Multi-source heterogeneous data transmission method

Abstract

The invention belongs to the technical field of computer data transmission management methods, and particularly relates to a multi-source heterogeneous data transmission method. Comprising the following steps: establishing a multi-source heterogeneous data transmission control system, and generating corresponding address data; the strategy module formulates corresponding processing strategies for different data types and data contents and stores the processing strategies to generate corresponding encryption strategies; the configuration module continuously forms and updates the data interaction type of the multi-source data end and corresponding strategy calling data according to the interaction history, and establishes a corresponding encryption sequence and a strategy database; and retrieving the data, matching the data with the encrypted sequence, and calling corresponding strategy information. The multi-source heterogeneous data transmission method provided by the invention is mainly used for providing a transmission method capable of carrying out a heterogeneous data encryption and decryption transmission process and improving transmission efficiency and data validity, and is used for completing an enhanced transmission task of heterogeneous data in a secret-related field, reducing resource consumption of data transmission and improving system resource utilization efficiency.

Description

Technical Field

[0001] The present invention belongs to the technical field of computer data transmission management methods, and in particular relates to a multi-source heterogeneous data transmission method. Background Art

[0002] As computer information technology develops rapidly, the types of data and tasks that need to be processed by computers are increasing. In the process of executing some tasks, it is often involved in the transmission and utilization of a large amount of heterogeneous data of different types and structures. Due to the differences between data structures, different types of processing means and methods are often involved in the transmission method and data analysis process. It is often difficult to reach a consensus on their efficiency and processing progress. This makes it difficult to coordinate the utilization of computer resources in the process of transmitting and utilizing heterogeneous data. Summary of the invention

[0003] The purpose of the present invention is to provide a transmission method for solving the problems of low efficiency in the transmission process of heterogeneous data, especially involving the encryption and decryption transmission process of confidential data.

[0004] To achieve the above purpose, the present invention adopts the following technical solution.

[0005] A multi-source heterogeneous data transmission method comprises the following steps:

[0006] Step 1: Establish a multi-source heterogeneous data transmission control system, which includes a multi-source data transmission control center and a multi-source data terminal;

[0007] The multi-source heterogeneous data transmission control system includes a configuration module, a data acquisition module, a strategy module, and an encryption information generation module; the configuration module establishes a multi-source data terminal classification and identification scheme, and when data interaction is detected, extracts corresponding identification tags from the source address data to confirm the multi-source data terminal attributes; the data acquisition module is used to collect and update multi-source data terminal information and generate corresponding address data; the strategy module is used to: formulate corresponding processing strategies for different data types and data contents and store them, generate corresponding encryption strategies, and send corresponding strategy information to the multi-source data terminal according to the request or actively; the encryption information generation module generates encryption sequence, encryption key and other encryption parameter information required in the data encryption process based on the credit platform, and sends corresponding encryption parameter information to the multi-source data terminal according to the request;

[0008] The multi-source data terminal mainly includes a parser, a security module, an encryption and decryption module, and a forwarding module;

[0009] The parser is used to extract the data packet header, determine the data encryption status, and call the security module for unencrypted data to determine whether encryption processing is required; the security module is used to match the input data with the security policy. The security policy refers to the decision whether a specific data packet should be sent to the forwarding module or the encryption module. Specifically, the information is matched through the source address, destination address, protocol ID, and data type in the data packet and the preset operation is performed; the encryption and decryption module is used to complete the encryption and decryption operation of the data; the forwarding module is used to process the received data, and match the destination address using the corresponding matching method according to the data type, and map the data packet to the corresponding data port through the destination address;

[0010] Step 2: After the multi-source data transmission control center contacts the multi-source data terminal for the first time, the data acquisition module collects and updates the multi-source data terminal information and generates corresponding address data; it also includes extracting inbound data from the header information of the uploaded data packet, extracting the source address and destination address by parsing the data and marking and storing them; the configuration module establishes a multi-source data terminal classification and identification database, extracts corresponding identification tags from the source address data when data interaction occurs to confirm the multi-source data terminal attributes; it also includes establishing and updating the data structure for multi-source data terminal tag identification, creating data terminal type, data type corresponding classification and data address mapping sequence;

