Mimicry encryption method and system for communication data transmission

Abstract

The invention relates to the technical field of data encryption, in particular to a mimicry encryption method and system for communication data transmission, and the method comprises the steps: obtaining communication transmission data and a data transmission standard corresponding to the communication transmission data after a data transmission instruction is detected, and carrying out the data abnormality detection of the communication transmission data, determining whether preset data abnormity exists in the communication transmission data or not, if not, collecting historical communication data in a historical cycle time period, performing mimicry encryption processing on the communication transmission data to obtain processed communication transmission data, and sending the processed communication transmission data to data receiving equipment, and when detecting that the data receiving equipment receives the processed communication transmission data, decrypting the processed communication transmission data to obtain decrypted communication transmission data, and returning the decrypted communication transmission data to the data receiving equipment. According to the invention, the data transmission security of the communication data is improved.

Description

Technical Field

[0001] The present application relates to the technical field of data encryption, and in particular to a method and system for encrypting communication data. Background Art

[0002] With the continuous advancement and popularization of information technology, the security of communication data transmission has become a focus of attention in today's society. In the traditional communication data transmission process, data is often transmitted in a fixed form and protocol. This single transmission mode provides an opportunity for attackers. They can steal or tamper with data by analyzing the form and protocol of the transmitted data, posing a serious threat to the information security of both parties in communication.

[0003] Considering the security of both parties in communication, the current form of one-time one-pad is usually adopted, that is, each communication uses a different key for encryption. However, even if the key is changed frequently, the security of communication cannot be guaranteed because the encryption algorithm is usually fixed. Because the attacker can obtain the encryption algorithm by stealing the encrypted ciphertext and obtaining the relevant plaintext through some means, the subsequent encrypted ciphertext is easy to decrypt. Moreover, the attacker can also obtain the encryption algorithm through exhaustive methods. In addition, the person or organization who designs the encryption algorithm knows the encryption algorithm, and the person or organization who manages or produces the encryption algorithm related products can also know the encryption algorithm, so there is a possibility that the person or organization who knows the encryption algorithm will leak the encryption algorithm. Under the premise of the encryption algorithm being leaked, the encrypted data can be decrypted through the encryption algorithm and the parameters of the data itself, resulting in the risk of encrypted data leakage. Therefore, the security cannot be guaranteed under the current cryptographic system. Summary of the invention

[0004] In order to solve at least one of the above-mentioned technical problems, the present application provides a method and system for pseudo encryption of communication data transmission.

[0005] In the first aspect, the present application provides a method for encrypting communication data transmission, which adopts the following technical solution:

[0006] After a data transmission instruction is detected, communication transmission data and a data transmission standard corresponding to the communication transmission data are obtained, wherein the communication transmission data is transmission data to be sent by a data sending end, and the data transmission standard includes an application transmission protocol set of the communication transmission data and corresponding data preprocessing of different application transmission protocols in the application transmission protocol set when transmitting the communication transmission data;

[0007] Performing data anomaly detection on the communication transmission data to determine whether the communication transmission data has a preset data anomaly; if not, collecting historical communication data within the historical period time period based on the data transmission standard, and performing mimetic encryption processing on the communication transmission data based on the historical communication data to obtain processed communication transmission data, wherein the historical communication data is communication data transmitted using different application transmission protocols in the application transmission protocol set and abnormal transmission data corresponding to different time nodes in the process of using different application transmission protocols for the historical communication data;

[0008] Sending the processed communication transmission data to a data receiving device, and when detecting that the data receiving device has received the processed communication transmission data, decrypting the processed communication transmission data to obtain decrypted communication transmission data;

[0009] The decrypted communication transmission data is returned to the data receiving device.

[0010] By adopting the above technical solution, when a data transmission instruction is detected, the system obtains the communication transmission data and its corresponding data transmission standard. This ensures accurate identification and classification of data. The data transmission standard includes a set of application transmission protocols and data preprocessing methods under different transmission protocols, which enables the system to select appropriate transmission protocols and preprocessing methods according to data characteristics and optimize transmission efficiency. Then, the system performs anomaly detection on the communication transmission data, effectively intercepts existing errors or malicious data, and ensures the security of the transmission data. If there is no anomaly in the data, the system uses historical communication data to perform mimetic encryption processing on the current data, which enhances the concealment and anti-attack ability of the data and ensures the security of the data during transmission. After completing the mimetic encryption, the system sends the processed communication transmission data to the data receiving device. In this process, the encryption processing not only protects the data content, but also makes the data more difficult to be identified and tampered with during transmission. When the data receiving device successfully receives the data, the system immediately performs decryption processing to ensure that the recipient can accurately restore the original data. After decrypting the communication transmission data, the system returns the decrypted data to the data receiving device. This ensures that the data recipient can seamlessly obtain and use the original data. Through this closed-loop processing flow, the system not only realizes encrypted data transmission, but also ensures the availability of data at the receiving end, greatly improving the overall efficiency of data transmission and data security.

[0011] In a possible implementation, the performing data anomaly detection on the communication transmission data to determine whether the communication transmission data has a preset data anomaly further includes:

[0012] When the communication transmission data has the preset data anomaly, a data transmission termination instruction is generated to control the data sending end interface to terminate the transmission of the communication transmission data, and a modification marking process is performed on the data node having the preset data anomaly in the communication transmission data to obtain the transmission data to be modified;

[0013] The transmission data to be modified is returned to the data sending end.

