A method for ensuring information security in inter-process data transmission

Abstract

The application discloses a kind of methods for ensuring information security in inter-process data transmission process, belong to information transmission security field, include the following steps: selecting encryption algorithm and generating corresponding key, the generated key is managed;Sender uses the encryption algorithm selected and key to clear text data and carries out encryption processing;Select transmission protocol and carry out data transmission, monitor data transmission;Receiver decrypts data, and the integrity and authenticity of decrypted data are verified.Encryption algorithm includes symmetric encryption algorithm and asymmetric encryption algorithm, wherein, in symmetric encryption algorithm, sender and receiver use the same key;In asymmetric encryption algorithm, a pair of public key and private key is generated, and the sender uses public key.The application can quickly and effectively encrypt data by selecting appropriate encryption algorithm and transmission protocol, not only saves time and effort, but also can further improve the security of data transmission.

Description

Technical Field

[0001] This invention relates to the field of information transmission security, specifically a method for ensuring information security during data transmission between programs. Background Technology

[0002] Inter-program data transfer refers to the data transmission process between different applications or systems to achieve information exchange and sharing. This transmission allows applications to send and receive data between different computers or devices to achieve functions such as communication, data exchange, and remote access.

[0003] In computer networks, data transmission is typically achieved through network protocols. These protocols define data transmission formats, communication rules, error handling mechanisms, and other mechanisms to ensure reliable and efficient data transmission. During transmission, data is encapsulated into data packets, including the data itself and associated control information (such as source address, destination address, checksum, etc.). These data packets then undergo routing and forwarding processes to be passed from the sender to the receiver.

[0004] To ensure information security during data transmission between programs, a series of measures are needed to guarantee data confidentiality, integrity, and availability. These measures include using encryption protocols, strengthening authentication, regular backup and recovery, using firewalls and security devices, enhancing password security, and updating and maintaining software. However, these measures are not only time-consuming and labor-intensive, but also cannot further improve the security of data transmission.

[0005] Therefore, those skilled in the art have provided a method to ensure information security during data transmission between programs, in order to solve the problems mentioned in the background art. Summary of the Invention

[0006] The purpose of this invention is to provide a method for ensuring information security during data transmission between programs. By selecting appropriate encryption algorithms and transmission protocols, data can be encrypted quickly and effectively, saving time and effort, and further improving the security of data transmission, thereby solving the problems mentioned in the background art.

[0007] To achieve the above objectives, the present invention provides the following technical solution:

[0008] A method for ensuring information security during data transmission between programs includes the following steps:

[0009] Select an encryption algorithm and generate the corresponding key, and manage the generated key;

[0010] The sender encrypts the plaintext data using the selected encryption algorithm and key;

[0011] Select the transmission protocol and transmit the data, then monitor the data transmission.

[0012] The recipient decrypts the data and verifies its integrity and authenticity.

[0013] As a further aspect of the present invention: the encryption algorithm includes a symmetric encryption algorithm and an asymmetric encryption algorithm, wherein, in the symmetric encryption algorithm, the sender and the receiver use the same key; in the asymmetric encryption algorithm, a pair of public and private keys is generated, the sender uses the public key and the receiver uses the private key.

[0014] As a further aspect of the present invention, the specific process of selecting the encryption algorithm is as follows:

[0015] Label the data type of this data transfer as A, and label the amount of data transferred as B;

[0016] Extract data transmission records of the same type as A from the big data dataset and label them as ai, i = 1...n, where n is a positive integer;

[0017] The amount of data transmitted in ai is denoted as bi, where i = 1···n;

[0018] Compare B with all bi one by one. If the absolute value of the difference between B and bi is less than the first preset value, then bi is assigned to the first sequence. If the absolute value of the difference between B and bi is greater than or equal to the first preset value, then bi is assigned to the second sequence.

[0019] Identify the ai corresponding to bi in the first sequence. If the ai corresponding to bi has a data transmission anomaly, it is planned to the third sequence. If the ai corresponding to bi does not have a data transmission anomaly, it is planned to the fourth sequence.

[0020] Count the number of ai in the third sequence that uses a symmetric encryption algorithm and label it as C1; count the number of ai in the third sequence that uses an asymmetric encryption algorithm and label it as C2.

