A method and system for secure transmission of information data

Abstract

The present invention discloses a method and system for secure transmission of information data, the method comprising: obtaining information data to be transmitted and associated terminal data of the information data to be transmitted; segmenting the information data to be transmitted according to the associated terminal data to generate a plurality of information data fragments to be transmitted; generating a first public key and a first private key for each information data fragment to be transmitted, encrypting the information data to be transmitted with the first public key to generate an encrypted information data fragment, distributing the first private key of each information data fragment to be transmitted to each first relay terminal, and generating an encrypted private key distribution record; transmitting all encrypted information data fragments and encrypted private key distribution records to a receiving end; wherein, when each encrypted information data fragment is sent, each first relay terminal generates a plurality of interference information, and distributes each interference information to a transmitting end, a receiving end, and the remaining first relay terminals except the current first relay terminal. The implementation of the present invention can improve the security of information data transmission.

Description

Technical Field

[0001] The present invention relates to the technical field of secure data transmission, and in particular to a method and system for securely transmitting information data. Background Art

[0002] With the rapid development of the Internet, a large amount of information data is generated on the Internet every day. These information data are transmitted between various servers and terminals in the form of text, images, and audio. In the process of information data transmission, data security issues are brought about. In the actual network environment, when an information data is sent from the sender to the target end, there is a possibility of being maliciously intercepted by a third party. When the information data is intercepted, data leakage may occur.

[0003] In order to avoid the leakage of information data, a common method is to encrypt the information data to be transmitted by generating a key pair before transmitting it. However, this encryption method only uses one layer of encryption. When one line of defense is breached, information data leakage will occur, and the effect of protecting information data transmission is relatively weak. On this basis, Chinese invention patent application CN113572614A discloses a security and confidentiality method and system for data transmission, which divides the original information data to be transmitted into two parts, stores part of the data in the cloud, and stores part of the data in the local device, and encrypts the two parts of the data separately, and then shares the key with the target sharer, so that the target sharer downloads part of the data from the cloud, decrypts it according to the key, and then decrypts the encrypted data of the local device according to the key to obtain the original information data. This method divides the original data to avoid the complete data being directly stolen during the data transmission process. Although it has higher data transmission security than the method of directly encrypting the complete data using a key pair, since the keys are in the hands of the target sharer, when the target sharer is attacked and the key is stolen, it will still cause the leakage of information data. The above scheme has low security for information data transmission when a third party attacks the target sharer or attacks the encrypted transmission data, that is, when a single target is attacked. Summary of the invention

[0004] The embodiments of the present invention provide a method and system for secure transmission of information data, which can reduce the possibility of data being attacked and stolen during the information data transmission process and after the transmission, improve the security of information data transmission, and have more defense and processing time when the information data is attacked.

[0005] An embodiment of the present invention provides a method for securely transmitting information data, comprising:

[0006] Acquire information data to be transmitted and associated terminal data of the information data to be transmitted; wherein the associated terminal data includes: a transmitting end position, a receiving end position and positions of each first relay terminal associated with the transmitting end;

[0007] Segment the information data to be transmitted according to the associated terminal data to generate a number of information data fragments to be transmitted;

[0008] For each information data segment to be transmitted, generate a first public key and a first private key according to an asymmetric encryption algorithm, encrypt the information data to be transmitted with the first public key to generate an encrypted information data segment, distribute the first private key of each information data segment to be transmitted to each first relay terminal, and generate a first private key distribution record;

[0009] Generate a second public key and a second private key for the first private key distribution record according to an asymmetric encryption algorithm, encrypt the first private key distribution record with the second public key, generate an encrypted private key distribution record, and distribute the second private key to the receiving end;

[0010] All encrypted information data fragments and encrypted private key distribution records are transmitted to the receiving end, so that when the receiving end receives each encrypted information data fragment, it decrypts the encrypted private key distribution record according to the second private key to obtain the first private key distribution record, requests the first private key from each first relay terminal according to the first private key distribution record, and decrypts each encrypted information data fragment according to each first private key to obtain each information data fragment to be transmitted, and restores the information data to be transmitted according to each information data fragment to be transmitted; wherein, when each encrypted information data fragment is sent, each first relay terminal generates a number of interference information, and distributes each interference information to the sending end, the receiving end and the remaining first relay terminals except the current first relay terminal.

[0011] Furthermore, the information data to be transmitted is segmented according to the associated terminal data to generate a plurality of information data segments to be transmitted, including:

[0012] Determine the positional relationship between each first relay terminal and the transmitting terminal according to the associated terminal data;

[0013] Determine the communication strength between each first relay terminal and the transmitting end according to the positional relationship between each first relay terminal and the transmitting end, and generate a descending sorting sequence of the communication strength;

[0014] Align the descending sorted sequence of communication strength with the information data to be transmitted, and divide the information data to be transmitted into a number of information data fragments to be transmitted according to the number of first relay terminals associated with the transmitting end and the communication strength between each first relay terminal and the transmitting end; wherein the number of information data fragments to be transmitted after division is equal to the number of all first relay terminals associated with the transmitting end, the communication strength is inversely proportional to the data length of the information data fragment to be transmitted, and each information data fragment identifier is associated with the information data fragment to be transmitted.

[0015] Furthermore, when each encrypted information data fragment is sent, each first relay terminal generates some interference information, including:

[0016] When each encrypted information data segment is sent, for each first relay terminal, a session request is sent to the sending end, so that the sending end responds to the session request of the first relay terminal according to the first private key distribution record, and determines the information data segment to be transmitted corresponding to the current first relay terminal;

[0017] Extracting a number of data feature fragments from the to-be-transmitted information data fragment corresponding to the current first relay terminal;

[0018] Transmitting all data feature fragments to the corresponding first relay terminal;

[0019] When receiving each data characteristic fragment, each first relay terminal generates some interference information according to each data characteristic fragment.

