A network data security encryption transmission method and system

Abstract

The application discloses a network data security encryption transmission method and system, relates to the field of data transmission, and comprises the following steps: establishing a channel mathematical model; calculating the channel capacity in the channel mathematical model; judging whether the transmission data volume is greater than the available channel capacity; transmitting the public keys of a sender and a receiver to a transmission channel center; transmitting the public key of the sender to the receiver and transmitting the public key of the receiver to the sender; performing multiple encryption processing on the network data plaintext to be transmitted by the sender to obtain a sender digital signature, a first layer data ciphertext and a second layer data ciphertext; transmitting the second layer data ciphertext to the receiver by the transmission channel center; decrypting the second layer data ciphertext by the receiver; and judging whether the digital signature is true by the receiver. The channel selection module, the key distribution module and the ciphertext transmission module are arranged, and the safety of network data transmission is ensured through multi-channel transmission and multiple encryption technologies.

Description

Technical Field

[0001] This invention relates to the field of data transmission, specifically to a method and system for secure encrypted transmission of network data. Background Technology

[0002] Since the 1990s, computer network technology has experienced unprecedented rapid development and widespread application. However, while bringing us convenience and speed, the network also presents various security crises. With the increasingly widespread and in-depth application of computers, the scope of information exchange and resource sharing continues to expand, the computer application environment is becoming increasingly complex, and computer data security is becoming increasingly important. In today's increasingly expanding and widespread computer networks, the requirements for computer security are higher and more extensive. Its content mainly includes: physical security. Physical security refers to various security countermeasures and measures taken for sites, environments, facilities, equipment, carriers, and personnel; data transmission network security. This refers to how to ensure the security of information during transmission through data transmission networks, preventing illegal theft, tampering, etc.; software security. This involves the protection of information in its storage and processing states; information security, also known as data security, refers to the system's ability to resist malicious access, leakage, modification, and destruction of information by external illegal intruders, namely: confidentiality, integrity, and availability.

[0003] In a communication environment, all data is publicly available, and all network communication information is mediated by communication systems. Therefore, once malicious attacks occur, unpredictable consequences can result. In the current multi-source network environment, the theft and tampering of large-scale network communication systems due to data exchange will significantly impact the processing, storage, and service quality of data centers. Summary of the Invention

[0004] To address the aforementioned technical problems, a method and system for secure encrypted transmission of network data are provided. This technical solution resolves the issues raised in the background section.

[0005] To achieve the above objectives, the technical solution adopted by the present invention is as follows:

[0006] A method for secure encrypted transmission of network data, comprising:

[0007] Based on the theoretical equations of communication data transmission lines, a mathematical model of the communication network is derived, and a channel mathematical model is established based on characteristic impedance and propagation constant.

[0008] The channel capacity in the channel mathematical model is calculated using Shannon's formula.

[0009] Determine if the amount of data to be transmitted is greater than the available capacity of the channel. If yes, output that the currently selected channel space cannot support the passage of communication data and select the next channel. If no, set the channel as the transmission channel.

[0010] A simple key distribution scheme is used to transmit the public keys of the sender and receiver to the transmission channel center.

[0011] Using the public keys of the sender and receiver, the sender's public key is transmitted to the receiver and the receiver's public key is transmitted to the sender through a secret key distribution scheme.

[0012] The sender encrypts the plaintext network data to be transmitted multiple times to obtain the sender's digital signature, the first layer of ciphertext, and the second layer of ciphertext.

[0013] The sender transmits the second-layer encrypted data to the receiver through the transmission channel center;

[0014] The receiver uses the sender's public key to decrypt the second-layer ciphertext into the sender's digital signature and the first-layer ciphertext.

[0015] The receiver determines whether the digital signature is genuine. If it is, it outputs the plaintext network data; otherwise, it outputs that the signature is incorrect and refuses to receive the data.

[0016] Preferably, the derivation of the mathematical model of the communication network based on the theoretical equations of the communication data transmission line, and the establishment of the channel mathematical model based on the characteristic impedance and propagation constant, specifically includes:

[0017] Obtain channel-related constants, including series resistance, parallel resistance, channel length and width, and electrical signal frequency;

[0018] Calculate the characteristic impedance of each channel using the characteristic impedance formula;

[0019] Calculate the channel propagation constant using the propagation constant formula;

[0020] Substituting the characteristic impedance and channel propagation constant into the theoretical equations of the communication data transmission line, we obtain the channel mathematical model;

[0021] The characteristic impedance formula is:

[0022]

[0023] In the formula, Z0 is the characteristic impedance of each channel, R0 and G0 are the series resistance and parallel resistance respectively, L0 and C0 are the channel length and channel width respectively, w is the electrical signal frequency, and j is the imaginary unit.