[0021] Compare C1 and C2. If C1 > C2, the selected encryption algorithm is an asymmetric encryption algorithm. If C1 ≤ C2, the selected encryption algorithm is a symmetric encryption algorithm.

[0022] As a further aspect of the present invention, the specific process for selecting the transmission protocol is as follows:

[0023] Divide a day into twenty-four time periods according to hours, obtain the time period in which this data transmission occurs and mark it as T;

[0024] Extract data transmission records that are in the same time period as T from ai, and then mark the corresponding transmission protocol in the extracted data transmission records as Ci, i = 1···n;

[0025] Group Ci belonging to the same transport protocol into the same cluster, calculate the number of Ci in each cluster and label it as X1;

[0026] For the ai corresponding to Ci in the same cluster, if the ai corresponding to Ci has a data transmission anomaly, it is planned to the fifth sequence; if the ai corresponding to Ci does not have a data transmission anomaly, it is planned to the sixth sequence.

[0027] Count the number of ai in the fifth sequence and label it as x1;

[0028] Calculate the application weight value V for each cluster as V = 60% * (X1 / X2) - 40% (x1 / x2), where X2 and x2 are preset values;

[0029] The transport protocol corresponding to the cluster with the largest application weight value V is output as the selected transport protocol.

[0030] As a further aspect of the present invention: during the monitoring of data transmission, if the data transmission task is interrupted, it indicates that the data transmission task is abnormal and a fault alarm is triggered.

[0031] As a further aspect of the present invention: the fault alarm uses two sets of multiple LED beads for alarm function. One set of LED beads is used to alarm when an interruption occurs during the data transmission task, and the other set of LED beads is used to alarm when the transmission speed is abnormal during the data transmission task. The specific alarm process is as follows:

[0032] The total number of interruptions during the statistical data transmission task is denoted as Y, where Y is a positive integer;

[0033] Each time the data transmission task is interrupted, one LED light is lit, and eventually Y LED lights are lit.

[0034] Calculate the recovery time ti after each synchronization interruption, where i = 1 ... Y;

[0035] If ti is less than the second preset value, the LED corresponding to ti will light up green.

[0036] If ti is greater than or equal to the second preset value and ti is less than the third preset value, then the LED corresponding to ti will light up yellow.

[0037] If ti is greater than or equal to the third preset value and ti is less than the fourth preset value, then the LED corresponding to ti will light up red.

[0038] If ti is greater than or equal to the fourth preset value, then the LED corresponding to ti will light up with a purple light;

[0039] The total time taken during the statistical data transmission task is denoted as T_total, where T_total is in minutes and is rounded up to the nearest integer.

[0040] During the data transmission task, one LED light is lit up every minute, until a total of T LED lights are lit up; the LED light corresponding to the current time point will flash until the next minute of the minute in which the current time point is located is entered;

[0041] The average data transmission rate per minute during the data transmission task is denoted as Di, where i = 1···T_total;

[0042] Compare Di with the fifth preset value. If Di is greater than the fifth preset value, the LED corresponding to Di will light up green. If Di is less than or equal to the fifth preset value, the LED corresponding to Di will light up red.

[0043] The data transmission speed at the current point in time during the data transmission task is denoted as d;

[0044] Calculate the flashing frequency of the LED at the current time point f = (d / dm) * fm, where dm is the preset data transmission speed and fm is the preset flashing frequency.

[0045] As a further aspect of the present invention, the specific process for verifying the integrity and authenticity of the decrypted data is as follows:

[0046] Before data transmission, a hash function is used to calculate the hash value of the data, and this hash value is then appended to the data and sent together.

[0047] Upon receiving the data, the same hash function is used to recalculate the hash value of the data, and it is compared with the hash value provided by the sender. If the two are consistent, it means that the integrity of the decrypted data is not abnormal; if the two are inconsistent, it means that the integrity of the decrypted data is abnormal.

[0048] Data cleaning and data quality assessment tools are used to preprocess and verify the data. If the verification results show anomalies, it indicates that the authenticity of the decrypted data is abnormal. If the verification results show no anomalies, it indicates that the authenticity of the decrypted data is normal.

