A method for transmitting digital information security of internet of things

Abstract

The application discloses a kind of methods for transmitting digital information of Internet of Things, it is related to digital information transmission technical field, first by sending end twin platform, construct virtual mapping and generate prediction path, combine the state data that Internet of Things equipment real-time acquisition, dynamically adjust transmission path to adapt to complex and changeable environment;Second, quantum communication link is used to generate dynamic key, utilize the randomness and inseparability of quantum state, guarantee the security of key, data integrity aspect;In addition, transmission time consumption, decryption delay, channel state are fed back to sending end by receiving end, and sending end twin platform is based on feedback information dynamically optimized key distribution parameter and path prediction logic, forms real-time self-adapting mechanism, can adapt to changing network environment;Finally, by dynamically optimizing path weight matrix, significantly reduce resource waste, improve the utilization efficiency of link resource.

Description

Technical Field

[0001] The present invention relates to the technical field of digital information transmission, and in particular to a method for securely transmitting digital information of the Internet of Things. Background Art

[0002] In today's context of widespread digitalization and the Internet of Things (IoT) technology, with the rapid growth in the number of connected devices, the structure of communication networks is becoming increasingly complex, and their dynamism and openness are constantly improving. This trend also brings severe challenges to the security of information transmission: eavesdropping devices or counterfeit nodes are more easily implanted in the link, directly threatening the confidentiality of information. In cross-regional, large-scale distributed scenarios, higher security requirements are placed on the transmission method.

[0003] Traditional methods of secure digital information transmission mainly rely on encryption technology, authentication protocols and key management mechanisms. For example, symmetric encryption algorithms (such as AES) and asymmetric encryption algorithms (such as RSA and ECC) are used to protect data content, while authentication protocols (such as TLS / SSL) are used to prevent data from being tampered with or forged during transmission. However, encryption technology can only protect data content to a certain extent, but cannot prevent the leakage of traffic characteristics. Authentication protocols rely on pre-negotiated static keys and are vulnerable to man-in-the-middle attacks in dynamic network environments. Traditional centralized key management mechanisms are difficult to meet the real-time and efficient key negotiation needs between distributed devices. Therefore, in the current complex network environment, how to design a more secure and efficient transmission solution has become an urgent problem to be solved. Summary of the Invention

[0004] In view of the above existing problems, the present invention is proposed.

[0005] The present invention provides a method for securely transmitting digital information in the Internet of Things (IoT) to solve the problems that traditional digital information transmission schemes are inefficient in a highly dynamic IoT environment and easily become bottlenecks and single-point failure sources for attacks in large-scale distributed networks.

[0006] In order to solve the above technical problems, the present invention provides the following technical solutions:

[0007] The embodiment of the present invention provides a method for securely transmitting digital information of the Internet of Things, which includes:

[0008] Step S1: IoT devices collect information transmission system status data in real time, aggregate it through the gateway, and transmit it to the sending end twin platform; the sending end twin platform builds a virtual mapping, synchronizes the information transmission system status data, and generates a predicted path;

[0009] Step S2: The sending end twin platform cooperates with the receiving end to establish a quantum communication link based on the predicted path and state data, enters the quantum key distribution phase, and generates a random key that matches the current link state;

[0010] Step S3: The random key is transmitted to the sending end to encrypt the state data;

[0011] In step S4, the receiving end receives the encrypted data through the quantum communication link and decrypts it using the key, while verifying the integrity and authenticity of the data and verifying whether there is tampering or man-in-the-middle attack; after decryption, the data is mapped to the target device through the receiving end twin platform;

[0012] Step S5: After the decrypted data is applied, the receiving end twin platform passes the feedback data back to the sending end; the sending end twin platform uses the feedback data to optimize the quantum key distribution parameters and update the next round of prediction path logic.

[0013] As a preferred solution of the method for securely transmitting digital information of the Internet of Things described in the present invention, the method for securely transmitting digital information of the Internet of Things adopts an information transmission system for transmission, and the system includes:

[0014] IoT devices are deployed in the information transmission system and are responsible for collecting status data, aggregating it through the IoT gateway, and then transmitting it to the sending end twin platform;

[0015] The sending-side twin platform builds a virtual map based on the collected status data, synchronizes system status data in real time, analyzes transmission requirements, and generates a preliminary predicted path;

[0016] The communication link module, based on the predicted path and state data of the sending end twin platform, collaborates with the receiving end to establish a quantum communication link and generates a dynamic quantum key through the randomness of the link;

[0017] The receiving-end twin platform receives encrypted data through the quantum communication link, decrypts it using the quantum key, and verifies the integrity and authenticity of the data to complete the task docking with the target device;

[0018] The feedback module transmits the feedback data to the sending end for optimizing the subsequent key distribution parameters and path calculation logic.