[0014] In a possible implementation, performing mimicry encryption processing on the communication transmission data based on the historical communication data to obtain the processed communication transmission data includes:

[0015] Creating an abnormal network model, and training the abnormal network model based on the historical communication data to obtain a trained abnormal network model;

[0016] Performing simulated data transmission of different application transmission protocols on the communication transmission data to obtain a transmission time sequence and transmission flow distribution corresponding to each application transmission protocol;

[0017] Inputting the transmission time series and the transmission flow distribution into the abnormal network model one by one to perform matching abnormal data identification, and obtaining abnormal node data corresponding to each application transmission protocol used by the communication transmission data;

[0018] Determine the abnormal data position corresponding to the communication transmission data based on the abnormal node data, and arrange and mark the communication transmission data according to the abnormal data position to obtain the marked data segments corresponding to the different application transmission protocols;

[0019] Creating an abnormal arrangement matrix, and importing the marked data segments corresponding to different application transmission protocols into the abnormal arrangement matrix according to the transmission time sequence, to obtain a data decryption matrix;

[0020] Connecting the marking points of adjacent marking data segments in the data decryption matrix in a head-to-tail order, and connecting the Nth marking point in the final marking data segment in the data decryption matrix with the N+1th marking point in the initial marking data segment to obtain a data decryption pattern;

[0021] The communication transmission data is encrypted and packaged according to the data decryption pattern to obtain processed communication transmission data.

[0022] In a possible implementation, the training of the abnormal network model based on the historical communication data to obtain the trained abnormal network model includes:

[0023] Determine whether the historical communication data has the preset data anomaly. If so, discard the data segment corresponding to the historical communication data until the historical communication data does not have the preset data anomaly. If not, decompose the historical communication data to obtain the transmission anomaly data corresponding to each application transmission protocol;

[0024] Converting the transmission abnormality data into a pixel grayscale image, and extracting time series features and traffic distribution features from the pixel grayscale image;

[0025] The extracted time series features, traffic distribution features and historical communication data are input into the abnormal network model for training to obtain a trained abnormal network model.

[0026] In a possible implementation, the extracting of the time series features and the flow distribution features in the pixel grayscale image further includes:

[0027] Arranging the traffic distribution characteristics according to the transmission time nodes according to the time series characteristics to obtain an abnormal traffic fluctuation graph of the abnormal transmission data;

[0028] Arrange the transmission traffic distribution according to the transmission time sequence and the transmission time nodes to obtain a real-time traffic fluctuation graph corresponding to each transmission protocol;

[0029] The real-time traffic fluctuation graph and the abnormal traffic fluctuation graph are fitted according to the transmission time nodes and the transmission protocol to determine whether there are abnormalities in the communication transmission data corresponding to the different transmission time nodes. If so, a data transmission abnormality analysis is performed on the communication transmission data based on the historical communication data to obtain the degree of abnormal transmission.

[0030] In a possible implementation, performing data transmission anomaly analysis on the communication transmission data based on the historical communication data to obtain the degree of abnormal transmission includes:

[0031] Determine the highest flow transmission rate and the lowest flow transmission rate in the data transmission process of each transmission protocol in the historical communication data, and use the highest flow transmission rate and the lowest flow transmission rate as the transmission numerator, and use the time used for each data transmission process as the transmission denominator;

[0032] The transmission rate change value of each transmission protocol in the data transmission process is obtained according to the ratio of the transmission numerator to the transmission denominator;

[0033] Arranging the transmission rate change values ​​in time sequence to obtain a data transmission sequence set of the historical communication data;

[0034] Segmenting each data transmission sequence in the data transmission sequence set to obtain two or more data transmission data segments;

[0035] According to the data security situation of each change value corresponding to each transmission data segment occurring within a preset future time, an abnormal analysis is performed on the communication transmission data to obtain the degree of abnormal transmission.

[0036] In a possible implementation manner, segmenting each data transmission sequence in the data transmission sequence set to obtain two or more data transmission data segments includes:

[0037] Determine all the split points in the transmission sequence according to the transmission rate change value of each data transmission sequence in the data transmission process and each transmission rate value in the data transmission sequence set;

[0038] The data transmission sequence is segmented according to all segmentation points, the similarity of the change value sequences corresponding to each two adjacent data transmission sequences is obtained, and whether each two adjacent data transmission sequences need to be merged is determined according to the similarity to obtain two or more data transmission data segments.

[0039] In the second aspect, the present application provides a mimetic encryption system for communication data transmission, which adopts the following technical solution:

[0040] A mimetic encryption system for communication data transmission, comprising:

[0041] A data acquisition module, used for acquiring communication transmission data and a data transmission standard corresponding to the communication transmission data after detecting a data transmission instruction, wherein the communication transmission data is transmission data to be sent by a data sending end, and the data transmission standard includes an application transmission protocol set of the communication transmission data and corresponding data preprocessing of different application transmission protocols in the application transmission protocol set when transmitting the communication transmission data;

[0042] a data encryption module, used to perform data anomaly detection on the communication transmission data, determine whether the communication transmission data has a preset data anomaly, and if not, collect historical communication data within the historical period time period based on the data transmission standard, and perform mimetic encryption processing on the communication transmission data based on the historical communication data to obtain processed communication transmission data, wherein the historical communication data is communication data transmitted using different application transmission protocols in the application transmission protocol set and abnormal transmission data corresponding to different time nodes in the process of using different application transmission protocols for the historical communication data;

[0043] A data detection module, used for sending the processed communication transmission data to a data receiving device, and when detecting that the data receiving device has received the processed communication transmission data, decrypting the processed communication transmission data to obtain the decrypted communication transmission data;

[0044] The data returning module is used to return the decrypted communication transmission data to the data receiving device.

[0045] In a possible implementation, the system further includes: a modification and annotation module and a data modification module, wherein:

[0046] The modification marking module is used to generate a data transmission termination instruction when the communication transmission data has the preset data anomaly, control the data sending end interface to terminate the transmission of the communication transmission data, and perform modification marking processing on the data nodes in the communication transmission data that have the preset data anomaly to obtain the transmission data to be modified;

[0047] The data modification module is used to return the transmission data to be modified to the data sending end.

