Data security transmission method based on VPN (Virtual Private Network)

Abstract

The invention relates to the field of data transmission, in particular to a secure data transmission method based on a VPN (Virtual Private Network), which comprises the following steps: acquiring protocol I P packets, determining an uplink transmission state according to a TLC channel instability coefficient and a protocol I P packet number reference value, and determining an uplink transmission mode of each protocol I P packet according to the uplink transmission state, the uplink transmission mode being combined transmission or independent transmission; under a preset uplink transmission condition, determining a downlink transmission state according to the transmission delay reference value of the protocol I P packet and the transmission channel difference degree, and determining a downlink transmission optimization mode of each updated I P packet according to the downlink transmission state; under a preset downlink transmission condition, transmitting the parsed IP packet to a VPN (Virtual Private Network); the data transmission efficiency can be improved.

Description

Technical Field

[0001] The invention relates to the field of data transmission, and in particular to a VPN-based data security transmission method. Background Art

[0002] In the process of data transmission of mobile devices, due to the complexity of the network environment and potential security threats, the data transmission security problem of mobile devices has become increasingly prominent. Therefore, in order to meet the high standard requirements of mobile devices for data security, data communication is usually carried out with the help of VPN technology. However, when using VPN technology for communication, there are problems such as a large number of IP packets, network congestion and transmission delay, resulting in poor data transmission efficiency. Therefore, how to improve data transmission efficiency is a technical problem that needs to be solved urgently by those skilled in the art.

[0003] Chinese patent publication number CN110430111A discloses a data transmission method and VPN server for OpenVPN, the method comprising: obtaining a request message to be transmitted; determining the type of the request message; in the case where the request message belongs to a protocol message, negotiating with a first user end that sends the request message based on the request message to generate security alliance information; establishing a mapping relationship between the generated security alliance information and the outer source IP and source port contained in the generated security alliance information; in the case where the request message belongs to a data message, searching for security alliance information for decrypting the request message in the mapping relationship; decrypting the request message using the searched security alliance information to obtain a plaintext message, and forwarding the plaintext message to the second user end through a network card used to send the message; it can be seen that the above technical solution has the following problems: data transmission is performed only based on the message type, the data transmission mode is single, and the transmission mode cannot be adaptively adjusted according to the actual transmission state, resulting in poor transmission efficiency. Summary of the invention

[0004] To this end, the present invention provides a VPN-based data security transmission method to overcome the problem in the prior art that the data transmission mode is single and the transmission mode cannot be adaptively adjusted according to the actual transmission state, resulting in poor transmission efficiency.

[0005] To achieve the above object, the present invention provides a VPN-based data security transmission method, comprising:

[0006] Acquire the protocol IP packet, determine the uplink transmission state according to the TLC channel instability coefficient and the reference value of the number of protocol IP packets, and determine the uplink transmission mode of each protocol IP packet according to the uplink transmission state. The uplink transmission mode is combined transmission or separate transmission.

[0007] In combined transmission, a combination method is determined according to a similar reference value to obtain an associated IP packet group, and a TLC channel selection method of the associated IP packet group is determined according to a transmission index, wherein the combination method is to determine the associated IP packet group according to a characteristic reference value or a flow information degree, and the TLC channel selection method is to select a TLC channel according to a sensitivity impact degree or a transmission difficulty reference value;

[0008] In separate transmission, the priority coefficient of each protocol IP packet to select the TCL channel is determined according to the traffic information degree, and the TCL channel corresponding to each protocol IP packet is selected according to the interactive correlation degree;

[0009] Under the preset uplink transmission conditions, the downlink transmission state is determined according to the transmission delay reference value of the protocol IP packet and the transmission channel difference, and the downlink transmission optimization mode of each updated IP packet is determined according to the downlink transmission state;

[0010] The downlink transmission optimization mode includes direct transmission through the original TLC channel, interval transmission through the original TLC channel, and determining a split transmission mode according to a comprehensive evaluation coefficient, wherein the split transmission mode includes scheduled split transmission and interactive split transmission;

[0011] Under the preset downlink transmission conditions, the parsed IP packets are transmitted to the VPN.

