Data security transmission system for communication network

Abstract

The invention provides a data security transmission system for a communication network, which belongs to the technical field of communication security, and comprises a data processing module for processing original data, extracting data feature information and further generating a feature code; the data conversion module is used for generating a secret key based on a plurality of preset encryption algorithms and the feature code, and converting the original data into comprehensive ciphertext data in combination with the feature code; the data integration module is used for generating digital signature information based on the secret key and the comprehensive ciphertext data, and integrating the ciphertext data and the digital signature information to obtain a packaging transmission data packet; the data analysis module is used for sending the packaged transmission data packet to a receiving end based on the communication network and analyzing the packaged transmission data packet based on the receiving end; and the data verification module is used for carrying out decryption operation on the analyzed packaged transmission data packet based on the key to obtain decrypted data, and verifying the digital signature information based on the key to obtain original data. And the data security in the communication network is improved.

Description

Technical Field

[0001] The present invention relates to the field of communication security technology, and in particular to a data security transmission system for a communication network. Background Art

[0002] With the rapid development of information technology and the popularization of network communications, data security has become a key issue in the process of information transmission. Although encryption technology and digital signature methods have been used to protect data security, there are still certain defects in protecting data during transmission.

[0003] Especially when transmitting sensitive data, existing encryption technologies and data verification methods have shown certain limitations in the face of increasingly complex network environments. For example, traditional encryption algorithms may not be able to resist advanced persistent threats, digital signature methods are easily forged by attackers in some cases, and the selection and optimization of network transmission paths have not fully considered data encryption and security requirements. Traditional encryption methods mostly rely on simple encryption of the data itself, lacking dynamic adaptation and comprehensive protection of data characteristics, types and network status, resulting in system vulnerability to attacks or data leakage and other security risks.

[0004] Therefore, the present invention provides a data security transmission system for a communication network. Summary of the invention

[0005] The present invention provides a data security transmission system for communication networks, which realizes all-round encryption protection of original data by combining data feature extraction, encryption algorithm, key generation and digital signature technology, effectively prevents data leakage, tampering and forgery during transmission, ensures the confidentiality, integrity and authenticity of data transmission, ensures that the receiving end can safely decrypt and verify data through key verification and digital signature, and significantly improves the data security in the communication network.

[0006] The present invention provides a data security transmission system for a communication network, comprising: Data processing module: processes the original data, extracts data feature information, and then generates feature codes; Data conversion module: Generates keys based on several preset encryption algorithms and feature codes, and converts raw data into comprehensive ciphertext data in combination with feature codes; Data integration module: Generates digital signature information based on the key and comprehensive ciphertext data, and integrates the ciphertext data with the digital signature information to obtain the encapsulated transmission data packet; Data parsing module: sending the encapsulated transmission data packet to the receiving end based on the communication network, and parsing the encapsulated transmission data packet based on the receiving end; Data verification module: Decrypt the parsed encapsulated transmission data packet based on the key to obtain the decrypted data. At the same time, verify the digital signature information based on the key to obtain the original data.

[0007] The present invention provides a data security transmission system for a communication network, wherein the key is an asymmetric key, including a private key and a public key.

[0008] The present invention provides a data security transmission system for a communication network, a data processing module, comprising: Type determination unit: performs type analysis on the original data to determine the data type of the original data; Data checking unit: determines the corresponding data checking method based on the data type of the original data and a preset type-checking method data table, and then checks the original data; Format checking unit: performs format checking on the checked raw data according to the predetermined data type and format specification; Data processing unit: pre-processing the original data after format check based on the data type of the original data; Feature extraction unit: determines the feature extraction method based on the data type of the original data and a preset type-extraction method database, and performs feature extraction on the preprocessed original data; The feature code generating unit determines the corresponding feature code generating algorithm based on the data type of the original data and the preset type-algorithm database, and then generates a feature code from the extracted features.

[0009] The present invention provides a data security transmission system for a communication network, a data conversion module, comprising: A seed determination unit: obtaining a random number of a preset length based on a preset quantum random number generator, and then determining the random number of the preset length as an initial key seed; Parameter determination unit: collects and evaluates real-time network parameters based on network monitoring tools, and then determines the real-time status parameters of the network; Information combination unit: combines the initial key seed, feature code and real-time status parameters of the network based on preset combination rules to generate a comprehensive information set; Private key acquisition unit: takes the comprehensive information set as input, substitutes it into the preset encryption algorithm for calculation, and then obtains the private key; The key determination unit determines the corresponding public key based on the private key and a preset first encryption algorithm, and then determines the private key and the public key as a key.

[0010] The present invention provides a data security transmission system for a communication network, a data conversion module, and further includes: Interference generation unit: based on the length, type and characteristics of the original data, generates interference data using a preset pseudo-random number generator; A first encryption unit: performs a first encryption on the original data based on a key and a preset second encryption algorithm, thereby obtaining initial ciphertext data; The second encryption unit: mixes the original data with the interference data, and performs a second encryption on the mixed ciphertext data by using a preset third encryption algorithm based on the public key and the feature code; The ciphertext determination unit determines the second encrypted ciphertext data as comprehensive ciphertext data.