[0011] Step 3: The policy module formulates and stores corresponding processing strategies for different data types and data contents, and generates corresponding encryption strategies;

[0012] Specifically: when the policy module first obtains the multi-source data end as the source address and the target address, it creates the corresponding address mapping before and after encryption; when each multi-source data end requests the encryption policy, it creates a security policy mapping sequence stored in the form of key-value pairs.

[0013] Step 4: The configuration module continuously forms and updates the multi-source data terminal data interaction type and the corresponding policy call data according to the interaction history, and establishes the corresponding encryption sequence and policy database;

[0014] Step 5: The security module obtains the unencrypted data extracted by the parser, retrieves the data header information and matches it with the local encryption sequence. If the match is successful, the encryption policy information and data are sent to the encryption module. If the corresponding data header information is not matched in the local encryption sequence, it is uploaded to the control center policy module for retrieval and processed accordingly according to the data sent by the control center; including direct forwarding without processing or encryption processing after updating the encryption policy and local sequence;

[0015] Step 6: The policy module retrieves the data in the policy mapping sequence according to the data packet header uploaded by the multi-source data terminal, and retrieves the corresponding policy information and sends it to the multi-source data terminal. If the corresponding policy information is not retrieved, the corresponding data is recorded and a signal not to be processed is sent;

[0016] The multi-source data terminal obtains the matching sequence sent to the local, first extracts the hash value, verifies the uniqueness of the hash value, and searches for the corresponding address offset if it is unique. If it is not unique, the data is updated synchronously.

[0017] As a further improvement or specific implementation method of the aforementioned multi-source heterogeneous data transmission method, the policy module is also used to create a policy database and an address database. The policy database is used to store security policies and policy sequences. The policy sequence establishes correspondence information between different multi-source data types and their security policies. The address database is used to store address mapping data before and after encryption during the process of encrypting and decrypting source addresses and destination addresses.

[0018] In a further improvement or specific implementation of the aforementioned multi-source heterogeneous data transmission method, the encryption and decryption module receives a data packet from the security module, receives an encryption sequence, an encryption key, and an encryption strategy from the control center, matches the data packet with the encryption sequence, and performs corresponding processing according to the matching result;

[0019] In particular, it is also used to: obtain source address and destination address information in a data packet from a control center, and synchronously encrypt data channel endpoint information corresponding to the source address and the destination address into the data packet;

[0020] In particular, the decryption strategy includes transmission encryption and data encryption. The transmission encryption strategy refers to encrypting the data packet header based on the tunnel transmission mode using an encryption algorithm, performing data integrity verification using a hash algorithm, and creating new header data for encapsulation using the tunnel endpoint address; data encryption refers to directly encrypting the corresponding data using an encryption algorithm.

[0021] A further improvement or specific implementation of the aforementioned multi-source heterogeneous data transmission method, the matching includes: for IPv4 data, using the longest prefix match to obtain the destination address data, and if it is heterogeneous data, using an exact match method to match the destination address.

[0022] A further improvement or specific implementation method of the aforementioned multi-source heterogeneous data transmission method, wherein step five also includes, during each interaction between the multi-source data terminal and the control center, the control center sends the updated matched address mapping, encryption sequence, and encryption policy data to the multi-source data terminal and stores them locally. Each time data is transmitted to the multi-source data terminal, a local search is first performed to determine whether there is a corresponding policy mapping and whether there is a corresponding source address and destination address mapping in the data packet in the local address database. If so, corresponding processing is performed according to the locally stored data configuration; if not, the corresponding data is sent to the control center, the control center checks the existing mapping data, searches for the corresponding encryption policy, and generates a corresponding mapping sequence based on the found policy information and sends it to the multi-source data terminal.

