A multi-source heterogeneous data transmission method

Abstract

This invention belongs to the technical field of computer data transmission management methods, and particularly relates to a multi-source heterogeneous data transmission method. It includes the following steps: establishing a multi-source heterogeneous data transmission control system and generating corresponding address data; a strategy module formulating and storing corresponding processing strategies for different data types and data content, and generating corresponding encryption strategies; a configuration module continuously generating and updating multi-source data terminal data interaction types and corresponding strategy call data based on interaction history, and establishing corresponding encryption sequences and strategy databases; retrieving data and matching it with the encryption sequence to retrieve corresponding strategy information. This multi-source heterogeneous data transmission method is mainly used to provide a transmission method that can perform heterogeneous data encryption and decryption transmission processes, improving transmission efficiency and data validity. It is used to complete the enhanced transmission task of heterogeneous data in classified fields, reducing data transmission resource consumption and improving system resource utilization efficiency.

Description

Technical Field

[0001] This invention belongs to the technical field of computer data transmission management methods, and particularly relates to a multi-source heterogeneous data transmission method. Background Technology

[0002] As computer information technology develops rapidly, the types of data and tasks that need to be processed by computers are constantly increasing. In the process of some tasks, the transmission and utilization of a large amount of heterogeneous data of different types and data structures are often involved. Due to the differences between data structures, different types of processing methods and approaches are often involved in the transmission and data analysis process. Their efficiency and processing progress are often difficult to achieve consistency. This makes it difficult to coordinate the use of computer resources in the process of transmitting and utilizing heterogeneous data. Summary of the Invention

[0003] The purpose of this invention is to provide a transmission method for solving problems such as low efficiency in heterogeneous data transmission, particularly in the process of encrypting and decrypting classified data.

[0004] To achieve the above objectives, the present invention adopts the following technical solution.

[0005] A method for transmitting multi-source heterogeneous data includes the following steps:

[0006] Step 1: Establish a multi-source heterogeneous data transmission control system, which includes a multi-source data transmission control center and multi-source data terminals;

[0007] The multi-source heterogeneous data transmission control system includes a configuration module, a data acquisition module, a strategy module, and an encrypted information generation module. The configuration module establishes a classification and identification scheme for multi-source data endpoints. When data interaction is detected, it extracts corresponding identification tags from the source address data to confirm the attributes of the multi-source data endpoints. The data acquisition module collects and updates multi-source data endpoint information and generates corresponding address data. The strategy module is used to: formulate and store corresponding processing strategies for different data types and data content; generate corresponding encryption strategies; and send corresponding strategy information to multi-source data endpoints based on their requests or proactively. The encrypted information generation module generates encryption parameters such as encryption sequences and encryption keys required during the data encryption process based on the trust platform, and sends corresponding encryption parameter information to multi-source data endpoints based on their requests.

[0008] The multi-source data terminal mainly includes a parser, a security module, an encryption / decryption module, and a forwarding module;

[0009] The parser extracts the packet header, determines the data encryption status, and calls the security module to determine whether encryption is required for unencrypted data. The security module matches the input data with the security policy, which determines whether a specific packet should be sent to the forwarding module or the encryption module. Specifically, it matches information based on the source address, destination address, protocol ID, and data type within the packet and performs preset operations. The encryption / decryption module performs the encryption and decryption operations. The forwarding module processes the received data and matches the destination address according to the data type, mapping the packet to the corresponding data port.

[0010] Step 2: After the multi-source data transmission control center makes its initial contact with the multi-source data terminals, the data acquisition module collects and updates the multi-source data terminal information and generates corresponding address data. This also includes extracting inbound data from the header information of uploaded data packets, extracting source and destination addresses through data parsing, and marking and storing them. The configuration module establishes a multi-source data terminal classification and identification database, extracting corresponding identification tags from the source address data to confirm the attributes of the multi-source data terminals during data interaction. It also includes establishing and updating a data structure for multi-source data terminal marking and identification, creating classifications of data terminal types and data types, and data address mapping sequences.

[0011] Step 3: The strategy module formulates and stores corresponding processing strategies for different data types and data content, and generates corresponding encryption strategies;

[0012] Specifically: when the policy module initially obtains multiple data sources as source and destination addresses, it creates corresponding address mappings before and after encryption; when each multiple data source requests an encryption policy, it creates a security policy mapping sequence stored in key-value pairs.

