Network data security information transmission method and system

Abstract

The invention provides a network data security information transmission method and system, and belongs to the technical field of data security. In the method, a data management center receives a data acquisition request from user equipment in a non-trusted domain; the data management center acquires user related data requested by the user equipment from a network database according to the data acquisition request; the data management center carries out multiple times of security protection on the user related data to obtain the user related data subjected to security protection, the multiple times of security protection comprises at least one time of true security protection and at least one time of false security protection, and the sequence between the at least one time of true security protection and the at least one time of false security protection is a preset sequence; the preset sequence is information that the user equipment is aligned with the data management center; and the data management center sends the user related data subjected to security protection to the user equipment.

Description

Technical Field

[0001] The present application relates to the field of data security technology, and in particular to a method and system for transmitting network data security information. Background Art

[0002] With the popularization and application of the Internet of Things, cloud computing and 5G technologies, the amount of global data is rapidly expanding at a compound annual growth rate of 60%. IDC forecasts that by 2025, the total amount of global data will reach 175ZB, of which more than 80% involves user privacy information. While data elements drive the development of the digital economy, their security protection has become a key bottleneck restricting the development of information technology. In 2022 alone, the global economic losses caused by data leaks will reach 435 million US dollars.

[0003] In the management of the entire life cycle of data, security risks present multi-dimensional characteristics. The transport layer faces network threats such as man-in-the-middle attacks and DNS hijacking. Although the TLS1.3 protocol upgrades the encryption algorithm to AES-GCM, the development of quantum computing is weakening the reliability of traditional asymmetric encryption. Database vulnerabilities in the storage link cause 60% of data leaks. Even with the use of transparent data encryption technology (TDE), improper key management may still cause systemic risks. In terms of access control, the role-based permission model (RBAC) has been unable to meet the needs of the zero-trust architecture, and the dynamic risk assessment model needs to integrate user behavior analysis (UEBA) technology.

[0004] Therefore, how to further improve the security of data transmission is a current research issue. Summary of the invention

[0005] The embodiments of the present application provide a network data security information transmission method and system to improve the security of user-related data transmission.

[0006] In order to achieve the above purpose, this application adopts the following technical solutions:

[0007] In a first aspect, an embodiment of the present application provides a method for transmitting network data security information, which is applied to a data management center in a trusted domain, and the method includes: the data management center receives a data acquisition request from a user device in a non-trusted domain; the data management center obtains user-related data requested by the user device from a network database according to the data acquisition request; the data management center performs multiple security protections on the user-related data to obtain securely protected user-related data, wherein the multiple security protections include at least one true security protection and at least one false security protection, and the order between the at least one true security protection and the at least one false security protection is a preset order, and the preset order is information that aligns the user device with the data management center; the data management center sends the securely protected user-related data to the user device.

[0008] Optionally, the data management center performs security protection on the user-related data multiple times to obtain securely protected user-related data, including: the data management center determines that the number of multiple security protections for the user-related data is K based on information about the user-related data and the user device, where K is an integer greater than 2; the data management center performs security protection on the user-related data K times in a preset order to obtain securely protected user-related data.

[0009] Optionally, the data management center determines that the number of multiple security protections for the user-related data is K based on the information of the user-related data and the user device, including: the data management center determines that the number of multiple security protections for the user-related data is K based on the security level corresponding to the type of the user-related data and the trust level corresponding to the non-trusted domain indicated by the information of the user device.

[0010] Optionally, if the security level corresponding to the type of user-related data is higher than the trusted level corresponding to the non-trusted domain, then the correlation between K and the trusted level corresponding to the non-trusted domain is such that the lower the trusted level corresponding to the non-trusted domain, the larger the value of K; if the security level corresponding to the type of user-related data is lower than the trusted level corresponding to the non-trusted domain, then the correlation between K and the security level corresponding to the type of user-related data is such that the lower the security level corresponding to the type of user-related data, the larger the value of K.

[0011] Optionally, the data management center includes M security proxy entities, M is an integer greater than 2, and the value of K does not exceed M, each of the M security proxy entities is used to perform closed security protection on the data, and the data management center performs K times of security protection on the user-related data in a preset order to obtain the securely protected user-related data, including: the application layer of the data management center sends the user-related data to the first K security proxy entities of the M security proxy entities according to the sequence numbers of the M security proxy entities; the application layer of the data management center sends security protection rules to the first K security proxy entities according to the preset order, and the security protection rules received by each of the first K security proxy entities are used to indicate: whether to perform true security protection or false security protection on the user-related data; the first K security proxy entities perform security protection on the user-related data in accordance with the security protection rules they receive, and perform K times of security protection to obtain the securely protected user-related data.