[0023] A further improvement or specific implementation method of the aforementioned multi-source heterogeneous data transmission method, wherein the policy information at least includes information on data transmission encryption processing; specifically, it refers to: a multi-layer data packet header structure of split multi-source data, determining the location of the data packet header where the key information is located, and determining the encryption start address by sending a stream sequence, performing a hash operation on the packet header of the input data, and the control center establishing a key-value pair mapping based on the data packet header ID and the corresponding hash value for storage;

[0024] Furthermore, during the hash operation, the control center establishes a multi-parameter mapping matching sequence according to the parameter type in the received data packet header. Each time a new parameter is obtained, a local mapping match is performed. If no corresponding data is matched, it is added to the matching sequence. The matching sequence stores the data packet name, hash value and address offset. The address offset refers to the address offset used to record specific data packet headers and key data packet headers in the data packet level.

[0025] A further improvement or specific implementation of the aforementioned multi-source heterogeneous data transmission method, wherein step six further includes a step of adaptively updating the encryption strategy, specifically referring to:

[0026] 1) Establish the data transmission index K = {k|k i (T,Q,S)}, where k i (T, Q, S) is the evaluation function of data transmission delay T, data transmission throughput Q and data transmission security index S; where T = T 1 +T 2 +T 3 ; Q = aT -1 ; T 1 It refers to the unit data packet processing delay, T 2 Refers to the encryption and decryption delay of a unit data packet, T 3 It refers to the delay in data packet disassembly and encapsulation processing;

[0027] 2) Initialize the encryption policy set A = {A 1 ,A 2 ,...A n} and encryption policy performance set B = {B 1 ,B 2 ,...B n}, where A n Refers to the nth encryption strategy. The elements in the encryption strategy set A are arranged in order from small to large in terms of system resource consumption; B n It refers to the performance index of the nth encryption strategy;

[0028] 3) Update the encryption policy set A = {A 1 ,A 2 ,...A n} and encryption policy performance set B = {B 1 ,B 2 ,...B n}, obtain the system data transmission performance index requirement K￠; start the data transmission performance test, obtain the data transmission performance index K under the current encryption strategy, and determine whether the data transmission performance index K under the current encryption strategy meets the requirements of the system data transmission performance index requirement K￠; if not, then select the encryption strategy set A={A 1 ,A 2 ,...A n} and encryption policy performance set B = {B 1 ,B 2 ,...B n}, and compare whether the data transmission performance index K under the corresponding encryption policy meets the requirements of the unified data transmission performance index requirement K￠, until whether the data transmission performance index K under the current encryption policy meets the requirements of the unified data transmission performance index requirement K￠; if satisfied, keep the current state and do not process. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] Figure 1 It is a schematic diagram of a multi-source heterogeneous data transmission control system;

[0030] Figure 2 It is a flowchart of a multi-source heterogeneous data transmission method. DETAILED DESCRIPTION

[0031] The present invention is described in detail below in conjunction with specific embodiments.

[0032] The multi-source heterogeneous data transmission method of the present application is mainly used to provide a transmission method that can perform heterogeneous data encryption and decryption transmission processes, improve transmission efficiency and data validity, and is used to complete the enhanced transmission tasks of heterogeneous data in confidential fields, reduce resource consumption of data transmission, and improve system resource utilization efficiency.

[0033] The multi-source heterogeneous data transmission method is mainly implemented based on the following steps:

[0034] Step 1: Establish a multi-source heterogeneous data transmission control system, which includes a multi-source data transmission control center and a multi-source data terminal;

[0035] like Figure 1 The multi-source heterogeneous data transmission control system shown includes a multi-source data transmission control center and a multi-source data terminal;

[0036] The multi-source heterogeneous data transmission control system includes a configuration module, a data acquisition module, a strategy module, and an encryption information generation module;

