A cross-network SIP signaling secure interaction method and system

Abstract

The present application relates to the technical field of cross-network data interaction, and in particular to a cross-network SIP signaling secure interaction method and system. The method includes: obtaining pre-transmission information, performing structured extraction and processing of key information on the pre-transmission information, and determining structured key transmission information; extracting context key information based on the structured key transmission information, and scrambling the structured key transmission information to determine a set of obfuscated transmission information; based on the structured key transmission information and the set of obfuscated transmission information, performing mapping relationship processing on the obfuscated transmission information set to determine signaling mapping information; based on the signaling mapping information, determining and outputting packaged signaling information according to the obfuscated transmission information set. The present application effectively guarantees the security of SIP signaling data without breaking the isolation requirements of the private network boundary, making SIP signaling data less susceptible to sniffing and man-in-the-middle attacks, thereby effectively avoiding the leakage of sensitive information and the reduction of communication efficiency.

Description

Technical Field

[0001] The present application relates to the technical field of cross-network data interaction, and in particular to a cross-network SIP signaling secure interaction method and system. Background Art

[0002] With the rapid development of Internet technology, cross-network communication scenarios are becoming more and more common, but this also brings security risks. Attacks such as unauthorized access, signaling hijacking, and message tampering are becoming increasingly rampant, threatening the security and privacy protection of communications.

[0003] However, the existing cross-network SIP signaling interaction technology is difficult to effectively ensure the security of SIP signaling data without breaking the private network boundary isolation requirements, making SIP signaling data vulnerable to sniffing and man-in-the-middle attacks, resulting in the leakage of sensitive information and reduced communication efficiency. Summary of the invention

[0004] The present application provides a cross-network SIP signaling secure interaction method and system to solve the above technical problems.

[0005] In a first aspect, the present application provides a cross-network SIP signaling secure interaction method, the method comprising: Acquire pre-transmission information, perform key information structured extraction processing on the pre-transmission information, and determine structured key transmission information; Extracting context key information according to the structured key transmission information, and scrambling the structured key transmission information to determine a set of obfuscated transmission information; Based on the structured key transmission information and the obfuscated transmission information set, performing mapping relationship processing on the obfuscated transmission information set to determine signaling mapping information; Based on the signaling mapping information and according to the obfuscated transmission information set, packaging signaling information is determined and output.

[0006] Through this solution, key information structured extraction and processing is performed on pre-transmission information to determine structured key transmission information in order to reduce data redundancy and improve the overall efficiency of information transmission. On this basis, context key information is extracted and introduced, and structured key transmission information is scrambled so that the security of transmission information does not rely on specific preset rules, but is scrambled in a dynamic context environment in a way that is difficult to predict, effectively reducing data security risks. Further, through analysis of signaling mapping information and data packaging processing combined with obfuscated transmission information sets, the reproducibility of transmission information under the premise of secure transmission is guaranteed, effectively ensuring the security of SIP signaling data and making SIP signaling data difficult to be sniffed and attacked, thereby reducing the risk of sensitive information leakage and decreased communication efficiency.

[0007] Optionally, performing structured key information extraction processing on the pre-transmission information to determine structured key transmission information includes: Analyze the pre-transmission information, perform redundancy minimization processing on the pre-transmission information, and determine a number of necessary fields and corresponding attribute values; Determining structured field information according to the plurality of necessary fields and the corresponding attribute values; According to a predefined data verification strategy, the data format of the structured field information is verified to determine a verification result; If the verification result is successful, the structured field information is used as the structured key transmission information.

[0008] Through this solution, the pre-transmission information is processed to minimize redundancy, and the corresponding necessary fields and corresponding attribute values ​​are obtained to construct structured field information. The structured field information is then verified according to the predefined data verification strategy to ensure that the format and integrity of the data are correct. The verified structured field information is used as structured key transmission information to improve data transmission reliability and prevent potential data leakage and errors.

[0009] Optionally, extracting context key information according to the structured key transmission information, and scrambling the structured key transmission information to determine the obfuscated transmission information set includes: Analyze the structured key transmission information to extract the message character length, sending time and sender identification; Determine a key context vector according to the message character length, the sending time and the sender identifier, and use the key context vector as the context key information; Determining a number of preselected factors according to the message character length, and determining a unit information block length according to the number of preselected factors and the corresponding number of preselected factors; Dividing the structured key information into information blocks according to the unit information block length to determine a key information block set; According to the context key information, multiple scrambling processes are performed on the key information block set to determine a confused transmission information set.

[0010] Through this scheme, structured key information is analyzed and dynamic features are extracted therein, and a key context vector is generated once as the basis for scrambling, ensuring that the scrambling process can dynamically adapt to real-time information and improve its effectiveness. By determining the pre-selected factors and the unit information block length, the division of information blocks is optimized, so that the randomness of the scrambling process is enhanced. By implementing multiple scrambling processes, the complexity and unreadability of the data are significantly enhanced, effectively preventing potential attacks, and then the privacy of information is guaranteed by the generated obfuscated transmission information set, which also provides reliable support for subsequent secure communications.

[0011] Optionally, the determining of a plurality of preselected factors according to the message character length, and the determining of the unit information block length according to the plurality of preselected factors and the corresponding number of preselected factors is specifically the following formula: ; in, is the unit information block length, is a random selection function, is the preselected factor, is the character length of the message, is the number of preselected factors.

[0012] Through this scheme, mathematical analysis methods are used to describe the process of determining several pre-selected factors according to the length of message characters through clear mathematical formulas, and determining the length of the unit information block according to the several pre-selected factors and the corresponding number of pre-selected factors, thereby improving the randomness and scientificity of the process of determining the length of the unit information block, and then improving the dynamics and unpredictability of the process of dividing the structured key information into information blocks according to the length of the unit information block, so as to enhance the security of the scrambling process.

[0013] Optionally, dividing the structured key information into information blocks according to the unit information block length to determine a key information block set is specifically the following formula: ; in, is the key information block set, For the structured key transmission information, To traverse the mark, is the unit information block length, is the character length of the message; Determining the total number of key information blocks according to the key information block set; The key information block set is subjected to multiple scrambling processing according to the context key information to determine the obfuscated transmission information set, which is specifically the following formula: ; in, For the obfuscated transmission information set, is the scrambled information block, is the scrambling function, is the first Key information blocks, is the context key information, is the key information block set, is the total number of key information blocks.

