Multi-level encryption method and system under 5G network

Abstract

The invention discloses a multi-level encryption method and system under a 5G network, and relates to the technical field of digital information transmission security. Comprising the following steps: manually setting a replacement code based on the code volume of transmission data, transferring and compressing data items matched with the content of the replacement code in the transmission data by the replacement code, generating a mark suffix, generating a first-level data arrangement set by the transmission data according to the replacement code and the mark suffix, and obtaining a mark stamp at the position of the transmission data based on the replacement code, the mark stamps act on the first-level data arrangement set and generate a second-level data arrangement set, and the second-level data arrangement set generates a final-level data arrangement set according to encryption logic. According to the method, the replacement code is set by analyzing the volume of the transmission data, so that the replacement code compresses the volume of the transmission data at the initial end of the uplink direction of the 5G network transmission channel, and the situation that the transmission efficiency in the 5G network channel is reduced due to the fact that the volume of the transmission data is too large in the encryption process is relieved to a certain extent.

Description

Technical Field

[0001] The present invention relates to the field of digital information transmission security technology, and specifically to a multi-level encryption method and system under a 5G network. Background Art

[0002] With the rapid development and popularization of 5G technology, the means of network attacks are also constantly upgrading. For 5G networks, the high speed and low latency characteristics of 5G networks make the response time of network attacks shorter. Attackers can use this feature to launch faster and more accurate attacks, thereby quickly obtaining communication data. Therefore, a new multi-level encryption method and system under 5G networks is needed.

[0003] After searching, the Chinese invention patent with publication number "CN110691074A" discloses "an IPv6 data encryption method and an IPv6 data decryption method". This application encrypts the payload without changing the frame header structure of the network data frame and affecting network performance. The structure of the encrypted network data frame is exactly the same as that of the network data frame before encryption. It is impossible to distinguish between the encrypted network data frame and the network data frame before encryption from the outside. It is not easy to be attacked and has stronger network security.

[0004] In addition, the Chinese invention patent with publication number "CN117955712A" discloses "a communication information security risk early warning control method and system based on big data". This application greatly improves the ability to identify and prevent various network threats (such as phishing attacks, malware, and internal threats) through real-time monitoring, anomaly detection, and in-depth analysis. The automated response mechanism and dynamic access control strategy effectively reduce the exploitation of security vulnerabilities and data leakage incidents.

[0005] The above two public methods and similar methods encrypt data by encrypting the payload of the data packet while keeping the header structure of the data packet unchanged. Although this improves the security of data transmission to a certain extent, in actual scenarios, the payload in the transmitted data will become more and more as the volume of transmitted data increases. Therefore, the encryption process will reduce the data transmission efficiency in the 5G network channel. Summary of the invention

[0006] The purpose of the present invention is to provide a multi-level encryption method and system under a 5G network to solve the problems raised in the above-mentioned background technology.

[0007] To achieve the above object, the present invention provides the following technical solutions: First, a multi-level encryption method for 5G networks is proposed, including: Artificially set replacement codes based on the code volume of the transmitted data; Replace the data items in the code transfer compression transmission data that match the replacement code content, and generate a tag suffix; The transmission data generates a first-level data arrangement set according to the replacement code and the tag suffix; Obtaining a marking stamp at a location of the transmitted data based on the replacement code; The marking stamp acts on the primary data arrangement set and generates a secondary data arrangement set; The secondary data arrangement set generates a final data arrangement set according to the encryption logic, and the final data arrangement set has a replacement stamp formed in the process of scrambling and reorganizing the secondary data arrangement set; Get the mark stamp value and the replacement stamp value and convert them into a verification key. The verification key is used to restore the transmitted data.