[0011] The present invention provides a data security transmission system for a communication network, wherein the second encryption unit comprises: Data conversion subunit: performing data conversion on the original data and the interference data, thereby generating first original data and first interference data in the same data format; A first division subunit: performing a first division on the first original data and the first interference data, respectively, to obtain a first original data group and a first interference data group; A second division subunit: performing a second division on the first original data group and the first interference data group, thereby obtaining a first original data block and a first interference data block; A first mixing subunit: performing a first mixing on the first original data block and the first interference data block based on a preset first mixing mode; The component mixing subunit performs inter-group mixing on the first mixed data based on a preset second mixing mode; Data diffusion subunit: diffuses the mixed data between groups based on a preset method, and obtains the mixed original data and interference data in combination with the first mixing result.

[0012] The present invention provides a data security transmission system for a communication network, a data integration module, comprising: Path determination unit: performs adaptive error correction coding on the comprehensive ciphertext data, performs intelligent routing analysis on the error correction coded data, and then determines the optimal transmission path; Data encapsulation unit: determines the corresponding encapsulation format based on the preset path-format database, and then encapsulates the comprehensive ciphertext data into a data packet of the corresponding encapsulation format.

[0013] The present invention provides a data security transmission system for a communication network, a path determination unit, comprising Path determination subunit: performs adaptive error correction coding on the comprehensive ciphertext data, performs intelligent routing analysis on the error correction coded data, and then determines several matching paths; Path analysis subunit: performs path analysis on all matching paths, and then determines several characteristics and characteristic-related parameters of each matching path; coefficient determination subunit: determines the path coefficient of each matching path based on the characteristics and characteristic-related parameters of each matching path:

[0014] in, For the The path coefficients of the matching paths, For the The number of feature dimensions of matching paths, For the The dynamic weight factor of the first feature under the i-th feature dimension of the matching path, For the The value of the first feature of the matching path in the i-th feature dimension, For the The first matching path The smoothing parameter of the first feature under feature dimensions, To preset adjustment parameters, For the The first matching path The dynamic adjustment factor of the second feature under the feature dimension, For the The first matching path The preset time adjustment coefficient corresponding to the second feature under the feature dimension, For the The value of the second feature of the matching path under the i-th feature dimension, For the The time characteristic adjustment factor corresponding to the second feature under the i-th feature dimension of the matching path, For the The corresponding regularization factor for the matching paths.

[0015] Compared with the prior art, the present invention has the following beneficial effects: By combining data feature extraction, encryption algorithms, key generation and digital signature technology, all-round encryption protection of original data is achieved, effectively preventing data leakage, tampering and forgery during transmission, ensuring the confidentiality, integrity and authenticity of data transmission, and through key verification and digital signature, ensuring that the receiving end can safely decrypt and verify the data, significantly improving data security in the communication network. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] In order to more clearly illustrate the technical solutions in the present invention or the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0017] Figure 1 It is a structural schematic diagram of a data security transmission system for a communication network provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0018] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be clearly and completely described below in conjunction with the drawings of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0019] Embodiment 1: The embodiment of the present invention provides a data security transmission system for a communication network, such as Figure 1 As shown, including: Data processing module: processes the original data, extracts data feature information, and then generates feature codes; Data conversion module: Generates keys based on several preset encryption algorithms and feature codes, and converts raw data into comprehensive ciphertext data in combination with feature codes; Data integration module: Generates digital signature information based on the key and comprehensive ciphertext data, and integrates the ciphertext data with the digital signature information to obtain the encapsulated transmission data packet; Data parsing module: sending the encapsulated transmission data packet to the receiving end based on the communication network, and parsing the encapsulated transmission data packet based on the receiving end; Data verification module: Decrypt the parsed encapsulated transmission data packet based on the key to obtain the decrypted data. At the same time, verify the digital signature information based on the key to obtain the original data.

[0020] In this embodiment, feature information is a representative data feature extracted from the original data, which is used to describe or identify the main content of the data. For example, for a piece of text data, feature information can be word frequency, syntactic structure, keywords, etc.; for image data, feature information can be color distribution, texture, etc. By extracting these features, data can be effectively processed and classified; In this embodiment, the feature code is a code generated based on feature information, which is used to identify or represent the features of data. For example, if "keywords" are extracted from a certain text as feature information, then these keywords can be converted into a unique code (i.e., feature code) for subsequent encryption or data conversion. For example: feature information: word frequency of a text or color histogram of an image, feature code: "keyword" code generated by hash algorithm.

[0021] In this embodiment, the digital signature information is a piece of information generated by encrypting data (such as ciphertext data) with a private key, with the purpose of ensuring the integrity of the data and the authenticity of the source. The digital signature can prove that the data has not been tampered with during transmission, and can verify whether the data is sent by a specific sender. For example: suppose Alice sends a piece of ciphertext data to Bob, and wants Bob to confirm that the data has not been tampered with and is indeed sent by her. Alice uses the private key to generate a digital signature for the ciphertext data. After receiving the ciphertext data and digital signature, Bob uses Alice's public key to decrypt the digital signature and verify the integrity and source of the data.