[0020] Furthermore, the generating of a plurality of interference information according to each data feature fragment includes:

[0021] Inputting each data feature fragment into an interference information generation model so that the interference information generation model extracts feature data of each data feature fragment and generates a number of interference information according to each feature data;

[0022] Wherein, the construction of the interference information generation model includes:

[0023] Constructing an initial generative adversarial network, wherein the generative adversarial network includes: a generator and a discriminator;

[0024] Obtaining several information data training samples;

[0025] Inputting the information data training sample into the generative adversarial network, performing alternating iterative training on the generator and the discriminator in the generative adversarial network until the generative adversarial network converges, and using the generator of the generative adversarial network as an interference information generation model;

[0026] When the generator and the discriminator in the generative adversarial network are alternately iterated in training, the generator extracts feature data of the information data training sample, generates a number of interference information to be screened of the information data training sample according to the extracted feature data, and inputs all the interference information to be screened into the discriminator; the discriminator compares each interference information to be screened with the information data training sample, determines the similarity of each interference information to be screened and the proportion of the similarity of the interference information to be screened that meets the similarity threshold, and feeds back the proportion of the similarity of the interference information to be screened that meets the similarity threshold to the generator, so that the generator adjusts its own network parameters according to the proportion of the similarity of the interference information to be screened that meets the similarity threshold.

[0027] Further, distributing each interference information to the transmitting end, the receiving end and the remaining first relay terminals except the current first relay terminal includes:

[0028] For each first relay terminal, a geometric body is constructed that includes the sending end, the receiving end, and all the first relay terminals, taking the current location of the first relay terminal as the geometric center;

[0029] Constructing a first connection line between the current first relay terminal and the transmitting end and the receiving end, and serving as an interference information communication channel between the current first relay terminal and the transmitting end and the receiving end;

[0030] Constructing a second connection line between the current first relay terminal and the remaining first relay terminals except the current first relay terminal, and using the second connection line that does not intersect with any connection line as an interference information communication channel between the current first relay terminal and the corresponding first relay terminal;

[0031] Selecting a first relay terminal corresponding to a second connection line intersecting with any connection line as the first relay terminal to be processed;

[0032] Taking the current location of the first relay terminal as the coordinate origin, constructing a spatial rectangular coordinate system;

[0033] Projecting each first relay terminal to be processed in a spatial rectangular coordinate system to obtain a first projection of each first relay terminal to be processed on a horizontal plane, a second projection on a vertical plane, and a third projection on a side plane in the spatial rectangular coordinate system;

[0034] Selecting the first relay terminal to be processed in sequence, superimposing the first projection, the second projection and the third projection of the first relay terminal to be processed currently, and generating the interference information communication channel of the first relay terminal to be processed currently; wherein the interference information communication channel of the first relay terminal to be processed currently does not intersect with the interference information communication channel of the first relay terminal and the first connection line;

[0035] Each interference information is distributed to the transmitting end, the receiving end and the remaining first relay terminals except the current first relay terminal through the interference information communication channel.

[0036] Further, when the interference information communication channel of the first relay terminal to be processed currently intersects with the interference information communication channel of the first relay terminal and the first connection line, the three-dimensional space coordinates of the intersection are obtained;

[0037] The intersection point is moved by a preset distance on a horizontal plane, a vertical plane and a lateral plane in a spatial rectangular coordinate system to generate an adjusted first candidate intersection point, a second candidate intersection point and a third candidate intersection point;

[0038] Taking the first candidate intersection point, the second candidate intersection point and the third candidate intersection point as relay points, and combining the current first relay terminal to be processed and the current first relay terminal to generate the first candidate interference information communication channel, the second candidate interference information communication channel and the third candidate interference information communication channel of the current first relay terminal to be processed;

[0039] If the first preset condition is met, a candidate interference information communication channel with the shortest channel length is selected as the interference information communication channel of the first relay terminal to be processed; wherein the first preset condition includes: there is at least one candidate interference information communication channel that does not intersect with the interference information communication channel of the first relay terminal and the first connection line;

[0040] If the second preset condition is met, a communication channel is generated according to the first candidate intersection, the second candidate intersection, the third candidate intersection, the current first relay terminal to be processed and the current first relay terminal as the interference information communication channel of the current first relay terminal to be processed; wherein the second preset condition includes: all candidate interference information communication channels intersect with the interference information communication channel of the first relay terminal and the first connecting line.

[0041] Further, the associated terminal data also includes: a second relay terminal location associated with the receiving end;

[0042] Transmit the encrypted private key distribution record to the receiving end, including:

[0043] The encrypted private key distribution record is transmitted to the second relay terminal so that the second relay terminal generates a third public key and a third private key according to an asymmetric encryption algorithm, and encrypts the encrypted private key distribution record with the third public key to generate a second-layer encrypted private key distribution record, and transmits the second-layer encrypted private key distribution record and the third private key to the receiving end.

[0044] Based on the above method embodiment, the present invention provides a corresponding system embodiment;

[0045] An embodiment of the present invention provides a system for secure transmission of information data, including: a data acquisition module, a data segmentation module, a first encryption module, a second encryption module and a transmission module;

[0046] The data acquisition module is used to acquire the information data to be transmitted and the associated terminal data of the information data to be transmitted; wherein the associated terminal data includes: the location of the sending end, the location of the receiving end and the location of each first relay terminal associated with the sending end;

[0047] The data segmentation module is used to segment the information data to be transmitted according to the associated terminal data to generate a plurality of information data segments to be transmitted;

[0048] The first encryption module is used to generate a first public key and a first private key for each information data segment to be transmitted according to an asymmetric encryption algorithm, encrypt the information data to be transmitted with the first public key to generate an encrypted information data segment, distribute the first private key of each information data segment to be transmitted to each first relay terminal, and generate a first private key distribution record;

[0049] The second encryption module is used to generate a second public key and a second private key for the first private key distribution record according to an asymmetric encryption algorithm, encrypt the first private key distribution record with the second public key, generate an encrypted private key distribution record, and distribute the second private key to the receiving end;

[0050] The transmission module is used to transmit all encrypted information data fragments and encrypted private key distribution records to the receiving end, so that when the receiving end receives each encrypted information data fragment, it decrypts the encrypted private key distribution record according to the second private key to obtain the first private key distribution record, requests each first relay terminal to obtain the first private key according to the first private key distribution record, and decrypts each encrypted information data fragment according to each first private key to obtain each information data fragment to be transmitted, and restores the information data to be transmitted according to each information data fragment to be transmitted; wherein, when each encrypted information data fragment is sent, each first relay terminal generates a number of interference information, and distributes each interference information to the sending end, the receiving end and the remaining first relay terminals except the current first relay terminal.

