Network data security encryption transmission method and system

Abstract

The invention discloses a network data security encryption transmission method and system, and relates to the field of data transmission, and the method comprises the steps: building a channel mathematical model; calculating the capacity of each channel in the channel mathematical model; judging whether the transmission data volume is greater than the available capacity of the channel; transmitting the public keys of the sender and the receiver to a transmission channel center; transmitting the public key of the sender to a receiver, and transmitting the public key of the receiver to the sender; the sender carries out multiple times of encryption processing on a network data plaintext needing to be transmitted to obtain a sender digital signature, a first-layer data ciphertext and a second-layer data ciphertext; the sender transmits the second layer of data ciphertext to the receiver through the transmission channel center; the receiver decrypts the second-layer data ciphertext; and the receiver judges whether the digital signature is true or not. By arranging a channel selection module, a secret key distribution module and a ciphertext transmission module, the security of network data transmission is ensured through a multi-channel transmission and multi-encryption technology.

Description

Technical Field

[0001] The present invention relates to the field of data transmission, and in particular to a method and system for secure encryption transmission of network data. Background Art

[0002] Since the 1990s, computer network technology has achieved unprecedented rapid development and wide application. However, while the network brings us convenience and speed, there are also various security crises. With the increasing breadth and depth of computer applications, the scope of information exchange and resource sharing continues to expand, the computer application environment is becoming more and more complex, and the data security of computers is becoming more and more important. Today, as computer networks are expanding and becoming more popular, computers have higher requirements for security and involve a wider range of areas. Its contents mainly include: physical security. Physical security refers to various security countermeasures and measures taken for sites, environments, facilities, equipment, carriers, and personnel; data transmission network security. It refers to the problem of how to ensure the security of information when it is transmitted in the data transmission network to avoid illegal theft and tampering during transmission; software security. It involves the protection of information in the storage and processing state; information security. That is, data security, which means that the system has the ability to resist malicious access, leakage, modification and destruction of information by external illegal intruders, that is, confidentiality, integrity, and availability.

[0003] In the communication environment, all data is public, and all network communication information is carried out through the communication system. Therefore, once it is attacked by malicious attackers, it will cause unpredictable consequences and consequences. In the current multi-source network environment, the large-scale network communication system caused by the exchange of data is stolen and tampered, which will greatly affect the processing, storage and service quality of the data center. Summary of the invention

[0004] In order to solve the above technical problems, a method and system for secure encryption transmission of network data is provided. This technical solution solves the problems raised in the above background technology.

[0005] In order to achieve the above purpose, the technical solution adopted by the present invention is:

[0006] A network data secure encryption transmission method, comprising:

[0007] The mathematical model of the communication network is derived based on the theoretical equation of the communication data transmission line, and the mathematical model of the channel is established based on the characteristic impedance and propagation constant;

[0008] Calculating the capacity of each channel in the channel mathematical model using the Shannon formula;

[0009] Determine whether the amount of transmitted data is greater than the available capacity of the channel. If so, output that the currently selected channel space cannot support the communication data and select the next channel. If not, set the channel as the transmission channel.

[0010] The sender and receiver public keys are transmitted to the transmission channel center through a simple key distribution scheme;

[0011] Using the sender and receiver public keys, the sender public key is transmitted to the receiver and the receiver public key is transmitted to the sender through a secret key distribution scheme;

[0012] The sender performs multiple encryption processes on the network data plaintext to be transmitted to obtain the sender's digital signature, the first layer of data ciphertext and the second layer of data ciphertext;

[0013] The sender transmits the second layer data ciphertext to the receiver through the transmission channel center;

[0014] The receiver uses the sender's public key to decrypt the second-layer data ciphertext into the sender's digital signature and the first-layer data ciphertext;

[0015] The receiver determines whether the digital signature is authentic. If so, it outputs the network data in plain text. If not, it outputs that the signature is incorrect and refuses to receive it.

[0016] Preferably, the derivation of the communication network mathematical model based on the communication data transmission line theoretical equation and the establishment of the channel mathematical model according to the characteristic impedance and the propagation constant specifically include:

[0017] Obtaining channel-related constants, wherein the channel-related constants include series resistance, parallel resistance, channel length and width, and electrical signal frequency;

[0018] Calculate the characteristic impedance of each channel according to the characteristic impedance formula;

[0019] Calculate the channel propagation constant according to the propagation constant formula;

[0020] Substituting the characteristic impedance and channel propagation constant into the communication data transmission line theoretical equation to obtain a channel mathematical model;

[0021] The characteristic impedance formula is:

[0022]

[0023] Where Z0 is the characteristic impedance of each channel, R0 and G0 are the series resistance and parallel resistance respectively, L0 and C0 are the channel length and channel width respectively, w is the frequency of the electrical signal, and j is the imaginary unit;

[0024] The propagation constant formula is:

[0025]

[0026] Where γ is the channel propagation constant;

[0027] The theoretical equation of the communication data transmission line is:

[0028]

[0029] Where U(x) is the channel voltage, I(x) is the channel current, A1 is the input data matrix, and A2 is the output data matrix.

