Wireless communication network data secure transmission method and system

Abstract

The invention discloses a wireless communication network data secure transmission method and system, and relates to the technical field of secure transmission. During system operation, agricultural monitoring data are collected in real time through various sensor devices arranged in an agricultural environment, encryption processing is performed by using a symmetric encryption algorithm, and a dynamic key length adjustment mechanism is supported; a random number generator is integrated, unified management is performed on key generation, distribution, updating and destruction in a system, a timestamp or a random serial number is embedded into each data packet, the uniqueness of the timestamp or the serial number is verified at a receiving end, so that replay attacks are resisted, and the data are comprehensively analyzed and evaluated according to a set algorithm, so that the replay attack is prevented. The method comprises the following steps: acquiring a security data transmission performance index SDTP through calculation, generating a monitoring report, detecting abnormal conditions in a data transmission process, including channel quality reduction, data loss or verification failure, and providing a visual monitoring result.

Description

Technical Field

[0001] The present invention relates to the field of secure transmission technology, and in particular to a method and system for secure transmission of data in a wireless communication network. Background Art

[0002] As an important part of modern agriculture, agricultural monitoring relies on sensor technology, the Internet of Things, and big data analysis to achieve real-time monitoring and refined management of farmland environment, crop growth conditions, and equipment operation status. In the agricultural environment, the large amount of data collected through wireless communication network transmission provides strong support for precision agricultural decision-making. However, with the increase in data volume and the complexity of agricultural scenarios, the security issues of data transmission have gradually become prominent. The widespread application of wireless communication networks in agricultural monitoring systems has improved the real-time and efficiency of monitoring, but it has also provided opportunities for security risks such as eavesdropping, tampering, and replay attacks on data transmission.

[0003] The wireless communication network data security transmission system for agricultural monitoring is mainly committed to solving the problems of efficiency and security in the process of agricultural data collection and transmission. However, the existing wireless communication network technology has exposed many shortcomings in practical applications: on the one hand, the data transmission efficiency is often limited by the quality of the wireless channel and the layout of the equipment, and it is difficult to maintain stable communication performance in a complex agricultural environment; on the other hand, the security protection means of data transmission are limited, and traditional encryption algorithms and authentication mechanisms are vulnerable to eavesdropping, tampering or replay attacks. In addition, the high transmission error rate, such as packet loss and increased bit error rate, also seriously affects the operational stability of the agricultural monitoring system.

[0004] The shortcomings of existing wireless communication network data transmission technology in agricultural monitoring scenarios are mainly due to the complex agricultural environment (such as vast farmland, obstacles, signal interference) and the dual requirements for data efficiency and security. Environmental factors lead to an increase in signal attenuation rate and a decrease in signal-to-noise ratio, which directly reduces data transmission efficiency. In addition, the lack of dynamic key management and efficient authentication mechanism increases the risk of key leakage, resulting in insufficient data encryption efficiency and vulnerability to eavesdropping and tampering attacks. Once data transmission anomalies occur, such as high bit error rate or high packet retransmission rate, the monitoring system may not be able to update farmland information in real time, resulting in delays or even errors in agricultural decision-making. For example, if the information on insufficient water in the farmland is not transmitted in time due to data loss, it will cause crop drought and yield reduction; in addition, attackers replay illegal data packets or tamper with the transmission content, which may also cause agricultural equipment to perform operations incorrectly (such as over-irrigation), causing economic losses. Therefore, solving these problems in the current situation is crucial for the stable operation of agricultural monitoring systems. Summary of the invention

[0005] In view of the deficiencies in the prior art, the present invention provides a method and system for securely transmitting data in a wireless communication network, which solves the problems mentioned in the background technology.

[0006] To achieve the above objectives, the present invention is implemented through the following technical solutions: a wireless communication network data security transmission system, including a data acquisition module, a data encryption module, a key management module, a data integrity verification module, an anti-replay attack module and a data monitoring module;

[0007] The data acquisition module is used to collect agricultural monitoring data in real time through various sensor devices arranged in the agricultural environment, and synchronously monitor environmental parameters related to wireless communication, and send the data to the back-end processing system in real time through the wireless communication network;

[0008] The data encryption module is used to encrypt the original data generated by the data acquisition module using a symmetric encryption algorithm, supports a dynamic key length adjustment mechanism, and integrates a random number generator to ensure that the data cannot be interpreted even if it is eavesdropped;

[0009] The key management module is used to uniformly manage the generation, distribution, update and destruction of keys in the system, ensure that both parties in communication can safely share encryption keys, realize secure key distribution through public key infrastructure PKI, and realize instant key update during communication in combination with dynamic key exchange protocol Diffie-Hellman;

[0010] The data integrity verification module is used to verify the integrity of the transmitted data to ensure that the data has not been tampered with or lost during the transmission process, by generating a message authentication code MAC or a hash value SHA-256 for the original data, and performing a comparison at the receiving end to verify the integrity of the data;

[0011] The anti-replay attack module is used to prevent attackers from attacking the system by capturing and replaying legitimate data packets, by embedding a timestamp or a random sequence number into each data packet and verifying the uniqueness of the timestamp or sequence number at the receiving end, thereby resisting replay attacks;

[0012] The data monitoring module is used to monitor the system's data collection, encryption and transmission processes in real time, and to comprehensively analyze and evaluate these data according to the set algorithm, calculate and obtain: the secure data transmission performance index SDTP, generate monitoring reports, detect abnormal conditions in the data transmission process, including channel quality degradation, data loss or verification failure, and provide visual monitoring results.

