Information source encryption and channel coding method and system based on information entropy and dynamic channel

Abstract

The invention provides an information source encryption and channel coding method and system based on information entropy and a dynamic channel, and the method comprises the steps: a transmitting end determines the data importance level of pre-transmitted data according to a first AI model, and carries out the data security level division of the pre-transmitted data according to the data importance level; matching a security encryption system according to the data security level through a first AI model; the transmitting end encrypts transmission data through the data importance level, the data security level and the security encryption system, and transmits the encrypted transmission data to a receiving end; and the receiving end decrypts the received transmission data according to the data importance level, the data security level and the security encryption system to obtain the transmission data. The data importance is automatically evaluated through the AI model, the corresponding encryption level is matched, dynamic encryption transmission of the data is achieved, data safety transmission resources are reduced, secret key leakage is avoided, and transmission efficiency and safety are improved.

Description

Technical Field

[0001] The present invention relates to the field of data transmission, and in particular to a method and system for information source encryption and channel coding based on information entropy and dynamic channels. Background Art

[0002] Among the technologies currently available on the market, there is an urgent problem to be solved: how to automatically allocate the security level and encryption and decryption strength of data to maximize security when there are fixed limits on transmission redundancy resources. Current encryption and decryption technologies are still unable to achieve the highest security strength data transmission while occupying the minimum transmission resources. In addition, the existing technology cannot solve how to calculate the minimum security transmission resources required to achieve the corresponding security level when the importance of data is fixed. At the same time, the existing technology has also failed to achieve a dynamic balance between data security level assessment, security encryption and decryption resource occupancy, and transmission resources. In addition, the existing technology also has the problem of waste of encryption resources caused by the unified encryption of all data during data transmission, and the problem of keeping the data security encryption key consistent during data transmission, which may lead to the risk of unified exposure of data once the key is leaked. Summary of the invention

[0003] In view of the above-mentioned deficiencies in the prior art, the purpose of the present invention is to provide a method for source encryption and channel coding based on information entropy and dynamic channels. The present invention automatically evaluates the importance of data and matches the corresponding encryption level through an AI model, thereby realizing dynamic encrypted transmission of data, solving the problems of waste of data security transmission resources and risk of key leakage in the prior art, and improving transmission efficiency and security.

[0004] In order to achieve the above object, the present invention adopts the following technical solutions:

[0005] A first aspect of the present invention provides a method for source encryption and channel coding based on information entropy and a dynamic channel, comprising the following steps:

[0006] The transmitting end determines the data importance level of the pre-transmission data according to the first AI model, and classifies the data security level of the pre-transmission data according to the data importance level;

[0007] Matching a security encryption system according to the data security level through a first AI model;

[0008] The sending end encrypts the pre-transmission data according to the data importance level, data security level and security encryption system, and transmits the encrypted pre-transmission data to the receiving end;

[0009] The receiving end decrypts the received pre-transmission data according to the data importance level, data security level and security encryption system to obtain transmission data.

[0010] In one embodiment, the transmitting end determines the data importance level of the transmission data according to the first AI model, and classifies the data security level of the transmission data according to the data importance level, including:

[0011] Collecting a training data set, and inputting the training data set into a first AI model, so that the first AI model performs feature extraction on the training data set;

[0012] Performing cluster analysis on the extracted features through a clustering algorithm, outputting clustering results, and determining the importance level of the data according to the clustering results;

[0013] The first AI model classifies the input pre-transmission data into data importance levels, and outputs the data importance levels of the pre-transmission data;

[0014] The first AI model is used to classify the pre-transmission data into data security levels according to the data importance level, and outputs the data security level of the pre-transmission data.

[0015] In one embodiment, matching the security encryption system according to the data security level through the first AI model includes:

[0016] Encrypting the collected test data and inputting the encrypted test data into the encryption combination system model;

[0017] Analyzing the test data by the encryption combination system model to obtain data security characteristics;

[0018] Perform encryption security assessment on the test data according to the data security characteristics, and output a security encryption level;

[0019] The security encryption system of the pre-transmission data is matched by the security encryption level and the data security level.

[0020] In one embodiment, the security encryption system of matching the pre-transmitted data with the security encryption level and the data security level includes:

[0021] Pre-constructing reconstruction adjustment vectors;

[0022] Construct a complex adjustment matrix based on key length, encryption algorithm complexity and system protection measures;

[0023] Combining the reconstruction adjustment vector and the complex adjustment matrix to obtain a reconstruction comprehensive vector;

[0024] The security encryption level is calculated by reconstructing the comprehensive vector, and the security encryption system of the pre-transmitted data is matched according to the security encryption level and the data security level.

[0025] In one embodiment, the security encryption system of matching the pre-transmitted data with the security encryption level and the data security level includes:

[0026] Construct a complex matrix I according to the key characteristic vector, the limited transmission resource vector and the honor strategy vector;

[0027] Construct a complex matrix T according to the key characteristic vector, the algorithm strength vector, the honor strategy vector and the limited transmission resource vector;

[0028] Constructing a complex matrix U according to the algorithm strength vector;

[0029] Constructing a comprehensive encryption system vector E according to the key characteristic vector, the algorithm strength vector and the honor strategy vector;

[0030] Calculate the data security metric value according to the comprehensive encryption system vector E, the complex matrix I, the complex matrix T, the complex matrix U and the adjustment vector O;

[0031] The security encryption system of the pre-transmitted data is dynamically matched according to the data security metric value, the security encryption level and the data security level.

[0032] In one embodiment, the sending end encrypts the pre-transmission data according to the data importance level, data security level and security encryption system, and transmits the encrypted pre-transmission data to the receiving end, including:

[0033] Obtain pre-transmission data size, packet size, padding size, key length and related overhead and coding efficiency coefficient;

[0034] Calculate the number of packets according to the pre-transmission data size, the padding size and the packet size;

[0035] Calculate the size of uncoded encrypted data based on the coding efficiency coefficient, the block size, the key length and the related overhead;

[0036] Calculate the minimum amount of transmission resources according to the coding efficiency coefficient and the size of the uncoded encrypted data;

[0037] Dynamically adjust the resources occupied by the security encryption and decryption system and the data transmission resources through the minimum transmission resource quantity;

[0038] The sending end encrypts the pre-transmitted data according to the data importance level, data security level and security encryption level of the pre-transmitted data using the adjusted security encryption and decryption system to occupy resources and data transmission resources, and transmits the encrypted transmission data to the receiving end.

[0039] In one embodiment, the sending end encrypts the pre-transmission data according to the data importance level, data security level and security encryption system, and transmits the encrypted pre-transmission data to the receiving end, including:

[0040] Construct a complex matrix A according to the computational resource vector and the time resource vector;

[0041] Construct a complex matrix B according to the computational resource vector, the time resource vector and the transmission resource vector;

[0042] Constructing a complex matrix D according to the transmission resource vector;

[0043] Constructing a comprehensive encryption and decryption resource vector U according to the computing resource vector and the time resource vector;

[0044] Calculate the data security level metric according to the complex matrix A, the complex matrix B, the complex matrix D, the comprehensive encryption and decryption resource vector U and the adjustment vector R;

[0045] The data security level, the resources occupied by the security encryption and decryption system and the data transmission resources are balanced by the data security level measurement;

[0046] According to the data importance level, the balanced data security level and the security encryption level, the pre-transmission data is encrypted using the balanced security encryption and decryption system occupying resources and data transmission resources, and the encrypted transmission data is transmitted to the receiving end.

