Internet digital information transmission method and system for confidential document

Abstract

The invention discloses an internet digital information transmission method and system for a confidential document, and relates to the technical field of internet data transmission security, which comprises the following steps: introducing an innovative two-way multi-path network architecture, dynamically adjusting transmission parameters, and using an error recovery request technology, so that the security of the confidential document is improved. And establishing a vulnerability response database and updating a response report of the security patch. According to the invention, high adaptability of a network environment is realized, security and fault tolerance of digital information transmission are effectively improved, various challenges of transmission in a dynamic network environment are overcome, communication security is guaranteed, a fault tolerance mechanism model and a compliance key management mechanism are established, a system can respond more flexibly and efficiently in the case of abnormal conditions, and the reliability of the system is improved. And the stability of data transmission is effectively improved.

Description

Technical Field

[0001] The present invention relates to the technical field of Internet data transmission security, and in particular to an Internet digital information transmission method and system for confidential documents. Background Art

[0002] At present, Internet digital information transmission is a core component of modern communications. However, with the continuous growth of communication needs, traditional single communication channels are facing increasingly complex network environments and security challenges. The coexistence of wired and wireless channels makes the network architecture more complex, and under high load and different temperature conditions, transmission efficiency and security are often affected.

[0003] Problems existing in existing technologies include insufficient adaptability to dynamic network environments, insufficient security and insufficient fault tolerance. Traditional Internet digital information transmission methods may perform poorly under high load or temperature changes, and there are potential risks in handling data security.

[0004] To solve these problems, the present invention proposes an Internet digital information transmission method for confidential documents. By designing a flexible network architecture, introducing an environment-aware transmission channel, strengthening secure communication connections, and establishing an efficient compliance key management and fault-tolerance mechanism model, the present invention can adapt to different network conditions and improve transmission efficiency and data security. Compared with the prior art, the present invention has significant advantages in many aspects, including better dynamic adaptability, stronger security and more reliable fault tolerance, etc., bringing innovation and improvement to the field of Internet digital information transmission. Summary of the invention

[0005] In view of the problems existing in the existing Internet digital information transmission method and system for confidential documents, the present invention is proposed.

[0006] Therefore, the problem to be solved by the present invention is the insufficient adaptability, security and fault tolerance of Internet digital information transmission to the dynamic network environment. By introducing a two-way multi-channel network architecture and innovative technical means, the transmission efficiency and data security are improved.

[0007] In order to solve the above technical problems, the present invention provides the following technical solutions:

[0008] In the first aspect, an embodiment of the present invention provides an Internet digital information transmission method for confidential documents, which includes designing a bidirectional multi-channel network architecture for confidential documents, introducing a network environment transmission channel, defining the role types of participants, and establishing a secure communication connection; setting up an Internet key management mechanism, establishing a fault tolerance mechanism model, and the participants receiving the data fragments for reorganization; updating the response report of the security patch, establishing a vulnerability response database, using error recovery request technology to repair the role type, and obtaining the resent role type for digital information transmission.

[0009] As a preferred solution of the Internet digital information transmission method of the confidential document of the present invention, wherein: the bidirectional multi-channel network architecture includes a physical layer, a data link layer, a network layer, a transport layer and an application layer, the transmission channel includes a wired channel and a wireless channel, the physical layer includes defining a physical layer transmission medium, the data link layer includes detecting a physical layer transmission medium, the network layer includes defining a forwarding rule for a physical layer transmission medium, and the application layer includes determining a transmission channel;

[0010] If the temperature rises, the signal transmission rate will increase, and if the temperature drops, the signal transmission rate will decrease, which is not conducive to transmission to the network layer at normal temperature. At this time, the transmission rate is adjusted based on the parameters, and the adjustment of the transmission rate includes adjusting the transmission power to maintain the transmission intensity, and the transmission intensity includes modulating the signal-to-noise ratio based on the coding technology;

[0011] When the transmission rate increases, the temperature rises, the transmission power is reduced, simple coding is used to reduce the tolerance of signal strength, and the appropriate transmission rate is selected;

[0012] When the transmission rate decreases, the temperature is lowered, the transmission power is increased, complex coding is used to improve the tolerance of signal strength, and the appropriate transmission rate is selected.