[0013] Step 4: The configuration module continuously generates and updates the data interaction types and corresponding policy call data from multiple data sources based on the interaction history, and establishes the corresponding encryption sequence and policy database.

[0014] Step 5: The security module obtains the unencrypted data extracted by the parser, retrieves the data header information and matches it with the local encryption sequence. If the match is successful, the encryption policy information and data are sent to the encryption module. If the corresponding data header information is not matched in the local encryption sequence, it is uploaded to the control center policy module for retrieval and processed according to the data issued by the control center; this includes either forwarding directly without processing or updating the encryption policy and local sequence before encryption.

[0015] Step 6: The strategy module retrieves data from the strategy mapping sequence based on the data packet header uploaded by the multi-source data terminal, and sends the corresponding strategy information to the multi-source data terminal. If the corresponding strategy information is not found, the corresponding data is recorded and a signal of no processing is sent.

[0016] The matching sequence obtained from the multi-source data terminal and sent to the local machine is first extracted from the hash value and then its uniqueness is verified. If it is unique, the corresponding address offset is found. If it is not unique, the data is synchronized and updated.

[0017] In a further improvement or specific implementation of the aforementioned multi-source heterogeneous data transmission method, the policy module is also used to create a policy database and an address database. The policy database is used to store security policies and policy sequences, and the policy sequences establish the correspondence information between different multi-source data types and their security policies. The address database is used to store address mapping data before and after encryption during the encryption and decryption of source and destination addresses.

[0018] In a further improvement or specific implementation of the aforementioned multi-source heterogeneous data transmission method, the encryption / decryption module receives data packets from the security module, receives encryption sequences, encryption keys, and encryption strategies from the control center, matches the data packets with the encryption sequences, and performs corresponding processing based on the matching results.

[0019] Specifically, it is also used to: obtain source and destination address information from the control center, and synchronously encrypt the data channel endpoint information corresponding to the source and destination addresses into the data packets;

[0020] Specifically, the decryption strategy includes transmission encryption and data encryption. The transmission encryption strategy refers to using an encryption algorithm to encrypt the data packet header based on the tunnel transmission mode, using a hash algorithm to verify data integrity, and using the tunnel endpoint address to create new header data for encapsulation. Data encryption refers to using an encryption algorithm to directly encrypt the corresponding data.

[0021] In a further improvement or specific implementation of the aforementioned multi-source heterogeneous data transmission method, the matching includes: for IPv4 data, the longest prefix matching is used to obtain the destination address data; if it is heterogeneous data, the exact matching method is used to match the destination address.

[0022] In a further improvement or specific implementation of the aforementioned multi-source heterogeneous data transmission method, step five further includes that during each interaction between the multi-source data terminal and the control center, the control center sends the updated and matched address mapping, encryption sequence, and encryption policy data to the multi-source data terminal for local storage. Each time data is transmitted to the multi-source data terminal, it first searches locally to see if a corresponding policy mapping exists and if the local address database contains the corresponding source and destination address mappings in the data packet. If they exist, the corresponding processing is performed according to the locally stored data configuration; if they do not exist, the corresponding data is sent to the control center. The control center checks the existing mapping data, finds the corresponding encryption policy, and generates a corresponding mapping sequence based on the found policy information, which is then sent to the multi-source data terminal.

[0023] Further improvements or specific implementations of the aforementioned multi-source heterogeneous data transmission method include at least information on encrypting data transmission within the strategy information; specifically, this refers to: a multi-layered data packet header structure for split multi-source data, determining the location of key information in the data packet header, determining the encryption start address through the distributed stream sequence, performing hash operations on the packet header of the input data, and having the control center establish a key-value pair mapping based on the data packet header ID and the corresponding hash value for storage;

[0024] Furthermore, during the hash operation, the control center establishes a multi-parameter mapping matching sequence based on the parameter types in the received data packet header. Each time a new parameter is obtained, a local mapping matching is performed. If no matching data is found, it is added to the matching sequence. The matching sequence stores the data packet name, hash value, and address offset. The address offset refers to the address offset between a specific data packet header and a key data packet header within the data packet layer.

[0025] In a further improvement or specific implementation of the aforementioned multi-source heterogeneous data transmission method, step six further includes a step of adaptively updating the encryption strategy, specifically referring to:

[0026] 1) Establish a data transmission performance index K = {k|k i (T,Q,S)}, where k i (T,Q,S) is an evaluation function for data transmission delay T, data transmission throughput Q, and data transmission security metric S; where T = T1 + T2 + T3; Q = aT -1 T1 refers to the unit data packet processing delay, T2 refers to the unit data packet encryption / decryption delay, and T3 refers to the data packet reassembly / unpacking processing delay.