[0048] In another possible implementation, when the data encryption module performs mimicry encryption processing on the communication transmission data based on the historical communication data to obtain the processed communication transmission data, it is specifically used to:

[0049] Creating an abnormal network model, and training the abnormal network model based on the historical communication data to obtain a trained abnormal network model;

[0050] Performing simulated data transmission of different application transmission protocols on the communication transmission data to obtain a transmission time sequence and transmission flow distribution corresponding to each application transmission protocol;

[0051] Inputting the transmission time series and the transmission flow distribution into the abnormal network model one by one to perform matching abnormal data identification, and obtaining abnormal node data corresponding to each application transmission protocol used by the communication transmission data;

[0052] Determine the abnormal data position corresponding to the communication transmission data based on the abnormal node data, and arrange and mark the communication transmission data according to the abnormal data position to obtain the marked data segments corresponding to the different application transmission protocols;

[0053] Creating an abnormal arrangement matrix, and importing the marked data segments corresponding to different application transmission protocols into the abnormal arrangement matrix according to the transmission time sequence, to obtain a data decryption matrix;

[0054] Connecting the marking points of adjacent marking data segments in the data decryption matrix in a head-to-tail order, and connecting the Nth marking point in the final marking data segment in the data decryption matrix with the N+1th marking point in the initial marking data segment to obtain a data decryption pattern;

[0055] The communication transmission data is encrypted and packaged according to the data decryption pattern to obtain processed communication transmission data.

[0056] In another possible implementation, when the data encryption module trains the abnormal network model based on the historical communication data to obtain the trained abnormal network model, it is specifically used to:

[0057] Determine whether the historical communication data has the preset data anomaly. If so, discard the data segment corresponding to the historical communication data until the historical communication data does not have the preset data anomaly. If not, decompose the historical communication data to obtain the transmission anomaly data corresponding to each application transmission protocol;

[0058] Converting the transmission abnormality data into a pixel grayscale image, and extracting time series features and traffic distribution features from the pixel grayscale image;

[0059] The extracted time series features, traffic distribution features and historical communication data are input into the abnormal network model for training to obtain a trained abnormal network model.

[0060] In another possible implementation, the system further includes: a first sorting module, a second sorting module and an abnormality analysis module, wherein:

[0061] The first sorting module is used to sort the traffic distribution characteristics according to the transmission time nodes according to the time series characteristics to obtain an abnormal traffic fluctuation graph of the transmission abnormal data;

[0062] The second sorting module is used to sort the transmission traffic distribution according to the transmission time node according to the transmission time sequence to obtain a real-time traffic fluctuation graph corresponding to each transmission protocol;

[0063] The abnormal analysis module is used to fit the real-time traffic fluctuation graph and the abnormal traffic fluctuation graph according to the transmission time nodes and the transmission protocol, and determine whether there are abnormalities in the communication transmission data corresponding to different transmission time nodes. If so, data transmission abnormality analysis is performed on the communication transmission data based on the historical communication data to obtain the degree of abnormal transmission.

[0064] In another possible implementation, when the abnormality analysis module performs data transmission abnormality analysis on the communication transmission data based on the historical communication data to obtain the abnormal transmission degree, it is specifically used to:

[0065] Determine the highest flow transmission rate and the lowest flow transmission rate in the data transmission process of each transmission protocol in the historical communication data, and use the highest flow transmission rate and the lowest flow transmission rate as the transmission numerator, and use the time used for each data transmission process as the transmission denominator;

[0066] The transmission rate change value of each transmission protocol in the data transmission process is obtained according to the ratio of the transmission numerator to the transmission denominator;

[0067] Arranging the transmission rate change values ​​in time sequence to obtain a data transmission sequence set of the historical communication data;

[0068] Segmenting each data transmission sequence in the data transmission sequence set to obtain two or more data transmission data segments;

[0069] According to the data security situation of each change value corresponding to each transmission data segment occurring within a preset future time, an abnormal analysis is performed on the communication transmission data to obtain the degree of abnormal transmission.

[0070] In another possible implementation, when the abnormality analysis module performs segmentation processing on each data transmission sequence in the data transmission sequence set to obtain two or more data transmission data segments, the abnormality analysis module is specifically configured to:

[0071] Determine all the split points in the transmission sequence according to the transmission rate change value of each data transmission sequence in the data transmission process and each transmission rate value in the data transmission sequence set;

[0072] The data transmission sequence is segmented according to all segmentation points, the similarity of the change value sequences corresponding to each two adjacent data transmission sequences is obtained, and whether each two adjacent data transmission sequences need to be merged is determined according to the similarity to obtain two or more data transmission data segments.

[0073] In a third aspect, the present application provides an electronic device, which adopts the following technical solution:

[0074] at least one processor;

[0075] Memory;

[0076] At least one application, wherein at least one application is stored in a memory and configured to be executed by at least one processor, and at least one application is configured to: execute a mimetic encryption method for communication data transmission as described in any one of the first aspects.

[0077] In a fourth aspect, the present application provides a computer-readable storage medium, which adopts the following technical solution:

[0078] A computer-readable storage medium stores a computer program, which, when executed in a computer, causes the computer to execute a method for encrypting communication data transmission as described in any one of the first aspects.