[0051] Another embodiment of the present invention provides a terminal device, including a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor, and when the processor executes the computer program, a method for securely transmitting information data described in the above-mentioned embodiment of the invention is implemented.

[0052] Another embodiment of the present invention provides a storage medium, which includes a stored computer program, wherein when the computer program is running, the device where the storage medium is located is controlled to execute a method for securely transmitting information data as described in the above-mentioned embodiment of the invention.

[0053] The following beneficial effects are achieved by implementing the present invention:

[0054] The present invention provides a method and system for secure transmission of information data. The method obtains information data to be transmitted and associated terminal data of the information data to be transmitted, and after segmenting the information data to be transmitted based on the associated terminal data, encrypts each information data fragment to be transmitted respectively, and distributes the first private key for decrypting each information data fragment to be transmitted to each first relay terminal associated with a sending end; by storing the first private key of the encrypted information data fragment in each first relay terminal respectively, and then transmitting the first private key distribution record to a receiving end, during the information data transmission process, even if a single target is attacked, the key cannot be directly obtained for decryption; the first relay terminals and the sending end restrict the receiving end from obtaining the private key, so that when restoring the information data fragment, it is required to obtain it with the consent of multiple parties, thereby reducing the possibility of data being attacked and stolen during the information data transmission process and after the transmission, and improving the security of information data transmission.

[0055] Furthermore, by sending the encrypted information data fragments to the receiving end, the information data fragments are encrypted and transmitted in blocks, so that even if any encrypted information data fragment is attacked and causes data leakage and loss, the complete data can be guaranteed not to be leaked, reducing the risk of information leakage caused by information data transmission. At the same time, the block-based encrypted transmission and the restriction of private key acquisition can increase the difficulty of cracking the complete information data to be transmitted during a malicious attack by a third party, and provide more defense and processing time when the information data is attacked. BRIEF DESCRIPTION OF THE DRAWINGS

[0056] Figure 1 It is a flowchart of a method for securely transmitting information data provided by an embodiment of the present invention.

[0057] Figure 2 It is a schematic diagram of a transmission network structure of information data to be transmitted provided by an embodiment of the present invention.

[0058] Figure 3 It is a structural diagram of a system for securely transmitting information data provided by one embodiment of the present invention. DETAILED DESCRIPTION

[0059] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0060] like Figure 1 As shown, a method for securely transmitting information data provided by an embodiment of the present invention includes:

[0061] Step S1: Acquire information data to be transmitted and associated terminal data of the information data to be transmitted; wherein the associated terminal data includes: a transmitting end position, a receiving end position and positions of each first relay terminal associated with the transmitting end;

[0062] Step S2: Segment the information data to be transmitted according to the associated terminal data to generate a number of information data segments to be transmitted;

[0063] Step S3: for each information data segment to be transmitted, generate a first public key and a first private key according to an asymmetric encryption algorithm, encrypt the information data to be transmitted with the first public key to generate an encrypted information data segment, distribute the first private key of each information data segment to be transmitted to each first relay terminal, and generate a first private key distribution record;

[0064] Step S4: Generate a second public key and a second private key for the first private key distribution record according to an asymmetric encryption algorithm, encrypt the first private key distribution record with the second public key, generate an encrypted private key distribution record, and distribute the second private key to the receiving end;

[0065] Step S5: Transmit all encrypted information data fragments and encrypted private key distribution records to the receiving end, so that when the receiving end receives each encrypted information data fragment, it decrypts the encrypted private key distribution record according to the second private key to obtain the first private key distribution record, requests each first relay terminal to obtain the first private key according to the first private key distribution record, and decrypts each encrypted information data fragment according to each first private key to obtain each information data fragment to be transmitted, and restores the information data to be transmitted according to each information data fragment to be transmitted; wherein, when each encrypted information data fragment is sent, each first relay terminal generates a number of interference information, and distributes each interference information to the sending end, the receiving end and the remaining first relay terminals except the current first relay terminal.

[0066] For step S1, the information data to be transmitted is obtained, and the information data to be transmitted can be an image, text or audio, etc.; preferably, in order to avoid leakage of the information data to be transmitted during the acquisition process caused by a third party obtaining the information data to be transmitted, the information data to be transmitted is obtained inside the sending end. After the acquisition of the information data to be transmitted is completed, the terminal data associated with the information data to be transmitted is obtained; the terminal data associated with the information data to be transmitted mainly includes the location of the sending end, the location of the receiving end and the location of each first relay terminal associated with the sending end.

[0067] For example, Figure 2As shown, it is a transmission network for information data to be transmitted, which includes a transmitter, a receiver, and three first relay terminals associated with the transmitter, namely, terminal A, terminal B, and terminal C. Among them, the shortest distance between terminal A and the transmitter is greater than the shortest distance between terminal B and the transmitter, the shortest distance between terminal C and the transmitter is greater than the shortest distance between terminal B and the transmitter, and the shortest distance between the transmitter and the receiver is greater than the shortest distance between terminal C and the transmitter. To facilitate the description of the implementation process of the technical solution of the present invention, the transmission network is used in the subsequent examples.

[0068] For step S2, in a preferred embodiment, the information data to be transmitted is segmented according to the associated terminal data to generate a number of information data fragments to be transmitted, including: determining the positional relationship between each first relay terminal and the transmitting end according to the associated terminal data; determining the communication strength between each first relay terminal and the transmitting end according to the positional relationship between each first relay terminal and the transmitting end, and generating a descending sorted sequence of communication strength; aligning the descending sorted sequence of communication strength with the information data to be transmitted, and segmenting the information data to be transmitted into a number of information data fragments to be transmitted according to the number of first relay terminals associated with the transmitting end and the communication strength between each first relay terminal and the transmitting end; wherein the number of information data fragments to be transmitted after segmentation is equal to the number of all first relay terminals associated with the transmitting end, the communication strength is inversely proportional to the data length of the information data fragment to be transmitted, and each information data fragment to be transmitted identifies the associated information data fragment to be transmitted.