[0013] As a preferred solution of the Internet digital information transmission method of the confidential document of the present invention, the forwarding rules include deploying operators, secretaries and confidentiality officers' computers, which are responsible for the encryption, decryption and reading of unencrypted or encrypted documents. The program allows users to easily select files for reading, querying, encryption or decryption, and provides multi-column and multi-item fuzzy query and multi-column and multi-item precise query functions that cannot be realized by EXCEL editing software. During the use of the program, network sensors are used to monitor the load balancing of the transmission medium;

[0014] If the load is evenly distributed, the transmission channel is overloaded, resulting in a decrease in the performance of the transmission medium. The load on each node in the transmission channel is too high, and the dynamic flow efficiency in the transmission medium increases. At this time, the congested nodes are bypassed;

[0015] If the load balance distribution is uneven, the transmission channel is not overloaded, resulting in increased transmission medium performance, reduced load on each node in the transmission channel, and reduced dynamic flow efficiency in the transmission medium.

[0016] As a preferred solution of the Internet digital information transmission method of the confidential document of the present invention, the role types include a wired sender, a wired receiver and a wired intermediate node, the administrator computer deployed by the sender is used as a security control center, and according to the session key sent by the operator, a dynamic key is generated by encryption and transcoding, and the encrypted key is sent to the operator for logging in to open the encryption and decryption program;

[0017] When the encryption and decryption program is started, the program first generates a composite string of multi-bit random numbers as the session key, and sends it to the key generation program on the administrator's PC in any form to receive the session key. The session key request is encrypted using an advanced encryption algorithm to generate a 256-bit encryption key. The more bits the key has, the more secure it is. The encryption key is further converted into a string;

[0018] The encrypted key string is returned to the operator in any form. The encryption and decryption program is opened when the login is successful. If the key string is wrong, the encryption and decryption program will be automatically closed immediately.

[0019] The wired intermediate node includes establishing a wired encryption module to perform end-to-end encryption on digital information, wherein the encryption includes two-way identity authentication by the wired sender and the wired receiver through an authentication service;

[0020] If the identity authentication is incorrect, the digital information does not enter the wired channel; if the identity authentication is correct, the digital information enters the wired channel and a secure communication connection is established;

[0021] The secure communication connection includes transmitting Internet digital information into a wireless channel, the role classification also includes a wireless sender, a wireless receiver and a wireless intermediate node, the wireless intermediate node includes establishing a wireless verification module to verify the digital information that has not entered the wired channel, and the verification includes a wireless sender and a wireless receiver verification service to perform two-way identity authentication;

[0022] If the identity authentication is incorrect, the digital information will be reorganized; if the identity authentication is correct, the digital information that has not entered the wired channel will be overwritten and enter the wireless channel.

[0023] As a preferred solution of the Internet digital information transmission method of the confidential document of the present invention, wherein: the Internet key management mechanism is set up including setting the names of three EXCEL table columns for query, the program will traverse the table to read the content, and read the content of the input box in rows according to the two modes of fuzzy query or precise query, and output it in rows to display it in the content box;

[0024] The encryption and decryption program includes the use of a memory-safe programming language for development, and for documents with confidentiality requirements, a combination of a self-developed encryption algorithm and a mature, stable, and reliable advanced encryption standard algorithm is used. The advanced encryption algorithm is used to encrypt session key requests and generate a 256-bit encryption key;

[0025] Data information entering the wireless channel is selected for key exchange selection, the key exchange selection includes a symmetric key and an asymmetric key, the symmetric key includes confusing the data information of the wireless channel, the confusing arrangement includes setting a state matrix around the node, and the state matrix includes shifting the node and the data information.

[0026] As a preferred solution of the Internet digital information transmission method of the confidential document of the present invention, the reorganization includes analyzing the encryption process according to the application scenario of the transmission, and the specific steps of the analysis are as follows:

[0027] Network operation and maintenance personnel regularly inspect network communication equipment and store and manage account passwords in a safe and reliable manner. Account passwords need to be stored and distributed in a safe and reliable manner.

[0028] Send confidential files to the recipients via the Internet, which ensures the security and reliability of the files themselves and the encryption and decryption process;

[0029] Slice the data of the wireless transmitter and the wireless receiver, wherein the slice process includes using the sequence number of the identifier to determine the correct order of the slices;

[0030] When the arrangement sequence is reorganized in ascending order, the receiver reorganizes the original data;

[0031] When the arrangement order is reorganized in descending order, the order of the fragments at the receiver is inconsistent.

