A method for secure data transmission in port terminal supply chain

Abstract

The present invention relates to the field of data transmission technology, specifically a method for secure data transmission of a port terminal supply chain, comprising the following steps: based on the demand information of the port terminal supply chain, subdividing the data types, including cargo tracking data and ship scheduling information, and generating a data specification catalog by classifying and identifying the specific formats and processing rules of each type of data. In the present invention, data packets are encrypted by software-defined networking and asymmetric encryption technology, which significantly enhances the security of data transmission, while reducing the risk of data tampering during transmission, and taking additional symmetric encryption measures for sensitive information fields, further strengthening the protection of important data, and performing data integrity verification by using a support vector machine combined with a hash algorithm to ensure data integrity, improve the accuracy and reliability of the data verification process, enhance the security and efficiency of data transmission, and reduce the operational risks caused by data loss or damage.

Description

Technical Field

[0001] The present invention relates to the technical field of data transmission, and in particular to a method for securely transmitting data in a port terminal supply chain. Background Art

[0002] The field of data transmission technology aims to develop and implement secure and efficient technical solutions to transmit data between different devices, systems and networks, ensure the security of data transmission, prevent unauthorized access, modification or leakage of data during transmission, improve transmission efficiency, reduce delays and increase data processing speed by optimizing network protocols and connection strategies, ensure the integrity of data during transmission, and prevent data loss or damage.

[0003] The purpose of the port terminal supply chain data security transmission method is to ensure the security of data during transmission in port supply chain management, prevent data from unauthorized access and tampering, protect data from malware and network attacks, improve the efficiency and reliability of port operations, reduce operational risks, and enhance the transparency and collaborative efficiency of the supply chain.

[0004] Existing technologies have significant deficiencies in data transmission security and efficiency. The lack of effective data classification and standardized processing leads to inefficient data processing. Conventional data protection methods cannot fully cope with complex network attacks, making data vulnerable to unauthorized access and tampering during transmission. In addition, there is a lack of efficient data integrity verification mechanisms, making it difficult to detect and correct data modifications during transmission in a timely manner, increasing the security risks of port supply chain management. Summary of the Invention

[0005] The purpose of the present invention is to solve the shortcomings of the prior art and to propose a method for secure transmission of port terminal supply chain data.

[0006] To achieve the above objectives, the present invention adopts the following technical solution: a method for securely transmitting data in a port terminal supply chain, comprising the following steps:

[0007] Step 1: Based on the demand information of the port terminal supply chain, the data types are subdivided, including cargo tracking data and vessel scheduling information. The specific formats and processing rules of each type of data are identified by classification, and a data specification catalog is generated;

[0008] Step 2: Based on the data specification directory, standardize the various types of data received, and encapsulate and integrate the data content in a unified format, packaging them into units that meet the standards to obtain standardized data packets;

[0009] Step 3: Encrypt the standardized data packet using asymmetric encryption technology, generate a key pair, and digitally sign the data packet using software-defined networking to verify the source and integrity of the data and generate an encrypted signature data packet;

[0010] Step 4: Based on the encrypted signature data packet, additional encryption is performed on the fields containing sensitive information, and the payment information and user identity identifier are encrypted using a symmetric encryption algorithm to enhance the protection level of sensitive data and create a sensitive data protection package;

[0011] Step 5: Use a hash algorithm combined with a support vector machine to hash the encrypted signature data packet, calculate the hash value and append it to the end of the data packet to generate an integrity verification data packet;

[0012] Step 6: Send an integrity verification data packet over the network, recalculate the hash value of the data packet and compare it with the original hash value to confirm that the data has not been tampered with, decrypt the data packet content and perform a security check to obtain a data reception report;

[0013] Step 7: Based on the results of the data reception report, evaluate the security of the data, confirm that the data is accepted, enter all verified data, complete the data integration and storage, and form an access status confirmation record.

[0014] As a further solution of the present invention, the specific steps of generating the data specification directory are:

[0015] Based on the port terminal supply chain demand information, collect demand information on cargo tracking and vessel scheduling, record the types of data required and the frequency of use in detail, analyze the flow path of data in the supply chain, and generate demand analysis reports;

[0016] Based on the demand analysis report, design data formats and processing rules, set JSON format for cargo tracking data, set XML format for ship scheduling information, and define corresponding data processing processes to obtain data format and process guidelines;

[0017] Through data format and process guidelines, create a comprehensive document containing all data classification, format and processing rules to ensure consistency and standardization of data processing and generate a data specification catalog;

[0018] The data specification directory includes data classification identification, data format definition and data processing rules.