[0030] Preferably, the calculating the capacity of each channel in the channel mathematical model by using the Shannon formula specifically includes:

[0031] Subtract the highest frequency and the lowest frequency that can pass through the channel to get the channel bandwidth;

[0032] Obtain channel signal average power and channel noise average power;

[0033] Use Shannon's formula to calculate the capacity of each channel;

[0034] The Shannon formula is:

[0035]

[0036] Where C is the channel capacity, B is the channel bandwidth, S is the average power of the channel signal, and N is the average power of the channel noise.

[0037] Preferably, the determining whether the amount of transmitted data is greater than the available capacity of the channel specifically includes:

[0038] Get the current channel status;

[0039] Determine whether the current channel state is in working state. If so, the available capacity of the output channel is the difference between the total capacity of the current channel and the occupied capacity. If not, the available capacity of the output channel is the total capacity of the current channel.

[0040] Determine whether the amount of transmitted data is greater than the available capacity of the channel. If so, output that the currently selected channel space cannot support the communication data and select the next channel. If not, set the channel as the transmission channel.

[0041] Preferably, the transmitting of the public keys of the sender and the receiver to the transmission channel center through a simple key distribution scheme specifically includes:

[0042] The transmission channel center generates a set of public and private key pairs {KUc, KRc}, where KUc is the transmission center public key and KRc is the transmission channel center private key;

[0043] Transmitting a first message to a sender and a receiver, wherein the first message includes KUc and an identifier IDc of a transmission channel center;

[0044] The sender and receiver each generate a set of public and private key pairs {KUa, KRa} and {KUb, KRb}, where KUa and KUb are the sender and receiver's public keys, and KRa and KRb are the sender and receiver's private keys.

[0045] KUa and KUb are encrypted with KUc of the transmission channel center and transmitted to the transmission channel center;

[0046] The transmission channel center uses KRc to recover KUa and KUb.

[0047] Preferably, the using of the public keys of the sender and the receiver to transmit the sender's public key to the receiver through a confidentiality key distribution scheme, wherein transmitting the receiver's public key to the sender specifically includes:

[0048] The transmission channel center encrypts using the public keys of the sender and the receiver, and transmits a second message to the corresponding target, wherein the second message includes an identifier IDc of the transmission channel center and a current mark N1a or N1b that uniquely identifies this interaction;

[0049] The sender and the receiver each send a third message encrypted with KUc to the transmission channel center, wherein the third message includes the current mark N1a or N1b of the transmission channel center and the current mark N2a or N2b that uniquely identifies this interaction;

[0050] The sender confirms its identity by decrypting N2a encrypted by KUa at the transmission channel center;

[0051] The transmission channel center sends KUb encrypted with KUa to the sender;

[0052] The sender uses KRa to recover KUb;

[0053] The receiver confirms its identity by decrypting N2b encrypted by KUb at the transmission channel center;

[0054] The transmission channel center sends KUa encrypted with KUb to the receiver;

[0055] The receiver uses KRb to recover KUa.

[0056] Preferably, the sender performs multiple encryption processes on the network data plaintext to be transmitted to obtain the sender's digital signature, the first layer data ciphertext and the second layer data ciphertext, which specifically include:

[0057] Use the sender's private key to encrypt the plaintext network data to be transmitted and obtain the sender's digital signature;

[0058] Use the public key of the recipient to encrypt the plaintext of the network data to be transmitted to obtain the first layer of data ciphertext;

[0059] The sender's digital signature and the first layer of data ciphertext are encrypted using the sender's private key to obtain the second layer of data ciphertext.

[0060] Preferably, the receiving party determines whether the digital signature is authentic specifically including:

[0061] Decrypt the first layer data ciphertext into network data plaintext using the receiver's key;

[0062] Decrypt the sender's digital signature into a signature to be verified using the sender's public key;

[0063] Determine whether the network data plaintext is the same as the signature to be verified. If so, output the network data plaintext. If not, output the signature incorrectly and refuse to receive it.

