Wireless encryption communication method for information security

Abstract

The embodiments of the present application relate to the field of wireless encrypted communication, and specifically to a wireless encrypted communication method for information security. A specific implementation of the method includes: in response to receiving an information sending request sent by a target server, obtaining information to be sent from the target server; determining the user terminal corresponding to the user terminal identifier included in the information to be sent as the target user terminal; obtaining user key information from the target user terminal; generating encryption configuration information based on the user key information; encrypting the information to be sent based on the communication encryption key information included in the encryption configuration information to obtain the encrypted information to be sent; and sending the encrypted information to be sent to the target user terminal. This implementation improves the efficiency and security of wireless communication.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of wireless encrypted communications, and in particular to a wireless encrypted communications method for information security. Background Art

[0002] Wireless short-range communication technology is often used to carry data interaction in application scenarios such as smart cars, smart terminals, smart homes, and smart manufacturing. At present, when performing wireless encrypted communication, the commonly used method is to encrypt the received wireless communication data and then send the encrypted wireless communication data to the target terminal.

[0003] However, it is found in practice that when the above method is used for wireless encrypted communication, the following technical problems often occur:

[0004] To directly encrypt wireless communication data, it is necessary to determine the configuration parameters of the target terminal in advance. When the configuration parameters of the target terminal do not match (for example, there is no corresponding decryptor), it is difficult to decrypt the received encrypted data, thereby reducing the efficiency and security of wireless communication. Summary of the invention

[0005] The content of this application is used to introduce concepts in a brief form, which will be described in detail in the detailed implementation section below. The content of this application is not intended to identify the key features or essential features of the technical solution claimed for protection, nor is it intended to limit the scope of the technical solution claimed for protection.

[0006] Some embodiments of the present application propose a wireless encrypted communication method, a computer device, and a computer-readable storage medium for information security to solve one or more of the technical problems mentioned in the above background technology section.

[0007] In a first aspect, some embodiments of the present application provide a wireless encrypted communication method for information security, the method comprising: in response to receiving an information sending request sent by a target server, obtaining information to be sent from the above-mentioned target server, wherein the above-mentioned information to be sent includes: a user terminal identifier; determining a user terminal corresponding to the user terminal identifier included in the above-mentioned information to be sent as a target user terminal; obtaining user key information from the above-mentioned target user terminal; based on the above-mentioned user key information, generating encryption configuration information, wherein the above-mentioned encryption configuration information includes: communication encryption key information; based on the communication encryption key information included in the above-mentioned encryption configuration information, encrypting the above-mentioned information to be sent to obtain encrypted information to be sent; sending the above-mentioned encrypted information to be sent to the above-mentioned target user terminal.

[0008] In a second aspect, the present application also provides a computer device, comprising a processor, a memory, and a computer program stored in the memory and executable by the processor, wherein when the computer program is executed by the processor, the method described in any implementation of the first aspect is implemented.

[0009] In a third aspect, the present application further provides a computer-readable storage medium, on which a computer program is stored, wherein when the computer program is executed by a processor, the method described in any implementation of the first aspect is implemented.

[0010] The above-mentioned various embodiments of the present application have the following beneficial effects: through the wireless encryption communication method for information security of some embodiments of the present application, the efficiency and security of wireless communication can be improved. Specifically, the reason for the reduction in the efficiency and security of wireless communication is that: to directly encrypt the wireless communication data, the configuration parameters of the target terminal need to be determined in advance. When the configuration parameters of the target terminal do not match (for example, there is no corresponding decryptor), it is difficult to decrypt the received encrypted wireless communication data. Based on this, the wireless encryption communication method for information security of some embodiments of the present application, first, in response to receiving the information sending request sent by the target server, obtain the information to be sent from the above target server. Thus, the wireless communication data waiting to be encrypted and sent can be obtained. Secondly, the user terminal corresponding to the user terminal identifier included in the above information to be sent is determined as the target user terminal. Thus, the target terminal that wants to receive the encrypted data can be determined. Then, the user key information is obtained from the above target user terminal. Thus, the shared key of the target terminal can be obtained. Then, based on the above user key information, the encryption configuration information is generated, wherein the above encryption configuration information includes: communication encryption key information. Thus, the user terminal can be verified based on the shared key, further improving the security line of wireless communication, and the encryption algorithm and key can be determined according to the configuration parameters of the target terminal so as to encrypt the data to be sent. Then, based on the communication encryption key information included in the above encryption configuration information, the above information to be sent is encrypted to obtain the encrypted information to be sent. Thus, the encrypted wireless communication data can be obtained. Finally, the above encrypted information to be sent is sent to the above target user terminal. Thus, the encrypted wireless communication data and key received by the target terminal are used to perform the decryption operation. Therefore, some wireless encryption communication methods for information security of the present application can perform authentication communication with the target server, improving the security of communication with the target server, and then, can be authenticated with the target user terminal, further improving the security of communication with the target user terminal, and then, can be configured based on the parameter information of the target user terminal. Encryption parameter information, thereby, it can be avoided that the target user terminal is difficult to decrypt the received wireless communication data, thereby improving the efficiency and security of wireless communication. BRIEF DESCRIPTION OF THE DRAWINGS