[0032] As a preferred solution of the Internet digital information transmission method of confidential documents described in the present invention, the establishment of a vulnerability response database includes entering the database according to the reorganization order, using error recovery request technology to repair the role type, and obtaining the resent role type for digital information transmission.

[0033] In the second aspect, an embodiment of the present invention provides an Internet digital information transmission system based on a bidirectional multi-channel network, which includes: a definition module, which designs a bidirectional multi-channel network architecture for confidential documents, introduces a network environment transmission channel, defines the role types of participants, and establishes a secure communication connection; an establishment module, which sets up the Internet's key management mechanism, establishes a fault tolerance mechanism model, and the participants receive data fragments for reorganization; a transmission module, which updates the response report of the security patch, establishes a vulnerability response database, uses error recovery request technology to repair the role type, and obtains the resent role type for digital information transmission.

[0034] In a third aspect, an embodiment of the present invention provides a computer device, comprising a memory and a processor, wherein the memory stores a computer program, wherein: when the processor executes the computer program, it implements any step of the above-mentioned Internet digital information transmission method for confidential documents.

[0035] In a fourth aspect, an embodiment of the present invention provides a computer-readable storage medium having a computer program stored thereon, wherein: when the computer program is executed by a processor, any step of the above-mentioned Internet digital information transmission method for confidential documents is implemented.

[0036] The beneficial effects of the present invention are as follows: the present invention introduces an innovative two-way multi-channel network architecture, achieves high adaptability to the network environment by dynamically adjusting transmission parameters and using error recovery request technology, effectively improves the security and fault tolerance of digital information transmission, overcomes the various challenges of transmission in a dynamic network environment, ensures communication security by establishing a vulnerability response database and a response report for updating security patches, establishes a fault-tolerant mechanism model and a compliant key management mechanism, enables the system to respond more flexibly and efficiently when faced with abnormal situations, and effectively improves the stability of data transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following briefly introduces the drawings required for describing the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work. Among them:

[0038] Figure 1 A specific flow chart of a method and system for transmitting digital information of a confidential document over the Internet provided by one embodiment of the present invention.

[0039] Figure 2 A computer device login diagram of a method and system for transmitting digital information of a confidential document over the Internet provided by an embodiment of the present invention.

[0040] Figure 3 A schematic diagram of computer device decryption of a method and system for transmitting digital information over the Internet of a confidential document provided by an embodiment of the present invention.

[0041] Figure 4 A schematic diagram of computer equipment encryption of a method and system for transmitting digital information of a confidential document over the Internet provided by one embodiment of the present invention. DETAILED DESCRIPTION

[0042] In order to make the above-mentioned purposes, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are described in detail below in conjunction with the drawings of the specification. Obviously, the described embodiments are part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary persons in the art without creative work should fall within the scope of protection of the present invention.

[0043] In the following description, many specific details are set forth to facilitate a full understanding of the present invention, but the present invention may also be implemented in other ways different from those described herein, and those skilled in the art may make similar generalizations without violating the connotation of the present invention. Therefore, the present invention is not limited to the specific embodiments disclosed below.

[0044] Secondly, the term "one embodiment" or "embodiment" as used herein refers to a specific feature, structure, or characteristic that may be included in at least one implementation of the present invention. The term "in one embodiment" that appears in different places in this specification does not necessarily refer to the same embodiment, nor does it refer to a separate or selective embodiment that is mutually exclusive with other embodiments.

[0045] The present invention is described in detail with reference to schematic diagrams. When describing the embodiments of the present invention, for the sake of convenience, the cross-sectional diagrams showing the device structure will not be partially enlarged according to the general scale, and the schematic diagrams are only examples, which should not limit the scope of protection of the present invention. In addition, in actual production, the three-dimensional dimensions of length, width and depth should be included.

[0046] At the same time, in the description of the present invention, it should be noted that the directions or positional relationships indicated by the terms "upper, lower, inner and outer" are based on the directions or positional relationships shown in the drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific direction, be constructed and operated in a specific direction, and therefore cannot be understood as limiting the present invention. In addition, the terms "first, second or third" are only used for descriptive purposes and cannot be understood as indicating or implying relative importance.