[0069] Specifically, according to the position of each first relay terminal associated with the transmitting end and the position of the transmitting end, the position relationship between each first relay terminal and the transmitting end is determined, that is, according to the positions of terminal A, terminal B, terminal C and the transmitting end, the shortest distance between terminal A and the transmitting end is determined. , the shortest distance between terminal B and the transmitter , the shortest distance between terminal C and the transmitter . And then according to , and Determine the communication strength between the transmitter and terminal A, terminal B and terminal C; assuming that terminal A, terminal B and terminal C are terminals with exactly the same functional structure, the communication strength mainly depends on the shortest distance between each terminal and the transmitter. At this time, the descending sort sequence of communication strength can be obtained [ ]. Assume that the information data to be transmitted is 6 bytes long, and its corresponding array is represented as [ ].Will[ ]and[ ] are aligned, and the information data to be transmitted is divided into several information data fragments to be transmitted according to the number of first relay terminals associated with the transmitting end and the communication strength between each first relay terminal and the transmitting end; that is, according to the communication strength, the weaker the strength, the longer the data fragments are, and the stronger the strength, the shorter the data fragments are. Conventional thinking holds that the closer the distance to the transmitting end is, the greater the possibility of obtaining data similar to the original information data. Therefore, this division method is used to do the opposite. In the subsequent storage of the private key of the data fragment to be transmitted with more data representation in the relay terminal that is farther away, it can increase the difficulty of obtaining the secret key, thereby improving the security of data transmission. In the above example, according to [ ]and[ ] After division, three information data fragments to be transmitted can be obtained, which are [ ]、[ ]and[ ];in,[ ]Relationship , [ ]Relationship , [ ]Relationship In addition, in order to facilitate the receiving end to quickly restore the information data to be transmitted based on each information data fragment after obtaining and decrypting each information data fragment to be transmitted, in the process of division, an identifier of each information data fragment to be transmitted and the associated information data fragment to be transmitted is added. The identification method can be to add an array of identification association information to the information data fragment to be transmitted, for example, according to [ ]、[ ]and[ ]Result, generate[ ( ) ]、[ ( ) ]and[ ], where 0 is used to identify the head or tail. In the subsequent combination process, the information data to be transmitted can be quickly and accurately restored according to the identifiers used to identify the previous and subsequent associated information data fragments to be transmitted in each information data fragment to be transmitted.

[0070] In step S3, for each information data segment to be transmitted, a first public key and a first private key are generated for each information data segment to be transmitted according to an asymmetric encryption algorithm, the information data segment to be transmitted is encrypted with the first public key to generate a corresponding encrypted information data segment, and the first private key is then distributed to the corresponding first relay terminal. Exemplarily, [ ( ) ]、[ ( ) ]and[ ]’s first public key and first private key are ( , )、( , )and( , ),in represents the public key, Represents a private key. right[ ( ) ] to generate a first encrypted information data fragment, right[ ( ) ] to generate a second encrypted information data fragment, right[ ] to generate a third encrypted information data fragment. Send to terminal A, Send to terminal B, It is sent to terminal C, and a first private key distribution record is generated at the sending end, which is used to record the first relay terminal for each first private key distribution.

[0071] For step S4, the second public key and the second private key of the first private key distribution record are generated according to the asymmetric encryption algorithm, and the first private key distribution record is encrypted with the second public key to generate an encrypted private key distribution record, and the second private key is distributed to the receiving end.

[0072] In a preferred embodiment, the associated terminal data also includes: the location of a second relay terminal associated with the receiving end; transmitting the encrypted private key distribution record to the receiving end, including: transmitting the encrypted private key distribution record to the second relay terminal, so that the second relay terminal generates a third public key and a third private key according to an asymmetric encryption algorithm, and encrypts the encrypted private key distribution record with the third public key to generate a two-layer encrypted private key distribution record, and transmits the two-layer encrypted private key distribution record and the third private key to the receiving end.

[0073] Specifically, in the transmission network of the information data to be transmitted, a second relay terminal associated with the receiving end needs to be obtained; preferably, the second relay terminal is the terminal K closest to the receiving end, and the shortest distance between the terminal K and the receiving end is less than the shortest distance between the transmitting end and the terminal K. Since the encrypted private key distribution record is the main index for obtaining each encrypted information data fragment, in order to further improve the security of the encrypted private key distribution record transmission, before directly transmitting it to the receiving end, a second relay terminal K associated with the receiving end is obtained, so that the terminal K generates a third public key and a third private key according to the asymmetric encryption algorithm, and the encrypted private key distribution record is encrypted in two layers with the third public key to generate a two-layer encrypted private key distribution record, and then the two-layer encrypted private key distribution record and the third private key are transmitted to the receiving end, so that when the receiving end receives each encrypted information data fragment, it needs to decrypt the two-layer encrypted private key distribution record with the third private key to obtain the encrypted private key distribution record, and then decrypt the encrypted private key distribution record with the second private key to obtain the first private key distribution record. Thus, the security of the decryption key information transmission process is guaranteed.

[0074] For step S4, after completing the above encryption process, all encrypted information data fragments are sent to the receiving end. After receiving each encrypted information data fragment, the receiving end combines the second-layer encrypted private key distribution record sent by terminal K, decrypts the second-layer encrypted private key distribution record in sequence with the second private key and the third private key, obtains the first private key distribution record, and sends a request to terminal A, terminal B and terminal C according to the first private key distribution record, requesting to obtain the private key. , and After receiving the request, terminal A, terminal B and terminal C send a verification message to the sender to verify whether the sender is the target user of the information data to be transmitted. If so, terminal A, terminal B and terminal C will , and Transmitted to the receiving end so that the receiving end can , and Decrypt the information data fragment and get [ ( ) ]、[ ( ) ]and[ ], and then splice and restore the information data to be transmitted; if not, the first private key acquisition request of the receiving end is rejected. By storing the private key corresponding to each encrypted information data fragment in each first relay terminal, each first relay terminal associated with the sending end can restrict the receiving end from decrypting the encrypted information data fragment, that is, by restricting the receiving end from decrypting the encrypted information data fragment by multiple parties, when any terminal, or the sending end and the receiving end are attacked in a concentrated manner, the complete information data to be transmitted will not be leaked, thereby improving the security of the information data to be transmitted.