[0012] Optionally, the first K security proxy entities perform security protection on the user-related data in accordance with the security protection rules they have received, and perform K times of security protection to obtain the securely protected user-related data, including: when K=2, the first K security proxy entities include the first security proxy entity and the second security proxy entity; thereby: the first security proxy entity uses the real key of the user device to encrypt the user-related data to obtain the first encrypted data; and the second security proxy entity uses the fake key of the user device to encrypt the user-related data to obtain the second encrypted data; the securely protected user-related data includes the first encrypted data and the second encrypted data; wherein the real key is the key aligned between the data management center and the user device, and the fake key is obtained by the application layer of the data management center randomly extracting part of the information from the real key, the application layer of the data management center passes the real key to the first security proxy entity, and passes the fake key to the second security proxy entity; the user devices both use the real key to decrypt the first encrypted data and the second encrypted data, and the user devices determine that the decryption ends according to the failure of decryption of the second encrypted data.

[0013] Optionally, the first K security proxy entities perform security protection on the user-related data according to the security protection rules they have received, and perform K times of security protection to obtain the securely protected user-related data, including: in the case of K=3, the first K security proxy entities include the first security proxy entity, the second security proxy entity and the third security proxy entity; thereby: the first security proxy entity uses the first fake key of the user device to encrypt the user-related data to obtain first encrypted data; the second security proxy entity uses the real key of the user device to encrypt the user-related data to obtain second encrypted data; and the third security proxy entity uses the second fake key of the user device to encrypt the user-related data to obtain third encrypted data; the securely protected user-related data includes the first encrypted data, the second encrypted data and the third encrypted data; wherein, the real key is the key aligned between the data management center and the user device, the application layer of the data management center divides the real key into a first fake key and a second fake key, the application layer of the data management center configures the first fake key to the first security proxy entity, and configures the second fake key to the second security proxy entity and the third security proxy entity respectively, during the encryption process, the first security proxy entity securely transfers the first fake key to the second security proxy entity through the security protocol between the first security proxy entity and the second security proxy entity, so that the second security proxy entity splices the first fake key and the second fake key to obtain the real key; the user device uses the real key to decrypt the first encrypted data, the second encrypted data and the third encrypted data, and the user device determines that the decryption ends according to the failure of decryption of the third encrypted data.

[0014] Optionally, the first K security proxy entities perform security protection on the user-related data according to the security protection rules they have received, and perform K times of security protection to obtain the securely protected user-related data, including: in the case of K=3, the first K security proxy entities include the first security proxy entity, the second security proxy entity, the third security proxy entity and the fourth security proxy entity; thereby: the first security proxy entity uses the first fake key of the user device to encrypt the user-related data to obtain the first encrypted data; the second security proxy entity uses the real key of the user device to encrypt a part of the user-related data to obtain the second encrypted data; the third security proxy entity uses the real key of the user device to encrypt another part of the user-related data to obtain the third encrypted data; and the fourth security proxy entity uses the second fake key of the user device to encrypt the user-related data to obtain the fourth encrypted data; the securely protected user-related data includes the first encrypted data, the second encrypted data, the third encrypted data and the fourth encrypted data; wherein the real key is a key between the data management center and the user device. The application layer of the data management center divides the real key into a first fake key and a second fake key, and the application layer of the data management center configures the first fake key to the first security proxy entity, and configures the second fake key to the second security proxy entity, the third security proxy entity and the fourth security proxy entity respectively. During the encryption process, the first security proxy entity securely transfers the first fake key to the second security proxy entity through the security protocol between the first security proxy entity and the second security proxy entity, so that the second security proxy entity splices the first fake key and the second fake key to obtain the real key; and, during the encryption process, the first security proxy entity also securely transfers the first fake key to the third security proxy entity through the security protocol between the first security proxy entity and the third security proxy entity, so that the third security proxy entity splices the first fake key and the second fake key to obtain the real key; the user equipment uses the real key to decrypt the first encrypted data, the second encrypted data, the third encrypted data and the fourth encrypted data, and the user equipment determines that the decryption ends according to the failure of decryption of the fourth encrypted data.

[0015] Optionally, the data management center obtains the user-related data requested by the user device from the network database based on the data acquisition request, including: the data management center obtains the user-related data that satisfies at least one item of information from the network database based on at least one of the following information in the data acquisition request: the type of data requested by the user device, the data acquisition time requested by the user device, or the amount of data requested by the user device.

[0016] In the second aspect, an embodiment of the present application provides a network data security information transmission system, and the device is applied to a data management center in a trusted domain, and the data management center is configured as follows: the data management center receives a data acquisition request from a user device in a non-trusted domain; the data management center obtains the user-related data requested by the user device from a network database according to the data acquisition request; the data management center performs multiple security protections on the user-related data to obtain multiple encrypted user-related data, wherein the multiple security protections include at least one true security protection and at least one false security protection, and the order between the at least one true security protection and the at least one false security protection is a preset order, and the preset order is information that aligns the user device with the data management center; the data management center sends the securely protected user-related data to the user device.

[0017] In a third aspect, an embodiment of the present application provides a computer-readable storage medium having program code stored thereon. When the program code is executed by the computer, the method described in the first aspect is executed.