[0008] As a further preferred embodiment of the present technical solution, the encoding information of the transmission data and the encoding information of the replacement encoding are respectively obtained; Marking the coded items in the transmitted data that are consistent with the replacement coded content; Dividing the transmission data into a plurality of data sets according to the marked coding items; Packing and compressing the data sets corresponding to the marked coding items; Based on the number of data sets, generate corresponding tag suffixes; Get the type characteristics of the transmitted data; Based on type characteristics, the data reading direction is limited; Obtaining a primary data series set, where the primary data series set is a data set formed by removing data sets corresponding to marked coding items from multiple data sets and integrating them; sorting the primary data sequence set according to the data reading direction; Combined with the tag suffix, a first-level data sequence set is generated.

[0009] As a further preferred embodiment of the present technical solution, the method for obtaining the marking stamp includes: Obtain the arrangement position of the coding items in the transmission data that are identical to the replacement coding content; Obtaining a coding sequence of the original transmission data based on the arrangement position of the coding items; Obtaining the type characteristics of the transmitted data; Limit the data reading direction based on the type characteristics; The marker stamp is obtained based on the data reading direction and the encoding sequence of the original transmitted data.

[0010] As a further preferred embodiment of the present technical solution, the encryption logic includes: Obtaining a data sequence of a secondary data arrangement set; Construct a pseudo-random sequence generation formula based on the number of data sequences; The pseudo-random sequence generation formula generates a pseudo-random number sequence based on the numerical value of the data sequence, converts the numerical value system of the pseudo-random number sequence, and gives the data item number to replace the data content of the secondary data arrangement set.

[0011] As a further preferred embodiment of the present technical solution, the pseudo-random sequence generation formula is: The pseudo-random sequence generation formula is: , the X N is the number of N-position items in the data sequence, K1 is a multiplication constant, which is artificially established to make the generated sequence uniform by multiplication to avoid generating a large number of identical numbers in the generation cycle, K2 is an artificially set addition constant, which is used to make the generated sequence unpredictable, 2 32 The modulus represents the maximum value in a 32-bit computer system and is used to enable the generation of pseudo-random number sequences to be cyclically generated in a 32-bit data structure.

[0012] As a further preferred embodiment of the present technical solution, the method for generating the replacement stamp includes: Get the item value of the data sequence in the secondary data arrangement set; Generate a replacement stamp value sequence based on the item value; Move the replacement stamp value sequence to a position outside the final data arrangement set close to the data reading direction.

[0013] As a further preferred embodiment of the present technical solution, the method for generating the verification key includes: Construct a dynamic key virtual cabinet that changes based on a time series. The dynamic key virtual cabinet stores multiple dynamic keys. Each dynamic key corresponds to a different numerical combination formula. The numerical combination formula is used to combine the marking stamp value and the replacement stamp value. Select dynamic keys based on encryption requirements; Based on the numerical value corresponding to the dynamic key, the marking stamp value and the replacement stamp value are combined according to the formula to generate the final verification key.

[0014] As a further preferred embodiment of the present technical solution, the dynamic key virtual cabinet includes: Multiple timestamps, each timestamp corresponds to a time interval and a numerical value combined with a formula; Establishing a cycle period based on the number of timestamps; Adjust the value based on the cycle period and combine it with the constant value in the formula.

[0015] In the second aspect, in order to improve the above technical solution, the present invention also proposes a multi-level encryption system under a 5G network. It should be supplemented that a multi-level encryption system under a 5G network uses the above multi-level encryption method under a 5G network, and includes: A data encryption module, used to perform encryption operations on transmitted data; A marking stamp and replacement stamp generating module, used to generate marking stamps and replacement stamps for identifying and verifying data integrity; A derivative replacement module is used to replace the content of the secondary data arrangement set to increase the complexity of the data; A verification key generation module, used to generate a verification key for restoring transmission data; The auxiliary module is used to provide auxiliary functions in the data encryption and decryption process, including type feature recognition, data reading direction limitation and data integrity verification.