[0012] Furthermore, the uplink transmission mode of each protocol IP packet is determined according to the uplink transmission state, including:

[0013] If the uplink transmission state is that the TLC channel instability coefficient is less than the preset TLC channel instability coefficient or the reference value of the number of protocol IP packets is less than the preset reference value of the number of protocol IP packets, the uplink transmission mode is combined transmission;

[0014] If the uplink transmission status is that the TLC channel instability coefficient is greater than or equal to the preset TLC channel instability coefficient and the reference value of the number of protocol IP packets is greater than or equal to the preset reference value of the number of protocol IP packets, the uplink transmission mode is single transmission.

[0015] Furthermore, the method for confirming the instability coefficient of the TLC channel includes:

[0016] If the channel overhead coefficient is greater than or equal to the preset channel overhead coefficient, the TLC channel instability coefficient is determined according to the congestion coefficient;

[0017] If the channel overhead coefficient is less than the preset channel overhead coefficient, the TLC channel instability coefficient is determined according to the effective transmission coefficient and the delay fluctuation threshold.

[0018] Further, the combination method is determined according to the similar reference value, including:

[0019] If the similarity reference value is less than the preset similarity reference value, the combination method is to determine the associated IP packet group according to the flow information degree;

[0020] If the similarity reference value is greater than or equal to the preset similarity reference value, the combination method is to determine the associated IP packet group according to the feature matching coefficient.

[0021] Furthermore, the method of confirming the flow information includes:

[0022] For a single protocol IP packet,

[0023] The IP message corresponding to the protocol IP packet is evenly divided according to the sequence characterization value to obtain a number of detection areas;

[0024] Determine the sliding window area corresponding to a single detection area according to the radiation coefficient and regularity representativeness of the detection area, and determine the characteristic sequence in the IP message according to the information shift value of the character sequence corresponding to the sliding window;

[0025] If the characteristic sequence ratio is greater than or equal to the preset characteristic sequence ratio, the flow information degree is determined according to the characteristic sequence shift coefficient;

[0026] If the characteristic sequence ratio is less than the preset characteristic sequence ratio, the ratio of the characteristic coefficient to the characteristic sequence ratio determines the flow information degree;

[0027] The sliding window area corresponding to a single detection area is positively correlated with the radiation coefficient and regularity representativeness of the detection area.

[0028] Further, determining a TLC channel selection mode for an associated IP packet group according to the transmission index includes:

[0029] If the transmission index is greater than or equal to the preset transmission index, the TLC channel selection method is to select the TLC channel according to the sensitivity impact;

[0030] If the transmission index is less than the preset transmission index, the TLC channel selection method is to select a TLC channel according to the transmission difficulty reference value.

[0031] Further, the priority coefficient of each protocol IP packet selecting the TCL channel is determined according to the flow information degree, and the TCL channel corresponding to each protocol IP packet is selected according to the interaction correlation degree;

[0032] Among them, the priority coefficient of a single protocol IP packet selecting a TCL channel is positively correlated with the flow information degree corresponding to the protocol IP packet;

[0033] For a single protocol IP packet, a TCL channel with the smallest interaction correlation with the protocol IP packet is selected.

[0034] Further, determining the downlink transmission optimization mode of each updated IP packet according to the downlink transmission state includes:

[0035] If the downlink transmission status is that the transmission delay reference value is less than the preset transmission delay reference value, the downlink transmission optimization mode is direct transmission through the original TLC channel;

[0036] If the downlink transmission status is that the transmission delay reference value is greater than or equal to the preset transmission delay reference value and the transmission channel difference is greater than or equal to the preset transmission channel difference, the downlink optimized transmission mode is the original TLC channel interval transmission;

[0037] If the downlink transmission status is that the transmission delay reference value is greater than or equal to the preset transmission delay reference value and the transmission channel difference is less than the preset transmission channel difference, the downlink optimized transmission mode is to determine the diversion transmission mode according to the comprehensive evaluation coefficient.

[0038] Further, if the comprehensive evaluation coefficient is greater than or equal to the preset comprehensive evaluation coefficient, the split transmission mode is the scheduled split transmission;

[0039] In scheduling the diversion transmission, the updated IP packets to be diverted are determined based on the transmission time;

[0040] Determine the initial scheduling range of the IP packets to be diverted and updated according to the abnormal index of the IP packets to be diverted and the channel balance coefficient;

[0041] Detect the request difficulty value within the initial scheduling range, increase and adjust the initial scheduling range of the IP packet to be updated for diversion according to the difference between the request difficulty value and the preset request difficulty value, and record the initial scheduling range after the increase and adjustment as the scheduling range;

[0042] The updated IP packets to be diverted are evenly dispatched to the TLC channels corresponding to the scheduling range for transmission.