[0019] As a preferred solution of the method for secure transmission of digital information in the Internet of Things described in the present invention, the status data includes channel interference, temperature and humidity, electromagnetic background, node online status and data throughput.

[0020] As a preferred solution of the method for secure transmission of digital information in the Internet of Things described in the present invention, the steps of constructing a virtual mapping, synchronizing information transmission system status data and generating a predicted path on the sending end twin platform are as follows:

[0021] IoT devices collect status data in real time D:

[0022] D={d t,n |t=1,2,…,T;n=1,2,…,N}, where d t,n is the nth type of state data at time t, T is the total number of sampling time steps, N is the type of state data,

[0023] Each type of status data d t,n After being transmitted to the twin platform through the gateway, it is normalized. The normalization formula is:

[0024]

[0025] in, is the normalized state data, min(d n )、max(d n ) is the minimum and maximum value of the nth category status data, which is dynamically adjusted according to historical data;

[0026] The twin platform constructs a virtual mapping of the information transmission system based on normalized state data, which is represented by the dynamic state matrix S:

[0027] Among them, S t is the system state vector at time t, containing the real-time values ​​of N types of state features,

[0028] Virtual mapping maps the current state of the system through the weighted dynamic association matrix A. The mapping formula is:

[0029] in, is the virtual mapping state vector, A is the weight matrix, and the matrix element is a mn , a mn Dynamic update, the update formula is:

[0030]

[0031] Among them, a mn is the dynamic correlation coefficient between the mth state and the nth state, and W is the time step window;

[0032] The twin platform is based on the state vector of the virtual map The real-time status of the synchronous information transmission system, the synchronization formula is: in, is the system state vector after synchronization, is the system state vector before synchronization, α is the smoothing factor,

[0033] Based on the synchronized system state vector Generate prediction path P using dynamic time prediction LSTM model t+Δt , the calculation formula is:

[0034]

[0035] Among them, P t+Δt is the predicted path vector at time t+Δt, f LSTM is the long short-term memory network LSTM model, and Δt is the prediction time step.

[0036] As a preferred solution of the method for secure transmission of digital information in the Internet of Things described in the present invention, the sending end twin platform cooperates with the receiving end to establish a quantum communication link based on the predicted path and state data, enters the quantum key distribution stage, and generates a random key that matches the current link state.

[0037] The sending end twin platform generates the predicted path P according to step S1. t+Δt and Send communication request C to the receiving end t : Among them, P t+Δt To predict the path, To synchronize status data,

[0038] The receiving end twin platform receives C t and its own status data Compare and calculate the link compatibility score η, the calculation formula is:

[0039]

[0040] Among them, w φ is the weight of the link feature, p φ 、 is the corresponding characteristic value of the sender and the receiver, η is the compatibility score, when η is less than the threshold η th When the link establishment request is passed, the quantum communication link configuration phase begins: according to the predicted path P t+Δt Priority, select the optimal quantum communication channel

[0041]

[0042] in, is the set of candidate quantum communication channels, β k is the channel bandwidth weight, γ k is the channel stability weight, which is determined by the system state vector Provide, δ k For channel delay, select The sender and receiver work together to complete the dynamic configuration of the quantum communication channel.

[0043] As a preferred solution of the method for secure transmission of digital information in the Internet of Things described in the present invention, the step of entering the quantum key distribution phase and generating a random key matching the current link state further includes:

[0044] Quantum communication link After the configuration is completed, the system uses the quantum state generation device to generate entangled photon pairs |Ψ>,

[0045]

[0046] Among them, |00> and |11> are the ground states of the entangled state,

[0047] The transmitter and receiver measure the received entangled photons respectively, and the measurement basis is in, and denote the rectangular basis and diagonal basis respectively;

[0048] The bit sequence generated after measurement is K s and K r , compare and extract the same bits through classical communication to generate the final key K, in, and is the measurement result between the sender and the receiver at the bth position, and L is the final key length;

[0049] The generated key K passes the NIST randomness test and is distributed to the sender after verification for data encryption;

[0050] The generated key K passes the NIST randomness test and is distributed to the sender after verification for data encryption.