[0047] In the present invention, unless otherwise clearly specified and limited, the terms "install, connect, connect" should be understood in a broad sense, for example: it can be a fixed connection, a detachable connection or an integral connection; it can also be a mechanical connection, an electrical connection or a direct connection, or it can be indirectly connected through an intermediate medium, or it can be the internal communication of two components. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0048] Example 1

[0049] Reference Figure 1 to Figure 4 , which is the first embodiment of the present invention, and which provides a method for transmitting Internet digital information of a confidential document, comprising:

[0050] S1: Design a two-way multi-channel network architecture, introduce a network environment transmission channel, define the role types of participants, and establish a secure communication connection.

[0051] The bidirectional multi-channel network architecture includes a physical layer, a data link layer, a network layer, a transport layer and an application layer. The transmission channel includes a wired channel and a wireless channel. The physical layer includes defining a physical layer transmission medium. The data link layer includes detecting a physical layer transmission medium. The network layer includes defining a forwarding rule for a physical layer transmission medium. The application layer includes determining a transmission channel.

[0052] The wired channel includes the physical layer definition of the secondary transmission medium, so the Internet digital information transmission is a wired channel;

[0053] The wireless channel includes the physical layer definition of the first-level transmission medium, so the Internet digital information transmission is a wireless channel;

[0054] Detection of the physical layer transmission medium includes determining the wired channel for Internet digital information transmission, implementing a dynamic adjustment mechanism, and adjusting parameters according to the real-time transmission environment. The transmission environment includes temperature and transmission rate at different temperatures, and parameters include signal strength and signal-to-noise ratio.

[0055] If the temperature rises, the signal transmission rate will increase. If the temperature drops, the signal transmission rate will decrease, which is not conducive to transmission to the network layer at normal temperature. At this time, the transmission rate is adjusted based on parameters. Adjusting the transmission rate includes adjusting the transmission power to maintain the transmission intensity. The transmission intensity includes modulating the signal-to-noise ratio based on the coding technology.

[0056] When the transmission rate increases, the temperature rises, the transmission power is reduced, simple coding is used to reduce the tolerance of signal strength, and the appropriate transmission rate is selected;

[0057] When the transmission rate decreases, the temperature is lowered, the transmission power is increased, complex coding is used to improve the tolerance of signal strength, and the appropriate transmission rate is selected.

[0058] The forwarding rules include deploying operators, secretaries and confidentiality officers' computers, which are responsible for document encryption, decryption and reading of unencrypted or encrypted documents. The program allows users to easily select files for reading, querying, encryption or decryption, and provides multi-column and multi-multiple fuzzy query and multi-column and multi-multiple precise query functions that cannot be achieved by EXCEL editing software. During the use of the program, network sensors are used to monitor the load balancing of the transmission medium.

[0059] Furthermore, the forwarding rules include using network sensors to monitor the load balancing of the transmission medium;

[0060] If the load is evenly distributed, the transmission channel is overloaded, resulting in a decrease in the performance of the transmission medium. The load on each node in the transmission channel is too high, and the dynamic flow efficiency in the transmission medium increases. At this time, the congested node is bypassed and becomes a primary transmission medium.

[0061] If the load balance distribution is uneven, the transmission channel is not overloaded, resulting in increased transmission medium performance, reduced loads on each node in the transmission channel, and reduced dynamic traffic efficiency in the transmission medium. At this time, the congested nodes cannot be bypassed normally and the medium becomes a secondary transmission medium.

[0062] S1.1: The role types include wired sender, wired receiver and wired intermediate node. The wired intermediate node includes establishing a wired encryption module to perform end-to-end encryption on digital information. The encryption includes two-way identity authentication between the wired sender and the wired receiver through an authentication service.

[0063] If the identity authentication is incorrect, the digital information does not enter the wired channel; if the identity authentication is correct, the digital information enters the wired channel and a secure communication connection is established;

[0064] The secure communication connection includes transmitting Internet digital information into a wireless channel. The role classification also includes a wireless sender, a wireless receiver and a wireless intermediate node. The wireless intermediate node includes establishing a wireless verification module to verify the digital information that has not entered the wired channel. The verification includes two-way identity authentication by the wireless sender and the wireless receiver verification service.

[0065] If the identity authentication is incorrect, the digital information will be reorganized; if the identity authentication is correct, the digital information that has not entered the wired channel will be overwritten and enter the wireless channel.