[0014] Through this scheme, mathematical analysis methods are used to describe the division process of structured key information according to the unit information block length through clear mathematical formulas, and a set of key information blocks is automatically integrated. Then, based on the contextual key information, a mathematical formula is designed to describe the process of multiple scrambling of the key information block set, so that the obfuscated transmission information as the scrambling result depends on the dynamic contextual key information, thereby improving the security of the obfuscated transmission information.

[0015] Optionally, the method further includes: Determining the total number of feature vectors according to the context key information; In the process of performing multiple scrambling processes on the key information block set, recording the scrambling process time of the scrambling function on each of the key information blocks, thereby determining an average scrambling process time; Based on the key information block set, analyzing the obfuscated transmission information set, determining the amount of characters added after scrambling corresponding to each key information in the obfuscated transmission information set, and thereby determining the average amount of characters added after scrambling; Based on the total number of key information blocks and the total number of feature vectors, according to the average scrambling processing time and the average increased number of characters after scrambling, determine the scrambling time complexity of the multiple scrambling process; The scrambling time complexity is compared with the preset time complexity. If the scrambling time complexity is greater than the preset time complexity, the length of the unit information block is extended, and the structured key information is re-divided into information blocks accordingly.

[0016] Through this scheme, the total number of characteristic vectors, the average scrambling processing time and the average number of characters increased after scrambling, which directly affect the time complexity of the scrambling process, are analyzed and obtained. On this basis, a scientific evaluation of the time complexity is conducted to determine whether it is necessary to adjust the unit information length to reduce the delay in the data transmission process.

[0017] Optionally, the scrambling time complexity of the multiple scrambling process is determined based on the total number of key information blocks and the total number of feature vectors, according to the average scrambling process time and the average increased number of characters after scrambling, specifically the following formula: ; in, is the scrambling time complexity, is the time complexity function, is the total number of key information blocks, is the total number of eigenvectors, is the average scrambling processing time, The average amount of characters increased after scrambling.

[0018] Through this scheme, mathematical analysis is used to comprehensively consider the impact of the total number of key information blocks, the total number of feature vectors, the average scrambling processing time and the average increase in the number of characters after scrambling on the time complexity, and the scrambling time complexity is scientifically quantified to improve the scientificity and accuracy of the evaluation of the scrambling time complexity.

[0019] Optionally, the performing mapping relationship processing on the obfuscated transmission information set based on the structured key transmission information and the obfuscated transmission information set to determine the signaling mapping information includes: According to the key information block set, the obfuscated transmission information set and the context key information, a unit mapping relationship between each key information block and the scrambled information block is determined, and a mapping relationship set is constructed based on this, which is specifically the following formula: ; in, is the mapping relationship set, is the first Key information blocks, is the unit mapping relationship, is the context key information, The obfuscated transmission information set is said scrambled information blocks, is the total number of key information blocks; The mapping relationship set is used as the signaling mapping information.

[0020] Through this scheme, by using the mathematical analysis process, according to the key information block set, the obfuscated transmission information set and the context key information, the extraction process of the unit mapping relationship between each key information block and the scrambled information block is described by mathematical formulas, and then according to all the mapping relationships, a mapping relationship set is constructed to improve the scientificity and accuracy of the mapping relationship set, and ensure the efficiency and accuracy of the subsequent data restoration process.

[0021] Optionally, the determining and outputting the packaging signaling information based on the signaling mapping information and according to the obfuscated transmission information set includes: Extracting a consistency identifier of the signaling mapping information according to the signaling mapping information; Encrypting the signaling mapping information according to the consistency identifier to determine a mapping information key; The packaging signaling information is constructed and output according to the consistency identifier, the mapping information key and the obfuscated transmission information set.

[0022] Through this solution, the signaling mapping information is encrypted, and the packaged signaling information is constructed based on the consistency identifier, mapping information key and obfuscated transmission information set. While ensuring the security of signaling mapping information transmission, it prevents the attacker from attacking the data receiver by tampering with the signaling mapping information, thereby further improving data security.

[0023] In a second aspect, the present application provides a cross-network SIP signaling secure interaction system, the system comprising: An information analysis module, used to obtain pre-transmission information, perform key information structured extraction processing on the pre-transmission information, and determine structured key transmission information; A scrambling processing module, used to extract context key information according to the structured key transmission information, and perform scrambling processing on the structured key transmission information to determine a set of obfuscated transmission information; A mapping analysis module, configured to perform mapping relationship processing on the obfuscated transmission information set based on the structured key transmission information and the obfuscated transmission information set, and determine signaling mapping information; A packaging output module is used to determine and output packaging signaling information based on the signaling mapping information and the obfuscated transmission information set.

[0024] Optionally, the information analysis module is specifically used to: Analyze the pre-transmission information, perform redundancy minimization processing on the pre-transmission information, and determine a number of necessary fields and corresponding attribute values; Determining structured field information according to the plurality of necessary fields and the corresponding attribute values; According to a predefined data verification strategy, the data format of the structured field information is verified to determine a verification result; If the verification result is successful, the structured field information is used as the structured key transmission information.

[0025] Optionally, the scrambling processing module is specifically used to: Analyze the structured key transmission information to extract the message character length, sending time and sender identification; Determine a key context vector according to the message character length, the sending time and the sender identifier, and use the key context vector as the context key information; Determining a number of preselected factors according to the message character length, and determining a unit information block length according to the number of preselected factors and the corresponding number of preselected factors; Dividing the structured key information into information blocks according to the unit information block length to determine a key information block set; According to the context key information, multiple scrambling processes are performed on the key information block set to determine a confused transmission information set.

[0026] Optionally, when the scrambling processing module determines a number of preselected factors according to the message character length, and determines the unit information block length according to the preselected factors and the corresponding number of preselected factors, the formula is specifically as follows: ; in, is the unit information block length, is a random selection function, is the preselected factor, is the character length of the message, is the number of preselected factors.