[0064] Furthermore, a network data secure encryption transmission system is proposed, which is used to implement the network data secure encryption transmission method as described above, including:

[0065] A channel selection module, which is used to derive a communication network mathematical model based on a communication data transmission line theoretical equation, establish a channel mathematical model based on characteristic impedance and propagation constant, calculate the capacity of each channel in the channel mathematical model using the Shannon formula, and determine whether the amount of transmitted data is greater than the available capacity of the channel;

[0066] A key distribution module, the key distribution module is used to transmit the sender and the receiver's public keys to the transmission channel center through a simple key distribution scheme, use the sender and the receiver's public keys to transmit the sender's public key to the receiver through a confidential key distribution scheme, and transmit the receiver's public key to the sender;

[0067] The ciphertext transmission module is used for the sender to perform multiple encryption processes on the network data plaintext to be transmitted, obtain the sender's digital signature, the first layer data ciphertext and the second layer data ciphertext, the sender transmits the second layer data ciphertext to the receiver through the transmission channel center, the receiver uses the sender's public key to decrypt the second layer data ciphertext into the sender's digital signature and the first layer data ciphertext, and the receiver determines whether the digital signature is true.

[0068] Optionally, the channel selection module includes:

[0069] A channel model building unit, the channel model building unit is used to derive a communication network mathematical model according to a communication data transmission line theoretical equation, and to establish a channel mathematical model according to characteristic impedance and propagation constant;

[0070] A channel capacity calculation unit, the channel capacity calculation unit is used to calculate the capacity of each channel in the channel mathematical model using the Shannon formula;

[0071] The transmission channel determination unit is used to determine whether the amount of transmission data is greater than the available capacity of the channel. If so, it outputs that the currently selected channel space cannot support the communication data and selects the next channel. If not, the channel is set as the transmission channel.

[0072] The key distribution module comprises:

[0073] A key uploading unit, the key uploading unit is used to transmit the public keys of the sender and the receiver to the transmission channel center through a simple key distribution scheme;

[0074] A key distribution unit is used to use the public keys of the sender and the receiver to transmit the sender's public key to the receiver and transmit the receiver's public key to the sender through a secret key distribution scheme.

[0075] The ciphertext transmission module comprises:

[0076] A plaintext encryption unit, wherein the plaintext encryption unit is used by the sender to perform multiple encryption processes on the network data plaintext to be transmitted, so as to obtain the sender's digital signature, the first layer data ciphertext and the second layer data ciphertext;

[0077] A ciphertext transmission unit, wherein the ciphertext transmission unit is used for the sender to transmit the second layer data ciphertext to the receiver through the transmission channel center;

[0078] A ciphertext decryption unit, wherein the ciphertext decryption unit is used for the receiver to decrypt the second-layer data ciphertext into the sender's digital signature and the first-layer data ciphertext using the sender's public key;

[0079] The signature verification unit is used by the receiving party to determine whether the digital signature is authentic. If so, the network data plaintext is output; if not, the signature is output to be incorrect and the reception is rejected.

[0080] Compared with the prior art, the present invention has the following beneficial effects:

[0081] By setting up a channel selection module, a key distribution module and a ciphertext transmission module, the security of network data transmission is guaranteed through multi-channel transmission and multiple encryption technologies. The identities of the sender and receiver can be verified multiple times to prevent unknown persons from impersonating the sender or receiver to transmit information during the network data transmission process, thereby ensuring the security of the data transmission process. BRIEF DESCRIPTION OF THE DRAWINGS

[0082] Figure 1This is a flow chart of the network data security encryption transmission method proposed by the present invention;

[0083] Figure 2 A flow chart of a method for establishing a channel mathematical model of the present invention;

[0084] Figure 3 A flow chart of a method for calculating the capacity of each channel of the present invention;

[0085] Figure 4 A flow chart of a method for determining whether the amount of transmitted data is greater than the available capacity of a channel according to the present invention;

[0086] Figure 5 A flow chart of the method for transmitting the public keys of the sender and the receiver to the transmission channel center of the present invention;

[0087] Figure 6 A flow chart of a method for transmitting a sender's public key to a receiver and a receiver's public key to a sender according to the present invention;

[0088] Figure 7 A flow chart of a method for the sender of the present invention to perform multiple encryption processing on the plain text of network data to be transmitted;

[0089] Figure 8 This is a flow chart of the method for the receiver of the present invention to determine whether a digital signature is authentic. DETAILED DESCRIPTION

[0090] The following description is used to disclose the present invention so that those skilled in the art can implement the present invention. The preferred embodiments described below are only examples, and those skilled in the art may think of other obvious variations.

