Computer data secure transmission method

Abstract

The invention discloses a computer data secure transmission method which specifically comprises the following steps: A1, firstly, connecting a secure transmitter to a host of an internal computer, and fixedly installing a terminal on the host of the internal computer through an encryption machine; a2, integrating the data to be transmitted through the host of the internal computer, packaging and transmitting the integrated data into an encryption machine for multiple encryption and generation of dynamic identity verification, and providing multiple security assurance for data transmission by setting a multi-factor encryption program through combination of symmetric encryption and asymmetric encryption, according to the method, data can be ensured not to be eavesdropped, tampered or leaked in a transmission process, so that the security of data transmission is greatly improved, a more reliable and stable encryption system can be constructed through various encryption technologies, the system can resist various network attacks and threats such as man-in-the-middle attacks and replay attacks, and the security of data transmission is improved. And continuity and stability of data transmission are ensured.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a computer data security transmission method. Background Art

[0002] Computer storage is a virtual space, and it involves many security issues during information transmission. The existence of these security issues has a very adverse impact on the security of computer information transmission. In serious cases, it may even cause devastating damage to the stored information, causing serious damage to the economic property and privacy security of enterprises or individuals.

[0003] According to the patent document, the name is: A method for secure transmission of computer data (patent publication number: CN118606973A, patent publication date: 2024-09-06). By adding a security transmitter to detect and protect the data sent out by the company's internal computers, a host is used to connect all the company's computers, and the security transmitter is connected to the host. In this way, all data sent out by the company's internal computers must first pass the host's detection, and the host sets the type, size and time of data allowed to be sent out. When the data sent out does not pass the detection of the security transmitter, the security transmitter actively cuts off the data transmission in a physical manner and sends a warning to the outside, thereby effectively ensuring the security of the data to avoid leakage, and the physical cutting method of the security transmitter can prevent itself from being attacked by the network, thereby further ensuring the security of data transmission, achieving the security of data transmission from the company's internal computers, and effectively preventing employees from leaking information and causing losses to the company.

[0004] Based on the description in the above documents, the existing computer data security transmission method still has the following problems. With the rapid development of computer network technology, the secure transmission of data has become an increasingly important issue. Traditional data transmission methods often rely on a single encryption method or identity authentication method, which limits the security of data transmission to a certain extent. To this end, the present invention provides a computer data security transmission method. Summary of the invention

[0005] In view of the deficiencies in the prior art, the present invention provides a method for securely transmitting computer data, which solves the problem that with the rapid development of computer network technology, secure data transmission has become an increasingly important issue. Traditional data transmission methods often rely on a single encryption method or identity authentication method, which to a certain extent limits the security of data transmission.

[0006] To achieve the above objectives, the present invention is implemented through the following technical solutions: A computer data security transmission method, including an internal computer and an external computer, wherein the internal computer includes a host, and the host is connected to a terminal and an encryption machine, specifically comprising the following steps:

[0007] A1. First, connect the secure transmitter to the host of the internal computer, and the terminal is fixedly installed on the host of the internal computer through the encryption machine;

[0008] A2. The data to be transmitted is then integrated through the host of the internal computer, and the integrated data is packaged and transmitted to the encryption machine for multiple encryption and generation of dynamic identity authentication;

[0009] A3. After the data is processed by the encryption machine, the sender undergoes a dynamic identity authentication. After the authentication is passed, the data is transmitted to the external computer through the terminal, and the receiving person decrypts the data using the key and dynamic authentication.

[0010] Preferably, the terminal in A1 is a data transmitter for sending data, and the internal computer is a data receiver for receiving data.

[0011] Preferably, A2 includes a multi-factor encryption program and a dynamic identity authentication program, the multi-factor encryption program encrypts data by using multiple encryption methods, and the dynamic identity authentication program verifies the identities of the sender and the receiver by using multi-factor identity authentication.

[0012] Preferably, the multi-factor encryption program includes a symmetric encryption algorithm and an asymmetric encryption algorithm, and introduces quantum encryption technology as an optional encryption means to provide an additional security layer to enhance the confidentiality of data transmission.

[0013] Preferably, the symmetric encryption algorithm adopts SM4 as the encryption algorithm, and adopts the cipher block chaining mode to organize the encryption process of the plaintext block.

