Secure data transmission method of environmental monitoring equipment based on national cryptographic algorithm

Abstract

The invention provides a data security transmission method for environment monitoring equipment based on a national secret algorithm, which comprises the following steps: acquiring equipment information of the environment monitoring equipment, and registering the environment monitoring equipment to obtain environment monitoring equipment identification information; performing data monitoring and acquisition through the environment monitoring equipment, and performing encryption processing on the environment monitoring data and the environment monitoring equipment identification information by adopting a symmetric encryption algorithm to obtain first encrypted data; performing encryption processing on the encryption key by adopting an asymmetric encryption algorithm to obtain second encrypted data; transmitting the first encrypted data and the second encrypted data to an Internet of Things platform; and the Internet of Things platform receives and decrypts the transmission data, and then performs verification according to the transmission data decryption information to obtain plaintext environment monitoring data. According to the invention, encryption processing is carried out on the environment monitoring data and the encryption key by adopting different national secret algorithms, so that the security of data transmission is improved, and it is ensured that plaintext environment monitoring data can be accurately obtained in an Internet of Things platform.

Description

Technical Field

[0001] The present invention relates to the technical field of data security transmission, and in particular to a data security transmission method for environmental monitoring equipment based on a national secret algorithm. Background Art

[0002] With the advancement of information technology, society is entering a rapidly developing information age. The term "Internet of Things" has begun to appear frequently in people's daily lives. After years of development, the Internet of Things industry has gradually expanded and achieved corresponding results in many fields.

[0003] At present, in project construction, especially large-scale engineering projects, most of them are basic industries related to the national economy and people's livelihood. In some cases, they also concern the safety of life and property of regional residents. These are closely related to the environment. After environmental monitoring is carried out through environmental monitoring equipment, the environmental monitoring data is usually transmitted to the Internet of Things platform through data transmission for data analysis and processing, so as to ensure the progress of the project based on environmental data information. However, environmental monitoring equipment usually adopts conventional data transmission when transmitting environmental monitoring data, and the security is relatively weak. Therefore, the present invention proposes a data security transmission method for environmental monitoring equipment based on national secret algorithms, which adopts different national secret algorithms to encrypt the environmental monitoring data and encryption keys respectively, thereby improving the security of data transmission and ensuring that the plaintext environmental monitoring data can be accurately obtained in the Internet of Things platform. Summary of the Invention

[0004] The purpose of the present invention is to provide a data security transmission method for environmental monitoring equipment based on a national secret algorithm to solve the problems raised in the above background technology.

[0005] To achieve the above objectives, the present invention provides the following technical solution: a method for secure data transmission of environmental monitoring equipment based on a national secret algorithm, comprising:

[0006] Obtaining equipment information of environmental monitoring equipment, registering the environmental monitoring equipment, and obtaining identification information of the environmental monitoring equipment;

[0007] Perform data monitoring and collection through environmental monitoring equipment to obtain environmental monitoring data;

[0008] Using a symmetric encryption algorithm to encrypt the environmental monitoring data combined with the environmental monitoring equipment identification information to obtain first encrypted data;

[0009] Using an asymmetric encryption algorithm to encrypt the encryption key to obtain second encrypted data;

[0010] transmitting the first encrypted data and the second encrypted data to the IoT platform;

[0011] Receive the transmitted data in the IoT platform, decrypt the received data, and obtain the decrypted information of the transmitted data;

[0012] Verify based on the decrypted information of the transmitted data to obtain the plaintext environmental monitoring data.

[0013] Furthermore, a symmetric encryption algorithm is used to encrypt the environmental monitoring data in combination with the identification information of the environmental monitoring equipment, including:

[0014] Performing character string conversion on the environmental monitoring data and the environmental monitoring equipment identification information respectively to obtain first conversion information and second conversion information;

[0015] Obtain the number of digits of the character strings of the first conversion information and the second conversion information;

[0016] Analyze the number of digits in the string to determine whether the number of digits in the string needs to be supplemented, and obtain a first determination result;

[0017] Determine the number of supplementary digits according to the first judgment result, and obtain the supplementary character string;

[0018] Combining the first conversion information and the second conversion information with the supplementary character string to obtain data to be encrypted;

[0019] An encryption key is obtained, and the data to be encrypted is encrypted using a 32-round nonlinear iterative structure in combination with the encryption key to obtain first encrypted data.