[0091] Reference Figure 1 As shown, a network data secure encryption transmission method includes:

[0092] The mathematical model of the communication network is derived based on the theoretical equation of the communication data transmission line, and the mathematical model of the channel is established based on the characteristic impedance and propagation constant;

[0093] Calculating the capacity of each channel in the channel mathematical model using the Shannon formula;

[0094] Determine whether the amount of transmitted data is greater than the available capacity of the channel. If so, output that the currently selected channel space cannot support the communication data and select the next channel. If not, set the channel as the transmission channel.

[0095] The sender and receiver public keys are transmitted to the transmission channel center through a simple key distribution scheme;

[0096] Using the sender and receiver public keys, the sender public key is transmitted to the receiver and the receiver public key is transmitted to the sender through a secret key distribution scheme;

[0097] The sender performs multiple encryption processes on the network data plaintext to be transmitted to obtain the sender's digital signature, the first layer of data ciphertext and the second layer of data ciphertext;

[0098] The sender transmits the second layer data ciphertext to the receiver through the transmission channel center;

[0099] The receiver uses the sender's public key to decrypt the second-layer data ciphertext into the sender's digital signature and the first-layer data ciphertext;

[0100] The receiver determines whether the digital signature is authentic. If so, it outputs the network data in plain text. If not, it outputs that the signature is incorrect and refuses to receive it.

[0101] Reference Figure 2 As shown in the figure, the mathematical model of the communication network is derived based on the theoretical equation of the communication data transmission line. According to the characteristic impedance and propagation constant, the channel mathematical model is established, which specifically includes:

[0102] Obtaining channel-related constants, wherein the channel-related constants include series resistance, parallel resistance, channel length and width, and electrical signal frequency;

[0103] Calculate the characteristic impedance of each channel according to the characteristic impedance formula;

[0104] Calculate the channel propagation constant according to the propagation constant formula;

[0105] Substituting the characteristic impedance and the channel propagation constant into the communication data transmission line theoretical equation to obtain a channel mathematical model;

[0106] The characteristic impedance formula is:

[0107]

[0108] Where Z0 is the characteristic impedance of each channel, R0 and G0 are the series resistance and parallel resistance respectively, L0 and C0 are the channel length and channel width respectively, w is the frequency of the electrical signal, and j is the imaginary unit;

[0109] The propagation constant formula is:

[0110]

[0111] Where γ is the channel propagation constant;

[0112] The theoretical equation of the communication data transmission line is:

[0113]

[0114] Where U(x) is the channel voltage, I(x) is the channel current, A1 is the input data matrix, and A2 is the output data matrix.

[0115] In theoretical research, a channel is often divided into a channel encoder, the channel itself, and a channel decoder. People can change the encoder and decoder to obtain the best communication effect. Therefore, encoders and decoders often refer to parts that are easy to change and easy to design, while channels refer to those parts that are fixed. However, this division is more or less arbitrary and can be determined according to specific circumstances. For example, modems and error correction coding devices are generally considered to belong to channel encoders and decoders, but sometimes channels containing modems are called modulation channels, and channels containing error correction encoders and decoders are called coding channels.

[0116] Reference Figure 3 As shown, using the Shannon formula to calculate the capacity of each channel in the channel mathematical model specifically includes:

[0117] Subtract the highest frequency and the lowest frequency that can pass through the channel to get the channel bandwidth;

[0118] Obtain channel signal average power and channel noise average power;

[0119] Use Shannon's formula to calculate the capacity of each channel;

[0120] The Shannon formula is:

[0121]

[0122] Where C is the channel capacity, B is the channel bandwidth, S is the average power of the channel signal, and N is the average power of the channel noise.

[0123] Channel capacity is a parameter of the channel, which reflects the maximum amount of information that the channel can transmit. Its size is independent of the information source. For different input probability distributions, there must be a maximum value for the mutual information, which is defined as the capacity of the channel. Once the transfer probability matrix is ​​determined, the channel capacity is also completely determined. Although the definition of channel capacity involves the input probability distribution, the value of the channel capacity is independent of the input probability distribution. Different input probability distributions are called experimental information sources. For different experimental information sources, the mutual information is also different. There must be an experimental information source that maximizes the mutual information, and this maximum value is the channel capacity.