[0013] Preferably, the data acquisition module includes a channel quality monitoring unit, a transmission stability monitoring unit and an encryption effectiveness monitoring unit;

[0014] The channel quality monitoring unit is used to collect environmental signals in real time through the deployed wireless sensor nodes or gateway devices, and measure the ratio between signal strength and background noise through a spectrum analyzer to obtain channel capacity Ccty, signal-to-noise ratio SNR and throughput Throughput;

[0015] The transmission stability monitoring unit is used to monitor the data transmission quality in the wireless communication link, record the transmission status of each data packet, count the number of data packet losses and data packet damage rate in each cycle, and obtain: signal attenuation rate SAR, data bit error rate BER and data packet retransmission rate PRR;

[0016] The encryption performance monitoring unit is used to monitor the identity authentication process of each communication node, record the success and failure of the authentication request, track the key update process, ensure that the frequency of key exchange meets the system security requirements, and obtain: authentication request success rate RZQ, encryption key update frequency JMG, encryption algorithm strength SFQ and encryption algorithm execution efficiency ZXL.

[0017] Preferably, the data encryption module includes an encryption algorithm unit, a key management unit and a random number generation unit;

[0018] The encryption algorithm unit is used to apply the AES symmetric encryption algorithm to the collected raw data, and dynamically adjust the key length of the encryption algorithm according to the sensitivity and security requirements of the transmitted data to ensure the confidentiality of the data;

[0019] The key management unit is responsible for generating, updating and destroying encryption keys, generating initial keys according to a specified algorithm through a built-in key generator, and dynamically adjusting the key length to ensure the strength and flexibility of the encryption process;

[0020] The random number generation unit is used to generate the random numbers required for the encryption process, and ensures the randomness in the key exchange, encryption and decryption processes through hardware or software random number generators, thereby increasing the encryption strength and preventing the encryption algorithm from being cracked.

[0021] Preferably, the key management module includes a key generation unit, a key distribution unit and a key update and destruction unit;

[0022] The key generation unit is used to generate an initial encryption key when the system is started, and to generate a new key as needed, using an encryption algorithm to ensure that the generated key meets high strength requirements to prevent potential brute force cracking;

[0023] The key updating and destroying unit is used to periodically update and destroy the key during the life cycle of the key. When the system detects that the key has been leaked or is no longer safe, the key updating unit will generate a new key and distribute it to both communicating parties.

[0024] Preferably, the data integrity verification module includes a hash generation unit, a message authentication code MAC unit and an integrity verification unit;

[0025] The hash generation unit is used to perform hash processing on the original data to generate a SHA-256 hash value of the data, and the hash value provides a fingerprint of data integrity to ensure that the data has not been tampered with during transmission;

[0026] The message authentication code MAC unit is used to perform message authentication code MAC generation processing on the original data, generate an authentication code through the HMAC symmetric key algorithm to verify the integrity of the data, and at the receiving end, verify whether the MAC value of the data matches to ensure that the data has not been modified;

[0027] The integrity check unit is responsible for comparing the hash value or MAC value of the original data and the received data at the receiving end to verify whether the data is complete and has not been tampered with. If the check fails, it is immediately marked as abnormal data to prevent transmission errors or data tampering.

[0028] Preferably, the anti-replay attack module includes a timestamp generation unit, a sequence number generation unit and a replay verification unit;

[0029] The timestamp generating unit is used to generate a unique timestamp for each data packet, identifying the sending time of the data packet, so that each data packet is unique, which helps to prevent the data packet from being intercepted and replayed;

[0030] The sequence number generating unit is used to assign an increasing unique sequence number to each data packet, ensuring that each data packet has a unique identifier, preventing attackers from causing system confusion by capturing and replaying data packets;

[0031] The replay verification unit is used to verify the timestamp or serial number of each data packet at the receiving end to ensure its uniqueness. If the timestamp or serial number does not meet the requirements, it is determined to be a replay attack and the data packet is discarded or an alarm is issued.

[0032] Preferably, the data monitoring module includes a performance evaluation unit;

[0033] The performance evaluation unit is used to calculate the communication efficiency coefficient CE, the transmission error rate coefficient TE, and the authentication and encryption efficiency coefficient AE by analyzing the real-time data from each module, and obtain the secure data transmission performance index SDTP after combining them;

[0034] The communication efficiency coefficient CE is calculated by the following formula:

[0035] ;

[0036] In the formula, Ccty represents the channel capacity, SNR represents the signal-to-noise ratio, and Throughput represents the throughput. They represent the weight coefficients of channel capacity, signal-to-noise ratio and throughput on communication efficiency, respectively. max and T max Indicates the theoretical maximum value of channel capacity and throughput;

[0037] The transmission error rate coefficient TE is calculated by the following formula:

[0038] ;

[0039] Where, SAR: signal attenuation rate, BER: bit error rate, PRR: packet retransmission rate, They represent the weight coefficients of signal attenuation rate, bit error rate and packet retransmission rate to transmission error rate, respectively. max and P max Indicates the theoretical maximum value of bit error rate and retransmission rate;

[0040] The authentication and encryption efficiency coefficient AE is calculated by the following formula:

[0041] ;

[0042] Where RZQ represents the success rate of authentication requests, JMG represents the frequency of encryption key update, SFQ represents the strength of encryption algorithm, ZXL represents the efficiency of encryption algorithm execution, and They represent the weight coefficients of the authentication request success rate, key update frequency, and encryption algorithm efficiency respectively;

[0043] The secure data transmission performance index SDTP is calculated by the following formula:

[0044] ;

[0045] In the formula, CE represents the communication efficiency coefficient, TE represents the transmission error rate coefficient, and AE represents the authentication and encryption efficiency coefficient. They represent the weight coefficients of the communication efficiency coefficient CE, the transmission error rate coefficient TE, and the authentication and encryption efficiency coefficient AE respectively.