[0011] The above and other features, advantages and aspects of the embodiments of the present application will become more apparent with reference to the following detailed description in conjunction with the accompanying drawings. Throughout the accompanying drawings, the same or similar reference numerals represent the same or similar elements. It should be understood that the drawings are schematic and that components and elements are not necessarily drawn to scale.

[0012] Figure 1 is a flow chart of some embodiments of the wireless encryption communication method for information security according to the present application;

[0013] Figure 2 is a schematic diagram of an application scenario of some embodiments of the wireless encryption communication method for information security according to the present application;

[0014] Figure 3 It is a schematic diagram of the system transmission protocol stack architecture of the wireless encryption communication method for information security according to the present application;

[0015] Figure 4 It is a schematic diagram of the information transmission modulation and coding method for the wireless encryption communication method for information security according to the present application;

[0016] Figure 5 It is a schematic diagram of the structure of a computer device suitable for implementing some embodiments of the present application. DETAILED DESCRIPTION

[0017] Embodiments of the present application will be described in more detail below with reference to the accompanying drawings. Although certain embodiments of the present application are shown in the accompanying drawings, it should be understood that the present application can be implemented in various forms and should not be construed as being limited to the embodiments set forth herein. On the contrary, these embodiments are provided to provide a more thorough and complete understanding of the present application. It should be understood that the drawings and embodiments of the present application are only for exemplary purposes and are not intended to limit the scope of protection of the present application.

[0018] It should also be noted that, for ease of description, only the parts related to the invention are shown in the drawings. In the absence of conflict, the embodiments and features in the embodiments of the present application can be combined with each other.

[0019] It should be noted that the concepts such as "first" and "second" mentioned in this application are only used to distinguish different devices, modules or units, and are not used to limit the order or interdependence of the functions performed by these devices, modules or units.

[0020] It should be noted that the modifications of "one" and "plurality" mentioned in the present application are illustrative rather than restrictive, and those skilled in the art should understand that unless otherwise clearly indicated in the context, it should be understood as "one or more".

[0021] The names of the messages or information exchanged between multiple devices in the embodiments of the present application are only used for illustrative purposes and are not used to limit the scope of these messages or information.

[0022] The present application will be described in detail below with reference to the accompanying drawings and in combination with embodiments.

[0023] Figure 1 A process 100 of some embodiments of the wireless encryption communication method for information security according to the present application is shown. Figure 2 A schematic diagram of an application scenario of some embodiments of the wireless encryption communication method for information security according to the present application is shown. The wireless encryption communication method for information security includes the following steps:

[0024] Step 101, in response to receiving an information sending request sent by a target server, obtaining information to be sent from the target server.

[0025] In some embodiments, the execution subject of the wireless encrypted communication method for information security may obtain the information to be sent from the target server through a wired connection or a wireless connection in response to receiving an information sending request sent by the target server. The information to be sent may include: a user terminal identifier. The target server may be a server for storing information to be sent. The information sending request may indicate that the target server wants to send information to the execution subject, and wants the execution subject to send encrypted data to the user terminal corresponding to the user terminal identifier. The information to be sent may represent a control instruction. The user terminal identifier may uniquely identify a user terminal. The user terminal may be a terminal for receiving the information to be sent.

[0026] As an example, the execution subject may be a vehicle multimedia control terminal. The control instruction may be, but is not limited to, at least one of the following: "stop playing", "play next song" or "play single song in a loop". The protocol stack structure for information transmission between the execution subject and the target server may refer to Figure 3 FIG. 1 is a schematic diagram of a system transmission protocol stack architecture of a wireless encryption communication method for information security according to the present application. Figure 3 As shown, the G node may represent the execution subject. The T node may represent the target server. The T node may also represent the user terminal corresponding to the user terminal identifier.

