Data camouflage method and device, computer equipment and storage medium

Abstract

The invention provides a data camouflage method and device, computer equipment and a storage medium, and the method comprises the steps: obtaining to-be-transmitted data and a target camouflage rule, carrying out the camouflage processing of the to-be-transmitted data based on the target camouflage rule, obtaining target camouflage data, carrying out the packaging of the target camouflage data based on a preset packaging mode, and obtaining the target camouflage data. And obtaining the request data packet, and sending the request data packet to a receiving end from a transmission port indicated in the target camouflage rule. According to the method, the to-be-transmitted data is disguised based on the target disguising rule, and the target disguising rule is determined based on the access flow and / or the access success rate, so that the success rate of sending the to-be-transmitted data to the receiving end can be improved, and the security and the concealment of the to-be-transmitted data in the transmission process are ensured.

Description

Technical Field

[0001] The present application relates to the technical field of data transmission, and in particular to a data camouflage method, device, computer equipment and storage medium. Background Art

[0002] In Internet communication scenarios, there are usually senders, receivers, and firewalls between the senders and receivers. The firewall will monitor the data transmitted between the sender and the receiver in real time. Due to the diversity of communication protocols, different communication protocols have different data transmission characteristics. Therefore, the firewall will conduct targeted interception of the transmitted data based on the type of communication protocol used by the transmitted data, that is, different communication protocol types have different interception conditions for the firewall.

[0003] During the monitoring process, the firewall can obtain all the data transmitted between the sender and the receiver, and thus cannot ensure the privacy and security of the data transmitted by the sender. The firewall may intercept the data transmitted by the sender. The network configuration, network environment and network access rights will affect the firewall's interception results of the transmitted data, resulting in a low success rate of data transmission from the sender to the receiver. Summary of the invention

[0004] Based on this, a data camouflage method, device, computer equipment and storage medium are provided to improve the success rate of data transmission from a sender to a receiver.

[0005] In a first aspect, a data camouflage method is provided, the method comprising: Acquire the data to be transmitted and the target camouflage rules, wherein the target camouflage rules are rules calculated by statistics of the access flow and / or access success rate of data access by the local server according to each camouflage rule in different target areas within a preset time period; Performing camouflage processing on the data to be transmitted based on the target camouflage rule to obtain target camouflage data; Encapsulating the target disguised data based on a preset encapsulation method to obtain a request data packet; The request data packet is sent to a receiving end from a transmission port indicated in the target masquerade rule.

[0006] Through the above method, the target camouflage rule is determined based on the access traffic and / or access success rate, and the data to be transmitted is disguised according to the target camouflage rule, thereby improving the success rate of the request data packet sent to the receiving end, and the target camouflage data is encapsulated, and the obtained request data packet is sent to the receiving end, thereby ensuring the security and confidentiality of the data to be transmitted.

[0007] In one embodiment, the step of obtaining target camouflage rules includes: Obtain a camouflage rule list sent by the local server, wherein the camouflage rule list records the access traffic and access success rate corresponding to each camouflage rule in the preset time period in the different target areas Determine a first camouflage rule corresponding to a maximum access flow from all access flows, and determine the first camouflage rule as the target camouflage rule; or A second camouflage rule corresponding to the maximum access success rate is determined from all access success rates, and the second camouflage rule is determined as the target camouflage rule.

[0008] Through the above method, the sender determines the target camouflage rule corresponding to the maximum access flow or the target camouflage rule corresponding to the maximum access success rate based on the camouflage rule list, thereby improving the success rate of the sender sending the data to be transmitted to the receiver.

[0009] In one embodiment, the camouflaging the data to be transmitted based on the target camouflage rule to obtain target camouflaged data includes: Acquiring actual data features of the data to be transmitted, modifying the actual data features into disguised data features, and obtaining the target disguised data; and / or Acquire a disguised access address, configure a disguised access address for the data to be transmitted, and obtain the target disguised data; and / or The data to be transmitted is encrypted to obtain the target disguised data.

[0010] Through the above method, the data to be transmitted is disguised based on multiple ways, so that the success rate of the sending end sending the data to be transmitted to the receiving end can be improved.

[0011] In one embodiment, the obtaining of the camouflaged access address and configuring the camouflaged access address for the data to be transmitted includes: Determine an idle IP address and configure the IP address for the data to be transmitted; and / or A target masquerade domain name is determined from the target masquerade rule based on the access success rate, and the target masquerade domain name is configured for the data to be transmitted.

[0012] Through the above method, a local IP address is configured for the data to be transmitted, so that when the server detects the data to be transmitted, if the server has too much traffic to detect, the server will only detect whether the IP address is abnormal, so that the data to be transmitted can be successfully sent to the receiving end.