[0020] Furthermore, when obtaining the encryption key, a random key is generated based on the identification information of the environmental monitoring equipment to obtain the initial key, and the number of bits of the string of the initial key is obtained to obtain the number of bits of the initial key string. Then, it is analyzed and determined whether the number of bits of the initial key string needs to be supplemented to obtain a second judgment result, and the supplementary bit number is determined based on the second judgment result, and the supplementary string is obtained, so that the initial key is combined with the supplementary string to obtain the encryption key.

[0021] Furthermore, an asymmetric encryption algorithm is used to encrypt the encryption key, including:

[0022] Performing a preliminary analysis on the encryption key to determine whether the form of the encryption key complies with the asymmetric encryption algorithm, thereby obtaining a third determination result;

[0023] Performing a format conversion on the encryption key according to the third judgment result to obtain encryption key processing information;

[0024] Perform message padding based on the encryption key processing information so that the length of the encrypted key processing information after padding is a multiple of 512, thereby obtaining the encrypted key after padding;

[0025] Group the padded encryption keys, perform message expansion on the grouped data, and expand the processed data;

[0026] A compression function is used to perform iterative compression based on the expanded processed data to obtain a hash value result to obtain second encrypted data.

[0027] Furthermore, transmitting the first encrypted data and the second encrypted data to the IoT platform includes:

[0028] Combining the first encrypted data and the second encrypted data to obtain a data packet to be transmitted;

[0029] Transmit the data packets to be transmitted to the IoT platform through the network.

[0030] Furthermore, decrypting the received data includes:

[0031] Splitting the received data to obtain first received sub-data and second received sub-data;

[0032] Decrypting the second received sub-data using an asymmetric decryption algorithm to obtain the encrypted key received data;

[0033] Decrypt the first received sub-data using the encryption key received data in combination with a symmetric decryption algorithm to obtain the environmental monitoring received data;

[0034] The transmission data decryption information is obtained based on the encryption key received data and the environmental monitoring received data.

[0035] Furthermore, verification is performed based on the transmission data decryption information, including:

[0036] Filtering and extracting the environmental monitoring device identification information and the environmental monitoring data respectively based on the transmission data decryption information to obtain first received data and second received data;

[0037] Matching the environmental monitoring device registration information according to the first received data, analyzing whether there is device registration information consistent with the first received data, and obtaining a matching analysis result;

[0038] When the matching analysis result shows that there is device registration information that is consistent with the first received data, the second received data is valid data and is stored and displayed. When the matching analysis result shows that there is no device registration information that is consistent with the first received data, the second received data is invalid data and is discarded.

[0039] Furthermore, when transmitting the data packets to be transmitted to the IoT platform through the network, a multi-node communication data topology model is used for real-time transmission of the data packets to be transmitted, including:

[0040] Determining the sender information for the data packet to be transmitted;

[0041] Get the receiving end information of the IoT platform;

[0042] Determine the sending point and receiving point based on the sending end information and the receiving end information respectively, and determine the target communication network in combination with the multi-node communication data topology model;

[0043] After adjusting the nodes according to the target communication network, the data packets to be transmitted are transmitted to the IoT platform.

[0044] Furthermore, when receiving transmission data in the Internet of Things platform, integrity analysis is performed on the received transmission data in real time to determine whether the received data is complete, and a fourth judgment result is obtained. According to the fourth judgment result, when the transmission data is complete, the received data is decrypted.

[0045] Furthermore, before decrypting the received data, the received data is verified, including:

[0046] Conduct traceability analysis on received data, determine the corresponding environmental monitoring device, and lock the target environmental monitoring device;

[0047] Obtaining a verification message of received data from the target environment monitoring device to obtain verification information;

[0048] Comparing and analyzing the received data based on the verification information to determine whether the received data is consistent with the verification information, thereby obtaining a fifth determination result;

[0049] When the fifth judgment result is that the received data is consistent with the verification information, the received data is successfully received in the Internet of Things platform. When the fifth judgment result is that the received data is inconsistent with the verification information, the received data is rejected and a rejection reminder is issued to the target environmental monitoring device.

[0050] The present invention realizes the secure transmission of data of environmental monitoring equipment, so that the environmental monitoring data obtained by the environmental monitoring equipment can be securely transmitted to the Internet of Things platform, thereby improving the security performance of the environmental monitoring data during data transmission, avoiding the environmental monitoring data from being tampered with during transmission, reducing the deviation impact caused by the Internet of Things platform's analysis and processing based on erroneous environmental monitoring data, and ensuring the accuracy of the environmental monitoring data in the Internet of Things platform.