[0027] It should be noted that the above wireless connection methods may include but are not limited to 3G / 4G connection, WiFi connection, Bluetooth connection, WiMAX connection, Zigbee connection, UWB (ultra wideband) connection, and other wireless connection methods currently known or to be developed in the future.

[0028] like Figure 2As shown, the execution subject 201 of the wireless encryption communication method for information security can obtain the information to be sent from the target server 202 in response to receiving the information sending request sent by the target server 202, wherein the information to be sent can include: user terminal identification. For example, in this application scenario, the information sending request can be "control the speaker to play the next song". Then, the user terminal corresponding to the user terminal identification included in the information to be sent can be determined as the target user terminal. Then, the user key information can be obtained from the target user terminal. For example, in this application scenario, the target user terminal can be a speaker. Subsequently, encryption configuration information can be generated based on the user key information, wherein the encryption configuration information includes: communication encryption key information. Then, based on the communication encryption key information included in the encryption configuration information, the information to be sent can be encrypted to obtain the encrypted information to be sent. Finally, the encrypted information to be sent can be sent to the target user terminal 203.

[0029] It should be understood that Figure 2 The number of terminal devices in the figure is only for illustration. Any number of terminal devices may be provided according to implementation requirements.

[0030] In some optional implementations of some embodiments, the execution subject, in response to receiving an information sending request sent by an associated target server, obtains the information to be sent from the associated target server, which may include the following steps:

[0031] The first step is to obtain a communication domain identifier and a data type identifier from the associated target server. The communication domain identifier may represent the communication domain in which the target server is located. The data type identifier may represent the type of information that the target server wants to send.

[0032] As an example, the above information type may be but is not limited to at least one of the following: information that requires ultra-low latency transmission, information that occupies high traffic, or large packet data information.

[0033] The second step is to generate transmission configuration information based on the above data type identifier in response to determining that the above communication domain identifier satisfies the preset communication condition. Among them, the above generation of transmission configuration information based on the above data type identifier may be: when the above data type identifier is a first preset identifier, the first preset value is determined as the scheduling granularity value included in the transmission configuration information, and the first preset coding algorithm is determined as the coding algorithm information included in the transmission configuration information. When the above data type identifier is a second preset identifier, the second preset value is determined as the scheduling granularity value included in the transmission configuration information, and the second preset coding algorithm is determined as the coding algorithm information included in the transmission configuration information. Specifically, the above preset communication condition may be that the communication domain represented by the above communication domain identifier is the same as the communication domain where the execution subject is located. The above first preset identifier may represent the first information type. The above second preset identifier may represent the second information type.

[0034] As an example, the first information type may be information that needs to be transmitted with ultra-low latency. The second information type may be information that occupies high traffic or large packet data information. The first preset value may be 1. The first preset coding algorithm may be a Polar code (polarization code) coding algorithm or an RS code (Reed-Solomon, Reed-Solomon error correction code) coding algorithm. The second preset value may be 3 or 4. The second preset coding algorithm may be a high-performance Polar code coding algorithm. The method for determining the coding algorithm information may refer to Figure 4 FIG. 1 is a schematic diagram of the information transmission modulation and coding method of the wireless encryption communication method for information security according to the present application. Figure 4 As shown, the encoding algorithm can be determined according to the bit size of the information to be sent.

[0035] The third step is to control the carrier transmission device to receive the initial communication information sent by the associated target server based on the transmission configuration information. The scheduling granularity value included in the transmission configuration information can be determined as the number of carriers, and the carrier transmission device is controlled to receive the initial communication information sent by the associated target server. The initial communication information can be an uncoded communication signal. The carrier transmission device can be a device for performing carrier transmission.

[0036] The fourth step is to encode the initial communication information based on the transmission configuration information to obtain communication coding information. The initial communication information can be encoded using the coding algorithm information included in the transmission configuration information to obtain communication coding information.

[0037] The fifth step is to perform an abnormality check on the communication coding information to obtain an abnormality check result. The abnormality check can be performed on the communication coding information using a preset abnormality check algorithm to obtain an abnormality check result. The abnormality check result can be information indicating "no abnormality" or information indicating "abnormality".

[0038] As an example, the above-mentioned preset abnormality check algorithm can be but is not limited to at least one of the following: a checksum algorithm, a cyclic redundancy check algorithm or a parity check algorithm.