[0047] A device for information source encryption and channel coding based on information entropy and dynamic channels, the device comprising:

[0048] An importance and security module, configured to determine, by the transmitting end, a data importance level of the pre-transmission data according to the first AI model, and to classify the data security level of the pre-transmission data according to the data importance level;

[0049] An encryption system matching module is used to match the security encryption system according to the data security level through the first AI model

[0050] A data encryption module, used for the sending end to encrypt the pre-transmission data according to the data importance level, data security level and security encryption system, and transmit the encrypted pre-transmission data to the receiving end;

[0051] The data decryption module is used by the receiving end to decrypt data according to the data importance level, data security level and security encryption system.

[0052] A system for source encryption and channel coding based on information entropy and dynamic channels, the system comprising at least one processor; and

[0053] a memory communicatively connected to the at least one processor; wherein,

[0054] The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can perform the method of source encryption and channel coding based on information entropy and dynamic channel.

[0055] A non-volatile computer-readable storage medium stores computer-executable instructions. When the computer-executable instructions are executed by one or more processors, the one or more processors can execute the method of source encryption and channel coding based on information entropy and dynamic channels.

[0056] Beneficial Effects : The embodiments of the present invention disclose a method and system for source encryption and channel coding based on information entropy and dynamic channels. Compared with the prior art, the embodiments of the present invention automatically evaluate the importance of data and match the corresponding encryption level through an AI model to achieve dynamic encrypted transmission of data, thereby solving the problems of waste of data security transmission resources and risk of key leakage in the prior art and improving transmission efficiency and security. BRIEF DESCRIPTION OF THE DRAWINGS

[0057] The present invention will be further described below with reference to the accompanying drawings and embodiments, in which:

[0058] Figure 1 A flow chart of a method for source encryption and channel coding based on information entropy and dynamic channels provided in an embodiment of the present invention;

[0059] Figure 2 A flowchart of secure transmission of a method for source encryption and channel coding based on information entropy and dynamic channels provided in an embodiment of the present invention;

[0060] Figure 3 A flow chart of adjusting the security encryption level of a method for source encryption and channel coding based on information entropy and dynamic channels provided in an embodiment of the present invention;

[0061] Figure 4 A flow chart of maximizing the security of a method for source encryption and channel coding based on information entropy and dynamic channels provided in an embodiment of the present invention;

[0062] Figure 5A flow chart of transmission resource adjustment of a method for source encryption and channel coding based on information entropy and dynamic channels provided in an embodiment of the present invention;

[0063] Figure 6 A flow chart of transmission strategy adjustment of a method for source encryption and channel coding based on information entropy and dynamic channels provided in an embodiment of the present invention;

[0064] Figure 7 A schematic diagram of functional modules of a device for source encryption and channel coding based on information entropy and dynamic channels provided in an embodiment of the present invention;

[0065] Figure 8 A schematic diagram of the hardware structure of a system for source encryption and channel coding based on information entropy and dynamic channels provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0066] In order to make the technical problems, technical solutions and beneficial effects to be solved by the embodiments of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0067] The present invention proposes a security system for secure data transmission between end-to-end, and the security system is responsible for the security of any data transmission process from the sending end to the receiving end. Security guarantees include but are not limited to data security and data integrity. A method of grading and hierarchical encryption and decryption based on data importance in the present invention can automatically adjust the security level and security system of the data under limited transmission redundant resources, thereby maximizing data security. The data is analyzed and graded by the first AI model. The present invention can automatically allocate different encryption systems according to the importance of the data, including symmetric encryption, asymmetric encryption, partial encryption, dynamic encryption and other encryption methods. In addition, the present invention also proposes a method for dynamically allocating data security levels and security encryption systems. This method can effectively ensure reasonable security in the data transmission process when security resources are fixed, without causing waste of encryption and decryption computing resources, and can also ensure data security.

[0068] See also Figure 1 , Figure 1 The present invention provides a flowchart of an embodiment of a method for source encryption and channel coding based on information entropy and dynamic channels, wherein the method specifically comprises the following steps:

[0069] S100, the transmitting end determines the data importance level of the pre-transmission data according to the first AI model, and classifies the data security level of the pre-transmission data according to the data importance level;

[0070] S200, matching a security encryption system according to the data security level through a first AI model;

[0071] S300, the sending end encrypts the pre-transmission data according to the data importance level, data security level and security encryption system, and transmits the encrypted pre-transmission data to the receiving end;

[0072] S400: The receiving end decrypts the received pre-transmission data according to the data importance level, data security level and security encryption system to obtain transmission data.

[0073] In this embodiment, the pre-transmission data is obtained, and the sending end determines the data importance level of the pre-transmission data according to the first AI model, and divides the pre-transmission data into data security levels according to the data importance level, and matches the security encryption system according to the data security level through the first AI model. Then, the sending end encrypts the pre-transmission data according to the data importance level, the data security level and the security encryption system, and the processing process is as follows: C i =E k (P i ), where P i represents the i-th plaintext data packet, K is the encryption key, E is the encryption function, C i The encrypted data packets are grouped into corresponding ciphertext data packets. After encryption, the encrypted packets are concatenated into ciphertext data messages and transmitted through a secure communication transmission physical link.

[0074] Then, if Figure 2 As shown, the encrypted pre-transmission data is transmitted to the receiving end. After receiving the ciphertext message data, the receiving end splits the ciphertext data according to the synchronized data importance classification, data security level classification, and security encryption system and matches the decryption system. After decryption security processing, the plaintext data pre-transmitted by the sender is obtained, and the secure transmission process of the dynamic matching security system is completed. The specific decryption process is: i =D K (C i ), where P i represents the i-th plaintext data packet, K is the encryption key, D is the decryption function, C i is the corresponding ciphertext data group.

[0075] Under the condition that redundant transmission resources are subject to fixed limitations, the present invention achieves the problem of maximizing security by automatically allocating data security levels and encryption and decryption strengths, solves the risk of data being uniformly exposed after the key is leaked when the data security encryption key is consistent during the data transmission process, and improves the security of the data transmission process.

[0076] In one embodiment, the transmitting end determines the data importance level of the transmission data according to the first AI model, and classifies the data security level of the transmission data according to the data importance level, including:

[0077] Collecting a training data set, and inputting the training data set into a first AI model, so that the first AI model performs feature extraction on the training data set;

[0078] Performing cluster analysis on the extracted features through a clustering algorithm, outputting clustering results, and determining the importance level of the data according to the clustering results;

[0079] The first AI model classifies the input pre-transmission data into data importance levels, and outputs the data importance levels of the pre-transmission data;

[0080] The first AI model is used to classify the pre-transmission data into data security levels according to the data importance level, and outputs the data security level of the pre-transmission data.