[0019] As a further solution of the present invention, the specific steps of generating the standardized data packet are:

[0020] Based on the data specification directory, format the data, perform code conversion on the received text, perform unified format processing on the image, compress the video data, and generate a formatted data set;

[0021] Adopt formatted data sets to integrate all data types, use a unified data encapsulation format to integrate different data together, and conduct unified management and transmission to obtain a data integration package;

[0022] Through data integration packages, data is packaged using a unified data transmission protocol to generate standardized data packets;

[0023] The standardized data packet includes encapsulated text data, image files, video streams and other multimedia elements.

[0024] As a further solution of the present invention, the specific steps of generating the encrypted signature data packet are:

[0025] Initialize the key generation process based on the standardized data packet, configure independent public and private keys for each data type, and generate a key configuration record;

[0026] Encrypting each item of data in the standardized data packet based on the public key in the key configuration record to generate an encrypted data set;

[0027] Based on the encrypted data set, using a software-defined network, digitally signing each data packet with a corresponding private key to generate an encrypted signature data packet;

[0028] The encrypted signature data includes a public key for decryption, encrypted data content, and a digital signature for verifying data integrity.

[0029] As a further solution of the present invention, the initialization key generation process specifies a key length of 2048 bits to ensure strong encryption. For different data types, keys of different strengths are configured according to the sensitivity level of the data. When key generation fails, the error status will be recorded and a security alarm will be triggered. At the same time, the key generation process will be retried up to three times. If failure continues, the service will be suspended and the administrator will be notified to intervene.

[0030] As a further solution of the present invention, the specific steps of generating the sensitive data protection package are:

[0031] Based on the encrypted signature data packet, identify and mark data fields containing sensitive information, such as payment information and personal identity information, in preparation for subsequent encryption, and generate a sensitive information marking list;

[0032] Using a unified symmetric encryption key, encrypt the sensitive data field according to the sensitive information tag list to generate an encrypted sensitive information set;

[0033] Integrate the encrypted sensitive information set with the original encrypted signature data packet to ensure that all sensitive information is protected by an additional layer of protection, maintain the security and privacy of data transmission, and generate a sensitive data protection package;

[0034] The sensitive data protection includes double-encrypted payment information, encrypted user identity data and other sensitive information fields.

[0035] As a further solution of the present invention, the specific steps of generating the integrity verification data packet are:

[0036] Performing hash generation based on the encrypted signature data packet and, in combination with a support vector machine, performing independent hash value calculations on the content of each data packet to obtain an independent hash value set;

[0037] Based on the independent hash value set, the hash value of each data packet is bound to its data content and appended to the end of each data packet to generate a bound hash data packet;

[0038] Integrate the binding hash data packets into a unified data set, including all hashed data packets, to generate an integrity verification data packet;

[0039] The integrity verification data packet includes a hash value of the data packet, original data content, and a hash algorithm type used for verification.

[0040] As a further solution of the present invention, the support vector machine is according to the formula:

[0041] ,

[0042] in: is the decision function, is the input data point, is the support vector, For the The class labels of the data points, For the The Lagrange multiplier of the data points, is the adjustment coefficient of the kernel function, is the kernel function, is the linear adjustment coefficient of the input data point, is the bias term.

[0043] As a further solution of the present invention, the specific steps of generating the data reception report are:

[0044] Based on the integrity verification data packet, a secure network channel is configured, the data packet is serialized and sent to a predetermined network address, and the sending status of each packet is monitored during operation to ensure data transmission efficiency and security, and obtain data transmission records;

[0045] Based on the data transmission record, a hash value comparison program is started to recalculate the hash value of each received data packet and compare it with the hash value bound before transmission to verify the data integrity and non-tampering of each packet, and generate a hash verification record;

[0046] Based on the hash verification record, if the hash values ​​of all data packets match, the data content is decrypted and a security check is performed, the security status of the data is reviewed and recorded, and finally all the detailed information of reception and verification is collated to generate a data reception report;

[0047] The data reception report includes the hash value verification result, the decryption status of the data packet and the security check details after reception.