[0079] In summary, the present application includes at least one of the following beneficial technical effects:

[0080] By adopting the above technical solution, when a data transmission instruction is detected, the system obtains the communication transmission data and its corresponding data transmission standard. This ensures accurate identification and classification of data. The data transmission standard includes a set of application transmission protocols and data preprocessing methods under different transmission protocols, which enables the system to select appropriate transmission protocols and preprocessing methods according to data characteristics and optimize transmission efficiency. Then, the system performs anomaly detection on the communication transmission data, effectively intercepts existing errors or malicious data, and ensures the security of the transmission data. If there is no anomaly in the data, the system uses historical communication data to perform mimetic encryption processing on the current data, which enhances the concealment and anti-attack ability of the data and ensures the security of the data during transmission. After completing the mimetic encryption, the system sends the processed communication transmission data to the data receiving device. In this process, the encryption processing not only protects the data content, but also makes the data more difficult to be identified and tampered with during transmission. When the data receiving device successfully receives the data, the system immediately performs decryption processing to ensure that the recipient can accurately restore the original data. After decrypting the communication transmission data, the system returns the decrypted data to the data receiving device. This ensures that the data recipient can seamlessly obtain and use the original data. Through this closed-loop processing flow, the system not only realizes encrypted data transmission, but also ensures the availability of data at the receiving end, greatly improving the overall efficiency of data transmission and data security. BRIEF DESCRIPTION OF THE DRAWINGS

[0081] Figure 1 A flowchart of a method for mimicking encryption for communication data transmission provided in an embodiment of the present application.

[0082] Figure 2 A schematic diagram of the structure of a mimetic encryption system for communication data transmission provided in an embodiment of the present application.

[0083] Figure 3 A structural schematic diagram of a data decryption pattern of a mimetic encryption method for communication data transmission provided in an embodiment of the present application.

[0084] Figure 4 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0085] The following is combined with Figure 1-3 This application is described in further detail.

[0086] This specific embodiment is merely an explanation of the present application and is not a limitation of the present application. After reading this specification, a person skilled in the art may make non-creative modifications to the present embodiment as needed, but such modifications are protected by the patent law as long as they are within the scope of the present application.

[0087] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0088] In addition, the term "and / or" in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article, unless otherwise specified, generally means that the associated objects before and after are in an "or" relationship.

[0089] The embodiments of the present application are further described in detail below in conjunction with the drawings in the specification.

[0090] The embodiment of the present application provides a method for a mimetic encryption method for communication data transmission, which is executed by an electronic device, wherein the electronic device can be an independent physical electronic device, or an electronic device cluster or distributed system composed of multiple physical electronic devices, or a cloud electronic device that provides cloud computing services. The embodiment of the present application is not limited here, such as Figure 1 As shown, the method includes:

[0091] Step S10: After the data transmission instruction is detected, the communication transmission data and the data transmission standard corresponding to the communication transmission data are acquired.

[0092] The communication transmission data is the transmission data to be sent by the data sender, and the data transmission standard includes an application transmission protocol set for the communication transmission data and corresponding data preprocessing of different application transmission protocols in the application transmission protocol set when transmitting the communication transmission data.

[0093] For the embodiments of the present application, communication transmission data refers to the actual data content that the data sender is ready to send to the receiver. These data can be text, images, audio, video or any other form of information carrier. Data transmission standard refers to a set of rules and protocols that specify how to transmit, process and understand communication transmission data. It includes a set of application transmission protocols, that is, a series of data transmission protocols for specific application scenarios, and the data preprocessing requirements that these protocols need to follow when transmitting data, such as integrity, encryption, compression, formatting, etc. The application transmission protocol is a transmission protocol specific to a certain application or service. It defines the data transmission format, transmission order, error handling mechanism, etc., to ensure that data can be accurately and efficiently transmitted from one node to another.

[0094] In the embodiment of the present application, the system can maintain a data transmission standard library, which contains various application transmission protocols and their pre-processing rules. When a data transmission instruction is detected, the system determines the transmission standard and pre-processing method to be used for communication transmission data by querying this library.

[0095] Step S11, perform data anomaly detection on the communication transmission data to determine whether there is a preset data anomaly in the communication transmission data. If not, collect historical communication data within a historical period time period based on the data transmission standard, and perform pseudo-encryption processing on the communication transmission data based on the historical communication data to obtain processed communication transmission data.

[0096] The historical communication data refers to the communication data transmitted using different application transmission protocols in the application transmission protocol set and the abnormal transmission data corresponding to different time nodes in the process of using different application transmission protocols for the historical communication data.

[0097] Reference Figure 3In an embodiment of the present application, an abnormal network model is created, and the abnormal network model is trained based on historical communication data to obtain a trained abnormal network model. The communication transmission data is simulated with different application transmission protocols to obtain a transmission time series and a transmission flow distribution corresponding to each application transmission protocol. The transmission time series and the transmission flow distribution are respectively input into the abnormal network model for matching abnormal data identification, and the communication transmission data is obtained by using abnormal node data corresponding to each application transmission protocol. The abnormal data position corresponding to the communication transmission data is determined based on the abnormal node data, and the communication transmission data is arranged and marked according to the abnormal data position to obtain marked data segments corresponding to different application transmission protocols. Then, an abnormal arrangement matrix is ​​created, and the marked data segments corresponding to different application transmission protocols are imported into the abnormal arrangement matrix according to the transmission time sequence to obtain a data decryption matrix. The marked points of adjacent marked data segments in the data decryption matrix are connected in the order of first and last, and the Nth marked point in the final marked data segment in the data decryption matrix is ​​connected with the N+1th marked point in the initial marked data segment to obtain a data decryption pattern. The communication transmission data is encrypted and packaged according to the data decryption pattern to obtain the processed communication transmission data.

[0098] It is worth mentioning that Figure 3 The abnormal arrangement matrix and data decryption pattern in the example are only examples, including but not limited to Figure 3 An abnormal arrangement matrix and a data decryption pattern are shown in the example. The corresponding abnormal arrangement matrix and data decryption pattern are generated according to the actual situation.

[0099] For the embodiment of the present application, after simulating data transmission of different application transmission protocols for communication transmission data, first determine that there is no transmission anomaly in the current communication transmission data, and then input the transmission time series and transmission flow distribution of the communication transmission data into the abnormal network model for matching abnormal data identification to obtain abnormal node data. The abnormal node data here does not indicate the actual abnormality of the current communication transmission data during the simulated data transmission process, but the abnormal node data in the historical communication data that matches the current communication transmission data. Using the historical communication data separated from the current communication transmission data itself as the data basis for the subsequent data decryption pattern increases the difficulty for illegal personnel to steal data.