[0024] The propagation constant formula is:

[0025]

[0026] In the formula, γ is the channel propagation constant;

[0027] The theoretical equation for the communication data transmission line is:

[0028]

[0029] In the formula, U(x) is the channel voltage, I(x) is the channel current, A1 is the input data matrix, and A2 is the output data matrix.

[0030] Preferably, the calculation of each channel capacity in the channel mathematical model using Shannon's formula specifically includes:

[0031] The channel bandwidth can be obtained by subtracting the highest and lowest frequencies that can be passed through the channel.

[0032] Obtain the average power of the channel signal and the average power of the channel noise;

[0033] Calculate the capacity of each channel using Shannon's formula;

[0034] The Shannon formula is as follows:

[0035]

[0036] In the formula, C is the channel capacity, B is the channel bandwidth, S is the average power of the channel signal, and N is the average power of the channel noise.

[0037] Preferably, determining whether the amount of transmitted data is greater than the available channel capacity specifically includes:

[0038] Get the current channel status;

[0039] Determine whether the current channel state is active. If yes, output the available channel capacity as the difference between the current total channel capacity and the occupied capacity. If no, output the available channel capacity as the current total channel capacity.

[0040] Determine if the amount of data to be transmitted is greater than the available capacity of the channel. If yes, output that the currently selected channel space cannot support the communication data to pass through, and select the next channel. If no, set the current channel as the transmission channel.

[0041] Preferably, the transmission of the sender's and receiver's public keys to the transmission channel center via a simple key distribution scheme specifically includes:

[0042] The transmission channel center generates a public and private key pair {KUc, KRc}, where KUc is the transmission center's public key and KRc is the transmission channel center's private key.

[0043] A first message is transmitted to the sender and receiver, the first message including KUc and an identifier IDc of the transmission channel center;

[0044] The sender and receiver each generate a public and private key pair {KUa, KRa} and {KUb, KRb}, where KUa and KUb are the public keys of the sender and receiver, respectively, and KRa and KRb are the private keys of the sender and receiver, respectively.

[0045] After encrypting KUa and KUb with KUc from the transmission channel center, they are transmitted to the transmission channel center.

[0046] The transmission channel center uses KRc to recover KUa and KUb.

[0047] Preferably, the step of using the public keys of the sender and receiver to transmit the sender's public key to the receiver through a secret key distribution scheme, and transmitting the receiver's public key to the sender specifically includes:

[0048] The transmission channel center uses the public keys of the sender and receiver to encrypt and transmit a second message to the corresponding target. The second message includes the identifier IDc of the transmission channel center and a current token N1a or N1b that uniquely identifies this interaction.

[0049] The sender and receiver each send a third message encrypted with KUc to the transmission channel center. The third message contains the current token N1a or N1b of the transmission channel center and the current token N2a or N2b that uniquely identifies this interaction.

[0050] The sender confirms its identity by decrypting the N2a encrypted with KUa by the transmission channel center;

[0051] The transmission channel center sends KUb encrypted with KUa to the sender;

[0052] The sender uses KRa to recover KUb;

[0053] The receiver verifies its identity by decrypting the N2b encrypted with KUb by the transmission channel center.

[0054] The transmission channel center sends KUa encrypted with KUb to the receiver;

[0055] The receiver uses KRb to recover KUa.

[0056] Preferably, the sender performs multiple encryption processes on the plaintext network data to be transmitted to obtain the sender's digital signature, the first layer of ciphertext, and the second layer of ciphertext, specifically including:

[0057] The sender's private key is used to encrypt the plaintext network data to be transmitted, resulting in the sender's digital signature.

[0058] The plaintext network data to be transmitted is encrypted using the recipient's public key to obtain the first layer of ciphertext.

[0059] The sender's digital signature and the first layer of ciphertext are encrypted using the sender's private key to obtain the second layer of ciphertext.

[0060] Preferably, the receiver's determination of whether the digital signature is genuine specifically includes:

[0061] The first-layer ciphertext is decrypted into plaintext network data using the receiver's key;

[0062] Decrypt the sender's digital signature into a signature to be verified using the sender's public key;

[0063] Determine whether the plaintext network data is the same as the signature to be verified. If so, output the plaintext network data; otherwise, output that the signature is incorrect and refuse to accept it.