[0027] 2) Initialize the encryption policy set A = {A1, A2, ... A} n} and the performance set of encryption strategies B = {B1, B2, ... B} n}, where An This refers to the nth encryption strategy, where elements in encryption strategy set A are arranged in ascending order of system resource consumption; B n This refers to the performance metric of the nth encryption strategy;

[0028] 3) Update the encryption policy set A = {A1, A2, ... A} n} and the performance set of encryption strategies B = {B1, B2, ... B} n}, obtain the system data transmission performance index requirement K￠; start the data transmission performance test, obtain the data transmission performance index K under the current encryption policy, and determine whether the data transmission performance index K under the current encryption policy meets the system data transmission performance index requirement K￠; if it does not meet the requirement, proceed sequentially from the encryption policy set A={A1,A2,...A n} and the performance set of encryption strategies B = {B1, B2, ... B} n In the process of selecting an encryption strategy, the data transmission performance index K under the corresponding encryption strategy is compared with the requirement of the unified data transmission performance index K￠ until the data transmission performance index K under the current encryption strategy meets the requirement of the unified data transmission performance index K￠. If it meets the requirement, the current state is maintained and no further processing is performed. Attached Figure Description

[0029] Figure 1 This is a schematic diagram of a multi-source heterogeneous data transmission control system;

[0030] Figure 2 This is a flowchart illustrating a multi-source heterogeneous data transmission method. Detailed Implementation

[0031] The present invention will be described in detail below with reference to specific embodiments.

[0032] The multi-source heterogeneous data transmission method of this application is mainly used to provide a transmission method that can perform heterogeneous data encryption and decryption transmission process, improve transmission efficiency and data validity, and complete the task of strengthening the transmission of heterogeneous data in classified fields, reduce the resource consumption of data transmission, and improve the system resource utilization efficiency.

[0033] The multi-source heterogeneous data transmission method is mainly implemented based on the following steps:

[0034] Step 1: Establish a multi-source heterogeneous data transmission control system, which includes a multi-source data transmission control center and multi-source data terminals;

[0035] like Figure 1 The multi-source heterogeneous data transmission control system shown includes a multi-source data transmission control center and multi-source data terminals.

[0036] The multi-source heterogeneous data transmission control system includes a configuration module, a data acquisition module, a strategy module, and an encrypted information generation module;

[0037] The configuration module establishes a multi-source data terminal classification and identification scheme. When data interaction is detected, the corresponding identification marker is extracted from the source address data to confirm the attributes of the multi-source data terminal.

[0038] The data acquisition module is used to collect and update information from multiple data sources and generate corresponding address data;

[0039] The strategy module is used to: formulate and store corresponding processing strategies for different data types and data content, generate corresponding encryption strategies, and send corresponding strategy information to multi-source data terminals according to their requests or by actively sending such information; in particular, the strategy module creates a strategy database and an address database. The strategy database is used to store security strategies and strategy sequences, and the strategy sequences establish the correspondence information between different multi-source data types and their security strategies.

[0040] The encrypted information generation module generates encryption parameters such as encryption sequences and encryption keys required during the data encryption process based on the trust platform, and sends the corresponding encryption parameters to the multi-source data terminals according to their requests.

[0041] The address database is used to store address mapping data before and after encryption during the encryption and decryption of source and destination addresses;

[0042] The multi-source data terminal mainly includes a parser, a security module, an encryption / decryption module, and a forwarding module;

[0043] The parser is used to extract the data packet header, determine the data encryption status, and call the security module for unencrypted data to determine whether encryption is required.

[0044] The security module is used to match input data with security policies. Security policies are used to determine whether a specific data packet should be sent to the forwarding module or the encryption module. Specifically, it matches information based on the source address, destination address, protocol ID, and data type within the data packet and performs preset operations.

[0045] The encryption / decryption module is used to perform data encryption and decryption operations; the forwarding module is used to process the received data and match the destination address according to the data type, and map the data packet to the corresponding data port through the destination address;

[0046] Step 2: After the multi-source data transmission control center makes its first contact with the multi-source data terminal, the data acquisition module collects and updates the information of the multi-source data terminal and generates the corresponding address data.