[0039] Step 6: In response to determining that the abnormality check result satisfies a preset check condition, the communication coding information is determined as information to be sent. The preset check condition may be that the abnormality check result is information indicating "no abnormality".

[0040] Optionally, in response to determining that the abnormal verification result does not meet the preset verification condition, the execution subject may also retransmit the communication coded information to generate information to be sent. The communication coded information may be retransmitted using a preset retransmission algorithm to generate information to be sent.

[0041] As an example, the preset retransmission algorithm may be a HARQ (Hybrid Automatic RepeatreQuest) algorithm.

[0042] Step 102: determine the user terminal corresponding to the user terminal identifier included in the information to be sent as the target user terminal.

[0043] In some embodiments, the execution subject may determine the user terminal corresponding to the user terminal identifier included in the information to be sent as the target user terminal. In practice, the execution subject may determine the user terminal represented by the user terminal identifier included in the information to be sent as the target user terminal.

[0044] Step 103: Obtain user key information from the target user terminal.

[0045] In some embodiments, the execution subject may obtain user key information from the target user terminal. The user key information may represent a shared key generated by the target user terminal. The shared key may be generated by a preset key generation algorithm.

[0046] As an example, the preset key generation algorithm may be a KDF (key derivation function) algorithm.

[0047] Step 104: Generate encryption configuration information based on the user key information.

[0048] In some embodiments, the execution subject may generate encryption configuration information based on the user key information, wherein the encryption configuration information may include: communication encryption key information.

[0049] In some optional implementations of some embodiments, the execution subject generates encryption configuration information based on the user key information, which may include the following steps:

[0050] The first step is to perform credential authentication processing on the above-mentioned user key information to generate a key authentication result. The above-mentioned credential authentication processing on the above-mentioned user key information to generate a key authentication result may be: first, read the management key information from the storage terminal. The above-mentioned management key information may represent the shared key generated by the above-mentioned execution subject. The above-mentioned storage terminal may be a terminal for storing the above-mentioned management key information. Then, when the above-mentioned management key information is the same as the above-mentioned user key information, the first preset authentication result is determined as the key authentication result. The above-mentioned first preset authentication result may be information representing "authentication success". When the above-mentioned management key information is different from the above-mentioned user key information, the second preset authentication result is determined as the key authentication result. The above-mentioned second preset authentication result may be information representing "authentication failure". The above-mentioned management key information may be generated by the above-mentioned preset key generation algorithm.

[0051] The second step is to send the preset shared key information to the target user terminal, and receive the communication authentication result from the target user terminal. The preset shared key information may be the management key information. The communication authentication result may be information indicating "authentication success" or information indicating "authentication failure".

[0052] In the third step, in response to determining that the communication authentication result satisfies a preset communication authentication condition and the key authentication result satisfies a preset key authentication condition, initial encryption configuration information is generated. The preset communication condition may be that the communication authentication result is information indicating "authentication success". The preset key authentication condition may be that the key authentication result is information indicating "authentication success".

[0053] The fourth step is to send the initial encryption configuration information to the target user terminal, and receive configuration response information from the target user terminal. The configuration response information may be information indicating "agreement" or information indicating "rejection".

[0054] Step 5: In response to determining that the configuration response information satisfies the preset response condition, a user communication identifier is generated, and the user communication identifier is sent to the target user terminal. The user communication identifier may be randomly generated. The preset response condition may be that the configuration response information is information indicating "agreement". The user communication identifier may uniquely identify a user terminal and be used to communicate with the target user terminal.

[0055] Step 6: Fusion processing is performed on the configuration response information, the user communication identifier and the initial encryption configuration information to obtain the encryption configuration information. The fusion processing is performed on the configuration response information, the user communication identifier and the initial encryption configuration information to obtain the encryption configuration information, which may be: the configuration response information, the user communication identifier and the initial encryption configuration information are determined as the configuration response information, the user communication identifier and the initial encryption configuration information included in the encryption configuration information.

[0056] Thus, dual identity authentication can be achieved by performing identity authentication on the user terminal while the execution subject performs identity authentication, thereby improving the security of communication. Then, the encryption configuration information can be confirmed with the user terminal to improve the accuracy and security of the encryption configuration, thereby further improving the security of communication.

[0057] In some optional implementations of some embodiments, the above-mentioned execution subject generates initial encryption configuration information, which may include the following steps:

[0058] The first step is to obtain user terminal parameter information from the target user terminal, wherein the user terminal parameter information may represent the hardware parameters of the user terminal.