[0046] Preferably, the data monitoring module further includes an anomaly detection unit and a visual monitoring unit;

[0047] The anomaly detection unit is used to monitor the transmission status of data in the system, identify and report abnormal situations in real time, including channel quality degradation, data packet loss and encryption and decryption failure, and mark and process anomalies that occur during the transmission process by setting thresholds and rules;

[0048] Pre-set a first qualification threshold A and a second qualification threshold B, and compare the Secure Data Transmission Performance Index (SDTP) with the first qualification threshold A and the second qualification threshold B to obtain an evaluation plan;

[0049] When SDTP ≥ B, the comprehensive performance of the system is more than 10% higher than the qualified state, indicating that the communication efficiency does not need to be adjusted immediately. Monitor the current operating state and perform periodic monitoring of key parameters;

[0050] When A ≤ SDTP < B, it indicates that the comprehensive performance of the system meets the qualified requirements, but there is still room for improvement. Adjust the layout position of wireless sensor nodes to reduce signal occlusion, optimize channel utilization, increase the Communication Efficiency Coefficient (CE), increase the number of relay nodes, shorten the transmission distance, reduce the Signal Attenuation Rate (SAR) and Bit Error Rate (BER), increase the Authentication Request Success Rate (RZQ) by optimizing the identity authentication process to reduce the failure rate, adopt a more efficient authentication algorithm or distributed authentication, shorten the encryption key update period, increase the Key Update Frequency (JMG) to ensure dynamic security, and select the 256-bit AES encryption algorithm in high-security scenarios. Monitor the Packet Retransmission Rate (PRR) in real time. If it exceeds the threshold, automatically trigger the link adaptation mechanism to dynamically adjust the transmission power or switch to a new communication frequency band;

[0051] When SDTP < A, the system performance is unqualified, and comprehensive optimization measures are taken, including reconstructing key parameters and updating device configurations to restore system performance, replacing inefficient communication nodes, deploying high-performance sensor nodes and gateway devices, enabling a multi-channel transmission mechanism, increasing the Channel Capacity (Ccty) and improving the Throughput, equipping devices with stronger anti-interference capabilities, reducing the Signal Attenuation Rate (SAR), and at the same time enabling a high-sensitivity receiving antenna to increase the Signal-to-Noise Ratio (SNR), implementing a full-system encryption algorithm upgrade, adopting the ECC asymmetric encryption algorithm and the ECDH key negotiation protocol, introducing a Multi-Factor Authentication (MFA) mechanism to ensure that the Authentication Success Rate (RZQ) meets the standard, and reducing the key update delay through a distributed key management mechanism.

[0052] Preferably, the visual monitoring unit is used to visually present the monitoring results, performance evaluation, and abnormal information through a graphical interface. Users can view the operating state, communication quality, and security performance of the system in real time, and provide monitoring results and reports in the form of charts and images.

[0053] A method for secure data transmission in a wireless communication network includes the following steps:

[0054] Step 1: Real-time collect agricultural monitoring data through a variety of sensor devices arranged in the agricultural environment, synchronously monitor the environmental parameters related to wireless communication, and send the data to the backend processing system in real time through the wireless communication network;

[0055] Step 2: The original data generated by the data acquisition module is encrypted using a symmetric encryption algorithm, which supports a dynamic key length adjustment mechanism and integrates a random number generator to ensure that the data cannot be interpreted even if it is eavesdropped;

[0056] Step 3: Centrally manage the generation, distribution, update and destruction of keys in the system to ensure that both parties can share encryption keys securely. The public key infrastructure (PKI) is used to achieve secure key distribution, and the dynamic key exchange protocol Diffie-Hellman is used to achieve real-time key updates during the communication process.

[0057] Step 4: Verify the integrity of the transmitted data to ensure that the data has not been tampered with or lost during transmission. Generate a message authentication code MAC or hash value SHA-256 for the original data and compare it at the receiving end to verify the integrity of the data.

[0058] Step 5: Prevent attackers from attacking the system by capturing and replaying legitimate data packets. This is done by embedding a timestamp or random sequence number into each data packet and verifying the uniqueness of the timestamp or sequence number at the receiving end, thereby resisting replay attacks.

[0059] Step 6: Monitor the system's data collection, encryption, and transmission processes in real time, and conduct comprehensive analysis and evaluation of these data based on the set algorithm to calculate and obtain: the secure data transmission performance index SDTP, generate a monitoring report, detect abnormal conditions during data transmission, including channel quality degradation, data loss, or verification failure, and provide visual monitoring results.

[0060] The present invention provides a method and system for securely transmitting data in a wireless communication network, which has the following beneficial effects:

[0061] (1) When the system is running,

[0062] (2) This wireless communication network data security transmission system has completed all key tasks from data collection to secure transmission by designing six core modules: data collection module, data encryption module, key management module, data integrity verification module, anti-replay attack module and data monitoring module. The data collection module realizes the real-time collection and transmission of agricultural environmental data and wireless communication related parameters; the data encryption module ensures that the data cannot be interpreted even if it is eavesdropped during transmission through dynamic key length adjustment and random number generation; the key management module manages the key generation, distribution and update process in a unified manner, and the data integrity verification module verifies the data by hash value or message authentication code to ensure that the data has not been tampered with; the anti-replay attack module effectively defends against replay attacks through timestamp and serial number verification; the data monitoring module monitors the system operation status in real time and comprehensively evaluates the system performance by calculating the secure data transmission performance index SDTP. The modules work together to achieve high efficiency, security and reliability of data transmission.

[0063] (3) Compared with the existing technology, the system has achieved significant improvements in transmission efficiency, data security and system stability. First, the utilization of channel capacity and throughput is optimized, signal attenuation and data packet loss are reduced, and the communication efficiency coefficient CE is significantly improved. Secondly, by introducing dynamic key exchange and efficient authentication mechanism, the encryption efficiency and authentication success rate are improved, so that the system has stronger anti-attack capabilities when dealing with eavesdropping, tampering and replay attacks, and the authentication and encryption efficiency coefficient AE is optimized. In addition, the data integrity verification module reduces the bit error rate and retransmission rate, stabilizes the data transmission process, and ensures the reduction of the transmission error rate coefficient TE. Compared with traditional systems, this system can dynamically adapt to complex agricultural environments, provide real-time monitoring and optimization means, and further enhance the flexibility and adaptability of the system.