[0100] Specifically, the abnormal network model is trained based on the historical communication data to obtain the trained abnormal network model, including: determining whether there is a preset data anomaly in the historical communication data, if so, discarding the data segment corresponding to the historical communication data until the preset data anomaly does not exist in the historical communication data, if not, decomposing the historical communication data to obtain the transmission abnormality data corresponding to each application transmission protocol, and then converting the transmission abnormality data into a pixel grayscale image, and extracting the time series features and traffic distribution features in the pixel grayscale image, and then inputting the extracted time series features, traffic distribution features and historical communication data into the abnormal network model for training to obtain the trained abnormal network model.

[0101] Step S12: sending the processed communication transmission data to a data receiving device, and when detecting that the data receiving device has received the processed communication transmission data, decrypting the processed communication transmission data to obtain decrypted communication transmission data.

[0102] For the embodiment of the present application, the decryption process is actually a graphic decryption process, that is, the decryption pattern of the recorded data is matched with the communication transmission data after the encapsulation process to perform an unsealing operation. When the decryption pattern matches successfully, the decrypted communication transmission data is obtained.

[0103] Step S13: Return the decrypted communication transmission data to the data receiving device.

[0104] In the embodiment of the present application, after detecting the data transmission instruction, the system obtains the communication transmission data and its corresponding data transmission standard. It ensures the accurate identification and classification of the data. The data transmission standard includes the application transmission protocol set and the data preprocessing method under different transmission protocols, which enables the system to select the appropriate transmission protocol and preprocessing method according to the data characteristics and optimize the transmission efficiency. Then, the system performs anomaly detection on the communication transmission data, effectively intercepts the existing errors or malicious data, and ensures the security of the transmission data. If there is no abnormality in the data, the system uses the historical communication data to perform mimetic encryption processing on the current data, which enhances the concealment and anti-attack ability of the data and ensures the security of the data during transmission. After completing the mimetic encryption, the system sends the processed communication transmission data to the data receiving device. In this process, the encryption processing not only protects the data content, but also makes the data more difficult to be identified and tampered during transmission. When the data receiving device successfully receives the data, the system immediately performs decryption processing to ensure that the recipient can accurately restore the original data. After decrypting the communication transmission data, the system returns the decrypted data to the data receiving device. It ensures that the data recipient can seamlessly obtain and use the original data. Through this closed-loop processing flow, the system not only realizes encrypted data transmission, but also ensures the availability of data at the receiving end, greatly improving the overall efficiency of data transmission and data security.

[0105] A possible implementation method of an embodiment of the present application is to perform data anomaly detection on communication transmission data to determine whether there is a preset data anomaly in the communication transmission data, and also include: when the communication transmission data has a preset data anomaly, generating a data transmission termination instruction, controlling the data sending end interface to terminate the sending of the communication transmission data, and performing modification and marking processing on the data nodes in the communication transmission data that have the preset data anomaly to obtain the transmission data to be modified, and returning the transmission data to be modified to the data sending end.

[0106] A possible implementation method of the embodiment of the present application is to extract time series features and traffic distribution features from the pixel grayscale image, and then also include: sorting the traffic distribution features according to the transmission time nodes according to the time series features to obtain an abnormal traffic fluctuation graph of the transmission abnormal data; sorting the transmission traffic distribution according to the transmission time nodes according to the transmission time series to obtain a real-time traffic fluctuation graph corresponding to each transmission protocol; fitting the real-time traffic fluctuation graph and the abnormal traffic fluctuation graph according to the transmission time nodes and the transmission protocol, and judging whether there are abnormalities in the communication transmission data corresponding to different transmission time nodes; if so, performing data transmission abnormality analysis on the communication transmission data based on the historical communication data to obtain the degree of abnormal transmission.

[0107] Specifically, by comparing the time series and traffic distribution, it is determined whether there is a direct anomaly in the current communication transmission data. Direct anomalies refer to abnormal situations that occur during the simulation of data transmission of communication transmission data using different application transmission protocols. Since the current communication transmission data is abnormal, the anomaly is analyzed to determine the degree of abnormal transmission.

[0108] Specifically, a data transmission anomaly analysis is performed on the communication transmission data based on the historical communication data to obtain the degree of abnormal transmission, including: determining the highest flow transmission rate and the lowest flow transmission rate in the data transmission process of each transmission protocol in the historical communication data, and taking the highest flow transmission rate and the lowest flow transmission rate as the transmission numerator, and taking the time used for each data transmission process as the transmission denominator, obtaining the transmission rate change value of each transmission protocol in the data transmission process according to the ratio of the transmission numerator to the transmission denominator, arranging the transmission rate change values ​​in time series to obtain a data transmission sequence set of the historical communication data, segmenting each data transmission sequence in the data transmission sequence set to obtain two or more data transmission data segments, and performing an anomaly analysis on the communication transmission data according to the data security situation of each change value corresponding to each transmission data segment within a preset time in the future to obtain the degree of abnormal transmission.

[0109] In an embodiment of the present application, when the degree of abnormal transmission exceeds a preset abnormal degree, a warning mark is placed on the current data transmission protocol to inform the application personnel that there are security issues with the current protocol.

[0110] A possible implementation method of an embodiment of the present application is to reduce the amount of data processing while ensuring data processing accuracy. The present application determines all segmentation points in the transmission sequence according to the transmission rate change value of each data transmission sequence in the data transmission sequence set during the data transmission process and each transmission rate value, and then segments the data transmission sequence according to all segmentation points, obtains the similarity of the change value sequences corresponding to each two adjacent data transmission sequences, and determines whether each two adjacent data transmission sequences need to be merged according to the similarity, to obtain two or more data transmission data segments.