[0013] In one embodiment, the obtaining of the actual data features of the data to be transmitted and modifying the actual data features into disguised data features includes: The resource description of the data to be transmitted is obtained, and the disguised resource description is obtained from the target disguise rule, and the resource description is modified to the disguised resource description, wherein the resource description includes: resource type, protocol field, data creation time, data volume and data cache status.

[0014] Through the above method, the resource description of the data to be transmitted is modified into a disguised resource description, so that the detected server determines the data characteristics of the data to be transmitted as the content of the disguised resource description, thereby achieving the purpose of data disguise.

[0015] In one embodiment, encapsulating the target camouflage data based on a preset encapsulation method to obtain a request data packet includes: Serializing the target disguised data to obtain preset binary data corresponding to the target disguised data; It is determined that the preset binary data is the request data packet.

[0016] Through the above method, after disguising the data to be transmitted, the obtained target disguised data is encapsulated, which increases the difficulty of extracting the data to be transmitted from the request data packet and ensures that there is only one request data packet, thereby improving the efficiency of decompressing the request data packet at the receiving end.

[0017] In one embodiment, before sending the request data packet from the transmission port indicated in the target masquerade rule to the receiving end, the method further includes: Acquire the service function and preset function code corresponding to the data to be transmitted, wherein the service function is a service provided by the receiving end; A business function interface is created based on the business function and the preset function code, wherein the business function interface is used by the sending end to implement the business function.

[0018] Performing interface testing on the business function interface to obtain test results; If the test result is that the test is successful, the service function interface is used as the target function interface of the data to be transmitted, so that the sending end can implement the service function by calling the target function interface.

[0019] Through the above method, the business function interface used by the data to be transmitted is tested to ensure that the business function interface is the interface corresponding to the data to be transmitted, ensuring that the sending end and the receiving end can communicate normally.

[0020] In one embodiment, the performing interface testing on the business function interface to obtain the test result includes: In response to the test result being a test failure; If the test failure is due to a network error, determining a first prompt message; If the test fails because the network is normal but the interface is wrong, the service function interface corresponding to the data to be transmitted is re-acquired, and the re-acquired service function interface is tested.

[0021] By using the above method, when the service function interface test fails, the cause judgment error caused by the network error is eliminated, thereby improving the accuracy of the test.

[0022] In a second aspect, the present application provides a data camouflage device, the device comprising: An acquisition module, used to acquire the data to be transmitted and the target camouflage rules, wherein the target camouflage rules are rules calculated by statistics of the access flow and / or access success rate of data access by the local server according to each camouflage rule in a preset time period in different target areas; A camouflage module, used for camouflaging the data to be transmitted based on the target camouflage rule to obtain target camouflaged data; An encapsulation module, used to encapsulate the target disguised data based on a preset encapsulation method to obtain a request data packet; The sending module is used to send the request data packet from the transmission port indicated in the target masquerade rule to the receiving end.

[0023] In one embodiment, the acquisition module is specifically used to acquire a camouflage rule list sent by a local server, wherein the camouflage rule list records the access traffic and access success rate corresponding to each camouflage rule in the preset time period in the different target areas, and determines a first camouflage rule corresponding to the maximum access traffic from all access traffic, and determines the first camouflage rule as the target camouflage rule, or determines a second camouflage rule corresponding to the maximum access success rate from all access success rates, and determines the second camouflage rule as the target camouflage rule.

[0024] In one embodiment, the camouflage module is specifically used to obtain actual data characteristics of the data to be transmitted, modify the actual data characteristics into camouflaged data characteristics to obtain the target camouflaged data, and / or obtain a camouflaged access address, configure a camouflaged access address for the data to be transmitted, obtain the target camouflaged data, and / or encrypt the data to be transmitted to obtain the target camouflaged data.

[0025] In one embodiment, the camouflage module is also used to determine an idle IP address, configure the IP address for the data to be transmitted, and / or determine a target camouflage domain name from the target camouflage rule based on the access success rate, and configure the target camouflage domain name for the data to be transmitted.

[0026] In one embodiment, the camouflage module is also used to obtain the resource description of the data to be transmitted, and obtain the camouflage resource description from the target camouflage rule, and modify the resource description to the camouflage resource description, wherein the resource description includes: resource type, protocol field, data creation time, data volume and data cache status.

[0027] In one embodiment, the encapsulation module is specifically used to perform serialization processing on the target disguised data to obtain preset base data corresponding to the target disguised data, and determine that the preset base data is the request data packet.

[0028] In one embodiment, the encapsulation module is also used to obtain the business function and preset function code corresponding to the data to be transmitted, wherein the business function is a service provided by the receiving end, and a business function interface is created based on the business function and the preset function code, wherein the business function interface is used by the sending end to implement the business function, and an interface test is performed on the business function interface to obtain a test result. If the test result is a successful test, the business function interface is used as the target function interface of the data to be transmitted, so that the sending end can implement the business function by calling the target function interface.

