Information encryption transmission method, electronic equipment and storage medium

Abstract

The invention provides an information encryption transmission method, electronic equipment and a storage medium, relates to but is not limited to the technical field of network security, and is applied to a service network comprising terminal equipment, control end equipment, gateway equipment and server end equipment. The terminal equipment sends a ciphertext identification request message to the control end equipment; the terminal equipment receives a target ciphertext identifier returned by the control end equipment according to the ciphertext identifier request message; the terminal device sends a target service request message carrying a target ciphertext identifier to the gateway device, and the gateway device determines a target plaintext identifier corresponding to the target ciphertext identifier according to a locally stored identifier mapping table and forwards the target service request message to the server device according to a corresponding forwarding strategy, and the server device determines a target plaintext identifier corresponding to the target ciphertext identifier carried by the target service request message according to a locally stored identifier mapping table so as to return the target service to the terminal device. According to the embodiment of the invention, the transmission security can be improved while the influence on the routing strategy is reduced.

Description

Technical Field

[0001] The embodiments of the present application relate to but are not limited to the field of network security technology, and in particular to an information encryption transmission method, an electronic device, and a storage medium. Background Art

[0002] In modern communications, network identifiers may contain privacy information that is strongly related to multiple users. For example, in a computing network, a service identifier contains the category information of the user's access to the service. Attackers obtain plaintext identifiers through routing hijacking, packet capture, etc., and thus know the user's current behavior based on the plaintext identifier and steal the user's privacy. In order to further protect user privacy, related technologies usually encrypt the plaintext identifier on the terminal device in the service network, and the server decrypts the encrypted plaintext identifier, thereby ensuring the privacy of the service identifier during network transmission. Although this method has a simple mechanism and is easy to implement, the plaintext identifier will also be used as the basis for the gateway node to select the route, thereby affecting the routing strategy, resulting in complex routing forwarding and low efficiency. Therefore, there is an urgent need for a method of encrypting information transmission that can reduce the impact on the routing strategy while improving transmission security. Summary of the invention

[0003] The embodiments of the present application provide an information encryption transmission method, an electronic device, and a storage medium, which aim to reduce the impact on routing strategies while improving transmission security.

[0004] In a first aspect, an embodiment of the present application provides an information encryption transmission method, which is applied to a terminal device in a service network, wherein the service network further includes a control terminal device, a gateway device, and a service terminal device. The method includes:

[0005] The terminal device sends a ciphertext identification request message to the control terminal device;

[0006] The terminal device receives the target ciphertext identifier returned by the control terminal device according to the ciphertext identifier request message;

[0007] The terminal device sends a target service request message to the gateway device, and the target service request message carries the target ciphertext identifier, so that the gateway device determines the target plaintext identifier corresponding to the target ciphertext identifier according to the locally stored identifier mapping table, and forwards the target service request message to the server device according to the forwarding strategy corresponding to the target plaintext identifier.

[0008] In a second aspect, an embodiment of the present application provides an information encryption transmission method, which is applied to a gateway device in a service network, wherein the service network also includes a terminal device, a control device, and a service device. The method includes:

[0009] The gateway device receives the identification mapping table sent by the control terminal device;

[0010] The gateway device receives a target service request message sent by the terminal device, wherein the target service request message carries a target ciphertext identifier;

[0011] The gateway device determines the target plaintext identifier corresponding to the target ciphertext identifier according to the identifier mapping table;

[0012] The gateway device determines a corresponding forwarding strategy according to the target plaintext identifier;

[0013] The gateway device forwards the target service request message to the server device according to the forwarding strategy, so that the server device determines the target plaintext identifier corresponding to the target ciphertext identifier carried by the target service request message according to the locally stored identifier mapping table, and returns the target service to the terminal device according to the target plaintext identifier.

[0014] In a third aspect, an embodiment of the present application provides an information encryption transmission method, which is applied to a control terminal device in a service network, wherein the service network also includes a terminal device, a gateway device, and a service terminal device. The method includes:

[0015] The control terminal device receives the ciphertext identification request message sent by the terminal device;

[0016] The control terminal device returns the corresponding target ciphertext identifier to the terminal device according to the ciphertext identifier request message;

[0017] The control end device sends an identifier mapping table to the gateway device, so that after the gateway device receives the target service request message carrying the target ciphertext identifier sent by the terminal device, it determines the target plaintext identifier corresponding to the target ciphertext identifier according to the identifier mapping table, and forwards the target service request message to the server device according to the forwarding strategy corresponding to the target plaintext identifier;

[0018] The control-end device sends an identification mapping table to the server-end device, so that after the server-end device receives the target service request message carrying the target ciphertext identifier forwarded by the gateway device, it determines the target plaintext identifier corresponding to the target ciphertext identifier carried by the target service request message according to the identification mapping table, and returns the target service to the terminal device according to the target plaintext identifier.

[0019] In a fourth aspect, an embodiment of the present application provides an electronic device, including:

[0020] one or more processors;

[0021] A memory having one or more programs stored thereon, when the one or more programs are executed by the one or more processors, the one or more processors implement:

[0022] An information encryption transmission method as described in any one of the first aspects; or

[0023] An information encryption transmission method as described in any one of the second aspects; or

[0024] An information encryption transmission method as described in any one of the third aspects.

[0025] In a fifth aspect, an embodiment of the present application provides a computer-readable storage medium having a computer program stored thereon, wherein when the program is executed by a processor, the following is achieved:

[0026] An information encryption transmission method as described in any one of the first aspects; or

[0027] An information encryption transmission method as described in any one of the second aspects; or

[0028] An information encryption transmission method as described in any one of the third aspects.