[0081] In this embodiment, the importance of data is analyzed and graded by a data importance grading AI model. A large amount of data with labeled and unlabeled data importance is collected as a training data set, and the training data set is input into the first AI model (such as a deep neural network) for feature extraction, and then the extracted features are clustered using the K-Means clustering algorithm to output the clustering results. The importance level of the data is determined according to the clustering results. For example, in an image data set, images with high clarity and rich content can be clustered into a high importance level, while blurred images with simple content can be clustered into a low importance level. The first AI model divides the input pre-transmission data into data importance levels and outputs the data importance level of the pre-transmission data. According to the data importance level, the first AI model divides the security level of the pre-transmission data of the sender, which can be divided into n levels of Ls0, Ls1, ..., Lsn, and outputs the data security level of the pre-transmission data.

[0082] Specifically, the data importance classification AI model uses deep learning to analyze the data. Deep learning can be implemented by but not limited to the K-Means clustering algorithm. Taking the K-Means clustering algorithm as an example, several data points are selected in the training data set as the initial clustering center points, which are recorded as C1, C2, ..., C K . Through the Euclidean distance formula: Calculate the cluster distance between each data point in the training data set and the initial cluster center, where n is the dimension of the data point and x is ik Represents data point x i The kth eigenvalue of jk Represents the cluster center Cj Represents the cluster center C j The kth eigenvalue of . According to the cluster distance, the data points of the training data set are assigned to the cluster represented by the nearest initial cluster center to form several initial clusters. The feature mean of all data points in each initial cluster is calculated, and the feature mean is used as the new cluster center to output the clustering result. According to the clustering result, the data importance level is determined and divided into L0, L1, ..., Ln. Through automation and intelligent methods, the efficiency and security of data processing can be improved.

[0083] In one embodiment, matching the security encryption system according to the data security level through the first AI model includes:

[0084] Encrypting the collected test data and inputting the encrypted test data into the encryption combination system model;

[0085] Analyzing the test data by the encryption combination system model to obtain data security characteristics;

[0086] Perform encryption security assessment on the test data according to the data security characteristics, and output a security encryption level;

[0087] The security encryption system of the pre-transmission data is matched by the security encryption level and the data security level.

[0088] In this embodiment, all encryption systems can be compatible and adopted, including but not limited to symmetric encryption, asymmetric encryption, full encryption, partial encryption, dynamic encryption, static encryption, desensitized encryption, and no encryption systems. In addition, for the first time, an encryption combination system model is proposed, the role of which is to evaluate the security evaluation of data encryption by the multi-mode combination encryption system, and to perform feedback optimization and adjustment on the multi-mode combination encryption system. Specifically, for the security evaluation of the encryption algorithm, the collected test data is encrypted, and the encrypted test data is input into the encryption combination system model, and the encryption combination system model is used to analyze its security characteristics to obtain data security characteristics. According to the data security characteristics, the test data is encrypted for security evaluation, and the security encryption level is output. Specifically, the encrypted test data is security evaluated by identity impersonation, dictionary attack, rainbow table attack, brute force cracking, etc., and the security encryption level after the combined encryption system is analyzed belongs to one of the four types: low security level, medium security level, high security level, and extremely high security level.

[0089] The security encryption system of the pre-transmitted data is matched by the security encryption level and the data security level.

[0090] Furthermore, the security encryption level expression is: S = a + bi, where S represents the security encryption level, which is a comprehensive evaluation value. a is the real part, which represents the current security encryption level achieved, and b is the imaginary part, which represents the potential security encryption development trend or the estimation of the ability to resist unknown attacks.

[0091] Assume the key length is ( is a vector, (, where l i represents the length of the i-th key type, and m is the number of key types).

[0092] Assume the complexity of the encryption algorithm is ( is a vector, (is a vector, where C i represents the complexity of the jth key type, and p is the number of key types).

[0093] Set the system protection measures to ( is a vector, (, where P k represents the strength evaluation index of the k-th system protection measure, and q is the number of system protection measures).

[0094] According to the key length, encryption algorithm complexity and system protection measures, a (m+p+q)×(m+p+q) complex matrix M is constructed, whose elements are m ij =x ij +iy ij , where x ij Indicates the degree of influence of the i-th factor (key length, encryption algorithm complexity, or one of the system protection measures) on the j-th factor in the real part (current actual impact level), y ij Indicates the degree of impact at the imaginary part (potential or trend impact level).

[0095] Combining key length, encryption algorithm complexity or system protection measures to form a comprehensive vector

[0096] .

[0097] Then the security encryption level expression is:

[0098] ,

[0099] in Finally, the security encryption level is calculated based on the above factors: Different security levels mean different usage of encryption and decryption computing power and different usage of communication transmission resources. The security level can be further adjusted according to the actual communication transmission redundant resources and encryption and decryption computing power resources.

[0100] In one embodiment, the security encryption system of matching the pre-transmitted data with the security encryption level and the data security level includes:

[0101] Pre-constructing reconstruction adjustment vectors;

[0102] Construct a complex adjustment matrix based on key length, encryption algorithm complexity and system protection measures;

[0103] Combining the reconstruction adjustment vector and the complex adjustment matrix to obtain a reconstruction comprehensive vector;

[0104] The security encryption level is calculated by reconstructing the comprehensive vector, and the security encryption system of the pre-transmitted data is matched according to the security encryption level and the data security level.

[0105] In this embodiment, Figure 3 As shown, according to the first AI model, the security level encryption system is combined and matched to reconstruct the security system. The reconstruction adjustment vector is set to According to the key length, encryption algorithm complexity and system protection measures, a (m+p+q)×(m+p+q) complex adjustment matrix N is constructed, whose elements are n ij =r ij +is ij , r ij represents the adjustment coefficient of the i-th factor to the j-th factor in the real part (actual adjustment correlation) during reconstruction, s ij Represents the adjustment coefficient in the imaginary part (potential adjustment association). The comprehensive vector after the reconstruction of the safety system Its specific expression is:

[0106]

[0107] The security encryption level is calculated by reconstructing the comprehensive vector, and the security encryption system of the pre-transmitted data is matched according to the security encryption level and the data security level.

[0108] In one embodiment, the security encryption system of matching the pre-transmitted data with the security encryption level and the data security level includes:

[0109] Construct a complex matrix I according to the key characteristic vector, the limited transmission resource vector and the honor strategy vector;

[0110] Construct a complex matrix T according to the key characteristic vector, the algorithm strength vector, the honor strategy vector and the limited transmission resource vector;

[0111] Constructing a complex matrix U according to the algorithm strength vector;

[0112] Constructing a comprehensive encryption system vector E according to the key characteristic vector, the algorithm strength vector and the honor strategy vector;

[0113] Calculate the data security metric value according to the comprehensive encryption system vector E, the complex matrix I, the complex matrix T, the complex matrix U and the adjustment vector O;

[0114] The security encryption system of the pre-transmitted data is dynamically matched according to the security metric value, the security encryption level and the data security level.