[0064] (4) This system has achieved performance improvements in many aspects. On the one hand, data transmission efficiency and security are taken into account. The system can efficiently and accurately collect and transmit agricultural environmental data to support refined agricultural management. On the other hand, the enhanced security protection mechanism effectively guarantees the integrity and privacy of the data, reducing economic losses caused by information leakage or attacks. At the same time, real-time monitoring and anomaly detection functions enable the system to respond quickly when problems arise, avoiding agricultural decision-making delays caused by data transmission anomalies. Overall, this system has significantly improved the intelligence level and operational reliability of agricultural monitoring, provided strong technical support for the development of precision agriculture, and promoted the development of agricultural production efficiency and sustainability. BRIEF DESCRIPTION OF THE DRAWINGS

[0065] Figure 1 This is a block diagram of a wireless communication network data security transmission system of the present invention;

[0066] Figure 2 The present invention is a schematic diagram of the steps of a method for securely transmitting data in a wireless communication network. DETAILED DESCRIPTION

[0067] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0068] Example 1

[0069] The present invention provides a wireless communication network data security transmission system, please refer to Figure 1 , including data acquisition module, data encryption module, key management module, data integrity verification module, anti-replay attack module and data monitoring module;

[0070] The data acquisition module is used to collect agricultural monitoring data in real time through various sensor devices arranged in the agricultural environment, and synchronously monitor environmental parameters related to wireless communication, and send the data to the back-end processing system in real time through the wireless communication network;

[0071] The data encryption module is used to encrypt the original data generated by the data acquisition module using a symmetric encryption algorithm, supports a dynamic key length adjustment mechanism, and integrates a random number generator to ensure that the data cannot be interpreted even if it is eavesdropped;

[0072] The key management module is used to uniformly manage the generation, distribution, update and destruction of keys in the system, ensure that both parties in communication can safely share encryption keys, realize secure key distribution through public key infrastructure PKI, and realize instant key update during communication in combination with dynamic key exchange protocol Diffie-Hellman;

[0073] The data integrity verification module is used to verify the integrity of the transmitted data to ensure that the data has not been tampered with or lost during the transmission process, by generating a message authentication code MAC or a hash value SHA-256 for the original data, and performing a comparison at the receiving end to verify the integrity of the data;

[0074] The anti-replay attack module is used to prevent attackers from attacking the system by capturing and replaying legitimate data packets, by embedding a timestamp or a random sequence number into each data packet and verifying the uniqueness of the timestamp or sequence number at the receiving end, thereby resisting replay attacks;

[0075] The data monitoring module is used to monitor the system's data collection, encryption and transmission processes in real time, and to comprehensively analyze and evaluate these data according to the set algorithm, calculate and obtain: the secure data transmission performance index SDTP, generate monitoring reports, detect abnormal conditions in the data transmission process, including channel quality degradation, data loss or verification failure, and provide visual monitoring results.

[0076] In this embodiment, agricultural monitoring data is collected in real time by various sensor devices arranged in the agricultural environment, encrypted using a symmetric encryption algorithm, supporting a dynamic key length adjustment mechanism, integrating a random number generator, and uniformly managing key generation, distribution, update, and destruction in the system. By embedding a timestamp or a random serial number into each data packet and verifying the uniqueness of the timestamp or serial number at the receiving end, replay attacks are resisted. The data are comprehensively analyzed and evaluated according to the set algorithm, and the secure data transmission performance index SDTP is calculated and obtained. A monitoring report is generated to detect abnormal conditions in the data transmission process, including channel quality degradation, data loss, or verification failure, and provide visual monitoring results.

[0077] Example 2

[0078] This embodiment is explained in Example 1, please refer to Figure 1 ,Specifically: the data acquisition module includes a channel quality monitoring unit, a transmission stability monitoring unit and an encryption efficiency monitoring unit;

[0079] The channel quality monitoring unit is used to collect environmental signals in real time through the deployed wireless sensor nodes or gateway devices, and measure the ratio between signal strength and background noise through a spectrum analyzer to obtain channel capacity Ccty, signal-to-noise ratio SNR and throughput Throughput;

[0080] The transmission stability monitoring unit is used to monitor the data transmission quality in the wireless communication link, record the transmission status of each data packet, count the number of data packet losses and data packet damage rate in each cycle, and obtain: signal attenuation rate SAR, data bit error rate BER and data packet retransmission rate PRR;

[0081] The encryption performance monitoring unit is used to monitor the identity authentication process of each communication node, record the success and failure of the authentication request, track the key update process, ensure that the frequency of key exchange meets the system security requirements, and obtain: authentication request success rate RZQ, encryption key update frequency JMG, encryption algorithm strength SFQ and encryption algorithm execution efficiency ZXL.

[0082] The data encryption module includes an encryption algorithm unit, a key management unit and a random number generation unit;

[0083] The encryption algorithm unit is used to apply the AES symmetric encryption algorithm to the collected raw data, and dynamically adjust the key length of the encryption algorithm according to the sensitivity and security requirements of the transmitted data to ensure the confidentiality of the data;

[0084] The key management unit is responsible for generating, updating and destroying encryption keys, generating initial keys according to a specified algorithm through a built-in key generator, and dynamically adjusting the key length to ensure the strength and flexibility of the encryption process;

[0085] The random number generation unit is used to generate the random numbers required for the encryption process, and ensures the randomness in the key exchange, encryption and decryption processes through hardware or software random number generators, thereby increasing the encryption strength and preventing the encryption algorithm from being cracked.

[0086] The key management module includes a key generation unit, a key distribution unit and a key update and destruction unit;

[0087] The key generation unit is used to generate an initial encryption key when the system is started, and to generate a new key as needed, using an encryption algorithm to ensure that the generated key meets high strength requirements to prevent potential brute force cracking;

[0088] The key updating and destroying unit is used to periodically update and destroy the key during the life cycle of the key. When the system detects that the key has been leaked or is no longer safe, the key updating unit will generate a new key and distribute it to both communicating parties.

[0089] In this embodiment, the data acquisition module can monitor the channel quality, transmission stability and encryption efficiency in real time, accurately obtain the key performance parameters of the communication network, and provide support for subsequent encryption and data verification; the data encryption module significantly improves the confidentiality and anti-attack capability of the data by dynamically adjusting the key length and random number generation; the key management module ensures the key security and dynamic management capability during the communication process through the unified generation, distribution, update and destruction of keys, and effectively prevents key leakage and brute force cracking. The overall system is efficient, secure and stable, which not only improves the efficiency and security of data transmission, but also enhances the system's adaptability to complex environments, providing reliable technical support for high-demand application scenarios such as agricultural monitoring.