[0029] According to the above-mentioned embodiments of the present application, at least the following beneficial effects are achieved: by sending a ciphertext identification request message to the control end device, the target ciphertext identification can be obtained, so that the target service request message is in an encrypted state during network transmission, thereby improving network transmission security, and at the same time, in the gateway device, the target ciphertext identification and the corresponding plaintext identification are associated through an identification mapping table, so that the gateway device can forward based on the plaintext identification, thereby realizing the decoupling of transmission security and routing strategy when the target service request message is in an encrypted state. Therefore, compared with the related art, the embodiments of the present application can reduce the impact on routing strategy while improving transmission security. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] Figure 1 A network diagram of an embodiment of a service network applied by the information encryption transmission method provided in an embodiment of the present application;

[0031] Figure 2 A flowchart of an embodiment of an information encryption transmission method applied to a terminal device provided in an embodiment of the present application;

[0032] Figure 3 A flowchart of an embodiment of an information encryption transmission method applied to a gateway device provided in an embodiment of the present application;

[0033] Figure 4 An interaction diagram of another embodiment of a service network applied to the information encryption transmission method provided in one embodiment of the present application;

[0034] Figure 5 A flowchart of an embodiment of an information encryption transmission method applied to a control terminal device provided by an embodiment of the present application;

[0035] Figure 6 A flowchart of an embodiment of an information encryption transmission method applied to a server device provided in an embodiment of the present application;

[0036] Figure 7 Another interactive diagram of another embodiment of a service network applied to the information encryption transmission method provided in one embodiment of the present application;

[0037] Figure 8 A schematic diagram of the hardware structure of a device corresponding to the information encryption transmission method provided in one embodiment of the present application.

[0038] Reference numerals:

[0039] Terminal device 100 , gateway device 200 , server device 300 , control device 400 , computing network element device 500 , processor 601 , and memory 602 . DETAILED DESCRIPTION

[0040] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0041] It should be noted that although the functional modules are divided in the device schematic and the logical order is shown in the flowchart, in some cases, the steps shown or described can be performed in a different order than the module division in the device or the order in the flowchart.

[0042] In the embodiments of the present application, the words "further", "exemplarily" or "optionally" are used to indicate examples, illustrations or descriptions, and should not be interpreted as being more preferred or more advantageous than other embodiments or designs. The use of the words "further", "exemplarily" or "optionally" is intended to present related concepts in a specific way.

[0043] Before further describing the embodiments disclosed in the present application in detail, the nouns and terms involved in the embodiments disclosed in the present application are described. The nouns and terms involved in the embodiments disclosed in the present application are subject to the following interpretations:

[0044] Plain text, in a communication system, refers to an unencrypted bit stream, such as text, bitmap, digitized voice, or digitized video image.

[0045] It should be noted that in modern communications, network identifiers may contain privacy information that is strongly related to multiple users. For example, in a computing network, a service identifier contains the category information of the user's access to the service. The attacker obtains the plaintext identifier through routing hijacking, packet capture, etc., and thus knows the user's current behavior based on the plaintext identifier and steals the user's privacy. In order to further protect user privacy, the relevant technology usually encrypts the plaintext identifier in the terminal device 100 in the service network, and the server decrypts the encrypted plaintext identifier, thereby ensuring the privacy of the service identifier during network transmission. Although this method has a simple mechanism and is easy to implement, the plaintext identifier will also be used as the basis for the gateway node to select the route; and the encryption and decryption scheme has the problem that the encrypted plaintext identifier cannot be resolved at the intermediate node. Therefore, the use of plaintext identifier encryption will affect the routing strategy, resulting in complex routing forwarding and low efficiency. Therefore, there is an urgent need for a method of information encryption transmission that can reduce the impact on the routing strategy while improving transmission security.

[0046] Reference Figure 1 As shown, the embodiment of the present application provides a service network, which includes a terminal device 100, a control terminal device 400, a gateway device 200 and a server device 300. Among them,

[0047] The terminal device 100 sends a ciphertext identification request message to the control terminal device 400 and receives the target ciphertext identification returned by the control terminal device 400 according to the ciphertext identification request message, and sends a target service request message to the gateway device 200, wherein the target service request message carries the target ciphertext identification.

[0048] The control terminal device 400 receives the ciphertext identification request message sent by the terminal device 100 and returns the corresponding target ciphertext identification to the terminal device 100 according to the ciphertext identification request message;

[0049] The gateway device 200 receives the identification mapping table sent by the control terminal device 400; and receives the target service request message sent by the terminal device 100, and determines the target plaintext identifier corresponding to the target ciphertext identifier according to the identification mapping table; determines the corresponding forwarding strategy according to the target plaintext identifier; and forwards the target service request message to the server device 300 according to the forwarding strategy;

[0050] The server device 300 receives the identification mapping table sent by the control device 400 and the target service request message sent by the gateway device 200, determines the target plaintext identifier corresponding to the target ciphertext identifier according to the identification mapping table, and returns the target service to the terminal device 100 according to the target plaintext identifier.

[0051] Therefore, by sending a ciphertext identification request message to the control terminal device 400, the target ciphertext identification can be obtained, so that the target service request message is in an encrypted state during network transmission, thereby improving network transmission security. At the same time, in the gateway device 200, the target ciphertext identification and the corresponding plaintext identification are associated through the identification mapping table, so that the gateway device 200 can forward based on the plaintext identification, thereby realizing the decoupling of transmission security and routing strategy when the target service request message is in an encrypted state. Therefore, compared with the related art, the embodiment of the present application can reduce the impact on the routing strategy while improving transmission security.

[0052] It should be noted that, in some embodiments, after the network connection is established between the terminal device 100, the control device 400, the gateway device 200 and the server device 300, the control device 400 will actively send the identification mapping table to the server device 300 and the gateway device 200. In some embodiments, the identification mapping table is obtained by the gateway device 200 and the server device 300 by actively requesting.

[0053] It should be noted that the identification mapping table can be updated periodically or passively according to the setting of update rules.

[0054] It should be noted that the ciphertext identification request message is used to obtain from the controller the ciphertext identification corresponding to the plaintext identification of the target service requested from the server device 300, and the plaintext identification is used by the server device 300 as a basis for providing services; the ciphertext identification request message includes but is not limited to the identification of the terminal. In some embodiments, the ciphertext identification request message also includes service information of the target service required by the control terminal device 400, so as to determine the plaintext identification according to the service information.

[0055] It should be noted that the target plain text identifier is used to look up and determine the plain text identifier of the required target service from the identifier mapping table.

[0056] It should be noted that the target service request message is a message used to request the server device 300 to provide a target service.