[0048] As a further solution of the present invention, the specific steps of generating the access status confirmation record are:

[0049] Based on the data reception report, analyze the verification results in the reception report one by one, extract the data packet records marked as passed, confirm the status of the data packet by checking the accompanying security indicators, and generate a data security assessment checklist;

[0050] Based on the data security assessment list, perform database entry operations on each data packet marked as passed, implement data storage by allocating storage paths, adding classification tags, and creating indexes, and generate data entry logs;

[0051] Based on the data entry log, the entered data records are integrated, the contents of multiple data sources are uniformly archived, the database status is updated and backed up, and an access status confirmation record is generated;

[0052] The access status confirmation record includes the final confirmation of data access, the system entry result and the storage status of the data.

[0053] Compared with the prior art, the advantages and positive effects of the present invention are:

[0054] 1. This invention significantly enhances data transmission security by encrypting data packets through software-defined networking and asymmetric encryption technology, while reducing the risk of data tampering during transmission. Additional symmetric encryption measures are implemented for sensitive information fields, further strengthening the protection of important data.

[0055] 2. In this invention, data integrity verification is performed using a support vector machine combined with a hash algorithm, ensuring data integrity, improving the accuracy and reliability of the data verification process, enhancing the security and efficiency of data transmission, and reducing operational risks caused by data loss or corruption. BRIEF DESCRIPTION OF THE DRAWINGS

[0056] Figure 1 It is a schematic diagram of the main steps of the present invention. DETAILED DESCRIPTION

[0057] In order to make the purpose, technical solutions and advantages of the present invention more clearly understood, the present invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

[0058] See also Figure 1 The present invention provides a technical solution: a method for securely transmitting data from a port terminal supply chain, comprising the following steps:

[0059] Step 1: Based on the demand information of the port terminal supply chain, the data types are subdivided, including cargo tracking data and vessel scheduling information. The specific formats and processing rules of each type of data are identified by classification, and a data specification catalog is generated;

[0060] Step 2: Based on the data specification catalog, standardize the various types of data received, encapsulate the data content in a unified format, integrate it, and package it into standard units to obtain standardized data packets;

[0061] Step 3: Use asymmetric encryption technology to encrypt the standardized data packet, generate a key pair, and use software-defined networking to digitally sign the data packet to verify the source and integrity of the data and generate an encrypted signature data packet;

[0062] Step 4: Based on the encrypted signature data packet, additional encryption is performed on the fields containing sensitive information. A symmetric encryption algorithm is used to encrypt the payment information and user identity, thereby enhancing the protection level of sensitive data and creating a sensitive data protection package.

[0063] Step 5: Use a hash algorithm combined with a support vector machine to hash the encrypted signature data packet, calculate the hash value and append it to the end of the data packet to generate an integrity verification data packet;

[0064] Step 6: Send an integrity verification data packet over the network, recalculate the hash value of the data packet and compare it with the original hash value to confirm that the data has not been tampered with, decrypt the data packet content and perform a security check to obtain a data reception report;

[0065] Step 7: Based on the results of the data reception report, evaluate the security of the data. After confirming that the data has been accepted, enter all verified data, complete the integration and storage of the data, and form an access status confirmation record.

[0066] The specific steps to generate a data specification directory are:

[0067] Based on the port terminal supply chain demand information, collect demand information on cargo tracking and vessel scheduling, record the types of data required and the frequency of use in detail, analyze the flow path of data in the supply chain, and generate demand analysis reports;

[0068] Based on the demand analysis report, we designed data formats and processing rules, set up JSON format for cargo tracking data, set up XML format for ship scheduling information, and defined the corresponding data processing process to obtain data format and process guidelines;

[0069] Through data format and process guidelines, create a comprehensive document containing all data classification, format and processing rules to ensure consistency and standardization of data processing and generate a data specification catalog;

[0070] Based on the demand information of the port terminal supply chain, we collect demand information on cargo tracking and vessel scheduling, record the types of data required and the frequency of use in detail, and use data flow analysis tools with parameters including data input points and output points. The data input point receives cargo tracking and vessel scheduling information, and the output point aggregates the data to the center. We map the data flow path in the supply chain and generate a demand analysis report.