[0047] It also includes extracting inbound data from the header information of uploaded data packets, and extracting the source and destination addresses by parsing the data and marking and storing them;

[0048] The configuration module establishes a multi-source data terminal classification and identification database, and extracts the corresponding identification tags from the source address data to confirm the attributes of the multi-source data terminal when data interaction occurs;

[0049] It also includes establishing and updating data structures for multi-source data endpoint labeling and identification, creating data endpoint types, corresponding data type classifications, and data address mapping sequences.

[0050] Step 3: The strategy module formulates and stores corresponding processing strategies for different data types and data content, and generates corresponding encryption strategies;

[0051] Specifically: when the policy module initially obtains multiple data sources as source and destination addresses, it creates corresponding address mappings before and after encryption; when each multiple data source requests an encryption policy, it creates a security policy mapping sequence stored in key-value pairs.

[0052] Step 43: The configuration module continuously generates and updates the data interaction types and corresponding policy call data from multiple data sources based on the interaction history, and establishes the corresponding encryption sequence and policy database.

[0053] Step 5: The security module obtains the unencrypted data extracted by the parser, retrieves the data header information and matches it with the local encryption sequence. If the match is successful, the encryption policy information and data are sent to the encryption module. If the corresponding data header information is not matched in the local encryption sequence, it is uploaded to the control center policy module for retrieval and processed according to the data issued by the control center; this includes either forwarding directly without processing or updating the encryption policy and local sequence before encryption.

[0054] Specifically: During each interaction between the multi-source data terminal and the control center, the control center sends the updated and matched address mappings, encryption sequences, and encryption policy data to the multi-source data terminal for local storage. Each time data is transmitted to the multi-source data terminal, it first checks locally whether a corresponding policy mapping exists and whether the corresponding source and destination address mappings in the data packet exist in the local address database. If they exist, appropriate processing is performed according to the locally stored data configuration; if they do not exist, the corresponding data is sent to the control center. The control center checks the existing mapping data, finds the corresponding encryption policy, and generates a corresponding mapping sequence based on the found policy information, sending it to the multi-source data terminal.

[0055] Step 6: The strategy module retrieves data from the strategy mapping sequence based on the data packet header uploaded by the multi-source data terminal, and sends the corresponding strategy information to the multi-source data terminal. If the corresponding strategy information is not found, the corresponding data is recorded and a signal of no processing is sent.

[0056] Specifically, the strategy information includes at least: encrypting the data during transmission; specifically, it refers to: a multi-layered data packet header structure for split multi-source data, determining the location of key information in the data packet header, determining the encryption start address through the downlink stream sequence, performing hash operations on the packet header of the input data, and the control center establishing a key-value pair mapping based on the data packet header ID and the corresponding hash value for storage.

[0057] Furthermore, during the hash operation, the control center establishes a multi-parameter mapping matching sequence based on the parameter type in the received data packet header. Each time a new parameter is obtained, local mapping matching is performed. If no matching data is found, it is added to the matching sequence. The matching sequence stores the data packet name, hash value, and address offset. The address offset refers to the address offset between a specific data packet header and a key data packet header within the data packet layer.

[0058] The matching sequence sent to the local machine is obtained from multiple data sources. First, the hash value is extracted and its uniqueness is verified. If it is unique, the corresponding address offset is found. If it is not unique, the data is synchronized and updated.

[0059] Furthermore, the adaptive update of the encryption policy specifically includes:

[0060] 1) Establish a data transmission performance index K = {k|k i (T,Q,S)}, where k i (T,Q,S) is an evaluation function for data transmission delay T, data transmission throughput Q, and data transmission security metric S; where T = T1 + T2 + T3; Q = aT -1 T1 refers to the unit data packet processing delay, T2 refers to the unit data packet encryption / decryption delay, and T3 refers to the data packet reassembly / unpacking processing delay.

[0061] 2) Initialize the encryption policy set A = {A1, A2, ... A} n} and the performance set of encryption strategies B = {B1, B2, ... B} n}, where A n This refers to the nth encryption strategy, where elements in encryption strategy set A are arranged in ascending order of system resource consumption; B n This refers to the performance metric of the nth encryption strategy;

[0062] 3) Update the encryption policy set A = {A1, A2, ... A}n} and the performance set of encryption strategies B = {B1, B2, ... B} n}, obtain the system data transmission performance index requirement K￠; start the data transmission performance test, obtain the data transmission performance index K under the current encryption policy, and determine whether the data transmission performance index K under the current encryption policy meets the system data transmission performance index requirement K￠; if it does not meet the requirement, proceed sequentially from the encryption policy set A={A1,A2,...A n} and the performance set of encryption strategies B = {B1, B2, ... B} n In the process of selecting an encryption strategy, the data transmission performance index K under the corresponding encryption strategy is compared with the requirement of the unified data transmission performance index K￠ until the data transmission performance index K under the current encryption strategy meets the requirement of the unified data transmission performance index K￠. If it meets the requirement, the current state is maintained and no further processing is performed.