[0124] Reference Figure 4 As shown, judging whether the amount of transmitted data is greater than the available capacity of the channel specifically includes:

[0125] Get the current channel status;

[0126] Determine whether the current channel state is in working state. If so, the available capacity of the output channel is the difference between the total capacity of the current channel and the occupied capacity. If not, the available capacity of the output channel is the total capacity of the current channel.

[0127] Determine whether the amount of transmitted data is greater than the available capacity of the channel. If so, output that the currently selected channel space cannot support the communication data and select the next channel. If not, set the channel as the transmission channel.

[0128] The channel bandwidth limits the lower and upper frequency limits of the signal allowed to pass through the channel, that is, it limits a frequency passband. For example, the allowed passband of a channel is 1.5kHz to 15kHz, and its bandwidth is 13.5kHz. Of course, all frequency components of the square wave signal above can pass through the channel. If factors such as attenuation, delay and noise are not considered, the signal passing through this channel will be undistorted.

[0129] Reference Figure 5 As shown, the transmission of the sender and receiver's public keys to the transmission channel center through a simple key distribution scheme specifically includes:

[0130] The transmission channel center generates a set of public and private key pairs {KUc, KRc}, where KUc is the transmission center public key and KRc is the transmission channel center private key;

[0131] Transmitting a first message to a sender and a receiver, wherein the first message includes KUc and an identifier IDc of a transmission channel center;

[0132] The sender and receiver each generate a set of public and private key pairs {KUa, KRa} and {KUb, KRb}, where KUa and KUb are the sender and receiver's public keys, and KRa and KRb are the sender and receiver's private keys.

[0133] KUa and KUb are encrypted with KUc of the transmission channel center and transmitted to the transmission channel center;

[0134] The transmission channel center uses KRc to recover KUa and KUb.

[0135] The public key and private key are a pair of keys used for asymmetric encryption and decryption. The public key can be shared publicly and is used to encrypt data or verify signatures. The private key must be kept confidential and is used to decrypt data or create signatures. The public key and private key are obtained through an algorithm and can be guaranteed to be unique worldwide. Data encrypted using the public key or private key can only be decrypted by the other key, thus ensuring the confidentiality and integrity of the data.

[0136] Reference Figure 6As shown, using the public keys of the sender and the receiver, the sender's public key is transmitted to the receiver through a secret key distribution scheme, and transmitting the receiver's public key to the sender specifically includes:

[0137] The transmission channel center encrypts using the public keys of the sender and the receiver, and transmits a second message to the corresponding target, wherein the second message includes an identifier IDc of the transmission channel center and a current mark N1a or N1b that uniquely identifies this interaction;

[0138] The sender and the receiver each send a third message encrypted with KUc to the transmission channel center, wherein the third message includes the current mark N1a or N1b of the transmission channel center and the current mark N2a or N2b that uniquely identifies this interaction;

[0139] The sender confirms its identity by decrypting N2a encrypted by KUa at the transmission channel center;

[0140] The transmission channel center sends KUb encrypted with KUa to the sender;

[0141] The sender uses KRa to recover KUb;

[0142] The receiver confirms its identity by decrypting N2b encrypted by KUb at the transmission channel center;

[0143] The transmission channel center sends KUa encrypted with KUb to the receiver;

[0144] The receiver uses KRb to recover KUa.

[0145] Reference Figure 7 As shown, the sender performs multiple encryption processes on the network data plaintext to be transmitted, and obtains the sender's digital signature, the first layer data ciphertext and the second layer data ciphertext, which specifically include:

[0146] Use the sender's private key to encrypt the plaintext network data to be transmitted and obtain the sender's digital signature;

[0147] Use the public key of the recipient to encrypt the plaintext of the network data to be transmitted to obtain the first layer of data ciphertext;

[0148] The sender's digital signature and the first layer of data ciphertext are encrypted using the sender's private key to obtain the second layer of data ciphertext.

[0149] A digital signature (also known as a public key digital signature) is a string of numbers that can only be generated by the sender of the information and cannot be forged by others. This string of numbers is also a valid proof of the authenticity of the information sent by the sender. It is a method similar to an ordinary physical signature written on paper, but it is implemented using technology in the field of public key encryption. It is used to identify digital information. A set of digital signatures usually defines two complementary operations, one for signing and the other for verification. Digital signatures are the application of asymmetric key encryption technology and digital summary technology.

[0150] Reference Figure 8 As shown, the receiver determines whether the digital signature is true by:

[0151] Decrypt the first layer data ciphertext into network data plaintext using the receiver's key;

[0152] Decrypt the sender's digital signature into a signature to be verified using the sender's public key;

[0153] Determine whether the network data plaintext is the same as the signature to be verified. If so, output the network data plaintext. If not, output the signature incorrectly and refuse to receive it.