[0066] S2: Set up a compliance key management mechanism and establish a fault-tolerant mechanism model. Participants receive data shards for reorganization.

[0067] Among them, setting up a compliance key management mechanism includes selecting data information entering the wireless channel for key exchange selection, the key exchange selection includes symmetric keys and asymmetric keys, the symmetric key includes confusing the data information of the wireless channel, the confusing arrangement includes setting a state matrix around the node, and the state matrix includes shifting the node and the data information;

[0068] If the first row of the wireless channel data information does not move, the second row will be shifted left by n bytes, the third row will be shifted left by n+1 bytes, and the fourth row will be shifted left by n+2 bytes;

[0069] If the first row of data information of the wireless channel is shifted, the second row is shifted right by n bytes, the third row is shifted right by n+1 bytes, and the fourth row is shifted right by n+2 bytes;

[0070] Asymmetric keys involve negotiation of the shifted bytes, and negotiation involves focusing on secure transmission of the key;

[0071] If the displacement is correct, the security is high; if the displacement is incorrect, the security is low. At this time, a fault tolerance mechanism model is established. The fault tolerance mechanism model includes using a cyclic redundancy check method to predetermine a fault tolerance range. The predetermined fault tolerance range includes using a polynomial division operation to check whether the remainder is zero.

[0072] If the remainder is zero, the predetermined fault tolerance range is full; if the remainder is not zero, the predetermined fault tolerance range is normal.

[0073] Furthermore, for the displacement process of the wireless channel data information, different operations are performed according to the conditions. If the first row of the wireless channel data information does not move, then the second row is shifted left by n bytes, the third row is shifted left by n+1 bytes, and the fourth row is shifted left by n+2 bytes. If the first row moves, then the second row is shifted right by n bytes, the third row is shifted right by n+1 bytes, and the fourth row is shifted right by n+2 bytes. This displacement process is to ensure security. By negotiating asymmetric keys, attention is paid to the secure transmission of keys. If the displacement movement is correct, the security is high. If the displacement movement is incorrect, the security is low. At this time, the fault tolerance mechanism model intervenes and the cyclic redundancy check method is used to predetermine the fault tolerance range. The predetermination of the fault tolerance range includes using a polynomial division operation to check whether the remainder is zero. If the remainder is zero, it means that the fault tolerance range is full; if the remainder is not zero, it means that the fault tolerance range is normal. This process ensures that in key management, even if a displacement error occurs, the system can identify and perform corresponding fault tolerance processing.

[0074] The reassembly includes fragmenting the data in the wireless transmitter and the wireless receiver, and the fragmentation includes using the sequence number of the identifier to determine the correct order of the fragments;

[0075] When the arrangement sequence is reorganized in ascending order, the receiver reorganizes the original data;

[0076] When the arrangement order is reorganized in descending order, the order of the fragments on the receiving side is inconsistent;

[0077] S2.1: The response report includes setting repair priorities for inconsistent sharding order data of the recipient. The priorities include evaluating the received vulnerability reports. The evaluation includes setting up environmental measurement groups, obtaining basic scores γ, and combining the measurement groups to generate score ranges α-β;

[0078] If γ≤α, it indicates the lowest risk and the priority is the lowest. If γ≥β, it indicates the highest risk and the priority is the highest. If α<λ<β, it indicates medium risk and the priority is medium. The specific data of priority assessment are shown in Table 1 below:

[0079] Table 1 Priority evaluation specific data table

[0080] operate result Environmental Metrics Group Basic score Priority Assessment Fix for inconsistent shard order Evaluation results 1.5 5.0 High risk (≥5.0) Repair operation 1 Evaluation results 0.8 2.5 Medium risk (2.5-5.0) Repair Operation 2 Evaluation results 0.2 1.0 Low risk (≤1.0)

[0081] For the problem of inconsistent shard repair order, a flexible and efficient repair mechanism was established through response reporting and repair priority evaluation. According to the evaluation results, the priority of different repair operations is determined. If the evaluation score is ≤2, it indicates the lowest risk and the priority is set to the lowest; if the evaluation score is ≥8, it indicates the highest risk and the corresponding priority is set to the highest; if the evaluation score is between 2 and 8, it indicates medium risk and the corresponding priority is set to medium. The evaluation framework helps to set reasonable priorities for repair operations based on actual conditions, thereby improving the overall fault tolerance and repair efficiency of the system.