[0016] As a further preferred embodiment of the present technical solution, the data encryption module includes: A replacement code unit, which is used to manually set a replacement code and apply it to the transmitted data to replace the matching data item; A data compression and packaging unit, used to retrieve data items matching the replacement coded content in the transmission data, and perform compression and packaging processing; A marking suffix generating unit, used for marking suffixes on data generated by the data compression and packaging unit; A data arrangement set generating unit, used for replacing codes and marking suffixes to generate a primary data arrangement set, and further generating secondary and final data arrangement sets; The marking stamp and replacement stamp generating module comprises: A marker generating unit, used for obtaining the position of the replacement code in the transmission data and generating a corresponding marker; A replacement stamp generation unit, used to identify the final arrangement order of data; The derivative replacement module includes: A pseudo-random sequence generation unit generates a pseudo-random number sequence based on the number of data sequences; A data reorganization unit replaces the data content of the secondary data arrangement set according to the pseudo-random number sequence to generate a final data arrangement set; The verification key generation module comprises: A dynamic key virtual cabinet unit is used to store multiple dynamic keys, each key corresponding to a different numerical value combination formula; A numerical combination formula selection unit is used to select a corresponding numerical combination formula according to encryption requirements; A verification key generation unit, used to generate a final verification key by combining the marking stamp value and the replacement stamp value; The auxiliary module comprises: A type feature identification unit, used to identify the type features of the transmitted data; A data reading direction limiting unit, used to limit the data reading direction according to the type characteristics of the data; The data integrity verification unit is used to verify the integrity of data during data transmission and reception.

[0017] Compared with the prior art, the present invention has the following beneficial effects: The multi-level encryption method and system under the 5G network sets the replacement code by analyzing the volume of the transmitted data, so that the replacement code compresses the volume of the transmitted data at the initial end of the uplink direction of the 5G network transmission channel, which alleviates the situation that the transmission efficiency in the 5G network channel is reduced due to the excessive volume of the transmitted data during the encryption process to a certain extent; In addition, encryption logic is used to change the transmission content of compressed transmission data based on the transmission channel of the 5G network, and the transmission data is reorganized and decompressed at the end of the uplink direction of the 5G network transmission channel. While ensuring the complete transmission of transmission data from the 5G user equipment to the 5G terminal equipment, the security of data transmission is also improved. Furthermore, by obtaining the mark stamp value and the replacement stamp value in the replacement process and the scrambling process to generate the verification key, the complexity and unpredictability of data encryption are further enhanced, thereby effectively preventing the data from being illegally intercepted and tampered with during transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 It is a diagram of the steps of the method of the present invention; Figure 2 It is an operation logic diagram of the method of the present invention; Figure 3 It is the operation logic diagram of the dynamic key virtual cabinet of the present invention; Figure 4 It is a module composition diagram of the system of the present invention. DETAILED DESCRIPTION

[0019] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0020] Before understanding the specific implementation method proposed in the present invention, it should be clear that in the 5G network transmission channel, the initial end in the uplink direction refers to the 5G user equipment, and the end in the uplink direction refers to the 5G terminal equipment. In addition, it should be added that since the bottom layer of the data in the 5G network is generally a binary combination of "0" and "1", the replacement coding content of the present invention is specifically a combination of the bottom layer "0" and "1" of the replacement data to ensure the security of the data during transmission. Specifically, in the actual solution, the present invention proposes a multi-level encryption method under the 5G network, such as Figure 1 It can be seen that the technical solution proposed by the present invention includes: step S100 to step S700.

[0021] Specifically, step S100: manually setting replacement codes based on the code volume of the transmitted data.

[0022] It should be clear that in the present invention, step S100 is used to initialize the encryption process to ensure that each data packet has undergone a preset coding replacement before entering the 5G network.

[0023] Step S200: replace the data items in the code transfer compressed transmission data that match the replacement code content, and generate a tag suffix.

[0024] It should be noted that, in the present invention, step S200 is used to replace the "0" and "1" in the data item according to the replacement code in step S100 to achieve the purpose of compressing data. Specifically, in the specific implementation process of step S200, refer to Figure 2 It can be seen that when the coding volume of the transmission data input by the 5G user equipment is "0110101110010", the replacement code is "010". At this time, the replacement code is "010". Therefore, the original data "0110101110010" becomes "0111110" after replacement coding processing.