[0014] Preferably, the asymmetric encryption algorithm uses RSA as the encryption algorithm, and adopts public key encryption and private key decryption, and by combining symmetric encryption and asymmetric encryption, asymmetric encryption is used to protect the key of symmetric encryption.

[0015] Preferably, the core of the quantum encryption technology is the quantum key distribution protocol, which generates secure keys by transmitting random quantum states through quantum channels, realizes real-time symmetric key distribution and update, and ensures the real-time and validity of symmetric keys.

[0016] Preferably, the dynamic identity authentication program implements multi-factor identity authentication, including passwords, mobile phone verification codes, dynamic passwords, and biometrics, and before each data transmission, identity authentication is performed through a combination of passwords, mobile phone verification codes, dynamic passwords, and biometrics to ensure the authenticity and credibility of both communicating parties, and blockchain technology is used to record historical information on identity authentication for traceability and verification when necessary.

[0017] Beneficial Effects

[0018] The present invention provides a computer data security transmission method. Compared with the prior art, it has the following advantages:

[0019] Beneficial effects:

[0020] 1. The method for secure transmission of computer data is provided with a multi-factor encryption program. The multi-factor encryption program provides multiple security guarantees for data transmission by combining symmetric encryption and asymmetric encryption, which can ensure that data is not eavesdropped, tampered with or leaked during transmission, thereby greatly improving the security of data transmission. Moreover, through a variety of encryption technologies, a more reliable and stable encryption system can be constructed. This system can resist various network attacks and threats, such as man-in-the-middle attacks, replay attacks, etc., to ensure the continuity and stability of data transmission.

[0021] 2. The method for secure transmission of computer data uses asymmetric encryption to protect symmetric encryption keys. When asymmetric encryption is used to protect symmetric encryption keys, the symmetric encryption keys are encrypted by the asymmetric encryption public key and then securely transmitted to the recipient. The recipient uses his or her own private key to decrypt the symmetric encryption key, and then uses the symmetric encryption algorithm to encrypt or decrypt the data. This approach effectively prevents the symmetric encryption key from being intercepted and cracked during transmission, thereby enhancing the security of the key.

[0022] 3. This method for secure transmission of computer data uses a dynamic identity authentication program. The dynamic identity authentication program introduces multiple identity authentication factors, such as passwords, mobile phone verification codes, dynamic passwords, biometrics, etc., which greatly enhances the security of the system. Identity authentication is performed before each data transmission to ensure the authenticity and credibility of both communicating parties. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] Figure 1 is a flow chart of the transmission method of the present invention;

[0024] Figure 2 It is a transmission flow chart of the present invention;

[0025] Figure 3 The internal diagram of the encryption machine of the present invention;

[0026] Figure 4It is the internal diagram of the multi-factor encryption program of the present invention;

[0027] Figure 5 This is the internal diagram of the dynamic identity authentication of the present invention. DETAILED DESCRIPTION

[0028] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0029] See also Figure 1 , the present invention provides a technical solution:

[0030] A computer data security transmission method includes an internal computer and an external computer, wherein the internal computer includes a host computer, and the host computer is connected to a terminal and an encryption machine, and specifically includes the following steps:

[0031] A1. First, connect the secure transmitter to the host of the internal computer, and the terminal is fixedly installed on the host of the internal computer through the encryption machine;

[0032] A2. The data to be transmitted is then integrated through the host of the internal computer, and the integrated data is packaged and transmitted to the encryption machine for multiple encryption and generation of dynamic identity authentication;

[0033] A3. After the data is processed by the encryption machine, the sender undergoes a dynamic identity authentication. After the authentication is passed, the data is transmitted to the external computer through the terminal, and the receiving person decrypts the data using the key and dynamic authentication.

[0034] In the embodiment of the present invention, the terminal in A1 is a data transmitter for sending data, and the internal computer is a data receiver for receiving data.

[0035] In the embodiment of the present invention, A2 includes a multi-factor encryption program and a dynamic identity authentication program. The multi-factor encryption program encrypts data using multiple encryption methods, and the dynamic identity authentication program verifies the identities of the sender and the receiver through multi-factor identity authentication.