[0115] In this embodiment, a method is used to automatically adjust the security level and security system of data under limited and fixed transmission redundant resources based on the concept of Shannon's first law, so as to maximize data security under limited transmission redundant resources. Shannon's first law proposes that given a discrete memoryless information source with information entropy H(X) and a code symbol set with D elements, a lossless encoding method can always be found to form a unique decodable code with an average code length satisfying H (X) logD <n<1+H (X) logD. If the information transmission rate of the encoded source sequence is not less than the entropy of the source, lossless coding can be achieved. Conversely, if this condition is not met, there is no lossless coding. This guides the method of lossless source coding, by finding a coding method so that the encoded code length approaches the lower bound of the information entropy, thereby achieving lossless compression and efficient transmission of information. The method of the present invention is derived from Shannon's first law, and aims to find a secure encryption system that can achieve secure encryption processing of pre-transmitted data under limited transmission redundancy resources to ensure the standard of secure data transmission.

[0116] Specifically, let the data security metric be a complex number S=x+iy, where the real part x represents the current directly measurable security protection effect, and the imaginary part y reflects the potential development trend of the security protection system or the response margin to unknown threats.

[0117] Assume the key characteristic vector is:

[0118]

[0119] where k i It can be various attributes related to the key, for example, k1 is the logarithm of the key length (with a specific base), k2 is the information entropy of the key, etc., and m is the number of parameters describing the key characteristics.

[0120] Let the algorithm strength vector be:

[0121]

[0122] where a j Represents different strength indicators of encryption algorithms, such as a1 is the algorithm's resistance coefficient to differential attacks (calculated through a specific mathematical model), a2 is a measure of the degree of confusion diffusion of the algorithm, and n is the number of factors related to the algorithm's strength.

[0123] Let the honor strategy vector be:

[0124]

[0125] where r t Represents various parameters in the data redundancy scheme, for example, r1 is the ratio of redundant data to original data, r2 is the distribution index of redundant data (used to describe the uniformity of the distribution of redundant data in the original data), etc., and p is the number of parameters related to the redundancy strategy.

[0126] Assume that the limited transmission resource vector is:

[0127]

[0128] Among them j Represents the limit amount of different types of transmission resources, for example, o1 is the available bandwidth (measured in specific units), o2 is the maximum transmission delay (measured in time units), and q is the number of transmission resource types.

[0129] According to the key characteristic vector, the limited transmission resource vector and the honor strategy vector, a (m+p+q)×(m+p+q) complex matrix I is constructed, whose element i ij =α ij +β ij i, α ij represents the i-th encryption system factor (from the key length Encryption algorithm complexity or system protection measures The influence weight of the jth encryption system factor in the real part (the current actual impact level) is determined through a large amount of experimental data and theoretical analysis. For example, if i is the key information entropy, j is the algorithm's resistance coefficient to differential attacks, α ij Indicates the weight of the impact of the change in key information entropy on the actual ability of the algorithm to resist differential attacks. ij It represents the impact weight at the imaginary part (potential or trend impact level), reflecting the possible impact trend in the future, and can be estimated based on the development trend of cryptography and theoretical predictions.

[0130] According to the key characteristic vector, algorithm strength vector, honor strategy vector and limited transmission resource vector, a (m+p+q)×n complex matrix T is constructed, whose element t ij=γ ij +δ ij i,γ ij It represents the correlation degree (real part) and potential impact trend (imaginary part) between the i-th encryption system factor and the j-th transmission resource in the data security assurance process. For example, if i is the proportion of redundant data to original data, j is the available bandwidth, γ ij Indicates the correlation between the current redundant data ratio and the actual bandwidth occupancy and utilization efficiency, δ ij It shows the impact of this ratio change on the potential trend of bandwidth demand as technology develops.

[0131] Construct an n×n complex matrix U based on the algorithm strength vector, whose element u ij =ε ij +ζ ij i, where ε ij represents the influence weight of the i-th transmission resource on the j-th transmission resource in the real part (the current actual interaction level), ζ ij Indicates the influence weight at the imaginary part (potential or trend interaction level). For example, if i is bandwidth, j is transmission delay, ε ij represents the actual impact weight of bandwidth change on the current transmission delay, ζ ij It shows the impact of bandwidth changes on the potential change trend of transmission delay as network technology evolves.

[0132] Construct a comprehensive encryption system vector based on key characteristic vector, algorithm strength vector and honor strategy vector The relationship between data security metrics and various factors can be expressed as:

[0133]

[0134] in is an n×1 adjustment vector, whose element Δo j It represents the adjustment amount for the j-th transmission resource, which can be solved by the optimization algorithm to maximize the data security metric S under limited transmission resources. Represents a custom high-order operation, for example, an operation based on the weighted sum of information entropy derived from Shannon's first law combined with the vector inner product. The specific form is as follows:

[0135]

[0136] Where l is a vector The dimensions (in the above formula, they correspond to dimensions).

[0137] In practical applications, the elements in the matrices I, T, and U are determined by considering various cryptographic features, a large amount of network transmission data, and the relationship between data security and transmission resources. To adapt to different transmission environments and data security requirements, so as to achieve the optimal encryption system configuration to ensure data security under limited transmission resources.

[0138] like Figure 3 As shown, after being processed by a security maximization method based on the concept of Shannon's first law proposed by the present invention, the security system level evaluation and the security encryption system are dynamically evaluated in given transmission redundant resources to ultimately achieve maximum guarantee of the security of the security system.

[0139] In actual case applications, for an IoT security application case, such as forest fire prevention images, which contain key information such as the real-time status of the forest, fire hazards, and fire spread, data security is extremely important. On the one hand, it is necessary to prevent image data from being illegally stolen during the return process, ensure the confidentiality of the data, and prevent forest resource information from being leaked to criminals, so as to prevent them from using this information for malicious activities, such as planning illegal logging in advance or interfering with forest fire prevention work. On the other hand, it is necessary to ensure the integrity of the data and prevent image data from being tampered with, because any malicious modification of image data may lead to a misjudgment of the forest fire situation, thereby affecting the accuracy and timeliness of fire fighting decisions, and may cause irreparable losses.

[0140] 1. Establishing the key factor vector of the encryption system

[0141] 1. Key characteristic vector:

[0142] k1 (logarithm of key length): Considering the large amount of forest fire prevention image data and the relatively complex transmission environment, in order to provide sufficient confidentiality, a longer key may be selected, such as a 256-bit key, and its logarithm (base 2) is determined accordingly.

[0143] k2 (information entropy of the key): The information entropy of the key is calculated through a specific algorithm to ensure that the key has sufficient randomness and uncertainty to resist possible brute force attacks. For example, a key is generated using a cryptographically secure random number generator and its entropy value is calculated using the information entropy calculation formula. This value should be at a high level, indicating the strength of the key.