[0049] As a further aspect of the present invention: when managing the generated keys, the keys are stored in physical storage media or encrypted cloud storage services, and key backups are performed regularly to prevent accidental loss. At the same time, the keys are updated regularly, and keys that are no longer needed are destroyed in a timely manner to prevent leakage.

[0050] Compared with the prior art, the beneficial effects of the present invention are:

[0051] 1. By selecting appropriate encryption algorithms and transmission protocols, this application can quickly and effectively encrypt data, saving both time and effort.

[0052] 2. This application uses two sets of multiple LED beads for alarm during data transmission. One set of LED beads is used to alarm when the data transmission task is interrupted, and the other set of LED beads is used to alarm when the transmission speed is abnormal during the data transmission task, thereby timely reminding the staff. Attached Figure Description

[0053] Figure 1 This is a flowchart illustrating a method for ensuring information security during data transmission between programs. Detailed Implementation

[0054] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0055] As mentioned in the background section of this application, research has found that existing measures for protecting data transmission security are not only time-consuming and labor-intensive, but also fail to further improve the security of data transmission, thus having certain shortcomings.

[0056] To address the aforementioned deficiencies, this application discloses a method for ensuring information security during data transmission between programs. By selecting appropriate encryption algorithms and transmission protocols, data can be encrypted quickly and effectively, saving time and effort while further improving the security of data transmission.

[0057] The following will describe in detail, with reference to the accompanying drawings, how the solution of this application solves the above-mentioned technical problems.

[0058] Please see Figure 1 This invention provides a method for ensuring information security during data transmission between programs, comprising the following steps: selecting an encryption algorithm and generating a corresponding key, and managing the generated key; the sender encrypting plaintext data using the selected encryption algorithm and key; selecting a transmission protocol and transmitting the data, and monitoring the data transmission; the receiver decrypting the data and verifying the integrity and authenticity of the decrypted data. This application, by selecting a suitable encryption algorithm and transmission protocol, can quickly and effectively encrypt data, saving both time and effort.

[0059] In this embodiment, the encryption algorithm includes symmetric and asymmetric encryption algorithms. In the symmetric encryption algorithm, the sender and receiver use the same key; in the asymmetric encryption algorithm, a public and private key pair is generated, with the sender using the public key and the receiver using the private key. Common symmetric encryption algorithms include DES (Data Encryption Standard), 3DES (Triple DES), AES (Advanced Encryption Standard), and RC4 (RivestCipher 4). Common asymmetric encryption algorithms include RSA (Rivest, Shamir, Adleman), DSA (Digital Signature Algorithm), and ECC (Elliptic Curve Cryptography).

[0060] In this embodiment, the specific process of selecting the encryption algorithm is as follows: The data type of this data transmission is labeled A, and the data volume of this data transmission is labeled B; data transmission records of the same type as A are obtained from the large dataset and labeled ai, i = 1...n, where n is a positive integer; the data volume of data transmitted in ai is labeled bi, i = 1...n; B is compared one by one with all bi. If the absolute value of the difference between B and bi is less than a first preset value, then bi is assigned to the first sequence; if the absolute value of the difference between B and bi is greater than or equal to the first preset value, then bi is assigned to the first sequence. The algorithm is planned to be assigned to the second sequence. For the ai corresponding to bi in the first sequence, it is identified. If the ai corresponding to bi has a data transmission anomaly, it is assigned to the third sequence; otherwise, it is assigned to the fourth sequence. The number of ai using symmetric encryption algorithms in the third sequence is counted and marked as C1, and the number of ai using asymmetric encryption algorithms in the third sequence is counted and marked as C2. C1 and C2 are compared. If C1 > C2, the selected encryption algorithm is asymmetric; if C1 ≤ C2, the selected encryption algorithm is symmetric. This setting can quickly select the encryption algorithm suitable for this transmission task.

