A data security transmission system for communication network

Abstract

The present invention provides a data security transmission system for a communication network, belonging to the field of communication security technology. The system comprises: a data processing module, which processes raw data, extracts data feature information, and generates a feature code; a data conversion module, which generates a key based on several preset encryption algorithms and feature codes, and converts the raw data into comprehensive ciphertext data in combination with the feature code; a data integration module, which generates digital signature information based on the key and comprehensive ciphertext data, and integrates the ciphertext data with the digital signature information to obtain an encapsulated transmission data packet; a data parsing module, which sends the encapsulated transmission data packet to a receiving end via the communication network and parses the encapsulated transmission data packet at the receiving end; and a data verification module, which decrypts the parsed encapsulated transmission data packet based on the key to obtain decrypted data, and simultaneously verifies the digital signature information based on the key to obtain the original data. This system improves data security in communication networks.

Description

Technical Field

[0001] The present invention relates to the field of communication security technology, and in particular to a data security transmission system for a communication network. Background Art

[0002] With the rapid development of information technology and the popularization of network communications, data security has become a key issue in the process of information transmission. Although encryption technology and digital signature methods have been used to protect data security, there are still certain shortcomings in protecting data during transmission.

[0003] Existing encryption technologies and data verification methods, particularly when transmitting sensitive data, are showing limitations in increasingly complex network environments. For example, traditional encryption algorithms may not be able to protect against advanced persistent threats, digital signatures can be easily forged by attackers in certain situations, and the selection and optimization of network transmission paths often fail to fully consider data encryption and security requirements. Traditional encryption methods often rely on simple encryption of the data itself, lacking dynamic adaptation and comprehensive protection for data characteristics, types, and network status, leaving systems vulnerable to attacks and potentially exposing security risks such as data leaks.

[0004] Therefore, the present invention provides a data security transmission system for a communication network. Summary of the Invention

[0005] The present invention provides a data security transmission system for communication networks, which is used to achieve all-round encryption protection of original data by combining data feature extraction, encryption algorithm, key generation and digital signature technology, effectively preventing data leakage, tampering and forgery during transmission, ensuring the confidentiality, integrity and authenticity of data transmission, and ensuring that the receiving end can safely decrypt and verify data through key verification and digital signature, thereby significantly improving data security in communication networks.

[0006] The present invention provides a data security transmission system for a communication network, comprising:

[0007] Data processing module: processes the original data, extracts data feature information, and then generates feature codes;

[0008] Data conversion module: Generates keys based on several preset encryption algorithms and feature codes, and converts raw data into comprehensive ciphertext data in combination with feature codes;

[0009] Data integration module: Generates digital signature information based on the key and comprehensive ciphertext data, and integrates the ciphertext data with the digital signature information to obtain the encapsulated transmission data packet;

[0010] Data parsing module: sends the encapsulated transmission data packet to the receiving end based on the communication network, and parses the encapsulated transmission data packet based on the receiving end;

[0011] Data verification module: decrypts the parsed encapsulated transmission data packet based on the key to obtain the decrypted data. At the same time, it verifies the digital signature information based on the key to obtain the original data.

[0012] The present invention provides a data security transmission system for a communication network. The key is an asymmetric key, including a private key and a public key.

[0013] The present invention provides a data security transmission system for a communication network, a data processing module, comprising:

[0014] Type determination unit: performs type analysis on the original data to determine the data type of the original data;

[0015] Data checking unit: determines the corresponding data checking method based on the data type of the original data and the preset type-checking method data table, and then checks the original data;

[0016] Format checking unit: performs format checking on the checked raw data according to the predetermined data type and format specification;

[0017] Data processing unit: pre-processes the original data after format check based on the data type of the original data;

[0018] Feature extraction unit: determines the feature extraction method based on the data type of the original data and the preset type-extraction method database, and performs feature extraction on the preprocessed original data;

[0019] The feature code generating unit determines the corresponding feature code generating algorithm based on the data type of the original data and the preset type-algorithm database, and then generates a feature code from the extracted features.

[0020] The present invention provides a data security transmission system for a communication network, a data conversion module, comprising:

[0021] A seed determination unit: obtaining a random number of a preset length based on a preset quantum random number generator, and then determining the random number of the preset length as an initial key seed;

[0022] Parameter determination unit: collects and evaluates real-time network parameters based on network monitoring tools to determine the real-time status parameters of the network;

[0023] Information combination unit: combines the initial key seed, feature code and real-time status parameters of the network based on preset combination rules to generate a comprehensive information set;

[0024] Private key acquisition unit: takes the comprehensive information set as input, substitutes it into the preset encryption algorithm for calculation, and then obtains the private key;

[0025] The key determination unit determines the corresponding public key based on the private key and a preset first encryption algorithm, and then determines the private key and the public key as a key.