[0064] Furthermore, a network data secure encrypted transmission system is proposed to implement the network data secure encrypted transmission method described above, including:

[0065] The channel selection module is used to derive the mathematical model of the communication network based on the theoretical equation of the communication data transmission line, establish the channel mathematical model according to the characteristic impedance and propagation constant, calculate the capacity of each channel in the channel mathematical model using Shannon's formula, and determine whether the amount of transmitted data is greater than the available channel capacity.

[0066] A key distribution module is used to transmit the public keys of the sender and receiver to the transmission channel center through a simple key distribution scheme, and to transmit the sender's public key to the receiver and the receiver's public key to the sender through a confidential key distribution scheme using the public keys of the sender and receiver.

[0067] The encrypted transmission module is used by the sender to encrypt the plaintext network data to be transmitted multiple times to obtain the sender's digital signature, the first layer of encrypted data, and the second layer of encrypted data. The sender transmits the second layer of encrypted data to the receiver through the transmission channel center. The receiver uses the sender's public key to decrypt the second layer of encrypted data into the sender's digital signature and the first layer of encrypted data. The receiver then determines whether the digital signature is genuine.

[0068] Optionally, the channel selection module includes:

[0069] The channel model construction unit is used to derive the mathematical model of the communication network based on the theoretical equation of the communication data transmission line, and to establish the channel mathematical model based on the characteristic impedance and propagation constant.

[0070] A channel capacity calculation unit is used to calculate the capacity of each channel in the channel mathematical model using Shannon's formula.

[0071] The transmission channel determination unit is used to determine whether the amount of data to be transmitted is greater than the available capacity of the channel. If so, it outputs that the currently selected channel space cannot support the passage of communication data and selects the next channel. If not, it sets the channel as the transmission channel.

[0072] The key distribution module includes:

[0073] A key uploading unit is used to transmit the public keys of the sender and receiver to the transmission channel center through a simple key distribution scheme.

[0074] A key distribution unit is used to transmit the sender's public key to the receiver and the receiver's public key to the sender using the public keys of the sender and receiver, through a confidential key distribution scheme.

[0075] The encrypted transmission module includes:

[0076] The plaintext encryption unit is used by the sender to encrypt the plaintext network data to be transmitted multiple times to obtain the sender's digital signature, the first layer of data ciphertext, and the second layer of data ciphertext.

[0077] The ciphertext transmission unit is used by the sender to transmit the second-layer data ciphertext to the receiver through the transmission channel center;

[0078] The ciphertext decryption unit is used by the receiver to decrypt the second-layer data ciphertext into the sender's digital signature and the first-layer data ciphertext using the sender's public key.

[0079] The signature verification unit is used by the receiver to determine whether the digital signature is genuine. If it is, the receiver outputs the plaintext of the network data; if not, the receiver outputs that the signature is incorrect and refuses to receive the data.

[0080] Compared with the prior art, the beneficial effects of the present invention are as follows:

[0081] By setting up a channel selection module, a key distribution module, and a ciphertext transmission module, the security of network data transmission is ensured through multi-channel transmission and multiple encryption technologies. The identity of the sender and receiver can be verified multiple times to prevent unknown individuals from impersonating the sender or receiver to transmit information during network data transmission, thus ensuring the security of the data transmission process. Attached Figure Description

[0082] Figure 1This is a flowchart of the network data secure encrypted transmission method proposed in this invention;

[0083] Figure 2 This is a flowchart of the method for establishing a channel mathematical model according to the present invention;

[0084] Figure 3 This is a flowchart of the method for calculating the capacity of each channel according to the present invention;

[0085] Figure 4 This is a flowchart of the method for determining whether the amount of transmitted data is greater than the available channel capacity according to the present invention;

[0086] Figure 5 This is a flowchart of the method for transmitting the public keys of the sender and receiver to the transmission channel center according to the present invention;

[0087] Figure 6 This is a flowchart of the method for transmitting the sender's public key to the receiver and transmitting the receiver's public key to the sender according to the present invention.

[0088] Figure 7 This is a flowchart of a method for the sender of the present invention to perform multiple encryption processes on plaintext network data to be transmitted.

[0089] Figure 8 This is a flowchart illustrating the method for the recipient of this invention to determine whether a digital signature is genuine. Detailed Implementation

[0090] The following description is intended to disclose the invention and enable those skilled in the art to implement it. The preferred embodiments described below are merely examples, and other obvious variations will occur to those skilled in the art.