[0061] In this embodiment, the specific process for selecting the transmission protocol is as follows: A day is divided into twenty-four time periods by hours; the time period in which this data transmission occurs is obtained and marked as T; data transmission records within the same time period as T are extracted from ai, and the corresponding transmission protocols in the extracted data transmission records are marked as Ci, i = 1...n; Ci belonging to the same transmission protocol are grouped into the same cluster, and the number of Ci in each cluster is calculated and marked as X1; ai corresponding to Ci in the same cluster is identified; if the ai corresponding to Ci has a data transmission anomaly, it is grouped into the fifth sequence; if the ai corresponding to Ci does not have a data transmission anomaly, it is grouped into the sixth sequence; the number of ai in the fifth sequence is counted and marked as x1; the application weight value V of each cluster is calculated as V = 60%*(X1 / X2) - 40%(x1 / x2), where X2 and x2 are preset values; the transmission protocol corresponding to the cluster with the largest application weight value V is output as the selected transmission protocol. This setting can quickly select the transmission protocol suitable for this transmission task.

[0062] In this embodiment, if the data transmission task is interrupted during the monitoring process, it indicates an anomaly in the data transmission task and triggers a fault alarm. This setting facilitates timely notification to staff when a fault occurs.

[0063] In this embodiment, the fault alarm uses two sets of multiple LED beads. One set of LED beads is used to alarm when an interruption occurs during the data transmission task, and the other set of LED beads is used to alarm when the transmission speed is abnormal during the data transmission task. The specific alarm process is as follows: The total number of interruptions during the data transmission task is counted and denoted as Y, where Y is a positive integer; one LED bead lights up for each interruption, until Y LED beads are lit; the recovery time ti after each synchronization interruption is counted, i = 1...Y; if ti is less than a second preset value, the LED bead corresponding to ti lights up green; if ti is greater than or equal to the second preset value and less than a third preset value, the LED bead corresponding to ti lights up yellow; if ti is greater than or equal to the third preset value and less than a fourth preset value, the LED bead corresponding to ti lights up red; if ti is greater than or equal to the fourth preset value, the LED bead corresponding to ti lights up purple; the statistical data... The total time consumed during the data transmission task is denoted as T_total, where T_total is in minutes and is rounded up to the nearest integer. One LED light illuminates every minute during the data transmission task, up to a total of T_total LED lights. The LED light corresponding to the current time point flashes until the next minute begins. The average data transmission rate per minute during the data transmission task is denoted as Di, where i = 1...T_total. Di is compared to a fifth preset value. If Di is greater than the fifth preset value, the corresponding LED light illuminates green; if Di is less than or equal to the fifth preset value, the corresponding LED light illuminates red. The data transmission rate at the current time point (i.e., the current number of seconds) during the data transmission task is denoted as d. The flashing frequency of the LED light corresponding to the current time point is calculated as f = (d / dm)*fm, where dm is the preset data transmission rate and fm is the preset flashing frequency. This setup can quickly identify speed and interruption anomalies during data transmission. More specifically, this application uses two sets of multiple LED beads for alarm during data transmission. One set of LED beads is used to alarm when an interruption occurs during the data transmission task, and the other set of LED beads is used to alarm when the transmission speed is abnormal during the data transmission task, thereby promptly reminding staff.

[0064] In this embodiment, the specific process for verifying the integrity and authenticity of the decrypted data is as follows: Before data transmission, a hash function is used to calculate the data, generating a hash value, which is then appended to the data and sent together. After receiving the data, the same hash function is used to recalculate the hash value of the data, and it is compared with the hash value provided by the sender. If they match, it indicates that the integrity of the decrypted data is not abnormal; if they do not match, it indicates that the integrity of the decrypted data is abnormal. Data cleaning and data quality assessment tools are used to preprocess and verify the data. If the verification result is abnormal, it indicates that the authenticity of the decrypted data is abnormal; if the verification result is not abnormal, it indicates that the authenticity of the decrypted data is not abnormal. A hash function is a function that maps input data of arbitrary length (usually called a "message" or "pre-mapped") to a fixed-length output string (called a "hash value," "hash code," or "digital digest") through a specific hashing algorithm. This transformation process has the characteristic of compression mapping, that is, the space of hash values ​​is usually much smaller than the space of input. Due to this characteristic, different inputs may produce the same output, called a hash collision, but theoretically it is impossible to uniquely determine the input value from the hash value. The specific process of data preprocessing and validation using data cleaning and data quality assessment tools is as follows:

[0065] 1. Choose the appropriate tools

[0066] First, select the appropriate tool based on the type, scale, and validation requirements of the data. There are many types of data validation tools, including data cleaning tools, data quality assessment tools, and data comparison tools. Each tool has its specific functions and advantages, so factors such as compatibility, ease of use, performance, and price should be considered when making a selection.