[0059] As an example, the above hardware parameters may include, but are not limited to: processor type, memory capacity, and network interface.

[0060] The second step is to generate communication encryption key information based on the user terminal parameter information. The communication encryption key information can be generated based on the user terminal parameter information by a preset generation algorithm.

[0061] As an example, the above-mentioned preset generation algorithm can be but is not limited to at least one of the following: RivestShamir Adleman (RSA) encryption algorithm, SM2 (national secret algorithm) or DH (Diffie-Hellman) algorithm.

[0062] The third step is to fuse the encryption algorithm information and the communication encryption key information to obtain the initial encryption configuration information. The fusion of the encryption algorithm information and the communication encryption key information to obtain the initial encryption configuration information may be: determining the encryption algorithm information and the communication encryption key information as the encryption algorithm information and the communication encryption key information included in the initial encryption configuration information.

[0063] Step 105: Based on the communication encryption key information included in the encryption configuration information, encrypt the information to be sent to obtain encrypted information to be sent.

[0064] In some embodiments, the execution subject may encrypt the information to be sent based on the communication encryption key information included in the encryption configuration information to obtain the encrypted information to be sent.

[0065] In some optional implementations of some embodiments, the execution subject encrypts the information to be sent based on the communication encryption key information included in the encryption configuration information to obtain the encrypted information to be sent, which may include the following steps:

[0066] The first step is to group the information to be sent to obtain a sequence of grouped information to be sent, wherein the information to be sent can be grouped according to a preset byte length to obtain a sequence of grouped information to be sent.

[0067] As an example, the preset byte length may be 16 bytes.

[0068] The second step is to generate encryption mask information corresponding to each to-be-sent packet information in the to-be-sent packet information sequence to obtain an encryption mask information sequence. For each to-be-sent packet information in the to-be-sent packet information sequence, a random number sequence having the same byte length as the to-be-sent packet information can be randomly generated as encryption mask information. Then, each generated encryption mask information can be determined as an encryption mask information sequence.

[0069] The third step is to perform mask encryption processing on each of the to-be-sent packet information in the to-be-sent packet information sequence based on the encryption mask information sequence and the communication encryption key information to generate the to-be-sent packet encryption information and obtain the to-be-sent packet encryption information sequence. The to-be-sent packet encryption information includes: the to-be-sent packet encryption information length value. The to-be-sent packet encryption information length value may be the number of characters included in the to-be-sent packet information.

[0070] The fourth step is to encode and encrypt the packet encrypted information sequence to be sent based on the above encryption mask information sequence to obtain the encrypted information to be sent.

[0071] In some optional implementations of some embodiments, the execution subject performs mask encryption processing on each to-be-sent packet information in the to-be-sent packet information sequence based on the encryption mask information sequence and the communication encryption key information to generate the to-be-sent packet encrypted information, which may include the following steps:

[0072] The first step is to determine the encryption mask information corresponding to the to-be-sent packet information in the encryption mask information sequence as the target encryption mask information.

[0073] In the second step, the target encryption mask information and the to-be-sent group information are subjected to an XOR process to obtain initial encryption information.

[0074] In the third step, in response to determining that the above-mentioned group information to be sent meets the preset sequence number condition, the above-mentioned initial encrypted information is encrypted based on the above-mentioned communication encryption key information to obtain the group encrypted information to be sent. Wherein, based on the above-mentioned communication encryption key information, the above-mentioned initial encrypted information can be encrypted by a preset encryption algorithm to obtain the group encrypted information to be sent. The above-mentioned preset sequence number condition can be that the above-mentioned group information to be sent is the first group information to be sent in the above-mentioned group information sequence to be sent.

[0075] As an example, the above-mentioned preset encryption algorithm can be but is not limited to at least one of the following: DES (Data Encryption Standard) encryption algorithm, AES (Advanced Encryption Standard) encryption algorithm or DSA (Digital Signature Algorithm) encryption algorithm.

[0076] Optionally, the above execution entity may further perform the following steps:

[0077] In the first step, in response to determining that the to-be-sent group information does not meet a preset sequence number condition, the to-be-sent group encryption information corresponding to the previous to-be-sent group information of the to-be-sent group information is determined as the target key information.

