5G communication encryption and protection system for distribution network security

Abstract

The invention relates to the technical field of communication encryption, in particular to a 5G communication encryption and protection system for distribution network security, which comprises a 5G encryption communication module, an identity authentication module, an anomaly detection module, an edge encryption module, a data isolation module and an authority management module, according to the scheme, the asynchronous update Boolean network encryption algorithm is utilized to dynamically encrypt to-be-encrypted original data in a 5G encryption communication module, a chaotic key stream is generated by using 2D-FPSM, a chaotic sequence is generated by using a two-dimensional coordinate, an irregular chaotic trajectory is generated by using an iterative formula, and the chaotic sequence is generated by using a piecewise sine function. Therefore, the key stream has high randomness and unpredictability; the density-based diffusion algorithm is used in the diffusion encryption operation, and the data density is combined with the diffusion factor, so that the statistical randomness of encrypted data is increased, and the reliability, privacy protection level and flexibility of distribution network communication are improved.

Description

Technical Field

[0001] The present invention relates to the field of communication encryption technology, and specifically to a 5G communication encryption and protection system for distribution network security. Background Art

[0002] With the continuous development of network attack technology and the increasing sophistication of attackers' attack methods, static encryption methods are facing more and more security challenges. General static encryption methods have the problems of high predictability and low anti-cracking ability. They use fixed encryption keys and encryption rules. Attackers predict the encryption method by analyzing the encrypted data stream and pattern. The key and encryption method of the static encryption algorithm are fixed. Once cracked, the subsequent encrypted data will also be cracked continuously, resulting in poor protection of the system against network attacks and malicious traffic, affecting data security and communication reliability. Summary of the invention

[0003] In view of the above situation, in order to overcome the defects of the prior art, the present invention provides a 5G communication encryption and protection system for distribution network security. In view of the problems of high predictability and low anti-cracking ability of general static encryption methods, the present invention uses an asynchronous update Boolean network encryption algorithm in a 5G encryption communication module to dynamically encrypt the original data to be encrypted, involving dynamic encoding of Boolean matrices and chaotic key stream generation, so that each step in the encryption process is full of uncertainty; by using 2D-FPSM to generate a chaotic key stream, using two-dimensional coordinates to generate a chaotic sequence, and using an iterative formula to generate an irregular chaotic trajectory, and using a piecewise sine function to generate a chaotic sequence, this makes the key stream highly random and unpredictable, avoiding data being stolen or leaked during transmission; by using a density-based diffusion algorithm in a diffusion encryption operation, combining data density with a diffusion factor, processing encrypted data in blocks, changing the density structure and diffusion rules of the data, increasing the statistical randomness of the encrypted data, and improving the reliability, privacy protection level and flexibility of distribution network communication.

[0004] The technical solution adopted by the present invention is as follows: A 5G communication encryption and protection system for distribution network security provided by the present invention includes a 5G encryption communication module, an identity authentication module, an anomaly detection module, an edge encryption module, a data isolation module and a rights management module, specifically including the following contents:

[0005] The 5G encryption communication module dynamically encrypts the original data to be encrypted using an asynchronously updated Boolean network encryption algorithm based on the high-speed encryption protocol of the 5G network;

[0006] The identity authentication module verifies the user and device identity through two-factor authentication, SIM card verification and device fingerprint recognition;

[0007] The anomaly detection module monitors the communication traffic of the distribution network, detects abnormal traffic characteristics and potential attack behaviors, identifies abnormal traffic patterns and takes preventive measures;

[0008] The edge encryption module uses a symmetric encryption algorithm to perform on-site encryption processing on the edge device of the distribution network;

[0009] The data isolation module uses virtualization technology to store and transmit sensitive data separately from ordinary data;

[0010] The authority management module performs hierarchical authority management based on user roles and device identities.