[0071] Based on the demand analysis report, design data formats and processing rules. Set cargo tracking data in JSON format. Operations include defining data structures, involving cargo ID, location, and timestamp, and using key-value pairs for storage. Vessel scheduling information is set in XML format. Operations include defining data nodes, involving vessel ID, estimated arrival time, and cargo type, using elements and attributes to represent data. At the same time, specify the data processing process, including data validation scripts. Parameters involve data integrity rules and format consistency rules. Data integrity rules ensure that all fields are filled, and format consistency rules ensure that data complies with JSON or XML specifications. Obtain data format and process guidelines.

[0072] Create a comprehensive document that includes all data classification, format, and processing rules through the data format and process guidelines. Use a document generation tool with parameters including document templates and content indexes. The document templates are based on the data format and process guidelines. The content index is used to quickly access various parts of the content, ensure consistency and standardization of data processing, and generate a data specification catalog.

[0073] Among them, the data specification catalog includes data classification identification, data format definition and data processing rules.

[0074] The specific steps to generate a standardized data package are:

[0075] Based on the data specification directory, data is formatted, received text is converted into code, images are formatted in a unified format, video data is compressed, and a formatted data set is generated;

[0076] Adopt formatted data sets to integrate all data types, use a unified data encapsulation format to integrate different data together, and conduct unified management and transmission to obtain a data integration package;

[0077] Through data integration packages, data is packaged using a unified data transmission protocol to generate standardized data packets;

[0078] Based on the data specification directory, data is formatted and received text is converted into UTF-8 encoding. This includes converting text in ASCII or other encoding formats into UTF-8 to ensure text compatibility across different systems. Images are formatted in a unified format, specifically using the JPEG format. This includes converting images in formats such as PNG and BMP into JPEG to reduce storage space and unify image processing standards. Video data is compressed, specifically using H.264 encoding. This includes reducing the video bit rate and resolution to reduce transmission bandwidth and storage requirements, and generating a formatted dataset.

[0079] Use formatted data sets to integrate all data types and use a unified data encapsulation format to integrate different data together. Specifically, the JSON format is used. Operations include encapsulating text, image links, and video links into JSON objects to ensure structured storage and easy processing of data, and to achieve unified management and transmission to obtain a data integration package.

[0080] Through data integration packages, data is packaged using a unified data transmission protocol, specifically the TCP / IP protocol. The operation includes encapsulating the data integration package into a TCP / IP data packet to ensure reliable transmission of data in the network and generate a standardized data packet;

[0081] Among them, standardized data packets include encapsulated text data, image files, video streams and other multimedia elements.

[0082] The specific steps to generate an encrypted signature data packet are:

[0083] Initialize the key generation process based on the standardized data package, configure independent public and private keys for each data type, and generate key configuration records;

[0084] Based on the public key in the key configuration record, each data item in the standardized data packet is encrypted to generate an encrypted data set;

[0085] Based on the encrypted data set, a software-defined network is used to digitally sign each data packet with the corresponding private key to generate an encrypted signature data packet;

[0086] Initialize the key generation process based on a standardized data packet, specifically using the RSA algorithm with parameters including a key length set to 2048 bits. The operation involves configuring independent public and private keys for each data type, generating and managing public and private key pairs separately to ensure the encryption independence and security of each type of data, and generating key configuration records.

[0087] Encrypt each data item in the standardized data packet using the public key in the key configuration record. Specifically, the AES algorithm is used. Parameters include setting the key length to 256 bits. The operation includes using the public key for AES encryption to ensure the encryption quality and difficulty of the data packet, thereby generating an encrypted data set.

[0088] Based on encrypted data sets, software-defined networking is used, specifically the SSL protocol for network transmission. Operations include digitally signing each data packet with the corresponding private key to ensure source verification and integrity verification of the data packet, and generating an encrypted signature data packet;

[0089] The encrypted signature data packet includes the public key for decryption, the encrypted data content, and the digital signature for verifying the integrity of the data.

[0090] Initialize the key generation process and specify a key length of 2048 bits to ensure strong encryption. For different data types, configure keys of different strengths based on the sensitivity level of the data. When key generation fails, the error status will be recorded and a security alert will be triggered. The key generation process will be retried up to three times. Continuous failures will suspend the service and notify the administrator for intervention.