[0018] In summary, the above method and device have the following technical effects:

[0019] When the data management center receives a data acquisition request from a user device in a non-trusted domain, the data management center can perform multiple security protections on the acquired user-related data to obtain securely protected user-related data. Since the multiple security protections include at least one true security protection and at least one false security protection in a preset order, and the preset order is the information that aligns the user device and the data management center, when an attacker steals the securely protected user-related data, it will increase the difficulty of cracking and obtaining the user-related data because the false security protection is confused therein, thereby improving the security of user-related data transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Figure 1 A schematic diagram of the architecture of a data system provided in an embodiment of the present application;

[0021] Figure 2 A flowchart of a network data security information transmission method provided in an embodiment of the present application;

[0022] Figure 3 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0023] In the embodiment of the present invention, "indication" may include direct indication and indirect indication, and may also include explicit indication and implicit indication. The information indicated by a certain information is called information to be indicated. In the specific implementation process, there are many ways to indicate the information to be indicated, such as but not limited to, the information to be indicated can be directly indicated, such as the information to be indicated itself or the index of the information to be indicated. The information to be indicated can also be indirectly indicated by indicating other information, wherein there is an association relationship between the other information and the information to be indicated. It is also possible to indicate only a part of the information to be indicated, while the other parts of the information to be indicated are known or agreed in advance. For example, the indication of specific information can also be achieved by means of the arrangement order of each information agreed in advance (for example, specified by the protocol), thereby reducing the indication overhead to a certain extent. At the same time, the common parts of each information can also be identified and indicated uniformly to reduce the indication overhead caused by indicating the same information separately.

[0024] In addition, the specific indication method may also be various existing indication methods, such as but not limited to the above-mentioned indication methods and various combinations thereof. The specific details of the various indication methods can refer to the prior art and will not be repeated herein. As can be seen from the above, for example, when it is necessary to indicate multiple information of the same type, different indication methods may be used for different information. In the specific implementation process, the desired indication method can be selected according to specific needs. The embodiment of the present invention does not limit the selected indication method. In this way, the indication method involved in the embodiment of the present invention should be understood to cover various methods that can enable the party to be indicated to obtain the information to be indicated.

[0025] It should be understood that the information to be indicated can be sent as a whole or divided into multiple sub-information and sent separately, and the sending period and / or sending time of these sub-information can be the same or different. The specific sending method is not limited in the embodiment of the present invention. Among them, the sending period and / or sending time of these sub-information can be pre-defined, for example, pre-defined according to a protocol, or can be configured by the sending end device by sending configuration information to the receiving end device.

[0026] "Pre-definition" or "pre-configuration" can be implemented by pre-saving corresponding codes, tables or other methods that can be used to indicate relevant information in the device, and the embodiments of the present invention do not limit the specific implementation method. Among them, "saving" can mean saving in one or more memories. The one or more memories can be set separately or integrated in an encoder or decoder, a processor, or an electronic device. The one or more memories can also be partially set separately and partially integrated in a decoder, a processor, or an electronic device. The type of memory can be any form of storage medium, which is not limited by the embodiments of the present invention.

[0027] The "protocol" involved in the embodiments of the present invention may refer to a protocol family in the communication field, a standard protocol with a similar protocol family frame structure, or a related protocol in a reliable access method system for future Internet of Things devices, and the embodiments of the present invention do not specifically limit this.

[0028] In the embodiments of the present invention, descriptions such as "when...", "in the case of...", "if" and "if" all mean that the device will perform corresponding processing under certain objective circumstances, but do not limit the time, nor do they require the device to perform judgment actions when implementing, nor do they mean the existence of other limitations.

[0029] In the description of the embodiments of the present invention, unless otherwise specified, " / " indicates that the objects associated before and after are in an "or" relationship, for example, A / B can represent A or B; "and / or" in the embodiments of the present invention is only a kind of association relationship describing the associated objects, indicating that there can be three relationships, for example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone, where A and B can be singular or plural. In addition, in the description of the embodiments of the present invention, unless otherwise specified, "multiple" refers to two or more than two. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b or c can represent: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple. In addition, in order to facilitate the clear description of the technical solution of the embodiments of the present invention, in the embodiments of the present invention, the words "first" and "second" are used to distinguish the same items or similar items with basically the same functions and effects. Those skilled in the art will appreciate that words such as "first" and "second" do not limit the quantity and execution order, and words such as "first" and "second" do not necessarily limit the difference. At the same time, in the embodiments of the present invention, words such as "exemplary" or "for example" are used to indicate examples, illustrations or explanations. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present invention should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a concrete way for easy understanding.

[0030] The network architecture and business scenarios described in the embodiments of the present invention are intended to more clearly illustrate the technical solutions of the embodiments of the present invention, and do not constitute a limitation on the technical solutions provided by the embodiments of the present invention. A person of ordinary skill in the art can appreciate that with the evolution of the network architecture and the emergence of new business scenarios, the technical solutions provided by the embodiments of the present invention are equally applicable to similar technical problems.

[0031] The technical solution in this application will be described below in conjunction with the accompanying drawings.

[0032] See also Figure 2 , an embodiment of the present application provides a data system, which may include: a data management center and a user device.