[0057] Understandably, Figure 2 The present invention is a flowchart of an embodiment of the information encryption transmission method of the terminal device 100 in the service network, wherein the service network further includes a control terminal device 400, a gateway device 200 and a service terminal device 300. Figure 2 As shown, the method includes:

[0058] Step S110: The terminal device 100 sends a ciphertext identification request message to the control terminal device 400;

[0059] Step S120, the terminal device 100 receives the target ciphertext identifier returned by the control terminal device 400 according to the ciphertext identifier request message;

[0060] Step S130, the terminal device 100 sends a target service request message to the gateway device 200, and the target service request message carries a target ciphertext identifier, so that the gateway device 200 determines the target plaintext identifier corresponding to the target ciphertext identifier according to the locally stored identifier mapping table, and forwards the target service request message to the server device 300 according to the forwarding strategy corresponding to the target plaintext identifier.

[0061] Therefore, by sending a ciphertext identification request message to the control terminal device 400, the target ciphertext identification can be obtained, so that the target service request message is in an encrypted state during network transmission, thereby improving network transmission security. At the same time, in the gateway device 200, the target ciphertext identification and the corresponding plaintext identification are associated through the identification mapping table, so that the gateway device 200 can forward based on the plaintext identification, thereby realizing the decoupling of transmission security and routing strategy when the target service request message is in an encrypted state. Therefore, compared with the related art, the embodiment of the present application can reduce the impact on the routing strategy while improving transmission security.

[0062] It should be noted that the server device 300 determines the target plaintext identifier corresponding to the target ciphertext identifier carried in the target service request message according to the identifier mapping table, and returns the target service to the terminal device 100 according to the target plaintext identifier. The identifier mapping table can be a mapping table stored locally after being sent by the control end device 400 to the server device 300, or it can be a mapping table actively requested during verification. Preferably, the present application uses a locally stored mapping table to determine the target plaintext identifier.

[0063] It should be noted that the target plaintext identifier is unknown to the terminal device 100, and the control device 400 can determine the target plaintext identifier based on the ciphertext identifier request message of the terminal device 100. If the terminal device 100 and the plaintext identifier have a one-to-one mapping relationship, the ciphertext identifier request message carries the information of the terminal device 100 so that the control device 400 can determine the target plaintext identifier, or the ciphertext identifier request message carries service information so that the control device 400 can determine the plaintext identifier.

[0064] It should be noted that, in some embodiments, the identifier mapping table is used to record the relationship between the plaintext identifier and the ciphertext identifier at different times. In other embodiments, the identifier mapping table is used to record the time relationship between the plaintext identifier and the ciphertext identifier of different terminals, wherein the ciphertext identifier and the time when the plaintext identifier and the ciphertext identifier are issued have a unique relationship. In other embodiments, the identifier mapping table is used to record the relationship between the plaintext identifier, the ciphertext identifier, and the ciphertext identifier index. In other embodiments, the identifier mapping table is used to record the relationship between the plaintext identifier, the ciphertext identifier, and the security level, so the plaintext identifier can be determined according to the identifier mapping table in this application.

[0065] For example, taking the example of an identifier mapping table used to record the mapping relationship between plaintext identifiers and ciphertext identifiers at different times, it is assumed that the identifier mapping table is as shown in Table 1 below;

[0066]

[0067] Table 1

[0068] Wherein, T1, T2, ..., Tn represent the time when the ciphertext identifier is updated. Therefore, the sending of the ciphertext identifier request message in step S110 is triggered within the time [T1, T2), and the control end device 400 returns the ciphertext identifier updated at time T1 (i.e., SID11) as the target ciphertext identifier to the terminal device 100. When the ciphertext identifier request message is sent at time T2, and the plaintext identifier is SID2, SID22 is returned as the target ciphertext identifier.

[0069] For example, taking the example of an identifier mapping table used to record the mapping relationship between the plaintext identifiers and the ciphertext identifier issuance time of different terminal devices 100, it is assumed that the identifier mapping table is as shown in Table 2 below:

[0070]

[0071] Table 2

[0072] Among them, the column SIDi is the plaintext identifier, and the column Ts' is the time when the computing network element device 500 sends the corresponding plaintext identifier to the ciphertext. The ciphertext identifier is calculated by the first function, such as the first function F(SID, msk||f(Ts')), F is a periodic function used to encrypt the plaintext identifier SID, msk is the root key generated by the computing network element device 500, f is an arbitrary function, and Ts' is the time for sending the ciphertext identifier SID'. At this time, the ciphertext identifiers belonging to the same plaintext identifier at different sending times are different. At this time, the gateway device 200 can obtain the expected plaintext identifier through the inverse function of the first function, and then compare it with the identifier mapping table to determine whether the decrypted expected plaintext identifier is a real plaintext identifier, and then forward the routing strategy according to the real plaintext identifier.

[0073] For example, taking the example of an identifier mapping table used to record plain text identifiers, cipher text identifiers, and security levels, it is assumed that the identifier mapping table is shown in Table 3 below:

[0074]

[0075] Table 3

[0076] Taking the plaintext identifier SID2 as an example, since its security level is 2, which is greater than the security level of the plaintext identifier SID1, the number of ciphertext identifiers of SID2 is also greater than the number of ciphertext identifiers of SID1. Therefore, different numbers of ciphertext identifiers can be set at different levels to further improve transmission reliability while reducing overhead.

[0077] For example, in some embodiments, taking the example of an identifier mapping table used to record the relationship between a plaintext identifier, a ciphertext identifier, and a ciphertext identifier index, it is assumed that the identifier mapping table is as shown in Table 4:

[0078]

[0079] Table 4

[0080] Among them, each plaintext corresponds to multiple ciphertext identifiers, and each ciphertext identifier corresponds to a ciphertext identifier index. For example, taking one row of data as an example, P11 represents the index of the ciphertext identifier SID11 whose plaintext identifier is SID1. Among them, SID11, SID12, ..., SID1n all represent the ciphertext identifier whose plaintext identifier is SID1.

[0081] It is understandable that the identification mapping table is generated by the control end device 400 , or the identification mapping table is generated by the computing network element device 500 and sent to the control end device 400 .

[0082] It should be noted that the identification mapping table is uniformly controlled by the control end device 400, so that the mapping tables of the gateway device 200 and the server device 300 are of the same source, thereby improving the security of network transmission.

[0083] It should be noted that the identification mapping table is generated by the computing network element device 500, so that more complex ciphertext identification can be generated, thereby further improving the security of network transmission.

[0084] It is understandable that the identification mapping table is sent by the control-end device 400 to the gateway device 200 and the server-end device 300 .