[0026] The present invention provides a data security transmission system for a communication network, a data conversion module, and further includes:

[0027] Interference generation unit: generates interference data using a preset pseudo-random number generator based on the length, type and characteristics of the original data;

[0028] A first encryption unit: performs a first encryption on the original data based on a key and a preset second encryption algorithm to obtain initial ciphertext data;

[0029] The second encryption unit is configured to mix the original data with the interference data, and perform a second encryption on the mixed ciphertext data using a preset third encryption algorithm based on the public key and the feature code;

[0030] Ciphertext determination unit: determines the second encrypted ciphertext data as comprehensive ciphertext data.

[0031] The present invention provides a data security transmission system for a communication network, wherein the second encryption unit comprises:

[0032] Data conversion subunit: performs data conversion on the original data and the interference data to generate first original data and first interference data in the same data format;

[0033] A first division subunit: performing a first division on the first original data and the first interference data, respectively, to obtain a first original data group and a first interference data group;

[0034] A second division subunit: performing a second division on the first original data group and the first interference data group, thereby obtaining a first original data block and a first interference data block;

[0035] A first mixing subunit: performing a first mixing on the first original data block and the first interference data block based on a preset first mixing mode;

[0036] Component mixing subunit: performs inter-group mixing on the first mixed data based on a preset second mixing mode;

[0037] Data diffusion subunit: diffuses the mixed data between groups based on a preset method, and combines the first mixing result to obtain the mixed original data and interference data.

[0038] The present invention provides a data security transmission system for a communication network, a data integration module, comprising:

[0039] Path determination unit: performs adaptive error correction coding on the comprehensive ciphertext data, performs intelligent routing analysis on the error-correction coded data, and then determines the optimal transmission path;

[0040] Data encapsulation unit: determines the corresponding encapsulation format based on the preset path-format database, and then encapsulates the comprehensive ciphertext data into a data packet of the corresponding encapsulation format.

[0041] The present invention provides a data security transmission system for a communication network, a path determination unit, comprising

[0042] Path determination subunit: performs adaptive error correction coding on the integrated ciphertext data, performs intelligent routing analysis on the coded data, and then determines several matching paths;

[0043] Path analysis subunit: performs path analysis on all matching paths, and then determines several features and feature-related parameters of each matching path; coefficient determination subunit: determines the path coefficient of each matching path based on the features and feature-related parameters of each matching path:

[0044]

[0045] in, For the The path coefficients of the matching paths, For the The number of feature dimensions of the matching paths, For the The dynamic weight factor of the first feature under the i-th feature dimension of the matching path, For the The value of the first feature of the matching path under the i-th feature dimension, For the The first matching path The smoothing parameter of the first feature under feature dimensions, To preset adjustment parameters, For the The first matching path The dynamic adjustment factor of the second feature under the feature dimension, For the The first matching path The preset time adjustment coefficient corresponding to the second feature under the feature dimension, For the The value of the second feature of the matching path under the i-th feature dimension, For the The time characteristic adjustment factor corresponding to the second feature under the i-th feature dimension of the matching path, For the The corresponding regularization factor of the matching paths.

[0046] Compared with the prior art, the present invention has the following advantages:

[0047] By combining data feature extraction, encryption algorithms, key generation and digital signature technology, all-round encryption protection of original data is achieved, effectively preventing data leakage, tampering and forgery during transmission, ensuring the confidentiality, integrity and authenticity of data transmission, and through key verification and digital signature, ensuring that the receiving end can safely decrypt and verify data, significantly improving data security in the communication network. BRIEF DESCRIPTION OF THE DRAWINGS

[0048] In order to more clearly illustrate the technical solutions in the present invention or the prior art, a brief introduction is given below to the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0049] Figure 1 The present invention provides a structural diagram of a data security transmission system for a communication network. DETAILED DESCRIPTION

[0050] To make the objectives, technical solutions, and advantages of the present invention more clear, the technical solutions of the present invention will be clearly and completely described below in conjunction with the accompanying drawings. Obviously, the embodiments described are only some of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts shall fall within the scope of protection of the present invention.

[0051] Example 1:

[0052] The embodiment of the present invention provides a data security transmission system for a communication network, such as Figure 1 As shown, including:

[0053] Data processing module: processes the original data, extracts data feature information, and then generates feature codes;

[0054] Data conversion module: Generates keys based on several preset encryption algorithms and feature codes, and converts raw data into comprehensive ciphertext data in combination with feature codes;

[0055] Data integration module: Generates digital signature information based on the key and comprehensive ciphertext data, and integrates the ciphertext data with the digital signature information to obtain the encapsulated transmission data packet;

[0056] Data parsing module: sends the encapsulated transmission data packet to the receiving end based on the communication network, and parses the encapsulated transmission data packet based on the receiving end;

[0057] Data verification module: decrypts the parsed encapsulated transmission data packet based on the key to obtain the decrypted data. At the same time, it verifies the digital signature information based on the key to obtain the original data.

[0058] In this embodiment, feature information is representative data features extracted from the original data, used to describe or identify the main content of the data. For example, for a piece of text data, feature information can be word frequency, syntactic structure, keywords, etc.; for image data, feature information can be color distribution, texture, etc. By extracting these features, data can be effectively processed and classified;

[0059] In this embodiment, the feature code is a code generated based on feature information, which is used to identify or represent the features of the data. For example, if "keywords" are extracted from a certain text as feature information, then these keywords can be converted into a unique code (i.e., a feature code) for subsequent encryption or data conversion. For example: feature information: the word frequency of a text or the color histogram of an image, feature code: the "keyword" code generated by the hash algorithm.