[0022] In this embodiment, decrypting data refers to the process of restoring the encrypted data to the original data through a key (such as a private key or a public key). In data transmission, encryption is used to protect the confidentiality of data, while decryption is the process of restoring the encrypted data at the receiving end. For example, Alice encrypts a message using an encryption algorithm and sends it to Bob. Bob uses the corresponding private key to decrypt the received encrypted data and restore the original message content.

[0023] The beneficial effects of the above technical solution are as follows: by combining data feature extraction, encryption algorithm, key generation and digital signature technology, all-round encryption protection of original data is achieved, effectively preventing data leakage, tampering and forgery during transmission, ensuring the confidentiality, integrity and authenticity of data transmission, and through key verification and digital signature, ensuring that the receiving end can safely decrypt and verify the data, significantly improving data security in the communication network.

[0024] Embodiment 2: The embodiment of the present invention provides a data security transmission system for a communication network, wherein the key is an asymmetric key, including a private key and a public key.

[0025] In this embodiment, asymmetric key is an encryption method in which a pair of different but related keys are used to perform encryption and decryption operations. The pair of keys includes a public key and a private key. In asymmetric encryption, the public key can be publicly disseminated and used to encrypt data, while the private key is kept secret by the recipient and used to decrypt data. Encryption operation: data can be encrypted using the public key. Decryption operation: only the recipient with the corresponding private key can decrypt the data. For example: Alice can make her public key public, and anyone can use this public key to encrypt a message to her. However, only the private key held by Alice can decrypt these encrypted messages.

[0026] The beneficial effects of the above technical solution are as follows: through asymmetric key encryption technology, the cooperation of private key and public key is used to ensure that data is highly secure during transmission. The public key is used to encrypt data and the private key is used to decrypt. Only the legitimate recipient can decrypt the data, preventing the data from being stolen or tampered with by unauthorized parties. Asymmetric encryption ensures the confidentiality, integrity and non-repudiation of data, thereby improving the security of the communication network.

[0027] Embodiment 3: The embodiment of the present invention provides a data security transmission system for a communication network, a data processing module, including: Type determination unit: performs type analysis on the original data to determine the data type of the original data; Data checking unit: determines the corresponding data checking method based on the data type of the original data and a preset type-checking method data table, and then checks the original data; Format checking unit: performs format checking on the checked raw data according to the predetermined data type and format specification; Data processing unit: pre-processing the original data after format check based on the data type of the original data; Feature extraction unit: determines the feature extraction method based on the data type of the original data and a preset type-extraction method database, and performs feature extraction on the preprocessed original data; The feature code generating unit determines the corresponding feature code generating algorithm based on the data type of the original data and the preset type-algorithm database, and then generates a feature code from the extracted features.

[0028] In this embodiment, the data type of the raw data refers to the category or format of the data input into the system. In the data processing process, the data type defines the structure and content of the data, which can be numbers, text, images, audio, etc., or more specific formats, such as strings, integers, floating point numbers, dates, etc. The data type determines the subsequent processing methods and steps, such as inspection, preprocessing, format verification, etc. For example: if the raw data is a string (such as "Hello, World!"), then its data type is "string", if the raw data is a number (such as 1234), then its data type is "integer", if the raw data is an image (such as a JPEG file), its data type is "image", if the raw data is a timestamp (such as 2025-01-01 12:00:00), then its data type is "date time".

[0029] In this embodiment, the data checking method refers to a specific method for checking the original data based on the data type or preset rules during the data processing process. The data checking method generally includes but is not limited to: format verification, range check, legality check, integrity check, checksum check, etc. Each data type will have a specific checking method to ensure the validity and correctness of the data. For example: for the "integer" data type, the checking method may include verifying whether the number is within a valid range (for example: 0 to 1000), for the "string" data type, the checking method may be to verify whether the length of the string meets the expectation, or whether it contains illegal characters (such as sensitive characters), for the "date and time" data type, the checking method may be to verify whether the format of the date is correct (for example: YYYY-MM-DD), or whether the date is valid (for example: January 32, 2025 is illegal), for the "image" data type, the checking method may include verifying whether the format of the image file meets the predetermined format (such as JPG or PNG), and whether the file size is within a reasonable range. Suppose you have a piece of raw data from the network, containing multiple fields, including name, age, date of birth, and avatar.

