A secure transmission system for electronic information data

Abstract

The present invention relates to the technical field of electronic information data security transmission, and in particular to an electronic information data security transmission system, comprising: a data processing module, which comprises a data acquisition unit for acquiring data to be transmitted and a data encryption unit for encrypting the data to be transmitted; a data transmission module, which is connected to the data processing module and comprises a plurality of data transmission channels; a data receiving module, which is connected to the data transmission module and comprises a data storage unit for storing data packets and encryption logs that have completed transmission, a data decryption unit for completing the decryption of each data packet according to the encryption log, and a data logging unit for logging into the data receiving module; a security control module, which is respectively connected to the data processing module, the data transmission module and the data receiving module and is used to control the normal operation of the entire system; the system ensures the security and reliability of electronic information data during transmission.

Description

Technical Field

[0001] The present invention relates to the technical field of electronic information data security transmission, and in particular to an electronic information data security transmission system. Background Art

[0002] The importance of electronic information data in today's digital age is self-evident, and ensuring its secure transmission is of paramount importance. However, data faces many security threats during transmission, such as cyber attacks, data leakage, illegal tampering, etc. These threats may not only lead to data loss and business interruption, but also cause serious economic losses and social impact. Therefore, ensuring the security of electronic information data during transmission is extremely important for maintaining corporate interests, ensuring the normal operation of society, and protecting personal privacy.

[0003] Chinese patent publication number: CN118282777A, discloses a data security transmission system, including a coding feature extraction module, an encryption coefficient intelligent module, an encryption resource allocation module and an information transmission module, wherein the coding feature extraction module is used to extract the coding feature information of the transmission data, the encryption coefficient intelligent module obtains the encryption coefficient of the transmission data based on the coding feature information, the encryption resource allocation module allocates encryption resources to the transmission data based on the encryption coefficient and encrypts it, and the information transmission module is used to transmit the encrypted information. It can be seen that the above system lacks effective monitoring of the data transmission process and the data receiving end, resulting in reduced security and stability during the data transmission process. Summary of the invention

[0004] To this end, the present invention provides an electronic information data security transmission system to overcome the problem in the prior art that the security and stability of the data transmission process are reduced due to the lack of a control module.

[0005] To achieve the above object, the present invention provides a system for secure transmission of electronic information data, comprising:

[0006] A data processing module, comprising a data collection unit for collecting data to be transmitted and a data encryption unit for encrypting the data to be transmitted, wherein the encryption method is to obtain a plurality of data packets to be transmitted and an encryption log after completing the division of the data to be transmitted and the combination of the interference data in sequence;

[0007] A data transmission module, which is connected to the data processing module and includes a plurality of data transmission channels, wherein each data transmission channel transmits the data packets to be transmitted alternately in sequence;

[0008] A data receiving module, which is connected to the data transmission module, includes a data storage unit for storing the transmitted data packets and encryption logs, a data decryption unit for decrypting each data packet according to the encryption log, and a data logging unit for logging into the data receiving module, wherein the logging methods include key logging and signature logging;

[0009] A security control module, which is respectively connected to the data processing module, the data transmission module and the data receiving module, and is used to determine whether the security of a single data transmission channel meets the preset standard according to the transmission characteristic coefficient, to expand the bandwidth of the data transmission channel according to the difference in the transmission characteristic coefficient, to determine the adjustment method of the length of the data packet to be transmitted according to the data weight coefficient, and to determine the operation strategy of the data decryption unit according to the matching degree of the data login unit.

[0010] Furthermore, the security control module determines whether the security of a single data transmission channel meets a preset standard according to the transmission characteristic coefficient, wherein:

[0011] If the transmission characteristic coefficient is less than the first preset transmission characteristic threshold, the security control module determines that the security of the single data transmission channel meets the preset standard and completes the storage of the transmitted data packet;

[0012] If the transmission characteristic coefficient is greater than or equal to the first preset transmission characteristic threshold and less than the second preset transmission characteristic threshold, the security control module determines that the security of the single data transmission channel does not meet the preset standard, and determines the adjustment method of the length of the data packet to be transmitted according to the data weight coefficient;

[0013] If the transmission characteristic coefficient is greater than or equal to the second preset transmission characteristic threshold, the security control module determines that the security of the single data transmission channel does not meet the preset standard, and expands the bandwidth of the data transmission channel according to the difference between the transmission characteristic coefficient and the second preset transmission characteristic threshold.