[0051] Other features and advantages of the present invention will be described in the following description, and in part will become apparent from the description, or will be understood by practicing the present invention. The purpose and other advantages of the present invention can be realized and obtained by the structures particularly pointed out in the written description and the accompanying drawings.

[0052] The technical solution of the present invention is further described in detail below through the accompanying drawings and embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0053] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the present invention and do not constitute a limitation of the present invention. In the accompanying drawings:

[0054] Figure 1 This is a schematic diagram of the steps of the data security transmission method according to the present invention;

[0055] Figure 2 This is a schematic diagram of step three in the data security transmission method of the present invention;

[0056] Figure 3 This is a schematic diagram of step 4 in the data security transmission method of the present invention;

[0057] Figure 4 This is a schematic diagram of step five in the data security transmission method of the present invention;

[0058] Figure 5 This is a schematic diagram of step six in the data security transmission method of the present invention;

[0059] Figure 6 This is a schematic diagram of step seven in the data security transmission method of the present invention. DETAILED DESCRIPTION

[0060] The preferred embodiments of the present invention are described below with reference to the accompanying drawings. It should be understood that the preferred embodiments described herein are only used to illustrate and explain the present invention, and are not used to limit the present invention.

[0061] like Figure 1 As shown, an embodiment of the present invention provides a method for secure data transmission of an environmental monitoring device based on a national secret algorithm, comprising:

[0062] Step 1: Obtain equipment information of the environmental monitoring equipment, register the environmental monitoring equipment, and obtain identification information of the environmental monitoring equipment;

[0063] Step 2: Collect data through environmental monitoring equipment to obtain environmental monitoring data;

[0064] Step 3: Using a symmetric encryption algorithm to encrypt the environmental monitoring data in combination with the environmental monitoring equipment identification information to obtain first encrypted data;

[0065] Step 4: Using an asymmetric encryption algorithm to encrypt the encryption key to obtain second encrypted data;

[0066] Step 5: Transmit the first encrypted data and the second encrypted data to the IoT platform;

[0067] Step 6: Receive the transmitted data on the IoT platform and decrypt the received data to obtain the transmitted data decryption information;

[0068] Step 7: Verify based on the decrypted information of the transmitted data to obtain the plaintext environmental monitoring data.

[0069] In the above technical solution, both the symmetric encryption algorithm and the asymmetric encryption algorithm are national secret algorithms. For example, the symmetric encryption algorithm adopts SM4 and the asymmetric encryption algorithm adopts SM3.

[0070] In the above technical solution, the equipment information of the environmental monitoring equipment includes: equipment serial number, equipment parameters, equipment identifier, etc.

[0071] In the above technical solution, the Internet of Things platform refers to the environmental monitoring Internet of Things platform.

[0072] The above technical solution realizes the secure transmission of data of environmental monitoring equipment, so that the environmental monitoring data obtained by the environmental monitoring equipment can be securely transmitted to the Internet of Things platform, improving the security performance of the environmental monitoring data during data transmission, preventing the environmental monitoring data from being tampered with during transmission, reducing the impact of deviation caused by the analysis and processing of the Internet of Things platform based on erroneous environmental monitoring data, and ensuring the accuracy of the environmental monitoring data in the Internet of Things platform. In addition, by registering the environmental monitoring equipment, the transmitted data contains the environmental monitoring equipment identification information, preventing data information of other devices from interfering with the Internet of Things platform. Moreover, by using a symmetric encryption algorithm to encrypt the environmental monitoring data in combination with the environmental monitoring equipment identification information, not only can the confidentiality, integrity and reliability of the environmental monitoring data be ensured, but also the time consumed is reduced, effectively saving the encryption processing time, so that even large environmental monitoring data can be encrypted in a timely manner, thereby reducing the time consumed for data secure transmission. In addition, by using an asymmetric encryption algorithm to encrypt the encryption key, the security of the key is improved, so that when the first encrypted data is transmitted to the Internet of Things platform, the second encrypted data is also transmitted together, providing convenience for the Internet of Things platform to obtain plaintext environmental monitoring data, so that the Internet of Things platform can better decrypt the received data, improve the decryption efficiency and reduce the time wasted.