[0060] In this embodiment, digital signature information is generated by encrypting data (such as ciphertext) using a private key. The purpose of the digital signature is to ensure the integrity and authenticity of the data. A digital signature proves that the data has not been tampered with during transmission and verifies that the data originated from the intended sender. For example, suppose Alice sends ciphertext data to Bob and wants Bob to confirm that the data has not been tampered with and that it is indeed hers. Alice uses her private key to generate a digital signature for the ciphertext data. After receiving the ciphertext data and the digital signature, Bob decrypts the digital signature using Alice's public key to verify the integrity and origin of the data.

[0061] In this embodiment, decrypting data refers to the process of restoring encrypted data to its original form using a key (such as a private key or public key). In data transmission, encryption protects the confidentiality of data, while decryption is the process of restoring the encrypted data at the receiving end. For example, Alice encrypts a message using an encryption algorithm and sends it to Bob. Bob decrypts the received encrypted data using the corresponding private key, restoring the original message content.

[0062] The beneficial effects of the above technical solution are: by combining data feature extraction, encryption algorithm, key generation and digital signature technology, all-round encryption protection of original data is achieved, effectively preventing data leakage, tampering and forgery during transmission, ensuring the confidentiality, integrity and authenticity of data transmission, and through key verification and digital signature, ensuring that the receiving end can safely decrypt and verify data, significantly improving data security in the communication network.

[0063] Example 2:

[0064] An embodiment of the present invention provides a data security transmission system for a communication network, wherein the key is an asymmetric key including a private key and a public key.

[0065] In this embodiment, asymmetric key encryption is an encryption method that uses a pair of different but related keys for encryption and decryption. The pair consists of a public key and a private key. In asymmetric encryption, the public key is publicly available and used to encrypt data, while the private key is kept secret by the recipient and used to decrypt the data. Encryption: Data can be encrypted using the public key. Decryption: Only the recipient with the corresponding private key can decrypt the data. For example, Alice can make her public key public, and anyone can use it to encrypt a message for her. However, only Alice's private key can decrypt these encrypted messages.

[0066] The beneficial effects of the above technical solution are: through asymmetric key encryption technology, the cooperation of private key and public key is used to ensure high security of data during transmission. The public key is used to encrypt data and the private key is used to decrypt it. Only the legitimate recipient can decrypt it, preventing the data from being stolen or tampered with by unauthorized parties. Asymmetric encryption ensures the confidentiality, integrity and non-repudiation of data, thereby improving the security of the communication network.

[0067] Example 3:

[0068] An embodiment of the present invention provides a data security transmission system for a communication network, including a data processing module, comprising:

[0069] Type determination unit: performs type analysis on the original data to determine the data type of the original data;

[0070] Data checking unit: determines the corresponding data checking method based on the data type of the original data and the preset type-checking method data table, and then checks the original data;

[0071] Format checking unit: performs format checking on the checked raw data according to the predetermined data type and format specification;

[0072] Data processing unit: pre-processes the original data after format check based on the data type of the original data;

[0073] Feature extraction unit: determines the feature extraction method based on the data type of the original data and the preset type-extraction method database, and performs feature extraction on the preprocessed original data;

[0074] The feature code generating unit determines the corresponding feature code generating algorithm based on the data type of the original data and the preset type-algorithm database, and then generates a feature code from the extracted features.

[0075] In this embodiment, the data type of raw data refers to the category or format of the data input into the system. During data processing, the data type defines the structure and content of the data. It can be numbers, text, images, audio, etc., or more specific formats such as strings, integers, floating-point numbers, dates, etc. The data type determines subsequent processing methods and steps, such as inspection, preprocessing, and format verification. For example, if the raw data is a string (e.g., "Hello, World!"), its data type is "string." If the raw data is a number (e.g., 1234), its data type is "integer." If the raw data is an image (e.g., a JPEG file), its data type is "image." If the raw data is a timestamp (e.g., 2025-01-01 12:00:00), its data type is "datetime."

[0076] In this embodiment, the data checking method refers to the specific method used to check raw data during data processing, based on the data type or preset rules. Data checking methods typically include, but are not limited to, format validation, range checking, validity checking, integrity checking, and checksum checking. Each data type has specific checking methods to ensure data validity and correctness. For example, for an "integer" data type, the checking method might include verifying whether the number is within a valid range (e.g., 0 to 1000). For a "string" data type, the checking method might include verifying whether the string length meets the expected range or whether it contains illegal characters (e.g., sensitive characters). For a "datetime" data type, the checking method might include verifying whether the date format is correct (e.g., YYYY-MM-DD) or whether the date is valid (e.g., January 32, 2025 is invalid). For an "image" data type, the checking method might include verifying whether the image file format conforms to a predetermined format (e.g., JPG or PNG) and whether the file size is within a reasonable range. Suppose you have a piece of raw data from the internet containing multiple fields, including name, age, date of birth, and profile picture.