[0027] Optionally, the scrambling processing module divides the structured key information into information blocks according to the unit information block length to determine a key information block set, which is specifically the following formula: ; in, is the key information block set, For the structured key transmission information, To traverse the mark, is the unit information block length, is the character length of the message; Determining the total number of key information blocks according to the key information block set; The key information block set is subjected to multiple scrambling processing according to the context key information to determine the obfuscated transmission information set, which is specifically the following formula: ; in, For the obfuscated transmission information set, is the scrambled information block, is the scrambling function, is the first Key information blocks, is the context key information, is the key information block set, is the total number of key information blocks.

[0028] Optionally, the system further includes a complexity analysis module, configured to: Determining the total number of feature vectors according to the context key information; In the process of performing multiple scrambling processes on the key information block set, recording the scrambling process time of the scrambling function on each of the key information blocks, thereby determining an average scrambling process time; Based on the key information block set, analyzing the obfuscated transmission information set, determining the amount of characters added after scrambling corresponding to each key information in the obfuscated transmission information set, and thereby determining the average amount of characters added after scrambling; Based on the total number of key information blocks and the total number of feature vectors, according to the average scrambling processing time and the average increased number of characters after scrambling, determine the scrambling time complexity of the multiple scrambling process; The scrambling time complexity is compared with the preset time complexity. If the scrambling time complexity is greater than the preset time complexity, the length of the unit information block is extended, and the structured key information is re-divided into information blocks accordingly.

[0029] Optionally, the complexity analysis module determines the scrambling time complexity of the multiple scrambling process based on the total number of key information blocks and the total number of feature vectors, according to the average scrambling process time and the average increased number of characters after scrambling, specifically the following formula: ; in, is the scrambling time complexity, is the time complexity function, is the total number of key information blocks, is the total number of eigenvectors, is the average scrambling processing time, The average amount of characters increased after scrambling.

[0030] Optionally, the mapping analysis module is specifically used to: According to the key information block set, the obfuscated transmission information set and the context key information, a unit mapping relationship between each key information block and the scrambled information block is determined, and a mapping relationship set is constructed based on this, which is specifically the following formula: ; in, is the mapping relationship set, is the first Key information blocks, is the unit mapping relationship, is the context key information, The obfuscated transmission information set is said scrambled information blocks, is the total number of key information blocks; The mapping relationship set is used as the signaling mapping information.

[0031] Optionally, the packaging output module is specifically used to: Extracting a consistency identifier of the signaling mapping information according to the signaling mapping information; Encrypting the signaling mapping information according to the consistency identifier to determine a mapping information key; The packaging signaling information is constructed and output according to the consistency identifier, the mapping information key and the obfuscated transmission information set. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, a brief introduction will be given below to the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0033] Figure 1 A schematic diagram of an application scenario provided for an embodiment of the present application; Figure 2 A flowchart of a cross-network SIP signaling secure interaction method provided in an embodiment of the present application; Figure 3 A schematic diagram of the structure of a cross-network SIP signaling secure interaction system provided in one embodiment of the present application. DETAILED DESCRIPTION

[0034] In order to make the purpose, technical scheme and advantages of the embodiments of the present application clearer, the technical scheme in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0035] In addition, the term "and / or" in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article, unless otherwise specified, generally means that the associated objects before and after are in an "or" relationship.

[0036] The embodiments of the present application are further described in detail below in conjunction with the drawings in the specification.

[0037] Existing cross-network SIP signaling interaction technology is difficult to effectively ensure the security of SIP signaling data without breaking the isolation requirements of private network boundaries, making SIP signaling data vulnerable to sniffing and man-in-the-middle attacks, resulting in the leakage of sensitive information and reduced communication efficiency.

[0038] Based on this, the present application provides a cross-network SIP signaling secure interaction method and system. Perform structured extraction and processing of key information on pre-transmission information, determine structured key transmission information, reduce data redundancy, and improve the overall efficiency of information transmission. On this basis, extract and introduce context key information, scramble the structured key transmission information, so that the security of transmission information does not rely on specific preset rules, but performs unpredictable scrambling processing based on the dynamic context environment, effectively reducing data security risks, and further through the analysis of signaling mapping information and the data packaging processing combined with the obfuscated transmission information set, ensure the reproducibility of transmission information under the premise of secure transmission, effectively ensure the security of SIP signaling data, and make SIP signaling data difficult to be sniffed and attacked, thereby reducing the risk of sensitive information leakage and communication efficiency reduction.

[0039] Figure 1 A schematic diagram of an application scenario provided by this application. In the SIP signaling interaction process, the method provided by this application effectively ensures the security of SIP signaling data without breaking the isolation requirements of the private network boundary.

[0040] Specifically, the method provided by the present application is applied to any server, which communicates with the data sender and the data receiver respectively. The server performs key information structured extraction processing on the pre-transmission information provided by the data sender, determines the structured key transmission information, so as to reduce data redundancy and improve the overall information transmission efficiency. On this basis, the context key information is extracted and introduced, and the structured key transmission information is scrambled, so that the security of the transmission information does not rely on specific preset rules, but is difficult to predict according to the dynamic context environment. Scrambling processing effectively reduces data security risks, and further provides the corresponding packaged signaling information to the data receiver through the analysis of the signaling mapping information and the data packaging processing combined with the obfuscated transmission information set, ensuring the reducibility of the transmission information under the premise of secure transmission, effectively ensuring the security of SIP signaling data, making it difficult to be sniffed and attacked, thereby reducing the risk of sensitive information leakage and communication efficiency reduction. The specific implementation method can refer to the following embodiments.

[0041] Figure 2 This is a flow chart of a cross-network SIP signaling security interaction method provided by an embodiment of the present application. The method of this embodiment can be applied to the server in the above scenario. Figure 2 As shown, the method includes: S201: Acquire pre-transmission information, perform key information structured extraction processing on the pre-transmission information, and determine structured key transmission information.

[0042] The pre-transmission information may be information required to be transmitted to establish a SIP session, and the pre-transmission information may be obtained from the information sending end.

[0043] The structured key transmission information may be information obtained by extracting key information in the pre-transmission information, such as caller ID, called ID, etc., and performing structured processing in a specific format.