[0091] The specific steps to generate a sensitive data protection package are:

[0092] Based on the encrypted signature data packet, identify and mark data fields containing sensitive information, such as payment information and personal identity information, in preparation for subsequent encryption, and generate a sensitive information marking list;

[0093] Use a unified symmetric encryption key to encrypt sensitive data fields according to the sensitive information tag list to generate an encrypted sensitive information set;

[0094] Integrate the encrypted sensitive information set with the original encrypted signature data packet to ensure that all sensitive information is protected by an additional layer of protection, maintain the security and privacy of data transmission, and generate a sensitive data protection package;

[0095] Based on cryptographically signed data packets, data fields containing sensitive information, such as payment information and personal identification information, are identified and marked. Data classification algorithms are used, specifically custom label assignments. Operations include scanning for keywords and data patterns in data packets, automatically identifying sensitive information, preparing for subsequent encryption, and generating a list of sensitive information tags.

[0096] Using a unified symmetric encryption key, encrypt sensitive data fields according to a sensitive information tag list. Parameters include setting the key length to 256 bits. The operation includes encrypting the identified sensitive data using the preset symmetric key to ensure the security of the sensitive information and generate an encrypted sensitive information set.

[0097] Integrate the encrypted sensitive information set with the original encrypted signature data packet using a data merging tool, specifically a data packet consolidator. The operation includes merging the encrypted sensitive information set with the encrypted signature data packet through a specified data structure to ensure that all sensitive information is protected by an additional layer of protection, maintain the security and privacy of data transmission, and generate a sensitive data protection package.

[0098] Among them, sensitive data protection includes double-encrypted payment information, encrypted user identity data and other sensitive information fields.

[0099] The specific steps to generate an integrity verification data packet are:

[0100] Hash generation is performed based on the encrypted signature data packet, and combined with the support vector machine, an independent hash value is calculated for each data packet content to obtain an independent hash value set;

[0101] Based on the independent hash value set, the hash value of each data packet is bound to its data content and attached to the end of each data packet to generate a bound hash data packet;

[0102] Integrate the bound hash data packets into a unified data set, including all hashed data packets, and generate integrity verification data packets;

[0103] Hash generation is performed based on encrypted signature data packets. Parameters include the data input being a complete data packet. The operation includes independently calculating the hash value of the content of each data packet to ensure the uniqueness and integrity of the data. In combination with a support vector machine, the LIBSVM library is used for model training. The operation includes training the model to identify and verify the consistency of the hash value to obtain a set of independent hash values.

[0104] Based on a set of independent hash values, the hash value of each data packet is bound to its data content. A data binding tool, specifically a custom binding script, is used. The parameters include the original data packet content and the hash value. The operation includes appending the hash value to the end of each data packet to ensure that the integrity of the data packet can be verified upon receipt, and a bound hash data packet is generated.

[0105] Aggregate the bound hash data packets into a unified data set using a data aggregation tool, specifically a collection aggregator. This operation involves collecting all hashed data packets and combining them according to a specific data structure. This ensures that the hash value of each data packet in the data set can be individually accessed and verified, generating an integrity-verified data packet.

[0106] The integrity verification data packet includes the hash value of the data packet, the original data content, and the type of hash algorithm used for verification.

[0107] Support vector machine, according to the formula:

[0108] ,

[0109] in: is the decision function, is the input data point, is the support vector, For the The class labels of the data points, For the The Lagrange multiplier of the data points, is the adjustment coefficient of the kernel function, is the kernel function, is the linear adjustment coefficient of the input data point, is the bias term;

[0110] Execution process: Each supply chain data packet is processed through a cryptographic hash function to generate a unique hash value for each data packet and used as the input data point , and then select the characterized packet hash values ​​from the known training dataset as support vectors , marked as safe or potential threat categories, the corresponding class labels Represents classification, Lagrange multiplier It is determined by solving the optimization problem during the model training phase, which measures the importance of each support vector in forming the decision boundary. Adjustment factor Optimize through cross-validation method to improve the adaptability and classification accuracy of the model to new data, and input the linear adjustment coefficient of the data point It is also optimized to improve the model's responsiveness to linear features of the data. Finally, the bias term Adjusting the decision boundary of the entire model effectively classifies each data packet as safe or potential threat, ensuring the security of port terminal supply chain data during transmission, ensuring the safe transmission of data, and improving the efficiency of predicting and responding to potential threats.