[0091] Reference Figure 1 As shown, a method for secure encrypted transmission of network data includes:

[0092] Based on the theoretical equations of communication data transmission lines, a mathematical model of the communication network is derived, and a channel mathematical model is established based on characteristic impedance and propagation constant.

[0093] The channel capacity in the channel mathematical model is calculated using Shannon's formula.

[0094] Determine if the amount of data to be transmitted is greater than the available capacity of the channel. If yes, output that the currently selected channel space cannot support the passage of communication data and select the next channel. If no, set the channel as the transmission channel.

[0095] A simple key distribution scheme is used to transmit the public keys of the sender and receiver to the transmission channel center.

[0096] Using the public keys of the sender and receiver, the sender's public key is transmitted to the receiver and the receiver's public key is transmitted to the sender through a secret key distribution scheme.

[0097] The sender encrypts the plaintext network data to be transmitted multiple times to obtain the sender's digital signature, the first layer of ciphertext, and the second layer of ciphertext.

[0098] The sender transmits the second-layer encrypted data to the receiver through the transmission channel center;

[0099] The receiver uses the sender's public key to decrypt the second-layer ciphertext into the sender's digital signature and the first-layer ciphertext.

[0100] The receiver determines whether the digital signature is genuine. If it is, it outputs the plaintext network data; otherwise, it outputs that the signature is incorrect and refuses to receive the data.

[0101] Reference Figure 2 As shown, the mathematical model of the communication network is derived based on the theoretical equations of the communication data transmission line. The channel mathematical model is established based on the characteristic impedance and propagation constant, specifically including:

[0102] Obtain channel-related constants, including series resistance, parallel resistance, channel length and width, and electrical signal frequency;

[0103] Calculate the characteristic impedance of each channel using the characteristic impedance formula;

[0104] Calculate the channel propagation constant using the propagation constant formula;

[0105] Substituting the characteristic impedance and channel propagation constant into the theoretical equations of the communication data transmission line, we obtain the channel mathematical model;

[0106] The characteristic impedance formula is:

[0107]

[0108] In the formula, Z0 is the characteristic impedance of each channel, R0 and G0 are the series resistance and parallel resistance respectively, L0 and C0 are the channel length and channel width respectively, w is the electrical signal frequency, and j is the imaginary unit.

[0109] The propagation constant formula is:

[0110]

[0111] In the formula, γ is the channel propagation constant;

[0112] The theoretical equation for the communication data transmission line is:

[0113]

[0114] In the formula, U(x) is the channel voltage, I(x) is the channel current, A1 is the input data matrix, and A2 is the output data matrix.

[0115] In theoretical research, a channel is often divided into a channel encoder, the channel itself, and a channel decoder. People can change the encoder and decoder to obtain the best communication effect. Therefore, the encoder and decoder often refer to the parts that are easy to change and easy to design, while the channel refers to the parts that are fixed. However, this division is more or less arbitrary and can be defined according to specific circumstances. For example, modems and error correction encoders and decoders are generally considered to belong to the channel encoder and decoder, but sometimes a channel containing a modem is called a modulation channel, and a channel containing an error correction encoder and decoder is called a coding channel.

[0116] Reference Figure 3 As shown, the calculation of each channel capacity in the channel mathematical model using Shannon's formula specifically includes:

[0117] The channel bandwidth can be obtained by subtracting the highest and lowest frequencies that can be passed through the channel.

[0118] Obtain the average power of the channel signal and the average power of the channel noise;

[0119] Calculate the capacity of each channel using Shannon's formula;

[0120] The Shannon formula is as follows:

[0121]

[0122] In the formula, C is the channel capacity, B is the channel bandwidth, S is the average power of the channel signal, and N is the average power of the channel noise.

[0123] Channel capacity is a parameter of a channel that reflects the maximum amount of information that the channel can transmit. Its size is independent of the information source. For different input probability distributions, there must be a maximum value for mutual information. This maximum value is defined as the channel capacity. Once the transition probability matrix is ​​determined, the channel capacity is also completely determined. Although the definition of channel capacity involves the input probability distribution, the value of channel capacity is independent of the input probability distribution. Different input probability distributions are called experimental information sources. For different experimental information sources, the mutual information is also different. There must be one experimental information source that maximizes the mutual information. This maximum value is the channel capacity.