[0067] 2. Data Preparation

[0068] Before using the validation tool, perform appropriate preprocessing on the data. This includes steps such as data import, cleaning, and format conversion. Ensure that the data has undergone the necessary processing before importing it into the tool to improve the accuracy and efficiency of the validation.

[0069] 3. Set verification rules

[0070] Different data types and business scenarios require different validation rules. Before introducing any tools, it's essential to clearly define the data validation requirements and establish corresponding validation rules. These rules include requirements regarding data format, scope, uniqueness, and consistency.

[0071] 4. Run the tool to verify.

[0072] Input the prepared data and defined validation rules into the tool, and then run the tool to perform validation. The tool will conduct a comprehensive check and analysis of the data according to the set rules and generate a validation report. The report usually lists in detail the problems, errors, or inconsistencies (i.e., outliers) in the data, as well as corresponding solutions or recommendations.

[0073] 5. Analyze and verify the results

[0074] Upon receiving the verification report, carefully analyze the results. This includes understanding what problems exist in the data, the nature and severity of these problems, and possible solutions or recommendations. Based on the analysis results, further revise and improve the data to enhance its accuracy and reliability.

[0075] In this embodiment, when managing the generated keys, the keys are stored in physical storage media or encrypted cloud storage services, and key backups are performed regularly to prevent accidental loss. At the same time, the keys are updated regularly, and keys that are no longer needed are destroyed in a timely manner to prevent leakage.

[0076] This invention, by selecting appropriate encryption algorithms and transmission protocols, can quickly and effectively encrypt data, saving both time and effort. During data transmission, two sets of multiple LED beads are used for alarm functions: one set of LED beads is used to alarm when data transmission is interrupted, and the other set is used to alarm when the transmission speed is abnormal, thus promptly alerting staff.

[0077] Obviously, those skilled in the art can make various modifications and variations to this invention without departing from its spirit and scope. Therefore, if these modifications and variations fall within the scope of the claims of this invention and their equivalents, this invention also intends to include these modifications and variations.

[0078] The above description is merely a preferred embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any equivalent substitutions or modifications made by those skilled in the art within the scope of the technology disclosed in the present invention, based on the technical solution and inventive concept of the present invention, should be covered within the scope of protection of the present invention.

Claims

1. A method for ensuring information security during data transmission between programs, characterized in that, Includes the following steps: Select an encryption algorithm and generate a corresponding key, and manage the generated key. The encryption algorithm includes symmetric encryption algorithms and asymmetric encryption algorithms. In the symmetric encryption algorithm, the sender and receiver use the same key. In the asymmetric encryption algorithm, a public key and a private key pair are generated; the sender uses the public key, and the receiver uses the private key. The specific process of selecting the encryption algorithm is as follows: label the data type of this data transmission as A, and the data volume of this data transmission as B; obtain data transmission records of the same type as A from the large dataset and label them as ai, i=1···n, where n is a positive integer; label the data volume of the data transmission in ai as bi, i=1···n; compare B with all bi one by one. If B... If the absolute value of the difference between B and bi is less than a first preset value, then bi is assigned to the first sequence. If the absolute value of the difference between B and bi is greater than or equal to the first preset value, then bi is assigned to the second sequence. The ai corresponding to bi in the first sequence is identified. If the ai corresponding to bi has a data transmission anomaly, it is assigned to the third sequence. If the ai corresponding to bi does not have a data transmission anomaly, it is assigned to the fourth sequence. The number of ai using symmetric encryption algorithms in the third sequence is counted and marked as C1. The number of ai using asymmetric encryption algorithms in the third sequence is counted and marked as C2. C1 and C2 are compared. If C1 > C2, the selected encryption algorithm is an asymmetric encryption algorithm. If C1 ≤ C2, the selected encryption algorithm is a symmetric encryption algorithm. The sender encrypts the plaintext data using the selected encryption algorithm and key; Select the transmission protocol and transmit the data, then monitor the data transmission. The recipient decrypts the data and verifies its integrity and authenticity.