[0090] Example 3

[0091] This embodiment is explained in Example 1, please refer to Figure 1 , specifically: the data integrity verification module includes a hash generation unit, a message authentication code MAC unit and an integrity verification unit;

[0092] The hash generation unit is used to perform hash processing on the original data to generate a SHA-256 hash value of the data, and the hash value provides a fingerprint of data integrity to ensure that the data has not been tampered with during transmission;

[0093] The message authentication code MAC unit is used to perform message authentication code MAC generation processing on the original data, generate an authentication code through the HMAC symmetric key algorithm to verify the integrity of the data, and at the receiving end, verify whether the MAC value of the data matches to ensure that the data has not been modified;

[0094] The integrity check unit is responsible for comparing the hash value or MAC value of the original data and the received data at the receiving end to verify whether the data is complete and has not been tampered with. If the check fails, it is immediately marked as abnormal data to prevent transmission errors or data tampering.

[0095] The anti-replay attack module includes a timestamp generation unit, a sequence number generation unit and a replay verification unit;

[0096] The timestamp generating unit is used to generate a unique timestamp for each data packet, identifying the sending time of the data packet, so that each data packet is unique, which helps to prevent the data packet from being intercepted and replayed;

[0097] The sequence number generating unit is used to assign an increasing unique sequence number to each data packet, ensuring that each data packet has a unique identifier, preventing attackers from causing system confusion by capturing and replaying data packets;

[0098] The replay verification unit is used to verify the timestamp or serial number of each data packet at the receiving end to ensure its uniqueness. If the timestamp or serial number does not meet the requirements, it is determined to be a replay attack and the data packet is discarded or an alarm is issued.

[0099] In this embodiment, the data integrity verification module ensures the consistency of the transmitted data at the sending end and the receiving end through the hash generation unit and the message authentication code MAC unit, effectively preventing the data from being tampered with during the transmission process, and quickly detects and marks abnormal data through the integrity verification unit to prevent the spread of transmission errors. The anti-replay attack module attaches a unique identifier to each data packet through the timestamp generation unit and the sequence number generation unit. Combined with the verification mechanism of the replay verification unit at the receiving end, it can accurately resist replay attacks and prevent the reuse of data packets from causing system abnormalities. The overall system has efficient and accurate data verification and attack defense capabilities, which improves the security and reliability of data transmission, and is particularly suitable for application scenarios with extremely high requirements for data consistency and real-time performance.

[0100] Example 4

[0101] This embodiment is explained in Example 1, please refer to Figure 1 ,Specifically: the anti-replay attack module includes a timestamp generation unit, a sequence number generation unit and a replay verification unit;

[0102] The timestamp generating unit is used to generate a unique timestamp for each data packet, identifying the sending time of the data packet, so that each data packet is unique, which helps to prevent the data packet from being intercepted and replayed;

[0103] The sequence number generating unit is used to assign an increasing unique sequence number to each data packet, ensuring that each data packet has a unique identifier, preventing attackers from causing system confusion by capturing and replaying data packets;

[0104] The replay verification unit is used to verify the timestamp or serial number of each data packet at the receiving end to ensure its uniqueness. If the timestamp or serial number does not meet the requirements, it is determined to be a replay attack and the data packet is discarded or an alarm is issued.

[0105] The data monitoring module includes a performance evaluation unit;

[0106] The performance evaluation unit is used to calculate the communication efficiency coefficient CE, the transmission error rate coefficient TE, and the authentication and encryption efficiency coefficient AE by analyzing the real-time data from each module, and obtain the secure data transmission performance index SDTP after combining them;

[0107] The communication efficiency coefficient CE is calculated by the following formula:

[0108] ;

[0109] In the formula, Ccty represents the channel capacity, SNR represents the signal-to-noise ratio, and Throughput represents the throughput. They represent the weight coefficients of channel capacity, signal-to-noise ratio and throughput on communication efficiency, respectively. max and T max Indicates the theoretical maximum value of channel capacity and throughput;

[0110] The transmission error rate coefficient TE is calculated by the following formula:

[0111] ;

[0112] Where, SAR: signal attenuation rate, BER: bit error rate, PRR: packet retransmission rate, They represent the weight coefficients of signal attenuation rate, bit error rate and packet retransmission rate to transmission error rate, respectively. max and P max Indicates the theoretical maximum value of bit error rate and retransmission rate;

[0113] The authentication and encryption efficiency coefficient AE is calculated by the following formula:

[0114] ;

[0115] Where RZQ represents the success rate of authentication requests, JMG represents the frequency of encryption key update, SFQ represents the strength of encryption algorithm, ZXL represents the efficiency of encryption algorithm execution, and They represent the weight coefficients of the authentication request success rate, key update frequency, and encryption algorithm efficiency respectively;

[0116] The secure data transmission performance index SDTP is calculated by the following formula:

[0117] ;

[0118] In the formula, CE represents the communication efficiency coefficient, TE represents the transmission error rate coefficient, and AE represents the authentication and encryption efficiency coefficient. They represent the weight coefficients of the communication efficiency coefficient CE, the transmission error rate coefficient TE, and the authentication and encryption efficiency coefficient AE respectively.