[0030] In this embodiment, the format check is to use different format verification mechanisms for different data types, such as text, image, audio, video or structured data. For text data, check whether its encoding complies with the standard (such as UTF-8 or ASCII) and ensure that there are no illegal characters or encoding errors. A character set verification algorithm can be used to check the range and validity of character encoding. For image data, check the file header information to ensure that it complies with the standards of common image formats (such as JPEG, PNG, GIF, etc.). For JPEG files, verify whether its SOI (Start of Image) and EOI (End of Image) markers are correct, and check the consistency of segment identifiers and segment lengths. For audio and video data, check the encoding format of the file header (such as MP3, AAC, H.264, etc.) to ensure that it complies with the corresponding standards, check whether the frame header information and synchronization words are correct, and for structured data (such as XML, JSON, CSV, etc.), use the corresponding parser (such as XML parser, JSON parser) to perform parsing verification to ensure that its structure is complete and the nesting and attributes of elements comply with the specifications.

[0031] In this embodiment, the raw data after the format check is preprocessed by performing lexical and syntactic analysis on the text data, using natural language processing (NLP) tools to split the text into words, phrases and sentences, and perform part-of-speech tagging and grammatical structure analysis on them. Stop words (such as common prepositions, conjunctions, etc.) are eliminated to reduce data redundancy. For image data, image preprocessing operations are performed, including image enhancement (such as contrast adjustment, denoising, sharpening), and the image is converted into a unified color space (such as from RGB to YUV) for subsequent feature extraction and processing. For audio data, preprocessing operations are performed, such as denoising and normalization, the amplitude of the audio signal is adjusted to a suitable range, and DC offset is eliminated. For video data, it is split into audio and video streams, and the above-mentioned audio and image preprocessing operations are performed separately, while ensuring the time synchronization of audio and video. For structured data, data cleaning operations are performed to remove duplicate records, repair data inconsistencies, fill missing values, and standardize data (for example, unify the date format to YYYY-MM-DD).

[0032] The beneficial effects of the above technical solution are as follows: by performing multiple steps such as type analysis, inspection, format verification, preprocessing, and feature extraction on the original data, the accuracy and security of the data during transmission are effectively guaranteed. Through the preset type-inspection method, type-extraction method, and type-algorithm database, the system can flexibly respond to different data types, ensure that the data format is standardized and the feature extraction is accurate, thereby generating reliable feature codes and providing effective protection for data security.

[0033] Embodiment 4: The embodiment of the present invention provides a data security transmission system for a communication network, a data conversion module, including: A seed determination unit: obtaining a random number of a preset length based on a preset quantum random number generator, and then determining the random number of the preset length as an initial key seed; Parameter determination unit: collects and evaluates real-time network parameters based on network monitoring tools, and then determines the real-time status parameters of the network; Information combination unit: combines the initial key seed, feature code and real-time status parameters of the network based on preset combination rules to generate a comprehensive information set; Private key acquisition unit: takes the comprehensive information set as input, substitutes it into the preset encryption algorithm for calculation, and then obtains the private key; The key determination unit determines the corresponding public key based on the private key and a preset first encryption algorithm, and then determines the private key and the public key as a key.

[0034] In this embodiment, the preset quantum random number generator is a device or algorithm that generates random numbers using the principles of quantum mechanics (such as quantum superposition and quantum uncertainty). Different from the traditional pseudo-random number generator, the quantum random number generator generates completely random values ​​by measuring the unpredictability of quantum states, and has higher security and unpredictability. For example, the quantum random number generator uses the change in the polarization state of photons to generate random numbers. Due to the unpredictability of the quantum system, these random numbers have higher randomness and security. In this embodiment, the preset length refers to the number of bits or length of the random number predetermined in the system design stage. This length determines the size or complexity of the generated random number, which usually affects the strength and security of the encryption algorithm. For example, if the preset length is 128 bits, the generated random number will be 128 bits long, for example, 10010101010111010100110101010111. The longer the preset length, the higher the complexity of the random number and the stronger the security. In this embodiment, the initial key seed refers to the initial value used to generate the key, which is usually a random number. It serves as the starting point of the key generation algorithm. Through specific algorithms and processing, it can further generate the private key, public key and other keys required for encryption. For example, assuming that the preset quantum random number generator generates a 128-bit random number "101010101010", this number can be used as the initial key seed and further used to generate encryption keys.

[0035] In this embodiment, the network monitoring tool is a tool used to collect and monitor network status, traffic, performance, and potential security threats in real time. These tools can obtain various parameters in the network, such as latency, bandwidth, packet loss rate, etc., to evaluate the current status of the network. For example, tools such as Wireshark, PingPlotter, and NetFlow analysis tools can monitor network traffic, response time, and other network health indicators to help evaluate network performance and stability; In this embodiment, the real-time status parameters refer to the network status information collected by the network monitoring tool at a specific time. These parameters reflect the current health of the network, such as network delay, bandwidth utilization, packet loss rate, etc. For example, the real-time status parameters may include: the current network delay is 50ms, the bandwidth utilization is 80%, and the current packet loss rate is 0.2%.

[0036] In this embodiment, the preset combination rule refers to the preset rules for combining different information (such as the initial key seed, the feature code, and the real-time status parameters of the network) during the key generation process. These rules determine how the various information items are combined to ensure that the generated comprehensive information has sufficient complexity and security. For example, the preset combination rule may stipulate that the initial key seed (such as a 128-bit random number), the feature code (such as the fingerprint feature of the image), and the network status parameter (such as the delay value) are weighted and combined according to a certain encryption algorithm to generate a comprehensive information.