[0063] Based on the above-mentioned optimization and improvement of the transmission method in this application, this application can better solve the problems of different data structures and characteristics under multiple heterogeneous data and optimize the encryption and decryption schemes during transmission, make full use of existing data resources to reduce system resource consumption, and improve the efficiency of heterogeneous data encryption transmission.

[0064] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, and are not intended to limit the scope of protection of the present invention. Although the present invention has been described in detail with reference to preferred embodiments, those skilled in the art should understand that modifications or equivalent substitutions can be made to the technical solutions of the present invention without departing from the essence and scope of the technical solutions of the present invention.

Claims

1. A method for transmitting multi-source heterogeneous data, characterized in that, Includes the following steps: Step 1: Establish a multi-source heterogeneous data transmission control system, which includes a multi-source data transmission control center and multi-source data terminals; The multi-source heterogeneous data transmission control system includes a configuration module, a data acquisition module, a strategy module, and an encrypted information generation module. The configuration module establishes a classification and identification scheme for multi-source data terminals. When data interaction is detected, the corresponding identification marker is extracted from the source address data to confirm the attributes of the multi-source data terminals. The data acquisition module is used to collect and update information from multiple data sources and generate corresponding address data; the strategy module is used to: formulate and store corresponding processing strategies for different data types and data content, generate corresponding encryption strategies, and send corresponding strategy information to multiple data sources either by request or by actively sending such information to them; the encryption information generation module generates encryption parameters such as encryption sequences and encryption keys required during the data encryption process based on the trust platform, and sends corresponding encryption parameter information to multiple data sources according to their requests. The multi-source data terminal mainly includes a parser, a security module, an encryption / decryption module, and a forwarding module; The parser extracts the packet header, determines the data encryption status, and calls the security module to determine whether encryption is required for unencrypted data. The security module matches the input data with the security policy, which determines whether a specific packet should be sent to the forwarding module or the encryption module. Specifically, it matches information based on the source address, destination address, protocol ID, and data type within the packet and performs preset operations. The encryption / decryption module performs the encryption and decryption operations. The forwarding module processes the received data and matches the destination address according to the data type, mapping the packet to the corresponding data port. Step 2: After the multi-source data transmission control center makes its initial contact with the multi-source data terminals, the data acquisition module collects and updates the multi-source data terminal information and generates corresponding address data. This also includes extracting inbound data from the header information of uploaded data packets, extracting source and destination addresses through data parsing, and marking and storing them. The configuration module establishes a multi-source data terminal classification and identification database, extracting corresponding identification tags from the source address data to confirm the attributes of the multi-source data terminals during data interaction. It also includes establishing and updating a data structure for multi-source data terminal marking and identification, creating classifications of data terminal types and data types, and data address mapping sequences. Step 3: The strategy module formulates and stores corresponding processing strategies for different data types and data content, and generates corresponding encryption strategies; Specifically: when the policy module initially obtains multiple data sources as source and destination addresses, it creates corresponding address mappings before and after encryption; when each multiple data source requests an encryption policy, it creates a security policy mapping sequence stored in key-value pairs. Step 4: The configuration module continuously generates and updates the data interaction types and corresponding policy call data from multiple data sources based on the interaction history, and establishes the corresponding encryption sequence and policy database. Step 5: The security module obtains the unencrypted data extracted by the parser, retrieves the data header information and matches it with the local encryption sequence. If the match is successful, the encryption policy information and data are sent to the encryption module. If the corresponding data header information is not matched in the local encryption sequence, it is uploaded to the control center policy module for retrieval and processed accordingly based on the data issued by the control center. This includes either forwarding the sequence directly without processing or updating the encryption strategy and then encrypting the local sequence; Step 6: The strategy module retrieves data from the strategy mapping sequence based on the data packet header uploaded by the multi-source data terminal, and sends the corresponding strategy information to the multi-source data terminal. If the corresponding strategy information is not found, the corresponding data is recorded and a signal of no processing is sent. The matching sequence obtained from the multi-source data terminal and sent to the local machine is first extracted from the hash value and then its uniqueness is verified. If it is unique, the corresponding address offset is found. If it is not unique, the data is synchronized and updated.