[0124] Reference Figure 4 As shown, determining whether the amount of data to be transmitted exceeds the available channel capacity specifically includes:

[0125] Get the current channel status;

[0126] Determine whether the current channel state is active. If yes, output the available channel capacity as the difference between the current total channel capacity and the occupied capacity. If no, output the available channel capacity as the current total channel capacity.

[0127] Determine if the amount of data to be transmitted is greater than the available capacity of the channel. If yes, output that the currently selected channel space cannot support the communication data to pass through, and select the next channel. If no, set the current channel as the transmission channel.

[0128] Channel bandwidth defines the lower and upper frequency limits of signals allowed to pass through the channel, essentially defining a frequency passband. For example, if a channel allows a passband of 1.5kHz to 15kHz, its bandwidth is 13.5kHz. All frequency components of the square wave signal mentioned above can certainly pass through this channel. If factors such as attenuation, time delay, and noise are not considered, the signal passing through this channel will be completely undistorted.

[0129] Reference Figure 5 As shown, transmitting the sender's and receiver's public keys to the transmission channel center through a simple key distribution scheme specifically includes:

[0130] The transmission channel center generates a public and private key pair {KUc, KRc}, where KUc is the transmission center's public key and KRc is the transmission channel center's private key.

[0131] A first message is transmitted to the sender and receiver, the first message including KUc and an identifier IDc of the transmission channel center;

[0132] The sender and receiver each generate a public and private key pair {KUa, KRa} and {KUb, KRb}, where KUa and KUb are the public keys of the sender and receiver, respectively, and KRa and KRb are the private keys of the sender and receiver, respectively.

[0133] After encrypting KUa and KUb with KUc from the transmission channel center, they are transmitted to the transmission channel center.

[0134] The transmission channel center uses KRc to recover KUa and KUb.

[0135] A public key and a private key are a pair of keys used for asymmetric encryption and decryption. The public key can be shared publicly and used to encrypt data or verify signatures, while the private key must be kept secret and used to decrypt data or create signatures. The public and private keys are obtained through an algorithm that guarantees their uniqueness worldwide. Data encrypted using either the public or private key can only be decrypted by the other key, thus ensuring the confidentiality and integrity of the data.

[0136] Reference Figure 6As shown, using the public keys of the sender and receiver, the sender's public key is transmitted to the receiver through a secret key distribution scheme. Specifically, the transmission of the receiver's public key to the sender includes:

[0137] The transmission channel center uses the public keys of the sender and receiver to encrypt and transmit a second message to the corresponding target. The second message includes the identifier IDc of the transmission channel center and a current token N1a or N1b that uniquely identifies this interaction.

[0138] The sender and receiver each send a third message encrypted with KUc to the transmission channel center. The third message contains the current token N1a or N1b of the transmission channel center and the current token N2a or N2b that uniquely identifies this interaction.

[0139] The sender confirms its identity by decrypting the N2a encrypted with KUa by the transmission channel center;

[0140] The transmission channel center sends KUb encrypted with KUa to the sender;

[0141] The sender uses KRa to recover KUb;

[0142] The receiver verifies its identity by decrypting the N2b encrypted with KUb by the transmission channel center.

[0143] The transmission channel center sends KUa encrypted with KUb to the receiver;

[0144] The receiver uses KRb to recover KUa.

[0145] Reference Figure 7 As shown, the sender performs multiple encryption processes on the plaintext network data to be transmitted, resulting in the sender's digital signature, the first layer of ciphertext, and the second layer of ciphertext. Specifically, these include:

[0146] The sender's private key is used to encrypt the plaintext network data to be transmitted, resulting in the sender's digital signature.

[0147] The plaintext network data to be transmitted is encrypted using the recipient's public key to obtain the first layer of ciphertext.

[0148] The sender's digital signature and the first layer of ciphertext are encrypted using the sender's private key to obtain the second layer of ciphertext.

[0149] A digital signature (also known as a public-key digital signature) is a string of numbers that only the sender of the information can generate and that cannot be forged by others. This string of numbers also serves as valid proof of the authenticity of the information sent by the sender. It is similar to a physical signature written on paper, but it is implemented using public-key cryptography techniques. It is a method used to authenticate digital information. A set of digital signatures usually defines two complementary operations, one for signing and the other for verification. Digital signatures are an application of asymmetric key encryption technology and digital digest technology.

