Computer network data secure transmission system and method

Abstract

The invention relates to the technical field of computers, and discloses a computer network data secure transmission system and method.The computer network data secure transmission system comprises a data encryption module, a data receiving module, a data detection module and a data fragmentation module.The data encryption module carries out identity verification through multiple factors, the complexity of identity verification is further improved, and the security of the data fragmentation module is improved. According to the method and the system, the cracking difficulty is increased, an identity verification strategy is periodically updated and reviewed to ensure that the system always conforms to the latest security standard and practice, and during data transmission, a distributed network architecture is adopted, and the data is cached to a server closer to a user through a load balancing technology, so that a higher content transmission speed is provided, and the user experience is improved. According to the method, the transmission efficiency is improved, the situation of omission in the transmission process is reduced, after network data are transmitted to a database, the data are backed up regularly, a data recovery emergency plan and a sectional recovery plan are set, key service data are recovered preferentially, service continuity is ensured, and data safety is guaranteed.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a computer network data security transmission system and method. Background Art

[0002] The field of network security technology refers to the use of various technical means to protect computer networks and data in the network from security threats such as unauthorized access, data leakage, malicious attacks, etc. It covers a wide range of fields, including network communication, data transmission, identity authentication, encryption and decryption, access control, etc. Among them, the data security transmission system is a system specially designed to protect the security of data during network transmission. Its purpose is to ensure that during the data transmission process, the data can be safely delivered to the intended recipient to prevent data leakage, tampering, hijacking or unauthorized access;

[0003] In the existing data security transmission system, in order to ensure the security of data transmission, the data is usually encrypted before transmission. In the prior art, the degree of encryption is usually determined manually, which firstly reduces efficiency and secondly is prone to omissions. Summary of the invention

[0004] In view of the deficiencies in the prior art, the present invention provides a computer network data security transmission system and method, which solves the problems raised in the above background technology.

[0005] To solve the above technical problems, according to one aspect of the present invention, more specifically, a computer network data security transmission system includes a data encryption module, a data receiving module, a data detection module and a data slicing module, characterized in that: the data encryption module is used to encrypt the data to be transmitted to ensure the security of the data during the transmission process;

[0006] The data encryption module calculates the hash value of the data through a one-way hash algorithm, and sends the encrypted data and the hash value to the data receiving module;

[0007] The data receiving module is used to receive the encrypted data and hash value, and transmit them to the server through the computer network;

[0008] After receiving the data, the data receiving module decrypts the data and recalculates the hash value of the decrypted data;

[0009] The data receiving module uses load balancing technology to distribute data to multiple servers;

[0010] The data receiving module adopts a distributed network architecture and caches data to a server closer to the user through load balancing technology;

[0011] The data detection module is used to compare the recalculated hash value with the received hash value;

[0012] The data slicing module is provided with an analysis module, and divides the data into multiple data slices according to the analysis results and transmits them to the database;

[0013] The data slicing module optimizes the number of data slicing and the transmission order to ensure that the sum of the data transmission time and the time required for the server to process data is minimized.

[0014] Moreover, the data receiving module obtains the calculation formula of the transmission speed through load balancing, distributed network architecture and adjustment of routers as follows:

[0015]

[0016] In the formula, C is the time required for data transmission; D is the data transmission distance; V is the data transmission speed in the medium; L is the length of the data packet; B is the channel bandwidth; S is the signal power; and N is the noise power.

[0017] Furthermore, the data encryption module uses multi-factor authentication, combining passwords, fingerprints, SMS verification codes, and hardware tokens;

[0018] The Data Encryption Module adopts regular updates and reviews of its authentication strategies.

[0019] Moreover, when the data receiving server receives data, it reduces network congestion and signal interference by changing the router channel and shutting down useless network services, thereby increasing the transmission speed.

[0020] Furthermore, a data management module is provided in the database, and the data management module sets a scheduled backup and event-triggered backup strategy to ensure that data is backed up in time at a specific time and under specific conditions;

[0021] The data management module sets up a data recovery emergency plan, clarifies the recovery process and division of responsibilities when data is lost or damaged, and conducts data recovery drills regularly to ensure the effectiveness and operability of the plan.

[0022] Furthermore, when the data management module recovers data, it formulates a phased recovery plan based on business priorities and data importance, giving priority to recovering key business data to ensure business continuity, and then gradually recovering other data.