[0025] Step S300: The transmission data generates a primary data arrangement set according to the replacement code and the mark suffix.

[0026] It should be clear that in the present invention, step S300 is used to generate a first-level data arrangement set to facilitate subsequent data encryption processing. During step S300, the generation of the first-level data arrangement set is based on replacement coding and marking suffixes, ensuring the security and unpredictability of data during transmission. Specifically, the method for generating the first-level data arrangement set in step S300 includes: steps S301-S310.

[0027] Step S301: respectively obtain the encoding information of the transmission data and the encoding information of the replacement encoding.

[0028] It should be clear that in the present invention, step S301 is used to obtain detailed information of the transmission data and the replacement code to facilitate the processing of subsequent steps.

[0029] Step S302: Mark the coding items in the transmission data that are consistent with the replacement coding content.

[0030] Step S303: Divide the transmission data into a plurality of data sets according to the marked coding items.

[0031] It should be clear that in the present invention, step S303 is used to divide the transmission data into multiple data sets to facilitate the next encryption operation. Specifically, during the segmentation process, each data set contains a part of the original data, and each data set is accompanied by a marking suffix, which ensures that during the data transmission process, even if the data is intercepted, the original data content cannot be directly restored.

[0032] Step S304: Packing and compressing the data set corresponding to the marked coding item.

[0033] Step S305: Generate corresponding tag suffixes based on the number of data sets.

[0034] It should be clear that reference Figure 2 It can be seen that in step S304 and step S305 of the present invention, the tag suffix obtained is "010 2 ", where "010" is the encoded content after packaging and compression, and the superscript "2" is the number of occurrences.

[0035] Step S306: Obtain the type characteristics of the transmission data.

[0036] Step S307: Based on the type characteristics, limit the data reading direction.

[0037] It should be clear that in the present invention, step S306 and step S307 are used to determine the reading order of data to ensure the correctness and security of data during transmission. Specifically, in step S307, the limitation of data reading direction is based on the type characteristics of the transmitted data. For example, for text data, the reading direction may be from left to right, while for image data, different reading orders such as from top to bottom or from bottom to top may be required. Such limitations help to correctly restore data at the data receiving end, while preventing the data from being misinterpreted or tampered with during transmission.

[0038] Step S308: Acquire a primary data sequence set.

[0039] It should be added that in the present invention, the primary data sequence set is a data set formed by removing the data sets corresponding to the marked coding items from multiple data sets and integrating them. Figure 2 The content is the data set after removing the mark suffix from the first-level data series set.

[0040] Step S309: sorting the primary data sequence set according to the data reading direction.

[0041] Step S310: Combine the tag suffix to generate a first-level data sequence set.

[0042] It should be clear that in the present invention, the generation of the first-level data arrangement set is based on the encoding information of the transmitted data, the encoding information of the replacement code and the marking suffix, which makes it difficult for an unauthorized third party to restore the original data content even if the data is intercepted during transmission.

[0043] Step S400: Obtain a marking stamp at a location of the transmitted data based on the replacement code.

[0044] It should be noted that the method for obtaining the marking stamp in step S400 of the present invention includes: steps S401 to S405.

[0045] Step S401: Obtain the arrangement position of the coding items in the transmission data that are the same as the replacement coding content.

[0046] Step S402: Obtain the coding sequence of the original transmission data based on the coding item arrangement position.

[0047] Step S403: Acquire the type characteristics of the transmission data.

[0048] Step S404: limiting the data reading direction based on the category characteristics.

[0049] Step S405: Obtain a marking stamp based on the data reading direction and the encoding sequence of the original transmission data.

[0050] It should be noted that, in the present invention, the purpose of obtaining the marking stamp is to provide an additional security layer in the data transmission process to ensure the integrity of the data and the verifiability of the source.

[0051] Step S500: The mark stamp acts on the primary data arrangement set and generates a secondary data arrangement set.