[0150] Reference Figure 8 As shown, the receiver determines whether a digital signature is genuine by including:

[0151] The first-layer ciphertext is decrypted into plaintext network data using the receiver's key;

[0152] Decrypt the sender's digital signature into a signature to be verified using the sender's public key;

[0153] Determine whether the plaintext network data is the same as the signature to be verified. If so, output the plaintext network data; otherwise, output that the signature is incorrect and refuse to accept it.

[0154] The judgment process can re-verify the sender's identity, preventing unknown individuals from impersonating the sender to transmit information during network data transmission, thus ensuring the security of data transmission.

[0155] A network data secure encrypted transmission system, used to implement the network data secure encrypted transmission method as described above, includes:

[0156] The channel selection module is used to derive the mathematical model of the communication network based on the theoretical equation of the communication data transmission line, establish the channel mathematical model according to the characteristic impedance and propagation constant, calculate the capacity of each channel in the channel mathematical model using Shannon's formula, and determine whether the amount of transmitted data is greater than the available channel capacity.

[0157] A key distribution module is used to transmit the public keys of the sender and receiver to the transmission channel center through a simple key distribution scheme, and to transmit the sender's public key to the receiver and the receiver's public key to the sender through a confidential key distribution scheme using the public keys of the sender and receiver.

[0158] The encrypted transmission module is used by the sender to encrypt the plaintext network data to be transmitted multiple times to obtain the sender's digital signature, the first layer of encrypted data, and the second layer of encrypted data. The sender transmits the second layer of encrypted data to the receiver through the transmission channel center. The receiver uses the sender's public key to decrypt the second layer of encrypted data into the sender's digital signature and the first layer of encrypted data. The receiver then determines whether the digital signature is genuine.

[0159] The channel selection module includes:

[0160] The channel model construction unit is used to derive the mathematical model of the communication network based on the theoretical equation of the communication data transmission line, and to establish the channel mathematical model based on the characteristic impedance and propagation constant.

[0161] A channel capacity calculation unit is used to calculate the capacity of each channel in the channel mathematical model using Shannon's formula.

[0162] The transmission channel determination unit is used to determine whether the amount of data to be transmitted is greater than the available capacity of the channel. If so, it outputs that the currently selected channel space cannot support the passage of communication data and selects the next channel. If not, it sets the channel as the transmission channel.

[0163] The key distribution module includes:

[0164] A key uploading unit is used to transmit the public keys of the sender and receiver to the transmission channel center through a simple key distribution scheme.

[0165] A key distribution unit is used to transmit the sender's public key to the receiver and the receiver's public key to the sender using the public keys of the sender and receiver, through a confidential key distribution scheme.

[0166] The encrypted transmission module includes:

[0167] The plaintext encryption unit is used by the sender to encrypt the plaintext network data to be transmitted multiple times to obtain the sender's digital signature, the first layer of data ciphertext, and the second layer of data ciphertext.

[0168] The ciphertext transmission unit is used by the sender to transmit the second-layer data ciphertext to the receiver through the transmission channel center;

[0169] The ciphertext decryption unit is used by the receiver to decrypt the second-layer data ciphertext into the sender's digital signature and the first-layer data ciphertext using the sender's public key.

[0170] The signature verification unit is used by the receiver to determine whether the digital signature is genuine. If it is, the receiver outputs the plaintext of the network data; if not, the receiver outputs that the signature is incorrect and refuses to receive the data.

[0171] Furthermore, this solution also proposes a computer-readable storage medium storing a computer-readable program, which, when invoked, executes the aforementioned network data secure encrypted transmission method.

[0172] It is understandable that the storage medium can be a magnetic medium, such as a floppy disk, hard disk, or magnetic tape; an optical medium, such as a DVD; or a semiconductor medium, such as a solid-state drive (SSD).

[0173] In summary, the advantages of this invention are as follows: by setting up a channel selection module, a key distribution module, and a ciphertext transmission module, the security of network data transmission is ensured through multi-channel transmission and multiple encryption technologies. It can verify the identity of the sender and receiver multiple times, preventing unknown individuals from impersonating the sender or receiver to transmit information during network data transmission, thus ensuring the security of the data transmission process.

[0174] The foregoing has shown and described the basic principles, main features, and advantages of the present invention. Those skilled in the art should understand that the present invention is not limited to the above embodiments. The embodiments and descriptions in the specification are merely principles of the invention. Various changes and modifications can be made to the invention without departing from its spirit and scope, and all such changes and modifications fall within the scope of the claimed invention. The scope of protection claimed by the appended claims and their equivalents is defined.