[0111] The following is an introduction to a mimetic encryption system for communication data transmission provided in an embodiment of the present application. The mimetic encryption system for communication data transmission described below and the mimetic encryption method for communication data transmission described above can be referred to each other. Please refer to Figure 2 , Figure 2 : is a schematic diagram of the structure of a mimetic encryption system 20 for communication data transmission provided in an embodiment of the present application, including:

[0112] The data acquisition module 21 is used to acquire communication transmission data and a data transmission standard corresponding to the communication transmission data after detecting a data transmission instruction, wherein the communication transmission data is transmission data to be sent by the data sending end, and the data transmission standard includes an application transmission protocol set of the communication transmission data and corresponding data preprocessing of different application transmission protocols in the application transmission protocol set when transmitting the communication transmission data;

[0113] The data encryption module 22 is used to perform data anomaly detection on the communication transmission data to determine whether there is a preset data anomaly in the communication transmission data. If not, historical communication data within a historical period time period is collected based on the data transmission standard, and the communication transmission data is subjected to mimetic encryption processing based on the historical communication data to obtain processed communication transmission data, where the historical communication data is the communication data transmitted using different application transmission protocols in the application transmission protocol set and the abnormal transmission data corresponding to different time nodes in the process of using different application transmission protocols for the historical communication data;

[0114] The data detection module 23 is used to send the processed communication transmission data to the data receiving device, and when it is detected that the data receiving device has received the processed communication transmission data, decrypt the processed communication transmission data to obtain the decrypted communication transmission data;

[0115] The data return module 24 is used to return the decrypted communication transmission data to the data receiving device.

[0116] In a possible implementation of the embodiment of the present application, the system 20 further includes: a modification marking module and a data modification module, wherein:

[0117] The modification marking module is used to generate a data transmission termination instruction when there is a preset data anomaly in the communication transmission data, control the data sending end interface to terminate the transmission of the communication transmission data, and perform modification marking processing on the data nodes with the preset data anomaly in the communication transmission data to obtain the transmission data to be modified;

[0118] The data modification module is used to return the transmission data to be modified to the data sending end.

[0119] In another possible implementation of the embodiment of the present application, the data encryption module 22 performs mimicry encryption processing on the communication transmission data based on the historical communication data to obtain the processed communication transmission data, specifically for:

[0120] Creating an abnormal network model, and training the abnormal network model based on historical communication data to obtain a trained abnormal network model;

[0121] Perform simulated data transmission of different application transmission protocols on communication transmission data to obtain the transmission time series and transmission flow distribution corresponding to each application transmission protocol;

[0122] The transmission time series and transmission flow distribution are input into the abnormal network model one by one to match the abnormal data identification, and the abnormal node data corresponding to each application transmission protocol is obtained by the communication transmission data;

[0123] Determine the abnormal data position corresponding to the communication transmission data based on the abnormal node data, and arrange and mark the communication transmission data according to the abnormal data position to obtain the marked data segments corresponding to different application transmission protocols;

[0124] Create an abnormal arrangement matrix, and import the marked data segments corresponding to different application transmission protocols into the abnormal arrangement matrix according to the transmission time sequence to obtain a data decryption matrix;

[0125] Connect the marking points of adjacent marking data segments in the data decryption matrix in the order of first and last marking points, and connect the Nth marking point in the final marking data segment in the data decryption matrix with the N+1th marking point in the initial marking data segment to obtain a data decryption pattern;

[0126] The communication transmission data is encrypted and packaged according to the data decryption pattern to obtain the processed communication transmission data.

[0127] In another possible implementation of the embodiment of the present application, when the data encryption module 22 trains the abnormal network model based on the historical communication data to obtain the trained abnormal network model, it is specifically used to:

[0128] Determine whether there is a preset data anomaly in the historical communication data. If so, discard the data segment corresponding to the historical communication data until there is no preset data anomaly in the historical communication data. If not, decompose the historical communication data to obtain the transmission anomaly data corresponding to each application transmission protocol;

[0129] Convert transmission anomaly data into pixel grayscale images, and extract time series features and traffic distribution features from the pixel grayscale images;

[0130] The extracted time series features, traffic distribution features and historical communication data are input into the abnormal network model for training to obtain the trained abnormal network model.

[0131] In another possible implementation of the embodiment of the present application, the system 20 further includes: a first sorting module, a second sorting module and an abnormality analysis module, wherein:

[0132] The first sorting module is used to sort the traffic distribution characteristics according to the transmission time nodes according to the time series characteristics to obtain an abnormal traffic fluctuation graph of the transmission abnormal data;

[0133] The second sorting module is used to sort the transmission traffic distribution according to the transmission time node according to the transmission time sequence to obtain a real-time traffic fluctuation graph corresponding to each transmission protocol;

[0134] The anomaly analysis module is used to fit the real-time traffic fluctuation graph and the abnormal traffic fluctuation graph according to the transmission time nodes and transmission protocols, and to determine whether there are anomalies in the communication transmission data corresponding to different transmission time nodes. If so, the communication transmission data is analyzed for data transmission anomalies based on historical communication data to obtain the degree of abnormal transmission.

[0135] In another possible implementation of the embodiment of the present application, when the abnormality analysis module performs data transmission abnormality analysis on the communication transmission data based on the historical communication data to obtain the abnormal transmission degree, it is specifically used to:

[0136] Determine the highest traffic transmission rate and the lowest traffic transmission rate in the data transmission process of each transmission protocol in the historical communication data, and use the highest traffic transmission rate and the lowest traffic transmission rate as the transmission numerator, and use the time used in each data transmission process as the transmission denominator;

[0137] The transmission rate change value of each transmission protocol in the data transmission process is obtained according to the ratio of the transmission numerator to the transmission denominator;

[0138] Arrange the transmission rate change values ​​in time sequence to obtain a data transmission sequence set of historical communication data;

[0139] Segmenting each data transmission sequence in the data transmission sequence set to obtain two or more data transmission data segments;

[0140] According to the data security situation of each change value corresponding to each transmission data segment occurring in the future preset time, the communication transmission data is analyzed abnormally to obtain the degree of abnormal transmission.