[0075] Regarding the security of the information data to be transmitted, in addition to considering the protection on the transmission path, interference information can also be generated to interfere with the third party's acquisition of the information data to be transmitted.

[0076] In a preferred embodiment, when each encrypted information data fragment is sent, each first relay terminal generates a number of interference information, including: when each encrypted information data fragment is sent, for each first relay terminal, a session request is sent to the sending end, so that the sending end responds to the session request of the first relay terminal according to the first private key distribution record, and determines the information data fragment to be transmitted corresponding to the current first relay terminal; extracts a number of data feature fragments from the information data fragment to be transmitted corresponding to the current first relay terminal; transmits all data feature fragments to the corresponding first relay terminal; when each first relay terminal receives each data feature fragment, it generates a number of interference information according to each data feature fragment.

[0077] Specifically, taking terminal C as an example, when each encrypted information data segment is sent, terminal C sends a session request to the sending end. After receiving the session request of terminal C, the sending end responds to the session request of terminal C according to the first private key distribution record, and determines the information data segment to be transmitted corresponding to terminal C. ] Extract data feature fragments from the information data fragment to be transmitted to obtain data feature fragments , , .Will , , Transmitted to terminal C, so that terminal C according to , , Generate some interference information. Preferably, the data feature fragments can be encrypted and then transmitted to terminal C.

[0078] In a preferred embodiment, the generating a plurality of interference information according to each data feature fragment comprises: inputting each data feature fragment into an interference information generating model so that the interference information generating model extracts feature data of each data feature fragment, and generating a plurality of interference information according to each feature data;

[0079] Specifically, interference information generation models are deployed in terminal A, terminal B, and terminal C, and terminal C is still used as an example for description. In terminal C, , , In the input interference information generation model, the interference information generation model , , Feature extraction is performed, and random combination and noise addition operations are performed based on the extracted features to obtain some interference information. Among them, the obtained interference information is consistent with the information data fragment to be transmitted [ ] must satisfy the similarity threshold; in the present invention, the similarity threshold is [50%, 70%].

[0080] Among them, the construction of the interference information generation model includes: constructing an initial generative adversarial network, the generative adversarial network includes: a generator and a discriminator; obtaining a number of information data training samples; inputting the information data training samples into the generative adversarial network, performing alternating iterative training on the generator and the discriminator in the generative adversarial network until the generative adversarial network converges, and using the generator of the generative adversarial network as the interference information generation model; when the generator and the discriminator in the generative adversarial network perform alternating iterative training, the generator extracts feature data of the information data training sample, and generates a number of interference information to be screened of the information data training sample according to the extracted feature data, and the process of generating the interference information to be screened can be achieved by randomly extracting and combining the extracted features and adding random noise; inputting all the interference information to be screened into the discriminator; the discriminator compares each interference information to be screened with the information data training sample, determines the similarity of each interference information to be screened and the proportion of the similarity of the interference information to be screened that meets the similarity threshold, and feeds back the proportion of the similarity of the interference information to be screened that meets the similarity threshold to the generator, so that the generator adjusts its own network parameters according to the proportion of the similarity of the interference information to be screened that meets the similarity threshold.

[0081] In a preferred embodiment, the distribution of each interference information to the transmitting end, the receiving end and the remaining first relay terminals except the current first relay terminal includes: for each first relay terminal, taking the location of the current first relay terminal as the geometric center, constructing a geometric body that encloses the transmitting end, the receiving end and all the first relay terminals; constructing a first connection line between the current first relay terminal and the transmitting end and the receiving end, and using it as an interference information communication channel between the current first relay terminal and the transmitting end and the receiving end; constructing a second connection line between the current first relay terminal and the remaining first relay terminals except the current first relay terminal, and using the second connection line that does not intersect with any connection line as the interference information communication channel between the current first relay terminal and the corresponding first relay terminal; selecting the first relay terminal corresponding to the second connection line that intersects with any connection line as the interference information communication channel to be transmitted Process the first relay terminal; construct a spatial rectangular coordinate system with the current location of the first relay terminal as the coordinate origin; project each first relay terminal to be processed in the spatial rectangular coordinate system to obtain a first projection on the horizontal plane, a second projection on the vertical plane and a third projection on the side plane of each first relay terminal to be processed in the spatial rectangular coordinate system; select the first relay terminals to be processed in turn, superimpose the first projection, the second projection and the third projection of the current first relay terminal to be processed, and generate an interference information communication channel of the current first relay terminal to be processed; wherein the interference information communication channel of the current first relay terminal to be processed does not intersect with the interference information communication channel of the first relay terminal and the first connecting line; distribute each interference information to the transmitting end, the receiving end and the remaining first relay terminals except the current first relay terminal through the interference information communication channel.

[0082] Specifically, after the corresponding interference information is generated in each first relay terminal, the transmission channel of the interference information needs to be further determined. For each first relay terminal, a geometric body that can wrap the transmitter, the receiver and all the first relay terminals is constructed with the current location of the first relay terminal as the set. For example, with terminal A as the center of the circle, a geometric body is constructed so that the geometric body wraps terminal B, terminal C, the transmitter and the receiver. Construct a first connection line between terminal A and the transmitter, and construct a first connection line between terminal A and the receiver, as a communication channel for the interference signal generated by terminal A to be transmitted to the transmitter and the receiver. Construct a second connection line between terminal A and terminal B, and a second connection line between terminal A and terminal C. If the second connection line between terminal A and terminal B does not intersect with the second connection line between terminal A and terminal C, the first connection line between terminal A and the receiving end and the first connection line between terminal A and the transmitting end, then the second connection line between terminal A and terminal B serves as a communication channel for the interference signal generated by terminal A to be transmitted to terminal B; similarly, if the second connection line between terminal A and terminal C does not intersect with the second connection line between terminal A and terminal B, the first connection line between terminal A and the receiving end and the first connection line between terminal A and the transmitting end, then the second connection line between terminal A and terminal C serves as a communication channel for the interference signal generated by terminal A to be transmitted to terminal C.