[0014] Furthermore, the transmission characteristic coefficient is determined jointly according to the packet loss rate and the transmission rate of the data transmission.

[0015] Further, the security control module expands the bandwidth of the data transmission channel according to the difference between the transmission characteristic coefficient and the second preset transmission characteristic threshold, wherein:

[0016] If the transmission characteristic coefficient difference is less than the first preset transmission characteristic coefficient difference, the bandwidth of the data transmission channel is expanded to a corresponding value using the first expansion coefficient;

[0017] If the transmission characteristic coefficient difference is greater than or equal to the first preset transmission characteristic coefficient difference and less than the second preset transmission characteristic coefficient difference, then the bandwidth of the data transmission channel is expanded to a corresponding value using a second expansion coefficient;

[0018] If the transmission characteristic coefficient difference is greater than or equal to the second preset transmission characteristic coefficient difference, then using a third expansion coefficient to expand the bandwidth of the data transmission channel to a corresponding value;

[0019] The transmission characteristic coefficient difference is the difference between the transmission characteristic coefficient and the second preset transmission characteristic threshold.

[0020] Furthermore, the security control module sets a plurality of bandwidth correction methods for the bandwidth of the data transmission channel under the first preset condition, and each bandwidth correction method has a different correction range for the bandwidth of the data transmission channel;

[0021] The first preset condition is that the security control module completes the adjustment of the bandwidth of the data transmission channel and the adjusted signal attenuation is greater than the preset attenuation.

[0022] Furthermore, the security control module determines the adjustment method of the length of the data packet to be transmitted according to the data weight coefficient, wherein:

[0023] If the data weight coefficient is less than the data weight coefficient characteristic value, the security control module determines that the adjustment method of the length of the data packet to be transmitted is to reduce the combined proportion of the interference data;

[0024] If the data weight coefficient is greater than or equal to the data weight coefficient characteristic value, the security control module determines that the adjustment method of the length of the data packet to be transmitted is to reduce the granularity of data division;

[0025] The data weight coefficient is determined according to different data values ​​in the data.

[0026] Furthermore, the safety control module is provided with several proportion adjustment methods for reducing the combined proportion of interference data, and each proportion adjustment method has a different reduction degree for the combined proportion of interference data.

[0027] Furthermore, the security control module sends an encrypted log to the data storage unit after the data logging unit completes key matching.

[0028] Furthermore, the security control module determines the operation strategy of the data decryption unit according to the signature matching degree of the data login unit, wherein:

[0029] If the signature matching degree is less than a first preset matching degree value, the security control module deletes the encrypted log;

[0030] If the signature matching degree is greater than or equal to the first preset matching degree value and less than the second preset matching degree value, the security control module re-determines the operation strategy of the data decryption unit according to the signature duration;

[0031] If the signature matching degree is greater than or equal to the second preset matching degree value, the security control module decrypts the data.

[0032] Furthermore, the security control module deletes the encrypted log in response to the signing duration being greater than or equal to a preset duration.

[0033] Compared with the prior art, the beneficial effects of the present invention are: the present invention includes a data processing module, a data transmission module, a data receiving module and a security control module, and these modules work together to significantly improve the security of electronic information data during transmission, and also optimize the efficiency and stability of data transmission.

[0034] The present invention encrypts the data to be transmitted through a data encryption unit, including data division and combination of interference data, which effectively improves the security of the data transmission process. Even if part of the data packet is intercepted or tampered with, it is difficult to restore the original data, thereby ensuring the confidentiality and integrity of the data.

[0035] The security control module determines whether the security of a single data transmission channel meets the preset standard based on the transmission characteristic coefficient. If it does not meet the preset standard, the adjustment method of the length of the data packet to be transmitted is determined according to the data weight coefficient, or the bandwidth of the data transmission channel is expanded according to the difference between the transmission characteristic coefficient and the second preset transmission characteristic threshold value, thereby ensuring that when the transmission environment is not good, the transmission efficiency and stability are improved by expanding the bandwidth. This dynamic bandwidth management strategy enables the system to adapt to different network environments and improves the adaptability and reliability of the system.