[0144] 2. Algorithm strength vector:

[0145] a1 (resistance coefficient of the algorithm to differential attacks): Select an encryption algorithm with high resistance to differential attacks, such as a specific mode of the AES encryption algorithm. Its resistance coefficient to differential attacks has been determined to be a relatively high value through a large number of experiments and theoretical analysis, indicating that the algorithm can effectively protect image data in the face of differential attacks.

[0146] a2 (the degree of confusion diffusion of the algorithm): For forest fire prevention images, the algorithm should have good confusion diffusion characteristics, which can fully disrupt and diffuse the pixel information of the image data, making it difficult for attackers to obtain the feature information of the original image from the ciphertext image. This measurement value is calculated through a specific mathematical model to ensure that the performance of the algorithm in this aspect meets the requirements.

[0147] 3. Redundant Strategy Vector:

[0148] r1 (ratio of redundant data to original data): Due to the high reliability requirements of forest fire prevention image transmission, a certain proportion of redundant data may be added, such as a 10% redundant data ratio. These redundant data can be image checksum information, partially repeated image feature data, etc., which are used to detect and correct data errors during transmission.

[0149] r2 (distribution index of redundant data): reasonable distribution of redundant data in image data, so that the redundant data is evenly distributed in different areas of the image. For example, redundant data is distributed according to pixel blocks or rows of the image through a specific encoding method to ensure that data can be effectively restored when local data is lost or damaged. The distribution index is determined according to the specific encoding scheme.

[0150] 2. Transmission Resource Constraint Vector

[0151] o1 (Available bandwidth): Forest fire monitoring points are usually located in remote mountainous areas, where the network infrastructure is relatively weak and the available bandwidth is limited, which may be only a few megabits or even lower. For example, in some mountainous areas where there is no network coverage, or the uplink bandwidth may be only 2-3Mbps, this poses a great challenge to the return speed and encryption processing of image data.

[0152] o2 (maximum transmission delay): Since forest fire prevention requires high timeliness of image data, the maximum transmission delay of image return needs to be controlled within a certain range, for example, no more than 10 seconds. Otherwise, the delay will be too high, resulting in outdated image information obtained by the command center, and it will be impossible to make accurate fire response decisions in a timely manner.

[0153] 3. Encryption System and Transmission Resources

[0154] 1. Internal impact matrix of encryption system

[0155] Element alpha ij and βij :For example, an increase in the key length (k1 change) may have a positive impact on the degree of confusion diffusion (a2) of the algorithm, with α 1,2 Through experiments and theoretical analysis, it is determined to be a positive value, indicating that at the current actual impact level, the increase in key length helps to improve the obfuscation diffusion effect of the algorithm. At the potential impact trend level, β 1,2 It is also estimated to be a positive value because with the development of cryptographic technology, the positive correlation between long keys and algorithm performance may be further strengthened.

[0156] 2. Encryption-Transmission Resource Association Matrix

[0157] element γ ij and δ ij : For example, the increase in the redundant data ratio (r1) will have a greater impact on the available bandwidth (t1), γ 3,1 is a negative value because redundant data will occupy additional bandwidth resources. In terms of potential impact trends, with the development of data compression technology and network optimization technology, δ 3,1 It may gradually change to a positive value, indicating that the impact of redundant data on bandwidth may be alleviated in the future.

[0158] 3. Transmission resource mutual leasing matrix

[0159] Element ε ij and ij :For example, an increase in bandwidth (t1) may reduce the transmission delay (t2), ε 1,2 is a negative value, indicating a negative correlation between the actual bandwidth and the transmission delay. 1,2 It is also negative and the absolute value may increase.

[0160] Solve it through optimization algorithm according to the above assignment (For example, try to adjust the transmission time window, optimize the data block size to adapt to bandwidth changes, etc.) to maximize the data security metric S. In actual operation, the security and transmission efficiency of image transmission are continuously monitored, and the parameters of the encryption system (such as key update frequency, redundant data strategy adjustment, etc.) and the use of transmission resources (such as switching transmission links or adjusting data transmission priorities according to network congestion) are dynamically adjusted according to real-time conditions to ensure that forest fire prevention images can be safely and timely transmitted to the command center under limited transmission resources, providing reliable data support for forest fire prevention work.

[0161] The method described in the present invention is applicable to any field such as forest fire prevention, ecological protection, smart cities, public safety, emergency safety, campus safety, finance, logistics warehousing, smart parks, power storage, agricultural production, public health, medical health, etc.

[0162] In one embodiment, the sending end encrypts the pre-transmission data according to the data importance level, data security level and security encryption system, and transmits the encrypted pre-transmission data to the receiving end, including:

[0163] Obtain pre-transmission data size, packet size, padding size, key length and related overhead and coding efficiency coefficient;

[0164] Calculate the number of packets according to the pre-transmission data size, the padding size and the packet size;

[0165] Calculate the size of uncoded encrypted data based on the coding efficiency coefficient, the block size, the key length and the related overhead;

[0166] Calculate the minimum amount of transmission resources according to the coding efficiency coefficient and the size of the uncoded encrypted data;

[0167] Dynamically adjust the resources occupied by the security encryption and decryption system and the data transmission resources through the minimum transmission resource quantity;

[0168] The sending end encrypts the pre-transmitted data according to the data importance level, data security level and security encryption level of the pre-transmitted data using the adjusted security encryption and decryption system to occupy resources and data transmission resources, and transmits the encrypted transmission data to the receiving end.

[0169] In this embodiment, the pre-transmission data size S is obtained. original , packet size B, padding size P, the padding size depends on the remainder of the pre-transmitted data to the packet size and the specific padding rule, which can be expressed as P = (nB-S original )%B, where % represents the modulo operation, n is the number of packets, the key length and related overhead O and the coding efficiency coefficient α, reflecting the minimum compression degree after coding, 0<α≤. According to the pre-transmission data size S original , fill size P and group size B to calculate the number of groups in, The uncoded encrypted data size S is calculated based on the coding efficiency coefficient α, the block size B, the key length and the related overhead O. encrypted_unencoded , S encrypted_unencoded =nB+O. According to the coding efficiency coefficient α and the size of the uncoded encrypted data S encrypted_unencoded Calculate the minimum number of transmission resources S encrypted_encoded , S encrypted_encoded =α×S encrypted_unencoded =α×(nB+O). like Figure 5As shown, the resources occupied by the security encryption and decryption system and the data transmission resources are dynamically adjusted through the minimum number of transmission resources. The sender uses the adjusted security encryption and decryption system resources and data transmission resources to encrypt the pre-transmitted data according to the data importance level, data security level and security encryption level of the pre-transmitted data, and transmits the encrypted transmission data to the receiving end.

[0170] Furthermore, this encryption formula is applicable to the changes in data volume caused by different combinations of security processing methods including but not limited to symmetric encryption, asymmetric encryption, full encryption, partial encryption, dynamic encryption, static encryption, desensitized encryption, and no encryption. It is applicable to international algorithms including but not limited to RSA, AES and China SM series encryption and decryption algorithms. A method that automatically arranges data security levels and security encryption and decryption systems, and calculates the minimum transmission resources required. After calculating the minimum transmission resources required, the transmission resources can be dynamically adjusted to ensure reliable and stable secure transmission.