[0077] In this embodiment, format checking utilizes different format verification mechanisms for different data types, such as text, images, audio, video, or structured data. For text data, its encoding is checked to ensure compliance with standards (e.g., UTF-8 or ASCII) and to ensure the absence of illegal characters or encoding errors. A character set verification algorithm can be used to check the range and validity of character encodings. For image data, file header information is checked to ensure compliance with the standards of common image formats (e.g., JPEG, PNG, GIF, etc.). For JPEG files, the correctness of the SOI (Start of Image) and EOI (End of Image) markers is verified, as well as the consistency of segment identifiers and segment lengths. For audio and video data, the encoding format of the file header (e.g., MP3, AAC, H.264, etc.) is checked to ensure compliance with the corresponding standards, and the correctness of the frame header information and synchronization word is checked. For structured data (e.g., XML, JSON, CSV, etc.), parsing and verification are performed using a corresponding parser (e.g., XML parser, JSON parser) to ensure structural integrity and that element nesting and attributes comply with specifications.

[0078] In this embodiment, preprocessing of the raw data after formatting is performed on text data. Lexical and syntactic analysis is performed, using natural language processing (NLP) tools to break the text into words, phrases, and sentences, and part-of-speech tagging and grammatical structure analysis. Stop words (such as common prepositions and conjunctions) are eliminated to reduce data redundancy. Image data is preprocessed, including image enhancement (such as contrast adjustment, denoising, and sharpening), and image conversion to a unified color space (such as from RGB to YUV) to facilitate subsequent feature extraction and processing. Audio data is preprocessed, including denoising and normalization, adjusting the amplitude of the audio signal to an appropriate range, and removing DC offset. Video data is split into audio and video streams, and the aforementioned audio and image preprocessing operations are performed separately, while ensuring time synchronization between the audio and video. Structured data is cleaned to remove duplicate records, correct data inconsistencies, fill in missing values, and standardize the data (for example, standardizing the date format to YYYY-MM-DD).

[0079] The beneficial effects of the above technical solution are: by performing multiple steps such as type analysis, inspection, format verification, preprocessing, and feature extraction on the original data, the accuracy and security of the data during transmission are effectively guaranteed. Through the preset type-inspection method, type-extraction method and type-algorithm database, the system can flexibly respond to different data types, ensure the standardization of data format and accurate feature extraction, thereby generating reliable feature codes and providing effective protection for data security.

[0080] Example 4:

[0081] An embodiment of the present invention provides a data security transmission system for a communication network, including a data conversion module, comprising:

[0082] A seed determination unit: obtaining a random number of a preset length based on a preset quantum random number generator, and then determining the random number of the preset length as an initial key seed;

[0083] Parameter determination unit: collects and evaluates real-time network parameters based on network monitoring tools to determine the real-time status parameters of the network;

[0084] Information combination unit: combines the initial key seed, feature code and real-time status parameters of the network based on preset combination rules to generate a comprehensive information set;

[0085] Private key acquisition unit: takes the comprehensive information set as input, substitutes it into the preset encryption algorithm for calculation, and then obtains the private key;

[0086] The key determination unit determines the corresponding public key based on the private key and a preset first encryption algorithm, and then determines the private key and the public key as a key.

[0087] In this embodiment, the preset quantum random number generator is a device or algorithm that uses quantum mechanics principles (such as quantum superposition and quantum uncertainty) to generate random numbers. Unlike traditional pseudo-random number generators, quantum random number generators generate completely random values ​​by measuring the unpredictability of quantum states, which has higher security and unpredictability. For example, a quantum random number generator uses changes in the polarization state of photons to generate random numbers. Due to the unpredictability of quantum systems, these random numbers have higher randomness and security.

[0088] In this embodiment, the preset length refers to the number of bits or length of the random number predetermined during the system design phase. This length determines the size or complexity of the generated random number, which generally affects the strength and security of the encryption algorithm. For example, if the preset length is 128 bits, the generated random number will be 128 bits long, for example, 10010101010111010100110101010111. The longer the preset length, the higher the complexity of the random number and the stronger the security.

[0089] In this embodiment, the initial key seed refers to the initial value used to generate a key, typically a random number. It serves as the starting point for the key generation algorithm. Through specific algorithms and processing, it can further generate the private key, public key, and other keys required for encryption. For example, if a preset quantum random number generator generates a 128-bit random number "101010101010", this number can be used as the initial key seed to further generate encryption keys.

[0090] In this embodiment, network monitoring tools are used to collect and monitor network status, traffic, performance, and potential security threats in real time. These tools can obtain various network parameters, such as latency, bandwidth, and packet loss rate, to assess the current state of the network. For example, tools such as Wireshark, PingPlotter, and NetFlow analysis tools can monitor network traffic, response time, and other network health indicators to help assess network performance and stability.

[0091] In this embodiment, real-time status parameters refer to network status information collected by network monitoring tools at a specific moment. These parameters reflect the current health of the network, such as network latency, bandwidth utilization, and packet loss rate. For example, real-time status parameters may include: current network latency is 50ms, bandwidth utilization is 80%, and current packet loss rate is 0.2%.

