and verify the decrypted field.

2. The information interaction system based on network security according to claim 1, characterized in that: The process of the data collection module collecting the interaction data of the two parties includes: Setting a queue unit, wherein the queue unit is used to collect the sending data and the sending object corresponding to the sending data; Register accounts for the sender and the receiver, review the registered accounts through the interaction center, and generate corresponding login accounts for the approved registered accounts; Splitting the obtained transmission data to obtain element data, combining the element data contained in each transmission data to obtain an initial interaction queue of each transmission data, wherein the initial interaction queue includes a plurality of element data, marking the first element data in the initial interaction queue as a head of the queue, and marking the last element data in the initial interaction queue as a tail of the queue; Set an add unit and a get unit, wherein the add unit is used to add the initial interaction queue to the queue unit, and the get unit is used to obtain the initial interaction queue stored in the queue unit; Associating the obtained sending data with the corresponding sending object, inserting the login account of the receiving object before the end of the initial interaction queue, and marking the initial interaction queue into which the login account is inserted as an interaction queue; Capturing the sending data associated with the sending object, encapsulating the sending object and the sending data, obtaining a data tuple, and adding the obtained data tuple to the interaction queue of the queue unit; Construct a user object based on the obtained sending data, simulate interaction with the sending data, obtain user data, and capture the obtained user data into the interaction queue; The user data in the interaction queue is obtained, and the obtained user data is marked as interaction data.

3. The information interaction system based on network security according to claim 2 is characterized in that: The process of the data matching module for matching the sending data with the corresponding upload channel includes: According to a number of element data in the interaction queue corresponding to the obtained interaction data, feature extraction is performed on the element data to obtain feature elements of the interaction queue; Associating the obtained characteristic element with the head of the interaction queue, and marking the associated head of the interaction queue as an identification element; An upload channel is set according to the obtained characteristic elements, and a grab point is set at the channel entrance of the upload channel, wherein the grab point is set with a boundary feature; The boundary features of the obtained grasping points are matched with the identification elements of the interaction queue, the interaction queue is uploaded to the upload channel with successful matching, and the interaction queue in the upload channel is marked as waiting information.

4. The information interaction system based on network security according to claim 3 is characterized in that: The process of the data processing module processing the obtained information to be sent includes: Performing character string conversion on the obtained information to be sent to obtain a binary byte sequence, and marking the obtained binary byte sequence as initial data; Shift the obtained initial data right by a positions to obtain right-shifted data; Obtaining a moving difference value according to the obtained right-shifted data and the initial data; The obtained movement difference is shifted rightward by a bits to obtain the end point movement data, and the obtained end point movement data is encrypted.

5. The information interaction system based on network security according to claim 4 is characterized in that: The process of encrypting data in motion at the endpoint includes: Set two different prime numbers and mark the obtained prime numbers respectively; Obtain a public modulus and Euler function according to the obtained two different prime numbers; Select an integer e, e satisfies 1<e<Euler function and e is coprime with Euler function; Obtain the hidden modulus according to the obtained Euler function and the integer e; Obtain a public key and a private key according to the obtained public modulus, the integer e, and the hidden modulus; Obtain encrypted endpoint movement data according to the obtained endpoint movement data, the integer e, and the public modulus, and mark the obtained encrypted endpoint movement data as a ciphertext field; The login account of the receiving object is obtained through the interaction center, the login account of the interactive object is encrypted, the encrypted receiving account is obtained, and the encrypted receiving account is associated with the private key.

6. The information interaction system based on network security according to claim 5, characterized in that: The inspection module includes a matching unit and a verification unit. The matching unit is used to match the ciphertext field with the corresponding receiving object. The verification unit is used to decrypt the matched ciphertext field, obtain the decrypted field, and verify the decrypted field.

7. The information interaction system based on network security according to claim 6 is characterized in that: The process of the matching unit matching the ciphertext field with the corresponding receiving object includes: Extract the ciphertext field, obtain the encrypted login password at the corresponding position of the ciphertext field, and mark the encrypted login password at the corresponding position of the ciphertext field as a ciphertext object; The obtained ciphertext object is compared with the encrypted receiving account. If they are consistent, the ciphertext field matches the corresponding receiving object successfully, the successfully matched ciphertext field is marked as a matching ciphertext field, and the matching ciphertext field is uploaded to the verification unit for verification; if they are inconsistent, the ciphertext field does not match the receiving object, the ciphertext field that does not match the receiving object is marked as an abnormal ciphertext field, and a warning message is generated based on the obtained abnormal ciphertext field, and the warning message is uploaded to the interaction center.

8. The information interaction system based on network security according to claim 7, characterized in that: The verification process performed by the verification unit includes: Obtaining a private key associated with the matching ciphertext field, and obtaining a decrypted field based on the obtained private key and the matching ciphertext field; According to the obtained decrypted field, remove the login account corresponding to the position of the decrypted field to obtain the first destination movement data; Acquire received data of the receiving object, perform character string conversion on the received data to obtain a binary byte sequence, and mark the obtained binary byte sequence as second initial data; Shift the obtained second initial data rightward by a positions to obtain second right-shifted data; Obtain a second shift difference value according to the obtained second right-shifted data and the second initial data; Shift the obtained movement difference rightward by a positions to obtain the second end point movement data; The obtained first destination movement data and second destination movement data are compared. If they are consistent, the received data of the receiving object is correct. If they are inconsistent, the received data of the receiving object is wrong.

Images