[0171] In one embodiment, the sending end encrypts the pre-transmission data according to the data importance level, data security level and security encryption system, and transmits the encrypted pre-transmission data to the receiving end, including:

[0172] Construct a complex matrix A according to the computational resource vector and the time resource vector;

[0173] Construct a complex matrix B according to the computational resource vector, the time resource vector and the transmission resource vector;

[0174] Constructing a complex matrix D according to the transmission resource vector;

[0175] Constructing a comprehensive encryption and decryption resource vector U according to the computing resource vector and the time resource vector;

[0176] Calculate the data security level metric according to the complex matrix A, the complex matrix B, the complex matrix D, the comprehensive encryption and decryption resource vector U and the adjustment vector R;

[0177] The data security level, the resources occupied by the security encryption and decryption system and the data transmission resources are balanced by the data security level measurement;

[0178] According to the data importance level, the balanced data security level and the security encryption level, the pre-transmission data is encrypted using the balanced security encryption and decryption system occupying resources and data transmission resources, and the encrypted transmission data is transmitted to the receiving end.

[0179] In this embodiment, the data security level measurement value is assumed to be S=a+bi, the real part a represents a quantifiable measurement of the current actual data security protection level, and the imaginary part b represents the potential development trend of the data security level in the future or the estimated ability to deal with unknown risks.

[0180] The resource vector is Where ci represents the usage of the i-th computing resource during the encryption and decryption process. For example, c1 can be the CPU usage (expressed in percentage), c2 is the memory usage (in bytes), etc., and m is the number of computing resource types.

[0181] Assume that the time resource vector is where t j It represents the jth time resource parameter consumed by the encryption and decryption operations, such as t1 is the average time (in seconds) to encrypt a single data block, t2 is the time required for key generation, etc., and n is the number of time resource related factors.

[0182] Assume the transmission resource vector is where r k An indicator representing the type of transmission resource, for example, r1 is the available bandwidth (in bits per second), r2 is the transmission delay (in milliseconds), and p is the number of transmission resource types.

[0183] According to the computing resource vector and the time resource vector, a (m+n)×2 complex matrix A is constructed, whose element a ij =α ij +β ij , where α ij Represents the i-th encryption and decryption resource factor (from ) on the jth dimension (where j = 1 corresponds to the real part) of the data security level (the current actual security level), β ij Indicates the impact weight on the imaginary part (potential safety trend). For example, a 11 (corresponding to the impact of c1 on a) may represent the weight of the impact of the increase in CPU usage on the current actual data security level, which is determined through a large number of experiments and theoretical analysis.

[0184] According to the computational resource vector, the time resource vector and the transmission resource vector, a (m+n)×p complex matrix B is constructed, whose element b ij =γ ij +δ ij , where γ ij represents the interaction between the i-th encryption and decryption resource factor and the j-th transmission resource factor in the data processing and transmission process. 11 (corresponding to c1 and r1) represents the weight of the impact of CPU usage on bandwidth utilization efficiency, γ 11 is the impact at the current actual level, δ11 Influenced by potential trends.

[0185] According to the transmission resource vector, a p×p complex matrix D is constructed, whose element d ij =ε ij +ζ ij i, where ε ij represents the influence weight of the i-th transmission resource on the j-th transmission resource in the real part (the current actual interaction level), ζ ij represents the weight of the impact at the imaginary part (potential or trend interaction level). For example, d 12 represents the actual impact weight of bandwidth change on transmission delay, ζ ij Indicates the impact of potential changing trends.

[0186] Construct a comprehensive encryption and decryption resource vector based on the computing resource vector and the time resource vector The relationship between data security level and various factors can be expressed as:

[0187]

[0188] in is a p×1 adjustment vector, whose element Δr j It represents the adjustment amount for the jth transmission resource, which can be solved by the optimization algorithm to balance the data security level, encryption and decryption resource occupancy and transmission resources in a dynamic environment. The multiplication operation "×" here can be defined as a high-order operation based on information theory and resource allocation theory, for example:

[0189]

[0190] Where q is a vector The dimensions (in the above formula, they correspond to dimensions).

[0191] In practical applications, determining the elements in matrices A, B, and D requires a large amount of experimental data, a deep understanding of data security technology and resource management, and a thorough grasp of network transmission principles, and through continuous monitoring and adjustment As well as the parameters of the encryption and decryption system (such as algorithm selection, key management strategy, etc.) to adapt to different application scenarios and resource changes, so as to achieve a dynamic balance between data security, encryption and decryption resource occupancy and transmission resources.

[0192] like Figure 6As shown, finally, according to the data importance level, the balanced data security level and the security encryption level, the balanced security encryption and decryption system occupies resources and data transmission resources to encrypt the pre-transmitted data, and transmit the encrypted transmission data to the receiving end, using the minimum transmission resources to ensure the optimal data security strategy in different scenarios, effectively saving security encryption and decryption resources and transmission resources, so as to achieve the purpose of improving efficiency and saving costs.

[0193] A device for information source encryption and channel coding based on information entropy and dynamic channels, the device comprising:

[0194] Importance and security module 11, configured to determine, by the transmitting end, the data importance level of the pre-transmission data according to the first AI model, and classify the data security level of the pre-transmission data according to the data importance level;

[0195] The encryption system matching module 12 is used to match the security encryption system according to the data security level through the first AI model.

[0196] A data encryption module 13, used for the sending end to encrypt the pre-transmission data according to the data importance level, data security level and security encryption system, and transmit the encrypted pre-transmission data to the receiving end;

[0197] The data decryption module 14 is used for the receiving end to decrypt the received pre-transmission data according to the data importance level, data security level and security encryption system to obtain transmission data.

[0198] like Figure 7 As shown, the importance and security module 11, the encryption system matching module 12, the data encryption module 13 and the data decryption module 14 are connected in sequence. The module referred to in the present invention refers to a series of computer program instruction segments that can perform specific functions, which are more suitable for the execution process of source encryption and channel coding based on information entropy and dynamic channels than the program. For the specific implementation of each module, please refer to the corresponding method embodiment above, which will not be repeated here.

[0199] In one embodiment, the importance and security module 11 includes:

[0200] A model training unit, used to collect a training data set, and input the training data set into a first AI model, so that the first AI model performs feature extraction on the training data set;

[0201] A clustering analysis unit, used to perform cluster analysis on the extracted features by using a clustering algorithm, output a clustering result, and determine the importance level of the data according to the clustering result;

[0202] A data importance level unit, configured to classify the input pre-transmission data into data importance levels by the first AI model, and output the data importance level of the pre-transmission data;

[0203] A data security level unit is used to classify the data security level of the pre-transmission data according to the data importance level through the first AI model, and output the data security level of the pre-transmission data.

[0204] In one embodiment, the encryption system matching module 12 includes:

[0205] The encryption combination system unit is used to encrypt the collected test data and input the encrypted test data into the encryption combination system model;

[0206] A data security feature unit, used for analyzing the test data by the encryption combination system model to obtain data security features;

[0207] A security encryption level unit, used to perform encryption security assessment on the test data according to the data security characteristics and output a security encryption level;

[0208] A security encryption system unit is used to match the security encryption system of the pre-transmitted data through the security encryption level and the data security level.