2. The multi-source heterogeneous data transmission method according to claim 1, characterized in that, The policy module is also used to create a policy database and an address database. The policy database stores security policies and policy sequences, and the policy sequences establish the correspondence information between different multi-source data types and their security policies. The address database stores address mapping data before and after encryption during the encryption and decryption of source and destination addresses.

3. The multi-source heterogeneous data transmission method according to claim 1, characterized in that, The encryption / decryption module receives data packets from the security module, and receives encryption sequences, encryption keys, and encryption policies from the control center. It then matches the data packets with the encryption sequences and performs corresponding processing based on the matching results. It is also used to: obtain the source address and destination address information in the data packet from the control center, and synchronously encrypt the data channel endpoint information corresponding to the source address and destination address into the data packet; The decryption strategy includes transmission encryption and data encryption. The transmission encryption strategy refers to using an encryption algorithm to encrypt the data packet header based on the tunnel transmission mode, using a hash algorithm to verify data integrity, and using the tunnel endpoint address to create new header data for encapsulation. Data encryption refers to using an encryption algorithm to directly encrypt the corresponding data.

4. The multi-source heterogeneous data transmission method according to claim 1, characterized in that, The matching includes: for IPv4 data, the longest prefix matching is used to obtain the destination address data; if it is heterogeneous data, the exact matching method is used to match the destination address.

5. The multi-source heterogeneous data transmission method according to claim 1, characterized in that, Step five further includes that during each interaction between the multi-source data terminal and the control center, the control center sends the updated and matched address mapping, encryption sequence, and encryption policy data to the multi-source data terminal for local storage. Each time data is transmitted to the multi-source data terminal, it first searches locally to see if there is a corresponding policy mapping and whether there is a corresponding source address and destination address mapping in the local address database. If they exist, they are processed according to the data configuration stored locally. If they do not exist, the corresponding data is sent to the control center. The control center checks the existing mapping data, finds the corresponding encryption policy, and generates a corresponding mapping sequence based on the found policy information and sends it to the multi-source data terminal.

6. The multi-source heterogeneous data transmission method according to claim 1, characterized in that, The strategy information includes at least information on encrypting data transmission; specifically, it refers to: a multi-layered data packet header structure for split, multi-source data, determining the location of key information in the data packet header, determining the encryption start address through the distributed stream sequence, performing hash calculation on the packet header of the input data, and the control center establishing a key-value pair mapping based on the data packet header ID and the corresponding hash value for storage. During the hash operation, the control center establishes a multi-parameter mapping matching sequence based on the parameter types in the received data packet header. Each time a new parameter is obtained, a local mapping matching is performed. If no matching data is found, it is added to the matching sequence. The matching sequence stores the data packet name, hash value, and address offset. The address offset refers to the address offset between a specific data packet header and a key data packet header within the data packet level.

7. The multi-source heterogeneous data transmission method according to claim 1, characterized in that, Step six also includes a step of adaptive updating of the encryption policy, specifically referring to: 1) Develop data transmission performance indicators ,in It's about data transmission latency. Data transmission throughput and data transmission security indicators The evaluation function; where ; ; This refers to the unit data packet processing latency. This refers to the encryption / decryption latency per unit data packet. This refers to the delay in data packet assembly / disassembly processing; 2) Initialize the encryption policy set and encryption strategy performance set ,in It refers to the first A set of encryption strategies The elements are arranged in ascending order of system resource consumption; It refers to the first Performance metrics for each encryption strategy; 3) Update the encryption policy set and encryption strategy performance set Obtain system data transmission performance requirements ; Initiate data transmission performance testing to obtain data transmission performance metrics under the current encryption policy. Determine the data transmission performance indicators under the current encryption strategy. Does it meet the requirements of the unified data transmission performance index? The requirements are as follows; if not met, then proceed sequentially from the secret strategy set. and encryption strategy performance set Select an encryption strategy and compare the data transmission performance metrics under the corresponding encryption strategies. Does it meet the requirements of the unified data transmission performance index? Requirements, up to the current data transmission performance metrics under encryption strategies. Does it meet the requirements of the unified data transmission performance index? If the requirements are met, the current state is maintained and no further action is taken.

Images