[0119] The data monitoring module also includes an anomaly detection unit and a visual monitoring unit;

[0120] The anomaly detection unit is used to monitor the transmission status of data in the system, identify and report abnormal situations in real time, including channel quality degradation, data packet loss and encryption and decryption failure, and mark and process anomalies that occur during the transmission process by setting thresholds and rules;

[0121] Pre-setting a first qualified threshold value A and a second qualified threshold value B, and obtaining an evaluation scheme by comparing the secure data transmission performance index SDTP with the first qualified threshold value A and the second qualified threshold value B;

[0122] When SDTP ≥ B, the overall performance of the system is more than 10% higher than the qualified state, indicating that the communication efficiency does not need to be adjusted immediately. The current operating status is monitored, and the wireless communication link is tested periodically to evaluate the channel quality, including signal-to-noise ratio, channel capacity, bit error rate, and retransmission rate, to provide early warning of potential link degradation;

[0123] When A ≤ SDTP < B, it indicates that the overall system performance meets the qualified requirements, but there is still room for improvement. Adjust the layout position of wireless sensor nodes to reduce signal occlusion, optimize channel utilization, increase the communication efficiency coefficient CE, increase the number of relay nodes, shorten the transmission distance, reduce the signal attenuation rate SAR and the bit error rate BER, increase the success rate of authentication requests RZQ, reduce the failure rate by optimizing the identity authentication process, adopt a more efficient authentication algorithm or distributed authentication, shorten the encryption key update period, increase the key update frequency JMG, ensure dynamic security, and select the 256-bit AES encryption algorithm in high-security scenarios. Monitor the packet retransmission rate PRR in real time. If it exceeds the threshold, automatically trigger the link adaptation mechanism to dynamically adjust the transmission power or switch to a new communication frequency band;

[0124] When SDTP < A, the system performance is unqualified. Take comprehensive optimization measures, including reconstructing key parameters and updating device configurations to restore system performance. Replace inefficient communication nodes, deploy high-performance sensor nodes and gateway devices, enable the multi-channel transmission mechanism, increase the channel capacity Ccty and improve the throughput, equip devices with stronger anti-interference capabilities, reduce the signal attenuation rate SAR, and at the same time enable high-sensitivity receiving antennas to increase the signal-to-noise ratio SNR. Implement an upgrade of the full-system encryption algorithm, adopt the ECC asymmetric encryption algorithm and the ECDH key negotiation protocol, introduce the multi-factor authentication MFA mechanism to ensure that the authentication success rate RZQ meets the standard, and reduce the key update delay through the distributed key management mechanism.

[0125] The visualization monitoring unit is used to visually present the monitoring results, performance evaluation, and abnormal information through a graphical interface. Users can view the running status, communication quality, and security performance of the system in real time, and provide monitoring results and reports in the form of charts and images.

[0126] In this embodiment, the anti-replay attack module adds a unique identifier to each data packet through the timestamp generation unit and the sequence number generation unit, and combined with the verification mechanism of the replay verification unit at the receiving end, it can accurately prevent replay attacks and ensure the timeliness and uniqueness of the data packet. The data monitoring module calculates the communication efficiency coefficient CE, the transmission error rate coefficient TE and the authentication and encryption efficiency coefficient AE through the performance evaluation unit, and further comprehensively obtains the secure data transmission performance index SDTP to provide a quantitative evaluation of the system operation status. At the same time, the anomaly detection unit identifies abnormal situations in data transmission in real time, and triggers corresponding optimization strategies based on threshold rules. The visual monitoring unit presents system performance and abnormal information in an intuitive graphical interface, which is convenient for users to quickly grasp the system status. The overall system provides a strong guarantee for efficient and reliable data transmission through the comprehensive optimization of transmission security, communication efficiency and dynamic tuning capabilities. It is particularly suitable for application scenarios with extremely high requirements for data transmission quality and security in complex environments.

[0127] Example 5

[0128] A wireless communication network data security transmission method, please refer to Figure 2 , specifically: including the following steps:

[0129] Step 1: Agricultural monitoring data is collected in real time through a variety of sensor devices arranged in the agricultural environment, and environmental parameters related to wireless communication are monitored synchronously, and the data is sent to the back-end processing system in real time through the wireless communication network;

[0130] Step 2: The original data generated by the data acquisition module is encrypted using a symmetric encryption algorithm, which supports a dynamic key length adjustment mechanism and integrates a random number generator to ensure that the data cannot be interpreted even if it is eavesdropped;

[0131] Step 3: Centrally manage the generation, distribution, update and destruction of keys in the system to ensure that both parties can share encryption keys securely. The public key infrastructure (PKI) is used to achieve secure key distribution, and the dynamic key exchange protocol Diffie-Hellman is used to achieve real-time key updates during the communication process.

[0132] Step 4: Verify the integrity of the transmitted data to ensure that the data has not been tampered with or lost during transmission. Generate a message authentication code MAC or hash value SHA-256 for the original data and compare it at the receiving end to verify the integrity of the data.

[0133] Step 5: Prevent attackers from attacking the system by capturing and replaying legitimate data packets. This is done by embedding a timestamp or random sequence number into each data packet and verifying the uniqueness of the timestamp or sequence number at the receiving end, thereby resisting replay attacks.

[0134] Step 6: Monitor the system's data collection, encryption, and transmission processes in real time, and conduct comprehensive analysis and evaluation of these data based on the set algorithm to calculate and obtain: the secure data transmission performance index SDTP, generate a monitoring report, detect abnormal conditions during data transmission, including channel quality degradation, data loss, or verification failure, and provide visual monitoring results.

[0135] In this embodiment, a comprehensive solution from data collection, encryption, key management to integrity verification, anti-attack protection and real-time monitoring is implemented in steps. Step 1 of the method ensures the efficient collection and transmission of agricultural monitoring data, providing a basis for subsequent processing; Step 2 enhances the confidentiality of data through dynamic encryption algorithms and random number generators, and the data cannot be interpreted even if it is eavesdropped; Step 3 ensures the security and flexibility of the encryption process through key generation, distribution and update management; Step 4 ensures the integrity of data through message authentication codes and hash checks to prevent tampering and loss; Step 5 effectively resists replay attacks through timestamp and sequence number verification, and ensures the timeliness and uniqueness of data packets; Step 6 evaluates system performance in real time by calculating the secure data transmission performance index SDTP, and quickly identifies problems and optimizes the transmission process through visual monitoring and anomaly detection functions. The overall method significantly improves the security, reliability and intelligence level of data transmission, and provides efficient and scalable technical support for scenarios such as agricultural monitoring that have extremely high requirements for data transmission quality and security.