[0085] It should be noted that the control device 400 can selectively set the method of sending the identification mapping table according to actual needs, such as selecting periodic timing to send it to the gateway device 200 and the server device 300 and sending it to the gateway device 200 and the server device 300 when the identification mapping table changes.

[0086] Reference Figure 3 As shown, Figure 3 The present invention is a flowchart of an embodiment of an information encryption transmission method of a gateway device 200 in a service network, wherein the service network further includes a terminal device 100, a control device 400 and a service device 300, and the method includes:

[0087] Step S210: the gateway device 200 receives the identification mapping table sent by the control terminal device 400;

[0088] Step S220: The gateway device 200 receives the target service request message sent by the terminal device 100, where the target service request message carries a target ciphertext identifier.

[0089] Step S230: The gateway device 200 determines the target plaintext identifier corresponding to the target ciphertext identifier according to the identifier mapping table;

[0090] Step S240: The gateway device 200 determines a corresponding forwarding strategy according to the target plaintext identifier;

[0091] Step S250, the gateway device 200 forwards the target service request message to the server device 300 according to the forwarding strategy, so that the server device 300 determines the target plaintext identifier corresponding to the target ciphertext identifier carried by the target service request message according to the locally stored identifier mapping table, and returns the target service to the terminal device 100 according to the target plaintext identifier.

[0092] Therefore, by sending a ciphertext identification request message to the control terminal device 400, the target ciphertext identification can be obtained, so that the target service request message is in an encrypted state during network transmission, thereby improving network transmission security. At the same time, in the gateway device 200, the target ciphertext identification and the corresponding plaintext identification are associated through the identification mapping table, so that the gateway device 200 can forward based on the plaintext identification, thereby realizing the decoupling of transmission security and routing strategy when the target service request message is in an encrypted state. Therefore, compared with the related art, the embodiment of the present application can reduce the impact on the routing strategy while improving transmission security.

[0093] It should be noted that the identification mapping table sent by the control end device 400 and received by the gateway device 200 may be directly generated by the control end device 400 or generated by the computing network element device 500 and sent to the control end device 400 and forwarded by the control end device 400.

[0094] It is understandable that the identifier mapping table includes at least one plaintext identifier and at least one ciphertext identifier corresponding to each plaintext identifier;

[0095] The gateway device 200 determines the target plaintext identifier corresponding to the target ciphertext identifier according to the identifier mapping table, including:

[0096] The gateway device 200 searches the identifier mapping table for a plaintext identifier corresponding to the target ciphertext identifier, and uses the found plaintext identifier as the target plaintext identifier.

[0097] Exemplarily, as shown in Table 1, Table 3, and Table 4, the identifier mapping table includes at least one plaintext identifier and at least one ciphertext identifier corresponding to each plaintext identifier.

[0098] It is understandable that the identifier mapping table includes at least one plaintext identifier, at least one ciphertext identifier corresponding to each plaintext identifier, and an index between the plaintext identifiers and the ciphertext identifiers having a corresponding relationship;

[0099] The gateway device 200 determines the target plaintext identifier corresponding to the target ciphertext identifier according to the identifier mapping table, including:

[0100] The gateway device 200 determines the index corresponding to the target ciphertext identifier, searches for the plaintext identifier corresponding to the target ciphertext identifier in the identifier mapping table according to the index, and uses the found plaintext identifier as the target plaintext identifier.

[0101] Exemplarily, as shown in Table 4, the identifier mapping table includes at least one plaintext identifier, at least one ciphertext identifier corresponding to each plaintext identifier, and an index between the plaintext identifiers and the ciphertext identifiers having a corresponding relationship.

[0102] It should be noted that the forwarding efficiency of the gateway device 200 can be improved by increasing the index. Figure 4 Taking the system networking shown as an example, the gateway device 200 includes an ingress gateway (SAN Ingress gateway node) and an egress gateway (SANegress gateway node). When the identifier mapping table contains indexes between plaintext identifiers and ciphertext identifiers with corresponding relationships, the ingress gateway determines the corresponding plaintext identifier based on the target plaintext identifier and forwards the index to the egress gateway. The egress gateway can then search and determine the plaintext identifier from the stored identifier mapping table based on the index, thereby improving forwarding efficiency.

[0103] It is understandable that the identification mapping table includes at least one terminal identification, at least one plain text identification corresponding to each terminal identification, and a first time point corresponding to the terminal identification, the first time point indicating the time point when the control terminal device 400 sends the cipher text identification to the terminal device 100; the target service request message carries the terminal identification corresponding to the terminal device 100;

[0104] The gateway device 200 determines the target plaintext identifier corresponding to the target ciphertext identifier according to the identifier mapping table, including:

[0105] The gateway device 200 uses the time point at which the target service request message is received as the second time point;

[0106] The gateway device 200 determines the first time point from the identifier mapping table according to the terminal identifier carried in the target service request message, and determines the time interval between the second time point and the first time point;

[0107] When the time interval is within the preset time interval threshold range, the gateway device 200 calculates the decryption key according to the first time point and the target ciphertext identifier;

[0108] The gateway device 200 searches the identifier mapping table for the corresponding target plaintext identifier according to the decryption key.

[0109] Exemplarily, as shown in Table 2, the identifier mapping table includes at least one terminal identifier, at least one plain text identifier corresponding to each terminal identifier, and a first time point corresponding to the terminal identifier.

[0110] It is understandable that, when the time interval is greater than the time interval threshold, the gateway device 200 discards the target service request message.

[0111] It should be noted that when the identification mapping table is a time-related mapping table, as shown in Table 1 and Table 2, when the time interval is greater than the time interval threshold, it indicates that it is a replay message, and therefore, the target service request message can be discarded.

[0112] Exemplarily, assuming that the time when the gateway device 200 receives the message is Ts”, the time interval △t is calculated as Ts”-Ts’; Ts’ is the sending time corresponding to the target ciphertext identifier in the target service request message (that is, the corresponding first time point). If 0<△t<△T, △T is the key update period, the first packet is considered to be legal and can be forwarded; if △t>△T, it is considered to be a replayed message and needs to be discarded.