[0209] In one embodiment, the security encryption system unit includes:

[0210] Pre-constructing reconstruction adjustment vectors;

[0211] Construct a complex adjustment matrix based on key length, encryption algorithm complexity and system protection measures;

[0212] Combining the reconstruction adjustment vector and the complex adjustment matrix to obtain a reconstruction comprehensive vector;

[0213] The security encryption level is calculated by reconstructing the comprehensive vector, and the security encryption system of the pre-transmitted data is matched according to the security encryption level and the data security level.

[0214] In one embodiment, the security encryption system unit further includes:

[0215] Construct a complex matrix I according to the key characteristic vector, the limited transmission resource vector and the honor strategy vector;

[0216] Construct a complex matrix T according to the key characteristic vector, the algorithm strength vector, the honor strategy vector and the limited transmission resource vector;

[0217] Constructing a complex matrix U according to the algorithm strength vector;

[0218] Constructing a comprehensive encryption system vector E according to the key characteristic vector, the algorithm strength vector and the honor strategy vector;

[0219] Calculate the data security metric value according to the comprehensive encryption system vector E, the complex matrix I, the complex matrix T, the complex matrix U and the adjustment vector O;

[0220] The security encryption system of the pre-transmitted data is dynamically matched according to the data security metric value, the security encryption level and the data security level.

[0221] In one embodiment, the data encryption module 13 includes:

[0222] Obtaining key data units for obtaining pre-transmission data size, packet size, padding size, key length and related overhead and coding efficiency coefficient;

[0223] A packet quantity unit, used to calculate the packet quantity according to the pre-transmission data size, the padding size and the packet size;

[0224] An uncoded encrypted data unit, used to calculate the uncoded encrypted data size according to the coding efficiency coefficient, the block size and the key length and the related overhead;

[0225] A minimum transmission resource quantity unit, used to calculate the minimum transmission resource quantity according to the coding efficiency coefficient and the size of the uncoded encrypted data;

[0226] A resource adjustment unit, used to dynamically adjust the resources occupied by the security encryption and decryption system and the data transmission resources through the minimum transmission resource quantity;

[0227] The data transmission unit is used for the sending end to encrypt the pre-transmitted data according to the data importance level, data security level and security encryption level of the pre-transmitted data, using the adjusted security encryption and decryption system to occupy resources and data transmission resources, and transmit the encrypted transmission data to the receiving end.

[0228] In one embodiment, the data encryption module 13 includes:

[0229] A first matrix unit, used to construct a complex matrix A according to a computing resource vector and a time resource vector;

[0230] A second matrix unit, used to construct a complex matrix B according to the calculation resource vector, the time resource vector and the transmission resource vector;

[0231] A third matrix unit, configured to construct a complex matrix D according to the transmission resource vector;

[0232] A resource vector unit, used to construct a comprehensive encryption and decryption resource vector U according to the computing resource vector and the time resource vector;

[0233] A data security level measurement unit, used to calculate the data security level measurement according to the complex matrix A, the complex matrix B, the complex matrix D, the comprehensive encryption and decryption resource vector U and the adjustment vector R;

[0234] A data balancing unit, used to balance the data security level, the resources occupied by the security encryption and decryption system, and the data transmission resources through the data security level measurement;

[0235] The data transmission unit is used to encrypt the pre-transmission data according to the data importance level, the balanced data security level and the security encryption level, using the balanced security encryption and decryption system occupied resources and data transmission resources, and transmit the encrypted transmission data to the receiving end.

[0236] Another embodiment of the present invention provides a system for source encryption and channel coding based on information entropy and dynamic channels, the system comprising at least one processor; and

[0237] a memory communicatively connected to the at least one processor; wherein,

[0238] The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can perform the method of source encryption and channel coding based on information entropy and dynamic channel.

[0239] One or more processors 110 and memory 120, Figure 8 A processor 110 is used as an example for description. The processor 110 and the memory 120 may be connected via a bus or other means. Figure 8 The example of connecting through bus is taken in the following.

[0240] The processor 110 is used to complete various control logics of the control system 10. It can be a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field programmable gate array (FPGA), a single-chip microcomputer, an ARM (Acorn RISC Machine) or other programmable logic device, a discrete gate or transistor logic, a discrete hardware component, or any combination of these components. In addition, the processor 110 can also be any traditional processor, microprocessor or state machine. The processor 110 can also be implemented as a combination of computing devices, for example, a combination of a DSP and a microprocessor, a plurality of microprocessors, one or more microprocessors combined with a DSP and / or any other such configuration.

[0241] The memory 120, as a non-volatile computer-readable storage medium, can be used to store non-volatile software programs, non-volatile computer executable programs and modules, such as program instructions corresponding to the method for source encryption and channel coding based on information entropy and dynamic channels in the embodiment of the present invention. The processor 110 executes various functional applications and data processing of the control system 10 by running the non-volatile software programs, instructions and units stored in the memory 120, that is, the method for source encryption and channel coding based on information entropy and dynamic channels in the above method embodiment is implemented.

[0242] The memory 120 may include a program storage area and a data storage area, wherein the program storage area may store an operating system and an application required by at least one function; the data storage area may store data created according to the use of the control system 10, etc. In addition, the memory 120 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other non-volatile solid-state storage device. In some embodiments, the memory 120 may optionally include a memory remotely arranged relative to the processor 110, and these remote memories may be connected to the control system 10 via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0243] One or more units are stored in the memory 120, and when executed by one or more processors 110, the method of source encryption and channel coding based on information entropy and dynamic channel in any of the above method embodiments is executed, for example, the method described above is executed. Figure 1 The method comprises steps S100 to S400.

[0244] An embodiment of the present invention provides a non-volatile computer-readable storage medium, wherein the computer-readable storage medium stores computer-executable instructions, and the computer-executable instructions are executed by one or more processors, for example, to execute the above-described Figure 1 The method comprises steps S100 to S400.

[0245] As an example, non-volatile storage media can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable ROM (EEPROM), or flash memory. Volatile memory can include random access memory (RAM) as external cache memory. By way of illustration and not limitation, RAM can be obtained in many forms such as synchronous RAM (SRAM), dynamic RAM, (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), Synchlink DRAM (SLDRAM), and direct Rambus RAM (DRRAM). The disclosed memory components or memories of the operating environment described herein are intended to include one or more of these and / or any other suitable types of memory.

[0246] In summary, the method and medium for source encryption and channel coding based on information entropy and dynamic channels disclosed in the present invention include: the sending end determines the data importance level of the pre-transmitted data according to the first AI model, and divides the pre-transmitted data into data security levels according to the data importance level; matches the security encryption system according to the data security level through the first AI model; the sending end encrypts the transmission data through the data importance level, data security level and security encryption system, and transmits the encrypted transmission data to the receiving end; the receiving end decrypts the received transmission data according to the data importance level, data security level and security encryption system to obtain the transmission data. The present invention automatically evaluates the importance of data and matches the corresponding encryption level through the AI ​​model, realizes dynamic encrypted transmission of data, reduces data security transmission resources and avoids key leakage, and improves transmission efficiency and security.