[0037] In this embodiment, the preset first encryption algorithm refers to an encryption algorithm defined in advance during the system design phase, which is used to generate a public key and a private key pair. For example, the RSA encryption algorithm is used as the preset first encryption algorithm.

[0038] The beneficial effects of the above technical solution are: by using quantum random numbers to generate initial key seeds, collecting real-time network parameters and evaluating them, combining preset combination rules to generate comprehensive information, and further generating private keys and public keys. The system combines quantum random numbers with network status to ensure the high security and dynamic adaptability of keys, effectively prevent external attacks and data leakage, and improve the data security of communication networks.

[0039] Embodiment 5: The embodiment of the present invention provides a data security transmission system for a communication network, a data conversion module, and further includes: Interference generation unit: based on the length, type and characteristics of the original data, generates interference data using a preset pseudo-random number generator; A first encryption unit: performs a first encryption on the original data based on a key and a preset second encryption algorithm, thereby obtaining initial ciphertext data; The second encryption unit: mixes the original data with the interference data, and performs a second encryption on the mixed ciphertext data by using a preset third encryption algorithm based on the public key and the feature code; The ciphertext determination unit determines the second encrypted ciphertext data as comprehensive ciphertext data.

[0040] In this embodiment, the preset pseudo-random number generator refers to an algorithm or tool that has been set in the system design stage, which is used to generate seemingly random but actually predictable values. The generation of pseudo-random numbers is based on an initial seed value to ensure that the results are repeatable, but they appear to be random data to the user. For example, a commonly used pseudo-random number generation algorithm is Mersenne Twister. Assuming that the system has been set to use this algorithm as a pseudo-random number generator in the initial stage, the system will use it to generate a set of pseudo-random numbers every time interference data needs to be generated.

[0041] In this embodiment, the preset second encryption algorithm refers to an encryption method that has been determined when the system is designed, which is used to perform preliminary encryption on the data. This algorithm is usually different from the "first encryption algorithm" and is used to add an additional security layer during the data transmission process. For example, a common second encryption algorithm may be AES (Advanced Encryption Standard). For example, when the system is set to transmit data, the data is first encrypted by AES, so that even if someone intercepts the data, the content cannot be directly read.

[0042] In this embodiment, the first encryption refers to the encryption operation performed on the original data using the "preset second encryption algorithm". The purpose of this step is to provide preliminary protection for the original data so that it cannot be easily cracked. If the original data is a text file, the first encryption step may use the AES algorithm to encrypt the content of the file, thereby converting it into encrypted data to protect the security of the data.

[0043] In this embodiment, the preset third encryption algorithm refers to another encryption method selected during system design, which is usually used to further encrypt data after the first encryption to enhance data security. This algorithm is usually more complex or more protective than the first two encryption methods. For example, the third encryption algorithm may be RSA (public key encryption algorithm). In the second encryption stage, the system may select RSA to further encrypt the data after the mixing process to ensure the security of the data during transmission.

[0044] In this embodiment, the second encryption is a further encryption operation performed by mixing the original data with the interference data using the "preset third encryption algorithm". This process makes the encryption of the data more complicated, and even if the attacker obtains the encrypted data, it is difficult to crack. Assume that the original data is a user password and some pseudo-random interference data is generated. The second encryption step mixes the two parts of data and then encrypts them through the RSA algorithm. The final generated ciphertext will be more difficult to crack than the initial encryption result.

[0045] The beneficial effects of the above technical solution are: through multiple encryption and interference data generation, the confidentiality and security of data are significantly enhanced. First, the interference data is generated by pseudo-random numbers, which increases the complexity of the data; second, the two-layer encryption method (first encryption and second encryption) is used to further protect the original data, ensuring that even if the data is intercepted, it is difficult to crack. Finally, the comprehensive ciphertext data provides stronger protection capabilities to ensure the secure transmission of data in the communication network.

[0046] Embodiment 6: An embodiment of the present invention provides a data security transmission system for a communication network, wherein the second encryption unit comprises: Data conversion subunit: performing data conversion on the original data and the interference data, thereby generating first original data and first interference data in the same data format; A first division subunit: performing a first division on the first original data and the first interference data, respectively, to obtain a first original data group and a first interference data group; A second division subunit: performing a second division on the first original data group and the first interference data group, thereby obtaining a first original data block and a first interference data block; A first mixing subunit: performing a first mixing on the first original data block and the first interference data block based on a preset first mixing mode; The component mixing subunit performs inter-group mixing on the first mixed data based on a preset second mixing mode; Data diffusion subunit: diffuses the mixed data between groups based on a preset method, and obtains the mixed original data and interference data in combination with the first mixing result.