[0029] In one embodiment, the encapsulation module is also used to respond to the test result being a test failure. If the test failure is due to a network error, a first prompt message is determined; if the test failure is due to a normal network and an interface error, the business function interface corresponding to the data to be transmitted is re-acquired, and the re-acquired business function interface is tested.

[0030] In a third aspect, the present application provides a computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the data camouflage method of the first aspect when executing the computer program.

[0031] In a fourth aspect, the present application provides a computer-readable storage medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the data camouflage method of the first aspect.

[0032] The above-mentioned data camouflage method, device, computer equipment and storage medium obtain the data to be transmitted and the target camouflage rule, camouflage the data to be transmitted based on the target camouflage rule to obtain the target camouflage data, encapsulate the target camouflage data based on a preset encapsulation method to obtain a request data packet, and send the request data packet from the transmission port indicated in the target camouflage rule to the receiving end. The target camouflage rule is determined based on the access traffic and / or the access success rate, and the data to be transmitted is camouflaged according to the target camouflage rule, thereby improving the success rate of the request data packet sent to the receiving end, and encapsulating the target camouflage data and sending the obtained request data packet to the receiving end, thereby ensuring the security and concealment of the data to be transmitted. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] Figure 1 A schematic diagram of an application scenario of a data camouflage method in an embodiment; Figure 2 A schematic diagram of a flow chart of a data camouflage method in one embodiment; Figure 3 is a structural block diagram of a data camouflage device in one embodiment; Figure 4 FIG. 4 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0034] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0035] The data disguise method provided by this application can be applied to Figure 1In the application environment shown. Among them, the sending end 102 communicates with the server 104 and the receiving end 103 through the network. The server 104 can be a firewall. The server 104 will monitor the data to be transmitted sent by the sending end 102 to the receiving end 103 in real time. Due to the diversity of communication protocols, different communication protocols have different data transmission characteristics. Therefore, the server 104 will intercept the transmitted data in a targeted manner according to the type of communication protocol used by the transmitted data. Since the server 104 can obtain all data transmitted between the sending end 102 and the receiving end 103, the privacy security of the data to be transmitted by the sending end 102 cannot be ensured, and the server 104 has the situation of intercepting the data to be transmitted sent by the sending end 102. The network configuration, network environment and network access rights will affect the interception result of the server 104 for intercepting the data to be transmitted, resulting in a low success rate of the sending end 102 transmitting the data to be transmitted to the receiving end 103. The sending end 102 and the receiving end 103 may be, but are not limited to, various personal computers, laptops, smart phones, tablet computers, and portable wearable devices, and the server 104 may be implemented as an independent server or a server cluster consisting of multiple servers.

[0036] In one embodiment, Figure 2 As shown, a data camouflage method is provided to improve the success rate of a sending end sending data to be transmitted to a receiving end, comprising the following steps: Step S1: Obtain the data to be transmitted and the target camouflage rules.

[0037] When the sender needs to send data to the receiver, the sender obtains the data to be transmitted input by the user.

[0038] For example: a user sends "Xiaoming, your A account password is 123Xgu" to the receiving end, and the sending end will determine "Xiaoming, your A account password is 123Xgu" as the data to be transmitted.

[0039] After determining the data to be transmitted, in order to prevent the server 104 from monitoring or intercepting the data to be transmitted, it is necessary to determine the target camouflage rule. The target camouflage rule is a rule that calculates the access traffic and / or access success rate of the local server according to each camouflage rule to achieve data access in different target areas within a preset time period. The local server is not the same server as the server that monitors.

[0040] The sending end needs to receive a camouflage rule list sent by a local server, which records the access traffic and access success rate corresponding to each camouflage rule in a preset time period in different target areas. In the embodiment of the present application, the target camouflage rule can be determined based on the access traffic or access success rate.

[0041] In a possible design, there is a mapping relationship between the camouflage rule and the access traffic. The maximum access traffic and the first camouflage rule corresponding to the maximum access traffic are determined from all the access traffic. The first camouflage rule is determined as the target camouflage rule. The mapping relationship between the camouflage rule and the access traffic is shown in Table 1 below: Table 1

[0042] The access traffic of the camouflage rules in Table 1 above is obtained by counting the number of times the sender accesses the camouflage rules in the same time period. The maximum access traffic in Table 1 above is 96, and 96 corresponds to the first camouflage rule of FTP. FTP is determined as the target camouflage rule, which is only used as an example here.