[0092] In this embodiment, the preset combination rules refer to the preset rules for combining different information items (such as the initial key seed, signature, and real-time network status parameters) during the key generation process. These rules determine how the various information items are merged to ensure that the resulting composite information has sufficient complexity and security. For example, the preset combination rules may specify that the initial key seed (e.g., a 128-bit random number), signature (e.g., an image fingerprint), and network status parameters (e.g., latency) are weighted and combined according to a certain encryption algorithm to generate a composite information.

[0093] In this embodiment, the preset first encryption algorithm refers to an encryption algorithm defined in advance during the system design phase, which is used to generate a public key and a private key pair. For example, the RSA encryption algorithm is used as the preset first encryption algorithm.

[0094] The beneficial effects of this technical solution include: generating an initial key seed using quantum random numbers, collecting and evaluating real-time network parameters, and combining them with pre-set combination rules to generate comprehensive information, which is then used to generate private and public keys. By combining quantum random numbers with network status, this system ensures high key security and dynamic adaptability, effectively preventing external attacks and data leaks, and improving data security in communication networks.

[0095] Example 5:

[0096] An embodiment of the present invention provides a data security transmission system for a communication network, including a data conversion module, further comprising:

[0097] Interference generation unit: generates interference data using a preset pseudo-random number generator based on the length, type and characteristics of the original data;

[0098] A first encryption unit: performs a first encryption on the original data based on a key and a preset second encryption algorithm to obtain initial ciphertext data;

[0099] The second encryption unit is configured to mix the original data with the interference data, and perform a second encryption on the mixed ciphertext data using a preset third encryption algorithm based on the public key and the feature code;

[0100] Ciphertext determination unit: determines the second encrypted ciphertext data as comprehensive ciphertext data.

[0101] In this embodiment, the preset pseudo-random number generator refers to an algorithm or tool that is set during the system design phase and is used to generate seemingly random but predictable values. Pseudo-random numbers are generated based on an initial seed value, ensuring repeatable results while appearing random to the user. For example, a commonly used pseudo-random number generation algorithm is the Mersenne Twister. Assuming that the system has been configured to use this algorithm as a pseudo-random number generator during the initial phase, the system will use it to generate a set of pseudo-random numbers each time interference data is required.

[0102] In this embodiment, the pre-set second encryption algorithm refers to an encryption method determined during system design and used to initially encrypt data. This algorithm is typically different from the "first encryption algorithm" and is used to add an additional layer of security during data transmission. For example, a common second encryption algorithm might be AES (Advanced Encryption Standard). For example, the system is configured to first encrypt data using AES during transmission, preventing anyone from directly reading the data even if they intercept it.

[0103] In this embodiment, the first encryption step refers to the encryption of the original data using the "preset second encryption algorithm." This step aims to provide preliminary protection for the original data, making it difficult to decrypt. If the original data is a text file, the first encryption step may use the AES algorithm to encrypt the file's contents, thereby converting it into encrypted data and protecting the data's security.

[0104] In this embodiment, the preset third encryption algorithm refers to another encryption method selected during system design. It is typically used to further encrypt data after the first encryption method to enhance data security. This algorithm is typically more complex or has more protection features than the first two encryption methods. For example, the third encryption algorithm may be RSA (public key encryption algorithm). During the second encryption stage, the system may select RSA to further encrypt the mixed data to ensure data security during transmission.

[0105] In this embodiment, the second encryption step involves mixing the original data with the interference data and then performing a further encryption operation using a "preset third encryption algorithm." This process further complicates the encryption process, making it difficult for an attacker to decrypt the encrypted data, even if they obtain it. For example, suppose the original data is a user password, and some pseudo-random interference data is generated. The second encryption step combines these two pieces of data and then encrypts them using the RSA algorithm. The resulting ciphertext is even more difficult to decrypt than the initial encryption result.

[0106] The beneficial effects of this technical solution include significantly enhanced data confidentiality and security through multiple encryption and interference data generation. First, pseudo-random number generation increases data complexity. Second, a two-layer encryption method (primary and secondary) further protects the original data, ensuring that even if intercepted, it remains difficult to decipher. Ultimately, the combined ciphertext data provides even stronger protection, ensuring secure data transmission across communication networks.

[0107] Example 6:

[0108] An embodiment of the present invention provides a data security transmission system for a communication network, wherein the second encryption unit includes:

[0109] Data conversion subunit: performs data conversion on the original data and the interference data to generate first original data and first interference data in the same data format;

[0110] A first division subunit: performing a first division on the first original data and the first interference data, respectively, to obtain a first original data group and a first interference data group;

[0111] A second division subunit: performing a second division on the first original data group and the first interference data group, thereby obtaining a first original data block and a first interference data block;

[0112] A first mixing subunit: performing a first mixing on the first original data block and the first interference data block based on a preset first mixing mode;

[0113] Component mixing subunit: performs inter-group mixing on the first mixed data based on a preset second mixing mode;

[0114] Data diffusion subunit: diffuses the mixed data between groups based on a preset method, and combines the first mixing result to obtain the mixed original data and interference data.