[0043] Furthermore, if the comprehensive evaluation coefficient is less than the preset comprehensive evaluation coefficient, the split transmission mode is interactive split transmission;

[0044] In interactive traffic diversion transmission, the interactive channel combination scale is determined according to the interactive channel quantity reference value and the influence coefficient, and the interactive channel combination is determined according to the channel balance coefficient;

[0045] For a single interactive channel combination, the updated IP packets to be diverted in each interactive channel in the interactive channel combination are distributed to the matching channels corresponding to each interactive channel for transmission.

[0046] Compared with the prior art, the beneficial effect of the present invention lies in that, in the technical scheme of the present invention, the uplink transmission state is determined according to the TLC channel instability coefficient and the reference value of the number of protocol IP packets, and the stability of the TLC channel and the transmission difficulty of the protocol IP packets are effectively reflected by the TLC channel instability coefficient and the reference value of the number of protocol IP packets, and then different uplink transmission modes are adaptively selected according to the uplink transmission state, so that the selection of the uplink transmission mode is more in line with the actual application scenario, and the network bandwidth and transmission resources can be fully utilized through combined transmission to improve the efficiency and speed of data transmission, and the mutual influence and interference between multiple protocol IP packets can be avoided through separate transmission, and the possibility of transmission conflict and congestion can be reduced, thereby improving the data transmission efficiency.

[0047] Furthermore, in the present invention, the transmission status of the TLC channel is effectively reflected by the transmission index, and different TLC channel selection methods are adaptively selected according to the transmission index. Selecting the TLC channel according to the sensitivity impact can intelligently select a safer TLC channel for transmission, thereby reducing the risk of data leakage. Selecting the TLC channel according to the transmission difficulty reference value can improve data transmission efficiency.

[0048] Furthermore, the present invention effectively reflects the degree of association between the protocol IP packet and the TLC channel through the interactive correlation, and then selects the TLC channel corresponding to each protocol IP packet according to the interactive correlation, which helps to reduce the error rate and loss rate in the data transmission process, thereby improving the reliability of data transmission.

[0049] Furthermore, in the present invention, the downlink transmission state is determined according to the transmission delay reference value and the transmission channel difference, and the transmission characteristics of the protocol IP packet are effectively reflected through the transmission delay reference value and the transmission channel difference. Then, different downlink transmission optimization methods are adaptively selected according to the downlink transmission state, which can reduce data loss or transmission interruption caused by transmission failure, thereby improving data transmission efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] Figure 1 A schematic diagram of a VPN-based data security transmission method of the present invention;

[0051] Figure 2 A flow chart of the present invention for determining the uplink transmission mode of each protocol IP packet according to the uplink transmission state;

[0052] Figure 3 A flow chart of determining a combination method according to similar reference values ​​according to the present invention;

[0053] Figure 4 The present invention is a flow chart for determining the split transmission mode according to the comprehensive evaluation coefficient. DETAILED DESCRIPTION

[0054] In order to make the objects and advantages of the present invention more clearly understood, the present invention is further described below in conjunction with embodiments; it should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0055] The preferred embodiments of the present invention are described below with reference to the accompanying drawings. It should be understood by those skilled in the art that these embodiments are only used to explain the technical principles of the present invention and are not intended to limit the protection scope of the present invention.

[0056] It should be noted that, in the description of the present invention, terms such as "up", "down", "left", "right", "inside" and "outside" indicating directions or positional relationships are based on the directions or positional relationships shown in the drawings. This is merely for the convenience of description and does not indicate or imply that the device or element must have a specific orientation, be constructed and operated in a specific orientation. Therefore, it cannot be understood as a limitation on the present invention.