[0036] The security control module expands the bandwidth of the data transmission channel according to the transmission characteristic coefficient difference, and is provided with several bandwidth adjustment modes for the bandwidth expansion of the data transmission channel. It can intelligently select the most appropriate bandwidth adjustment strategy according to the real-time network status and the specific needs of data transmission, which not only improves the data transmission speed, but also enhances the system's adaptability and stability to complex network environments.

[0037] Under the first preset condition, several bandwidth correction methods are set for the bandwidth of the data transmission channel, and each bandwidth correction method has a different correction range for the bandwidth of the data transmission channel. The security control module can use multiple bandwidth correction methods to correct the bandwidth of the data transmission channel to improve transmission efficiency and stability. This efficient bandwidth correction mechanism enables the system to better adapt to complex network environments.

[0038] The security control module determines the adjustment method of the length of the data packet to be transmitted according to the data weight coefficient, and optimizes the structure of the data packet by reducing the combined proportion of the interference data or reducing the granularity of data division to adapt to different transmission needs and security requirements. This intelligent adjustment mechanism improves the efficiency and security of data transmission.

[0039] The security control module is provided with several methods for reducing the combined proportion of the interference data, and each method reduces the combined proportion of the interference data to a different extent, so that the system can adjust the encryption strategy more finely, and optimize the combined proportion of the interference data according to the importance of the data and the requirements of the transmission environment, thereby ensuring data security while also improving the efficiency and stability of data transmission.

[0040] The security control module sends the encrypted log to the data storage unit after the data login unit completes the key matching. The security control module flexibly manages the encrypted log according to the matching degree of the data login unit to ensure that only users with strict identity authentication can access and decrypt the data.

[0041] The security control module determines the operation strategy of the data decryption unit according to the signature matching degree of the data login unit. Under certain circumstances, the system can automatically destroy the encrypted log to prevent data leakage and ensure the security of the data.

[0042] The security control module determines the operation strategy of the data decryption unit for a second time according to the signature duration. The data receiving module adopts a dual verification method of key login and signature login, which improves the security of the data receiving process. Through strict identity authentication, unauthorized access and data leakage are prevented, further ensuring the security of the data. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] Figure 1 This is a schematic diagram of module connections of a system for secure transmission of electronic information data according to an embodiment of the present invention;

[0044] Figure 2 This is a flow chart of an embodiment of the present invention for determining whether the security of a single data transmission channel meets a preset standard according to a transmission characteristic coefficient;

[0045] Figure 3 A flow chart of expanding the bandwidth of a data transmission channel according to a transmission characteristic coefficient difference according to an embodiment of the present invention;

[0046] Figure 4 The present invention is a flowchart of an embodiment of the present invention for determining an operation strategy of a data decryption unit according to a signature matching degree. DETAILED DESCRIPTION

[0047] In order to make the objects and advantages of the present invention more clearly understood, the present invention is further described below in conjunction with embodiments; it should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0048] The preferred embodiments of the present invention are described below with reference to the accompanying drawings. It should be understood by those skilled in the art that these embodiments are only used to explain the technical principles of the present invention and are not intended to limit the protection scope of the present invention.

[0049] See also Figure 1 , Figure 2 , Figure 3 as well as Figure 4 As shown, they are respectively a module connection diagram of the electronic information data security transmission system according to an embodiment of the present invention; a flowchart of determining whether the security of a single data transmission channel meets a preset standard according to a transmission characteristic coefficient according to an embodiment of the present invention; a flowchart of expanding the bandwidth of a data transmission channel according to a transmission characteristic coefficient difference according to an embodiment of the present invention; and a flowchart of determining the operation strategy of a data decryption unit according to a signature matching degree according to an embodiment of the present invention.