[0037] The configuration module establishes a multi-source data terminal classification and identification scheme. When data interaction is detected, the corresponding identification mark is extracted from the source address data to confirm the multi-source data terminal attributes;

[0038] The data acquisition module is used to collect and update multi-source data terminal information and generate corresponding address data;

[0039] The policy module is used to: formulate and store corresponding processing strategies for different data types and data contents, generate corresponding encryption strategies, and send corresponding policy information to multi-source data terminals according to their requests or actively; in particular, the policy module creates a policy database and an address database, and the policy database is used to store security policies and policy sequences, and the policy sequence establishes the corresponding relationship information between different multi-source data types and their security policies;

[0040] The encryption information generation module generates encryption parameter information such as encryption sequence and encryption key required in the data encryption process based on the trust platform, and sends the corresponding encryption parameter information to the multi-source data terminal according to the request;

[0041] The address database is used to store address mapping data before and after encryption during the process of encrypting and decrypting source addresses and destination addresses;

[0042] The multi-source data terminal mainly includes a parser, a security module, an encryption and decryption module, and a forwarding module;

[0043] The parser is used to extract the data packet header, determine the data encryption status, and call the security module to determine whether encryption processing is required for unencrypted data;

[0044] The security module is used to match input data with security policies. Security policies are used to decide whether a specific data packet should be sent to the forwarding module or the encryption module. Specifically, the information is matched based on the source address, destination address, protocol ID, and data type in the data packet and preset operations are performed.

[0045] The encryption and decryption module is used to complete the encryption and decryption operations of the data; the forwarding module is used to process the received data, and match the destination address using the corresponding matching method according to the data type, and map the data packet to the corresponding data port through the destination address;

[0046] Step 2: After the multi-source data transmission control center contacts the multi-source data terminal for the first time, the data acquisition module acquires and updates the multi-source data terminal information and generates corresponding address data;

[0047] It also includes extracting inbound data from the header information of the uploaded data packet, extracting the source address and destination address by parsing the data, and marking and storing them;

[0048] The configuration module establishes a multi-source data terminal classification identification database, and extracts corresponding identification tags from the source address data to confirm the multi-source data terminal attributes when data interaction occurs;

[0049] It also includes establishing and updating the data structure for multi-source data terminal tag identification, creating data terminal type, data type corresponding classification and data address mapping sequence

[0050] Step 3: The policy module formulates and stores corresponding processing strategies for different data types and data contents, and generates corresponding encryption strategies;

[0051] Specifically: when the policy module first obtains the multi-source data end as the source address and the target address, it creates the corresponding address mapping before and after encryption; when each multi-source data end requests the encryption policy, it creates a security policy mapping sequence stored in the form of key-value pairs.

[0052] Step 43: The configuration module continuously forms and updates the multi-source data terminal data interaction type and the corresponding policy call data according to the interaction history, and establishes the corresponding encryption sequence and policy database;

[0053] Step 5: The security module obtains the unencrypted data extracted by the parser, retrieves the data header information and matches it with the local encryption sequence. If the match is successful, the encryption policy information and data are sent to the encryption module. If the corresponding data header information is not matched in the local encryption sequence, it is uploaded to the control center policy module for retrieval and processed accordingly according to the data sent by the control center; including direct forwarding without processing or encryption processing after updating the encryption policy and local sequence;

[0054] Specifically: During each interaction between the multi-source data terminal and the control center, the control center sends the updated matching address mapping, encryption sequence, and encryption policy data to the multi-source data terminal and stores them locally. Each time data is transmitted to the multi-source data terminal, it first searches locally to see whether there is a corresponding policy mapping and whether there is a corresponding source address and destination address mapping in the data packet in the local address database. If so, it performs corresponding processing according to the locally stored data configuration; if not, it sends the corresponding data to the control center, which checks the existing mapping data, searches for the corresponding encryption policy, and generates a corresponding mapping sequence based on the found policy information and sends it to the multi-source data terminal.