[0043] In a possible design, there is a mapping relationship between the camouflage rule and the camouflage success rate. The maximum camouflage success rate and the second camouflage rule corresponding to the maximum camouflage success rate are determined from all camouflage success rates. The second camouflage rule is determined as the target camouflage rule. The mapping relationship between the camouflage rule and the camouflage success rate is shown in Table 2 below: Table 2

[0044] In the above Table 2, the camouflage success rates corresponding to the five camouflage rules are listed. The second camouflage rule corresponding to the maximum camouflage success rate of 95% is HTTPS. Therefore, HTTPS is determined as the target camouflage rule. The storage of other camouflage rules and the camouflage success rates of other camouflage rules refers to the above Table 2, and they are not listed one by one here.

[0045] When there are disguised domain names in the disguise rules, the disguise rules will record the access success rates of each disguised domain name. The access success rates of each disguised domain name are shown in Table 3 below: Table 3

[0046] Based on the above Table 3, Table 3 records the access success rates corresponding to each disguised domain name in disguise rule A. The disguised domain name and the access success rate can be filled in according to the actual situation. This is just an example.

[0047] In a possible design, the access traffic and access success rate corresponding to the camouflage rule may also be determined, and the target camouflage rule may be determined based on the access traffic and the access success rate.

[0048] Optionally, determine the weight values ​​corresponding to the access traffic and access success rate of the camouflage rule, multiply the access traffic by the corresponding weight value, and multiply the access success rate by the corresponding weight value, and then add the two multiplied values ​​to obtain the sum corresponding to the camouflage rule, and take the camouflage rule corresponding to the maximum sum as the target camouflage rule.

[0049] Through the above method, the target camouflage rule is determined according to the maximum camouflage success rate or the maximum access traffic, ensuring the success rate of camouflaging the transmitted data using the target camouflage rule. The target camouflage rule can also be determined by the maximum sum, so that different methods of determining the target camouflage rule can be selected according to different actual conditions, thereby ensuring that the method for determining the target camouflage rule in the embodiment of the present application is applicable to a wider range of scenarios.

[0050] Step S2: Disguise the data to be transmitted based on the target camouflage rule to obtain target camouflage data.

[0051] After determining the target camouflage rule corresponding to the maximum camouflage success rate, the transmitted data is camouflaged based on the target camouflage rule. The specific camouflage processing method is as follows: The actual data characteristics of the data to be transmitted are obtained, and the actual data characteristics are modified into disguised data characteristics.

[0052] Obtain a camouflaged access address, and configure the camouflaged access address for the data to be transmitted.

[0053] The data to be transmitted is encrypted.

[0054] The embodiment of the present application may use at least one of the above-mentioned camouflage processing methods to camouflage the data to be transmitted, thereby obtaining target camouflage data.

[0055] Specifically, the specific method of obtaining the actual data features of the data to be transmitted and modifying the actual data features into the disguised data features is as follows: Obtain a resource description of the data to be transmitted, and obtain a disguised resource description in a target disguise rule, wherein the resource description includes at least one of: a resource type of the data to be transmitted, a protocol field of the data to be transmitted, a creation time of the data to be transmitted, a data volume of the data to be transmitted, and a cache status of the data to be transmitted. The resource type records the resource type of the resource to be accessed by the sender. The protocol field is a field in a transmission protocol corresponding to the data to be transmitted, including but not limited to: a field in a message header and a field in a message footer specified in the transmission protocol. The cache status records a file or device storing the data to be transmitted, thereby achieving disguise of the data to be transmitted.

[0056] For example, if the data to be transmitted is an HTTP file, Sec-Fetch-Dest in the HTTP file is used to indicate the resource type of the resource to be accessed by the browser and the purpose of the access. Sec-Fetch-Dest is the request header field in the HTTP protocol. The actual data feature Sec-Fetch-Dest records that the resource type of the resource to be accessed is "media file" and the purpose of the access is "accessing media files". The disguised data feature can modify the resource type of the resource to be accessed in Sec-Fetch-Dest from "media file" to "font file" and the purpose of the access from "accessing media files" to "accessing font files", thereby realizing the modification of the actual data features of the data to be transmitted.

[0057] The specific method of obtaining the camouflaged access address and configuring the camouflaged access address for the data to be transmitted is as follows: When the disguised access address is an IP address, the sender will determine an idle IP address and configure the IP address for the data to be transmitted. The IP address is different from the real IP address of the receiver. As a result, the server detects that the sender wants to access the destination corresponding to the IP address, rather than the receiver, thereby achieving the purpose of disguise.

[0058] When the disguised access address is a disguised domain name, it is necessary to sort all the disguised domain names in the target disguise rule according to the size of the range success rate, filter out the target disguised domain name corresponding to the maximum access success rate, and configure the target disguised domain name for the data to be transmitted, so that the information monitored by the server is that the sender accesses the target disguised domain name.