[0011] Furthermore, the 5G encryption communication module uses an asynchronous update Boolean network encryption algorithm to dynamically encrypt data. The specific implementation steps are as follows:

[0012] Step S1: Data preparation at the sending end: the sending end divides the original data to be encrypted into data blocks and converts them into Boolean matrices, where the data bits in the Boolean matrix are the initial positions;

[0013] Step S2: asynchronously updating the Boolean network state coding, performing state coding on the Boolean matrix, converting the Boolean matrix into a state sequence of the Boolean network through the state coding, and rearranging it into a coded Boolean matrix;

[0014] Step S3: Generate a chaotic key stream, using 2D-FPSM to generate a chaotic key stream;

[0015] Step S4: Scrambling encryption operation, using the chaotic key stream to perform a scrambling operation on the coded Boolean matrix, scrambling the data bits in the coded Boolean matrix, and obtaining a scrambled Boolean matrix;

[0016] Step S5: diffusion encryption operation, the scrambled Boolean matrix enters the diffusion operation, and uses the density-based diffusion algorithm to obtain the encrypted Boolean matrix;

[0017] Step S6: Encrypted transmission: encrypt and transmit the encrypted Boolean matrix through the security protocol of the 5G network, and transmit the encrypted Boolean matrix using the network high-speed protocol;

[0018] Step S7: The receiving end decrypts using the same chaotic key stream as the sender.

[0019] Further, in step S3, a chaotic key stream is generated using 2D-FPSM, wherein the 2D-FPSM specifically includes the following contents:

[0020] 2D-FPSM generates a chaotic sequence based on two-dimensional coordinates and performs segmented mapping. Two sine functions with different intervals are designed. Each round of iteration generates a new two-dimensional point. The chaotic sequence formed by these points is used as the key stream.

[0021] The two-dimensional chaotic sequence is generated by an iterative formula, and the iterative formula used is as follows: ; ;

[0022] in, and Indicates The iteration generates the horizontal and vertical coordinates of the two-dimensional point. and Respectively represent The horizontal and vertical coordinates of the two-dimensional chaotic sequence in the iteration, is the control parameter used to adjust the distribution of chaotic sequences. is the control parameter used to adjust the randomness of the chaotic sequence. and It is a piecewise sine function, which introduces nonlinear chaotic characteristics;

[0023] The piecewise sine function is as follows: ; ;

[0024] in, and is the horizontal and vertical coordinates of the two-dimensional point;

[0025] The chaotic key stream is generated using 2D-FPSM, and the generation steps are as follows:

[0026] Step S31: setting initial values, and randomly assigning initial values ​​to the horizontal and vertical coordinates;

[0027] Step S32: Parameter selection, parameter setting and ;

[0028] Step S33: iteratively generate a chaotic sequence, and generate a plurality of chaotic coordinates by using an iterative formula;

[0029] Step S34: quantize the key stream, convert the horizontal and vertical coordinates of each chaotic coordinate into integers, combine them into a bit stream, and the bit stream is used as the chaotic key stream.

[0030] Further, step S4 specifically includes the following steps:

[0031] Step S41: Establishing a mapping relationship, generating a new index position for all data bits in the encoded Boolean matrix according to the chaotic key stream, the new index position is the scrambled position, and establishing a mapping relationship between the initial position and the scrambled position;

[0032] Step S42: data bit exchange and scrambling, the data bits in the coding Boolean matrix are exchanged one by one according to the mapping relationship between the initial position and the scrambled position;

[0033] Step S43: Matrix output, rearranging the scrambled data bits to generate a scrambled Boolean matrix.

[0034] Further, step S5 uses a density-based diffusion algorithm, which specifically includes the following steps:

[0035] Step S51: Data density detection, dividing the scrambled Boolean matrix into regions of 4×4 data bits, calculating the data density in each region according to the number of “1”s, and dividing the density level of each region according to the data density;

[0036] Step S52: setting diffusion factors, setting diffusion factors for each region according to the density level, and generating a diffusion factor matrix, in which each diffusion factor corresponds to one region;

[0037] Step S53: Density adaptive diffusion operation: for each region, a diffusion operation is performed using a corresponding diffusion factor to obtain a diffused region, which is overlapped into the original Boolean matrix;

[0038] Step S54: secondary diffusion, repeating steps S51 to S52, generating a new diffusion factor matrix and then repeating step S53;

[0039] Step S55: Output the encrypted Boolean matrix. After two diffusion operations, the encrypted Boolean matrix is ​​obtained.