[0115] In this embodiment, converting the original data and the interference data is to convert the original data and the interference data into a unified data representation form for subsequent operations. If the original data is text data, it is converted into a binary code or an ASCII code sequence of characters. For example, for the text "Hello World", each character can be converted into its corresponding ASCII code, resulting in [72, 101, 108, 108, 111, 32, 87, 105, 114, 100]. For image data, its pixel values are converted into binary or decimal representations. For a grayscale image, each pixel point is usually represented by an 8-bit or 16-bit value, which can be expanded into a one-dimensional array. For example, a 2x2 grayscale image with pixel values [[100, 120], [150, 180]] can be converted into [100, 120, 150, 180]. For structured data, it is split into a sequence of data elements in a certain order (such as row-first or column-first). For example, for a simple table data [(1, 2), (3, 4)], it can be converted into [1, 2, 3, 4]. Data length alignment: Ensure that the lengths of the original data and the interference data are the same. If the lengths of the two are different, they can be made equal by adding zero-padding or truncation. For example, if the length of the original data is n and the length of the interference data is m, and n < m, m - n zero elements can be added at the end of the original data; if n > m, the end part of the original data can be truncated to make its length m.

[0116] In this embodiment, the second partitioning of the first original data group and the first interference data group is to divide the original data and the interference data into several groups or blocks. The size of the grouping can be determined according to the data length and security requirements. Generally, the data can be divided into multiple equally long subsequences. For example, for data with a length of L, it can be divided into k groups, and the length of each group is L / k (assuming L is divisible by k). For the text data [72, 101, 108, 108, 111, 32, 87, 105, 114, 100], if k = 3, it can be divided into [[72, 101, 108], [108, 111, 32], [87, 105, 114],

[100] ] (the length of the last group may be insufficient). For each group, it can be further divided into blocks, and the block size can be determined according to the data characteristics and algorithm complexity requirements. For example, for each of the above groups of data, it can be divided into smaller blocks, such as [[

[72] ,

[101] ,

[108] ], [

[108] ,

[111] ,

[32] ], [

[87] ,

[105] ,

[114] ], [

[100] ]].

[0117] In this embodiment, the first mixing includes: nonlinear function mixing: the original data block and the interference data block are mixed using a nonlinear function. For example, for each pair of original data block x and interference data block y, a logical function such as z = x * sin(y) + y * cos(x) or z = (x^2 + y^2) % 256 (for byte data) can be used, and the result is stored in a new mixed data block. Trigonometric functions and modulo operations are used here to give the mixing result nonlinear characteristics, making it difficult to restore through simple inverse operations. For binary data, Boolean functions such as z = (x AND y) XOR (NOT x OR y) can be used to apply logical operations to binary bits, destroying the logical structure of the original data. Polynomial mixing: for each group, the original data block and the interference data block are treated as coefficients of a polynomial, and the polynomials P(x) and Q(x) are constructed. For example, for the block [a, b, c], construct the polynomial P(x) = a * x² + b * x + c. For the interference data block [d, e, f], construct Q(x) = d * x² + e * x + f. Calculate the sum or product of the polynomials, such as R(x) = P(x) * Q(x) or R(x) = P(x) + Q(x), and use the coefficients of the result as mixed data. For R(x) = P(x) * Q(x), the result will contain a complex combination of the original data and the interference data, and the length of the result may increase, requiring further processing. Modulo operations can be performed on the polynomial result, such as R(x) = (P(x) * Q(x)) % M, where M is a large prime number or a specific modulus, to limit the length and range of the result. Circular shift and XOR operations: Circular shift operations are performed on the original data block and the interference data block. For a data block [a, b, c], circularly shift it left by one bit to obtain [b, c, a], and circularly shift it right by two bits to obtain [c, a, b]. Perform an XOR operation on the shifted original data block and the interference data block to obtain a mixed data block. For example, for the shifted original data block [b, c, a] and the interference data block [d, e, f], the mixed data block is [(b XOR d), (c XOR e), (a XOR f)].

[0118] In this embodiment, the diffusion of the inter-group mixed data based on a preset method is to perform a diffusion operation on the result of the inter-group mixing, and diffuse the local changes in the data to the entire data set. The diffusion can be performed using a Feistel network structure. The data is divided into two parts, L and R, and after multiple rounds of iterations, in each round, R is used as the input to calculate the result of the function F, and the values ​​of L and R are updated, for example, L_new = R, R_new = L XOR F(R). The function F here can be the above-mentioned nonlinear function, polynomial function, or other complex function, and the local changes in the data are diffused to the entire data set through multiple rounds of iteration.

[0119] The above technical solution has the beneficial effect of enhancing data security through multi-stage data processing, including data conversion, partitioning, mixing, and diffusion. By effectively partitioning and mixing original data and interference data, combined with pre-defined mixing and diffusion methods, it can effectively improve data complexity and protection capabilities, preventing data from being cracked or tampered with, thereby achieving more secure data transmission protection.