[0059] Configure the IP address and target access domain name for the data to be transmitted, so that the server monitors the traffic corresponding to the sender accessing the IP address, and the domain name of the receiver is the target disguised domain name.

[0060] The specific method of encrypting the data to be transmitted is as follows: The transmission protocol in the target camouflage rule is determined, the target location storing the data to be transmitted in the transmission protocol is obtained, and all data at the target location is encrypted. The encryption method can be determined according to the type of the transmission protocol.

[0061] When there is a new masquerade rule, it is necessary to determine the masquerade success rate of the new masquerade rule. The sender may be a client. The masquerade success rate is determined as follows: Get n experimental clients, where n is a positive integer and the n experimental clients are clients in different regions. Send the newly added camouflage rules to all the experimental clients so that all the experimental clients transmit data based on the newly added camouflage rules. Count the number of experimental clients that are not intercepted by the server, divide the total number of experimental clients that are not intercepted by the total number of experimental clients, and calculate the camouflage success rate of the newly added camouflage rules.

[0062] Since the process of determining the camouflage success rate of each camouflage rule is the same, no further explanation will be given here.

[0063] Through the above method, the receiving end of the data to be transmitted is disguised or the data to be transmitted at the sending end is disguised, so that the server determines the data to be transmitted as the target disguised data, improves the confidentiality of the data to be transmitted sent by the sending end, and ensures the communication security between the sending end and the receiving end.

[0064] Step S3: Encapsulate the target camouflage data based on a preset encapsulation method to obtain a request data packet.

[0065] After determining the target camouflage data, in order to improve the communication efficiency between the sender and the receiver, it is necessary to serialize the target camouflage data, convert the target camouflage data into preset base data, and determine the preset base data as the request data packet. The preset base data can be binary data. The preset base data can be set according to actual conditions, and no further explanation will be given here.

[0066] The target disguised data is serialized to obtain a request data packet, which increases the complexity of parsing the request data packet by the server, thereby increasing the disguise success rate of the request data packet passing the server.

[0067] After serializing the target disguised data, since the sender needs to provide corresponding services to implement the business functions, in order to enable the sender to use the business functions corresponding to the data to be transmitted, it is necessary to create a business function interface based on the preset function code. The specific preset function code is as follows:

[0068] In the above preset function code, Indicates that a function func of an interface named Client_Api is created. Client_Api represents a class containing all public methods that can be used by the sender. c represents an instance of the class, which is used to call public methods through the API interface. Test represents a public method. Req represents various fields in the data to be transmitted. TestReq represents the data to be transmitted. Out_0 represents an instance of a class returned by the server based on the data to be transmitted. TestResp represents a class returned by the server based on the data to be transmitted. Err represents the specific content of the test result, and error is the test result.

[0069] Get the business function of the data to be transmitted, create a business function interface based on the business function and the above preset function code, and test the business function interface based on the preset function code to obtain the test result. In the above preset function code, Test() is a test of the API interface of the sender, TestResp is a test response to the test of the sender, and error is the test result.

[0070] If the test result is a success, it means that the sender can use the current business function interface and implement the corresponding business function based on the business function interface; if the test result is a failure, it is necessary to determine the reason for the test failure. When the reason for the test failure is a network error, determine the first prompt information and report the first prompt information; when the reason for the test failure is that the network is normal and the interface is wrong, it means that the data to be transmitted cannot use the current business function interface. The sender needs to re-determine a business function interface and retest the business function interface according to the method described above until a business function interface that can be used normally by the data to be transmitted is matched.

[0071] Through the above method, all the data of the sender are integrated into the request data packet, and the business function interface of the data to be transmitted is tested, ensuring that the sender can use the business function interface normally and increasing the difficulty of the server reading the request data packet, thereby reducing the probability of the server parsing the request data packet, thereby improving the success rate of the disguise of the request data packet.

[0072] Step S4: Send the request data packet from the transmission port indicated in the target masquerade rule to the receiving end.

[0073] Since the target masquerade rule indicates the transmission interface for transmitting data, the request data packet is sent to the receiving end through the transmission port.

[0074] In one embodiment, when the transmission protocol in the target masquerade rule is an application layer protocol (domain namesystem, DNS), the data to be transmitted can be encrypted and encapsulated as a domain name access request, and sent to the receiving end through the User Datagram Protocol (User Datagram Protocol, UDP) port 53; or, the data to be transmitted can be encrypted and encapsulated as a DNS protocol and sent to the receiving end through the 853 interface.

[0075] When the transmission protocol in the target camouflage rule is the HyperText Transfer Protocol (HTTP), the target camouflage domain name of the data to be transmitted is written into the operating system file (hosts file, host), so that the server detects that the sender is accessing the target camouflage domain name, or an IP address is configured for the data to be transmitted, so that the server detects that the address to be accessed by the sender is the IP address; or, after configuring the target camouflage domain name for the data to be transmitted, the IP address is configured for the data to be transmitted, so that the server detects that the target camouflage domain name corresponds to the IP address, thereby realizing data camouflage.