[0073] like Figure 2 As shown, in one embodiment provided by the present invention, a symmetric encryption algorithm is used to encrypt environmental monitoring data in combination with environmental monitoring equipment identification information, including:

[0074] C1. Performing character string conversion on the environmental monitoring data and the environmental monitoring equipment identification information respectively to obtain first conversion information and second conversion information;

[0075] C2. Obtain the number of character strings of the first conversion information and the second conversion information;

[0076] C3. Analyze the number of digits in the string to determine whether the number of digits in the string needs to be supplemented, and obtain a first determination result;

[0077] C4. Determine the number of supplementary digits according to the first judgment result, and obtain a supplementary character string;

[0078] C5. Combining the first conversion information and the second conversion information with the supplementary character string to obtain data to be encrypted;

[0079] C6. Obtain an encryption key, and encrypt the data to be encrypted using a 32-round nonlinear iterative structure in combination with the encryption key to obtain first encrypted data.

[0080] In the above technical solution, the first encrypted data is the data obtained by encrypting the environmental monitoring data in combination with the identification information of the environmental monitoring equipment.

[0081] In the above technical solution, when the first conversion information and the second conversion information are combined with the supplementary character string to obtain the data to be encrypted, the combination is performed in the format of first conversion information + ** + second conversion information + ** + supplementary character string.

[0082] In the above technical solution, the first conversion information is the character string information of the environmental monitoring data, and the second conversion information is the character string information of the environmental monitoring equipment identification information.

[0083] In the above technical solution, when determining whether the number of digits in the string needs to be supplemented, the number of digits in the string of the first conversion information and the number of digits in the string of the second conversion information are accumulated to determine whether the total number of digits in the string is an integer multiple of 16, thereby obtaining a first determination result.

[0084] In the above technical solution, when determining the number of supplementary digits according to the first judgment result, if the total number of digits in the string is an integer multiple of 16, the supplementary digit is 0, and there is no supplementary string at this time. If the total number of digits in the string is not an integer multiple of 16, the total number of digits in the string is analyzed to see how many characters are needed to be a multiple of 16, and the number of supplementary digits is determined. Then, "0" is used as the supplementary character to form a supplementary string according to the number of supplementary digits.

[0085] The above technical solution performs string conversion on the environmental monitoring data and the environmental monitoring equipment identification information respectively, so that the encryption processing is performed in the form of a string, which provides convenience for the encryption processing. In addition, by analyzing the number of string digits to determine whether the number of string digits needs to be supplemented, the number of string digits of the data to be encrypted is a multiple of 16, avoiding the situation where the number of string digits of the data to be encrypted does not meet the specifications of the symmetric encryption algorithm, making it impossible for the symmetric encryption algorithm to encrypt the data to be encrypted, thereby ensuring the progress of the encryption processing and ensuring that the Internet of Things platform can receive more secure environmental monitoring data.

[0086] In one embodiment provided by the present invention, when obtaining an encryption key, a random key is generated based on the identification information of the environmental monitoring device to obtain an initial key, and the number of digits of the string of the initial key is obtained to obtain the number of digits of the initial key string. Then, it is analyzed and determined whether the number of digits of the initial key string needs to be supplemented to obtain a second judgment result, and the supplementary digits are determined based on the second judgment result, and the supplementary string is obtained, so that the initial key is combined with the supplementary string to obtain the encryption key.

[0087] In the above technical solution, when determining the supplementary digits according to the second judgment result, if the number of digits in the initial key string is an integer multiple of 16, the supplementary digits is 0, and there is no need to obtain the supplementary string at this time; if the number of digits in the initial key string is not an integer multiple of 16, the supplementary digits is determined, and the supplementary string is obtained, so that the initial key is combined with the supplementary string to obtain the encryption key.

[0088] In the above technical solution, the supplementary character string is obtained by using "0" as the supplementary character and supplementing according to the number of supplementary digits.

[0089] The above technical solution generates a random key based on the identification information of the environmental monitoring device, so that the encryption key contains the identification characteristics of the environmental monitoring device, so that during the encryption process, only the data to be encrypted with the same identification information of the environmental monitoring device is encrypted, so that during the encryption process, the encryption key and the data to be encrypted can be encrypted accordingly according to the environmental monitoring device, ensuring the orderliness of the encryption process and the security of the first encrypted data. Moreover, by analyzing and judging whether the number of bits of the initial key string needs to be supplemented, the total number of bits of the encryption key string is an integer multiple of 16, avoiding the total number of bits of the encryption key string not meeting the specifications of the symmetric encryption algorithm, resulting in the inability to perform encryption processing smoothly, thereby ensuring the progress of encryption processing.