[0083] If the second connection line between terminal A and terminal B or the second connection line between terminal A and terminal C intersects, for example, the second connection line between terminal A and terminal B intersects with the second connection line between terminal A and terminal C, then terminal B and terminal C are taken as the first relay terminals to be processed, and the position of terminal A is taken as the coordinate origin to construct a spatial rectangular coordinate system, and the first projection of terminal B and terminal C on the horizontal plane, the second projection on the vertical plane, and the third projection on the side plane in the spatial rectangular coordinate system are respectively made. For terminal B, the first projection of terminal B on the horizontal plane, the second projection on the vertical plane, and the third projection on the side plane in the spatial rectangular coordinate system are superimposed, and the interference information communication channel of terminal B is generated according to the superimposed projection data; similarly, the interference information communication channel of terminal C is generated. It is judged whether there is still an intersection. If not, no adjustment is made.

[0084] In a preferred embodiment, when the interference information communication channel of the first relay terminal to be processed intersects with the interference information communication channel of the first relay terminal and the first connecting line, the three-dimensional spatial coordinates of the intersection are obtained; the intersection is moved by a preset distance on the horizontal plane, the vertical plane and the side plane in the spatial rectangular coordinate system to generate an adjusted first candidate intersection point, a second candidate intersection point and a third candidate intersection point; the first candidate intersection point, the second candidate intersection point and the third candidate intersection point are used as relay points, and the first candidate interference information communication channel, the second candidate interference information communication channel and the third candidate interference information communication channel of the first relay terminal to be processed are generated in combination with the first relay terminal to be processed and the current first relay terminal; if the first condition is satisfied, A preset condition is adopted to select a candidate interference information communication channel with the shortest channel length as the interference information communication channel of the first relay terminal to be processed currently; wherein, the first preset condition includes: there is at least one candidate interference information communication channel that does not intersect with the interference information communication channel of the first relay terminal and the first connecting line; if the second preset condition is met, a communication channel is generated according to the first candidate intersection point, the second candidate intersection point, the third candidate intersection point, the current first relay terminal to be processed and the current first relay terminal as the interference information communication channel of the first relay terminal to be processed currently; wherein, the second preset condition includes: all candidate interference information communication channels intersect with the interference information communication channel of the first relay terminal and the first connecting line.

[0085] Specifically, if after the above adjustment, the interference information communication channels of terminal A and terminal B or the interference information communication channels of terminal A and terminal C's B still intersect, obtain the three-dimensional spatial coordinates of the intersection. Move the intersection by a preset distance on the horizontal plane, the vertical plane, and the side plane in the spatial rectangular coordinate system, respectively, to generate the adjusted first candidate intersection, the second candidate intersection, and the third candidate intersection. Use the first candidate intersection, the second candidate intersection, and the third candidate intersection as relay points, connect terminal A, the first candidate intersection, and terminal B, connect terminal A, the second candidate intersection, and terminal B, and connect terminal A's third candidate intersection to terminal B to obtain the first candidate interference information communication channel, the second candidate interference information communication channel, and the third candidate interference information communication channel. If the first candidate interference information communication channel, the second candidate interference information communication channel, and the third candidate interference information communication channel do not intersect (the intersection between the candidate interference information communication channels is not considered), select a candidate interference information communication channel with the shortest channel length as the interference information communication channel between terminal A and terminal B. If all candidate interference information communication channels intersect (without considering the intersection between candidate interference information communication channels), terminal A, the first candidate intersection, the second candidate intersection, the third candidate intersection and terminal C are connected in sequence to form a communication channel, which serves as the interference information communication channel between terminal A and terminal B. Similarly, the determination of the interference information communication channel between terminal A and terminal C is the same as that between terminal A and terminal B, and will not be repeated here. By generating an interference information communication channel, when the transmitting end sends an encrypted information data fragment, terminal A, terminal B and terminal C all send interference information in the determined interference information communication channel to confuse third-party attackers, which can increase the difficulty of cracking the complete information data to be transmitted during a malicious attack by a third party, and provide more defense and processing time when the information data is attacked. Preferably, when it is detected that any terminal, transmitting end and receiving end is attacked, early warning information is enabled or fed back to defend against external attacks and improve the security of information data transmission.

[0086] Based on the above method embodiments, the present invention provides corresponding system embodiments.

[0087] like Figure 3 As shown, an embodiment of the present invention provides a system for secure transmission of information data, including: a data acquisition module, a data segmentation module, a first encryption module, a second encryption module and a transmission module;

[0088] The data acquisition module is used to acquire the information data to be transmitted and the associated terminal data of the information data to be transmitted; wherein the associated terminal data includes: the location of the sending end, the location of the receiving end and the location of each first relay terminal associated with the sending end;

[0089] The data segmentation module is used to segment the information data to be transmitted according to the associated terminal data to generate a plurality of information data segments to be transmitted;

[0090] The first encryption module is used to generate a first public key and a first private key for each information data segment to be transmitted according to an asymmetric encryption algorithm, encrypt the information data to be transmitted with the first public key to generate an encrypted information data segment, distribute the first private key of each information data segment to be transmitted to each first relay terminal, and generate a first private key distribution record;

[0091] The second encryption module is used to generate a second public key and a second private key for the first private key distribution record according to an asymmetric encryption algorithm, encrypt the first private key distribution record with the second public key, generate an encrypted private key distribution record, and distribute the second private key to the receiving end;

[0092] The transmission module is used to transmit all encrypted information data fragments and encrypted private key distribution records to the receiving end, so that when the receiving end receives each encrypted information data fragment, it decrypts the encrypted private key distribution record according to the second private key to obtain the first private key distribution record, requests each first relay terminal to obtain the first private key according to the first private key distribution record, and decrypts each encrypted information data fragment according to each first private key to obtain each information data fragment to be transmitted, and restores the information data to be transmitted according to each information data fragment to be transmitted; wherein, when each encrypted information data fragment is sent, each first relay terminal generates a number of interference information, and distributes each interference information to the sending end, the receiving end and the remaining first relay terminals except the current first relay terminal.

[0093] It should be noted that the system embodiment described above is merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. In addition, in the drawings of the system embodiment provided by the present invention, the connection relationship between the modules indicates that there is a communication connection between them, which may be specifically implemented as one or more communication buses or signal lines. A person of ordinary skill in the art may understand and implement it without paying any creative effort.