[0111] The specific steps to generate a data reception report are:

[0112] Verify data packets based on integrity, configure secure network channels, serialize data packets and send them to a predetermined network address. Monitor the sending status of each packet during operation to ensure data transmission efficiency and security, and obtain data transmission records.

[0113] Based on the data transmission record, the hash value comparison program is started to recalculate the hash value of each received data packet and compare it with the hash value bound before transmission to verify the data integrity and non-tampering of each packet, and generate a hash verification record;

[0114] Based on the hash verification record, if the hash values ​​of all data packets match, the data content is decrypted and a security check is performed. The security status of the data is reviewed and recorded. Finally, all the detailed information of reception and verification is collated to generate a data reception report.

[0115] Verify the integrity of data packets, configure a secure network channel, specifically adopt the TLS protocol, parameters include version 1.2, establish an encrypted connection, serialize the data packet, specifically adopt the JSON serialization method, convert the data structure into a JSON format string, and send it to a predetermined network address. Monitor the sending status of each packet during the operation, use network monitoring tools, and capture and analyze outgoing data packets in real time to ensure data transmission efficiency and security, and generate data transmission records.

[0116] Based on the data transmission records, a hash value comparison program is initiated, specifically using the SHA-256 algorithm to recalculate the hash value of each received data packet. The operation includes parsing the data packet content and applying the hash function to compare it with the hash value bound before transmission. The comparison tool, specifically the built-in hash comparison function, is used. The operation includes automatically matching and marking data packets that do not match the hash value, verifying the data integrity and non-tampering of each packet, and generating a hash verification record.

[0117] Based on the hash verification record, if the hash values ​​of all data packets match, the data content is decrypted using the AES algorithm. Parameters include using a 256-bit key for decryption. Operations include applying the key to the encrypted data and restoring the original state. Security checks are performed using data security audit tools, specifically custom security audit scripts. Operations include checking data integrity and privacy protection standards, auditing and recording the security status of the data, and finally compiling all reception and verification details to generate a data reception report.

[0118] The data reception report includes the hash value verification result, the decryption status of the data packet and the security check details after reception.

[0119] The specific steps for generating an access status confirmation record are:

[0120] Based on the data reception report, analyze the verification results in the reception report one by one, extract the data packet records marked as passed, confirm the data packet status by verifying the accompanying security indicators, and generate a data security assessment checklist;

[0121] Based on the data security assessment checklist, database entry operations are performed for each data packet marked as passed. Data storage is achieved by allocating storage paths, adding classification tags, and creating indexes, generating data entry logs.

[0122] Based on the data entry log, the data records after entry are integrated, the content of multiple data sources is archived uniformly, the database status is updated and backed up, and the access status confirmation record is generated;

[0123] Based on the data reception report, the verification results in the reception report are analyzed item by item. Data analysis tools are used to parse the data. Operations include reading the report file, screening the records marked as passed, and verifying the accompanying security indicators. Specifically, regular expressions are used to match security indicators. Operations include identifying and verifying the relevant fields of the data packet status and generating a data security assessment checklist.

[0124] Based on the data security assessment checklist, perform database entry operations for each data packet marked as passed, using a database management system. Operations include allocating storage paths, adding classification tags, creating indexes, setting the storage path, classification tags, and indexes for each data packet for fast retrieval, and generating data entry logs.

[0125] Based on the data entry log, the entered data records are integrated and database query and update tools, specifically SQL query statements, are used. Operations include querying the entered data packets, archiving the content of multiple data sources in a unified manner, completing database status updates, performing backup storage, ensuring that all data is secure and traceable, and generating access status confirmation records;

[0126] Among them, the access status confirmation record includes the final confirmation of data access, system entry results and data storage status.

[0127] The above are merely preferred embodiments of the present invention and do not limit the present invention in any other form. Any technician familiar with the profession may use the technical content disclosed above to change or modify it into an equivalent embodiment with equivalent changes and apply it to other fields. However, any simple modification, equivalent change and modification made to the above embodiment based on the technical essence of the present invention without departing from the content of the technical solution of the present invention shall still fall within the scope of protection of the technical solution of the present invention.