[0090] like Figure 3 As shown, in one embodiment provided by the present invention, an asymmetric encryption algorithm is used to perform encryption processing on an encryption key, including:

[0091] D1. Perform a preliminary analysis on the encryption key to determine whether the encryption key format complies with the asymmetric encryption algorithm, and obtain a third determination result;

[0092] D2. Performing format conversion on the encryption key according to the third judgment result to obtain encryption key processing information;

[0093] D3. Pad the message based on the encryption key processing information so that the length of the encrypted key processing information after padding is a multiple of 512, thereby obtaining the encryption key after padding;

[0094] D4. Group the padded encryption keys, perform message expansion on the grouped data, and expand the processed data.

[0095] D5. Use a compression function to perform iterative compression based on the expanded processed data, obtain a hash value result, and obtain second encrypted data.

[0096] In the above technical solution, when the third judgment result is that the form of the encryption key does not conform to the asymmetric encryption algorithm, the encryption key is binary converted. When the third judgment result is that the form of the encryption key conforms to the asymmetric encryption algorithm, the message is directly filled based on the encryption key processing information.

[0097] In the above technical solution, when filling the message based on the encryption key processing information, a "1" is first added to the end, and then a number of "0"s are added until the length meets the multiple of 512.

[0098] In the above technical solution, when the encryption key after padding is grouped, it is grouped according to 512 bits.

[0099] The above technical solution can meet the security requirements of various cryptographic applications, and realizes encryption processing of encryption keys through asymmetric encryption algorithms. It uses large number operations and high-order modular operations to increase the complexity of encryption keys. Even for encryption keys with large amounts of data, the second encrypted data can be obtained within a short period of time, and it can also effectively prevent replay attacks, thereby ensuring the security and reliability of the second encrypted data.

[0100] like Figure 4 As shown, in one embodiment provided by the present invention, transmitting the first encrypted data and the second encrypted data to the Internet of Things platform includes:

[0101] E1. Combine the first encrypted data and the second encrypted data to obtain a data packet to be transmitted;

[0102] E2. Transmit the data packet to be transmitted to the IoT platform through the network.

[0103] In the above technical solution, when the first encrypted data and the second encrypted data are combined, they are combined in the form of first encrypted data+***+second encrypted data.

[0104] In the above technical solution, network transmission includes: wired network transmission and wireless network transmission.

[0105] The above technical solution combines the first encrypted data and the second encrypted data so that they can be transmitted directly through the data packet to be transmitted during transmission, avoiding the mismatch between the first encrypted data and the second encrypted data when the transmission data is large. At the same time, it can also avoid the mismatch between the first encrypted data and the second encrypted data causing confusion in data reception on the Internet of Things platform, reduce the degree of confusion in the reception of the transmitted data by the Internet of Things platform, provide convenience for the decryption of the received data, thereby reducing the time consumed for decryption, and quickly obtaining the decryption information of the transmitted data.

[0106] like Figure 5 As shown, in one embodiment provided by the present invention, decrypting received data includes:

[0107] S1. Split the received data to obtain first received sub-data and second received sub-data;

[0108] S2. Decrypt the second received sub-data using an asymmetric decryption algorithm to obtain the encrypted key received data;

[0109] S3. Decrypt the first received sub-data using the encryption key received data in combination with a symmetric decryption algorithm to obtain environmental monitoring received data;

[0110] S4. Decryption information of the transmitted data is obtained based on the encryption key received data and the environmental monitoring received data.

[0111] In the above technical solution, the environmental monitoring received data is the decrypted data of the first encrypted data received by the Internet of Things platform, including: environmental monitoring data and environmental monitoring equipment identification information.

[0112] In the above technical solution, the first received sub-data is the first encrypted data received by the Internet of Things platform, and the second received sub-data is the second encrypted data received by the Internet of Things platform.

[0113] In the above technical solution, the asymmetric decryption algorithm corresponds to the asymmetric encryption algorithm, and the symmetric decryption algorithm corresponds to the symmetric encryption algorithm.

[0114] The above technical solution splits and restores the first encrypted data and the second encrypted data before transmission for the received data, so that the Internet of Things platform can clearly understand the received first encrypted data and the second encrypted data, and uses the asymmetric encryption algorithm and the decryption method corresponding to the corresponding encryption algorithm to obtain the encryption key received data and the transmission data decryption information, thereby obtaining the transmission data decryption information in the Internet of Things platform.