[0050] An embodiment of the present invention provides a system for securely transmitting electronic information data, including:

[0051] A data processing module, comprising a data collection unit for collecting data to be transmitted and a data encryption unit for encrypting the data to be transmitted, wherein the encryption method is to obtain a plurality of data packets to be transmitted and an encryption log after completing the division of the data to be transmitted and the combination of the interference data in sequence;

[0052] A data transmission module, which is connected to the data processing module and includes a plurality of data transmission channels, wherein each data transmission channel transmits the data packets to be transmitted alternately in sequence;

[0053] A data receiving module, which is connected to the data transmission module, includes a data storage unit for storing the transmitted data packets and encryption logs, a data decryption unit for decrypting each data packet according to the encryption log, and a data logging unit for logging into the data receiving module, wherein the logging methods include key logging and signature logging;

[0054] A security control module, which is respectively connected to the data processing module, the data transmission module and the data receiving module, and is used to determine whether the security of a single data transmission channel meets the preset standard according to the transmission characteristic coefficient, to expand the bandwidth of the data transmission channel according to the difference in the transmission characteristic coefficient, to determine the adjustment method of the length of the data packet to be transmitted according to the data weight coefficient, and to determine the operation strategy of the data decryption unit according to the matching degree of the data login unit.

[0055] Specifically, the security control module determines whether the security of a single data transmission channel meets a preset standard according to the transmission characteristic coefficient, wherein:

[0056] If the transmission characteristic coefficient is less than the first preset transmission characteristic threshold value of 0.75, the security control module determines that the security of the single data transmission channel meets the preset standard and completes the storage of the transmitted data packet;

[0057] If the transmission characteristic coefficient is greater than or equal to the first preset transmission characteristic threshold and less than the second preset transmission characteristic threshold 0.90, the security control module determines that the security of the single data transmission channel does not meet the preset standard, and determines the adjustment method of the length of the data packet to be transmitted according to the data weight coefficient;

[0058] If the transmission characteristic coefficient is greater than or equal to the second preset transmission characteristic threshold, the security control module determines that the security of the single data transmission channel does not meet the preset standard, and expands the bandwidth of the data transmission channel according to the difference between the transmission characteristic coefficient and the second preset transmission characteristic threshold.

[0059] Specifically, the transmission characteristic coefficient is calculated according to the following formula:

[0060]

[0061] In the formula, Q represents the transmission characteristic coefficient, α represents the first evaluation coefficient, α is set to 0.65, L represents the packet loss rate, Ly represents the packet loss rate threshold, Ly is set to 5%, β represents the second evaluation coefficient, β is set to 0.32, V represents the transmission rate, Vy represents the transmission rate threshold, and Vy is set to 100MB / s.

[0062] Specifically, the security control module expands the bandwidth of the data transmission channel according to the difference between the transmission characteristic coefficient and the second preset transmission characteristic threshold, wherein:

[0063] If the transmission characteristic coefficient difference is less than the first preset transmission characteristic coefficient difference of 0.08, the bandwidth of the data transmission channel is expanded to a corresponding value using a first expansion coefficient of 1.012;

[0064] If the transmission characteristic coefficient difference is greater than or equal to the first preset transmission characteristic coefficient difference and less than the second preset transmission characteristic coefficient difference of 0.15, the bandwidth of the data transmission channel is expanded to a corresponding value using a second expansion coefficient of 1.025;

[0065] If the transmission characteristic coefficient difference is greater than or equal to the second preset transmission characteristic coefficient difference, the bandwidth of the data transmission channel is expanded to a corresponding value using a third expansion coefficient of 1.038;

[0066] The transmission characteristic coefficient difference is the difference between the transmission characteristic coefficient and the second preset transmission characteristic threshold.

[0067] Specifically, the security control module sets several bandwidth correction methods for the bandwidth of the data transmission channel under the first preset condition, wherein:

[0068] If the correction difference is less than the first preset correction difference of 0.12, the bandwidth of the data transmission channel is corrected to a corresponding value using the first correction coefficient of 0.998;

[0069] If the correction difference is greater than or equal to the first preset correction difference and less than the second preset correction difference of 0.25, the bandwidth of the data transmission channel is corrected to a corresponding value using a second correction coefficient of 0.993;

[0070] If the correction difference is greater than or equal to the second preset correction difference, the bandwidth of the data transmission channel is corrected to a corresponding value using a third correction coefficient of 0.985;

[0071] The first preset condition is that the security control module completes the adjustment of the bandwidth of the data transmission channel and the adjusted signal attenuation is greater than the preset attenuation;

[0072] The correction difference is the difference between the adjusted signal attenuation and the preset attenuation of 2dB / km.