[0113] Reference Figure 5 As shown, Figure 5 This application is a flowchart of an embodiment of an information encryption transmission method for a control terminal device 400 applied to a service network. The service network also includes a terminal device 100, a gateway device 200 and a server device 300. The method includes:

[0114] Step S310: the control terminal device 400 receives the ciphertext identification request message sent by the terminal device 100;

[0115] Step S320: the control terminal device 400 returns the corresponding target ciphertext identifier to the terminal device 100 according to the ciphertext identifier request message;

[0116] Step S330, the control end device 400 sends the identification mapping table to the gateway device 200, so that after the gateway device 200 receives the target service request message carrying the target ciphertext identifier sent by the terminal device 100, it determines the target plaintext identifier corresponding to the target ciphertext identifier according to the identification mapping table, and forwards the target service request message to the server device 300 according to the forwarding policy corresponding to the target plaintext identifier;

[0117] Step S340, the control-end device 400 sends an identification mapping table to the server-end device 300, so that after the server-end device 300 receives the target service request message carrying the target ciphertext identifier forwarded by the gateway device 200, it determines the target plaintext identifier corresponding to the target ciphertext identifier carried by the target service request message according to the identification mapping table, and returns the target service to the terminal device 100 according to the target plaintext identifier.

[0118] Therefore, by sending a ciphertext identification request message to the control terminal device 400, the target ciphertext identification can be obtained, so that the target service request message is in an encrypted state during network transmission, thereby improving network transmission security. At the same time, in the gateway device 200, the target ciphertext identification and the corresponding plaintext identification are associated through the identification mapping table, so that the gateway device 200 can forward based on the plaintext identification, thereby realizing the decoupling of transmission security and routing strategy when the target service request message is in an encrypted state. Therefore, compared with the related art, the embodiment of the present application can reduce the impact on the routing strategy while improving transmission security.

[0119] It is understandable that the identification mapping table is generated by the control terminal device 400, or the identification mapping table is generated by the computing network element device 500 and sent to the control terminal device 400;

[0120] The process of generating the identification mapping table includes at least one of the following:

[0121] According to the preset update time interval, the ciphertext identifier corresponding to each plaintext identifier is set in the identifier mapping table, and each ciphertext identifier corresponds to a specific time point;

[0122] or,

[0123] According to the preset security level, the ciphertext identifiers corresponding to the plaintext identifiers are set in the identifier mapping table, and the number of ciphertext identifiers of the plaintext identifiers with a high security level is greater than the number of ciphertext identifiers of the plaintext identifiers with a low security level;

[0124] or,

[0125] According to the preset indexing rules, the ciphertext identifiers corresponding to the plaintext identifiers are set in the identifier mapping table, and the indexes between the plaintext identifiers and the ciphertext identifiers having corresponding relationships are set;

[0126] or,

[0127] According to the terminal identifier corresponding to the terminal device 100, at least one plaintext identifier corresponding to the terminal identifier is set in the identifier mapping table, and the first time point corresponding to the terminal identifier is set. The first time point indicates the time point when the control terminal device 400 sends the ciphertext identifier to the terminal device 100. The ciphertext identifier is calculated based on the plaintext identifier corresponding to the terminal device 100 and the first time point.

[0128] Exemplarily, as described in Table 1, the identifier mapping table sets an update time interval △T, takes T as the initial time of the update, and calculates the ciphertext identifiers corresponding to SID1, SID2, ..., SIDi at different times, so that the ciphertext identifier corresponding to each plaintext identifier is set in the identifier mapping table, and each ciphertext identifier corresponds to a specific time point.

[0129] Exemplarily, an index is created for each service in a different ciphertext identifier, and then an identifier mapping table as shown in Table 4 can be obtained, so that the ciphertext identifier corresponding to each plaintext identifier is set in the identifier mapping table, and the index between the plaintext identifier and the ciphertext identifier with a corresponding relationship is set. For example, for SID1, its multiple ciphertext identifiers SID11, SID12, ..., SID1n all have an index corresponding to each other (specifically, the index of SID11 is P11), and for SID2, its corresponding ciphertext identifiers SID21, SID22, ..., SID2n all have an index corresponding to each other.

[0130] Exemplarily, a level is set for each service according to the privacy level of the service. At this time, an identifier mapping table as shown in Table 3 can be obtained, so that the ciphertext identifier corresponding to each plaintext identifier is set in the identifier mapping table, and the number of ciphertext identifiers of plaintext identifiers with high security levels is greater than the number of ciphertext identifiers of plaintext identifiers with low security levels.

[0131] Exemplarily, the computing device determines the initial time Ts and the root key msk for sending the ciphertext identifier. When receiving the ciphertext identifier request message, the target ciphertext identifier is calculated as SID'=F(SID, msk||f(Ts')), where F is a periodic function used to encrypt the plaintext SID, msk is the root key generated by the computing network element device 500, f is an arbitrary function, and Ts' is the time when the system sends SID'. At this time, an identifier mapping table as shown in Table 2 can be obtained, so that at least one plaintext identifier corresponding to the terminal identifier is set in the identifier mapping table, and the first time point corresponding to the terminal identifier is set.

[0132] It should be noted that setting different security levels to determine the number of ciphertext SIDs is used to reduce the maintenance cost of the identification mapping table. At the same time, for some services with low privacy requirements, no additional overhead can be added.

[0133] It is understandable that the service identification request message carries the terminal identification of the terminal device 100;

[0134] The control terminal device 400 returns the corresponding target ciphertext identifier to the terminal device 100 according to the ciphertext identifier request message, including:

[0135] The control terminal device 400 searches the identifier mapping table for a ciphertext identifier corresponding to the terminal identifier, and uses the found ciphertext identifier as the target ciphertext identifier.

[0136] or,

[0137] The control terminal device 400 calculates the target plaintext identifier and the target ciphertext identifier corresponding to the first time point through a preset first function. The first time point represents the time point when the control terminal device 400 sends the ciphertext identifier to the terminal device 100.

[0138] It should be noted that the first function is used to encrypt the plaintext identifier according to the root key and the first time point to obtain the target ciphertext identifier. The root key is generated by the control terminal device 400.

[0139] Exemplarily, the first function is F(SID, msk||f(Ts')), where F is a periodic function used to encrypt the plaintext SID; msk is the root key generated by the computing network element device 500, f is an arbitrary function, Ts' is the first time point, and there is an identification mapping table as shown in Table 2. At this time, for the gateway device 200, the number of key iterations r can be calculated; r = (Ts'-T) / △T, △T is the key update period; T is the initial time of the key update set by the computing network element device 500; and the corresponding relationship between ID-Ts' is searched according to the identification mapping table, and the target ciphertext identification SID" is calculated, and SID" = F r -1 (SID', msk||f(Ts'), that is, use msk||f(Ts') as the key to decrypt SID', and the decryption parameter is the number of iterations r for decryption, so that the decrypted plaintext identifier can be used to execute the corresponding routing forwarding strategy.