[0082] S3: Update the response report of the security patch, establish a vulnerability response database, use the error recovery request technology to repair the role type, and obtain the resent role type for digital information transmission.

[0083] The role types include wired sender, wired receiver and wired intermediate node. The administrator computer deployed by the sender is used as the security control center. According to the session key sent by the operator, the dynamic key is generated by encryption and transcoding, and the encrypted key is sent back to the operator for logging in to open the encryption and decryption program.

[0084] When the encryption and decryption program is started, the program first generates a composite string of multi-bit random numbers as the session key, and sends it to the key generation program on the administrator's PC in any form to receive the session key. The session key request is encrypted using an advanced encryption algorithm to generate a 256-bit encryption key. The more bits the key has, the more secure it is. The encryption key is further converted into a string.

[0085] Among them, setting up a vulnerability response database includes entering the database in order from low to high priority, using error recovery request technology to repair the role type, and obtaining the resent role type for digital information transmission.

[0086] Furthermore, the process of establishing a vulnerability response database is to record vulnerability reports in the database in order of priority from low to high. The design of the database enables the system to manage vulnerability repair tasks in an orderly manner, ensuring emergency response to high-priority vulnerabilities. When using error recovery request technology, the system will identify vulnerability reports in the database and perform corresponding repair operations based on the information in the report, which can repair vulnerabilities in a targeted manner and improve the overall security of the system.

[0087] In a preferred embodiment, an Internet digital information transmission system based on a bidirectional multi-channel network includes a definition module, which designs a bidirectional multi-channel network architecture, introduces a network environment transmission channel, defines the role types of the participants, and establishes a secure communication connection; an establishment module, which sets up a compliance key management mechanism, establishes a fault tolerance mechanism model, and the participants receive data fragments for reorganization; a transmission module, which updates the response report of the security patch, establishes a vulnerability response database, uses error recovery request technology to repair the role type, and obtains the resent role type for digital information transmission.

[0088] The above-mentioned unit modules may be embedded in or independent of a processor in a computer device in the form of hardware, or may be stored in a memory in a computer device in the form of software, so that the processor can call and execute operations corresponding to the above-mentioned modules.

[0089] In one embodiment, a computer device is provided. The computer device may be a terminal, and its internal structure diagram may be as follows: Figure 2 As shown. The computer device includes a processor, a memory, a communication interface, a display screen and an input device connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner can be achieved through WIFI, an operator network, NFC (near field communication) or other technologies. The display screen of the computer device can be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device can be a touch layer covering the display screen, or a button, trackball or touchpad set on the computer device housing, or an external keyboard, touchpad or mouse, etc.

[0090] In summary, the present invention achieves high adaptability to the network environment by introducing an innovative two-way multi-channel network architecture, dynamically adjusting transmission parameters, and using error recovery request technology, effectively improving the security and fault tolerance of digital information transmission, and overcoming various challenges of transmission in a dynamic network environment. By establishing a vulnerability response database and a response report for updating security patches, communication security is guaranteed, a fault-tolerant mechanism model and a compliant key management mechanism are established, so that the system can respond more flexibly and efficiently when faced with abnormal situations, effectively improving the stability of data transmission.

[0091] Example 2

[0092] Reference Figure 1 to Figure 4 , which is the second embodiment of the present invention, and this embodiment provides an Internet digital information transmission method for confidential documents. In order to verify the beneficial effects of the present invention, scientific demonstration is carried out through simulation experiments.

[0093] In the Internet digital information transmission method, two schemes are proposed to enhance data diffusion and improve fault tolerance by performing clever displacement operations on wireless channel data information. First, when the first row of wireless channel data information does not move, the first scheme is adopted to shift the second row to the left by 2 bytes, the third row to the left by 3 bytes, and the fourth row to the left by 4 bytes; and when the first row moves, the second scheme is adopted to shift the second row to the right by 2 bytes, the third row to the right by 3 bytes, and the fourth row to the right by 4 bytes. These displacement strategies effectively deal with the displacement errors that may occur in wireless channel transmission and enhance the reliability of data transmission. The specific byte displacements are selected as shown in Table 2 below:

[0094] Table 2 Selecting a specific byte displacement

[0095] Mobile Solutions First row Second row Third row Fourth row No movement constant Shift left 2 Shift left 3 Shift left 4 move constant Shift right 2 Shift right 3 Shift right 4 Solution 1 constant Shift left 2 Shift left 3 Shift left 4 Solution 2 constant Shift right 2 Shift right 3 Shift right 4

[0096] When processing wireless channel data displacement errors, two displacement schemes are proposed to enhance data diffusion and improve fault tolerance. Scheme 1 incrementally shifts the second, third, and fourth rows to the left without moving the first row. Scheme 2 shifts the second, third, and fourth rows to the right while moving the first row. By comparing with other displacement schemes, these specific byte displacements are selected to optimize the reliability of data transmission. The two schemes effectively deal with possible displacement errors and improve the fault tolerance of the system. The comparison with the existing technology is shown in Table 3 below:

[0097] Table 3 Comparison with existing technology

[0098] Comparison Items Our Solutions Prior art Displacement scheme selection Left shift increment, right shift increment Random displacement, single displacement Target Enhance data diffusion and improve fault tolerance For fault tolerance only Advantages More accurate fault-tolerant processing and more reliable data transmission Only focused on fault tolerance, not optimizing transmission performance Data transmission reliability improve Maintain the status quo

[0099] When selecting the displacement scheme, the strategies of left-shift increment and right-shift increment are adopted, which is more accurate compared with the random displacement or single displacement in the prior art. The goal of the present invention is to simultaneously enhance the diffusion of data and improve fault tolerance. Compared with the prior art, the data transmission performance is more comprehensively optimized. Through more precise fault-tolerant processing, the present invention can significantly improve the reliability of data transmission.

[0100] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical solutions of the present invention, which should all be included in the scope of the claims of the present invention.

Claims

1. A method for transmitting digital information of a confidential document over the Internet, characterized in that: include, Design a two-way multi-channel network architecture for confidential documents, introduce network environment transmission channels, define the role types of participants, and establish secure communication connections; Set up the Internet's key management mechanism and establish a fault-tolerant mechanism model, so that participants can reassemble the data fragments they receive; Update security patch response reports, establish vulnerability response databases, use error recovery request technology to repair role types, and obtain resent role types for digital information transmission.

2. The method for transmitting digital information of a confidential document over the Internet as claimed in claim 1, characterized in that: The bidirectional multi-channel network architecture includes a physical layer, a data link layer, a network layer, a transport layer and an application layer, the transmission channel includes a wired channel and a wireless channel, the physical layer includes defining a physical layer transmission medium, the data link layer includes detecting a physical layer transmission medium, the network layer includes defining a forwarding rule for a physical layer transmission medium, and the application layer includes determining a transmission channel; If the temperature rises, the signal transmission rate will increase, and if the temperature drops, the signal transmission rate will decrease, which is not conducive to transmission to the network layer at normal temperature. At this time, the transmission rate is adjusted based on the parameters, and the adjustment of the transmission rate includes adjusting the transmission power to maintain the transmission intensity, and the transmission intensity includes modulating the signal-to-noise ratio based on the coding technology; When the transmission rate increases, the temperature rises, the transmission power is reduced, simple coding is used to reduce the tolerance of signal strength, and the appropriate transmission rate is selected; When the transmission rate decreases, the temperature is lowered, the transmission power is increased, complex coding is used to improve the tolerance of signal strength, and the appropriate transmission rate is selected.

3. The method for transmitting digital information of a confidential document over the Internet as claimed in claim 2, characterized in that: The forwarding rules include deploying operators, secretaries and security officers' computers, which are responsible for encrypting and decrypting documents and reading unencrypted or encrypted documents. The program allows users to easily select files for reading, querying, encrypting or decrypting, and provides multi-column and multi-item fuzzy query and multi-column and multi-item precise query functions that cannot be achieved by EXCEL editing software. During the use of the program, network sensors are used to monitor the load balancing of the transmission medium; If the load is evenly distributed, the transmission channel is overloaded, resulting in a decrease in the performance of the transmission medium. The load on each node in the transmission channel is too high, and the dynamic flow efficiency in the transmission medium increases. At this time, the congested nodes are bypassed; If the load balance distribution is uneven, the transmission channel is not overloaded, resulting in increased performance of the transmission medium, reduced load on each node in the transmission channel, and reduced dynamic flow efficiency in the transmission medium.