2. The method for ensuring information security during inter-program data transmission according to claim 1, characterized in that, The specific process for selecting the transmission protocol is as follows: Divide a day into twenty-four time periods according to hours, obtain the time period in which this data transmission occurs and mark it as T; Extract data transmission records that are in the same time period as T from ai, and then mark the corresponding transmission protocol in the extracted data transmission records as Ci, i=1···n; Group Ci belonging to the same transport protocol into the same cluster, calculate the number of Ci in each cluster and label it as X1; For the ai corresponding to Ci in the same cluster, if the ai corresponding to Ci has a data transmission anomaly, it is planned to the fifth sequence; if the ai corresponding to Ci does not have a data transmission anomaly, it is planned to the sixth sequence. Count the number of ai in the fifth sequence and label it as x1; Calculate the application weight value V for each cluster as V = 60% * (X1 / X2) - 40% (x1 / x2), where X1 and x2 are preset values; The transport protocol corresponding to the cluster with the largest application weight value V is output as the selected transport protocol.

3. The method for ensuring information security during inter-program data transmission according to claim 2, characterized in that, If an interruption occurs during the data transmission monitoring process, it indicates that the data transmission task is abnormal and a fault alarm will be triggered.

4. The method for ensuring information security during inter-program data transmission according to claim 3, characterized in that, The fault alarm uses two sets of multiple LED beads for alarm function. One set of LED beads is used to alarm when an interruption occurs during the data transmission task, and the other set of LED beads is used to alarm when the transmission speed is abnormal during the data transmission task. The specific alarm process is as follows: The total number of interruptions during the statistical data transmission task is denoted as Y, where Y is a positive integer; Each time the data transmission task is interrupted, one LED light is lit, and eventually Y LED lights are lit. Calculate the recovery time ti after each synchronization interruption, where i=1···Y; If ti is less than the second preset value, the LED corresponding to ti will light up green. If ti is greater than or equal to the second preset value and ti is less than the third preset value, then the LED corresponding to ti will light up yellow. If ti is greater than or equal to the third preset value and ti is less than the fourth preset value, then the LED corresponding to ti will light up red. If ti is greater than or equal to the fourth preset value, then the LED corresponding to ti will light up with a purple light; The total time taken during the statistical data transmission task is denoted as T_total, where T_total is in minutes and is rounded up to the nearest integer. During the data transmission task, one LED light is lit up every minute, until a total of T LED lights are lit up; the LED light corresponding to the current time point will flash until the next minute of the minute in which the current time point is located is entered; The average data transmission rate per minute during the data transmission task is denoted as Di, i=1···Ttotal; Compare Di with the fifth preset value. If Di is greater than the fifth preset value, the LED corresponding to Di will light up green. If Di is less than or equal to the fifth preset value, the LED corresponding to Di will light up red. The data transmission speed at the current point in time during the data transmission task is denoted as d; Calculate the flashing frequency of the LED at the current time point f = (d / dm) * fm, where dm is the preset data transmission speed and fm is the preset flashing frequency.

5. The method for ensuring information security during inter-program data transmission according to claim 4, characterized in that, The specific process for verifying the integrity and authenticity of the decrypted data is as follows: Before data transmission, a hash function is used to calculate the hash value of the data, and this hash value is then appended to the data and sent together. Upon receiving the data, the same hash function is used to recalculate the hash value of the data, and it is compared with the hash value provided by the sender. If the two are consistent, it means that the integrity of the decrypted data is not abnormal; if the two are inconsistent, it means that the integrity of the decrypted data is abnormal. Data cleaning and data quality assessment tools are used to preprocess and verify the data. If the verification results show anomalies, it indicates that the authenticity of the decrypted data is abnormal. If the verification results show no anomalies, it indicates that the authenticity of the decrypted data is normal.

6. The method for ensuring information security during inter-program data transmission according to claim 5, characterized in that, When managing the generated keys, the keys are stored in physical storage media or encrypted cloud storage services, and key backups are performed regularly to prevent accidental loss. At the same time, the keys are updated regularly, and keys that are no longer needed are destroyed in a timely manner to prevent leakage.

Images