[0140] Reference Figure 6 As shown, Figure 6 The flowchart of an embodiment of an information encryption transmission method for a service end device 300 applied to a service network, wherein the service network further includes a terminal device 100, a control end device 400 and a gateway device 200, and the method includes:

[0141] Step S410: the server device 300 receives the identification mapping table sent by the control device 400;

[0142] Step S420: The server device 300 receives the target service request message sent by the gateway device 200, where the target service request message carries a target ciphertext identifier;

[0143] Step S430, the server device 300 determines the target plaintext identifier corresponding to the target ciphertext identifier according to the identifier mapping table;

[0144] Step S440: The server device 300 determines the target plaintext identifier corresponding to the target ciphertext identifier carried in the target service request message according to the locally stored identifier mapping table;

[0145] Step S450: The server device 300 returns the target service to the terminal device 100 according to the target plaintext identifier.

[0146] For example, the following Figure 4 and Figure 7 In the system shown, the gateway device 200 includes a SAN ingress gateway node and a SAN egress gateway node, and the computing network element device 500 and the control terminal device 400 form a computing network module. The information encryption transmission method is as follows:

[0147] Example 1, refer to Figure 4 As shown, take the identification mapping tables shown in Table 1 and Table 3 as an example:

[0148] S1. The network computing module sends the identification mapping table to the gateway device 200, and the gateway device 200 stores the identification mapping table locally;

[0149] S2. The terminal device 100 sends a ciphertext identification request message to the computing network module to obtain the ciphertext identification corresponding to the service information;

[0150] S3, the network computing module searches for the ciphertext service identifier SID1n corresponding to the service identifier SID1 corresponding to the service information according to the identifier mapping table, and sends it to the terminal device 100;

[0151] S4, the terminal device 100 uses SID1n to apply for the target service IP from the server device 300;

[0152] S5. The SAN Ingress gateway node searches for the service identifier SID1 corresponding to SID1n in the locally stored mapping table, and forwards it to the SAN egress gateway node according to the corresponding routing forwarding strategy; the forwarded message still carries the ciphertext SID1n;

[0153] S6. The SAN egress gateway node searches the mapping table stored locally for the service identifier SID1 corresponding to SID1n, and forwards it to the server device 300 according to the corresponding routing forwarding strategy; the forwarded message still carries the ciphertext SID1n;

[0154] S7. The server device 300 returns the required target service IP.

[0155] Example 2, refer to Figure 4 As shown, taking the identification mapping table shown in Table 4 as an example, then:

[0156] S1. The computing network module sends the identification mapping table to the gateway device 200, and the gateway node stores the identification mapping table locally;

[0157] S2. The terminal device 100 sends a ciphertext identification request message to the computing network module to obtain the ciphertext identification corresponding to the service information;

[0158] S3, the network computing module searches for the ciphertext service identifier SID1n corresponding to the service identifier SID1 corresponding to the service information according to the identifier mapping table, and sends it to the terminal device 100;

[0159] S4, the terminal device 100 uses SID1n to apply for the target service IP from the server device 300;

[0160] S5. The SAN Ingress gateway node searches for the service identifier SID1 corresponding to SID1n in the locally stored identifier mapping table, and forwards it to the SAN egress gateway node according to the corresponding routing forwarding strategy; the forwarded message still carries the ciphertext SIDn;

[0161] S6. The SAN egress gateway node searches the service identifier SID1 corresponding to SID1n according to the index P1n of the service identifier SID1 in the locally stored mapping table, and forwards it to the server device 300 according to the corresponding routing forwarding strategy; the forwarded message still carries the ciphertext SID1n;

[0162] S7, the server device 300 returns the required target service IP;

[0163] Example 3, refer to Figure 7 Taking the identification mapping table shown in Table 2 as an example, then:

[0164] S1. The network computing module sends the system initial time Ts and the root key msk to the gateway device 200;

[0165] S2. The terminal carries the terminal identification ID and sends a ciphertext identification request message to the computing network module to apply for service information;

[0166] S3, the network computing module calculates the ciphertext SID11 and sends it to the terminal device 100; SID11 = F (SID1, msk||f (Ts1')), where F is a periodic function determined by the network computing module and used to encrypt the plaintext SID1, msk is a root key generated by the network computing module, f is an arbitrary function, and Ts1' is the time when the network computing module sends SID11;

[0167] S4. The network computing module generates a corresponding relationship between the terminal identification id1, SID11 and the corresponding SID11 sending time Ts1' and sends them to the SAN Ingress gateway node and the SAN Ingress gateway node.

[0168] S5. The terminal device 100 uses SID11 to apply for the target service IP from the server, and carries the terminal identification id1;

[0169] S6. The time when the SAN Ingress gateway node receives the message is counted as Ts”, and the time interval △t is calculated as Ts”-Ts1'; if 0<△t<△T, △T is the key update period, the first packet is considered to be legal, and the sequence goes to step S9; if △t>△T, it is considered that the replayed message is discarded; among them, Ts1' is obtained according to the terminal identifier id1 and the identifier mapping table.

[0170] S7, SAN Ingress gateway node calculates the number of key iterations r; r = (Ts1'-T) / △T, △T is the key update period; according to the identifier mapping table in Table 2, and calculates the plaintext identifier SID", where SID" = F r -1 (SID', msk||f(Ts'), that is, use msk||f(Ts') as the key to decrypt SID', and the decryption parameter is the number of iterations r; T is the initial time, which is initially set by the computing network module, and then the key is updated every △T starting from T.

[0171] S8, the SAN Ingress gateway node searches the ID-SID mapping table for the SID that is the same as "SID", and executes the corresponding policy according to the SID;

[0172] S9, the SAN egress gateway node calculates the number of key iterations r; r = (Ts'-T) / △T, △T is the key update period; the SAN egress gateway node searches for the corresponding relationship between ID-Ts' according to the mapping table shown in Table 2, and calculates the plaintext identifier SID", SID" = F r -1 (SID',msk||f(Ts'), means using msk||f(Ts') as the key to decrypt SID', and the decryption parameter is the number of iterations r;

[0173] S10, the SAN egress gateway node searches Table 2 to obtain SID1 that is the same as SID ", and executes a corresponding policy according to the SID1;

[0174] S11. The server device 300 returns the required target service IP.