[0051] As a preferred solution of the method for secure transmission of digital information of the Internet of Things described in the present invention, wherein: the encrypted data is transmitted to the receiving end in combination with the predicted path, and at the same time, the Internet of Things device continuously collects status data and feeds it back to the sending end twin platform, and the step of dynamically adjusting the transmission path is as follows:

[0052] The sending end twin platform uses the quantum key K generated in step S2 to encrypt the transmitted data Msg. The encryption adopts the improved AES encryption algorithm. The encryption formula is: C = E K (Msg), where C is the encrypted data, Msg is the plaintext data to be transmitted, K is the quantum key, and E K (·) is the encryption operation, ciphertext C and prediction path P t+Δt After bundling, prepare for transmission;

[0053] The transmission path is based on the predicted path P in step S1. t+Δt The path weight matrix W(t) is defined as W(t)={w ij (t)|i,j∈Z}, where w ij (t) is the transmission path weight between node i and node j at time t, and Z is the set of network nodes;

[0054] Path weight w ij (t) Dynamic calculation formula is:

[0055]

[0056] Among them, τ ij (t) is the current transmission delay between nodes i and j, Q ij (t) is the link quality indicator, I ij (t) is the channel interference intensity, λ, μ, ν are weight parameters,

[0057] Use the shortest weighted Dijkstra algorithm to generate the optimal path P opt , the generating formula is:

[0058]

[0059] in, is the set of available paths, ∑ (i,j)∈P w ij (t) is the total weight of path P;

[0060] Encrypted data C according to the optimal path P opt During the transmission process, the IoT device continuously collects status data D t , including real-time transmission delay τ ij (t), link quality Q ij (t) and channel interference I ij (t), the collected status data is transmitted to the sending end twin platform through the gateway,

[0061] The sending end twin platform uses the latest feedback data D t Dynamically adjust the path weight matrix W(t) and recalculate the optimal path P opt ;

[0062] If the current path P is found opt If the performance indicator of exceeds the threshold θ, the sending end twin platform immediately triggers the path adjustment, and the adjusted path is notified to the receiving end through the network;

[0063] The receiving end receives the encrypted data C through the quantum communication link and decrypts it using the key K. The decryption process is: Msg = D K (C), where D K (·) is the decryption operation, and the encryption operation E K (·) corresponds to, M is the decrypted plaintext data;

[0064] The receiving end will feed back the link status (such as data integrity, transmission delay, etc.) during the transmission process to the sending end twin platform for subsequent path optimization and transmission adjustment.

[0065] As a preferred solution of the method for secure transmission of digital information of the Internet of Things described in the present invention, the encrypted data of step S3 is transmitted to the receiving end in combination with the predicted path, and at the same time, the Internet of Things device continuously collects status data and feeds it back to the sending end twin platform to dynamically adjust the transmission path.

[0066] As a preferred solution of the method for securely transmitting digital information in the Internet of Things described in the present invention, the steps of: the receiving end receiving encrypted data through a quantum communication link and decrypting it using a key, while verifying the integrity and authenticity of the data and verifying whether there has been tampering or man-in-the-middle attacks, are as follows:

[0067] The receiving end receives the encrypted data C and the corresponding transmission meta-information Π through the quantum communication link.

[0068] Π={P opt ,t stamp ,H Msg},

[0069] Among them, P opt is the optimal transmission path generated by the sender, t stamp is the timestamp, H Msg The hash value generated by the sender,

[0070] Receiver verification t stamp Is it within the acceptance time window [T recvstart ,T recvend ], if the time window requirement is not met, data C is rejected;

[0071] The receiving end uses the quantum key K to decrypt the encrypted data C and restore the original plaintext data. The restoration process is: Msg = D K (C), where D K (·) is the decryption operation, which is the same as the encryption operation E at the sender. K (·)correspond,

[0072] After successful decryption, the receiving end verifies the plaintext data Msg and the meta information π;

[0073] The receiving end calculates the hash value H′ of the plaintext data Msg Msg and the hash value H of the sender in π Msg Compare, if H′ Msg ≠H Msg , it is determined that the data has been tampered with or transmitted incorrectly during transmission, the data is discarded and an alarm signal is sent to the sender;

[0074] The receiving end verifies the digital signature of the sending end. The sending end uses its private key to sign the data, and the receiving end verifies it using the sending end's public key. The verification process is as follows:

[0075]

[0076] in,

[0077] Σ S The digital signature generated by the sender,

[0078] It is a digital signature operation based on the private key of the sender.

[0079] It is a digital signature verification operation based on the sender's public key.

[0080] If the signature verification fails, it is considered that the data source is abnormal and may be subject to a man-in-the-middle attack;

[0081] Combining the results of integrity check and authenticity verification, the receiver further verifies whether there is a man-in-the-middle attack. The trigger conditions for man-in-the-middle attack detection are:

[0082]

[0083] If the trigger condition is met, the receiver rejects the data and records the abnormal path P opt , informing the sender to optimize the transmission strategy.