[0047] In this embodiment, converting the original data and the interference data is to convert the original data and the interference data into a unified data representation form for subsequent operations. If the original data is text data, it is converted into a binary code or an ASCII code sequence of characters. For example, for the text "Hello World", each character can be converted into its corresponding ASCII code to obtain [72, 101, 108, 108, 111, 32, 87, 105, 114, 100]. For image data, its pixel values are converted into binary or decimal representations. For grayscale images, each pixel point is usually represented by an 8-bit or 16-bit value, which can be expanded into a one-dimensional array. For example, a 2x2 grayscale image with pixel values [[100, 120], [150, 180]] can be converted into [100, 120, 150, 180]. For structured data, it is split into a sequence of data elements in a certain order (such as row-major or column-major). For example, for a simple table data [(1, 2), (3, 4)], it can be converted into [1, 2, 3, 4]. Data length alignment: Ensure that the lengths of the original data and the interference data are the same. If the lengths of the two are different, they can be made equal by adding zero padding or truncation. For example, if the length of the original data is n and the length of the interference data is m, and n < m, m - n zero elements can be added at the end of the original data; if n > m, the end part of the original data can be truncated to make its length m.

[0048] In this embodiment, the second partitioning of the first original data group and the first interference data group is to divide the original data and the interference data into several groups or blocks. The size of the grouping can be determined according to the data length and security requirements. Generally, the data can be divided into multiple equal-length subsequences. For example, for data with a length of L, it can be divided into k groups, and the length of each group is L / k (assuming L is divisible by k). For the text data [72, 101, 108, 108, 111, 32, 87, 105, 114, 100], if k = 3, it can be divided into [[72, 101, 108], [108, 111, 32], [87, 105, 114],

[100] ] (the length of the last group may be insufficient). For each group, it can be further divided into blocks, and the block size can be determined according to the data characteristics and algorithm complexity requirements. For example, for each group of the above data, it can be divided into smaller blocks, such as [[

[72] ,

[101] ,

[108] ], [

[108] ,

[111] ,

[32] ], [

[87] ,

[105] ,

[114] ], [

[100] ]].

[0049] In this embodiment, the first mixing includes: nonlinear function mixing: using a nonlinear function to mix the original data block and the interference data block. For example, for each pair of original data block x and interference data block y, a logical function such as z = x * sin(y) + y * cos(x) or z = (x^2 + y^2) % 256 (for byte data) can be used to store the result in a new mixed data block. Trigonometric functions and modulo operations are used here to make the mixed result have nonlinear characteristics, which is difficult to restore by simple inverse operations. For binary data, Boolean functions such as z = (x AND y) XOR (NOT x ORy) can be used to apply logical operations to binary bits, destroying the logical structure of the original data. Polynomial mixing: For each group, the original data block and the interference data block are regarded as coefficients of the polynomial, and polynomials P(x) and Q(x) are constructed. For example, for the block [a, b,c], construct the polynomial P(x) = a * x^2 + b * x + c, and for the interference data block [d, e, f] construct Q(x) = d *x^2 + e * x + f, calculate the sum or product of the polynomial, such as R(x) = P(x) * Q(x) or R(x) = P(x) + Q(x), and use the coefficients of the result as mixed data. For R(x) = P(x) * Q(x), the calculation result will contain a complex combination of the original data and the interference data, and the length of the result may increase, requiring further processing. The polynomial result can be modulo operated, such as R(x) = (P(x) * Q(x)) % M, where M is a large prime number or a specific modulus to limit the length and range of the result. Circular shift and XOR operation: Circular shift operations are performed on the original data block and the interference data block. For a data block [a, b, c], circularly shift left by one bit to get [b, c, a], circularly shift right by two bits to get [c, a, b], perform XOR operation on the shifted original data block and the interference data block to get a mixed data block. For example, for the shifted original data block [b, c, a] and the interference data block [d, e, f], the mixed data block is [(b XOR d), (c XOR e), (a XOR f)].

[0050] In this embodiment, the diffusion of the data after inter-group mixing based on a preset method is to perform a diffusion operation on the result after inter-group mixing, and diffuse the local changes of the data to the entire data set. The Feistel network structure can be used for diffusion. The data is divided into two parts, L and R, on the left and right. After multiple rounds of iterations, in each round, R is used as the result of the input calculation function F, and the values ​​of L and R are updated, for example, L_new = R, R_new = L XOR F(R). The function F here can be the above-mentioned nonlinear function, polynomial function or other complex function, and the local modification of the data is diffused to the entire data set through multiple rounds of iterations.

[0051] The beneficial effects of the above technical solution are as follows: data security is enhanced through multi-stage data processing, including data conversion, division, mixing and diffusion. By effectively dividing and mixing the original data and the interference data, and combining the preset mixing and diffusion methods, the complexity and protection capabilities of the data can be effectively improved, and the data can be prevented from being cracked or tampered with, thereby achieving more secure data transmission protection.

[0052] Embodiment 7: The embodiment of the present invention provides a data security transmission system for a communication network, a data integration module, including: Path determination unit: performs adaptive error correction coding on the comprehensive ciphertext data, performs intelligent routing analysis on the error correction coded data, and then determines the optimal transmission path; Data encapsulation unit: determines the corresponding encapsulation format based on the preset path-format database, and then encapsulates the comprehensive ciphertext data into a data packet of the corresponding encapsulation format.