Claims

1. A method for secure data transmission in a port terminal supply chain, characterized in that: The following steps are involved: Step 1: Based on the demand information of the port terminal supply chain, the data types are subdivided, including cargo tracking data and vessel scheduling information. The specific formats and processing rules of each type of data are identified by classification, and a data specification catalog is generated; Step 2: Based on the data specification directory, standardize the various types of data received, and encapsulate and integrate the data content in a unified format, packaging them into units that meet the standards to obtain standardized data packets; Step 3: Encrypt the standardized data packet using asymmetric encryption technology, generate a key pair, and digitally sign the data packet using software-defined networking to verify the source and integrity of the data and generate an encrypted signature data packet; Step 4: Based on the encrypted signature data packet, additional encryption is performed on the fields containing sensitive information, and the payment information and user identity identifier are encrypted using a symmetric encryption algorithm to enhance the protection level of sensitive data and create a sensitive data protection package; Step 5: Use a hash algorithm combined with a support vector machine to hash the encrypted signature data packet, calculate the hash value and append it to the end of the data packet to generate an integrity verification data packet; Step 6: Send an integrity verification data packet over the network, recalculate the hash value of the data packet and compare it with the original hash value to confirm that the data has not been tampered with, decrypt the data packet content and perform a security check to obtain a data reception report; Step 7: Based on the results of the data reception report, evaluate the security of the data, confirm that the data is accepted, enter all verified data, complete the data integration and storage, and form an access status confirmation record.

2. The method for secure transmission of port terminal supply chain data according to claim 1, characterized in that: The data specification directory includes data classification identification, data format definition and data processing rules.

3. The method for secure transmission of port terminal supply chain data according to claim 1, characterized in that: The standardized data packets include encapsulated text data, image files, video streams and other multimedia elements.

4. The method for secure transmission of port terminal supply chain data according to claim 1, characterized in that: The specific steps of generating the encrypted signature data packet are: Initialize the key generation process based on the standardized data packet, configure independent public and private keys for each data type, and generate a key configuration record; Encrypting each item of data in the standardized data packet based on the public key in the key configuration record to generate an encrypted data set; Based on the encrypted data set, using a software-defined network, digitally signing each data packet with a corresponding private key to generate an encrypted signature data packet; The encrypted signature data includes a public key for decryption, encrypted data content, and a digital signature for verifying data integrity.

5. The method for secure transmission of port terminal supply chain data according to claim 4 is characterized in that: The initialization key generation process specifies a key length of 2048 bits to ensure strong encryption. For different data types, keys of different strengths are configured according to the sensitivity level of the data. When key generation fails, an error status will be recorded and a security alert will be triggered. The key generation process will be retried up to three times. If failures continue, the service will be suspended and the administrator will be notified for intervention.

6. The method for secure transmission of port terminal supply chain data according to claim 1, characterized in that: The sensitive data protection package includes double-encrypted payment information, encrypted user identity data and other sensitive information fields.

7. The method for secure data transmission of a port terminal supply chain according to claim 1, characterized in that: The specific steps of generating the integrity verification data packet are: Performing hash generation based on the encrypted signature data packet and, in combination with a support vector machine, performing independent hash value calculations on the content of each data packet to obtain an independent hash value set; Based on the independent hash value set, the hash value of each data packet is bound to its data content and appended to the end of each data packet to generate a bound hash data packet; Integrate the binding hash data packets into a unified data set, including all hashed data packets, to generate an integrity verification data packet; The integrity verification data packet includes a hash value of the data packet, original data content, and a hash algorithm type used for verification.

8. The method for secure transmission of port terminal supply chain data according to claim 7, characterized in that: The support vector machine is based on the formula: ， in: is the decision function, is the input data point, is the support vector, For the The class labels of the data points, For the The Lagrange multiplier of the data points, is the adjustment coefficient of the kernel function, is the kernel function, is the linear adjustment coefficient of the input data point, is the bias term.

9. The method for secure data transmission of a port terminal supply chain according to claim 1, characterized in that: The data reception report includes the hash value verification result, the decryption status of the data packet and the security check details after reception.

10. The method for secure transmission of port terminal supply chain data according to claim 1, characterized in that: The access status confirmation record includes the final confirmation of data access, the system entry result and the storage status of the data.

Images