4. The method for transmitting digital information of a confidential document over the Internet as claimed in claim 3, characterized in that: The role types include wired sender, wired receiver and wired intermediate node. The administrator computer deployed by the sender is used as the security control center. According to the session key sent by the operator, a dynamic key is generated by encryption and transcoding, and the encrypted key is sent to the operator for logging in to open the encryption and decryption program. When the encryption and decryption program is started, the program first generates a composite string of multi-bit random numbers as the session key, and sends it to the key generation program on the administrator's PC in any form to receive the session key. The session key request is encrypted using an advanced encryption algorithm to generate a 256-bit encryption key. The more bits the key has, the more secure it is. The encryption key is further converted into a string; The encrypted key string is returned to the operator in any form. The encryption and decryption program is opened when the login is successful. If the key string is wrong, the encryption and decryption program will be automatically closed immediately. The wired intermediate node includes establishing a wired encryption module to perform end-to-end encryption on digital information, wherein the encryption includes two-way identity authentication by the wired sender and the wired receiver through an authentication service; If the identity authentication is incorrect, the digital information does not enter the wired channel; if the identity authentication is correct, the digital information enters the wired channel and a secure communication connection is established; The secure communication connection includes transmitting Internet digital information into a wireless channel, the role classification also includes a wireless sender, a wireless receiver and a wireless intermediate node, the wireless intermediate node includes establishing a wireless verification module to verify the digital information that has not entered the wired channel, and the verification includes a wireless sender and a wireless receiver verification service to perform two-way identity authentication; If the identity authentication is incorrect, the digital information will be reorganized; if the identity authentication is correct, the digital information that has not entered the wired channel will be overwritten and enter the wireless channel.

5. The method for transmitting digital information of a confidential document over the Internet as claimed in claim 4, characterized in that: The key management mechanism for setting up the Internet includes setting the names of three EXCEL table columns for query. The program will traverse the table to read the content, and read the content of the input box in rows according to the two modes of fuzzy query or precise query, and output the content in rows to display in the content box; The encryption and decryption program includes the use of a memory-safe programming language for development, and for documents with confidentiality requirements, a combination of a self-developed encryption algorithm and a mature, stable, and reliable advanced encryption standard algorithm is used. The advanced encryption algorithm is used to encrypt session key requests and generate a 256-bit encryption key; Data information entering the wireless channel is selected for key exchange selection, the key exchange selection includes a symmetric key and an asymmetric key, the symmetric key includes confusing the data information of the wireless channel, the confusing arrangement includes setting a state matrix around the node, and the state matrix includes shifting the node and the data information.

6. The method for transmitting digital information of a confidential document over the Internet as claimed in claim 5, characterized in that: The reorganization includes analyzing the encryption process according to the application scenario of the transmission, and the specific steps of the analysis are as follows: Network operation and maintenance personnel regularly inspect network communication equipment and store and manage account passwords in a safe and reliable manner. Account passwords need to be stored and distributed in a safe and reliable manner. Send confidential files to the recipients via the Internet, which ensures the security and reliability of the files themselves and the encryption and decryption process; Slice the data of the wireless transmitter and the wireless receiver, wherein the slice process includes using the sequence number of the identifier to determine the correct order of the slices; When the arrangement sequence is reorganized in ascending order, the receiver reorganizes the original data; When the arrangement order is reorganized in descending order, the order of the fragments at the receiver is inconsistent.

7. The method for transmitting digital information of a confidential document over the Internet as claimed in claim 6, characterized in that: The establishment of the vulnerability response database includes entering the database according to the reorganization order, using the error recovery request technology to repair the role type, and obtaining the resent role type for digital information transmission.

8. An Internet digital information transmission system for confidential documents, based on the Internet digital information transmission method for confidential documents according to any one of claims 1 to 7, characterized in that: include, Definition module, which designs a two-way multi-channel network architecture for confidential documents, introduces a network environment transmission channel, defines the role types of participants, and establishes a secure communication connection; Establish a module that sets up the key management mechanism of the Internet and establishes a fault-tolerant mechanism model. Participants receive data fragments for reorganization; The transmission module updates the response report of the security patch, establishes a vulnerability response database, uses the error recovery request technology to repair the role type, and obtains the resent role type for digital information transmission.

9. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the Internet digital information transmission method of a confidential document as described in any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the Internet digital information transmission method of a confidential document as described in any one of claims 1 to 7 are implemented.

Images