[0076] When the transmission protocol in the target disguise rule is Hypertext Transfer Protocol Secure (HTTPS), the data disguise of the data to be transmitted is disguised by modifying the characteristics of the encryption protocol (Transport Layer Security, TLS), that is, modifying the extension module Extension in the sender hello packet Clienthello in the TLS protocol. The sender hello packet is used to notify the server of the sender's functions, and the extension module is used to transmit the encryption algorithm, compression method and application layer protocol supported by the sender to the server. Since the sender hello packet contains multiple extension modules, the order of the extension modules corresponding to the data to be transmitted is adjusted, and / or the number of extension modules is increased or deleted, so as to disguise the data to be transmitted through Extension.

[0077] The service name indication (SNI) in the above extension records the domain name visited. The recorded domain name needs to be modified to the target disguised domain name. SNI enables the receiver to provide the corresponding certificate based on the host name sent by the sender.

[0078] When the transmission protocol in the target masquerade rule is the File Transfer Protocol (FTP), the data to be transmitted is encrypted and the encrypted data to be transmitted is stored in the FTP file, so that the sender and the receiver can perform encrypted communication.

[0079] When the transmission protocol in the target masquerade rule is the Simple Mail Transfer Protocol (SMTP), the sending address and the receiving address of the email are modified to the target masquerade domain name, which can be qq.com, and the data to be transmitted is written into the email, so that the server detects that the sender has sent an email to qq.com, thereby achieving the purpose of disguising the data to be transmitted.

[0080] Through the above method, the target camouflage rule corresponding to the maximum access success rate is determined, and the data to be transmitted is disguised as the target camouflage data based on the target camouflage rule, and then the target camouflage data is encapsulated in a preset encapsulation method, and all the data to be transmitted by the sender are packaged into a request data packet and sent to the receiving end at one time. Since the request data packet is a data packet, the efficiency of parsing the request data packet at the receiving end is improved, thereby improving the data camouflage success rate of the data to be transmitted.

[0081] It should be understood that although Figure 2 The steps in the flowchart are shown in sequence as indicated by the arrows, but these steps are not necessarily executed in the order indicated by the arrows. Unless otherwise specified in this document, there is no strict order restriction for the execution of these steps, and these steps can be executed in other orders. Moreover, Figure 2 At least part of the steps may include multiple sub-steps or multiple stages. These sub-steps or stages are not necessarily executed at the same time, but can be executed at different times. The execution order of these sub-steps or stages is not necessarily sequential, but can be executed in turn or alternately with other steps or at least part of the sub-steps or stages of other steps.

[0082] In one embodiment, Figure 3 As shown, a data camouflage device is provided, including: an acquisition module 301, a camouflage module 302, a packaging module 303 and a sending module 304, wherein: The acquisition module 301 is used to acquire the data to be transmitted and the target camouflage rules, wherein the target camouflage rules are rules calculated by statistics of the access flow and / or access success rate of data access by the local server according to each camouflage rule in different target areas within a preset time period; A camouflage module 302, configured to perform camouflage processing on the data to be transmitted based on the target camouflage rule to obtain target camouflage data; The encapsulation module 303 is used to encapsulate the target disguised data based on a preset encapsulation method to obtain a request data packet; The sending module 304 is used to send the request data packet from the transmission port indicated in the target masquerade rule to the receiving end.

[0083] In one embodiment, the acquisition module 301 is specifically used to obtain a camouflage rule list sent by a local server, wherein the camouflage rule list records the access traffic and access success rate corresponding to each camouflage rule in the preset time period in the different target areas, and determines the first camouflage rule corresponding to the maximum access traffic from all access traffic, and determines the first camouflage rule as the target camouflage rule, or determines the second camouflage rule corresponding to the maximum access success rate from all access success rates, and determines the second camouflage rule as the target camouflage rule.

[0084] In one embodiment, the camouflage module 302 is specifically used to obtain actual data characteristics of the data to be transmitted, modify the actual data characteristics into camouflaged data characteristics to obtain the target camouflaged data, and / or obtain a camouflaged access address, configure a camouflaged access address for the data to be transmitted, obtain the target camouflaged data, and / or encrypt the data to be transmitted to obtain the target camouflaged data.

[0085] In one embodiment, the camouflage module 302 is also used to determine an idle IP address, configure the IP address for the data to be transmitted, and / or determine a target camouflage domain name from the target camouflage rule based on the access success rate, and configure the target camouflage domain name for the data to be transmitted.