[0033] The user equipment may be a terminal device, which may also be referred to as a user equipment (UE), an access terminal, a user unit, a user station, a mobile station, a mobile station, a remote station, a remote terminal, a mobile device, a user terminal, a terminal, a wireless communication device, a user agent or a user device. The terminal device in the embodiments of the present application may be a mobile phone, a tablet computer, a computer with a wireless transceiver function, a virtual reality (VR) terminal device, an augmented reality (AR) terminal device, a wireless terminal in industrial control, a wireless terminal in self-driving, a wireless terminal in remote medical, a wireless terminal in smart grid, a wireless terminal in transportation safety, a wireless terminal in smart city, a wireless terminal in smart home, a vehicle-mounted terminal, etc.

[0034] The data management center can be the equipment of the data provider, such as a server, server cluster, virtual server, virtual service cluster, etc., such as network functions virtualization (NFV). NFV includes: network functions virtualization infrastructure (NFVI), virtual network function (VNF), element management system (EMS), management, automation and network orchestration (MANO), etc.

[0035] The user device can be located in a non-trusted domain, while the data management center is located in a trusted domain.

[0036] The trusted domain is described from the perspective of the data provider. For example, the local area network / private network built by the data provider itself, the data management center is the device / function in the local area network / private network. Therefore, for the data provider, the local area network / private network is a trusted network, that is, a trusted domain.

[0037] An untrusted domain is a network other than the local area network / private network built by the data provider itself, such as the operating network accessed by the user device, such as the mobile public land network (PLMN), or the local area network or private network where the user device is located. Since these networks are not managed by the data provider itself, they can be called untrusted domains for the data provider.

[0038] The following will describe in detail the interaction between the user equipment and the data management center in the above system in combination with the method.

[0039] See also Figure 2 , the embodiment of the present application provides a method for transmitting network data security information. The method can be applied to communication between user equipment and a data management center. The process of the method includes:

[0040] S201: The data management center receives a data acquisition request from a user device in an untrusted domain.

[0041] The data acquisition request may include information about the user device, and the information about the user device may indicate the identity of the user device, such as including the identity of the user device (such as the account key registered by the user in the system of the data provider). The information about the user device may also indicate a non-trusted domain, such as including an identifier of a non-trusted domain, such as a PLMN ID or a local area network / private network ID.

[0042] The data acquisition request may also include at least one of the following information: the type of data requested by the user device (mandatory information), the data acquisition time requested by the user device (optional information), or the amount of data requested by the user device (optional information).

[0043] The user equipment can send a data acquisition request to the data management center in the trusted domain through the untrusted domain. For example, from the perspective of the untrusted domain, if the untrusted domain is a PLMN, the trusted domain can be a data network (DN), and the user equipment can send a data acquisition request to the DN through the user side of the PLMN, and the destination address of the data acquisition request is the address of the data management center.

[0044] S202: The data management center obtains the user-related data requested by the user device from the network database according to the data acquisition request.

[0045] The data management center can obtain user-related data that meets at least one of the following information from the network database according to at least one of the following information in the data acquisition request: the data type requested by the user device, the data acquisition time requested by the user device, or the data volume requested by the user device. The data type can be used to indicate what type of data you want to obtain, such as data of different services are different types of data, and the data type can be replaced by the type of service. The data acquisition time can be used to indicate the time period in which the data is generated. The data volume can indicate that the data volume of the user-related data you want to obtain does not exceed or is not less than a certain data volume threshold to avoid obtaining invalid data.

[0046] S203, the data management center performs multiple security protections on the user-related data to obtain the securely protected user-related data. S204, the data management center sends the securely protected user-related data to the user device.

[0047] Multiple security protections include at least one true security protection and at least one false security protection. The order between the at least one true security protection and the at least one false security protection is a preset order. The preset order is the information aligned between the user device and the data management center, that is, the data management center executes the true security protection and the false security protection according to the preset order, and the user device executes the security protection in sequence according to the preset order.

[0048] Specifically, S203 can be implemented through the following steps:

[0049] Step S1: The data management center determines the number of times of multiple security protection for user-related data is K based on the information of the user-related data and the user device, where K is an integer greater than 2.

[0050] For example, the data management center can determine the number of multiple security protections for user-related data to be K based on the security level corresponding to the type of user-related data and the trust level corresponding to the non-trusted domain indicated by the information of the user device. The security levels of different types of data can be the same or different without restriction. For example, the security level of user-related data for personal business can be lower than the security level of user-related data for corporate business. Similarly, the trust levels corresponding to different non-trusted domains can be the same or different without restriction. For example, PLMN#1 has signed a contract with the data provider, PLMN#2 has not signed a contract with the data provider, and local area network / private network#2 has not signed a contract with the data provider. Then the trust levels from high to low can be: PLMN#1, PLMN#2, local area network / private network#1, local area network / private network#2.

[0051] The number of security levels and the data of trust levels may be the same to ensure consistency of judgment.

[0052] On this basis, if the security level corresponding to the type of user-related data is higher than the trusted level corresponding to the non-trusted domain, then the correlation between K and the trusted level corresponding to the non-trusted domain is that the lower the trusted level corresponding to the non-trusted domain, the larger the value of K, that is, the value of K and the trusted level have a negative correlation; if the security level corresponding to the type of user-related data is lower than the trusted level corresponding to the non-trusted domain, then the correlation between K and the security level corresponding to the type of user-related data is that the lower the security level corresponding to the type of user-related data, the larger the value of K, that is, the value of K and the security level have a negative correlation.