[0136] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A wireless communication network data security transmission system, characterized by: It includes data acquisition module, data encryption module, key management module, data integrity verification module, anti-replay attack module and data monitoring module; The data acquisition module is used to collect agricultural monitoring data in real time through various sensor devices arranged in the agricultural environment, and synchronously monitor environmental parameters related to wireless communication, and send the data to the back-end processing system in real time through the wireless communication network; The data encryption module is used to encrypt the original data generated by the data acquisition module using a symmetric encryption algorithm, supports a dynamic key length adjustment mechanism, and integrates a random number generator to ensure that the data cannot be interpreted even if it is eavesdropped; The key management module is used to uniformly manage the generation, distribution, update and destruction of keys in the system, ensure that both parties in communication can safely share encryption keys, realize secure key distribution through public key infrastructure PKI, and realize instant key update during communication in combination with dynamic key exchange protocol Diffie-Hellman; The data integrity verification module is used to verify the integrity of the transmitted data to ensure that the data has not been tampered with or lost during the transmission process, by generating a message authentication code MAC or a hash value SHA-256 for the original data, and performing a comparison at the receiving end to verify the integrity of the data; The anti-replay attack module is used to prevent attackers from attacking the system by capturing and replaying legitimate data packets, by embedding a timestamp or a random sequence number into each data packet and verifying the uniqueness of the timestamp or sequence number at the receiving end, thereby resisting replay attacks; The data monitoring module is used to monitor the system's data collection, encryption and transmission processes in real time, and to comprehensively analyze and evaluate these data according to the set algorithm, calculate and obtain: the secure data transmission performance index SDTP, generate monitoring reports, detect abnormal conditions in the data transmission process, including channel quality degradation, data loss or verification failure, and provide visual monitoring results.

2. A wireless communication network data security transmission system according to claim 1, characterized in that: The data acquisition module includes a channel quality monitoring unit, a transmission stability monitoring unit and an encryption efficiency monitoring unit; The channel quality monitoring unit is used to collect environmental signals in real time through the deployed wireless sensor nodes or gateway devices, and measure the ratio between signal strength and background noise through a spectrum analyzer to obtain channel capacity Ccty, signal-to-noise ratio SNR and throughput Throughput; The transmission stability monitoring unit is used to monitor the data transmission quality in the wireless communication link, record the transmission status of each data packet, count the number of data packet losses and data packet damage rate in each cycle, and obtain: signal attenuation rate SAR, data bit error rate BER and data packet retransmission rate PRR; The encryption performance monitoring unit is used to monitor the identity authentication process of each communication node, record the success and failure of the authentication request, track the key update process, ensure that the frequency of key exchange meets the system security requirements, and obtain: authentication request success rate RZQ, encryption key update frequency JMG, encryption algorithm strength SFQ and encryption algorithm execution efficiency ZXL.

3. A wireless communication network data security transmission system according to claim 1, characterized in that: The data encryption module includes an encryption algorithm unit, a key management unit and a random number generation unit; The encryption algorithm unit is used to apply the AES symmetric encryption algorithm to the collected raw data, and dynamically adjust the key length of the encryption algorithm according to the sensitivity and security requirements of the transmitted data to ensure the confidentiality of the data; The key management unit is responsible for generating, updating and destroying encryption keys, generating initial keys according to a specified algorithm through a built-in key generator, and dynamically adjusting the key length to ensure the strength and flexibility of the encryption process; The random number generation unit is used to generate the random numbers required for the encryption process, and ensures the randomness in the key exchange, encryption and decryption processes through hardware or software random number generators, thereby increasing the encryption strength and preventing the encryption algorithm from being cracked.

4. A wireless communication network data security transmission system according to claim 1, characterized in that: The key management module includes a key generation unit, a key distribution unit and a key update and destruction unit; The key generation unit is used to generate an initial encryption key when the system is started, and to generate a new key as needed, using an encryption algorithm to ensure that the generated key meets high strength requirements to prevent potential brute force cracking; The key updating and destroying unit is used to periodically update and destroy the key during the life cycle of the key. When the system detects that the key has been leaked or is no longer safe, the key updating unit will generate a new key and distribute it to both communicating parties.

5. A wireless communication network data security transmission system according to claim 1, characterized in that: The data integrity verification module includes a hash generation unit, a message authentication code MAC unit and an integrity verification unit; The hash generation unit is used to perform hash processing on the original data to generate a SHA-256 hash value of the data, and the hash value provides a fingerprint of data integrity to ensure that the data has not been tampered with during transmission; The message authentication code MAC unit is used to perform message authentication code MAC generation processing on the original data, generate an authentication code through the HMAC symmetric key algorithm to verify the integrity of the data, and at the receiving end, verify whether the MAC value of the data matches to ensure that the data has not been modified; The integrity check unit is responsible for comparing the hash value or MAC value of the original data and the received data at the receiving end to verify whether the data is complete and has not been tampered with. If the check fails, it is immediately marked as abnormal data to prevent transmission errors or data tampering.

6. A wireless communication network data security transmission system according to claim 1, characterized in that: The anti-replay attack module includes a timestamp generation unit, a sequence number generation unit and a replay verification unit; The timestamp generating unit is used to generate a unique timestamp for each data packet, identifying the sending time of the data packet, so that each data packet is unique, which helps to prevent the data packet from being intercepted and replayed; The sequence number generating unit is used to assign an increasing unique sequence number to each data packet, ensuring that each data packet has a unique identifier, preventing attackers from causing system confusion by capturing and replaying data packets; The replay verification unit is used to verify the timestamp or serial number of each data packet at the receiving end to ensure its uniqueness. If the timestamp or serial number does not meet the requirements, it is determined to be a replay attack and the data packet is discarded or an alarm is issued.