[0057] In addition, it should be noted that in the description of the present invention, unless otherwise clearly specified and limited, the terms "installed", "connected", and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be the internal communication of two components. For those skilled in the art, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0058] See also Figures 1 to 4 As shown, the present invention provides a data security transmission method based on VPN, comprising:

[0059] Acquire the protocol IP packet, determine the uplink transmission state according to the TLC channel instability coefficient and the reference value of the number of protocol IP packets, and determine the uplink transmission mode of each protocol IP packet according to the uplink transmission state. The uplink transmission mode is combined transmission or separate transmission.

[0060] In combined transmission, a combination method is determined according to a similar reference value to obtain an associated IP packet group, and a TLC channel selection method of the associated IP packet group is determined according to a transmission index, wherein the combination method is to determine the associated IP packet group according to a characteristic reference value or a flow information degree, and the TLC channel selection method is to select a TLC channel according to a sensitivity impact degree or a transmission difficulty reference value;

[0061] In separate transmission, the priority coefficient of each protocol IP packet to select the TCL channel is determined according to the flow information degree, and the TCL channel corresponding to each protocol IP packet is selected according to the interactive correlation degree;

[0062] Under the preset uplink transmission conditions, the downlink transmission state is determined according to the transmission delay reference value of the protocol IP packet and the transmission channel difference, and the downlink transmission optimization mode of each updated IP packet is determined according to the downlink transmission state;

[0063] The downlink transmission optimization mode includes direct transmission through the original TLC channel, interval transmission through the original TLC channel, and determining a split transmission mode according to a comprehensive evaluation coefficient, wherein the split transmission mode includes scheduled split transmission and interactive split transmission;

[0064] Under the preset downlink transmission conditions, the parsed IP packets are transmitted to the VPN.

[0065] The application scenario of the present invention is the transmission of IP packets in VPN. The protocol IP packet is an IP packet for protocol encapsulation by the target server in the current monitoring period. The protocol packet is implemented by data packet encapsulation technology, which is easy for technicians in this field to understand and will not be described in detail. Each protocol IP packet corresponds to an IP message. The IP message corresponding to a single protocol IP packet includes header information and data information. The header information includes some control information, including but not limited to identifiers, flags, fragment offsets, survival time, protocols, header checks, and target addresses. The data information is a message of an upper layer protocol, and the upper layer protocol includes but is not limited to TCP and UDP. This is easy for technicians in this field to understand and will not be described in detail.

[0066] In the present invention, there are multiple TLC channels between the target server and the resolution server. The target server is a server accessed by the user through VPN, and the resolution server is a server responsible for DNS resolution. The TLC channel is a transmission path using a national encryption algorithm. This is easy to understand for those skilled in the art and will not be described in detail.

[0067] The preset uplink transmission condition is that each protocol IP packet is transmitted to the resolution server and the resolution server updates each protocol IP packet to an update IP packet;

[0068] The preset downlink transmission condition is that each update IP packet of the resolution server is transmitted to the target server and the target server resolves each update IP packet into a resolution IP packet;

[0069] The process in which the resolution server updates each protocol IP packet to an updated IP packet includes: the resolution server resolves the protocol IP packet, and modifies the target address of the resolved protocol IP packet according to the user's needs according to the mapping table, and re-encapsulates the modified IP packet, records the IP packet after the re-encapsulation as an updated IP packet, and resolves the encapsulated IP packet into content that is easy to understand for a person skilled in the art, which will not be described in detail;

[0070] When transmitting the parsed IP packet to VPN, any path can be selected to transmit it to VPN without any specific restrictions;

[0071] The present invention is provided with a continuous cycle monitoring cycle, and the data state is determined once at the end of each monitoring cycle. The duration of the monitoring cycle can be set according to the needs of the user. The greater the user's demand for monitoring accuracy, the shorter the duration of the monitoring cycle. A value of the monitoring cycle is provided, and the monitoring cycle is 10s;

[0072] In the present invention, several historical records are correspondingly set up, and any historical record records the TLC channel instability coefficient, channel overhead coefficient, sequence length reference value, transmission index, transmission delay reference value, transmission channel difference and request difficulty value in the historical process of at least one data transmission, and each historical record corresponds to a qualified mark, which records whether the data transmission process meets user requirements. The qualified mark can be recorded manually. It can be understood that the user can determine whether the data transmission process meets the requirements based on self-set indicators. The self-set indicators can be but not limited to the number of delays, which will not be elaborated here. The number of delays is the number of monitoring cycles with a transmission duration greater than 5s; the transmission duration is the time it takes to transmit all IP packets of each protocol in a single monitoring cycle to the resolution server.