[0055] Step 6: The policy module retrieves the data in the policy mapping sequence according to the data packet header uploaded by the multi-source data terminal, and retrieves the corresponding policy information and sends it to the multi-source data terminal. If the corresponding policy information is not retrieved, the corresponding data is recorded and a signal not to be processed is sent;

[0056] In particular, the policy information at least includes: encrypting data during transmission; specifically, it refers to: a multi-layer data packet header structure of split multi-source data, determining the location of the data packet header where the key information is located, and determining the encryption start address by sending a stream sequence, performing a hash operation on the packet header of the input data, and the control center establishing a key-value pair mapping based on the data packet header ID and the corresponding hash value for storage;

[0057] Furthermore, during the hash operation, the control center establishes a multi-parameter mapping matching sequence according to the parameter type in the received data packet header, and performs local mapping matching each time a new parameter is obtained. If no corresponding data is matched, it is added to the matching sequence, and the matching sequence stores the data packet name, hash value and address offset, and the address offset refers to the address offset used to record the specific data packet header and the key data packet header in the data packet level;

[0058] The multi-source data end obtains the matching sequence sent to the local, first extracts the hash value, verifies the uniqueness of the hash value, and searches for the corresponding address offset if it is unique. If it is not unique, the data is updated synchronously.

[0059] Further, the steps of adaptively updating the encryption strategy specifically include:

[0060] 1) Establish the data transmission index K = {k|k i (T,Q,S)}, where k i (T, Q, S) is the evaluation function of data transmission delay T, data transmission throughput Q and data transmission security index S; where T = T 1 +T 2 +T 3 ; Q = aT -1; T 1 It refers to the unit data packet processing delay, T 2 Refers to the encryption and decryption delay of a unit data packet, T 3 It refers to the delay in data packet disassembly and encapsulation processing;

[0061] 2) Initialize the encryption policy set A = {A 1 ,A 2 ,...A n} and encryption policy performance set B = {B 1 ,B 2 ,...B n}, where A n Refers to the nth encryption strategy. The elements in the encryption strategy set A are arranged in order from small to large in terms of system resource consumption; B n It refers to the performance index of the nth encryption strategy;

[0062] 3) Update the encryption policy set A = {A 1 ,A 2 ,...A n} and encryption policy performance set B = {B 1 ,B 2 ,...B n}, obtain the system data transmission performance index requirement K￠; start the data transmission performance test, obtain the data transmission performance index K under the current encryption strategy, and determine whether the data transmission performance index K under the current encryption strategy meets the requirements of the system data transmission performance index requirement K￠; if not, then select the encryption strategy set A={A 1 ,A 2 ,...A n} and encryption policy performance set B = {B 1 ,B 2 ,...B n}, and compare whether the data transmission performance index K under the corresponding encryption policy meets the requirements of the unified data transmission performance index requirement K￠, until whether the data transmission performance index K under the current encryption policy meets the requirements of the unified data transmission performance index requirement K￠; if satisfied, keep the current state and do not process.

[0063] Based on the optimization and improvement of the above-mentioned transmission method of this application, this application can better solve the problem of different data structures and features under heterogeneous data and optimize the encryption and decryption solutions in the transmission process, and make full use of existing data resources to reduce system resource consumption, thereby improving the encryption transmission efficiency of heterogeneous data and the transmission efficiency of heterogeneous data.

[0064] Finally, it should be noted that the above embodiments are only used to illustrate the technical solution of the present invention, rather than to limit the scope of protection of the present invention. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solution of the present invention can be modified or replaced by equivalents without departing from the essence and scope of the technical solution of the present invention.