[0036] By setting up a multi-factor encryption program, the multi-factor encryption program provides multiple security protections for data transmission by combining symmetric encryption and asymmetric encryption, which can ensure that data is not eavesdropped, tampered with or leaked during transmission, thereby greatly improving the security of data transmission. In addition, through a variety of encryption technologies, a more reliable and stable encryption system can be built. This system can resist various network attacks and threats, such as man-in-the-middle attacks, replay attacks, etc., to ensure the continuity and stability of data transmission.

[0037] In the embodiment of the present invention, the multi-factor encryption program includes a symmetric encryption algorithm and an asymmetric encryption algorithm, and introduces quantum encryption technology as an optional encryption method to provide an additional security layer to enhance the confidentiality of data transmission.

[0038] A symmetric encryption algorithm is used to perform preliminary encryption on the transmitted data to ensure the confidentiality of the data during transmission, and an asymmetric encryption algorithm is used to encrypt the symmetric encryption key to ensure the security of the key during transmission.

[0039] In the embodiment of the present invention, the symmetric encryption algorithm adopts SM4 as the encryption algorithm, and adopts the cipher block chaining mode to organize the encryption process of the plaintext block.

[0040] SM4 is a block cipher algorithm, which is a symmetric cipher, that is, the same key is used for encryption and decryption.

[0041] Symmetric encryption algorithms refer to encryption and decryption algorithms that use the same key or keys that can be simply deduced from each other. During the encryption process, the data sender processes the plaintext (original data) and the encryption key together through a special encryption algorithm to transform it into a complex encrypted ciphertext and send it out. After receiving the ciphertext, the recipient uses the same key and the inverse algorithm of the corresponding algorithm to decrypt the ciphertext to restore it to readable plaintext.

[0042] Cipher block chaining mode: Before the plaintext is encrypted, it must be XORed with the previous ciphertext and then encrypted. Therefore, as long as different initial vectors are selected, the same ciphertext will form different ciphertexts after encryption. This is the most widely used mode at present.

[0043] In the embodiment of the present invention, the asymmetric encryption algorithm adopts RSA as the encryption algorithm, and adopts public key encryption and private key decryption, and by combining symmetric encryption and asymmetric encryption, asymmetric encryption is used to protect the key of symmetric encryption.

[0044] The RSA algorithm is one of the earliest widely used asymmetric encryption algorithms. It uses the difficulty of prime number decomposition to achieve encryption and decryption by generating public keys and private keys.

[0045] Asymmetric encryption algorithms use a pair of mathematically related keys, namely public key and private key, to perform data encryption and decryption operations respectively. The public key is public and can be freely distributed to others; while the private key is confidential and only known to the holder of the private key. If data is encrypted with the public key, it can only be decrypted with the corresponding private key.

[0046] Since the public key is public and the private key is confidential, even if the public key is leaked, the data cannot be decrypted or a valid signature cannot be forged. This feature makes asymmetric encryption algorithms highly secure in protecting the confidentiality, integrity and authenticity of the sender's identity of the data.

[0047] Symmetric encryption keys are protected by asymmetric encryption. When asymmetric encryption is used to protect symmetric encryption keys, the symmetric encryption keys are encrypted by the asymmetric encryption public key and then securely transmitted to the recipient. The recipient uses his or her own private key to decrypt the symmetric encryption key, and then uses the symmetric encryption algorithm to encrypt or decrypt the data. This approach effectively prevents the symmetric encryption key from being intercepted and cracked during transmission, thereby enhancing the security of the key.

[0048] In the embodiment of the present invention, the core of the quantum encryption technology is the quantum key distribution protocol, which generates secure keys by transmitting random quantum states through quantum channels, realizes real-time symmetric key distribution and update, and ensures the real-time and validity of symmetric keys.

[0049] Quantum encryption technology is an encryption method based on the principles of quantum mechanics. It uses the non-cloning, randomness and fidelity of quantum states to ensure the security of information.

[0050] Non-cloning: According to the principles of quantum mechanics, quantum states cannot be copied. This means that hackers cannot copy the transmitted quantum state and thus cannot steal the key. This feature provides a solid theoretical foundation for quantum encryption;

[0051] Randomness: The measurement results of quantum states are random and unpredictable. This makes it impossible for hackers to obtain information by intercepting and measuring the transmitted quantum states because they cannot predict the measurement results. This randomness enhances the security of quantum encryption;

[0052] Fidelity: During the transmission process, the quantum state will not be disturbed or lost. Even if hackers try to interfere with or intercept the quantum state during transmission, the transmitted information will not be affected. This feature ensures the reliability of quantum encryption.