[0141] In another possible implementation of the embodiment of the present application, when the abnormal analysis module performs segmentation processing on each data transmission sequence in the data transmission sequence set to obtain two or more data transmission data segments, it is specifically used to:

[0142] Determine all the split points in the transmission sequence according to the transmission rate change value of each data transmission sequence in the data transmission process and each transmission rate value in the data transmission sequence set;

[0143] The data transmission sequence is segmented according to all segmentation points, the similarity of the change value sequence corresponding to each two adjacent data transmission sequences is obtained, and whether each two adjacent data transmission sequences need to be merged is determined according to the similarity to obtain two or more data transmission data segments.

[0144] The present application embodiment provides an electronic device, such as Figure 4 As shown, Figure 4 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application, Figure 4 The electronic device 400 shown includes: a processor 401 and a memory 403. The processor 401 and the memory 403 are connected, such as through a bus 402. Optionally, the electronic device 400 may also include a transceiver 304. It should be noted that in actual applications, the transceiver 304 is not limited to one, and the structure of the electronic device 400 does not constitute a limitation on the embodiments of the present application.

[0145] Processor 401 may be a CPU (Central Processing Unit), a general-purpose processor, a DSP (Digital Signal Processor), an ASIC (Application Specific Integrated Circuit), an FPGA (Field Programmable Gate Array), or other programmable logic devices, transistor logic devices, hardware components, or any combination thereof. It may implement or execute various exemplary logic blocks, modules, and circuits described in conjunction with the disclosure of the embodiments of the present application. Processor 401 may also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a DSP and a microprocessor, and the like.

[0146] The bus 402 may include a path to transmit information between the above components. The bus 402 may be a PCI (Peripheral Component Interconnect) bus or an EISA (Extended Industry Standard Architecture) bus. The bus 402 may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 4 Only one thick line is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0147] The memory 403 may be a ROM (Read Only Memory) or other types of static storage devices that can store static information and instructions, a RAM (Random Access Memory) or other types of dynamic storage devices that can store information and instructions, or an EEPROM (Electrically Erasable Programmable Read Only Memory), a CD-ROM (Compact Disc Read Only Memory) or other optical disk storage, optical disk storage (including compressed optical disk, laser disk, optical disk, digital versatile disk, Blu-ray disk, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited to these.

[0148] The memory 403 is used to store application code for executing the solution of the embodiment of the present application, and the execution is controlled by the processor 401. The processor 401 is used to execute the application code stored in the memory 403 to implement the content shown in the above method embodiment.

[0149] Among them, electronic devices include but are not limited to: mobile terminals such as mobile phones, laptops, digital broadcast receivers, PDAs (personal digital assistants), PADs (tablet computers), PMPs (portable multimedia players), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. Figure 4 The electronic device shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0150] A computer-readable storage medium provided in an embodiment of the present application is introduced below. The computer-readable storage medium described below and the method described above can be referenced to each other.

[0151] An embodiment of the present application provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the above-mentioned mimetic encryption method for communication data transmission are implemented.

[0152] Since the embodiments of the computer-readable storage medium part and the embodiments of the method part correspond to each other, the embodiments of the computer-readable storage medium part refer to the description of the embodiments of the method part.

[0153] It should be understood that, although the steps in the flowchart of the accompanying drawings are displayed in sequence as indicated by the arrows, these steps are not necessarily executed in sequence in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least a part of the steps in the flowchart of the accompanying drawings may include multiple sub-steps or multiple stages, and these sub-steps or stages are not necessarily executed at the same time, but can be executed at different times, and their execution order is not necessarily sequential, but can be executed in turn or alternately with other steps or at least a part of the sub-steps or stages of other steps.

[0154] The above are only some implementation methods of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. A method for encrypting communication data, characterized in that: include: After a data transmission instruction is detected, communication transmission data and a data transmission standard corresponding to the communication transmission data are obtained, wherein the communication transmission data is transmission data to be sent by a data sending end, and the data transmission standard includes an application transmission protocol set of the communication transmission data and corresponding data preprocessing of different application transmission protocols in the application transmission protocol set when transmitting the communication transmission data; Performing data anomaly detection on the communication transmission data to determine whether the communication transmission data has a preset data anomaly; if not, collecting historical communication data within the historical period time period based on the data transmission standard, and performing mimetic encryption processing on the communication transmission data based on the historical communication data to obtain processed communication transmission data, wherein the historical communication data is communication data transmitted using different application transmission protocols in the application transmission protocol set and abnormal transmission data corresponding to different time nodes in the process of using different application transmission protocols for the historical communication data; Sending the processed communication transmission data to a data receiving device, and when detecting that the data receiving device has received the processed communication transmission data, decrypting the processed communication transmission data to obtain decrypted communication transmission data; The decrypted communication transmission data is returned to the data receiving device.

2. According to claim 1, a method for mimicking encryption of communication data transmission is characterized in that: The performing data anomaly detection on the communication transmission data to determine whether the communication transmission data has a preset data anomaly also includes: When the communication transmission data has the preset data anomaly, a data transmission termination instruction is generated to control the data sending end interface to terminate the transmission of the communication transmission data, and a modification marking process is performed on the data node having the preset data anomaly in the communication transmission data to obtain the transmission data to be modified; The transmission data to be modified is returned to the data sending end.