[0154] The judgment process can verify the identity of the sender again, prevent an unknown person from impersonating the sender to transmit information during the network data transmission process, and ensure the security of the data transmission process.

[0155] A network data secure encryption transmission system, used to implement the network data secure encryption transmission method as described above, comprising:

[0156] A channel selection module, which is used to derive a communication network mathematical model based on a communication data transmission line theoretical equation, establish a channel mathematical model based on characteristic impedance and propagation constant, calculate the capacity of each channel in the channel mathematical model using the Shannon formula, and determine whether the amount of transmitted data is greater than the available capacity of the channel;

[0157] A key distribution module, the key distribution module is used to transmit the sender and the receiver's public keys to the transmission channel center through a simple key distribution scheme, use the sender and the receiver's public keys to transmit the sender's public key to the receiver through a confidential key distribution scheme, and transmit the receiver's public key to the sender;

[0158] The ciphertext transmission module is used for the sender to perform multiple encryption processes on the network data plaintext to be transmitted, obtain the sender's digital signature, the first layer data ciphertext and the second layer data ciphertext, the sender transmits the second layer data ciphertext to the receiver through the transmission channel center, the receiver uses the sender's public key to decrypt the second layer data ciphertext into the sender's digital signature and the first layer data ciphertext, and the receiver determines whether the digital signature is true.

[0159] The channel selection module comprises:

[0160] A channel model building unit, the channel model building unit is used to derive a communication network mathematical model according to a communication data transmission line theoretical equation, and to establish a channel mathematical model according to characteristic impedance and propagation constant;

[0161] A channel capacity calculation unit, the channel capacity calculation unit is used to calculate the capacity of each channel in the channel mathematical model using the Shannon formula;

[0162] The transmission channel determination unit is used to determine whether the amount of transmission data is greater than the available capacity of the channel. If so, it outputs that the currently selected channel space cannot support the communication data and selects the next channel. If not, the channel is set as the transmission channel.

[0163] The key distribution module comprises:

[0164] A key uploading unit, the key uploading unit is used to transmit the public keys of the sender and the receiver to the transmission channel center through a simple key distribution scheme;

[0165] A key distribution unit is used to use the public keys of the sender and the receiver to transmit the sender's public key to the receiver and transmit the receiver's public key to the sender through a secret key distribution scheme.

[0166] The ciphertext transmission module comprises:

[0167] A plaintext encryption unit, wherein the plaintext encryption unit is used by the sender to perform multiple encryption processes on the network data plaintext to be transmitted, so as to obtain the sender's digital signature, the first layer data ciphertext and the second layer data ciphertext;

[0168] A ciphertext transmission unit, wherein the ciphertext transmission unit is used for the sender to transmit the second layer data ciphertext to the receiver through the transmission channel center;

[0169] A ciphertext decryption unit, wherein the ciphertext decryption unit is used for the receiver to decrypt the second-layer data ciphertext into the sender's digital signature and the first-layer data ciphertext using the sender's public key;

[0170] The signature verification unit is used by the receiving party to determine whether the digital signature is authentic. If so, the network data plaintext is output; if not, the signature is output to be incorrect and the reception is rejected.

[0171] Furthermore, the present solution also proposes a computer-readable storage medium on which a computer-readable program is stored. When the computer-readable program is called, the above-mentioned network data secure encryption transmission method is executed.

[0172] It is understandable that the storage medium may be a magnetic medium, such as a floppy disk, a hard disk, or a magnetic tape; an optical medium, such as a DVD; or a semiconductor medium, such as a solid state drive (SSD).

[0173] To sum up, the advantages of the present invention are: by setting up a channel selection module, a key distribution module and a ciphertext transmission module, the security of network data transmission is guaranteed through multi-channel transmission and multiple encryption technologies, and the identities of the sender and the receiver can be verified multiple times to prevent unknown identities from impersonating the sender or the receiver to transmit information during the network data transmission process, thereby ensuring the security of the data transmission process.

[0174] The above shows and describes the basic principles, main features and advantages of the present invention. Those skilled in the art should understand that the present invention is not limited to the above embodiments. The above embodiments and descriptions only describe the principles of the present invention. The present invention may be subject to various changes and improvements without departing from the spirit and scope of the present invention. These changes and improvements fall within the scope of the present invention. The scope of protection claimed by the present invention is defined by the attached claims and their equivalents.