[0120] Example 7:

[0121] An embodiment of the present invention provides a data security transmission system for a communication network, including a data integration module, comprising:

[0122] Path determination unit: performs adaptive error correction coding on the comprehensive ciphertext data, performs intelligent routing analysis on the error-correction coded data, and then determines the optimal transmission path;

[0123] Data encapsulation unit: determines the corresponding encapsulation format based on the preset path-format database, and then encapsulates the comprehensive ciphertext data into a data packet of the corresponding encapsulation format.

[0124] In this embodiment, adaptive error correction coding (ECC) is a technology that dynamically adjusts the encoding scheme based on changes in the transmission environment. Its purpose is to add redundant information during data transmission, enabling the receiver to automatically detect and correct errors when they occur. Unlike traditional fixed coding, adaptive ECC flexibly adjusts the encoding strategy based on actual network conditions (such as signal quality and transmission rate), thereby improving data transmission reliability and efficiency. For example, if signal quality fluctuates significantly in a communication network, data transmission is prone to errors. When adaptive ECC is used, if signal degradation is detected, the encoding scheme automatically adjusts, allowing the transmitted data to include more redundant information, thereby enhancing error correction capabilities and ensuring that the data can be correctly decoded at the receiving end.

[0125] In this embodiment, the encapsulation format refers to the way data is organized and packaged according to specific rules and structures. Encapsulation typically involves packaging original or encrypted data with necessary control information (such as a packet header and destination address) into a data packet for network transmission. The choice of encapsulation format is typically determined based on different network protocols and transmission requirements. For example, in network communications, IP packets are a common encapsulation format. When a sender prepares to send data, it selects an appropriate encapsulation format based on the target network type (such as IPv4, IPv6, etc.). In addition to the original data, the encapsulation format also includes a packet header (such as the source IP address, destination IP address, checksum, etc.) to ensure that the data is transmitted accurately and efficiently to the recipient.

[0126] The beneficial effects of the above technical solution are: through adaptive error correction coding and intelligent routing analysis technology, the transmission path can be dynamically adjusted according to the network environment to ensure the reliability and efficiency of data transmission. At the same time, the data encapsulation unit selects the most appropriate encapsulation format based on the path-format database, optimizes the data packet structure, and further improves the security and compatibility of data transmission, thereby achieving more efficient and secure data transmission.

[0127] Example 8:

[0128] An embodiment of the present invention provides a data security transmission system for a communication network, including a path determination unit, comprising:

[0129] Path determination subunit: performs adaptive error correction coding on the integrated ciphertext data, performs intelligent routing analysis on the coded data, and then determines several matching paths;

[0130] Path analysis subunit: performs path analysis on all matching paths, and then determines several features and feature-related parameters of each matching path; coefficient determination subunit: determines the path coefficient of each matching path based on the features and feature-related parameters of each matching path:

[0131]

[0132] in, For the The path coefficients of the matching paths, For the The number of feature dimensions of the matching paths, For the The dynamic weight factor of the first feature under the i-th feature dimension of the matching path, For the The value of the first feature of the matching path under the i-th feature dimension, For the The first matching path The smoothing parameter of the first feature under feature dimensions, To preset adjustment parameters, For the The first matching path The dynamic adjustment factor of the second feature under the feature dimension, For the The first matching path The preset time adjustment coefficient corresponding to the second feature under the feature dimension, For the The value of the second feature of the matching path under the i-th feature dimension, For the The time characteristic adjustment factor corresponding to the second feature under the i-th feature dimension of the matching path, For the The corresponding regularization factor of the matching paths.

[0133] In this embodiment, the first characteristic refers to a specific metric used to describe the performance of a specific path or data transmission process. It typically reflects the basic transmission capabilities of the path, such as factors such as bandwidth and latency. Assume that the first characteristic of a communication path is bandwidth. Bandwidth is a very important metric in data transmission, determining the amount of data transmitted per unit time. A larger bandwidth means it can carry more data traffic, thereby improving communication efficiency.

[0134] In this embodiment, the second characteristic refers to another metric used to further describe path performance in addition to the first characteristic. It is typically used to supplement or analyze in conjunction with the first characteristic to comprehensively assess path quality or performance. Examples include latency and response time. For example, suppose the second characteristic of a communication path is latency. Latency refers to the time it takes for data to travel from the sender to the receiver, typically measured in milliseconds (ms). Lower latency means data reaches the receiver faster, which is particularly important for real-time applications such as video calls and online gaming.

[0135] The beneficial effects of the above technical solution include: through adaptive error correction coding and intelligent routing analysis, multiple matching paths can be dynamically selected based on network conditions to optimize data transmission routes. The path analysis and path coefficient determination subunits combine characteristics and parameters to accurately evaluate the performance of each path. Based on dynamic weight factors, smoothing parameters, and other factors, path selection is optimized to improve transmission efficiency and reliability. Through multi-dimensional adjustments, the security, stability, and timeliness of data transmission are ensured.

[0136] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the various embodiments of the present invention.