Claims

1. A multi-source heterogeneous data transmission method, characterized in that: The steps include: Step 1: Establish a multi-source heterogeneous data transmission control system, which includes a multi-source data transmission control center and a multi-source data terminal; The multi-source heterogeneous data transmission control system includes a configuration module, a data acquisition module, a strategy module, and an encryption information generation module; the configuration module establishes a multi-source data terminal classification and identification scheme, and when data interaction is detected, extracts corresponding identification tags from the source address data to confirm the multi-source data terminal attributes; The data acquisition module is used to collect and update multi-source data terminal information and generate corresponding address data; the strategy module is used to: formulate and store corresponding processing strategies for different data types and data contents, generate corresponding encryption strategies, and send corresponding strategy information to multi-source data terminals according to their requests or actively; the encryption information generation module generates encryption parameter information such as encryption sequence and encryption key required in the data encryption process based on the credit platform, and sends corresponding encryption parameter information to multi-source data terminals according to their requests; The multi-source data terminal mainly includes a parser, a security module, an encryption and decryption module, and a forwarding module; The parser is used to extract the data packet header, determine the data encryption status, and call the security module for unencrypted data to determine whether encryption processing is required; the security module is used to match the input data with the security policy. The security policy refers to the decision whether a specific data packet should be sent to the forwarding module or the encryption module. Specifically, the information is matched through the source address, destination address, protocol ID, and data type in the data packet and the preset operation is performed; the encryption and decryption module is used to complete the encryption and decryption operation of the data; the forwarding module is used to process the received data, and match the destination address using the corresponding matching method according to the data type, and map the data packet to the corresponding data port through the destination address; Step 2: After the multi-source data transmission control center contacts the multi-source data terminal for the first time, the data acquisition module collects and updates the multi-source data terminal information and generates corresponding address data; it also includes extracting inbound data from the header information of the uploaded data packet, extracting the source address and destination address by parsing the data and marking and storing them; the configuration module establishes a multi-source data terminal classification and identification database, extracts corresponding identification tags from the source address data when data interaction occurs to confirm the multi-source data terminal attributes; it also includes establishing and updating the data structure for multi-source data terminal tag identification, creating data terminal type, data type corresponding classification and data address mapping sequence; Step 3: The policy module formulates and stores corresponding processing strategies for different data types and data contents, and generates corresponding encryption strategies; Specifically: when the policy module first obtains the multi-source data end as the source address and the target address, it creates the corresponding address mapping before and after encryption; when each multi-source data end requests the encryption policy, it creates a security policy mapping sequence stored in the form of key-value pairs. Step 4: The configuration module continuously forms and updates the multi-source data terminal data interaction type and the corresponding policy call data according to the interaction history, and establishes the corresponding encryption sequence and policy database; Step 5: The security module obtains the unencrypted data extracted by the parser, retrieves the data header information and matches it with the local encryption sequence. If the match is successful, the encryption policy information and data are sent to the encryption module. If the corresponding data header information is not matched in the local encryption sequence, it is uploaded to the control center policy module for retrieval and processed accordingly according to the data sent by the control center. This includes forwarding directly without processing or encrypting after updating the encryption strategy and local sequence; Step 6: The policy module retrieves the data in the policy mapping sequence according to the data packet header uploaded by the multi-source data terminal, and retrieves the corresponding policy information and sends it to the multi-source data terminal. If the corresponding policy information is not retrieved, the corresponding data is recorded and a signal not to be processed is sent; The multi-source data terminal obtains the matching sequence sent to the local, first extracts the hash value, verifies the uniqueness of the hash value, and searches for the corresponding address offset if it is unique. If it is not unique, the data is updated synchronously.

2. The multi-source heterogeneous data transmission method according to claim 1, characterized in that: The policy module is also used to create a policy database and an address database. The policy database is used to store security policies and policy sequences. The policy sequence establishes the correspondence information between different multi-source data types and their security policies. The address database is used to store address mapping data before and after encryption during the process of encrypting and decrypting source addresses and destination addresses.