Claims

1. A network data secure encryption transmission method, characterized in that: include: The mathematical model of the communication network is derived based on the theoretical equation of the communication data transmission line, and the mathematical model of the channel is established based on the characteristic impedance and propagation constant; Calculating the capacity of each channel in the channel mathematical model using the Shannon formula; Determine whether the amount of data to be transmitted is greater than the available capacity of the channel. If so, output that the current selected channel space cannot support the communication data and select the next channel. If not, set the channel as the transmission channel. The sender and receiver public keys are transmitted to the transmission channel center through a simple key distribution scheme; Using the sender and receiver public keys, the sender public key is transmitted to the receiver and the receiver public key is transmitted to the sender through a secret key distribution scheme; The sender performs multiple encryption processes on the network data plaintext to be transmitted to obtain the sender's digital signature, the first layer of data ciphertext and the second layer of data ciphertext; The sender transmits the second layer data ciphertext to the receiver through the transmission channel center; The receiver uses the sender's public key to decrypt the second-layer data ciphertext into the sender's digital signature and the first-layer data ciphertext; The receiver determines whether the digital signature is authentic. If so, it outputs the network data in plain text. If not, it outputs that the signature is incorrect and refuses to receive it.

2. A network data secure encryption transmission method according to claim 1, characterized in that: The derivation of the communication network mathematical model based on the communication data transmission line theoretical equation and the establishment of the channel mathematical model according to the characteristic impedance and the propagation constant specifically include: Obtaining channel-related constants, wherein the channel-related constants include series resistance, parallel resistance, channel length and width, and electrical signal frequency; Calculate the characteristic impedance of each channel according to the characteristic impedance formula; Calculate the channel propagation constant according to the propagation constant formula; Substituting the characteristic impedance and channel propagation constant into the communication data transmission line theoretical equation to obtain a channel mathematical model; The characteristic impedance formula is: Where Z0 is the characteristic impedance of each channel, R0 and G0 are the series resistance and parallel resistance respectively, L0 and C0 are the channel length and channel width respectively, w is the frequency of the electrical signal, and j is the imaginary unit; The propagation constant formula is: Where γ is the channel propagation constant; The theoretical equation of the communication data transmission line is: Where U(x) is the channel voltage, I(x) is the channel current, A1 is the input data matrix, and A2 is the output data matrix.

3. A network data secure encryption transmission method according to claim 2, characterized in that: The use of the Shannon formula to calculate the capacity of each channel in the channel mathematical model specifically includes: Subtract the highest frequency and the lowest frequency that can pass through the channel to get the channel bandwidth; Obtain channel signal average power and channel noise average power; Use Shannon's formula to calculate the capacity of each channel; The Shannon formula is: Where C is the channel capacity, B is the channel bandwidth, S is the average power of the channel signal, and N is the average power of the channel noise.

4. A network data security encryption transmission method according to claim 3, characterized in that: The determining whether the amount of transmitted data is greater than the available capacity of the channel specifically includes: Get the current channel status; Determine whether the current channel state is in working state. If so, the available capacity of the output channel is the difference between the total capacity of the current channel and the occupied capacity. If not, the available capacity of the output channel is the total capacity of the current channel. Determine whether the amount of transmitted data is greater than the available capacity of the channel. If so, output that the currently selected channel space cannot support the communication data and select the next channel. If not, set the channel as the transmission channel.

5. A network data secure encryption transmission method according to claim 4, characterized in that: The transmitting of the public keys of the sender and the receiver to the transmission channel center through a simple key distribution scheme specifically includes: The transmission channel center generates a set of public and private key pairs {KUc, KRc}, where KUc is the transmission center public key and KRc is the transmission channel center private key; Transmitting a first message to a sender and a receiver, wherein the first message includes KUc and an identifier IDc of a transmission channel center; The sender and receiver each generate a set of public and private key pairs {KUa, KRa} and {KUb, KRb}, where KUa and KUb are the sender and receiver's public keys, and KRa and KRb are the sender and receiver's private keys. KUa and KUb are encrypted with KUc of the transmission channel center and transmitted to the transmission channel center; The transmission channel center uses KRc to recover KUa and KUb.