[0115] like Figure 6 As shown, in one embodiment provided by the present invention, verification is performed based on the transmission data decryption information, including:

[0116] Y1. Filter and extract the environmental monitoring device identification information and the environmental monitoring data from the transmission data decryption information to obtain first received data and second received data;

[0117] Y2. Match the environmental monitoring device registration information according to the first received data, analyze whether there is device registration information that is consistent with the first received data, and obtain a matching analysis result;

[0118] Y3. When the matching analysis result shows that there is device registration information that is consistent with the first received data, the second received data is valid data and is stored and displayed. When the matching analysis result shows that there is no device registration information that is consistent with the first received data, the second received data is invalid data and is discarded.

[0119] In the above technical solution, the first received data is the data information obtained by decrypting the environmental monitoring device identification information in the received data. The second received data is the data information obtained by decrypting the environmental monitoring data information in the received data.

[0120] In the above technical solution, the environmental monitoring device registration information is obtained by the Internet of Things platform when registering the environmental monitoring device, that is, the device registration information is stored for the registered environmental monitoring device.

[0121] The above technical solution matches the registration information of the environmental monitoring device according to the first received data, so that the Internet of Things platform can perform validity analysis on the second received data after obtaining the transmission data decryption information, thereby preventing environmental monitoring devices that are not registered on the Internet of Things platform from interfering with the environmental monitoring data of the Internet of Things platform, providing protection for the data management of the Internet of Things platform, and avoiding invalid data and junk data from posing security risks to the Internet of Things platform.

[0122] In one embodiment provided by the present invention, when transmitting a data packet to be transmitted to an Internet of Things platform via a network, a multi-node communication data topology model is used for real-time transmission of the data packet to be transmitted, including:

[0123] Determining the sender information for the data packet to be transmitted;

[0124] Get the receiving end information of the IoT platform;

[0125] Determine the sending point and receiving point based on the sending end information and the receiving end information respectively, and determine the target communication network in combination with the multi-node communication data topology model;

[0126] After adjusting the nodes according to the target communication network, the data packets to be transmitted are transmitted to the IoT platform.

[0127] In the above technical solution, when adjusting the nodes according to the target communication network, the transmission parameters of the transmission nodes are adaptively adjusted.

[0128] In the above technical solution, the transmitting end information is the data transmission parameter information of the transmitting unit of the environmental monitoring device, and the receiving end information is the data reception parameter information of the receiving unit of the Internet of Things platform.

[0129] In the above technical solution, when the data packet to be transmitted is transmitted to the Internet of Things platform after the node is adjusted according to the target communication network, it includes: analyzing the nodes in the target communication network to determine the central node and the transmission node; monitoring the target communication network to obtain the communication network monitoring information; extracting the target data information in the communication network monitoring information to obtain the central node carrier frequency, the transmission node transmission time and the transmission data offset angle; analyzing the transmission node status by combining the central node carrier frequency and the transmission node transmission time with the transmission data offset angle to obtain the frequency recovery value of the transmission node; judging whether the frequency recovery value of the transmission node is consistent and coherent. When there is a transmission node whose frequency recovery value is not consistent and coherent, the transmission nodes that affect the consistency are screened, and the nodes are adjusted in combination with the associated transmission nodes based on the screening results, and then the data packet to be transmitted is transmitted based on the transmission node after the node adjustment.

[0130] The above technical solution adopts a multi-node communication data topology model, which not only improves the transmission success rate of the data to be transmitted, enabling the environmental monitoring equipment to successfully transmit the data to be transmitted to the Internet of Things platform, but also can transmit the data to be transmitted in a timely manner, avoiding the delay of the data packet to be transmitted at the sending end, and determining the sending point and the receiving point according to the sending end information and the receiving end information respectively, and determining the target communication network in combination with the multi-node communication data topology model, so that the target communication network can better adapt to the current data packet to be transmitted, thereby better transmitting the data packet to be transmitted.

[0131] In one embodiment provided by the present invention, when receiving transmission data in an Internet of Things platform, integrity analysis is performed on the received transmission data in real time to determine whether the received data is complete, and a fourth judgment result is obtained. When the transmission data is complete according to the fourth judgment result, the received data is decrypted.

[0132] In the above technical solution, when the fourth judgment result is that the transmission data is incomplete, the transmission data continues to be received until the transmission data is complete, and then the received data is decrypted.