[0044] Specifically, in the process of establishing a secure SIP session, key information in the pre-transmitted information is extracted according to a predefined data processing strategy (the data strategy is specified by the data protocol between the information sender and the information receiver), and the extracted key information is converted into structured data in a specific format (such as JSON format) through a data structured processing library to reduce data redundancy and minimize the processing of pre-transmitted information. While improving the overall efficiency of information transmission, it provides a clear and scientific data framework for subsequent security processing.

[0045] S202: extract context key information according to the structured key transmission information, and use the context key information to scramble the structured key transmission information to determine a set of obfuscated transmission information.

[0046] The context key information may be key information in the structured key transmission information that can provide semantic support for data scrambling, such as the sender of the information.

[0047] The obfuscated transmission information set may be an information set formed by scrambling the structured key information, and may include important data that is rearranged and hidden; Specifically, after obtaining the structured key transmission information that needs to be transmitted, in order to ensure the security of the information during transmission, the context key information in the structured key transmission information is extracted through a preset regular expression or a specific data parsing function, and through mathematical analysis means, the structured key information is scrambled by disrupting and confusing the context key information to obtain a confused transmission information set, so that the structured key information cannot be correctly parsed even if it is leaked, thereby reducing the risk of the structured key information being stolen and tampered with during the transmission process, and improving the security and privacy protection of communications.

[0048] S203: Based on the structured key transmission information and the obfuscated transmission information set, a mapping relationship process is performed on the obfuscated transmission information set to determine the signaling mapping information.

[0049] The signaling mapping information may be information reflecting the conversion relationship between the structured key transmission information and the obfuscated information set.

[0050] Specifically, after generating the obfuscated transmission information set, in order to ensure that the data recipient can correctly parse and restore the obfuscated transmission information based on the parsing logic jointly agreed upon by both parties, the mapping relationship between the structured key transmission information and the obfuscated transmission information set is extracted through mathematical analysis before data transmission, and the signaling mapping information is constructed. By separately transmitting the obfuscated information set and the signaling mapping information, potential data thieves will not be able to correctly parse the information when only obtaining one of the information. Even if the data thief obtains the obfuscated information set and the signaling mapping information at the same time, it will still be impossible to correctly restore the data without the corresponding parsing logic, thereby further ensuring data security.

[0051] S204: Based on the signaling mapping information and the obfuscated transmission information set, determine and output the packaged signaling information.

[0052] The packaged signaling information may be packaged information including a confused transport information set and signaling mapping information.

[0053] Specifically, after obtaining the signaling mapping information and the obfuscated transmission information set, the signaling mapping information and the obfuscated transmission information set are integrated into a complete packaged signaling information that can be safely transmitted, and the corresponding packaged signaling information is provided to the data recipient to ensure the real-time and consistency of the information transmission process, while ensuring the verifiability of the signaling information.

[0054] Through this solution, key information structured extraction and processing is performed on pre-transmission information to determine structured key transmission information in order to reduce data redundancy and improve the overall efficiency of information transmission. On this basis, context key information is extracted and introduced, and structured key transmission information is scrambled so that the security of transmission information does not rely on specific preset rules, but is scrambled in a dynamic context environment in a way that is difficult to predict, effectively reducing data security risks. Further, through analysis of signaling mapping information and data packaging processing combined with obfuscated transmission information sets, the reproducibility of transmission information under the premise of secure transmission is guaranteed, effectively ensuring the security of SIP signaling data and making SIP signaling data difficult to be sniffed and attacked, thereby reducing the risk of sensitive information leakage and decreased communication efficiency.

[0055] In some embodiments, the pre-transmission information is analyzed, redundancy is minimized, and several necessary fields and corresponding attribute values ​​are determined; structured field information is determined based on the several necessary fields and the corresponding attribute values; data format verification is performed on the structured field information according to a predefined data verification strategy to determine the verification result; if the verification result is a successful verification, the structured field information is used as structured key transmission information.

[0056] The required fields may be key information items required to ensure that the pre-transmission information can be effectively delivered.

[0057] The attribute value may be a specific value corresponding to the key information item corresponding to the required field.

[0058] The structured field information may be field information that organizes and formats necessary fields and attribute values ​​to facilitate subsequent processing and transmission.

[0059] The predefined data validation strategy may be rules and standards implemented for structured field information, used to verify information format and data integrity. The predefined data validation strategy may be implemented by setting corresponding regular expressions according to specific validation requirements.

[0060] The verification result may be a check on the structured field information to determine whether it complies with the predefined verification strategy result.

[0061] Specifically, through the data transmission protocol agreed upon by both parties to the data transmission, the necessary fields and corresponding attribute values ​​in the pre-transmission information are extracted, and the corresponding structured field information is constructed in the form of "field name: attribute value" to reduce unnecessary information burden and improve processing efficiency. Then, according to the predefined data verification strategy, such as the regular expression used to characterize the data verification rule, the data format and integrity of each field in the structured field information are checked. If the verification is successful, it means that there is no problem with the current pre-transmission information and the processing of the pre-transmission information, and subsequent processing can be performed. At this time, the structured field information is used as structured key transmission information to facilitate further security processing. If the verification fails, the current pre-transmission information is discarded, and the pre-transmission information is re-acquired and analyzed.

[0062] Through this solution, the pre-transmission information is processed to minimize redundancy, and the corresponding necessary fields and corresponding attribute values ​​are obtained to construct structured field information. The structured field information is then verified according to the predefined data verification strategy to ensure that the format and integrity of the data are correct. The verified structured field information is used as structured key transmission information to improve data transmission reliability and prevent potential data leakage and errors.

[0063] In some embodiments, structured key transmission information is analyzed to extract the message character length, sending time and sender identification; a key context vector is determined based on the message character length, sending time and sender identification, and the key context vector is used as context key information; a number of pre-selected factors are determined based on the message character length, and a unit information block length is determined based on the number of pre-selected factors and the corresponding number of pre-selected factors; the structured key information is divided into information blocks based on the unit information block length to determine a key information block set; and the key information block set is subjected to multiple scrambling processing based on the context key information to determine a confused transmission information set.

[0064] The message character length may be a value corresponding to the total number of characters in the structured key transmission information.