[0094] Those skilled in the art can clearly understand that for the sake of convenience and brevity, the specific working process of the system described above can refer to the corresponding process in the aforementioned method embodiment, and will not be repeated here.

[0095] Based on the above method item embodiments, the present invention provides corresponding terminal device item embodiments.

[0096] An embodiment of the present invention provides a terminal device, including a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor, wherein when the processor executes the computer program, a method for securely transmitting information data described in any one of the present invention is implemented.

[0097] The terminal device may be a computing device such as a desktop computer, a notebook, a PDA, a cloud server, etc. The terminal device may include, but is not limited to, a processor and a memory.

[0098] The processor may be a central processing unit (CPU), other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or any conventional processor, etc. The processor is the control center of the terminal device, and uses various interfaces and lines to connect various parts of the entire terminal device.

[0099] The memory can be used to store the computer program, and the processor realizes various functions of the terminal device by running or executing the computer program stored in the memory and calling the data stored in the memory. The memory can mainly include a program storage area and a data storage area, wherein the program storage area can store an operating system, at least one application required for a function, etc.; the data storage area can store data created according to the use of the mobile phone, etc. In addition, the memory can include a high-speed random access memory, and can also include a non-volatile memory, such as a hard disk, a memory, a plug-in hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, a flash card (Flash Card), at least one disk storage device, a flash memory device, or other volatile solid-state storage devices.

[0100] Based on the above method item embodiments, the present invention provides a corresponding storage medium item embodiment.

[0101] An embodiment of the present invention provides a storage medium, which includes a stored computer program, wherein when the computer program is running, the device where the storage medium is located is controlled to execute any one of the information data secure transmission methods described in the present invention.

[0102] The storage medium is a computer-readable storage medium, and the computer program is stored in the computer-readable storage medium. When the computer program is executed by the processor, the steps of each of the above-mentioned method embodiments can be implemented. Among them, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form, etc. The computer-readable medium may include: any entity or device capable of carrying the computer program code, recording medium, USB flash drive, mobile hard disk, magnetic disk, optical disk, computer memory, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), electrical carrier signal, telecommunication signal and software distribution medium, etc.

[0103] The above is a preferred embodiment of the present invention. It should be pointed out that a person skilled in the art can make several improvements and modifications without departing from the principle of the present invention. These improvements and modifications are also considered to be within the scope of protection of the present invention.

Claims

1. A method for secure transmission of information data, characterized in that: include: Acquire information data to be transmitted and associated terminal data of the information data to be transmitted; wherein the associated terminal data includes: a transmitting end position, a receiving end position and positions of each first relay terminal associated with the transmitting end; Segment the information data to be transmitted according to the associated terminal data to generate a number of information data fragments to be transmitted; For each information data segment to be transmitted, generate a first public key and a first private key according to an asymmetric encryption algorithm, encrypt the information data to be transmitted with the first public key to generate an encrypted information data segment, distribute the first private key of each information data segment to be transmitted to each first relay terminal, and generate a first private key distribution record; Generate a second public key and a second private key for the first private key distribution record according to an asymmetric encryption algorithm, encrypt the first private key distribution record with the second public key, generate an encrypted private key distribution record, and distribute the second private key to the receiving end; All encrypted information data fragments and encrypted private key distribution records are transmitted to the receiving end, so that when the receiving end receives each encrypted information data fragment, it decrypts the encrypted private key distribution record according to the second private key to obtain the first private key distribution record, requests the first private key from each first relay terminal according to the first private key distribution record, and decrypts each encrypted information data fragment according to each first private key to obtain each information data fragment to be transmitted, and restores the information data to be transmitted according to each information data fragment to be transmitted; wherein, when each encrypted information data fragment is sent, each first relay terminal generates a number of interference information, and distributes each interference information to the sending end, the receiving end and the remaining first relay terminals except the current first relay terminal.

2. A method for securely transmitting information data as claimed in claim 1, characterized in that: The step of segmenting the information data to be transmitted according to the associated terminal data to generate a plurality of information data segments to be transmitted includes: Determine the positional relationship between each first relay terminal and the transmitting terminal according to the associated terminal data; Determine the communication strength between each first relay terminal and the transmitting end according to the positional relationship between each first relay terminal and the transmitting end, and generate a descending sorting sequence of the communication strength; Align the descending sorted sequence of communication strength with the information data to be transmitted, and divide the information data to be transmitted into a number of information data fragments to be transmitted according to the number of first relay terminals associated with the transmitting end and the communication strength between each first relay terminal and the transmitting end; wherein the number of information data fragments to be transmitted after division is equal to the number of all first relay terminals associated with the transmitting end, the communication strength is inversely proportional to the data length of the information data fragment to be transmitted, and each information data fragment identifier is associated with the information data fragment to be transmitted.

3. A method for securely transmitting information data as claimed in claim 2, characterized in that: When each encrypted information data fragment is sent, each first relay terminal generates some interference information, including: When each encrypted information data segment is sent, for each first relay terminal, a session request is sent to the sending end, so that the sending end responds to the session request of the first relay terminal according to the first private key distribution record, and determines the information data segment to be transmitted corresponding to the current first relay terminal; Extracting a number of data feature fragments from the to-be-transmitted information data fragment corresponding to the current first relay terminal; Transmitting all data feature fragments to the corresponding first relay terminal; When receiving each data characteristic fragment, each first relay terminal generates some interference information according to each data characteristic fragment.

4. A method for securely transmitting information data as claimed in claim 3, characterized in that: The generating of a plurality of interference information according to each data feature fragment comprises: Inputting each data feature fragment into an interference information generation model so that the interference information generation model extracts feature data of each data feature fragment and generates a number of interference information according to each feature data; Wherein, the construction of the interference information generation model includes: Constructing an initial generative adversarial network, wherein the generative adversarial network includes: a generator and a discriminator; Obtaining several information data training samples; Inputting the information data training sample into the generative adversarial network, performing alternating iterative training on the generator and the discriminator in the generative adversarial network until the generative adversarial network converges, and using the generator of the generative adversarial network as an interference information generation model; When the generator and the discriminator in the generative adversarial network are alternately iterated in training, the generator extracts feature data of the information data training sample, generates a number of interference information to be screened of the information data training sample according to the extracted feature data, and inputs all the interference information to be screened into the discriminator; the discriminator compares each interference information to be screened with the information data training sample, determines the similarity of each interference information to be screened and the proportion of the similarity of the interference information to be screened that meets the similarity threshold, and feeds back the proportion of the similarity of the interference information to be screened that meets the similarity threshold to the generator, so that the generator adjusts its own network parameters according to the proportion of the similarity of the interference information to be screened that meets the similarity threshold.