[0052] It should be clear that in the present invention, step S500 is used to combine the mark stamp with the primary data arrangement set to further enhance the security of the data. In step S500, the mark stamp is bound to the data item in the primary data arrangement set as additional information of the data, thereby providing an additional verification mechanism during the data transmission process. Specifically, step S500 includes the following operations: step S501-step S502.

[0053] Step S501: Perform a mark stamp addition operation on each data item in the primary data arrangement set. This step ensures that each data item carries mark stamp information, providing a basis for subsequent data verification.

[0054] Step S502: Generate a secondary data arrangement set. After adding the mark stamp, the data items in the primary data arrangement set are rearranged and combined to form a secondary data arrangement set. Step S502 not only increases the complexity of the data, but also improves the security of the data during transmission.

[0055] Step S600: The secondary data arrangement set generates a final data arrangement set according to the encryption logic.

[0056] It should be supplemented that in step S600, the secondary data arrangement set generates a final data arrangement set according to the encryption logic. In addition, the final data arrangement set is provided with a replacement stamp relative to the secondary data arrangement set during the shuffling and reorganization process.

[0057] It should be supplemented that, in step S600, the encryption logic includes: step S601 to step S603.

[0058] Step S601: Acquire the data sequence of the secondary data arrangement set.

[0059] Step S602: Construct a pseudo-random sequence generation formula based on the number of data sequences.

[0060] It should be noted that the pseudo-random sequence generation formula is: , X N is the number of N-position items in the data sequence, K1 is a multiplication constant, which is artificially established to make the generated sequence uniform by multiplication to avoid generating a large number of identical numbers in the generation cycle, K2 is an artificially set addition constant, which is used to make the generated sequence unpredictable, 2 32 The modulus represents the maximum value in a 32-bit computer system and is used to enable the generation of pseudo-random number sequences to be cyclically generated in a 32-bit data structure.

[0061] Step S603: The pseudo-random sequence generation formula generates a pseudo-random number sequence based on the numerical value of the data sequence, converts the numerical value system of the pseudo-random number sequence, and gives the data item number to replace the data content of the secondary data arrangement set.

[0062] It should be further explained that when the pseudo-random sequence generation formula is actually running, when the data sequence of the secondary data arrangement set is "3-10,0111110-010 2 ", since the number of items of "0111110" is 7, the random value is X N The value of is 7. At this time, K1=50, K2=13 are assigned artificially, and XN =7, K1=50, K2=13 are substituted into the pseudo-random sequence generation formula to obtain Y=(350+13)mod2 32 =131. Since the data system at this time is different from that in the original data sequence, when the actual conversion is performed, the binary value of the 131 value is 10000011. It should be noted that the randomly generated numerical items at this time are more than the data sequence items of the secondary data arrangement set. Therefore, in order to ensure the consistency of the data and the correct generation of the pseudo-random sequence, the generated binary value needs to be truncated in actual use. The specific operation is to take the first N bits of the binary value, where N is the number of items in the data sequence of the secondary data arrangement set. In this example, since the data sequence of the secondary data arrangement set is "3-10,10000011-010 2 ", the number of items is 7, so we need to truncate the first 7 bits of the binary value, that is, take the first 7 bits of 10000011 to get 1000001, and the data sequence of the secondary data arrangement set finally obtained is "3-10,1000001-010 2 ”.

[0063] Step S700: Obtain the marking stamp value and the replacement stamp value, and convert them into a verification key.

[0064] It should be supplemented that the method for obtaining the replacement stamp in step S700 includes: step S710 to step S730.

[0065] Specifically, step S710: obtaining the item values ​​of the data sequence in the secondary data arrangement set.

[0066] Step S720: Generate a replacement stamp value sequence based on the item value.

[0067] Step S730: Move the replacement stamp value sequence to a position outside the final data arrangement set based on the data reading direction.

[0068] It should be added that, since the number of items in "1000001" is 7, the item value is "7", so the final data arrangement set is specifically "3-10,1000001-010 2 -7”.

[0069] It should be understood that in step S700 the verification key is used to restore the transmitted data.

[0070] Specifically, the method for generating the verification key in step S700 includes: step S701 to step S703.