3. The multi-source heterogeneous data transmission method according to claim 1, characterized in that: The encryption and decryption module receives data packets from the security module, and receives encryption sequences, encryption keys, and encryption strategies from the control center, matches the data packets with the encryption sequences, and performs corresponding processing based on the matching results; In particular, it is also used to: obtain source address and destination address information in a data packet from a control center, and synchronously encrypt data channel endpoint information corresponding to the source address and the destination address into the data packet; In particular, the decryption strategy includes transmission encryption and data encryption. The transmission encryption strategy refers to encrypting the data packet header based on the tunnel transmission mode using an encryption algorithm, performing data integrity verification using a hash algorithm, and creating new header data for encapsulation using the tunnel endpoint address; data encryption refers to directly encrypting the corresponding data using an encryption algorithm.

4. The multi-source heterogeneous data transmission method according to claim 1, characterized in that: The matching includes: for IPv4 data, using the longest prefix match to obtain the destination address data; if the data is heterogeneous, using an exact match method to match the destination address.

5. The multi-source heterogeneous data transmission method according to claim 1, characterized in that: The step five also includes that during each interaction between the multi-source data terminal and the control center, the control center sends the updated matched address mapping, encryption sequence, and encryption policy data to the multi-source data terminal and stores them locally. Each time data is transmitted to the multi-source data terminal, a local search is first performed to determine whether there is a corresponding policy mapping and whether there is a corresponding source address and destination address mapping in the data packet in the local address database. If so, corresponding processing is performed according to the locally stored data configuration; if not, the corresponding data is sent to the control center, and the control center checks the existing mapping data, searches for the corresponding encryption policy, and generates a corresponding mapping sequence based on the found policy information and sends it to the multi-source data terminal.

6. The multi-source heterogeneous data transmission method according to claim 1, characterized in that: The policy information at least includes information on data transmission encryption processing; specifically, it refers to: a multi-layer data packet header structure of split multi-source data, determining the location of the data packet header where the key information is located, and determining the encryption start address by sending a stream sequence, performing a hash operation on the packet header of the input data, and the control center establishing a key-value pair mapping based on the data packet header ID and the corresponding hash value for storage; Furthermore, during the hash operation, the control center establishes a multi-parameter mapping matching sequence according to the parameter type in the received data packet header. Each time a new parameter is obtained, a local mapping match is performed. If no corresponding data is matched, it is added to the matching sequence. The matching sequence stores the data packet name, hash value and address offset. The address offset refers to the address offset used to record specific data packet headers and key data packet headers in the data packet level.

7. The multi-source heterogeneous data transmission method according to claim 1, characterized in that: The step six also includes a step of adaptively updating the encryption strategy, specifically: 1) Establish the data transmission index K = {k|k i (T,Q,S)}, where k i (T, Q, S) is the evaluation function of data transmission delay T, data transmission throughput Q and data transmission security index S; where T = T1 + T2 + T3; Q = aT -1 ; T1 refers to the processing delay of a unit data packet, T2 refers to the encryption and decryption delay of a unit data packet, and T3 refers to the processing delay of data packet disassembly and encapsulation; 2) Initialize the encryption strategy set A = {A1, A2, ... A n } and encryption strategy performance set B = {B1, B2, ... B n }, where A n Refers to the nth encryption strategy. The elements in the encryption strategy set A are arranged in order from small to large in terms of system resource consumption; B n It refers to the performance index of the nth encryption strategy; 3) Update the encryption policy set A = {A1, A2, ... A n } and encryption strategy performance set B = {B1, B2, ... B n }, obtain the system data transmission performance index requirement K￠; start the data transmission performance test, obtain the data transmission performance index K under the current encryption strategy, and determine whether the data transmission performance index K under the current encryption strategy meets the requirements of the system data transmission performance index requirement K￠; if not, then select the encryption strategy set A={A1,A2,...A n } and encryption strategy performance set B = {B1, B2, ... B n }, and compare whether the data transmission performance index K under the corresponding encryption policy meets the requirements of the unified data transmission performance index requirement K￠, until whether the data transmission performance index K under the current encryption policy meets the requirements of the unified data transmission performance index requirement K￠; if satisfied, keep the current state and do not process.

Images