[0133] The above technical solution performs real-time integrity analysis on the received transmission data so that the received data is decrypted only when the transmission data is complete, avoiding invalid decryption caused by incomplete received data, avoiding waste of resources, and ensuring the effectiveness of the decryption process.

[0134] In one embodiment of the present invention, before decrypting the received data, the received data is further verified, including:

[0135] Conduct traceability analysis on received data, determine the corresponding environmental monitoring device, and lock the target environmental monitoring device;

[0136] Obtaining a verification message of received data from the target environment monitoring device to obtain verification information;

[0137] Comparing and analyzing the received data based on the verification information to determine whether the received data is consistent with the verification information, thereby obtaining a fifth determination result;

[0138] When the fifth judgment result is that the received data is consistent with the verification information, the received data is successfully received in the Internet of Things platform. When the fifth judgment result is that the received data is inconsistent with the verification information, the received data is rejected and a rejection reminder is issued to the target environmental monitoring device.

[0139] In the above technical solution, when a rejection reminder is issued for the target environment monitoring device, a rejection reminder for the target environment monitoring device is generated based on the received data.

[0140] In the above technical solution, the verification message is a verification message used by the environmental monitoring device to verify the first encrypted data and the second encrypted data.

[0141] In the above technical solution, a comparative analysis is performed on the received data based on the verification information, including: disassembling the verification information to obtain multiple verification sub-information; performing preliminary matching and comparison on the received data based on the verification sub-information to obtain a preliminary matching and comparison result. When the preliminary matching and comparison result is that there is verification sub-information but no corresponding matching and comparison data, the received data is inconsistent with the verification information. When the preliminary matching and comparison result is that all verification sub-information obtains corresponding matching and comparison data, the matching and comparison result is obtained, and the key features of the matching data are analyzed according to the matching and comparison result to obtain key feature analysis data. Match filtering is performed on the key feature analysis data in turn according to the verification sub-information to obtain a matching and filtering result. Then, whether there is redundant information in the matching and filtering result is analyzed. When there is no redundant information in the matching and filtering result, the received data is consistent with the verification information. When there is redundant information in the matching and filtering result, the received data is inconsistent with the verification information.

[0142] The above technical solution ensures the accuracy of the received data received by the Internet of Things platform by verifying the received data, avoiding tampering, loss or damage of the received data during transmission, and improving the reliability of the received data. In addition, it rejects the received data and also issues a rejection reminder, so that the target environmental monitoring equipment can also promptly identify the damage to the transmitted data information, and then take timely countermeasures to reduce the impact.

[0143] Those skilled in the art should understand that the first and second in the present invention merely refer to different application stages.

[0144] Other embodiments of the present disclosure will readily occur to those skilled in the art after considering the specification and practicing the disclosure herein. This application is intended to cover any variations, uses, or adaptations of the present disclosure that follow from the general principles of the present disclosure and include common knowledge or customary techniques in the art not disclosed herein. The description and examples are to be considered as exemplary only, with the true scope and spirit of the present disclosure being indicated by the following claims.

[0145] It should be understood that the present disclosure is not limited to the exact structures that have been described above and shown in the drawings, and that various modifications and changes can be made without departing from the scope thereof. The scope of the present disclosure is limited only by the appended claims.

Claims

1. A data security transmission method for environmental monitoring equipment based on national secret algorithm, characterized in that: include: Obtain equipment information of environmental monitoring equipment, register the environmental monitoring equipment, and obtain identification information of the environmental monitoring equipment; Perform data monitoring and collection through environmental monitoring equipment to obtain environmental monitoring data; Using a symmetric encryption algorithm to encrypt the environmental monitoring data combined with the environmental monitoring equipment identification information to obtain first encrypted data; An asymmetric encryption algorithm is used to perform encryption processing on the encryption key to obtain second encrypted data; transmitting the first encrypted data and the second encrypted data to the IoT platform; Receive the transmission data in the IoT platform, and decrypt the received data to obtain transmission data decryption information; Verify based on the transmission data decryption information to obtain plaintext environmental monitoring data.

2. The data security transmission method according to claim 1, characterized in that: A symmetric encryption algorithm is used to encrypt environmental monitoring data combined with environmental monitoring equipment identification information, including: Performing character string conversion on the environmental monitoring data and the environmental monitoring equipment identification information respectively to obtain first conversion information and second conversion information; Obtain the number of character strings of the first conversion information and the second conversion information; Analyze the number of digits in the string to determine whether the number of digits in the string needs to be supplemented, and obtain a first determination result; Determine the number of supplementary digits according to the first judgment result, and obtain a supplementary character string; Combining the first conversion information and the second conversion information with the supplementary character string to obtain data to be encrypted; An encryption key is obtained, and the data to be encrypted is encrypted using a 32-round nonlinear iterative structure in combination with the encryption key to obtain first encrypted data.