[0053] In this embodiment, adaptive error correction coding is a technology that dynamically adjusts the coding method according to changes in the transmission environment. Its purpose is to add redundant information during data transmission so that the receiver can automatically detect and correct errors when errors occur. Unlike traditional fixed coding, adaptive error correction coding will flexibly adjust the coding strategy according to the actual network conditions (such as signal quality, transmission rate, etc.), thereby improving the reliability and efficiency of data transmission. Assuming that the signal quality in a certain communication network fluctuates greatly, data is prone to errors during transmission. When using adaptive error correction coding, if the signal deterioration is detected, the coding method will be automatically adjusted so that the transmitted data can contain more redundant information, thereby enhancing the error correction capability and ensuring that the data can be correctly decoded at the receiving end.

[0054] In this embodiment, the encapsulation format refers to the way of organizing and packaging data according to specific rules and structures. Encapsulation usually involves packaging the original data or encrypted data together with necessary control information (such as data packet header, target address, etc.) into a data packet for network transmission. The selection of the encapsulation format is usually set according to different network protocols and transmission requirements. For example, in network communication, IP data packets are a common encapsulation format. When the sender is ready to send data, it will select a suitable encapsulation format according to the target network type (such as IPv4, IPv6, etc.). In the encapsulation format, in addition to the original data, the data packet header (such as source IP address, target IP address, checksum, etc.) will also be included to ensure that the data can be accurately and efficiently transmitted to the recipient.

[0055] The beneficial effects of the above technical solution are as follows: through adaptive error correction coding and intelligent routing analysis technology, the transmission path can be dynamically adjusted according to the network environment to ensure the reliability and efficiency of data transmission. At the same time, the data encapsulation unit selects the most appropriate encapsulation format based on the path-format database, optimizes the data packet structure, and further improves the security and compatibility of data transmission, thereby achieving more efficient and secure data transmission.

[0056] Embodiment 8: An embodiment of the present invention provides a data security transmission system for a communication network, a path determination unit, including: Path determination subunit: performs adaptive error correction coding on the comprehensive ciphertext data, performs intelligent routing analysis on the error correction coded data, and then determines several matching paths; Path analysis subunit: performs path analysis on all matching paths, and then determines several characteristics and characteristic-related parameters of each matching path; coefficient determination subunit: determines the path coefficient of each matching path based on the characteristics and characteristic-related parameters of each matching path:

[0057] in, For the The path coefficients of the matching paths, For the The number of feature dimensions of matching paths, For the The dynamic weight factor of the first feature under the i-th feature dimension of the matching path, For the The value of the first feature of the matching path in the i-th feature dimension, For the The first matching path The smoothing parameter of the first feature under feature dimensions, To preset adjustment parameters, For the The first matching path The dynamic adjustment factor of the second feature under the feature dimension, For the The first matching path The preset time adjustment coefficient corresponding to the second feature under the feature dimension, For the The value of the second feature of the matching path under the i-th feature dimension, For the The time characteristic adjustment factor corresponding to the second feature under the i-th feature dimension of the matching path, For the The corresponding regularization factor for the matching paths.

[0058] In this embodiment, the first feature refers to a specific indicator used to describe the performance of a path in a specific path or data transmission process, which usually reflects the basic transmission capacity of the path, such as bandwidth, delay and other factors. It is assumed that the first feature of a communication path is bandwidth. Bandwidth is a very important indicator in data transmission, which determines the amount of data transmitted per unit time. If the bandwidth is larger, it means that it can carry more data traffic, thereby improving communication efficiency.

[0059] In this embodiment, the second feature refers to another indicator used to further describe the performance of the path in addition to the first feature. It is usually used to supplement or analyze in combination with the first feature to comprehensively evaluate the quality or performance of the path. For example, delay, response time, etc. For example: Assume that the second feature of a communication path is delay. Delay refers to the time required for data to travel from the sender to the receiver, usually in milliseconds (ms). Lower latency means that data can reach the receiver faster, which is especially important for real-time applications (such as video calls, online games, etc.).

[0060] The beneficial effects of the above technical solution are: through adaptive error correction coding and intelligent routing analysis, multiple matching paths can be dynamically selected according to network conditions to optimize data transmission routes. The path analysis and path coefficient determination sub-units combine characteristics and parameters to accurately evaluate the performance of each path, optimize path selection based on dynamic weight factors, smoothing parameters and other factors, and improve transmission efficiency and reliability. Through multi-dimensional adjustments, the security, stability and timeliness of data transmission are ensured.