[0071] Step S701: construct a dynamic key virtual cabinet that changes based on a time series.

[0072] refer to Figure 3 It can be seen that the dynamic key virtual cabinet in step S701 stores multiple dynamic keys, and each dynamic key corresponds to a different numerical combination formula, which is used to combine the marking stamp value and the replacement stamp value.

[0073] Specifically, refer to Figure 3 It can be seen that the numerical combination formula includes multiple mathematical operators and parameters, such as addition, subtraction, multiplication and division. These operators are adjusted according to the dynamic changes of the time series to ensure that the verification keys generated in different time periods are unique. In this way, even if potential security threats are encountered during data transmission, it is difficult for attackers to predict or copy the keys, thereby ensuring the security of data transmission.

[0074] Step S702: Select a dynamic key based on encryption requirements.

[0075] For example, if the current time series indicates that a key with a high security level is required, the system selects a key with a complex operator from the virtual cabinet to ensure the security of data transmission, specifically an operator of the sum of squares.

[0076] Step S703: Based on the numerical value corresponding to the dynamic key, the marking stamp value and the replacement stamp value are combined with a formula to generate a final verification key.

[0077] It should be noted that, in actual operation of step S703, since the value of the tag stamp is used as the operand to be executed by the operator, for details, refer to Figure 3 It can be seen that when it is a division operator, the actual value obtained is the mark stamp value divided by the replacement stamp value. It should be added that the obtained value is generally accurate to a single digit.

[0078] As a preferred implementation, the dynamic key virtual cabinet in step S701 includes: multiple timestamps during actual construction, each timestamp corresponds to a time interval and a numerical combination formula, a cycle period is established based on the number of timestamps, and the constant value in the numerical combination formula is adjusted based on the cycle period.

[0079] It should be added that the constant value in the numerical combination formula can be adjusted based on the cycle period through the input end of the dynamic key sequence cabinet to adjust the constant value and the operator in the numerical combination formula. It should be emphasized that the dynamic key virtual cabinet in the present invention is a program software in the 5G user equipment. Its purpose is to provide real-time and dynamically changing keys to meet the security requirements of data transmission in the 5G network environment. The construction of the dynamic key virtual cabinet ensures the diversity and timeliness of the keys, so that each data transmission can use a unique key, which improves the security of data transmission to a certain extent.

[0080] As a preferred implementation, the present invention further improves the multi-level encryption method proposed in the 5G network environment. Specifically, Figure 4 As shown, the present invention relates to an encryption system, which is constructed based on a multi-level encryption method of a 5G network and includes the following modules: Data encryption module: responsible for performing encryption operations on transmitted data.

[0081] Marking stamp and replacement stamp generation module: used to generate marking stamp and replacement stamp for identification and verification of data integrity.

[0082] Derivative Replacement Module: Increases the complexity of data by disrupting the order of the secondary data arrangement set.

[0083] Verification key generation module: responsible for generating verification keys used to restore transmitted data.

[0084] Auxiliary module: provides auxiliary functions in the process of data encryption and decryption, including type feature recognition, data reading direction limitation and data integrity verification.

[0085] It should be added that the modules involved in the encryption system are specifically software programs and hardware devices in the existing technology, which ensure the security and integrity of data transmission in the 5G network. The data encryption module adopts encryption algorithms, such as AES or RSA, to ensure the confidentiality of data during transmission. The mark stamp and replacement stamp generation module uses timestamp and random number generation technology to provide a unique identifier for the data packet to prevent data tampering. The derivative replacement module rearranges the data through complex algorithms, which increases the difficulty of illegal interception and interpretation of the data. The verification key generation module generates a specific key for restoring encrypted data at the data receiving end. The auxiliary module provides necessary support, such as data type identification to help the system correctly process data in different formats, data reading direction limitation to ensure that the data is processed in a predetermined order, and data integrity verification to ensure that the data is not damaged during transmission.