[0040] The beneficial effects achieved by the present invention using the above scheme are as follows:

[0041] (1) In view of the problems of high predictability and low anti-cracking ability of general static encryption methods, the present invention uses an asynchronous update Boolean network encryption algorithm in a 5G encryption communication module to dynamically encrypt the original data to be encrypted, involving dynamic encoding of Boolean matrices and chaotic key stream generation, making each step of the encryption process full of uncertainty;

[0042] (2) By using 2D-FPSM to generate chaotic key stream, using two-dimensional coordinates to generate chaotic sequences, and using iterative formulas to generate irregular chaotic trajectories, the piecewise sine function is used to generate chaotic sequences. This makes the key stream highly random and unpredictable, preventing data from being stolen or leaked during transmission.

[0043] (3) By using a density-based diffusion algorithm in the diffusion encryption operation, the data density is combined with the diffusion factor, the encrypted data is processed in blocks, the density structure and diffusion rules of the data are changed, the statistical randomness of the encrypted data is increased, and the reliability, privacy protection level and flexibility of distribution network communication are improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] Figure 1 A schematic diagram of a 5G communication encryption and protection system for distribution network security proposed by the present invention;

[0045] Figure 2 A schematic diagram of the operation steps for dynamically encrypting data using an asynchronously updated Boolean network encryption algorithm;

[0046] Figure 3 Schematic diagram of the operation of the density-based diffusion algorithm.

[0047] The accompanying drawings are used to provide further understanding of the present invention and constitute a part of the specification. They are used to explain the present invention together with the embodiments of the present invention and do not constitute a limitation of the present invention. DETAILED DESCRIPTION

[0048] The technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all the embodiments; based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention.

[0049] Example 1, see Figure 1 The present invention provides a 5G communication encryption and protection system for distribution network security, including a 5G encryption communication module, an identity authentication module, an anomaly detection module, an edge encryption module, a data isolation module and a rights management module, specifically including the following contents:

[0050] The 5G encryption communication module dynamically encrypts the original data to be encrypted using an asynchronously updated Boolean network encryption algorithm based on the high-speed encryption protocol of the 5G network;

[0051] The identity authentication module verifies the user and device identity through two-factor authentication, SIM card verification and device fingerprint recognition;

[0052] The anomaly detection module monitors the communication traffic of the distribution network, detects abnormal traffic characteristics and potential attack behaviors, identifies abnormal traffic patterns and takes preventive measures;

[0053] The edge encryption module uses a symmetric encryption algorithm to perform on-site encryption processing on the edge device of the distribution network;

[0054] The data isolation module uses virtualization technology to store and transmit sensitive data separately from ordinary data;

[0055] The authority management module performs hierarchical authority management based on user roles and device identities.

[0056] In this embodiment, the identity authentication module combines the user password and SMS verification code through two-factor authentication, SIM card verification ensures the uniqueness of the device registration information, and the device fingerprint recognition technology further verifies the device identity by collecting the device's feature information, including the device model and operating system version;

[0057] The anomaly detection module monitors the communication traffic of the distribution network in real time, detects abnormal traffic characteristics and potential attack behaviors, extracts network traffic characteristics using deep packet inspection technology, and identifies abnormal patterns through a clustering analysis algorithm based on DBSCAN, and triggers preventive measures;

[0058] The edge encryption module deploys lightweight encryption technology on the edge devices of the distribution network and uses AES-128 for encryption processing;

[0059] The data isolation module adopts container isolation technology. In this embodiment, Docker containers are used to isolate different data, prevent sensitive data from being confused with ordinary data, and improve data security;

[0060] The permission management module divides access rights according to user roles, controls data access levels through the RBAC framework, and implements device identity authentication and authorization control in combination with device fingerprints to ensure the security of data access.