[0175] An embodiment of the present application further provides an electronic device, including:

[0176] One or more processors 601;

[0177] The memory 602 stores one or more programs, and when the one or more programs are executed by the one or more processors 601, the one or more processors 601 implement:

[0178] Such as the information encryption transmission method applied to the terminal device 100 in the service network; or,

[0179] Such as the information encryption transmission method applied to the gateway device 200 in the service network; or,

[0180] Such as the information encryption transmission method of the control terminal device 400 applied in the service network; or,

[0181] For example, the information encryption transmission method is applied to the server device 300 in the service network.

[0182] The memory 602 is a non-transient network system that can be used to store non-transient software programs and non-transient computer executable programs. In addition, the memory 602 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some embodiments, the memory 602 may optionally include a memory 602 remotely arranged relative to the processor 601, and these remote memories 602 may be connected to the processor 601 via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0183] The memory 602 can be implemented in the form of a read-only memory (ROM), a static storage device, a dynamic storage device, or a random access memory (RAM). The memory 602 can store an operating system and other application programs. When the technical solution provided in the embodiment of this specification is implemented by software or firmware, the relevant program code is stored in the memory 602, and the processor 601 is called to execute the method of the embodiment of the present application.

[0184] The processor 601 can be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (Application Specific Integrated Circuit, ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solution provided in the embodiment of the present application.

[0185] In some embodiments, reference Figure 6 As shown, the electronic device also includes:

[0186] Input / output interface, used to realize information input and output;

[0187] Communication interface, used to realize communication interaction between this device and other devices, which can be realized through wired mode (such as USB, network cable, etc.) or wireless mode (such as mobile network, WIFI, Bluetooth, etc.);

[0188] A bus that transmits information between various components of the device (e.g., processor 601, memory 602, input / output interface, and communication interface);

[0189] The processor 601 , the memory 602 , the input / output interface and the communication interface can be connected to each other in communication within the device via a bus.

[0190] An embodiment of the present application further provides a computer-readable storage medium storing computer-executable instructions for executing:

[0191] Such as the information encryption transmission method applied to the terminal device 100 in the service network; or,

[0192] Such as the information encryption transmission method applied to the gateway device 200 in the service network; or,

[0193] Such as the information encryption transmission method of the control terminal device 400 applied in the service network; or,

[0194] For example, the information encryption transmission method is applied to the server device 300 in the service network.

[0195] An embodiment of the present application further provides a computer program product, including a computer program or a computer instruction, wherein the computer program or the computer instruction is stored in a computer-readable storage medium, and a processor of a computer device reads the computer program or the computer instruction from the computer-readable storage medium, and the processor executes the computer program or the computer instruction, so that the computer device executes and implements:

[0196] Such as the information encryption transmission method applied to the terminal device 100 in the service network; or,

[0197] Such as the information encryption transmission method applied to the gateway device 200 in the service network; or,

[0198] Such as the information encryption transmission method of the control terminal device 400 applied in the service network; or,

[0199] For example, the information encryption transmission method is applied to the server device 300 in the service network.

[0200] The system architecture and application scenarios described in the embodiments of the present application are intended to more clearly illustrate the technical solutions of the embodiments of the present application, and do not constitute a limitation on the technical solutions provided in the embodiments of the present application. Those skilled in the art will appreciate that with the evolution of the system architecture and the emergence of new application scenarios, the technical solutions provided in the embodiments of the present application are equally applicable to similar technical problems.

[0201] Those skilled in the art will appreciate that all or some of the steps in the methods disclosed above, and the functional modules / units in the systems and devices may be implemented as software, firmware, hardware, or a suitable combination thereof.

[0202] In hardware implementation, the division between the functional modules / units mentioned in the above description does not necessarily correspond to the division of physical components; for example, a physical component may have multiple functions, or a function or step may be performed by several physical components in cooperation. Some or all physical components may be implemented as software executed by a processor, such as a central processing unit, a digital signal processor, or a microprocessor, or implemented as hardware, or implemented as an integrated circuit, such as an application-specific integrated circuit. Such software may be distributed on a computer-readable medium, which may include a computer storage medium [or non-transitory medium] and a communication medium [or temporary medium]. As is well known to those of ordinary skill in the art, the term computer storage medium includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information [such as computer-readable instructions, data structures, program modules or other data]. Computer storage media include, but are not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disk [DVD] or other optical disk storage, magnetic cassettes, magnetic tapes, disk storage or other magnetic storage devices, or any other medium that can be used to store the desired information and can be accessed by a computer. Furthermore, it is well known to those skilled in the art that communication media typically embodies computer readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media.

[0203] The terms "component", "module", "system", etc. used in this specification are used to represent computer-related entities, hardware, firmware, a combination of hardware and software, software, or software in execution. For example, a component can be, but is not limited to, a process running on a processor, a processor, an object, an executable file, an execution thread, a program, or a computer. By way of illustration, both applications running on a computing device and a computing device can be components. One or more components may reside in a process or an execution thread, and a component may be located on a computer or distributed between two or more computers. In addition, these components may be executed from various computer-readable media having various data structures stored thereon. Components may communicate, for example, through a local or remote process based on a signal having one or more data packets [e.g., data from two components interacting with another component between a local system, a distributed system, or a network, such as the Internet interacting with other systems through signals].

[0204] The above describes some embodiments of the present application with reference to the accompanying drawings, but does not limit the scope of the present invention. Any modification, equivalent substitution and improvement made by those skilled in the art without departing from the scope and essence of the present invention shall be within the scope of the present application.

Claims

1. An information encryption transmission method, applied to a terminal device in a service network, wherein the service network further includes a control terminal device, a gateway device and a service terminal device, and the method comprises: The terminal device sends a ciphertext identification request message to the control terminal device; The terminal device receives the target ciphertext identifier returned by the control terminal device according to the ciphertext identifier request message; The terminal device sends a target service request message to the gateway device, and the target service request message carries the target ciphertext identifier, so that the gateway device determines the target plaintext identifier corresponding to the target ciphertext identifier according to the locally stored identifier mapping table, and forwards the target service request message to the server device according to the forwarding strategy corresponding to the target plaintext identifier.