6. A network data secure encryption transmission method according to claim 5, characterized in that: The method of using the public keys of the sender and the receiver to transmit the sender's public key to the receiver through a secret key distribution scheme, wherein the method of transmitting the receiver's public key to the sender specifically includes: The transmission channel center encrypts using the public keys of the sender and the receiver, and transmits a second message to the corresponding target, wherein the second message includes an identifier IDc of the transmission channel center and a current mark N1a or N1b that uniquely identifies this interaction; The sender and the receiver each send a third message encrypted with KUc to the transmission channel center, wherein the third message includes the current mark N1a or N1b of the transmission channel center and the current mark N2a or N2b that uniquely identifies this interaction; The sender confirms its identity by decrypting N2a encrypted by KUa at the transmission channel center; The transmission channel center sends KUb encrypted with KUa to the sender; The sender uses KRa to recover KUb; The receiver confirms its identity by decrypting N2b encrypted by KUb at the transmission channel center; The transmission channel center sends KUa encrypted with KUb to the receiver; The receiver uses KRb to recover KUa.

7. A network data secure encryption transmission method according to claim 6, characterized in that: The sender performs multiple encryption processes on the network data plaintext to be transmitted, and obtains the sender's digital signature, the first layer data ciphertext and the second layer data ciphertext, which specifically include: Use the sender's private key to encrypt the plaintext network data to be transmitted and obtain the sender's digital signature; Use the public key of the recipient to encrypt the plaintext of the network data to be transmitted to obtain the first layer of data ciphertext; The sender's digital signature and the first layer of data ciphertext are encrypted using the sender's private key to obtain the second layer of data ciphertext.

8. A network data secure encryption transmission method according to claim 7, characterized in that: The receiving party determines whether the digital signature is true specifically including: Decrypt the first layer data ciphertext into network data plaintext using the receiver's key; Decrypt the sender's digital signature into a signature to be verified using the sender's public key; Determine whether the network data plaintext is the same as the signature to be verified. If so, output the network data plaintext. If not, output the signature incorrectly and refuse to receive it.

9. A network data secure encryption transmission system, used to implement the network data secure encryption transmission method according to any one of claims 1 to 8, characterized in that: include: A channel selection module, which is used to derive a communication network mathematical model based on a communication data transmission line theoretical equation, establish a channel mathematical model based on characteristic impedance and propagation constant, calculate the capacity of each channel in the channel mathematical model using the Shannon formula, and determine whether the amount of transmitted data is greater than the available capacity of the channel; A key distribution module, the key distribution module is used to transmit the sender and the receiver's public keys to the transmission channel center through a simple key distribution scheme, use the sender and the receiver's public keys to transmit the sender's public key to the receiver through a confidential key distribution scheme, and transmit the receiver's public key to the sender; The ciphertext transmission module is used for the sender to perform multiple encryption processes on the network data plaintext to be transmitted, obtain the sender's digital signature, the first layer data ciphertext and the second layer data ciphertext, the sender transmits the second layer data ciphertext to the receiver through the transmission channel center, the receiver uses the sender's public key to decrypt the second layer data ciphertext into the sender's digital signature and the first layer data ciphertext, and the receiver determines whether the digital signature is true.

10. A network data security encryption transmission system according to claim 9, characterized in that: The channel selection module comprises: A channel model building unit, the channel model building unit is used to derive a communication network mathematical model according to a communication data transmission line theoretical equation, and to establish a channel mathematical model according to characteristic impedance and propagation constant; A channel capacity calculation unit, the channel capacity calculation unit is used to calculate the capacity of each channel in the channel mathematical model using the Shannon formula; The transmission channel determination unit is used to determine whether the amount of transmission data is greater than the available capacity of the channel. If so, it outputs that the currently selected channel space cannot support the communication data and selects the next channel. If not, the channel is set as the transmission channel. The key distribution module comprises: A key uploading unit, the key uploading unit is used to transmit the public keys of the sender and the receiver to the transmission channel center through a simple key distribution scheme; A key distribution unit is used to use the public keys of the sender and the receiver to transmit the sender's public key to the receiver and transmit the receiver's public key to the sender through a secret key distribution scheme. The ciphertext transmission module comprises: A plaintext encryption unit, wherein the plaintext encryption unit is used by the sender to perform multiple encryption processes on the network data plaintext to be transmitted, so as to obtain the sender's digital signature, the first layer data ciphertext and the second layer data ciphertext; A ciphertext transmission unit, wherein the ciphertext transmission unit is used for the sender to transmit the second layer data ciphertext to the receiver through the transmission channel center; A ciphertext decryption unit, wherein the ciphertext decryption unit is used for the receiver to decrypt the second-layer data ciphertext into the sender's digital signature and the first-layer data ciphertext using the sender's public key; The signature verification unit is used by the receiving party to determine whether the digital signature is authentic. If so, the network data plaintext is output; if not, the signature is output to be incorrect and the reception is rejected.

Images