[0086] In the present invention, the data encryption module includes the following parts: a replacement coding unit, which is responsible for setting the replacement coding and applying it to the transmission data to replace the corresponding data items, a data compression and packaging unit, which is responsible for retrieving the data items matching the replacement coding content in the transmission data and performing compression and packaging processing, a tag suffix generation unit, which is responsible for adding a tag suffix to the data generated by the data compression and packaging unit, a data arrangement set generation unit, which is responsible for generating a primary data arrangement set based on the replacement coding and the tag suffix, and further generating a secondary and final data arrangement set. In addition, the tag stamp and replacement stamp generation module includes: a tag stamp generation unit, which is responsible for determining the position of the replacement coding in the transmission data and generating a corresponding tag stamp, a replacement stamp generation unit, which is responsible for identifying the final arrangement order of the data, and a derivative replacement module includes: a pseudo-random A sequence generation unit generates a pseudo-random number sequence based on the number of data sequences; a data reorganization unit replaces the data content of the secondary data arrangement set according to the pseudo-random number sequence to generate a final data arrangement set; a verification key generation module includes: a dynamic key virtual cabinet unit, used to store multiple dynamic keys, each key corresponds to a different numerical combination formula, a numerical combination formula selection unit, responsible for selecting the corresponding numerical combination formula according to encryption requirements, a verification key generation unit, responsible for combining the mark stamp value and the replacement stamp value to generate the final verification key; finally, the auxiliary module includes: a type feature identification unit, used to identify the type features of the transmitted data, a data reading direction limitation unit, which limits the reading direction of the data according to the type features of the data, and a data integrity verification unit, used to verify the integrity of the data during the data transmission and reception process.

[0087] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is limited by the attached embodiments and their equivalents.

Claims

1. A multi-level encryption method under a 5G network, characterized in that: include: Artificially set replacement codes based on the code volume of the transmitted data; Replace the data items in the code transfer compression transmission data that match the replacement code content, and generate a tag suffix; The transmission data generates a first-level data arrangement set according to the replacement code and the tag suffix; Obtaining a marking stamp at a location of the transmitted data based on the replacement code; The marking stamp acts on the primary data arrangement set and generates a secondary data arrangement set; The secondary data arrangement set generates a final data arrangement set according to the encryption logic, and the final data arrangement set has a replacement stamp formed in the process of scrambling and reorganizing the secondary data arrangement set; Get the mark stamp value and the replacement stamp value and convert them into a verification key. The verification key is used to restore the transmitted data.

2. The multi-level encryption method under a 5G network according to claim 1, characterized in that: The method for generating the first-level data arrangement set includes: Respectively obtain the encoding information of the transmission data and the encoding information of the replacement encoding; Marking the coded items in the transmitted data that are consistent with the replacement coded content; Dividing the transmission data into a plurality of data sets according to the marked coding items; Packing and compressing the data sets corresponding to the marked coding items; Based on the number of data sets, generate corresponding tag suffixes; Get the type characteristics of the transmitted data; Based on type characteristics, the data reading direction is limited; Obtaining a primary data series set, where the primary data series set is a data set formed by removing data sets corresponding to marked coding items from multiple data sets and integrating them; sorting the primary data sequence set according to the data reading direction; Combined with the tag suffix, a first-level data sequence set is generated.

3. The multi-level encryption method in a 5G network according to claim 1, characterized in that: Methods for obtaining the marking stamp include: Obtain the arrangement position of the coding items in the transmission data that are identical to the replacement coding content; Obtaining a coding sequence of the original transmission data based on the arrangement position of the coding items; Obtaining the type characteristics of the transmitted data; Limit the data reading direction based on the type characteristics; The marker stamp is obtained based on the data reading direction and the encoding sequence of the original transmitted data.

4. The multi-level encryption method in a 5G network according to claim 1, characterized in that: The encryption logic includes: Obtaining a data sequence of a secondary data arrangement set; Construct a pseudo-random sequence generation formula based on the number of data sequences; The pseudo-random sequence generation formula generates a pseudo-random number sequence based on the numerical value of the data sequence, converts the numerical value system of the pseudo-random number sequence, and gives the data item number to replace the data content of the secondary data arrangement set.