[0086] In one embodiment, the camouflage module 302 is also used to obtain the resource description of the data to be transmitted, and obtain the camouflage resource description from the target camouflage rule, and modify the resource description to the camouflage resource description, wherein the resource description includes: resource type, protocol field, data creation time, data volume and data cache status.

[0087] In one embodiment, the encapsulation module 303 is specifically configured to perform serialization processing on the target disguised data to obtain preset base data corresponding to the target disguised data, and determine that the preset base data is the request data packet.

[0088] In one embodiment, the encapsulation module 303 is also used to obtain the business function and preset function code corresponding to the data to be transmitted, wherein the business function is a service provided by the receiving end, and a business function interface is created based on the business function and the preset function code, wherein the business function interface is used by the sending end to implement the business function, and an interface test is performed on the business function interface to obtain a test result. If the test result is a successful test, the business function interface is used as the target function interface of the data to be transmitted, so that the sending end can implement the business function by calling the target function interface.

[0089] In one embodiment, the encapsulation module 303 is also used to respond to the test result as a test failure. If the test failure is due to a network error, a first prompt message is determined; if the test failure is due to a normal network and an interface error, the business function interface corresponding to the data to be transmitted is re-acquired, and the re-acquired business function interface is tested.

[0090] For the specific definition of the data disguise device, please refer to the definition of the data disguise method above, which will not be repeated here. Each module in the above-mentioned data disguise device can be implemented in whole or in part by software, hardware and a combination thereof. The above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory of the computer device in the form of software, so that the processor can call and execute the operations corresponding to the above modules.

[0091] In one embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as follows: Figure 4 As shown. The computer device includes a processor, a memory, a network interface and a database connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store data query data. The network interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a data camouflage method is implemented.

[0092] Those skilled in the art will understand that Figure 4 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0093] In one embodiment, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the following steps when executing the computer program: Acquire the data to be transmitted and the target camouflage rules, wherein the target camouflage rules are rules calculated by statistics of the access flow and / or access success rate of data access by the local server according to each camouflage rule in different target areas within a preset time period; Performing camouflage processing on the data to be transmitted based on the target camouflage rule to obtain target camouflage data; Encapsulating the target disguised data based on a preset encapsulation method to obtain a request data packet; The request data packet is sent to a receiving end from a transmission port indicated in the target masquerade rule.

[0094] In one embodiment, when the processor executes the computer program, the processor further implements the following steps: Obtaining a camouflage rule list sent by a local server, wherein the camouflage rule list records the access traffic and access success rate corresponding to each camouflage rule in the preset time period in the different target areas; Determine a first camouflage rule corresponding to a maximum access flow from all access flows, and determine the first camouflage rule as the target camouflage rule; or A second camouflage rule corresponding to the maximum access success rate is determined from all access success rates, and the second camouflage rule is determined as the target camouflage rule.

[0095] In one embodiment, when the processor executes the computer program, the processor further implements the following steps: Acquiring actual data features of the data to be transmitted, modifying the actual data features into disguised data features, and obtaining the target disguised data; and / or Acquire a disguised access address, configure a disguised access address for the data to be transmitted, and obtain the target disguised data; and / or The data to be transmitted is encrypted to obtain the target disguised data.

[0096] In one embodiment, when the processor executes the computer program, the processor further implements the following steps: Determine an idle IP address and configure the IP address for the data to be transmitted; and / or A target masquerade domain name is determined from the target masquerade rule based on the access success rate, and the target masquerade domain name is configured for the data to be transmitted.

[0097] In one embodiment, when the processor executes the computer program, the processor further implements the following steps: The resource description of the data to be transmitted is obtained, and the disguised resource description is obtained from the target disguise rule, and the resource description is modified to the disguised resource description, wherein the resource description includes: resource type, protocol field, data creation time, data volume and data cache status.

[0098] In one embodiment, when the processor executes the computer program, the processor further implements the following steps: Serializing the target disguised data to obtain preset binary data corresponding to the target disguised data; It is determined that the preset binary data is the request data packet.

[0099] In one embodiment, when the processor executes the computer program, the processor further implements the following steps: Acquire the service function and preset function code corresponding to the data to be transmitted, wherein the service function is a service provided by the receiving end; Creating a business function interface based on the business function and the preset function code, wherein the business function interface is used by the sending end to implement the business function; Performing interface testing on the business function interface to obtain test results; If the test result is that the test is successful, the service function interface is used as the target function interface of the data to be transmitted, so that the sending end can implement the service function by calling the target function interface.

[0100] In one embodiment, when the processor executes the computer program, the processor further implements the following steps: In response to the test result being a test failure; If the test failure is due to a network error, determining a first prompt message; If the test fails because the network is normal but the interface is wrong, the service function interface corresponding to the data to be transmitted is re-acquired, and the re-acquired service function interface is tested.