3. The data security transmission method according to claim 2, characterized in that: When obtaining the encryption key, a random key is generated based on the identification information of the environmental monitoring device to obtain the initial key, and the number of digits of the string of the initial key is obtained to obtain the number of digits of the initial key string. Then, it is analyzed and determined whether the number of digits of the initial key string needs to be supplemented to obtain a second judgment result, and the supplementary digits are determined based on the second judgment result, and the supplementary string is obtained, so that the initial key is combined with the supplementary string to obtain the encryption key.

4. The data security transmission method according to claim 1, characterized in that: The encryption key is encrypted using an asymmetric encryption algorithm, including: Performing a preliminary analysis on the encryption key to determine whether the form of the encryption key is compatible with the asymmetric encryption algorithm, and obtaining a third determination result; Performing a format conversion on the encryption key according to the third judgment result to obtain encryption key processing information; Perform message padding based on the encryption key processing information so that the length of the encryption key processing information after padding is a multiple of 512, and obtain the encryption key after padding; Group the padded encryption keys, perform message expansion on the grouped data, and expand the processed data; The compression function is used to perform iterative compression based on the extended processed data to obtain a hash value result to obtain the second encrypted data.

5. The data security transmission method according to claim 1, characterized in that: The first encrypted data and the second encrypted data are transmitted to the IoT platform, including: Combine the first encrypted data and the second encrypted data to obtain a data packet to be transmitted; Transmit the data packets to be transmitted to the IoT platform through the network.

6. The data security transmission method according to claim 1, characterized in that: Decryption of received data includes: Splitting the received data to obtain first received sub-data and second received sub-data; Decrypting the second received sub-data using an asymmetric decryption algorithm to obtain encrypted key received data; Decrypt the first received sub-data by combining the encrypted key received data with a symmetric decryption algorithm to obtain the environmental monitoring received data; The transmission data decryption information is obtained based on the encryption key received data and the environmental monitoring received data.

7. The data security transmission method according to claim 1, characterized in that: Verify based on the decrypted information of the transmitted data, including: The environmental monitoring device identification information and the environmental monitoring data are respectively screened and extracted according to the transmission data decryption information to obtain the first received data and the second received data; Matching the environmental monitoring device registration information according to the first received data, analyzing whether there is device registration information consistent with the first received data, and obtaining a matching analysis result; When the matching analysis result shows that there is device registration information that is consistent with the first received data, the second received data is valid data and is stored and displayed; when the matching analysis result shows that there is no device registration information that is consistent with the first received data, the second received data is invalid data and is discarded.

8. The data security transmission method according to claim 5, characterized in that: When transmitting the data packets to be transmitted to the IoT platform through the network, a multi-node communication data topology model is used for real-time transmission of the data packets to be transmitted, including: Determine the sender information for the data packet to be transmitted; Get the receiving end information of the IoT platform; Determine the sending point and receiving point according to the sending end information and the receiving end information respectively, and determine the target communication network in combination with the multi-node communication data topology model; After adjusting the nodes according to the target communication network, the data packets to be transmitted are transmitted to the IoT platform.

9. The data security transmission method according to claim 1, characterized in that: When receiving transmission data in the Internet of Things platform, integrity analysis is performed in real time on the received transmission data to determine whether the received data is complete, and a fourth judgment result is obtained. According to the fourth judgment result, when the transmission data is complete, the received data is decrypted.

10. The data security transmission method according to claim 9, characterized in that: Before decrypting the received data, the received data is also verified, including: Conduct source tracing analysis on received data, determine the corresponding environmental monitoring device, and lock the target environmental monitoring device; Obtaining a verification message of received data from the target environment monitoring device to obtain verification information; Comparing and analyzing the received data according to the verification information, determining whether the received data is consistent with the verification information, and obtaining a fifth determination result; When the fifth judgment result is that the received data is consistent with the verification information, the received data is successfully received in the Internet of Things platform. When the fifth judgment result is that the received data is inconsistent with the verification information, the received data is rejected and a rejection reminder is issued to the target environmental monitoring device.

Images