5. The multi-level encryption method in a 5G network according to claim 4, characterized in that: The pseudo-random sequence generation formula is: , the X N is the number of N-position items in the data sequence, K1 is a multiplication constant, which is artificially established to make the generated sequence uniform by multiplication to avoid generating a large number of identical numbers in the generation cycle, K2 is an artificially set addition constant, which is used to make the generated sequence unpredictable, 2 32 The modulus represents the maximum value in a 32-bit computer system and is used to enable the generation of pseudo-random number sequences to be cyclically generated in a 32-bit data structure.

6. The multi-level encryption method in a 5G network according to claim 4, characterized in that: The method for generating the replacement stamp includes: Get the item value of the data sequence in the secondary data arrangement set; Generate a replacement stamp value sequence based on the item value; Move the replacement stamp value sequence to a position outside the final data arrangement set close to the data reading direction.

7. The multi-level encryption method in a 5G network according to claim 1, characterized in that: The method for generating the verification key includes: Construct a dynamic key virtual cabinet that changes based on a time series. The dynamic key virtual cabinet stores multiple dynamic keys. Each dynamic key corresponds to a different numerical combination formula. The numerical combination formula is used to combine the marking stamp value and the replacement stamp value. Select dynamic keys based on encryption requirements; Based on the numerical value corresponding to the dynamic key, the marking stamp value and the replacement stamp value are combined according to the formula to generate the final verification key.

8. The multi-level encryption method in a 5G network according to claim 7, characterized in that: The dynamic key virtual cabinet comprises: Multiple timestamps, each timestamp corresponds to a time interval and a numerical value combined with a formula; Establishing a cycle period based on the number of timestamps; Adjust the value based on the cycle period and combine it with the constant value in the formula.

9. A multi-level encryption system in a 5G network, using a multi-level encryption method in a 5G network as claimed in any one of claims 1 to 8, characterized in that: include: A data encryption module, used to perform encryption operations on transmitted data; A marking stamp and replacement stamp generating module, used to generate marking stamps and replacement stamps for identifying and verifying data integrity; A derivative replacement module is used to replace the content of the secondary data arrangement set to increase the complexity of the data; A verification key generation module, used to generate a verification key for restoring transmission data; The auxiliary module is used to provide auxiliary functions in the data encryption and decryption process, including type feature recognition, data reading direction limitation and data integrity verification.

10. A multi-level encryption system in a 5G network according to claim 9, characterized in that: The data encryption module comprises: A replacement code unit, which is used to manually set a replacement code and apply it to the transmitted data to replace the matching data item; A data compression and packaging unit, used to retrieve data items matching the replacement coded content in the transmission data, and perform compression and packaging processing; A marking suffix generating unit, used for marking suffixes on data generated by the data compression and packaging unit; A data arrangement set generating unit, used for replacing codes and marking suffixes to generate a primary data arrangement set, and further generating secondary and final data arrangement sets; The marking stamp and replacement stamp generating module comprises: A marker generating unit, used for obtaining the position of the replacement code in the transmission data and generating a corresponding marker; A replacement stamp generation unit, used to identify the final arrangement order of data; The derivative replacement module includes: A pseudo-random sequence generation unit generates a pseudo-random number sequence based on the number of data sequences; A data reorganization unit replaces the data content of the secondary data arrangement set according to the pseudo-random number sequence to generate a final data arrangement set; The verification key generation module comprises: A dynamic key virtual cabinet unit is used to store multiple dynamic keys, each key corresponding to a different numerical value combination formula; A numerical combination formula selection unit is used to select a corresponding numerical combination formula according to encryption requirements; A verification key generation unit, used to generate a final verification key by combining the marking stamp value and the replacement stamp value; The auxiliary module comprises: A type feature identification unit, used to identify the type features of the transmitted data; A data reading direction limiting unit, used to limit the data reading direction according to the type characteristics of the data; The data integrity verification unit is used to verify the integrity of data during data transmission and reception.

Images