5. A method for securely transmitting information data as claimed in claim 1, characterized in that: The distributing each interference information to the transmitting end, the receiving end and the remaining first relay terminals except the current first relay terminal includes: For each first relay terminal, a geometric body is constructed that includes the sending end, the receiving end, and all the first relay terminals, taking the current location of the first relay terminal as the geometric center; Constructing a first connection line between the current first relay terminal and the transmitting end and the receiving end, and serving as an interference information communication channel between the current first relay terminal and the transmitting end and the receiving end; Constructing a second connection line between the current first relay terminal and the remaining first relay terminals except the current first relay terminal, and using the second connection line that does not intersect with any connection line as an interference information communication channel between the current first relay terminal and the corresponding first relay terminal; Selecting a first relay terminal corresponding to a second connection line intersecting with any connection line as the first relay terminal to be processed; Taking the current location of the first relay terminal as the coordinate origin, constructing a spatial rectangular coordinate system; Projecting each first relay terminal to be processed in a spatial rectangular coordinate system to obtain a first projection of each first relay terminal to be processed on a horizontal plane, a second projection on a vertical plane, and a third projection on a side plane in the spatial rectangular coordinate system; Selecting the first relay terminal to be processed in sequence, superimposing the first projection, the second projection and the third projection of the first relay terminal to be processed currently, and generating the interference information communication channel of the first relay terminal to be processed currently; wherein the interference information communication channel of the first relay terminal to be processed currently does not intersect with the interference information communication channel of the first relay terminal and the first connection line; Each interference information is distributed to the transmitting end, the receiving end and the remaining first relay terminals except the current first relay terminal through the interference information communication channel.

6. A method for securely transmitting information data as claimed in claim 5, characterized in that: When the interference information communication channel of the first relay terminal to be processed currently intersects with the interference information communication channel of the first relay terminal and the first connection line, acquiring the three-dimensional space coordinates of the intersection point; The intersection point is moved by a preset distance on a horizontal plane, a vertical plane and a lateral plane in a spatial rectangular coordinate system to generate an adjusted first candidate intersection point, a second candidate intersection point and a third candidate intersection point; Taking the first candidate intersection point, the second candidate intersection point and the third candidate intersection point as relay points, and combining the current first relay terminal to be processed and the current first relay terminal to generate the first candidate interference information communication channel, the second candidate interference information communication channel and the third candidate interference information communication channel of the current first relay terminal to be processed; If the first preset condition is met, a candidate interference information communication channel with the shortest channel length is selected as the interference information communication channel of the first relay terminal to be processed; wherein the first preset condition includes: there is at least one candidate interference information communication channel that does not intersect with the interference information communication channel of the first relay terminal and the first connection line; If the second preset condition is met, a communication channel is generated according to the first candidate intersection, the second candidate intersection, the third candidate intersection, the current first relay terminal to be processed and the current first relay terminal as the interference information communication channel of the current first relay terminal to be processed; wherein the second preset condition includes: all candidate interference information communication channels intersect with the interference information communication channel of the first relay terminal and the first connecting line.

7. A method for securely transmitting information data as claimed in claim 1, characterized in that: The associated terminal data also includes: a second relay terminal location associated with the receiving terminal; Transmit the encrypted private key distribution record to the receiving end, including: The encrypted private key distribution record is transmitted to the second relay terminal so that the second relay terminal generates a third public key and a third private key according to an asymmetric encryption algorithm, and encrypts the encrypted private key distribution record with the third public key to generate a second-layer encrypted private key distribution record, and transmits the second-layer encrypted private key distribution record and the third private key to the receiving end.

8. An information data security transmission system, characterized in that: include: A data acquisition module, a data segmentation module, a first encryption module, a second encryption module and a transmission module; The data acquisition module is used to acquire the information data to be transmitted and the associated terminal data of the information data to be transmitted; wherein the associated terminal data includes: the location of the sending end, the location of the receiving end and the location of each first relay terminal associated with the sending end; The data segmentation module is used to segment the information data to be transmitted according to the associated terminal data to generate a plurality of information data segments to be transmitted; The first encryption module is used to generate a first public key and a first private key for each information data segment to be transmitted according to an asymmetric encryption algorithm, encrypt the information data to be transmitted with the first public key to generate an encrypted information data segment, distribute the first private key of each information data segment to be transmitted to each first relay terminal, and generate a first private key distribution record; The second encryption module is used to generate a second public key and a second private key for the first private key distribution record according to an asymmetric encryption algorithm, encrypt the first private key distribution record with the second public key, generate an encrypted private key distribution record, and distribute the second private key to the receiving end; The transmission module is used to transmit all encrypted information data fragments and encrypted private key distribution records to the receiving end, so that when the receiving end receives each encrypted information data fragment, it decrypts the encrypted private key distribution record according to the second private key to obtain the first private key distribution record, requests each first relay terminal to obtain the first private key according to the first private key distribution record, and decrypts each encrypted information data fragment according to each first private key to obtain each information data fragment to be transmitted, and restores the information data to be transmitted according to each information data fragment to be transmitted; wherein, when each encrypted information data fragment is sent, each first relay terminal generates a number of interference information, and distributes each interference information to the sending end, the receiving end and the remaining first relay terminals except the current first relay terminal.

9. A terminal device, characterized in that: The method comprises a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor, wherein when the processor executes the computer program, a method for securely transmitting information data as described in any one of claims 1 to 7 is implemented.

10. A storage medium, characterized in that: The storage medium includes a stored computer program, wherein when the computer program is running, the device where the storage medium is located is controlled to execute a method for securely transmitting information data as described in any one of claims 1 to 7.

Images