[0053] Step S2: The data management center performs security protection on the user-related data K times in a preset order to obtain the securely protected user-related data.

[0054] The data management center includes M security proxy entities, where M is an integer greater than 2, and the value of K does not exceed M. Each of the M security proxy entities is used to perform closed security protection on the data (i.e., the execution of security protection is a black box to the outside world to further ensure data security). Correspondingly, the user equipment also includes M security proxy entities, each of which is used to perform closed security protection on the data.

[0055] On this basis, the application layer of the data management center sends the user-related data to the first K security proxy entities of the M security proxy entities according to the sequence numbers of the M security proxy entities. Afterwards, the application layer of the data management center can send security protection rules to the first K security proxy entities according to the preset order. The security protection rules received by each of the first K security proxy entities are used to indicate whether to perform true security protection or false security protection on the user-related data. Then, the first K security proxy entities can perform security protection on the user-related data according to the security protection rules they received, and perform K times of security protection to obtain the user-related data that is protected. The following explains the different situations.

[0056] Case 1:

[0057] When K=2, the first K security proxy entities include the first security proxy entity and the second security proxy entity; thus: the first security proxy entity uses the real key of the user device to encrypt the user-related data to obtain the first encrypted data; and the second security proxy entity uses the fake key of the user device to encrypt the user-related data to obtain the second encrypted data; the securely protected user-related data includes the first encrypted data and the second encrypted data; wherein the real key is the key aligned between the data management center and the user device (which can be understood as the key assigned to the user device when the user device is registered to the data management center), and the fake key is obtained by the application layer of the data management center randomly extracting part of the information from the real key, and the application layer of the data management center can pass the real key to the first security proxy entity, and pass the fake key to the second security proxy entity, wherein the transmission of the real key and the fake key is based on the security protocol to ensure the security of internal communication.

[0058] In addition, in the securely protected user-related data, the first encrypted data and the second encrypted data can be spliced, that is, encapsulated into a complete data, and the splicing of the first encrypted data and the second encrypted data can use preset characters with a low possibility of data conflict, such as the preset characters are a relatively long binary string 00110101010101, or other strings, such as AFASXAGSDGSCAF2194, and the preset characters are pre-aligned between the user device and the data management center. In this way, the user device can traverse and find the preset characters when receiving the securely protected user-related data, thereby decomposing the securely protected user-related data into the first encrypted data and the second encrypted data. However, the attacker usually does not know the preset characters, so even if the data is stolen, the data cannot be correctly segmented. At this time, the data is divided into two segments, and the user device uses the real key to decrypt the first encrypted data and the second encrypted data. For example, the user device can send the first encrypted data to the first security proxy entity of the user device, and send the second encrypted data to the second security proxy entity of the user device, so that these security proxy entities can each use a pre-configured true key to decode. At this time, the first encrypted data is decrypted successfully to obtain user-related data. The user device determines that the decryption is completed based on the failure to decrypt the second encrypted data, that is, if the decryption of the first encrypted data fails, the data transmission is considered to be completed, and the user device no longer waits to receive subsequent data from the data management center.

[0059] Case 2:

[0060] When K=3, the first K security proxy entities include the first security proxy entity, the second security proxy entity and the third security proxy entity; thus: the first security proxy entity uses the first false key of the user device to encrypt the user-related data to obtain the first encrypted data; the second security proxy entity uses the real key of the user device to encrypt the user-related data to obtain the second encrypted data; and the third security proxy entity uses the second false key of the user device to encrypt the user-related data to obtain the third encrypted data; the securely protected user-related data includes the first encrypted data, the second encrypted data and the third encrypted data.

[0061] Among them, the real key is the key aligned between the data management center and the user device, the application layer of the data management center divides the real key into a first fake key and a second fake key, the application layer of the data management center configures the first fake key to the first security proxy entity, and configures the second fake key to the second security proxy entity and the third security proxy entity respectively, during the encryption process, the first security proxy entity securely transfers the first fake key to the second security proxy entity through the security protocol between the first security proxy entity and the second security proxy entity, so that the second security proxy entity splices the first fake key and the second fake key to obtain the real key; the user device uses the real key to decrypt the first encrypted data, the second encrypted data and the third encrypted data, and the user device determines that the decryption ends according to the failure of decryption of the third encrypted data.

[0062] It should be understood that in case 2, the preset character between the first encrypted data and the second encrypted data may be different from the preset character between the second encrypted data and the third encrypted data to further improve data transmission security. In addition, in case 2, the logic of the user equipment performing decryption is similar to that of case 1, which can be understood by reference and will not be repeated here.