[0078] The second step is to encrypt the initial encrypted information based on the target key information to obtain the encrypted group information to be sent. The initial encrypted information can be encrypted based on the target key information using the preset encryption algorithm to obtain the encrypted group information to be sent.

[0079] In some optional implementations of some embodiments, the execution subject performs encoding and encryption processing on the packet encryption information sequence to be sent based on the encryption mask information sequence to obtain the encrypted information to be sent, which may include the following steps:

[0080] The first step is to determine the preset symbol information as the characteristic symbol information, wherein the preset symbol information can be the information preset to represent a character.

[0081] As an example, the above character may be, but is not limited to, at least one of the following: “0”, “1”, “*” or “#”.

[0082] The second step is to match the characteristic symbol information with the encrypted mask information sequence to obtain a first characteristic matching value. The matching process between the characteristic symbol information and the encrypted mask information sequence to obtain the first characteristic matching value may be to determine the number of characters in the encrypted mask information sequence that are identical to the characters represented by the characteristic symbol information as the first characteristic matching value.

[0083] The third step is to match the characteristic symbol information with the encrypted information sequence to be sent to obtain a second characteristic matching value. The matching of the characteristic symbol information with the encrypted information sequence to be sent to obtain the second characteristic matching value may be to determine the number of characters in the encrypted information sequence to be sent that are identical to the characters represented by the characteristic symbol information as the second characteristic matching value.

[0084] In the fourth step, the sum of the first feature matching value and the second feature matching value is determined as the target matching value.

[0085] The fifth step is to perform a modulo processing on the length value of the encrypted information to be sent based on the target matching value to obtain the information length remainder value. The modulo processing on the length value of the encrypted information to be sent based on the target matching value to obtain the information length remainder value may be: taking the length of the encrypted information to be sent as the dividend and the target matching value as the divisor to perform a division operation, and then determining the obtained remainder as the information length remainder value.

[0086] The sixth step is to encode each of the to-be-sent encrypted group information in the to-be-sent encrypted group information sequence based on the above-mentioned information length remainder value to generate the encrypted coded information to be sent, and obtain the encrypted coded information sequence to be sent. The above-mentioned encoding process based on the above-mentioned information length remainder value to generate the encrypted coded information to be sent, and obtain the encrypted coded information sequence to be sent, can be: first, the above-mentioned information length remainder value is determined as the target bit value. Then, for each of the to-be-sent encrypted group information in the to-be-sent encrypted group information sequence, based on a preset encoding algorithm, the target bit value character in the to-be-sent encrypted group information is used as the starting character, and the to-be-sent encrypted group information is encoded to generate the encrypted coded information to be sent. Finally, each of the generated encrypted coded information to be sent is determined as the encrypted coded information sequence to be sent.

[0087] As an example, the above-mentioned preset encoding algorithm may be a Huffman encoding algorithm.

[0088] The seventh step is to determine the above encrypted coded information sequence to be sent as the encrypted information to be sent.

[0089] The relevant content of step 105, as an inventive point of an embodiment of the present application, solves the technical problem of "reduced security of wireless communication". Among them, the factors that lead to reduced security of wireless communication are often as follows: using a single key for encryption, when the key is cracked or stolen, it will cause the encrypted data to be cracked. If the above factors are solved, the effect of improving the security of wireless communication can be achieved. In order to achieve this effect, the present application can firstly perform group processing on the above-mentioned information to be sent to obtain a sequence of group information to be sent. Secondly, generate encryption mask information corresponding to each group information to be sent in the above-mentioned sequence of group information to be sent, and obtain an encryption mask information sequence. Thus, a mask can be randomly generated so that each group of information can be encrypted subsequently. Then, based on the above-mentioned encryption mask information sequence and the above-mentioned communication encryption key information, mask encryption processing is performed on each group information to be sent in the above-mentioned sequence of group information to be sent to generate encrypted group information to be sent, and obtain an encrypted group information sequence to be sent. Thus, each group of information can be encrypted separately based on the random mask and the encryption key, wherein the key corresponding to each group of information is different. Finally, based on the above encryption mask information sequence, the encrypted information sequence of the to-be-sent packet is coded and encrypted to obtain the encrypted information to be sent. Thus, the information to be sent can be dynamically encrypted as a whole based on the characteristic data and the encryption mask. Thus, the security of wireless communication can be further improved.

[0090] Step 106: Send the encrypted information to be sent to the target user terminal.

[0091] In some embodiments, the execution entity may send the encrypted information to be sent to the target user terminal.