[0023] A method for using a computer network data security transmission system comprises the following steps:

[0024] S1. Transmit network data to the data encryption module, encrypt the data to be transmitted, calculate the hash value of the data through a one-way hash algorithm, and transmit the encrypted data and the hash value to the data receiving module;

[0025] S2. Receive the encrypted data and hash value through the data receiving module, decrypt the data, and recalculate the hash value of the decrypted data;

[0026] S3. Recalculate the hash value through the data receiving module and compare it with the received hash value using the data detection module:

[0027] If the two are equal, it means that the data has not been damaged or tampered with during transmission;

[0028] If the two are not equal, it means that there may be problems with the data and further processing or verification is required;

[0029] S4. Setting an analysis module in the data sharding module and dividing the data into multiple data slices according to the analysis results for transmission to the database;

[0030] S5. Back up data regularly through the data management module set up in the database, set up data recovery emergency plans and segmented recovery plans, give priority to restoring key business data, ensure business continuity, and protect data security.

[0031] The advantages and beneficial effects of the computer network data security transmission system and method of the present invention are:

[0032] The present invention uses a data encryption module to perform identity authentication through multiple factors, further increasing the complexity of identity authentication and the difficulty of cracking. It also adopts regular updates and reviews of its identity authentication strategy to ensure that it always complies with the latest security standards and practices. In addition, when transmitting data, it adopts a distributed network architecture and caches data on a server closer to the user through load balancing technology, providing faster content transmission speed, increasing transmission efficiency, and reducing omissions in the transmission process.

[0033] After the network data is transmitted to the database, the present invention backs up the data regularly, and sets up a data recovery emergency plan and a segmented recovery plan, giving priority to restoring key business data, ensuring business continuity and protecting data security. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] Figure 1 It is a schematic diagram of the structure of the present invention. DETAILED DESCRIPTION

[0035] The present invention is further described in detail below with reference to the accompanying drawings and specific implementation methods.

[0036] The present invention will be described in detail below with reference to the accompanying drawings and in combination with embodiments. It should be noted that the embodiments and features in the embodiments of the present application can be combined with each other without conflict.

[0037] like Figure 1 As shown, according to one aspect of the present invention, a computer network data security transmission system is provided, comprising a data encryption module, a data receiving module, a data detection module and a data fragmentation module, wherein the data encryption module is used to encrypt the data to be transmitted to ensure the security of the data during the transmission process;

[0038] The data encryption module calculates the hash value of the data through a one-way hash algorithm, and sends the encrypted data and the hash value to the data receiving module;

[0039] The data receiving module is used to receive the encrypted data and hash value, and transmit them to the server through the computer network;

[0040] After receiving the data, the data receiving module decrypts the data and recalculates the hash value of the decrypted data;

[0041] The data receiving module uses load balancing technology to distribute data to multiple servers;

[0042] The data receiving module adopts a distributed network architecture and caches data to a server closer to the user through load balancing technology;

[0043] The data detection module is used to compare the recalculated hash value with the received hash value;

[0044] The data slicing module is provided with an analysis module, and divides the data into multiple data slices according to the analysis results and transmits them to the database;

[0045] The data slicing module optimizes the number of data slicing and the transmission order to ensure that the sum of the data transmission time and the time required for the server to process data is minimized.

[0046] In this embodiment, the data receiving module obtains the calculation formula of the transmission speed through load balancing, distributed network architecture and adjusting routers as follows:

[0047]

[0048] In the formula, C is the time required for data transmission; D is the data transmission distance; V is the data transmission speed in the medium; L is the length of the data packet; B is the channel bandwidth; S is the signal power; and N is the noise power.

[0049] In this embodiment, the data encryption module adopts multi-factor authentication, combining passwords, fingerprints, SMS verification codes, and hardware tokens to authenticate identity through multiple factors, further increasing the complexity of identity authentication and the difficulty of cracking;

[0050] The Data Encryption Module adopts regular updates and reviews of its authentication strategy to ensure that it remains compliant with the latest security standards and practices.

[0051] In this embodiment, when the data receiving server receives data, it reduces network congestion and signal interference by changing the router channel and shutting down useless network services, thereby increasing the transmission speed.

[0052] In this embodiment, a data management module is provided in the database, and the data management module sets a scheduled backup and event-triggered backup strategy to ensure that data is backed up in time at a specific time and under specific conditions;

[0053] The data management module sets up a data recovery emergency plan, clarifies the recovery process and division of responsibilities when data is lost or damaged, and conducts data recovery drills regularly to ensure the effectiveness and operability of the plan.

[0054] In this embodiment, when the data management module recovers data, it formulates a phased recovery plan based on business priority and data importance, gives priority to recovering key business data to ensure business continuity, and then gradually recovers other data.