[0053] Quantum encryption technology utilizes the non-cloning, randomness and fidelity of quantum states. Its security is much higher than traditional encryption methods. Hackers cannot steal keys by copying, predicting or interfering with quantum states, thus ensuring the security of information.

[0054] In an embodiment of the present invention, the dynamic identity authentication program implements multi-factor identity authentication, including passwords, mobile phone verification codes, dynamic passwords, and biometrics. Before each data transmission, identity authentication is performed through a combination of passwords, mobile phone verification codes, dynamic passwords, and biometrics to ensure the authenticity and credibility of both communicating parties, and blockchain technology is used to record historical information on identity authentication for traceability and verification when necessary.

[0055] The dynamic identity authentication program that is set up greatly enhances the security of the system by introducing multiple identity authentication factors, such as passwords, mobile phone verification codes, dynamic passwords, biometrics, etc., and performs identity authentication before each data transmission to ensure the authenticity and credibility of both communicating parties.

[0056] In summary, first connect the secure transmitter to the host of the internal computer, and the terminal is fixedly installed on the host of the internal computer through the encryption machine. Then, the data to be transmitted is integrated through the host of the internal computer. The integrated data is packaged and transmitted to the encryption machine for multiple encryption and dynamic identity authentication. After the data is processed by the encryption machine, the sender performs a dynamic identity authentication. After the verification is passed, the data is transmitted to the external computer through the terminal, and the receiving person decrypts the data through the key and dynamic verification.

[0057] Meanwhile, the contents not described in detail in this specification belong to the prior art known to those skilled in the art.

[0058] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0059] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A computer data security transmission method, comprising an internal computer and an external computer, wherein the internal computer comprises a host computer, the host computer is connected to a terminal and an encryption machine, and is characterized in that: The specific steps include: A1. First, connect the secure transmitter to the host of the internal computer, and the terminal is fixedly installed on the host of the internal computer through the encryption machine; A2. The data to be transmitted is then integrated through the host of the internal computer, and the integrated data is packaged and transmitted to the encryption machine for multiple encryption and generation of dynamic identity authentication; A3. After the data is processed by the encryption machine, the sender undergoes a dynamic identity authentication. After the authentication is passed, the data is transmitted to the external computer through the terminal, and the receiving person decrypts the data using the key and dynamic authentication.

2. A computer data secure transmission method according to claim 1, characterized in that: The terminal in A1 is a data transmitter for sending data, and the internal computer is a data receiver for receiving data.

3. A computer data secure transmission method according to claim 1, characterized in that: A2 includes a multi-factor encryption program and a dynamic identity authentication program. The multi-factor encryption program encrypts data using multiple encryption methods, and the dynamic identity authentication program verifies the identities of the sender and the receiver through multi-factor identity authentication.

4. A computer data secure transmission method according to claim 3, characterized in that: The multi-factor encryption program includes symmetric encryption algorithms and asymmetric encryption algorithms, and introduces quantum encryption technology as an optional encryption means to provide an additional security layer to enhance the confidentiality of data transmission.

5. A computer data secure transmission method according to claim 4, characterized in that: The symmetric encryption algorithm adopts SM4 as the encryption algorithm, and adopts the cipher block chaining mode to organize the encryption process of the plaintext block.

6. A computer data secure transmission method according to claim 4, characterized in that: The asymmetric encryption algorithm adopts RSA as the encryption algorithm, and adopts public key encryption and private key decryption, and uses asymmetric encryption to protect the key of symmetric encryption by combining symmetric encryption and asymmetric encryption.

7. A computer data secure transmission method according to claim 4, characterized in that: The core of the quantum encryption technology is the quantum key distribution protocol, which generates secure keys by transmitting random quantum states through quantum channels, realizes real-time symmetric key distribution and update, and ensures the real-time and validity of symmetric keys.

8. A computer data secure transmission method according to claim 3, characterized in that: The dynamic identity authentication program implements multi-factor identity authentication, including passwords, mobile phone verification codes, dynamic passwords, and biometrics. Before each data transmission, identity authentication is performed through a combination of passwords, mobile phone verification codes, dynamic passwords, and biometrics to ensure the authenticity and credibility of both communicating parties. Blockchain technology is used to record historical identity authentication information for traceability and verification when necessary.

Images