[0061] Example 2, see Figure 2 This embodiment is based on the above embodiment. The 5G encryption communication module uses an asynchronous update Boolean network encryption algorithm to dynamically encrypt data. The specific implementation steps are as follows:

[0062] Step S1: Data preparation at the sending end: the sending end divides the original data to be encrypted into data blocks and converts them into Boolean matrices, where the data bits in the Boolean matrix are the initial positions;

[0063] Step S2: asynchronously updating the Boolean network state coding, performing state coding on the Boolean matrix, converting the Boolean matrix into a state sequence of the Boolean network through the state coding, and rearranging it into a coded Boolean matrix;

[0064] Step S3: Generate a chaotic key stream, using 2D-FPSM to generate a chaotic key stream;

[0065] Step S4: Scrambling encryption operation, using the chaotic key stream to perform a scrambling operation on the coded Boolean matrix, scrambling the data bits in the coded Boolean matrix, and obtaining a scrambled Boolean matrix;

[0066] Step S5: diffusion encryption operation, the scrambled Boolean matrix enters the diffusion operation, and uses the density-based diffusion algorithm to obtain the encrypted Boolean matrix;

[0067] Step S6: Encrypted transmission: encrypt and transmit the encrypted Boolean matrix through the security protocol of the 5G network, and transmit the encrypted Boolean matrix using the network high-speed protocol;

[0068] Step S7: The receiving end decrypts using the same chaotic key stream as the sender.

[0069] In this embodiment, in step S1, the transmitting end divides the original data to be encrypted into 8-bit data blocks, and each data block is represented by converting it into a Boolean matrix. The original data "1010110" is converted into a 7-bit Boolean matrix, where each bit represents a bit of the data. This matrix represents the initial data.

[0070] Step S6: A secure communication channel is established between the sender and the receiver, and the transmission layer is encrypted using the SSL / TLS standard to ensure that the data is not stolen or tampered with when transmitted on the 5G network. While the sender transmits data through the 5G network, it regularly provides transmission feedback to confirm whether the data is successfully sent. If the sent data packet is lost or the transmission is abnormal, the data is retransmitted through the automatic repeat request ARQ;

[0071] Step S7, the decryption process includes the following key steps:

[0072] Step S71: receiving the encrypted Boolean matrix;

[0073] Step S72: Verification and initialization, integrity verification of the received encrypted Boolean matrix, and data sorting according to the received sequence number and timestamp;

[0074] Step S73: Synchronize the chaotic key stream, and generate the same chaotic key stream at the receiving end according to the key stream generation rule;

[0075] Step S74: reverse scrambling operation;

[0076] Step S75: reverse diffusion operation;

[0077] Step S76: Boolean matrix recovery. After the inverse diffusion operation is completed, the receiving end obtains the restored Boolean matrix and continues to convert the Boolean matrix back to the original data format;

[0078] Step S77: During the decryption process, the receiving end uses a CRC check algorithm to verify the decryption result. If the verification is successful, the receiving end will use the decrypted original data for further use.

[0079] Embodiment 3: This embodiment is based on the above embodiment. In step S3, a chaotic key stream is generated using 2D-FPSM. The 2D-FPSM specifically includes the following contents:

[0080] 2D-FPSM generates a chaotic sequence based on two-dimensional coordinates and performs segmented mapping. Two sine functions with different intervals are designed. Each round of iteration generates a new two-dimensional point. The chaotic sequence formed by these points is used as the key stream.