7. A wireless communication network data security transmission system according to claim 1, characterized in that: The data monitoring module includes a performance evaluation unit; The performance evaluation unit is used to calculate the communication efficiency coefficient CE, the transmission error rate coefficient TE, and the authentication and encryption efficiency coefficient AE by analyzing the real-time data from each module, and then obtain the secure data transmission performance index SDTP after combination; The communication efficiency coefficient CE is calculated and obtained through the following formula: ； In the formula, Ccty represents the channel capacity, SNR represents the signal-to-noise ratio, and Throughput represents the throughput. They represent the weight coefficients of channel capacity, signal-to-noise ratio and throughput on communication efficiency, respectively. max and T max Indicates the theoretical maximum value of channel capacity and throughput; The transmission error rate coefficient TE is calculated and obtained through the following formula: ； Where, SAR: signal attenuation rate, BER: bit error rate, PRR: packet retransmission rate, They represent the weight coefficients of signal attenuation rate, bit error rate and packet retransmission rate to transmission error rate, respectively. max and P max Indicates the theoretical maximum value of bit error rate and retransmission rate; The authentication and encryption efficiency coefficient AE is calculated and obtained through the following formula: ； Where RZQ represents the success rate of authentication requests, JMG represents the frequency of encryption key update, SFQ represents the strength of encryption algorithm, ZXL represents the efficiency of encryption algorithm execution, and They represent the weight coefficients of the authentication request success rate, key update frequency, and encryption algorithm efficiency respectively; The secure data transmission performance index SDTP is calculated and obtained through the following formula: ； In the formula, CE represents the communication efficiency coefficient, TE represents the transmission error rate coefficient, and AE represents the authentication and encryption efficiency coefficient. They represent the weight coefficients of the communication efficiency coefficient CE, the transmission error rate coefficient TE, and the authentication and encryption efficiency coefficient AE respectively.

8. A wireless communication network data security transmission system according to claim 7, characterized in that: The data monitoring module further includes an anomaly detection unit and a visualization monitoring unit; The anomaly detection unit is used to monitor the transmission status of data in the system, identify and report anomalies in real time, including degraded channel quality, packet loss, and encryption / decryption failures, and mark and process the anomalies that occur during the transmission process by setting thresholds and rules; A first qualified threshold A and a second qualified threshold B are preset, and an evaluation scheme is obtained by comparing the secure data transmission performance index SDTP with the first qualified threshold A and the second qualified threshold B; When SDTP≥B, the overall performance of the system is more than 10% higher than the qualified state, indicating that the communication efficiency does not need to be adjusted immediately. Monitor the current operating status and periodically monitor the key parameters; When A≤SDTP<B, it indicates that the overall performance of the system meets the qualified requirements, but there is still room for improvement. Adjust the layout position of the wireless sensor nodes to reduce signal occlusion, optimize the channel utilization rate, increase the communication efficiency coefficient CE, increase the number of relay nodes, shorten the transmission distance, reduce the signal attenuation rate SAR and the bit error rate BER, increase the authentication request success rate RZQ, reduce the failure rate by optimizing the identity authentication process, adopt a more efficient authentication algorithm or distributed authentication, shorten the encryption key update period, increase the key update frequency JMG to ensure dynamic security, and select the 256-bit AES encryption algorithm in high-security scenarios. Real-time monitor the packet retransmission rate PRR, and if it exceeds the threshold, automatically trigger the link adaptation mechanism to dynamically adjust the transmission power or switch to a new communication frequency band; When SDTP<A, the system performance is unqualified, and comprehensive optimization measures are taken, including key parameter reconstruction and device configuration update, to restore the system performance, replace the inefficient communication nodes, deploy high-performance sensor nodes and gateway devices, enable the multi-channel transmission mechanism, increase the channel capacity Ccty and improve the throughput Throughput, equip devices with stronger anti-interference capabilities, reduce the signal attenuation rate SAR, and at the same time enable high-sensitivity receiving antennas to increase the signal-to-noise ratio SNR, implement a full-system encryption algorithm upgrade, adopt the ECC asymmetric encryption algorithm and the ECDH key negotiation protocol, introduce the multi-factor authentication MFA mechanism to ensure that the authentication success rate RZQ meets the standard, and at the same time reduce the key update delay through the distributed key management mechanism.

9. A wireless communication network data security transmission system according to claim 8, characterized in that: The visual monitoring unit is used to visualize the monitoring results, performance evaluation and abnormal information through a graphical interface. Users can view the system's operating status, communication quality and security performance in real time, and provide monitoring results and reports in the form of charts and images.

10. A wireless communication network data security transmission method, applied to a wireless communication network data security transmission system according to any one of claims 1 to 9, characterized in that: The following steps are involved: Step 1: Agricultural monitoring data is collected in real time through a variety of sensor devices arranged in the agricultural environment, and environmental parameters related to wireless communication are monitored synchronously, and the data is sent to the back-end processing system in real time through the wireless communication network; Step 2: The original data generated by the data acquisition module is encrypted using a symmetric encryption algorithm, which supports a dynamic key length adjustment mechanism and integrates a random number generator to ensure that the data cannot be interpreted even if it is eavesdropped; Step 3: Centrally manage the generation, distribution, update and destruction of keys in the system to ensure that both parties can share encryption keys securely. The public key infrastructure (PKI) is used to achieve secure key distribution, and the dynamic key exchange protocol Diffie-Hellman is used to achieve real-time key updates during the communication process. Step 4: Verify the integrity of the transmitted data to ensure that the data has not been tampered with or lost during transmission. Generate a message authentication code MAC or hash value SHA-256 for the original data and compare it at the receiving end to verify the integrity of the data. Step 5: Prevent attackers from attacking the system by capturing and replaying legitimate data packets. This is done by embedding a timestamp or random sequence number into each data packet and verifying the uniqueness of the timestamp or sequence number at the receiving end, thereby resisting replay attacks. Step 6: Monitor the system's data collection, encryption, and transmission processes in real time, and conduct comprehensive analysis and evaluation of these data based on the set algorithm to calculate and obtain: the secure data transmission performance index SDTP, generate a monitoring report, detect abnormal conditions during data transmission, including channel quality degradation, data loss, or verification failure, and provide visual monitoring results.

Images