[0092] The above-mentioned various embodiments of the present application have the following beneficial effects: through the wireless encryption communication method for information security of some embodiments of the present application, the efficiency and security of wireless communication can be improved. Specifically, the reason for the reduction in the efficiency and security of wireless communication is that: to directly encrypt the wireless communication data, the configuration parameters of the target terminal need to be determined in advance. When the configuration parameters of the target terminal do not match (for example, there is no corresponding decryptor), it is difficult to decrypt the received encrypted wireless communication data. Based on this, the wireless encryption communication method for information security of some embodiments of the present application, first, in response to receiving the information sending request sent by the target server, obtain the information to be sent from the above target server. Thus, the wireless communication data waiting to be encrypted and sent can be obtained. Secondly, the user terminal corresponding to the user terminal identifier included in the above information to be sent is determined as the target user terminal. Thus, the target terminal that wants to receive the encrypted data can be determined. Then, the user key information is obtained from the above target user terminal. Thus, the shared key of the target terminal can be obtained. Then, based on the above user key information, the encryption configuration information is generated, wherein the above encryption configuration information includes: communication encryption key information. Thus, the user terminal can be verified based on the shared key, further improving the security line of wireless communication, and the encryption algorithm and key can be determined according to the configuration parameters of the target terminal so as to encrypt the data to be sent. Then, based on the communication encryption key information included in the above encryption configuration information, the above information to be sent is encrypted to obtain the encrypted information to be sent. Thus, the encrypted wireless communication data can be obtained. Finally, the above encrypted information to be sent is sent to the above target user terminal. Thus, the encrypted wireless communication data and key received by the target terminal are used to perform the decryption operation. Therefore, some wireless encryption communication methods for information security of the present application can perform authentication communication with the target server, improving the security of communication with the target server, and then, can be authenticated with the target user terminal, further improving the security of communication with the target user terminal, and then, can be configured based on the parameter information of the target user terminal. Encryption parameter information, thereby, it can be avoided that the target user terminal is difficult to decrypt the received wireless communication data, thereby improving the efficiency and security of wireless communication.

[0093] The present application also provides a computer device 500. Figure 5As shown, the computer device 500 includes: a bus 501, a processor 502, a memory 503 and a communication interface 504. The processor 502, the memory 503 and the communication interface 504 communicate with each other through the bus 501. The computer device 500 can be a server or a terminal device. It should be understood that the present application does not limit the number of processors and memories in the computer device 500.

[0094] The bus 501 may be a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 5 The bus 501 is represented by only one line, but it does not mean that there is only one bus or one type of bus. The bus 501 may include a path for transmitting information between various components of the computer device 500 (for example, the memory 503, the processor 502, and the communication interface 504).

[0095] The processor 502 may include any one or more of a central processing unit (CPU), a graphics processing unit (GPU), a microprocessor (MP), or a digital signal processor (DSP).

[0096] The memory 503 may include a volatile memory, such as a random access memory (RAM). The memory 503 may also include a non-volatile memory, such as a read-only memory (ROM), a flash memory, a hard disk drive (HDD), or a solid state drive (SSD).

[0097] The memory 503 stores executable program codes, and the processor 502 executes the executable program codes to respectively implement the functions of the acquisition module, the sampling module, the determination module, and the mixing module, thereby implementing the wireless encryption communication method for information security. That is, the memory 503 stores instructions for executing the wireless encryption communication method for information security.

[0098] The communication interface 504 uses a transceiver module such as, but not limited to, a network interface card or a transceiver to implement communication between the computer device 500 and other devices or a communication network.

[0099] An embodiment of the present application also provides a chip, which includes a processor and a data interface. The processor reads instructions stored in a memory through the data interface to execute the above-mentioned wireless encryption communication method for information security.

[0100] The embodiment of the present application also provides a computer-readable storage medium. The above-mentioned computer-readable storage medium can be any available medium that can be stored by the computing device or a data storage device such as a data center containing one or more available media. The above-mentioned available medium can be a magnetic medium (for example, a floppy disk, a hard disk, a tape), an optical medium (for example, a DVD), or a semiconductor medium (for example, a solid-state hard disk). The computer-readable storage medium includes instructions that instruct the computing device to execute the above-mentioned wireless encryption communication method for information security.

[0101] The technical features of the above embodiments can be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0102] The above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, a person skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the protection scope of the technical solutions of the embodiments of the present application.