[0084] As a preferred solution of the method for secure transmission of digital information in the Internet of Things described in the present invention, the feedback data includes transmission time, channel status and decryption delay.

[0085] The beneficial effects of the present invention are as follows: First, the present invention constructs a virtual mapping and generates a predicted path through the sending end twin platform, combines the status data collected in real time by the Internet of Things devices, and dynamically adjusts the transmission path to adapt to the complex and changeable environment, thereby avoiding link congestion and delay; secondly, a quantum communication link is used to generate a dynamic key, and the randomness and indivisibility of the quantum state are utilized to ensure the security of the key. In terms of data integrity, a multiple protection mechanism is formed through hash verification, digital signature verification, and man-in-the-middle attack detection. The receiving end can not only quickly detect and reject tampered or forged data, but also effectively prevent man-in-the-middle attacks, and comprehensively ensure the credibility and integrity of the data; in addition, the receiving end feeds back the transmission time, decryption delay, and channel status to the sending end. The sending end twin platform dynamically optimizes the key distribution parameters and path prediction logic based on the feedback information, forming a real-time adaptive mechanism that can adapt to the ever-changing network environment; finally, by dynamically optimizing the path weight matrix, resource waste is significantly reduced and the utilization efficiency of link resources is improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0086] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0087] Figure 1 This is a flow chart of the method for securely transmitting digital information in the Internet of Things in Example 1. DETAILED DESCRIPTION

[0088] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the specific embodiments of the present invention are described in detail below with reference to the accompanying drawings.

[0089] In the following description, many specific details are set forth to facilitate a full understanding of the present invention. However, the present invention may also be implemented in other ways different from those described herein. Those skilled in the art may make similar generalizations without violating the connotation of the present invention. Therefore, the present invention is not limited to the specific embodiments disclosed below.

[0090] Secondly, the term "one embodiment" or "embodiment" herein refers to a specific feature, structure, or characteristic that may be included in at least one implementation of the present invention. The phrase "in one embodiment" appearing in various places throughout this specification does not necessarily refer to the same embodiment, nor does it refer to a separate or selective embodiment that is mutually exclusive of other embodiments.

[0091] Example 1, with reference to Figure 1This embodiment provides a method for securely transmitting digital information in the Internet of Things, comprising the following steps:

[0092] Step S1: IoT devices collect information transmission system status data in real time, aggregate it through the gateway, and transmit it to the sending end twin platform; the sending end twin platform builds a virtual mapping, synchronizes the information transmission system status data, and generates a predicted path;

[0093] Status data includes channel interference, temperature and humidity, electromagnetic background, node online status, and data throughput;

[0094] The steps for the sending end twin platform to build a virtual map, synchronize the information transmission system status data and generate a predicted path are as follows:

[0095] IoT devices collect status data in real time D:

[0096] D={d t,n |t=1,2,…,T;n=1,2,…,N}, where d t,n is the nth type of state data at time t, T is the total number of sampling time steps, N is the type of state data,

[0097] Each type of status data d t,n After being transmitted to the twin platform through the gateway, it is normalized. The normalization formula is:

[0098]

[0099] in, is the normalized state data, min(d n )、max(d n ) is the minimum and maximum value of the nth category status data, which is dynamically adjusted according to historical data;

[0100] The twin platform constructs a virtual mapping of the information transmission system based on normalized state data, which is represented by the dynamic state matrix S:

[0101] Among them, S t is the system state vector at time t, containing the real-time values ​​of N types of state features,

[0102] Virtual mapping maps the current state of the system through the weighted dynamic association matrix A. The mapping formula is:

[0103] in, is the virtual mapping state vector, A is the weight matrix, and the matrix element is a mm , a mm Dynamic update, the update formula is:

[0104]

[0105] Among them, a mn is the dynamic correlation coefficient between the mth state and the nth state, and W is the time step window;

[0106] The twin platform is based on the state vector of the virtual map The real-time status of the synchronous information transmission system, the synchronization formula is: in, is the system state vector after synchronization, is the system state vector before synchronization, α is the smoothing factor,

[0107] Based on the synchronized system state vector Generate prediction path P using dynamic time prediction LSTM model t+Δt , the calculation formula is:

[0108]

[0109] Among them, P t+Δt is the predicted path vector at time t+Δt, f LSTM is the long short-term memory network LSTM model, Δt is the prediction time step;

[0110] Specifically, the twin platform realizes dynamic modeling, state synchronization and path optimization of information transmission systems.