[0065] The sending time may be a timestamp corresponding to when the data sender starts to transmit the pre-transmission message.

[0066] The sender ID may be a unique ID used to characterize the identity of the data sender.

[0067] The key context vector may be a multi-dimensional vector generated based on the message character length, sending time, and sender identification for characterizing the context comprehensive information features.

[0068] The preselected factors may be several factors corresponding to the total number of characters of the structured key transmission information.

[0069] The unit information block length may be the number of characters contained in the corresponding unit information block when the structured key information is divided into information blocks.

[0070] The key information block set may be a set consisting of a number of corresponding information blocks obtained by dividing the structured key information into information blocks.

[0071] Specifically, by parsing different field names in structured key transmission information, the message character length, sending time and sender ID are extracted. This information will change with the change of the sender's identity, information transmission time and specific transmission content. In different data transmission processes, the above parameters are dynamically changing and difficult to predict. Therefore, according to the extracted message character length, sending time and sender ID, the word vector model is used to obtain the vector representation corresponding to the message character length, sending time and sender ID, and the key context vector that can characterize the comprehensive context information characteristics is obtained by vector splicing. This is used as the basis for subsequent scrambling processing of structured key transmission information, which helps to enhance the unpredictability of subsequent scrambling processing to improve data security.

[0072] At the same time, in order to further enhance the dynamic degree of the data scrambling process, mathematical analysis is used to determine several pre-selected factors according to the message character length, and a pre-selected factor is randomly selected as the unit information block length. Based on the unit information block length, the structured key information is divided into several information blocks. Mathematical analysis is used to perform batch automatic scrambling on different information blocks according to the key context vector to obtain the scrambled obfuscated transmission information set, so as to enhance the randomness of the scrambling process and further improve data security.

[0073] Through this scheme, structured key information is analyzed and dynamic features are extracted therein, and a key context vector is generated once as the basis for scrambling, ensuring that the scrambling process can dynamically adapt to real-time information and improve its effectiveness. By determining the pre-selected factors and the unit information block length, the division of information blocks is optimized, so that the randomness of the scrambling process is enhanced. By implementing multiple scrambling processes, the complexity and unreadability of the data are significantly enhanced, effectively preventing potential attacks, and then the privacy of information is guaranteed by the generated obfuscated transmission information set, which also provides reliable support for subsequent secure communications.

[0074] In some embodiments, a number of preselected factors are determined according to the message character length, and the unit information block length is determined according to the number of preselected factors and the corresponding number of preselected factors, specifically the following formula (1): (1); in, is the unit information block length, is a random selection function, is the pre-selection factor, is the message character length, is the number of preselected factors.

[0075] The random selection function may be a mathematical function that randomly generates random integers according to a specific numerical interval and extracts pre-selected factors of the corresponding order of the random integers.

[0076] Specifically, through formula (1) Factorize the message character length value, determine several pre-selected factors corresponding to the message character length value, and use Specify the range of random number generation, and generate random numbers through the random number generation tool. A random integer between , and a pre-selected factor of a corresponding order from among the pre-selected factors is extracted according to the random integer. For example, if the generated random integer is 2, the second pre-selected factor from among the pre-selected factors is extracted and used as the unit information block length, thereby improving the randomness of the process of determining the unit information block length, and further improving the dynamics and unpredictability of the process of dividing the structured key information into information blocks according to the unit information block length, so as to enhance the security of the scrambling process.

[0077] Through this scheme, mathematical analysis methods are used to describe the process of determining several pre-selected factors according to the length of message characters through clear mathematical formulas, and determining the length of the unit information block according to the several pre-selected factors and the corresponding number of pre-selected factors, thereby improving the randomness and scientificity of the process of determining the length of the unit information block, and then improving the dynamics and unpredictability of the process of dividing the structured key information into information blocks according to the length of the unit information block, so as to enhance the security of the scrambling process.

[0078] In some embodiments, the structured key information is divided into information blocks according to the unit information block length to determine the key information block set, which is specifically the following formula (2): (2); in, is a set of key information blocks, To structure key transmission information, To traverse the mark, is the unit information block length, is the character length of the message; according to the key information block set, the total number of key information blocks is determined; according to the context key information, the key information block set is subjected to multiple scrambling processing to determine the obfuscated transmission information set, which is specifically the following formula (3): (3); in, To obfuscate the transmission information set, is the scrambled information block, is the scrambling function, is the first in the key information block set Key information blocks, For contextual key information, is a set of key information blocks, is the total number of key information blocks.

[0079] The scrambled information block may be an information block generated by scrambling the data in the key information block.

[0080] The scrambling function may be a mathematical function for scrambling the key information block, and the scrambling function may adopt a mathematical algorithm such as a substitution scrambling algorithm and a displacement scrambling algorithm.

[0081] Specifically, we extract from the starting position of the structured information using formula (1): The length is The substring is used as a unit key information block, and the key information blocks corresponding to all substrings are integrated into a key information block set according to the extraction order. , and then based on the context key information, according to the scrambling function in formula (3), each key information block in the key information block set is traversed and scrambled, and corresponding scrambled information blocks are generated respectively, and several scrambled information blocks are integrated into obfuscated transmission information, so that the obfuscated transmission information as the scrambling result depends on the dynamic context key information, thereby improving the security of the obfuscated transmission information.

[0082] Through this scheme, mathematical analysis methods are used to describe the division process of structured key information according to the unit information block length through clear mathematical formulas, and a set of key information blocks is automatically integrated. Then, based on the contextual key information, a mathematical formula is designed to describe the process of multiple scrambling of the key information block set, so that the obfuscated transmission information as the scrambling result depends on the dynamic contextual key information, thereby improving the security of the obfuscated transmission information.

[0083] In some embodiments, the total number of feature vectors is determined based on contextual key information; in the process of performing multiple scrambling processing on a set of key information blocks, the scrambling processing time of the scrambling function on each key information block is recorded to determine the average scrambling processing time; based on the set of key information blocks, the obfuscated transmission information set is analyzed to determine the amount of characters added after scrambling corresponding to each key information in the obfuscated transmission information set, and the average amount of characters added after scrambling is determined thereby; based on the total number of key information blocks and the total number of feature vectors, the scrambling time complexity of the multiple scrambling processing is determined; the scrambling time complexity is compared with the preset time complexity, and if the scrambling time complexity is greater than the preset time complexity, the length of the unit information block is extended, and the structured key information is re-divided into information blocks accordingly.