[0101] In one embodiment, a computer device is provided. The computer device may be a terminal, and its internal structure diagram may be as follows: Figure 4 As shown. The computer device includes a processor, a memory, a network interface, a display screen and an input device connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The network interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a data camouflage method is implemented. The display screen of the computer device can be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device can be a touch layer covering the display screen, or a key, trackball or touchpad set on the computer device housing, or an external keyboard, touchpad or mouse, etc.

[0102] Those of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be implemented by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in this application may include non-volatile and / or volatile memory. Non-volatile memory may include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.

[0103] The technical features of the above embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0104] The above-mentioned embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the invention patent. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the patent of the present application shall be subject to the attached claims.

Claims

1. A data camouflage method, characterized in that: Applied to the sending end, including: Acquire the data to be transmitted and the target camouflage rules, wherein the target camouflage rules are rules calculated by statistics of the access flow and / or access success rate of data access by the local server according to each camouflage rule in different target areas within a preset time period; Performing camouflage processing on the data to be transmitted based on the target camouflage rule to obtain target camouflage data; Encapsulating the target disguised data based on a preset encapsulation method to obtain a request data packet; The request data packet is sent to a receiving end from a transmission port indicated in the target masquerade rule.

2. The method according to claim 1, characterized in that The obtaining target camouflage rule includes: Obtaining a camouflage rule list sent by a local server, wherein the camouflage rule list records the access traffic and access success rate corresponding to each camouflage rule in the preset time period in the different target areas; Determine a first camouflage rule corresponding to the maximum access flow from all access flows, and determine the first camouflage rule as the target camouflage rule; or, A second camouflage rule corresponding to the maximum access success rate is determined from all access success rates, and the second camouflage rule is determined as the target camouflage rule.

3. The method according to claim 1, characterized in that The camouflaging the data to be transmitted based on the target camouflage rule to obtain target camouflage data includes: Acquiring actual data features of the data to be transmitted, modifying the actual data features into disguised data features, and obtaining the target disguised data; and / or, Obtaining a disguised access address, configuring a disguised access address for the data to be transmitted, and obtaining the target disguised data; and / or, The data to be transmitted is encrypted to obtain the target disguised data.

4. The method according to claim 3, characterized in that The obtaining of the camouflaged access address and configuring the camouflaged access address for the data to be transmitted includes: Determine an idle IP address and configure the IP address for the data to be transmitted; and / or, A target masquerade domain name is determined from the target masquerade rule based on the access success rate, and the target masquerade domain name is configured for the data to be transmitted.

5. The method according to claim 3, characterized in that: The obtaining of the actual data features of the data to be transmitted and modifying the actual data features into disguised data features includes: The resource description of the data to be transmitted is obtained, and the disguised resource description is obtained from the target disguise rule, and the resource description is modified to the disguised resource description, wherein the resource description includes: resource type, protocol field, data creation time, data volume and data cache status.

6. The method according to claim 1, characterized in that The step of encapsulating the target camouflaged data based on a preset encapsulation method to obtain a request data packet includes: Serializing the target disguised data to obtain preset binary data corresponding to the target disguised data; It is determined that the preset binary data is the request data packet.

7. The method according to claim 1, characterized in that Before sending the request data packet from the transmission port indicated in the target masquerade rule to the receiving end, the method further includes: Acquire the service function and preset function code corresponding to the data to be transmitted, wherein the service function is a service provided by the receiving end; Creating a business function interface based on the business function and the preset function code, wherein the business function interface is used by the sending end to implement the business function; Performing interface testing on the business function interface to obtain test results; If the test result is that the test is successful, the service function interface is used as the target function interface of the data to be transmitted, so that the sending end can implement the service function by calling the target function interface.

8. The method according to claim 7, characterized in that The performing interface testing on the business function interface to obtain the test result includes: In response to the test result being a test failure; If the test failure is due to a network error, determining a first prompt message; If the test fails because the network is normal but the interface is wrong, the service function interface corresponding to the data to be transmitted is re-acquired, and the re-acquired service function interface is tested.

9. A data camouflage device, characterized in that: include: An acquisition module, used to acquire the data to be transmitted and the target camouflage rules, wherein the target camouflage rules are rules calculated by statistics of the access flow and / or access success rate of data access by the local server according to each camouflage rule in a preset time period in different target areas; A camouflage module, used for camouflaging the data to be transmitted based on the target camouflage rule to obtain target camouflaged data; An encapsulation module, used to encapsulate the target disguised data based on a preset encapsulation method to obtain a request data packet; The sending module is used to send the request data packet from the transmission port indicated in the target masquerade rule to the receiving end.

10. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the method according to any one of claims 1 to 8 is implemented.

11. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the method according to any one of claims 1 to 8 is implemented.

Images