[0111] Step S2: The sending end twin platform cooperates with the receiving end to establish a quantum communication link based on the predicted path and state data, enters the quantum key distribution phase, and generates a random key that matches the current link state;

[0112] The sending end twin platform cooperates with the receiving end to establish a quantum communication link based on the predicted path and state data, and enters the quantum key distribution phase. The steps to generate a random key that matches the current link state are as follows:

[0113] The sending end twin platform generates the predicted path P according to step S1. t+Δt and Send communication request C to the receiving end t : Among them, P t+Δt To predict the path, To synchronize status data,

[0114] The receiving end twin platform receives C t and its own status data Compare and calculate the link compatibility score η, the calculation formula is:

[0115]

[0116] Among them, w φ is the weight of the link feature, p φ 、 is the corresponding characteristic value of the sender and the receiver, η is the compatibility score, when η is less than the threshold η th When the link establishment request is passed, the quantum communication link configuration phase begins: according to the predicted path P t+Δt Priority, select the optimal quantum communication channel

[0117]

[0118] in, is the set of candidate quantum communication channels, β k is the channel bandwidth weight, γ k is the channel stability weight, which is determined by the system state vector Provide, δ k For channel delay, select The transmitter and receiver collaborate to dynamically configure the quantum communication channel;

[0119] Entering the quantum key distribution phase, the steps of generating a random key that matches the current link state also include:

[0120] Quantum communication link After the configuration is completed, the system uses the quantum state generation device to generate entangled photon pairs |Ψ>,

[0121]

[0122] Among them, |00> and |11> are the ground states of the entangled state,

[0123] The transmitter and receiver measure the received entangled photons respectively, and the measurement basis is in, and denote the rectangular basis and diagonal basis respectively;

[0124] The bit sequence generated after measurement is K s and K r , compare and extract the same bits through classical communication to generate the final key K, in, and is the measurement result between the sender and the receiver at the bth position, and L is the final key length;

[0125] The generated key K passes the NIST randomness test and is distributed to the sender after verification for data encryption;

[0126] The generated key K passes the NIST randomness test and is distributed to the sender after verification for data encryption;

[0127] Specifically, through the above steps, the quantum communication link combines the current link state and the predicted path to generate a random key that is highly matched with the environment.

[0128] Step S3: The random key is transmitted to the sending end to encrypt the state data;

[0129] The encrypted data in step S3 is combined with the predicted path and transmitted to the receiving end. At the same time, the IoT device continuously collects status data and feeds it back to the sending end twin platform to dynamically adjust the transmission path.

[0130] The encrypted data is transmitted to the receiving end in combination with the predicted path. At the same time, the IoT device continuously collects status data and feeds it back to the sending end twin platform. The steps of dynamically adjusting the transmission path are:

[0131] The sending end twin platform uses the quantum key K generated in step S2 to encrypt the transmitted data Msg. The encryption adopts the improved AES encryption algorithm. The encryption formula is: C = E K (Msg), where C is the encrypted data, Msg is the plaintext data to be transmitted, K is the quantum key, and E K (·) is the encryption operation, ciphertext C and prediction path P t+Δt After bundling, prepare for transmission;

[0132] The transmission path is based on the predicted path P in step S1. t+Δt The path weight matrix W(t) is defined as W(t)={w ij (t)|i,j∈Z}, where w ij (t) is the transmission path weight between node i and node j at time t, and Z is the set of network nodes;

[0133] Path weight w ij (t) Dynamic calculation formula is:

[0134]

[0135] Among them, τ ij (t) is the current transmission delay between nodes i and j, Q ij (t) is the link quality indicator, I ij (t) is the channel interference intensity, λ, μ, ν are weight parameters,

[0136] Use the shortest weighted Dijkstra algorithm to generate the optimal path P opt , the generating formula is:

[0137]

[0138] in, is the set of available paths, ∑ (i,j)∈P w ij (t) is the total weight of path P;

[0139] Encrypted data C according to the optimal path P opt During the transmission process, the IoT device continuously collects status data D t , including real-time transmission delay τ ij (t), link quality Q ij (t) and channel interference I ij (t), the collected status data is transmitted to the sending end twin platform through the gateway,

[0140] The sending end twin platform uses the latest feedback data D t Dynamically adjust the path weight matrix W(t) and recalculate the optimal path P opt ;

[0141] If the current path P is found opt If the performance indicator of exceeds the threshold θ, the sending end twin platform immediately triggers the path adjustment, and the adjusted path is notified to the receiving end through the network;

[0142] The receiving end receives the encrypted data C through the quantum communication link and decrypts it using the key K. The decryption process is: Msg = D K (C), where D K (·) is the decryption operation, and the encryption operation E K (·) corresponds to, M is the decrypted plaintext data;

[0143] The receiving end will feed back the link status (such as data integrity, transmission delay, etc.) during the transmission process to the sending end twin platform for subsequent path optimization and transmission adjustment; specifically, efficient and secure transmission of encrypted data is achieved in a dynamically changing transmission environment.