[0063] Case 3:

[0064] In the case of K=3, the first K security proxy entities include the first security proxy entity, the second security proxy entity, the third security proxy entity and the fourth security proxy entity; thus: the first security proxy entity uses the first fake key of the user device to encrypt the user-related data to obtain the first encrypted data; the second security proxy entity uses the real key of the user device to encrypt a part of the user-related data to obtain the second encrypted data; the third security proxy entity uses the real key of the user device to encrypt another part of the user-related data to obtain the third encrypted data; and the fourth security proxy entity uses the second fake key of the user device to encrypt the user-related data to obtain the fourth encrypted data; the securely protected user-related data includes the first encrypted data, the second encrypted data, the third encrypted data and the fourth encrypted data;

[0065] Among them, the real key is the key aligned between the data management center and the user device, the application layer of the data management center divides the real key into a first fake key and a second fake key, the application layer of the data management center configures the first fake key to the first security proxy entity, and configures the second fake key to the second security proxy entity, the third security proxy entity and the fourth security proxy entity respectively, during the encryption process, the first security proxy entity securely transfers the first fake key to the second security proxy entity through the security protocol between the first security proxy entity and the second security proxy entity, so that the second security proxy entity splices the first fake key and the second fake key to obtain the real key; and, during the encryption process, the first security proxy entity also securely transfers the first fake key to the third security proxy entity through the security protocol between the first security proxy entity and the third security proxy entity, so that the third security proxy entity splices the first fake key and the second fake key to obtain the real key; the user device uses the real key to decrypt the first encrypted data, the second encrypted data, the third encrypted data and the fourth encrypted data, and the user device determines that the decryption ends according to the failure of decryption of the fourth encrypted data. The user device may concatenate the data obtained by decrypting the second encrypted data with the data obtained by decrypting the third encrypted data, thereby obtaining user-related data.

[0066] It should be understood that in case 3, the preset characters between the first encrypted data and the second encrypted data, the preset characters between the second encrypted data and the third encrypted data, and the preset characters between the third encrypted data and the fourth encrypted data can be different to further improve data transmission security. In addition, in case 3, the logic of the user equipment performing decryption is similar to that of case 1, which can be understood by reference and will not be repeated here.

[0067] Of course, the above are three cases as examples, and K may also be 4, 5, etc. In addition, other conditions for ending decryption can be set. For example, the data management center can inform the user device of the value of K, so that the order between false encryption and true encryption can be more flexible. For example, when K=3, the preset order can be true encryption→false encryption→false encryption, false encryption→false encryption→true encryption.

[0068] In summary, when the data management center receives a data acquisition request from a user device in a non-trusted domain, the data management center can perform multiple security protections on the acquired user-related data to obtain securely protected user-related data. Since the multiple security protections include at least one true security protection and at least one false security protection in a preset order, and the preset order is the information that aligns the user device and the data management center, when an attacker steals the securely protected user-related data, it will increase the difficulty of cracking and obtaining the user-related data because the false security protection is confused therein, thereby improving the security of user-related data transmission.

[0069] Combination of the above Figure 2 The method provided by the embodiment of the present application is described in detail. The following introduces a network data security information transmission system for executing the method provided by the embodiment of the present application.

[0070] The device is applied to a data management center in a trusted domain, and the data management center is configured as follows: the data management center receives a data acquisition request from a user device in a non-trusted domain; the data management center acquires user-related data requested by the user device from a network database according to the data acquisition request; the data management center performs multiple security protections on the user-related data to obtain multiple encrypted user-related data, wherein the multiple security protections include at least one true security protection and at least one false security protection, and the order between the at least one true security protection and the at least one false security protection is a preset order, and the preset order is information that the user device is aligned with the data management center; the data management center sends the securely protected user-related data to the user device.

[0071] The specific implementation of the device can refer to the above method, which will not be described in detail here.

[0072] Combine the following Figure 3 The components of the electronic device 500 are described in detail:

[0073] The processor 501 is the control center of the electronic device 500, and may be a processor or a general term for multiple processing elements. For example, the processor 501 is one or more central processing units (CPUs), or may be application specific integrated circuits (ASICs), or may be configured to implement one or more integrated circuits of the embodiments of the present application, such as one or more microprocessors (digital signal processors, DSPs), or one or more field programmable gate arrays (FPGAs).

[0074] Optionally, the processor 501 can execute various functions of the electronic device 500 by running or executing the software program stored in the memory 502 and calling the data stored in the memory 502, as described above. Figure 3 Functionality in the method shown.

[0075] In a specific implementation, as an embodiment, the processor 501 may include one or more CPUs, such as Figure 3 CPU0 and CPU1 are shown in FIG.

[0076] In a specific implementation, as an embodiment, the electronic device 500 may also include multiple processors. Each of these processors may be a single-core processor (single-CPU) or a multi-core processor (multi-CPU). The processor here may refer to one or more devices, circuits, and / or processing cores for processing data (e.g., computer program instructions).

[0077] Among them, the memory 502 is used to store the software program for executing the solution of the present application, and the execution is controlled by the processor 501. The specific implementation method can refer to the above method embodiment and will not be repeated here.

[0078] Optionally, the memory 502 may be a read-only memory (ROM) or other types of static storage devices that can store static information and instructions, a random access memory (RAM) or other types of dynamic storage devices that can store information and instructions, or an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compressed optical disc, laser disc, optical disc, digital versatile disc, Blu-ray disc, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto. The memory 502 may be integrated with the processor 501, or may exist independently, and the interface circuit ( Figure 3 (not shown) is coupled to the processor 501, which is not specifically limited in the embodiment of the present application.