[0084] The total number of feature vectors may be the total number of feature vectors used to concatenate and form vector information corresponding to context key information.

[0085] The scrambling processing time may be the time taken to convert each key information block into a corresponding scrambled information block.

[0086] The average scrambling processing time may be the average time consumed for converting a key information block into a corresponding scrambled information block.

[0087] The average increased number of characters after scrambling may be the average increased number of characters in the scrambled information block compared with the corresponding key information block content.

[0088] The scrambling time complexity may be the time complexity corresponding to completing the scrambling process of all key information blocks.

[0089] The preset time complexity may be the maximum scrambling time complexity that is acceptable without causing significant session delay.

[0090] Specifically, in the process of scrambling each key information block according to the context key information, computing time is required. Similarly, when the data receiving end receives the corresponding scrambled data and performs reverse restoration, it also takes corresponding computing time. If the computing time is too long, it will cause significant delays in the session establishment process. The computing time required for the scrambling process can be described by the time complexity corresponding to the algorithm. The higher the time complexity, the longer the processing time required. By quantifying the time complexity, it can be determined whether the current scrambling process will cause significant delays. The time complexity of the scrambling process is directly related to the number of key information blocks that need to be scrambled, the complexity of the context key information, the average processing time of the scrambling algorithm, and the number of characters added in the scrambling process. Therefore, through the log data collection tool, in the process of extracting the context key information and scrambling the key information blocks, the corresponding total number of feature vectors and average scrambling are extracted and analyzed respectively. The processing time and the average number of characters added after scrambling are combined with the total number of key information blocks. The scrambling time complexity is quantified through mathematical analysis. The quantified scrambling time complexity is compared with the preset time complexity. If the scrambling time complexity is greater than the preset time complexity, it means that the scrambling process will cause significant delay. At this time, since the total number of feature vectors directly affects the security of the scrambled information, and the average scrambling processing time is affected by the performance of the device running the algorithm, the total number of feature vectors and the average scrambling processing time cannot be directly modified. The average number of characters added after scrambling is determined by the algorithm and it is difficult to directly interfere with it. Therefore, when the time complexity does not meet the standard, the number of key information blocks needs to be reduced. The length of the unit information block determines the number of key information blocks. By extending the length of the unit information block, the number of key information blocks can be reduced, thereby reducing the time complexity and avoiding significant delays in the session.

[0091] In some other embodiments, the message character length and the corresponding unit information length are recorded. When data with a similar message character length needs to be transmitted subsequently, the pre-selected factor closest to the above-mentioned unit information length can be directly extracted from several pre-selected factors corresponding to the message character length as the current unit information length, thereby significantly improving data processing efficiency.

[0092] Through this scheme, the total number of characteristic vectors, the average scrambling processing time and the average number of characters increased after scrambling, which directly affect the time complexity of the scrambling process, are analyzed and obtained. On this basis, a scientific evaluation of the time complexity is conducted to determine whether it is necessary to adjust the unit information length to reduce the delay in the data transmission process.

[0093] In some embodiments, based on the total number of key information blocks and the total number of feature vectors, the scrambling time complexity of the multiple scrambling process is determined, specifically as follows: (4); in, is the scrambling time complexity, is the time complexity function, is the total number of key information blocks, is the total number of eigenvectors, is the average scrambling processing time, The average increase in the number of characters after scrambling.

[0094] Specifically, during the scrambling process, all key information blocks must be traversed, and traversing each key information block requires constant time, so for key information blocks, the total time complexity is ; For each key module, it is necessary to scramble it according to the vector in the context key information, and the scrambling of each key information block takes a certain amount of time, so the time complexity of the scrambling process is described as ,Furthermore, since the scrambling process will increase the number of characters in the original information, and the change in the number of characters will affect the time complexity, Describe the impact of changes in the amount of characters on time complexity.

[0095] Through this scheme, mathematical analysis is used to comprehensively consider the impact of the total number of key information blocks, the total number of feature vectors, the average scrambling processing time and the average increase in the number of characters after scrambling on the time complexity, and the scrambling time complexity is scientifically quantified to improve the scientificity and accuracy of the evaluation of the scrambling time complexity.

[0096] In some embodiments, according to the key information block set, the obfuscated transmission information set and the context key information, a unit mapping relationship between each key information block and the scrambled information block is determined, and a mapping relationship set is constructed based on this, which is specifically the following formula (5): (5); in, is a mapping relationship set, is the key information block set, For the obfuscated transmission information set, is the first in the key information block set Key information blocks, is the unit mapping relationship, For contextual key information, To confuse the transmission information set Scrambled information blocks, is the total number of key information blocks; and the mapping relationship set is used as signaling mapping information.

[0097] The unit mapping relationship may be a mapping relationship between a unit key information block and a scrambled information block.

[0098] The mapping relationship set may be a set including mapping relationships between all key information blocks and scrambled information blocks.

[0099] Specifically, through formula (4) , the mapping relationship between the key information block and the corresponding scrambled information block in the process of combining the key information block with the context key information Perform integrated extraction, It represents the process of combining the key information block with the context key information, that is, the scrambling logic process. The above formula can be regarded as the reverse process of the scrambling logic process to extract the accurate mapping relationship and then construct a mapping relationship set.

[0100] Through this scheme, by using the mathematical analysis process, according to the key information block set, the obfuscated transmission information set and the context key information, the extraction process of the unit mapping relationship between each key information block and the scrambled information block is described by mathematical formulas, and then according to all the mapping relationships, a mapping relationship set is constructed to improve the scientificity and accuracy of the mapping relationship set, and ensure the efficiency and accuracy of the subsequent data restoration process.

[0101] In some embodiments, based on the signaling mapping information, a consistency identifier of the signaling mapping information is extracted; the signaling mapping information is encrypted based on the consistency identifier to determine the mapping information key; based on the consistency identifier, the mapping information key and the obfuscated transmission information set, the packaged signaling information is constructed and output.