[0144] In step S4, the receiving end receives the encrypted data through the quantum communication link and decrypts it using the key, while verifying the integrity and authenticity of the data and verifying whether there is tampering or man-in-the-middle attack; after decryption, the data is mapped to the target device through the receiving end twin platform;

[0145] The receiving end receives the encrypted data through the quantum communication link and decrypts it using the key, while verifying the integrity and authenticity of the data and whether there is tampering or man-in-the-middle attack.

[0146] The receiving end receives the encrypted data C and the corresponding transmission meta-information Π through the quantum communication link.

[0147] Π={P opt ,t stamp ,H Msg},

[0148] Among them, P opt is the optimal transmission path generated by the sender, t stamp is the timestamp, H Msg The hash value generated by the sender,

[0149] Receiver verification t stamp Is it within the acceptance time window [T recvstart ,T recvend ], if the time window requirement is not met, data C is rejected;

[0150] The receiving end uses the quantum key K to decrypt the encrypted data C and restore the original plaintext data. The restoration process is: Msg = D K (C), where D K (·) is the decryption operation, which is the same as the encryption operation E at the sender. K (·)correspond,

[0151] After successful decryption, the receiving end verifies the plaintext data Msg and the meta information π;

[0152] The receiving end calculates the hash value H of the plaintext data Msg ′ Msg and the hash value H of the sender in π Msg Compare, if H′ Msg ≠H Msg , it is determined that the data has been tampered with or transmitted incorrectly during transmission, the data is discarded and an alarm signal is sent to the sender;

[0153] The receiving end verifies the digital signature of the sending end. The sending end uses its private key to sign the data, and the receiving end verifies it using the sending end's public key. The verification process is as follows:

[0154]

[0155] in,

[0156] Σ S The digital signature generated by the sender,

[0157] It is a digital signature operation based on the private key of the sender.

[0158] It is a digital signature verification operation based on the sender's public key.

[0159] If the signature verification fails, it is considered that the data source is abnormal and may be subject to a man-in-the-middle attack;

[0160] Combining the results of integrity check and authenticity verification, the receiver further verifies whether there is a man-in-the-middle attack. The trigger conditions for man-in-the-middle attack detection are:

[0161]

[0162] If the trigger condition is met, the receiver rejects the data and records the abnormal path P opt , inform the sender to optimize the transmission strategy;

[0163] Specifically, the receiving end implements data decryption, integrity verification, authenticity verification, and man-in-the-middle attack detection to ensure that data is transmitted securely and reliably to the target device.

[0164] Step S5: After the decrypted data is applied, the receiving end twin platform transmits the feedback data back to the sending end; the sending end twin platform uses the feedback data to optimize the quantum key distribution parameters and update the next round of prediction path logic;

[0165] Feedback data includes transmission time, channel conditions, and decryption delay;

[0166] The method for securely transmitting digital information in the Internet of Things adopts an information transmission system for transmission, which includes:

[0167] IoT devices are deployed in the information transmission system and are responsible for collecting status data, aggregating it through the IoT gateway, and then transmitting it to the sending end twin platform;

[0168] The sending-side twin platform builds a virtual map based on the collected status data, synchronizes system status data in real time, analyzes transmission requirements, and generates a preliminary predicted path;

[0169] The communication link module, based on the predicted path and state data of the sending end twin platform, collaborates with the receiving end to establish a quantum communication link and generates a dynamic quantum key through the randomness of the link;

[0170] The receiving-end twin platform receives encrypted data through the quantum communication link, decrypts it using the quantum key, and verifies the integrity and authenticity of the data to complete the task docking with the target device;

[0171] The feedback module transmits the feedback data to the sending end for optimizing the subsequent key distribution parameters and path calculation logic.

[0172] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and are not intended to limit the present invention. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical solutions of the present invention, which should all be included in the scope of the claims of the present invention.