Claims

1. A method for secure encrypted transmission of network data, characterized in that, include: Based on the theoretical equations of communication data transmission lines, a mathematical model of the communication network is derived, and a channel mathematical model is established based on characteristic impedance and propagation constant. The channel capacity in the channel mathematical model is calculated using Shannon's formula. Determine if the amount of data to be transmitted is greater than the available capacity of the channel. If yes, output that the currently selected channel space cannot support the passage of communication data and select the next channel. If no, set the channel as the transmission channel. A simple key distribution scheme is used to transmit the public keys of the sender and receiver to the transmission channel center. Using the public keys of the sender and receiver, the sender's public key is transmitted to the receiver and the receiver's public key is transmitted to the sender through a secret key distribution scheme. The sender encrypts the plaintext network data to be transmitted multiple times to obtain the sender's digital signature, the first layer of ciphertext, and the second layer of ciphertext. The sender transmits the second-layer encrypted data to the receiver through the transmission channel center; The receiver uses the sender's public key to decrypt the second-layer ciphertext into the sender's digital signature and the first-layer ciphertext. The receiver determines whether the digital signature is genuine. If it is, it outputs the plaintext network data; otherwise, it outputs that the signature is incorrect and refuses to receive the data.

2. The method for secure encrypted transmission of network data according to claim 1, characterized in that, The derivation of the mathematical model of the communication network based on the theoretical equations of the communication data transmission line, and the establishment of the channel mathematical model based on the characteristic impedance and propagation constant, specifically include: Obtain channel-related constants, including series resistance, parallel resistance, channel length and width, and electrical signal frequency; Calculate the characteristic impedance of each channel using the characteristic impedance formula; Calculate the channel propagation constant using the propagation constant formula; Substituting the characteristic impedance and channel propagation constant into the theoretical equations of the communication data transmission line, we obtain the channel mathematical model; The characteristic impedance formula is: In the formula, Z0 is the characteristic impedance of each channel, R0 and G0 are the series resistance and parallel resistance respectively, L0 and C0 are the channel length and channel width respectively, w is the electrical signal frequency, and j is the imaginary unit. The propagation constant formula is: In the formula, γ is the channel propagation constant; The theoretical equation for the communication data transmission line is: In the formula, U(x) is the channel voltage, I(x) is the channel current, A1 is the input data matrix, and A2 is the output data matrix.

3. The method for secure encrypted transmission of network data according to claim 2, characterized in that, The calculation of each channel capacity in the channel mathematical model using Shannon's formula specifically includes: The channel bandwidth can be obtained by subtracting the highest and lowest frequencies that can be passed through the channel. Obtain the average power of the channel signal and the average power of the channel noise; Calculate the capacity of each channel using Shannon's formula; The Shannon formula is as follows: In the formula, C is the channel capacity, B is the channel bandwidth, S is the average power of the channel signal, and N is the average power of the channel noise.

4. The method for secure encrypted transmission of network data according to claim 3, characterized in that, The determination of whether the amount of transmitted data is greater than the available channel capacity specifically includes: Get the current channel status; Determine whether the current channel state is active. If yes, output the available channel capacity as the difference between the current total channel capacity and the occupied capacity. If no, output the available channel capacity as the current total channel capacity. Determine if the amount of data to be transmitted is greater than the available capacity of the channel. If yes, output that the currently selected channel space cannot support the communication data and select the next channel. If no, set the current channel as the transmission channel.

5. A method for secure encrypted transmission of network data according to claim 4, characterized in that, The process of transmitting the public keys of the sender and receiver to the transmission channel center through a simple key distribution scheme specifically includes: The transmission channel center generates a public and private key pair {KUc, KRc}, where KUc is the transmission center's public key and KRc is the transmission channel center's private key. A first message is transmitted to the sender and receiver, the first message including KUc and an identifier IDc of the transmission channel center; The sender and receiver each generate a public and private key pair {KUa, KRa} and {KUb, KRb}, where KUa and KUb are the public keys of the sender and receiver, respectively, and KRa and KRb are the private keys of the sender and receiver, respectively. After encrypting KUa and KUb with KUc from the transmission channel center, they are transmitted to the transmission channel center. The transmission channel center uses KRc to recover KUa and KUb.