[0081] The two-dimensional chaotic sequence is generated by an iterative formula, and the iterative formula used is as follows: ; ;

[0082] in, and Indicates The iteration generates the horizontal and vertical coordinates of the two-dimensional point. and Respectively represent The horizontal and vertical coordinates of the two-dimensional chaotic sequence in the iteration, is the control parameter used to adjust the distribution of chaotic sequences. is the control parameter used to adjust the randomness of the chaotic sequence. and It is a piecewise sine function, which introduces nonlinear chaotic characteristics;

[0083] The piecewise sine function is as follows: ; ;

[0084] in, and is the horizontal and vertical coordinates of a two-dimensional point.

[0085] Embodiment 4: This embodiment is based on the above embodiment. In step S3, a 2D-FPSM is used to generate a chaotic key stream. The generation steps are as follows:

[0086] Step S31: setting initial values, and randomly assigning initial values ​​to the horizontal and vertical coordinates;

[0087] Step S32: Parameter selection, parameter setting and ;

[0088] Step S33: iteratively generate a chaotic sequence, and generate a plurality of chaotic coordinates by using an iterative formula;

[0089] Step S34: quantize the key stream, convert the horizontal and vertical coordinates of each chaotic coordinate into integers, combine them into a bit stream, and the bit stream is used as the chaotic key stream.

[0090] In this embodiment, the initial values ​​of the horizontal and vertical coordinates are set , ,parameter and are 0.5 and 0.6 respectively, generating a chaotic key stream of length N, and setting N=1000;

[0091] In this embodiment, it is iterated five times, and the steps are as follows:

[0092] Iteration 1: ; ; ; ;

[0093] Iteration 2: ; ; ; ;

[0094] Iteration 3: ; ; ; ;

[0095] Iteration 4: ; ; ; ;

[0096] Iteration 5: ; ; ; ;

[0097] Quantized key stream, first group: ; ;

[0098] From the above calculation, we can know , ; , ; , ; , ;

[0099] Convert each quantized integer value into 8-bit binary representation and combine them in sequence to generate a bit stream;

[0100] Assume that five groups of bit streams are connected in series, and the chaotic key stream is:

[0101] 1110001111110110010100000101010000100111001010001000011110010100100011111.

[0102] Embodiment 5, based on the above embodiment, step S4 specifically includes the following steps:

[0103] Step S41: Establishing a mapping relationship, generating a new index position for all data bits in the encoded Boolean matrix according to the chaotic key stream, the new index position is the scrambled position, and establishing a mapping relationship between the initial position and the scrambled position;

[0104] Step S42: data bit exchange and scrambling, the data bits in the coding Boolean matrix are exchanged one by one according to the mapping relationship between the initial position and the scrambled position;

[0105] Step S43: Matrix output, rearranging the scrambled data bits to generate a scrambled Boolean matrix.

[0106] Example 6, see Figure 3 This embodiment is based on the above embodiment. Step S5 uses a density-based diffusion algorithm, and specifically includes the following steps:

[0107] Step S51: Data density detection, dividing the scrambled Boolean matrix into regions of 4×4 data bits, calculating the data density in each region according to the number of “1”s, and dividing the density level of each region according to the data density;

[0108] Step S52: setting diffusion factors, setting diffusion factors for each region according to the density level, and generating a diffusion factor matrix, in which each diffusion factor corresponds to one region;

[0109] Step S53: Density adaptive diffusion operation: for each region, a diffusion operation is performed using a corresponding diffusion factor to obtain a diffused region, which is overlapped into the original Boolean matrix;

[0110] Step S54: secondary diffusion, repeating steps S51 to S52, generating a new diffusion factor matrix and then repeating step S53;

[0111] Step S55: Output the encrypted Boolean matrix. After two diffusion operations, the encrypted Boolean matrix is ​​obtained.

[0112] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0113] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

[0114] The present invention and its embodiments are described above, and such description is not restrictive. The drawings show only one embodiment of the present invention, and the actual structure is not limited thereto. In short, if ordinary technicians in the field are inspired by it, without departing from the purpose of the invention, they can design a structure and embodiment similar to the technical solution without creativity, which should belong to the protection scope of the present invention.