Claims

1. A data security transmission system for a communication network, characterized in that: include: Data processing module: processes the original data, extracts data feature information, and then generates feature codes; Data conversion module: Generates keys based on several preset encryption algorithms and feature codes, and converts raw data into comprehensive ciphertext data in combination with feature codes; Data integration module: Generates digital signature information based on the key and comprehensive ciphertext data, and integrates the comprehensive ciphertext data with the digital signature information to obtain the encapsulated transmission data packet; Data parsing module: sends the encapsulated transmission data packet to the receiving end based on the communication network, and parses the encapsulated transmission data packet based on the receiving end; Data verification module: decrypts the parsed encapsulated transmission data packet based on the key to obtain the decrypted data. At the same time, it verifies the digital signature information based on the key to obtain the original data. The data integration module includes: Path determination unit: performs adaptive error correction coding on the comprehensive ciphertext data, performs intelligent routing analysis on the error-correction coded data, and then determines the optimal transmission path; Data encapsulation unit: determines the corresponding encapsulation format based on a preset path-format database, and then encapsulates the comprehensive ciphertext data into a data packet of the corresponding encapsulation format; The path determination unit includes: Path determination subunit: performs adaptive error correction coding on the integrated ciphertext data, performs intelligent routing analysis on the coded data, and then determines several matching paths; Path analysis subunit: performs path analysis on all matching paths, and then determines several features and feature-related parameters of each matching path; coefficient determination subunit: determines the path coefficient of each matching path based on the features and feature-related parameters of each matching path: in, For the The path coefficients of the matching paths, For the The number of feature dimensions of matching paths, For the The dynamic weight factor of the first feature under the i-th feature dimension of the matching path, For the The value of the first feature of the matching path under the i-th feature dimension, For the The first matching path The smoothing parameter of the first feature under feature dimensions, To preset adjustment parameters, For the The first matching path The dynamic adjustment factor of the second feature under the feature dimension, For the The first matching path The preset time adjustment coefficient corresponding to the second feature under the feature dimension, For the The value of the second feature of the matching path under the i-th feature dimension, For the The time characteristic adjustment factor corresponding to the second feature under the i-th feature dimension of the matching path, For the The corresponding regularization factor of the matching paths.

2. A data security transmission system for a communication network according to claim 1, characterized in that: The key is an asymmetric key, including a private key and a public key.

3. A data security transmission system for a communication network according to claim 1, characterized in that: Data processing module, including: Type determination unit: performs type analysis on the original data to determine the data type of the original data; Data checking unit: determines the corresponding data checking method based on the data type of the original data and the preset type-checking method data table, and then checks the original data; Format checking unit: performs format checking on the checked raw data according to the predetermined data type and format specification; Data processing unit: pre-processes the original data after format check based on the data type of the original data; Feature extraction unit: determines the feature extraction method based on the data type of the original data and the preset type-extraction method database, and performs feature extraction on the preprocessed original data; The feature code generating unit determines the corresponding feature code generating algorithm based on the data type of the original data and the preset type-algorithm database, and then generates a feature code from the extracted features.

4. A data security transmission system for a communication network according to claim 2, characterized in that: Data conversion module, including: A seed determination unit: obtaining a random number of a preset length based on a preset quantum random number generator, and then determining the random number of the preset length as an initial key seed; Parameter determination unit: collects and evaluates real-time network parameters based on network monitoring tools to determine the real-time status parameters of the network; Information combination unit: combines the initial key seed, feature code and real-time status parameters of the network based on preset combination rules to generate a comprehensive information set; Private key acquisition unit: takes the comprehensive information set as input, substitutes it into the preset encryption algorithm for calculation, and then obtains the private key; The key determination unit determines the corresponding public key based on the private key and a preset first encryption algorithm, and then determines the private key and the public key as a key.

5. A data security transmission system for a communication network according to claim 4, characterized in that: The data conversion module also includes: Interference generation unit: generates interference data using a preset pseudo-random number generator based on the length, type and characteristics of the original data; A first encryption unit: performs a first encryption on the original data based on a key and a preset second encryption algorithm to obtain initial ciphertext data; The second encryption unit is configured to mix the original data with the interference data, and perform a second encryption on the mixed ciphertext data using a preset third encryption algorithm based on the public key and the feature code; Ciphertext determination unit: determines the second encrypted ciphertext data as comprehensive ciphertext data.

6. A data security transmission system for a communication network according to claim 5, characterized in that: The second encryption unit includes: Data conversion subunit: performs data conversion on the original data and the interference data to generate first original data and first interference data in the same data format; A first division subunit: performing a first division on the first original data and the first interference data, respectively, to obtain a first original data group and a first interference data group; A second division subunit: performing a second division on the first original data group and the first interference data group, thereby obtaining a first original data block and a first interference data block; A first mixing subunit: performing a first mixing on the first original data block and the first interference data block based on a preset first mixing mode; Component mixing subunit: performs inter-group mixing on the first mixed data based on a preset second mixing mode; Data diffusion subunit: diffuses the mixed data between groups based on a preset method, and combines the first mixing result to obtain the mixed original data and interference data.

Images