Claims

1. A method for securely transmitting digital information in the Internet of Things, characterized by: include, Step S1: IoT devices collect information transmission system status data in real time, aggregate it through the gateway, and transmit it to the sending end twin platform; The sending-side twin platform builds a virtual map, synchronizes information transmission system status data, and generates a predicted path; Step S2: The sending end twin platform cooperates with the receiving end to establish a quantum communication link based on the predicted path and state data, enters the quantum key distribution phase, and generates a random key that matches the current link state; Step S3: The random key is transmitted to the sending end to encrypt the state data; Step S4: The receiving end receives the encrypted data through the quantum communication link and decrypts it using the key, while verifying the integrity and authenticity of the data to verify whether there has been tampering or man-in-the-middle attacks. After decryption, the data is mapped to the target device through the receiving-end twin platform; Step S5: After the decrypted data is applied, the receiving end twin platform transmits the feedback data back to the sending end; The sending-end twin platform uses feedback data to optimize quantum key distribution parameters and update the next round of prediction path logic; The steps of constructing a virtual mapping, synchronizing information transmission system status data, and generating a predicted path on the sending end twin platform are as follows: IoT devices collect status data in real time D: D={d t,n |t=1,2,…,T;n=1,2,…,N}, where d t,n is the nth type of state data at time t, T is the total number of sampling time steps, N is the type of state data, Each type of status data d t,n After being transmitted to the twin platform through the gateway, it is normalized. The normalization formula is: in, is the normalized state data, min(d n )、max(d n ) is the minimum and maximum value of the nth category status data, which is dynamically adjusted according to historical data; The twin platform constructs a virtual mapping of the information transmission system based on normalized state data, which is represented by the dynamic state matrix S: Among them, S t is the system state vector at time t, containing the real-time values ​​of N types of state features, Virtual mapping maps the current state of the system through the weighted dynamic association matrix A. The mapping formula is: in, is the virtual mapping state vector, A is the weight matrix, and the matrix element is a mn , a mn Dynamic update, the update formula is: Among them, a mn is the dynamic correlation coefficient between the mth state and the nth state, and W is the time step window; The twin platform is based on the state vector of the virtual map The real-time status of the synchronous information transmission system, the synchronization formula is: in, is the system state vector after synchronization, is the system state vector before synchronization, α is the smoothing factor, Based on the synchronized system state vector Generate prediction path P using dynamic time prediction LSTM model t+Δt , the calculation formula is: Among them, P t+Δt is the predicted path vector at time t+Δt, f LSTM is the long short-term memory network LSTM model, and Δt is the prediction time step.

2. The method for securely transmitting digital information in the Internet of Things according to claim 1, wherein: The method for securely transmitting digital information of the Internet of Things adopts an information transmission system for transmission, and the system includes: IoT devices are deployed in the information transmission system and are responsible for collecting status data, aggregating it through the IoT gateway, and then transmitting it to the sending end twin platform; The sending-side twin platform builds a virtual map based on the collected status data, synchronizes system status data in real time, analyzes transmission requirements, and generates a preliminary predicted path; The communication link module, based on the predicted path and state data of the sending end twin platform, collaborates with the receiving end to establish a quantum communication link and generates a dynamic quantum key through the randomness of the link; The receiving-end twin platform receives encrypted data through the quantum communication link, decrypts it using the quantum key, and verifies the integrity and authenticity of the data to complete the task docking with the target device; The feedback module transmits the feedback data to the sending end for optimizing the subsequent key distribution parameters and path calculation logic.

3. The method for securely transmitting digital information in the Internet of Things according to claim 2, wherein: The status data includes channel interference, temperature and humidity, electromagnetic background, node online status and data throughput.

4. The method for securely transmitting digital information in the Internet of Things according to claim 3, wherein: The sending end twin platform cooperates with the receiving end to establish a quantum communication link based on the predicted path and state data, and enters the quantum key distribution phase. The steps of generating a random key that matches the current link state are as follows: The sending end twin platform generates the predicted path P according to step S1. t+Δt and Send communication request to the receiving end Among them, P t+Δt To predict the path, To synchronize status data, The receiving end twin platform receives C t and its own status data Compare and calculate the link compatibility score η, the calculation formula is: Among them, w φ is the weight of the link feature, p φ 、 is the corresponding characteristic value of the sender and the receiver, η is the compatibility score, when η is less than the threshold η th When the link establishment request is passed, the quantum communication link configuration phase begins: according to the predicted path P t+Δt Priority, select the optimal quantum communication channel in, is the set of candidate quantum communication channels, β k is the channel bandwidth weight, γ k is the channel stability weight, which is determined by the system state vector Provide, δ k is the channel delay.

5. The method for securely transmitting digital information in the Internet of Things according to claim 4, wherein: The step of entering the quantum key distribution phase and generating a random key that matches the current link state also includes: Quantum communication channel After the configuration is completed, the system uses the quantum state generation device to generate entangled photon pairs |Ψ>, Among them, |00> and |11> are the ground states of the entangled state, The transmitter and receiver measure the received entangled photons respectively, and the measurement basis is in, and denote the rectangular basis and diagonal basis respectively; The bit sequence generated after measurement is K s and K r , compare and extract the same bits through classical communication to generate the final key K, in, and is the measurement result between the sender and the receiver at the bth position, and L is the final key length; The generated key K passes the NIST randomness test and is distributed to the sender after verification for data encryption.