Claims

1. A 5G communication encryption and protection system for distribution network security, characterized by: It includes 5G encrypted communication module, identity authentication module, anomaly detection module, edge encryption module, data isolation module and permission management module, specifically including the following contents: The 5G encryption communication module dynamically encrypts the original data to be encrypted using an asynchronously updated Boolean network encryption algorithm based on the high-speed encryption protocol of the 5G network; The identity authentication module verifies the user and device identity through two-factor authentication, SIM card verification and device fingerprint recognition; The anomaly detection module monitors the communication traffic of the distribution network, detects abnormal traffic characteristics and potential attack behaviors, identifies abnormal traffic patterns and takes preventive measures; The edge encryption module uses a symmetric encryption algorithm to perform on-site encryption processing on the edge device of the distribution network; The data isolation module uses virtualization technology to store and transmit sensitive data separately from ordinary data; The authority management module performs hierarchical authority management based on user roles and device identities.

2. A 5G communication encryption and protection system for distribution network security according to claim 1, characterized in that: The 5G encrypted communication module uses the asynchronous update Boolean network encryption algorithm to dynamically encrypt data. The specific implementation steps are as follows: Step S1: Data preparation at the sending end: the sending end divides the original data to be encrypted into data blocks and converts them into Boolean matrices, where the data bits in the Boolean matrix are the initial positions; Step S2: asynchronously updating the Boolean network state coding, performing state coding on the Boolean matrix, converting the Boolean matrix into a state sequence of the Boolean network through the state coding, and rearranging it into a coded Boolean matrix; Step S3: Generate a chaotic key stream, using 2D-FPSM to generate a chaotic key stream; Step S4: Scrambling encryption operation, using the chaotic key stream to perform a scrambling operation on the coded Boolean matrix, scrambling the data bits in the coded Boolean matrix, and obtaining a scrambled Boolean matrix; Step S5: diffusion encryption operation, the scrambled Boolean matrix enters the diffusion operation, and uses the density-based diffusion algorithm to obtain the encrypted Boolean matrix; Step S6: Encrypted transmission: encrypt and transmit the encrypted Boolean matrix through the security protocol of the 5G network, and transmit the encrypted Boolean matrix using the network high-speed protocol; Step S7: The receiving end decrypts using the same chaotic key stream as the sender.

3. A 5G communication encryption and protection system for distribution network security according to claim 2, characterized in that: In step S3, a chaotic key stream is generated using 2D-FPSM, wherein the 2D-FPSM specifically includes the following contents: 2D-FPSM generates a chaotic sequence based on two-dimensional coordinates and performs segmented mapping. Two sine functions with different intervals are designed. Each round of iteration generates a new two-dimensional point. The chaotic sequence formed by these points is used as the key stream. The two-dimensional chaotic sequence is generated by an iterative formula, and the iterative formula used is as follows: ； ； in, and Indicates The iteration generates the horizontal and vertical coordinates of the two-dimensional point. and Respectively represent The horizontal and vertical coordinates of the two-dimensional chaotic sequence in the iteration, is the control parameter used to adjust the distribution of chaotic sequences. is the control parameter used to adjust the randomness of the chaotic sequence. and It is a piecewise sine function, which introduces nonlinear chaotic characteristics; The piecewise sine function is as follows: ； ； in, and is the horizontal and vertical coordinates of a two-dimensional point.

4. A 5G communication encryption and protection system for distribution network security according to claim 2, characterized in that: In step S3, the steps of generating a chaotic key stream using 2D-FPSM are as follows: Step S31: setting initial values, and randomly assigning initial values ​​to the horizontal and vertical coordinates; Step S32: parameter selection, setting parameters a and b; Step S33: iteratively generate a chaotic sequence, and generate a plurality of chaotic coordinates by using an iterative formula; Step S34: quantize the key stream, convert the horizontal and vertical coordinates of each chaotic coordinate into integers, combine them into a bit stream, and the bit stream is used as the chaotic key stream.

Images