[0079] The transceiver 503 is used for communication with other devices. For example, if the multi-beam based positioning device is a terminal, the transceiver 503 can be used for communication with a network device or another terminal.

[0080] Optionally, the transceiver 503 may include a receiver and a transmitter ( Figure 3 The receiver is used to implement a receiving function, and the transmitter is used to implement a sending function.

[0081] Optionally, the transceiver 503 may be integrated with the processor 501, or may exist independently and communicate with the electronic device 500 through an interface circuit ( Figure 3 (not shown) is coupled to the processor 501, which is not specifically limited in the embodiment of the present application.

[0082] It should be noted that Figure 3 The structure of the electronic device 500 shown in the figure does not constitute a limitation on the device, and the actual electronic device 500 may include more or less components than those shown in the figure, or combine certain components, or arrange the components differently.

[0083] In addition, the technical effects based on the electronic device 500 can refer to the technical effects of the method in the above method embodiment, which will not be repeated here.

[0084] It should be understood that the processor in the embodiment of the present application may be a central processing unit (CPU), and the processor may also be other general-purpose processors, digital signal processors (DSP), application specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0085] It should also be understood that the memory in the embodiments of the present application may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of random access memory (RAM) are available, such as static RAM (SRAM), dynamic random access memory (DRAM), synchronous DRAM (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link DRAM (SLDRAM), and direct rambus RAM (DRRAM).

[0086] The above embodiments can be implemented in whole or in part by software, hardware (such as circuits), firmware or any other combination. When implemented using software, the above embodiments can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions or computer programs. When a computer instruction or computer program is loaded or executed on a computer, a process or function according to an embodiment of the present application is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. Computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, computer instructions can be transmitted from one website site, computer, server or data center to another website site, computer, server or data center by wired (such as infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that contains one or more available media sets. The available medium can be a magnetic medium (for example, a floppy disk, a hard disk, a tape), an optical medium (for example, a DVD), or a semiconductor medium. The semiconductor medium can be a solid-state hard disk.

[0087] It should be understood that the term "and / or" in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. A and B can be singular or plural. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship, but it may also indicate an "and / or" relationship. Please refer to the context for specific understanding.

[0088] In this application, "at least one" means one or more, and "more than one" means two or more. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b, or c can be represented by: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple.

[0089] It should be understood that in the various embodiments of the present application, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0090] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0091] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0092] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of units is only a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some feature fields can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0093] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0094] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0095] If the function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk, and other media that can store program codes.

[0096] The above are only specific implementations of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A network data security information transmission method, characterized in that: The method is applied to a data management center in a trusted domain, and the method comprises: The data management center receives a data acquisition request from a user device in a non-trusted domain; The data management center obtains the user-related data requested by the user device from a network database according to the data acquisition request; The data management center performs multiple security protections on the user-related data to obtain the protected user-related data, wherein the multiple security protections include at least one true security protection and at least one false security protection, and the order between the at least one true security protection and the at least one false security protection is a preset order, and the preset order is information that the user device is aligned with the data management center; The data management center sends the securely protected user-related data to the user equipment.

2. The method according to claim 1, characterized in that: The data management center performs multiple security protections on the user-related data to obtain the securely protected user-related data, including: The data management center determines, based on the user-related data and the information of the user device, that the number of times of multiple security protection for the user-related data is K, where K is an integer greater than 2; The data management center performs security protection on the user-related data K times according to the preset order to obtain the securely protected user-related data.

3. The method according to claim 2, characterized in that The data management center includes M security proxy entities, where M is an integer greater than 2, and the value of K does not exceed M. Each of the M security proxy entities is used to perform security protection on data in a closed manner. The data management center performs security protection on the user-related data K times according to the preset order to obtain the securely protected user-related data, including: The application layer of the data management center sends the user-related data to the first K security proxy entities of the M security proxy entities according to the sequence numbers of the M security proxy entities; The application layer of the data management center sends security protection rules to the first K security proxy entities respectively according to the preset order, and the security protection rules received by each of the first K security proxy entities are used to indicate whether true security protection or false security protection is performed on the user-related data; The first K security proxy entities perform security protection on the user-related data according to the security protection rules they have received, and perform K times of security protection to obtain the securely protected user-related data.

4. The method according to claim 2, characterized in that: The data management center determines, according to the user-related data and the information of the user device, that the number of times of multiple security protections for the user-related data is K, including: The data management center determines the number of multiple security protections for the user-related data to be K according to the security level corresponding to the type of the user-related data and the trust level corresponding to the untrusted domain indicated by the information of the user device.

5. The method according to claim 4, characterized in that If the security level corresponding to the type of user-related data is higher than the trusted level corresponding to the non-trusted domain, then K is correlated with the trusted level corresponding to the non-trusted domain, and the lower the trusted level corresponding to the non-trusted domain, the larger the value of K; if the security level corresponding to the type of user-related data is lower than the trusted level corresponding to the non-trusted domain, then K is correlated with the security level corresponding to the type of user-related data, and the lower the security level corresponding to the type of user-related data, the larger the value of K.