6. The method for securely transmitting digital information in the Internet of Things according to claim 5, wherein: The encrypted data is transmitted to the receiving end in combination with the predicted path. At the same time, the IoT device continuously collects status data and feeds it back to the sending end twin platform. The steps of dynamically adjusting the transmission path are: The sending end twin platform uses the quantum key K generated in step S2 to encrypt the transmitted data Msg. The encryption adopts the improved AES encryption algorithm. The encryption formula is: C = E K (Msg), where C is the encrypted data, Msg is the plaintext data to be transmitted, K is the quantum key, and E K (·) is the encryption operation, ciphertext C and prediction path P t+Δt After bundling, prepare for transmission; The transmission path is based on the predicted path P in step S1. t+Δt The path weight matrix W(t) is defined as W(t)={w ij (t)|i,j∈Z}, where w ij (t) is the transmission path weight between node i and node j at time t, and Z is the set of network nodes; Path weight w ij (t) Dynamic calculation formula is: Among them, τ ij (t) is the current transmission delay between nodes i and j, Q ij (t) is the link quality indicator, I ij (t) is the channel interference intensity, λ, μ, ν are weight parameters, Use the shortest weighted Dijkstra algorithm to generate the optimal path P opt , the generating formula is: in, is the set of available paths, ∑ (i,j)∈P w ij (t) is the total weight of path P; Encrypted data C according to the optimal path P opt During the transmission process, the IoT device continuously collects status data D t , including real-time transmission delay τ ij (t), link quality Q ij (t) and channel interference I ij (t), the collected status data is transmitted to the sending end twin platform through the gateway, The sending end twin platform uses the latest feedback data D t Dynamically adjust the path weight matrix W(t) and recalculate the optimal path P opt ; If the current path P is found opt If the performance indicator of exceeds the threshold θ, the sending end twin platform immediately triggers the path adjustment, and the adjusted path is notified to the receiving end through the network; The receiving end receives the encrypted data C through the quantum communication link and decrypts it using the key K. The decryption process is: Msg = D K (C), where D K (·) is the decryption operation, and the encryption operation E K (·)correspond.

7. The method for securely transmitting digital information in the Internet of Things according to claim 6, wherein: The encrypted data of step S3 is transmitted to the receiving end in combination with the predicted path. At the same time, the IoT device continuously collects status data and feeds it back to the sending end twin platform to dynamically adjust the transmission path.

8. The method for securely transmitting digital information in the Internet of Things according to claim 7, wherein: The receiving end receives the encrypted data through the quantum communication link and decrypts it using the key, while verifying the integrity and authenticity of the data and whether there is tampering or man-in-the-middle attack. The receiving end receives the encrypted data C and the corresponding transmission meta-information Π through the quantum communication link. Π={P opt ,t stamp ,H Msg }, Among them, P opt is the optimal transmission path generated by the sender, t stamp is the timestamp, H Msg The hash value generated by the sender, Receiver verification t stamp Is it within the acceptance time window [T recvstart ,T recvend ], if the time window requirement is not met, data C is rejected; The receiving end uses the quantum key K to decrypt the encrypted data C and restore the original plaintext data. The restoration process is: Msg = D K (C), where D K (·) is the decryption operation, which is the same as the encryption operation E at the sender. K (·)correspond, After successful decryption, the receiving end verifies the plaintext data Msg and the meta information π; The receiving end calculates the hash value H′ of the plaintext data Msg Msg and the hash value H of the sender in π Msg Compare, if H′ Msg ≠H Msg , it is determined that the data has been tampered with or transmitted incorrectly during transmission, the data is discarded and an alarm signal is sent to the sender; The receiving end verifies the digital signature of the sending end. The sending end uses its private key to sign the data, and the receiving end verifies it using the sending end's public key. The verification process is as follows: in, Σ S The digital signature generated by the sender, It is a digital signature operation based on the private key of the sender. It is a digital signature verification operation based on the sender's public key. If the signature verification fails, it is considered that the data source is abnormal and may be subject to a man-in-the-middle attack; Combining the results of integrity check and authenticity verification, the receiver further verifies whether there is a man-in-the-middle attack. The trigger conditions for man-in-the-middle attack detection are: If the trigger condition is met, the receiver rejects the data and records the abnormal path P opt , informing the sender to optimize the transmission strategy.

9. The method for securely transmitting digital information in the Internet of Things according to claim 8, wherein: The feedback data includes transmission time, channel status and decryption delay.

Images