3. According to claim 1, a method for mimicking encryption of communication data transmission is characterized in that: The performing mimicry encryption processing on the communication transmission data based on the historical communication data to obtain the processed communication transmission data includes: Creating an abnormal network model, and training the abnormal network model based on the historical communication data to obtain a trained abnormal network model; Performing simulated data transmission of different application transmission protocols on the communication transmission data to obtain a transmission time sequence and transmission flow distribution corresponding to each application transmission protocol; Inputting the transmission time series and the transmission flow distribution into the abnormal network model one by one to perform matching abnormal data identification, and obtaining abnormal node data corresponding to each application transmission protocol used by the communication transmission data; Determine the abnormal data position corresponding to the communication transmission data based on the abnormal node data, and arrange and mark the communication transmission data according to the abnormal data position to obtain the marked data segments corresponding to the different application transmission protocols; Creating an abnormal arrangement matrix, and importing the marked data segments corresponding to different application transmission protocols into the abnormal arrangement matrix according to the transmission time sequence, to obtain a data decryption matrix; Connecting the marking points of adjacent marking data segments in the data decryption matrix in a head-to-tail order, and connecting the Nth marking point in the final marking data segment in the data decryption matrix with the N+1th marking point in the initial marking data segment to obtain a data decryption pattern; The communication transmission data is encrypted and packaged according to the data decryption pattern to obtain processed communication transmission data.

4. According to claim 3, a method for mimicking encryption of communication data transmission is characterized in that: The training of the abnormal network model based on the historical communication data to obtain the trained abnormal network model includes: Determine whether the historical communication data has the preset data anomaly. If so, discard the data segment corresponding to the historical communication data until the historical communication data does not have the preset data anomaly. If not, decompose the historical communication data to obtain the transmission anomaly data corresponding to each application transmission protocol; Converting the transmission abnormality data into a pixel grayscale image, and extracting time series features and traffic distribution features from the pixel grayscale image; The extracted time series features, traffic distribution features and historical communication data are input into the abnormal network model for training to obtain a trained abnormal network model.

5. A method for mimicking encryption of communication data transmission according to claim 4, characterized in that: The step of extracting the time series features and the flow distribution features in the pixel grayscale image further includes: Arranging the traffic distribution characteristics according to the transmission time nodes according to the time series characteristics to obtain an abnormal traffic fluctuation graph of the abnormal transmission data; Arrange the transmission traffic distribution according to the transmission time sequence and the transmission time nodes to obtain a real-time traffic fluctuation graph corresponding to each transmission protocol; The real-time traffic fluctuation graph and the abnormal traffic fluctuation graph are fitted according to the transmission time nodes and the transmission protocol to determine whether there are abnormalities in the communication transmission data corresponding to the different transmission time nodes. If so, a data transmission abnormality analysis is performed on the communication transmission data based on the historical communication data to obtain the degree of abnormal transmission.

6. A method for mimicking encryption of communication data transmission according to claim 5, characterized in that: The performing data transmission anomaly analysis on the communication transmission data based on the historical communication data to obtain the degree of abnormal transmission includes: Determine the highest flow transmission rate and the lowest flow transmission rate in the data transmission process of each transmission protocol in the historical communication data, and use the highest flow transmission rate and the lowest flow transmission rate as the transmission numerator, and use the time used for each data transmission process as the transmission denominator; The transmission rate change value of each transmission protocol in the data transmission process is obtained according to the ratio of the transmission numerator to the transmission denominator; Arranging the transmission rate change values ​​in time sequence to obtain a data transmission sequence set of the historical communication data; Segmenting each data transmission sequence in the data transmission sequence set to obtain two or more data transmission data segments; According to the data security situation of each change value corresponding to each transmission data segment occurring within a preset future time, an abnormal analysis is performed on the communication transmission data to obtain the degree of abnormal transmission.

7. A method for mimicking encryption of communication data transmission according to claim 6, characterized in that: The segmenting process of each data transmission sequence in the data transmission sequence set to obtain two or more data transmission data segments includes: Determine all the split points in the transmission sequence according to the transmission rate change value of each data transmission sequence in the data transmission process and each transmission rate value in the data transmission sequence set; The data transmission sequence is segmented according to all segmentation points, the similarity of the change value sequences corresponding to each two adjacent data transmission sequences is obtained, and whether each two adjacent data transmission sequences need to be merged is determined according to the similarity to obtain two or more data transmission data segments.

8. A mimetic encryption system for communication data transmission, characterized in that: include: A data acquisition module, used for acquiring communication transmission data and a data transmission standard corresponding to the communication transmission data after detecting a data transmission instruction, wherein the communication transmission data is transmission data to be sent by a data sending end, and the data transmission standard includes an application transmission protocol set of the communication transmission data and corresponding data preprocessing of different application transmission protocols in the application transmission protocol set when transmitting the communication transmission data; a data encryption module, used to perform data anomaly detection on the communication transmission data, determine whether the communication transmission data has a preset data anomaly, and if not, collect historical communication data within the historical period time period based on the data transmission standard, and perform mimetic encryption processing on the communication transmission data based on the historical communication data to obtain processed communication transmission data, wherein the historical communication data is communication data transmitted using different application transmission protocols in the application transmission protocol set and abnormal transmission data corresponding to different time nodes in the process of using different application transmission protocols for the historical communication data; A data detection module, used for sending the processed communication transmission data to a data receiving device, and when detecting that the data receiving device has received the processed communication transmission data, decrypting the processed communication transmission data to obtain the decrypted communication transmission data; The data returning module is used to return the decrypted communication transmission data to the data receiving device.

9. An electronic device, characterized in that: The electronic device includes: at least one processor; Memory; At least one application, wherein the at least one application is stored in a memory and configured to be executed by at least one processor, and the at least one application is configured to: execute a mimetic encryption method for communication data transmission as described in any one of claims 1-7.

10. A computer-readable storage medium, characterized in that: include: A computer program is stored which can be loaded by a processor and execute a method for encrypting communication data as described in any one of claims 1 to 7.

Images