[0055] A method for using a computer network data security transmission system comprises the following steps:

[0056] S1. Transmit network data to the data encryption module, encrypt the data to be transmitted, calculate the hash value of the data through a one-way hash algorithm, and transmit the encrypted data and the hash value to the data receiving module;

[0057] S2. Receive the encrypted data and hash value through the data receiving module, decrypt the data, and recalculate the hash value of the decrypted data;

[0058] S3. Recalculate the hash value through the data receiving module and compare it with the received hash value using the data detection module:

[0059] If the two are equal, it means that the data has not been damaged or tampered with during transmission;

[0060] If the two are not equal, it means that there may be problems with the data and further processing or verification is required;

[0061] S4. Setting an analysis module in the data sharding module and dividing the data into multiple data slices according to the analysis results for transmission to the database;

[0062] S5. Back up data regularly through the data management module set up in the database, set up data recovery emergency plans and segmented recovery plans, give priority to restoring key business data, ensure business continuity, and protect data security.

[0063] Of course, the above description is not a limitation of the present invention, and the present invention is not limited to the above examples. Changes, modifications, additions or substitutions made by ordinary technicians in this technical field within the essential scope of the present invention also fall within the protection scope of the present invention.

Claims

1. A computer network data security transmission system, comprising a data encryption module, a data receiving module, a data detection module and a data fragmentation module, characterized in that: The data encryption module is used to encrypt the data to be transmitted to ensure the security of the data during transmission; The data encryption module calculates the hash value of the data through a one-way hash algorithm, and sends the encrypted data and the hash value to the data receiving module; The data receiving module is used to receive the encrypted data and hash value, and transmit them to the server through the computer network; After receiving the data, the data receiving module decrypts the data and recalculates the hash value of the decrypted data; The data receiving module uses load balancing technology to distribute data to multiple servers; The data receiving module adopts a distributed network architecture and caches data to a server closer to the user through load balancing technology; The data detection module is used to compare the recalculated hash value with the received hash value; The data slicing module is provided with an analysis module, and divides the data into multiple data slices according to the analysis results and transmits them to the database; The data slicing module optimizes the number of data slicing and the transmission order to ensure that the sum of the data transmission time and the time required for the server to process data is minimized.

2. A computer network data security transmission system according to claim 1, characterized in that: The data receiving module obtains the calculation formula of transmission speed through load balancing, distributed network architecture and router adjustment: In the formula, C is the time required for data transmission; D is the data transmission distance; V is the data transmission speed in the medium; L is the length of the data packet; B is the channel bandwidth; S is the signal power; and N is the noise power.

3. A computer network data security transmission system according to claim 1, characterized in that: The data encryption module uses multi-factor authentication, combining passwords, fingerprints, SMS verification codes, and hardware tokens; The Data Encryption Module adopts regular updates and reviews of its authentication strategies.

4. A computer network data security transmission system according to claim 1, characterized in that: When the data receiving server receives data, it reduces network congestion and signal interference by changing the router channel and shutting down useless network services, thereby increasing the transmission speed.

5. A computer network data security transmission system according to claim 1, characterized in that: The database is provided with a data management module, which sets a scheduled backup and event-triggered backup strategy to ensure that data is backed up in time at a specific time and under specific conditions; The data management module sets up a data recovery emergency plan, clarifies the recovery process and division of responsibilities when data is lost or damaged, and conducts data recovery drills regularly to ensure the effectiveness and operability of the plan.

6. A computer network data security transmission system according to claim 4, characterized in that: When the data management module restores data, it formulates a phased recovery plan based on business priorities and data importance, gives priority to restoring key business data to ensure business continuity, and then gradually restores other data.

7. A method for using a computer network data security transmission system according to any one of claims 1 to 6, characterized in that: The following steps are involved: S1. Transmit network data to the data encryption module, encrypt the data to be transmitted, calculate the hash value of the data through a one-way hash algorithm, and transmit the encrypted data and the hash value to the data receiving module; S2. Receive the encrypted data and hash value through the data receiving module, decrypt the data, and recalculate the hash value of the decrypted data; S3. Recalculate the hash value through the data receiving module and compare it with the received hash value using the data detection module: If the two are equal, it means that the data has not been damaged or tampered with during transmission; If the two are not equal, it means that there may be problems with the data and further processing or verification is required; S4. Setting an analysis module in the data sharding module and dividing the data into multiple data slices according to the analysis results for transmission to the database; S5. Back up data regularly through the data management module set up in the database, set up data recovery emergency plans and segmented recovery plans, give priority to restoring key business data, ensure business continuity, and protect data security.

Images