[0061] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A data security transmission system for a communication network, characterized in that: include: Data processing module: processes the original data, extracts data feature information, and then generates feature codes; Data conversion module: Generates keys based on several preset encryption algorithms and feature codes, and converts raw data into comprehensive ciphertext data in combination with feature codes; Data integration module: Generates digital signature information based on the key and comprehensive ciphertext data, and integrates the ciphertext data with the digital signature information to obtain the encapsulated transmission data packet; Data parsing module: sending the encapsulated transmission data packet to the receiving end based on the communication network, and parsing the encapsulated transmission data packet based on the receiving end; Data verification module: Decrypt the parsed encapsulated transmission data packet based on the key to obtain the decrypted data. At the same time, verify the digital signature information based on the key to obtain the original data.

2. A data security transmission system for a communication network according to claim 1, characterized in that: The key is an asymmetric key, including a private key and a public key.

3. A data security transmission system for a communication network according to claim 1, characterized in that: Data processing module, including: Type determination unit: performs type analysis on the original data to determine the data type of the original data; Data checking unit: determines the corresponding data checking method based on the data type of the original data and a preset type-checking method data table, and then checks the original data; Format checking unit: performs format checking on the checked raw data according to the predetermined data type and format specification; Data processing unit: pre-processing the original data after format check based on the data type of the original data; Feature extraction unit: determines the feature extraction method based on the data type of the original data and a preset type-extraction method database, and performs feature extraction on the preprocessed original data; The feature code generating unit determines the corresponding feature code generating algorithm based on the data type of the original data and the preset type-algorithm database, and then generates a feature code from the extracted features.

4. A data security transmission system for a communication network according to claim 2, characterized in that: Data conversion module, including: A seed determination unit: obtaining a random number of a preset length based on a preset quantum random number generator, and then determining the random number of the preset length as an initial key seed; Parameter determination unit: collects and evaluates real-time network parameters based on network monitoring tools, and then determines the real-time status parameters of the network; Information combination unit: combines the initial key seed, feature code and real-time status parameters of the network based on preset combination rules to generate a comprehensive information set; Private key acquisition unit: takes the comprehensive information set as input, substitutes it into the preset encryption algorithm for calculation, and then obtains the private key; The key determination unit determines the corresponding public key based on the private key and a preset first encryption algorithm, and then determines the private key and the public key as a key.

5. A data security transmission system for a communication network according to claim 4, characterized in that: The data conversion module also includes: Interference generation unit: based on the length, type and characteristics of the original data, generates interference data using a preset pseudo-random number generator; A first encryption unit: performs a first encryption on the original data based on a key and a preset second encryption algorithm, thereby obtaining initial ciphertext data; The second encryption unit: mixes the original data with the interference data, and performs a second encryption on the mixed ciphertext data by using a preset third encryption algorithm based on the public key and the feature code; The ciphertext determination unit determines the second encrypted ciphertext data as comprehensive ciphertext data.

6. A data security transmission system for a communication network according to claim 5, characterized in that: The second encryption unit comprises: Data conversion subunit: performing data conversion on the original data and the interference data, thereby generating first original data and first interference data in the same data format; A first division subunit: performing a first division on the first original data and the first interference data, respectively, to obtain a first original data group and a first interference data group; A second division subunit: performing a second division on the first original data group and the first interference data group, thereby obtaining a first original data block and a first interference data block; A first mixing subunit: performing a first mixing on the first original data block and the first interference data block based on a preset first mixing mode; The component mixing subunit performs inter-group mixing on the first mixed data based on a preset second mixing mode; Data diffusion subunit: diffuses the mixed data between groups based on a preset method, and obtains the mixed original data and interference data in combination with the first mixing result.

7. A data security transmission system for a communication network according to claim 1, characterized in that: Data integration module, including: Path determination unit: performs adaptive error correction coding on the comprehensive ciphertext data, performs intelligent routing analysis on the error correction coded data, and then determines the optimal transmission path; Data encapsulation unit: determines the corresponding encapsulation format based on the preset path-format database, and then encapsulates the comprehensive ciphertext data into a data packet of the corresponding encapsulation format.

8. A data security transmission system for a communication network according to claim 7, characterized in that: Path determination unit, including Path determination subunit: performs adaptive error correction coding on the comprehensive ciphertext data, performs intelligent routing analysis on the error correction coded data, and then determines several matching paths; Path analysis subunit: performs path analysis on all matching paths, and then determines several features and feature-related parameters of each matching path; Coefficient determination subunit: Determine the path coefficient of each matching path based on the characteristics and characteristic-related parameters of each matching path: in, For the The path coefficients of the matching paths, For the The number of feature dimensions of matching paths, For the The dynamic weight factor of the first feature under the i-th feature dimension of the matching path, For the The value of the first feature of the matching path in the i-th feature dimension, For the The first matching path The smoothing parameter of the first feature under feature dimensions, To preset adjustment parameters, For the The first matching path The dynamic adjustment factor of the second feature under the feature dimension, For the The first matching path The preset time adjustment coefficient corresponding to the second feature under the feature dimension, For the The value of the second feature of the matching path under the i-th feature dimension, For the The time characteristic adjustment factor corresponding to the second feature under the i-th feature dimension of the matching path, For the The corresponding regularization factor for the matching paths.

Images