[0102] The consistency identifier may be an identifier used to characterize the consistency of the content of the signaling mapping information, and the consistency identifier may adopt a hash value corresponding to the signaling mapping information.

[0103] The mapping information key may be a key obtained by encrypting the signaling mapping information and used to decrypt the mapping information.

[0104] Specifically, during the data transmission process, since the information in the obfuscated transmission information set has been disrupted, it cannot be parsed even if it is stolen. Even if the obfuscated transmission information set is implanted with attack data during the transmission process, when the obfuscated transmission information set is restored according to the signaling mapping information, the implanted attack data will not be parsed because there is no corresponding mapping relationship in the signaling mapping information, thereby invalidating the attack. However, if the signaling mapping information is implanted with attack data during the transmission process, it will cause an attack when parsing the signaling mapping information. Therefore, it is necessary to ensure the consistency of the signaling mapping information during transmission. The corresponding hash value of the signaling mapping information is calculated and used as a consistency identifier. Since the signaling mapping information only contains a mapping relationship and the data volume is small, the calculation speed of the hash value will not affect the session communication delay. The signaling mapping information is encrypted with a consistency identifier as a seed through a symmetric encryption algorithm or an asymmetric encryption algorithm, and a corresponding mapping information key is generated. Then, according to the consistency identifier, the mapping information key and the obfuscated transmission information set, the packaged signaling information is constructed, and the packaged signaling information is provided to the data receiving end.

[0105] Through this solution, the signaling mapping information is encrypted, and the packaged signaling information is constructed based on the consistency identifier, mapping information key and obfuscated transmission information set. While ensuring the security of signaling mapping information transmission, it prevents the attacker from attacking the data receiver by tampering with the signaling mapping information, thereby further improving data security.

[0106] Figure 3 A schematic diagram of a cross-network SIP signaling security interaction system provided in an embodiment of the present application is shown in FIG. Figure 3 As shown, a cross-network SIP signaling secure interaction system 300 of this embodiment includes: an information analysis module 301, an encryption processing module 302, a mapping analysis module 303 and a packaging output module 304.

[0107] The information analysis module 301 is used to obtain pre-transmission information, perform key information structured extraction processing on the pre-transmission information, and determine structured key transmission information; The scrambling processing module 302 is used to extract the context key information according to the structured key transmission information, and perform scrambling processing on the structured key transmission information to determine the obfuscated transmission information set; A mapping analysis module 303, configured to perform mapping relationship processing on the obfuscated transmission information set based on the structured key transmission information and the obfuscated transmission information set, and determine signaling mapping information; The packaging output module 304 is used to determine and output packaging signaling information based on the signaling mapping information and the obfuscated transmission information set.

[0108] Optionally, the information analysis module 301 is specifically used to: Analyze the pre-transmission information, perform redundancy minimization processing on the pre-transmission information, and determine a number of necessary fields and corresponding attribute values; Determining structured field information according to the plurality of necessary fields and the corresponding attribute values; According to a predefined data verification strategy, the data format of the structured field information is verified to determine a verification result; If the verification result is successful, the structured field information is used as the structured key transmission information.

[0109] Optionally, the scrambling processing module 302 is specifically configured to: Analyze the structured key transmission information to extract the message character length, sending time and sender identification; Determine a key context vector according to the message character length, the sending time and the sender identifier, and use the key context vector as the context key information; Determining a number of preselected factors according to the message character length, and determining a unit information block length according to the number of preselected factors and the corresponding number of preselected factors; Dividing the structured key information into information blocks according to the unit information block length to determine a key information block set; According to the context key information, multiple scrambling processes are performed on the key information block set to determine a confused transmission information set.

[0110] Optionally, when the scrambling processing module 302 determines a plurality of preselected factors according to the message character length, and determines the unit information block length according to the plurality of preselected factors and the corresponding number of preselected factors, the formula is specifically as follows: ; in, is the unit information block length, is a random selection function, is the preselected factor, is the character length of the message, is the number of preselected factors.

[0111] Optionally, the scrambling processing module 302 divides the structured key information into information blocks according to the unit information block length to determine a key information block set, which is specifically the following formula: ; in, is the key information block set, For the structured key transmission information, To traverse the mark, is the unit information block length, is the character length of the message; Determining the total number of key information blocks according to the key information block set; The key information block set is subjected to multiple scrambling processing according to the context key information to determine the obfuscated transmission information set, which is specifically the following formula: ; in, For the obfuscated transmission information set, is the scrambled information block, is the scrambling function, is the first Key information blocks, is the context key information, is the key information block set, is the total number of key information blocks.

[0112] Optionally, the system 300 further includes a complexity analysis module 305, which is used to: Determining the total number of feature vectors according to the context key information; In the process of performing multiple scrambling processes on the key information block set, recording the scrambling process time of the scrambling function on each of the key information blocks, thereby determining an average scrambling process time; Based on the key information block set, analyzing the obfuscated transmission information set, determining the amount of characters added after scrambling corresponding to each key information in the obfuscated transmission information set, and thereby determining the average amount of characters added after scrambling; Based on the total number of key information blocks and the total number of feature vectors, according to the average scrambling processing time and the average increased number of characters after scrambling, determine the scrambling time complexity of the multiple scrambling process; The scrambling time complexity is compared with the preset time complexity. If the scrambling time complexity is greater than the preset time complexity, the length of the unit information block is extended, and the structured key information is re-divided into information blocks accordingly.

[0113] Optionally, the complexity analysis module 306 determines the scrambling time complexity of the multiple scrambling process based on the total number of key information blocks and the total number of feature vectors, according to the average scrambling process time and the average increased number of characters after scrambling, specifically the following formula: ; in, is the scrambling time complexity, is the time complexity function, is the total number of key information blocks, is the total number of eigenvectors, is the average scrambling processing time, The average amount of characters increased after scrambling.

[0114] Optionally, the mapping analysis module 303 is specifically used to: According to the key information block set, the obfuscated transmission information set and the context key information, a unit mapping relationship between each key information block and the scrambled information block is determined, and a mapping relationship set is constructed based on this, which is specifically the following formula: ; in, is the mapping relationship set, is the first Key information blocks, is the unit mapping relationship, is the context key information, The obfuscated transmission information set is said scrambled information blocks, is the total number of key information blocks; The mapping relationship set is used as the signaling mapping information.