Claims

1. A wireless encryption communication method for information security, comprising: In response to receiving an information sending request sent by a target server, obtaining information to be sent from the target server, wherein the information to be sent includes: a user terminal identifier; Determine a user terminal corresponding to the user terminal identifier included in the information to be sent as a target user terminal; Acquire user key information from the target user terminal; Generate encryption configuration information based on the user key information, wherein the encryption configuration information includes: communication encryption key information; Based on the communication encryption key information included in the encryption configuration information, encrypt the information to be sent to obtain encrypted information to be sent; Sending the encrypted information to be sent to the target user terminal; The step of generating encryption configuration information based on the user key information includes: Performing credential authentication processing on the user key information to generate a key authentication result; Sending preset shared key information to the target user terminal, and receiving a communication authentication result from the target user terminal; In response to determining that the communication authentication result satisfies a preset communication authentication condition, and the key authentication result satisfies a preset key authentication condition, generating initial encryption configuration information; Sending the initial encryption configuration information to the target user terminal, and receiving configuration response information from the target user terminal; In response to determining that the configuration response information satisfies a preset response condition, generating a user communication identifier, and sending the user communication identifier to the target user terminal; The configuration response information, the user communication identifier and the initial encryption configuration information are merged to obtain the encryption configuration information; The generating of initial encryption configuration information includes: Acquiring user terminal parameter information from the target user terminal; Based on the user terminal parameter information, communication encryption key information is generated through a preset encryption algorithm; The encryption algorithm and the communication encryption key information are integrated to obtain the initial encryption configuration information; The step of encrypting the information to be sent based on the communication encryption key information included in the encryption configuration information to obtain the encrypted information to be sent includes: Performing grouping processing on the information to be sent to obtain a sequence of grouped information to be sent; Generate encryption mask information corresponding to each packet information to be sent in the packet information sequence to be sent, to obtain an encryption mask information sequence; Based on the encryption mask information sequence and the communication encryption key information, mask encryption processing is performed on each of the to-be-sent packet information in the to-be-sent packet information sequence to generate the to-be-sent packet encryption information, and obtain the to-be-sent packet encryption information sequence, wherein the to-be-sent packet encryption information in the to-be-sent packet encryption information sequence includes: the to-be-sent packet encryption information length value; Based on the encryption mask information sequence, encoding and encrypting the packet encryption information sequence to be sent to obtain the encrypted information to be sent; The step of encoding and encrypting the packet encryption information sequence to be sent based on the encryption mask information sequence to obtain the encrypted information to be sent includes: Determining the preset symbol information as characteristic symbol information; Determine the number of characters in the encrypted mask information sequence that are identical to the characters represented by the characteristic symbol information as a first characteristic matching value; Determine the number of characters in the block encrypted information sequence to be sent that are identical to the characters represented by the characteristic symbol information as a second characteristic matching value; Determine the sum of the first feature matching value and the second feature matching value as a target matching value; Based on the target matching value, performing a modulo process on the length value of the block encrypted information to be sent to obtain a modulo value of the information length; Determine the information length remainder value as the target bit value; For each piece of encrypted block information to be sent in the encrypted block information sequence to be sent, using the target digit numerical character in the encrypted block information to be sent as the starting character, encoding the encrypted block information to be sent to generate encrypted coded information to be sent, and obtaining the encrypted coded information sequence to be sent; The encrypted coded information sequence to be sent is determined as the encrypted information to be sent.

2. The wireless encryption communication method for information security according to claim 1, wherein: The step of obtaining the information to be sent from the associated target server in response to receiving the information sending request sent by the associated target server includes: Acquire a communication domain identifier and a data type identifier from the associated target server; In response to determining that the communication domain identifier satisfies a preset communication condition, generating transmission configuration information based on the data type identifier; Based on the transmission configuration information, controlling the carrier transmission device to receive the initial communication information sent by the associated target server; Based on the transmission configuration information, encoding the initial communication information to obtain communication encoding information; Performing an abnormality check on the communication coding information to obtain an abnormality check result; In response to determining that the abnormal verification result satisfies a preset verification condition, the communication encoding information is determined as information to be sent.

3. A computer device, wherein: The computer device comprises a processor, a memory, and a computer program stored in the memory and executable by the processor, wherein when the computer program is executed by the processor, the steps of the method according to any one of claims 1 to 2 are implemented.

4. A computer-readable storage medium, wherein: The computer-readable storage medium stores a computer program, wherein when the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 2 are implemented.

Images