[0247] Of course, those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be implemented by instructing related hardware (such as a processor, a controller, etc.) through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium, and the computer program can include the processes of the above-mentioned method embodiments when executed. The storage medium can be a memory, a disk, a floppy disk, a flash memory, an optical storage device, etc.

[0248] It should be understood that the application of the present invention is not limited to the above examples. For ordinary technicians in this field, improvements or changes can be made based on the above description. All these improvements and changes should fall within the scope of protection of the claims attached to the present invention.

Claims

1. A method for source encryption and channel coding based on information entropy and dynamic channels, characterized in that: The steps include: The transmitting end determines the data importance level of the pre-transmission data according to the first AI model, and classifies the data security level of the pre-transmission data according to the data importance level; Matching a security encryption system according to the data security level through a first AI model; The sending end encrypts the pre-transmission data according to the data importance level, data security level and security encryption system, and transmits the encrypted pre-transmission data to the receiving end; The receiving end decrypts the received pre-transmission data according to the data importance level, data security level and security encryption system to obtain transmission data.

2. The method for source encryption and channel coding based on information entropy and dynamic channel according to claim 1, characterized in that: The transmitting end determines the data importance level of the transmission data according to the first AI model, and classifies the data security level of the transmission data according to the data importance level, including: Collecting a training data set, and inputting the training data set into a first AI model, so that the first AI model performs feature extraction on the training data set; Performing cluster analysis on the extracted features through a clustering algorithm, outputting clustering results, and determining the importance level of the data according to the clustering results; The first AI model classifies the input pre-transmission data into data importance levels, and outputs the data importance levels of the pre-transmission data; The first AI model is used to classify the pre-transmission data into data security levels according to the data importance level, and outputs the data security level of the pre-transmission data.

3. The method for source encryption and channel coding based on information entropy and dynamic channel according to claim 1, characterized in that: The matching of the security encryption system according to the data security level by the first AI model includes: Encrypting the collected test data and inputting the encrypted test data into the encryption combination system model; Analyzing the test data by the encryption combination system model to obtain data security characteristics; Perform encryption security assessment on the test data according to the data security characteristics, and output a security encryption level; The security encryption system of the pre-transmission data is matched by the security encryption level and the data security level.

4. The method for source encryption and channel coding based on information entropy and dynamic channel according to claim 3 is characterized in that: The security encryption system for matching the pre-transmitted data by the security encryption level and the data security level includes: Pre-constructing reconstruction adjustment vectors; Construct a complex adjustment matrix based on key length, encryption algorithm complexity and system protection measures; Combining the reconstruction adjustment vector and the complex adjustment matrix to obtain a reconstruction comprehensive vector; The security encryption level is calculated by reconstructing the comprehensive vector, and the security encryption system of the pre-transmitted data is matched according to the security encryption level and the data security level.

5. The method for source encryption and channel coding based on information entropy and dynamic channel according to claim 3 is characterized in that: The security encryption system for matching the pre-transmitted data by the security encryption level and the data security level includes: Construct a complex matrix I according to the key characteristic vector, the limited transmission resource vector and the honor strategy vector; Construct a complex matrix T according to the key characteristic vector, the algorithm strength vector, the honor strategy vector and the limited transmission resource vector; Constructing a complex matrix U according to the algorithm strength vector; Constructing a comprehensive encryption system vector E according to the key characteristic vector, the algorithm strength vector and the honor strategy vector; Calculate the data security metric value according to the comprehensive encryption system vector E, the complex matrix I, the complex matrix T, the complex matrix U and the adjustment vector O; The security encryption system of the pre-transmitted data is dynamically matched according to the data security metric value, the security encryption level and the data security level.

6. The method for source encryption and channel coding based on information entropy and dynamic channel according to claim 1, characterized in that: The sending end encrypts the pre-transmission data according to the data importance level, the data security level and the security encryption system, and transmits the encrypted pre-transmission data to the receiving end, including: Obtain pre-transmission data size, packet size, padding size, key length and related overhead and coding efficiency coefficient; Calculate the number of packets according to the pre-transmission data size, the padding size and the packet size; Calculate the size of uncoded encrypted data based on the coding efficiency coefficient, the block size, the key length and the related overhead; Calculate the minimum amount of transmission resources according to the coding efficiency coefficient and the size of the uncoded encrypted data; Dynamically adjust the resources occupied by the security encryption and decryption system and the data transmission resources through the minimum transmission resource quantity; The sending end encrypts the pre-transmitted data according to the data importance level, data security level and security encryption level of the pre-transmitted data using the adjusted security encryption and decryption system to occupy resources and data transmission resources, and transmits the encrypted transmission data to the receiving end.

7. The method for source encryption and channel coding based on information entropy and dynamic channel according to claim 1, characterized in that: The sending end encrypts the pre-transmission data according to the data importance level, the data security level and the security encryption system, and transmits the encrypted pre-transmission data to the receiving end, including: Construct a complex matrix A according to the computational resource vector and the time resource vector; Construct a complex matrix B according to the computational resource vector, the time resource vector and the transmission resource vector; Constructing a complex matrix D according to the transmission resource vector; Constructing a comprehensive encryption and decryption resource vector U according to the computing resource vector and the time resource vector; Calculate the data security level metric according to the complex matrix A, the complex matrix B, the complex matrix D, the comprehensive encryption and decryption resource vector U and the adjustment vector R; The data security level, the resources occupied by the security encryption and decryption system and the data transmission resources are balanced by the data security level measurement; According to the data importance level, the balanced data security level and the security encryption level, the pre-transmission data is encrypted using the balanced security encryption and decryption system occupying resources and data transmission resources, and the encrypted transmission data is transmitted to the receiving end.

8. A device for source encryption and channel coding based on information entropy and dynamic channels, characterized in that: The device comprises: An importance and security module, in which the sending end determines the data importance level of the pre-transmission data according to the first AI model, and classifies the data security level of the pre-transmission data according to the data importance level; An encryption system matching module is used to match the security encryption system according to the data security level through the first AI model A data encryption module, used for the sending end to encrypt the pre-transmission data according to the data importance level, data security level and security encryption system, and transmit the encrypted pre-transmission data to the receiving end; The data decryption module is used for the receiving end to decrypt the received pre-transmission data according to the data importance level, data security level and security encryption system to obtain the transmission data.

9. A system for source encryption and channel coding based on information entropy and dynamic channels, characterized in that: The system includes at least one processor; and, a memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the method of source encryption and channel coding based on information entropy and dynamic channel as described in any one of claims 1-7.

10. A non-volatile computer-readable storage medium, characterized in that: The non-volatile computer-readable storage medium stores computer-executable instructions, which, when executed by one or more processors, enable the one or more processors to execute the method of source encryption and channel coding based on information entropy and dynamic channels as described in any one of claims 1-7.

Images