[0115] Optionally, the packaging output module 304 is specifically used to: Extracting a consistency identifier of the signaling mapping information according to the signaling mapping information; Encrypting the signaling mapping information according to the consistency identifier to determine a mapping information key; The packaging signaling information is constructed and output according to the consistency identifier, the mapping information key and the obfuscated transmission information set.

[0116] The system of this embodiment can be used to execute the method of any of the above embodiments. The implementation principles and technical effects are similar and will not be described in detail here.

Claims

1. A cross-network SIP signaling secure interaction method, characterized in that: include: Acquire pre-transmission information, perform key information structured extraction processing on the pre-transmission information, and determine structured key transmission information; Extracting context key information according to the structured key transmission information, and scrambling the structured key transmission information to determine a set of obfuscated transmission information; Based on the structured key transmission information and the obfuscated transmission information set, performing mapping relationship processing on the obfuscated transmission information set to determine signaling mapping information; Based on the signaling mapping information and according to the obfuscated transmission information set, packaging signaling information is determined and output.

2. The method according to claim 1, characterized in that The step of performing structured extraction processing on the pre-transmission information to determine structured key transmission information includes: Analyze the pre-transmission information, perform redundancy minimization processing on the pre-transmission information, and determine a number of necessary fields and corresponding attribute values; Determining structured field information according to the plurality of necessary fields and the corresponding attribute values; According to a predefined data verification strategy, the data format of the structured field information is verified to determine a verification result; If the verification result is successful, the structured field information is used as the structured key transmission information.

3. The method according to claim 2, characterized in that The extracting context key information according to the structured key transmission information, and scrambling the structured key transmission information to determine the obfuscated transmission information set includes: Analyze the structured key transmission information to extract the message character length, sending time and sender identification; Determine a key context vector according to the message character length, the sending time and the sender identifier, and use the key context vector as the context key information; Determining a number of preselected factors according to the message character length, and determining a unit information block length according to the number of preselected factors and the corresponding number of preselected factors; Dividing the structured key information into information blocks according to the unit information block length to determine a key information block set; According to the context key information, multiple scrambling processes are performed on the key information block set to determine a confused transmission information set.

4. The method according to claim 3, characterized in that The method of determining a plurality of preselected factors according to the message character length, and determining a unit information block length according to the plurality of preselected factors and the corresponding number of preselected factors, is specifically the following formula: ； in, is the unit information block length, is a random selection function, is the preselected factor, is the character length of the message, is the number of preselected factors.

5. The method according to claim 3, characterized in that: The structured key information is divided into information blocks according to the unit information block length to determine the key information block set, which is specifically the following formula: ； in, is the key information block set, For the structured key transmission information, To traverse the mark, is the unit information block length, is the character length of the message; Determining the total number of key information blocks according to the key information block set; The key information block set is subjected to multiple scrambling processes according to the context key information to determine the obfuscated transmission information set, which is specifically the following formula: ； in, For the obfuscated transmission information set, is the scrambled information block, is the scrambling function, is the first Key information blocks, is the context key information, is the key information block set, is the total number of key information blocks.

6. The method according to claim 5, characterized in that The method further comprises: Determining the total number of feature vectors according to the context key information; In the process of performing multiple scrambling processes on the key information block set, recording the scrambling process time of the scrambling function on each of the key information blocks, thereby determining an average scrambling process time; Based on the key information block set, analyzing the obfuscated transmission information set, determining the amount of characters added after scrambling corresponding to each key information in the obfuscated transmission information set, and thereby determining the average amount of characters added after scrambling; Based on the total number of key information blocks and the total number of feature vectors, according to the average scrambling processing time and the average increased number of characters after scrambling, determine the scrambling time complexity of the multiple scrambling process; The scrambling time complexity is compared with the preset time complexity. If the scrambling time complexity is greater than the preset time complexity, the length of the unit information block is extended, and the structured key information is re-divided into information blocks accordingly.

7. The method according to claim 6, characterized in that The scrambling time complexity of the multiple scrambling process is determined based on the total number of key information blocks and the total number of feature vectors according to the average scrambling process time and the average increased number of characters after scrambling, specifically as follows: ； in, is the scrambling time complexity, is the time complexity function, is the total number of key information blocks, is the total number of eigenvectors, is the average scrambling processing time, The average amount of characters increased after scrambling.

8. The method according to claim 6, characterized in that The performing mapping relationship processing on the obfuscated transmission information set based on the structured key transmission information and the obfuscated transmission information set to determine the signaling mapping information includes: According to the key information block set, the obfuscated transmission information set and the context key information, a unit mapping relationship between each key information block and the scrambled information block is determined, and a mapping relationship set is constructed based on this, which is specifically the following formula: ； in, is the mapping relationship set, is the first Key information blocks, is the unit mapping relationship, is the context key information, The obfuscated transmission information set is said scrambled information blocks, is the total number of key information blocks; The mapping relationship set is used as the signaling mapping information.

9. The method according to claim 8, characterized in that The determining and outputting the packaging signaling information based on the signaling mapping information and according to the obfuscated transmission information set includes: Extracting a consistency identifier of the signaling mapping information according to the signaling mapping information; Encrypting the signaling mapping information according to the consistency identifier to determine a mapping information key; The packaging signaling information is constructed and output according to the consistency identifier, the mapping information key and the obfuscated transmission information set.

10. A cross-network SIP signaling secure interaction system, characterized in that: include: An information analysis module, used to obtain pre-transmission information, perform key information structured extraction processing on the pre-transmission information, and determine structured key transmission information; A scrambling processing module, used to extract context key information according to the structured key transmission information, and perform scrambling processing on the structured key transmission information to determine a set of obfuscated transmission information; A mapping analysis module, configured to perform mapping relationship processing on the obfuscated transmission information set based on the structured key transmission information and the obfuscated transmission information set, and determine signaling mapping information; The packaging output module is used to determine and output the packaging signaling information based on the signaling mapping information and the obfuscated transmission information set.

Images