[0073] Specifically, the security control module determines the adjustment method of the length of the data packet to be transmitted according to the data weight coefficient, wherein:

[0074] If the data weight coefficient is less than the data weight coefficient characteristic value 1.02, the security control module determines that the adjustment method of the length of the data packet to be transmitted is to reduce the combined proportion of the interference data;

[0075] If the data weight coefficient is greater than or equal to the data weight coefficient characteristic value, the security control module determines that the adjustment method of the length of the data packet to be transmitted is to reduce the granularity of data division;

[0076] The data weight coefficient is determined according to different data values ​​in the data.

[0077] Specifically, the data weight coefficient is the ratio of the different data value to the different data threshold, wherein the different data threshold is 10 6 .

[0078] Specifically, the different data values ​​refer to that in a data set, a list, an array or other data structure, the values ​​of each element or item are different, that is, there are no repeated values.

[0079] Specifically, the security control module is provided with several proportion adjustment methods for reducing the combined proportion of the interference data, wherein:

[0080] If the data weight coefficient difference is less than the first preset data weight coefficient difference of 0.10, the first data weight adjustment coefficient of 0.99 is used to reduce the combined proportion of the interference data to a corresponding value;

[0081] If the data weight coefficient difference is greater than or equal to the first preset data weight coefficient difference and less than the second preset data weight coefficient difference of 0.21, the second data weight adjustment coefficient of 0.97 is used to reduce the combined proportion of the interference data to a corresponding value;

[0082] If the data weight coefficient difference is greater than or equal to the second preset data weight coefficient difference, using a third data weight adjustment coefficient of 0.95 to reduce the combined proportion of the interference data to a corresponding value;

[0083] The data weight coefficient difference is the difference between the data weight coefficient and the data weight coefficient characteristic value.

[0084] Specifically, the security control module sends the encrypted log to the data storage unit after the data logging unit completes the key matching.

[0085] Specifically, the security control module determines the operation strategy of the data decryption unit according to the signature matching degree of the data login unit, wherein:

[0086] If the signature matching degree is less than a first preset matching degree value of 95%, the security control module deletes the encrypted log;

[0087] If the signature matching degree is greater than or equal to the first preset matching degree value and less than the second preset matching degree value 98%, the security control module re-determines the operation strategy of the data decryption unit according to the signature duration;

[0088] If the signature matching degree is greater than or equal to the second preset matching degree value, the security control module decrypts the data.

[0089] Specifically, the security control module deletes the encrypted log in response to the signature duration being greater than or equal to a preset duration of 5.0 s.

[0090] So far, the technical solutions of the present invention have been described in conjunction with the preferred embodiments shown in the accompanying drawings. However, it is easy for those skilled in the art to understand that the protection scope of the present invention is obviously not limited to these specific embodiments. Without departing from the principle of the present invention, those skilled in the art can make equivalent changes or substitutions to the relevant technical features, and the technical solutions after these changes or substitutions will fall within the protection scope of the present invention.