2. An information encryption transmission method, applied to a gateway device in a service network, wherein the service network also includes a terminal device, a control device and a service device, and the method comprises: The gateway device receives the identification mapping table sent by the control terminal device; The gateway device receives a target service request message sent by the terminal device, wherein the target service request message carries a target ciphertext identifier; The gateway device determines the target plaintext identifier corresponding to the target ciphertext identifier according to the identifier mapping table; The gateway device determines a corresponding forwarding strategy according to the target plaintext identifier; The gateway device forwards the target service request message to the server device according to the forwarding strategy, so that the server device determines the target plaintext identifier corresponding to the target ciphertext identifier carried by the target service request message according to the locally stored identifier mapping table, and returns the target service to the terminal device according to the target plaintext identifier.

3. The method according to claim 2, characterized in that The identifier mapping table includes at least one plaintext identifier and at least one ciphertext identifier corresponding to each plaintext identifier; The gateway device determines the target plaintext identifier corresponding to the target ciphertext identifier according to the identifier mapping table, including: The gateway device searches the identifier mapping table for a plaintext identifier corresponding to the target ciphertext identifier, and uses the found plaintext identifier as the target plaintext identifier.

4. The method according to claim 2, characterized in that The identifier mapping table includes at least one plaintext identifier, at least one ciphertext identifier corresponding to each of the plaintext identifiers, and an index between the plaintext identifiers and the ciphertext identifiers having a corresponding relationship; The gateway device determines the target plaintext identifier corresponding to the target ciphertext identifier according to the identifier mapping table, including: The gateway device determines the index corresponding to the target ciphertext identifier, searches the identifier mapping table for a plaintext identifier corresponding to the target ciphertext identifier according to the index, and uses the found plaintext identifier as the target plaintext identifier.

5. The method according to claim 2, characterized in that: The identifier mapping table includes at least one terminal identifier, at least one plaintext identifier corresponding to each terminal identifier, and a first time point corresponding to the terminal identifier, wherein the first time point indicates a time point when the control terminal device sends a ciphertext identifier to the terminal device; The target service request message carries the terminal identifier corresponding to the terminal device; The gateway device determines the target plaintext identifier corresponding to the target ciphertext identifier according to the identifier mapping table, including: The gateway device uses the time point when the target service request message is received as the second time point; The gateway device determines the first time point from the identifier mapping table according to the terminal identifier carried in the target service request message, and determines the time interval between the second time point and the first time point; When the time interval is within a preset time interval threshold range, the gateway device calculates a decryption key according to the first time point and the target ciphertext identifier; The gateway device searches the identifier mapping table for the corresponding target plaintext identifier according to the decryption key.

6. The method according to claim 5, characterized in that When the time interval is greater than the time interval threshold, the gateway device discards the target service request message.

7. An information encryption transmission method, applied to a control terminal device in a service network, wherein the service network also includes a terminal device, a gateway device and a service terminal device, and the method comprises: The control terminal device receives the ciphertext identification request message sent by the terminal device; The control terminal device returns the corresponding target ciphertext identifier to the terminal device according to the ciphertext identifier request message; The control end device sends an identifier mapping table to the gateway device, so that after the gateway device receives the target service request message carrying the target ciphertext identifier sent by the terminal device, it determines the target plaintext identifier corresponding to the target ciphertext identifier according to the identifier mapping table, and forwards the target service request message to the server device according to the forwarding strategy corresponding to the target plaintext identifier; The control-end device sends an identification mapping table to the server-end device, so that after the server-end device receives the target service request message carrying the target ciphertext identifier forwarded by the gateway device, it determines the target plaintext identifier corresponding to the target ciphertext identifier carried by the target service request message according to the identification mapping table, and returns the target service to the terminal device according to the target plaintext identifier.

8. The method according to claim 7, characterized in that The identification mapping table is generated by the control terminal device, or the identification mapping table is generated by a computing network element device and sent to the control terminal device; The generation process of the identification mapping table includes at least one of the following: According to a preset update time interval, the ciphertext identifier corresponding to each of the plaintext identifiers is set in the identifier mapping table, and each of the ciphertext identifiers corresponds to a specific time point; or, According to a preset security level, the ciphertext identifiers corresponding to the plaintext identifiers are set in the identifier mapping table, and the number of ciphertext identifiers of the plaintext identifiers with a high security level is greater than the number of ciphertext identifiers of the plaintext identifiers with a low security level; or, According to a preset index rule, the ciphertext identifier corresponding to each of the plaintext identifiers is set in the identifier mapping table, and an index between the plaintext identifiers and the ciphertext identifiers having a corresponding relationship is set; or, According to the terminal identifier corresponding to the terminal device, at least one plaintext identifier corresponding to the terminal identifier is set in the identifier mapping table, and a first time point corresponding to the terminal identifier is set. The first time point indicates the time point when the control end device sends the ciphertext identifier to the terminal device. The ciphertext identifier is calculated based on the plaintext identifier corresponding to the terminal device and the first time point.

9. The method according to claim 8, characterized in that The service identification request message carries the terminal identification of the terminal device; The control end device returns the corresponding target ciphertext identifier to the terminal device according to the ciphertext identifier request message, including: The control terminal device searches the identifier mapping table for the ciphertext identifier corresponding to the terminal identifier, and uses the found ciphertext identifier as the target ciphertext identifier; or, The control terminal device calculates the target plaintext identifier and the target ciphertext identifier corresponding to a first time point through a preset first function, where the first time point represents the time point when the control terminal device sends the ciphertext identifier to the terminal device.

10. An electronic device, comprising: one or more processors; A memory having one or more programs stored thereon, when the one or more programs are executed by the one or more processors, the one or more processors implement: The information encryption transmission method as claimed in claim 1; or The information encryption transmission method according to any one of claims 2 to 6; or An information encryption transmission method as described in any one of claims 7 to 9.

11. A computer-readable storage medium having a computer program stored thereon, wherein when the program is executed by a processor, the program implements: The information encryption transmission method as claimed in claim 1; or The information encryption transmission method according to any one of claims 2 to 6; or An information encryption transmission method as described in any one of claims 7 to 9.

Images