6. The method according to claim 3, characterized in that The first K security proxy entities perform security protection on the user-related data according to the security protection rules they receive, and perform K times of security protection to obtain the user-related data that is protected, including: In the case of K=2, the first K security proxy entities include the first security proxy entity and the second security proxy entity; thus: the first security proxy entity uses the real key of the user device to encrypt the user-related data to obtain first encrypted data; and the second security proxy entity uses the fake key of the user device to encrypt the user-related data to obtain second encrypted data; the securely protected user-related data includes the first encrypted data and the second encrypted data; Among them, the true key is the key aligned between the data management center and the user device, and the false key is obtained by the application layer of the data management center from partial information randomly extracted from the true key. The application layer of the data management center passes the true key to the first security agent entity, and passes the false key to the second security agent entity; the user devices use the true key to decrypt the first encrypted data and the second encrypted data, and the user devices determine the end of decryption based on the failure of decryption of the second encrypted data.

7. The method according to claim 3, characterized in that The first K security proxy entities perform security protection on the user-related data according to the security protection rules they receive, and perform K times of security protection to obtain the user-related data that is protected, including: In the case of K=3, the first K security proxy entities include the first security proxy entity, the second security proxy entity and the third security proxy entity; thus: the first security proxy entity uses the first fake key of the user device to encrypt the user-related data to obtain first encrypted data; the second security proxy entity uses the real key of the user device to encrypt the user-related data to obtain second encrypted data; and the third security proxy entity uses the second fake key of the user device to encrypt the user-related data to obtain third encrypted data; the securely protected user-related data includes the first encrypted data, the second encrypted data and the third encrypted data; Among them, the real key is the key aligned between the data management center and the user device, the application layer of the data management center divides the real key into the first fake key and the second fake key, the application layer of the data management center configures the first fake key to the first security agent entity, and configures the second fake key to the second security agent entity and the third security agent entity respectively, during the encryption process, the first security agent entity securely transfers the first fake key to the second security agent entity through the security protocol between the first security agent entity and the second security agent entity, so that the second security agent entity splices the first fake key and the second fake key to obtain the real key; the user devices all use the real key to decrypt the first encrypted data, the second encrypted data and the third encrypted data, and the user device determines the end of decryption based on the failure of decryption of the third encrypted data.

8. The method according to claim 3, characterized in that The first K security proxy entities perform security protection on the user-related data according to the security protection rules they receive, and perform K times of security protection to obtain the user-related data that is protected, including: In the case of K=3, the first K security proxy entities include the first security proxy entity, the second security proxy entity, the third security proxy entity and the fourth security proxy entity; thus: the first security proxy entity uses the first fake key of the user device to encrypt the user-related data to obtain first encrypted data; the second security proxy entity uses the real key of the user device to encrypt a part of the user-related data to obtain second encrypted data; the third security proxy entity uses the real key of the user device to encrypt another part of the user-related data to obtain third encrypted data; and the fourth security proxy entity uses the second fake key of the user device to encrypt the user-related data to obtain fourth encrypted data; the securely protected user-related data includes the first encrypted data, the second encrypted data, the third encrypted data and the fourth encrypted data; The real key is a key aligned between the data management center and the user device, the application layer of the data management center divides the real key into the first fake key and the second fake key, the application layer of the data management center configures the first fake key to the first security proxy entity, and configures the second fake key to the second security proxy entity, the third security proxy entity and the fourth security proxy entity respectively, and the first security proxy entity securely transmits the first fake key to the second security proxy entity through the security protocol between the first security proxy entity and the second security proxy entity during the encryption process, so as to be used for the second security proxy entity to transmit the first fake key to the second security proxy entity. a security proxy entity concatenates the first false key and the second false key to obtain the true key; and, during the encryption process, the first security proxy entity also securely transmits the first false key to the third security proxy entity through a security protocol between the first security proxy entity and the third security proxy entity, so that the third security proxy entity concatenates the first false key and the second false key to obtain the true key; the user devices all use the true key to decrypt the first encrypted data, the second encrypted data, the third encrypted data and the fourth encrypted data, and the user devices determine the end of decryption based on the failure of decryption of the fourth encrypted data.

9. The method according to claim 1, characterized in that: The data management center obtains the user-related data requested by the user device from the network database according to the data acquisition request, including: The data management center obtains the user-related data that meets at least one of the following information from the network database based on at least one of the following information in the data acquisition request: the type of data requested by the user device, the data acquisition time requested by the user device, or the amount of data requested by the user device.

10. A network data security information transmission system, characterized in that: The device is applied to a data management center in a trusted domain, and the data management center is configured as follows: The data management center receives a data acquisition request from a user device in a non-trusted domain; The data management center obtains the user-related data requested by the user device from a network database according to the data acquisition request; The data management center performs multiple security protections on the user-related data to obtain multiple encrypted user-related data, wherein the multiple security protections include at least one true security protection and at least one false security protection, and the order between the at least one true security protection and the at least one false security protection is a preset order, and the preset order is information that the user device is aligned with the data management center; The data management center sends the securely protected user-related data to the user equipment.

Images