[0091] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A system for secure transmission of electronic information data, characterized in that: include: A data processing module, comprising a data collection unit for collecting data to be transmitted and a data encryption unit for encrypting the data to be transmitted, wherein the encryption method is to obtain a plurality of data packets to be transmitted and an encryption log after completing the division of the data to be transmitted and the combination of the interference data in sequence; A data transmission module, which is connected to the data processing module and includes a plurality of data transmission channels, wherein each data transmission channel transmits the data packets to be transmitted alternately in sequence; A data receiving module, which is connected to the data transmission module, includes a data storage unit for storing the transmitted data packets and encryption logs, a data decryption unit for decrypting each data packet according to the encryption log, and a data login unit for logging into the data receiving module, wherein the login methods include key login and signature login; a security control module, which is connected to the data processing module, the data transmission module and the data receiving module respectively, and is used to determine whether the security of a single data transmission channel meets a preset standard according to a transmission characteristic coefficient, to expand the bandwidth of the data transmission channel according to a transmission characteristic coefficient difference, to determine an adjustment method for the length of the data packet to be transmitted according to a data weight coefficient, and to determine an operation strategy of the data decryption unit according to a matching degree of the data login unit; The security control module determines whether the security of a single data transmission channel meets a preset standard according to the transmission characteristic coefficient, wherein: If the transmission characteristic coefficient is less than the first preset transmission characteristic threshold, the security control module determines that the security of the single data transmission channel meets the preset standard and completes the storage of the transmitted data packet; If the transmission characteristic coefficient is greater than or equal to the first preset transmission characteristic threshold and less than the second preset transmission characteristic threshold, the security control module determines that the security of the single data transmission channel does not meet the preset standard, and determines the adjustment method of the length of the data packet to be transmitted according to the data weight coefficient; If the transmission characteristic coefficient is greater than or equal to the second preset transmission characteristic threshold, the security control module determines that the security of the single data transmission channel does not meet the preset standard, and expands the bandwidth of the data transmission channel according to the difference between the transmission characteristic coefficient and the second preset transmission characteristic threshold; The transmission characteristic coefficient is determined based on the packet loss rate and the transmission rate of the data transmission. The transmission characteristic coefficient is calculated according to the following formula: In the formula, Q represents the transmission characteristic coefficient, α represents the first evaluation coefficient, L represents the packet loss rate, Ly represents the packet loss rate threshold, β represents the second evaluation coefficient, V represents the transmission rate, and Vy represents the transmission rate threshold; The security control module expands the bandwidth of the data transmission channel according to the difference between the transmission characteristic coefficient and the second preset transmission characteristic threshold, wherein: If the transmission characteristic coefficient difference is less than the first preset transmission characteristic coefficient difference, the bandwidth of the data transmission channel is expanded to a corresponding value using the first expansion coefficient; If the transmission characteristic coefficient difference is greater than or equal to the first preset transmission characteristic coefficient difference and less than the second preset transmission characteristic coefficient difference, then the bandwidth of the data transmission channel is expanded to a corresponding value using a second expansion coefficient; If the transmission characteristic coefficient difference is greater than or equal to the second preset transmission characteristic coefficient difference, then using a third expansion coefficient to expand the bandwidth of the data transmission channel to a corresponding value; The transmission characteristic coefficient difference is the difference between the transmission characteristic coefficient and the second preset transmission characteristic threshold.

2. The electronic information data security transmission system according to claim 1, characterized in that: The security control module sets a plurality of bandwidth correction methods for the bandwidth of the data transmission channel under the first preset condition, and each bandwidth correction method has a different correction range for the bandwidth of the data transmission channel; The first preset condition is that the security control module completes the expansion adjustment of the bandwidth of the data transmission channel and the adjusted signal attenuation is greater than the preset attenuation.

3. The electronic information data security transmission system according to claim 2, characterized in that: The security control module determines the adjustment method of the length of the data packet to be transmitted according to the data weight coefficient, wherein: If the data weight coefficient is less than the data weight coefficient characteristic value, the security control module determines that the adjustment method of the length of the data packet to be transmitted is to reduce the combined proportion of the interference data; If the data weight coefficient is greater than or equal to the data weight coefficient characteristic value, the security control module determines that the adjustment method of the length of the data packet to be transmitted is to reduce the granularity of data division; The data weight coefficient is determined according to different data values ​​in the data.

4. The electronic information data security transmission system according to claim 3, characterized in that: The safety control module is provided with several proportion adjustment methods for reducing the combined proportion of the interference data, and each proportion adjustment method has a different reduction range for the combined proportion of the interference data.

5. The electronic information data security transmission system according to claim 4, characterized in that: The security control module sends the encrypted log to the data storage unit after the data logging unit completes the key matching.

6. The electronic information data security transmission system according to claim 5, characterized in that: The security control module determines the operation strategy of the data decryption unit according to the signature matching degree of the data login unit, wherein: If the signature matching degree is less than a first preset matching degree value, the security control module deletes the encrypted log; If the signature matching degree is greater than or equal to the first preset matching degree value and less than the second preset matching degree value, the security control module re-determines the operation strategy of the data decryption unit according to the signature duration; If the signature matching degree is greater than or equal to the second preset matching degree value, the security control module decrypts the data.

7. The electronic information data security transmission system according to claim 6, characterized in that: The security control module deletes the encrypted log in response to the signing duration being greater than or equal to a preset duration.

Images