6. A method for secure encrypted transmission of network data according to claim 5, characterized in that, The step of using the public keys of the sender and receiver to transmit the sender's public key to the receiver through a secret key distribution scheme, and transmitting the receiver's public key to the sender, specifically includes: The transmission channel center uses the public keys of the sender and receiver to encrypt and transmit a second message to the corresponding target. The second message includes the identifier IDc of the transmission channel center and a current token N1a or N1b that uniquely identifies this interaction. The sender and receiver each send a third message encrypted with KUc to the transmission channel center. The third message contains the current token N1a or N1b of the transmission channel center and the current token N2a or N2b that uniquely identifies this interaction. The sender confirms its identity by decrypting the N2a encrypted with KUa by the transmission channel center; The transmission channel center sends KUb encrypted with KUa to the sender; The sender uses KRa to recover KUb; The receiver verifies its identity by decrypting the N2b encrypted with KUb by the transmission channel center. The transmission channel center sends KUa encrypted with KUb to the receiver; The receiver uses KRb to recover KUa.

7. A method for secure encrypted transmission of network data according to claim 6, characterized in that, The sender performs multiple encryption processes on the plaintext network data to be transmitted, resulting in a sender's digital signature, a first-layer ciphertext, and a second-layer ciphertext, specifically including: The sender's private key is used to encrypt the plaintext network data to be transmitted, resulting in the sender's digital signature. The plaintext network data to be transmitted is encrypted using the recipient's public key to obtain the first layer of ciphertext. The sender's digital signature and the first layer of ciphertext are encrypted using the sender's private key to obtain the second layer of ciphertext.

8. A method for secure encrypted transmission of network data according to claim 7, characterized in that, The recipient's determination of whether the digital signature is genuine specifically includes: The first-layer ciphertext is decrypted into plaintext network data using the receiver's key; Decrypt the sender's digital signature into a signature to be verified using the sender's public key; Determine whether the plaintext network data is the same as the signature to be verified. If it is the same, output the plaintext network data; otherwise, output that the signature is incorrect and refuse to accept it.

9. A network data secure encrypted transmission system, used to implement the network data secure encrypted transmission method as described in any one of claims 1-8, characterized in that, include: The channel selection module is used to derive the mathematical model of the communication network based on the theoretical equation of the communication data transmission line, establish the channel mathematical model according to the characteristic impedance and propagation constant, calculate the capacity of each channel in the channel mathematical model using Shannon's formula, and determine whether the amount of transmitted data is greater than the available channel capacity. A key distribution module is used to transmit the public keys of the sender and receiver to the transmission channel center through a simple key distribution scheme, and to transmit the sender's public key to the receiver and the receiver's public key to the sender through a confidential key distribution scheme using the public keys of the sender and receiver. The encrypted transmission module is used by the sender to encrypt the plaintext network data to be transmitted multiple times to obtain the sender's digital signature, the first layer of encrypted data, and the second layer of encrypted data. The sender transmits the second layer of encrypted data to the receiver through the transmission channel center. The receiver uses the sender's public key to decrypt the second layer of encrypted data into the sender's digital signature and the first layer of encrypted data. The receiver then determines whether the digital signature is genuine.

10. A network data secure encrypted transmission system according to claim 9, characterized in that, The channel selection module includes: The channel model construction unit is used to derive the mathematical model of the communication network based on the theoretical equation of the communication data transmission line, and to establish the channel mathematical model based on the characteristic impedance and propagation constant. A channel capacity calculation unit is used to calculate the capacity of each channel in the channel mathematical model using Shannon's formula. The transmission channel determination unit is used to determine whether the amount of data to be transmitted is greater than the available capacity of the channel. If so, it outputs that the currently selected channel space cannot support the passage of communication data and selects the next channel. If not, it sets the channel as the transmission channel. The key distribution module includes: A key uploading unit is used to transmit the public keys of the sender and receiver to the transmission channel center through a simple key distribution scheme. A key distribution unit is used to transmit the sender's public key to the receiver and the receiver's public key to the sender using the public keys of the sender and receiver, through a confidential key distribution scheme. The encrypted transmission module includes: The plaintext encryption unit is used by the sender to encrypt the plaintext network data to be transmitted multiple times to obtain the sender's digital signature, the first layer of data ciphertext, and the second layer of data ciphertext. The ciphertext transmission unit is used by the sender to transmit the second-layer data ciphertext to the receiver through the transmission channel center; The ciphertext decryption unit is used by the receiver to decrypt the second-layer data ciphertext into the sender's digital signature and the first-layer data ciphertext using the sender's public key. The signature verification unit is used by the receiver to determine whether the digital signature is genuine. If it is, the receiver outputs the plaintext of the network data; if not, the receiver outputs that the signature is incorrect and refuses to receive the data.

Images