[0073] Specifically, the uplink transmission mode of each protocol IP packet is determined according to the uplink transmission state, including:

[0074] If the uplink transmission state is that the TLC channel instability coefficient is less than the preset TLC channel instability coefficient or the reference value of the number of protocol IP packets is less than the preset reference value of the number of protocol IP packets, the uplink transmission mode is combined transmission;

[0075] If the uplink transmission status is that the TLC channel instability coefficient is greater than or equal to the preset TLC channel instability coefficient and the reference value of the number of protocol IP packets is greater than or equal to the preset reference value of the number of protocol IP packets, the uplink transmission mode is single transmission.

[0076] Among them, the uplink transmission state includes a first uplink transmission state and a second uplink transmission state. The first uplink transmission state is that the TLC channel instability coefficient is less than the preset TLC channel instability coefficient or the reference value of the number of protocol IP packets is less than the preset reference value of the number of protocol IP packets. The second uplink transmission state is that the TLC channel instability coefficient is greater than or equal to the preset TLC channel instability coefficient and the reference value of the number of protocol IP packets is greater than or equal to the preset reference value of the number of protocol IP packets.

[0077] The reference value of the number of protocol IP packets is the total number of protocol IP packets in the current monitoring period;

[0078] The values ​​of the preset TLC channel instability coefficient and the preset reference value of the number of protocol IP packets can be determined by the user according to the actual application scenario. The larger the values ​​of the preset TLC channel instability coefficient and the preset reference value of the number of protocol IP packets, the greater the user's demand for combined transmission of protocol IP packets. A value of a preset TLC channel instability coefficient and a preset reference value of the number of protocol IP packets is provided, and the historical records of combined transmission of protocol IP packets are detected. The average value of the TLC channel instability coefficient corresponding to the historical records that can meet the user's needs is recorded as the preset TLC channel instability coefficient. The reference value of the preset number of protocol IP packets is 20.

[0079] Specifically, the methods for confirming the instability coefficient of the TLC channel include:

[0080] If the channel overhead coefficient is greater than or equal to the preset channel overhead coefficient, the TLC channel instability coefficient is determined according to the congestion coefficient;

[0081] If the channel overhead coefficient is less than the preset channel overhead coefficient, the TLC channel instability coefficient is determined according to the effective transmission coefficient and the delay fluctuation threshold.

[0082] The channel overhead coefficient is the average value of the sub-overhead values ​​corresponding to each TCL channel. The sub-overhead value corresponding to a single TCL channel is the maximum amount of data that can be transmitted by the single TCL channel within 1 second. The unit of the sub-overhead value is bits per second, and the unit of the data volume is bits.

[0083] The value of the preset channel overhead coefficient can be determined by the user according to the actual application scenario. The smaller the value of the preset channel overhead coefficient is, the greater the user's demand for determining the TLC channel instability coefficient according to the delay fluctuation threshold is. A value of the preset channel overhead coefficient is provided, and the historical records of determining the TLC channel instability coefficient according to the delay fluctuation threshold are detected, and the average value of the historical records that can meet the user's needs is recorded as the preset channel overhead coefficient.

[0084] If the channel overhead coefficient is greater than or equal to the preset channel overhead coefficient, the TLC channel instability coefficient is positively correlated with the congestion coefficient;

[0085] If the channel overhead coefficient is less than the preset channel overhead coefficient, the TLC channel instability coefficient = delay fluctuation threshold - effective transmission coefficient;

[0086] The congestion coefficient is the average value of the sub-congestion coefficients corresponding to each TLC channel. The sub-congestion coefficient corresponding to a single TLC channel = the number of nodes + the reference value of the number of connections. The reference value of the number of connections is confirmed in the following manner: for a single TLC channel, the TLC channel is recorded as the target channel, the node in the target channel is recorded as the target node, and the other nodes outside the target channel are recorded as reference nodes. The reference value of the number of connections is the number of reference nodes directly connected to the target node. The reference node directly connected to the target node is a protocol. IP packets can be directly transmitted from the target node to the reference node without passing through other nodes except the target node and the reference node; the node can receive, process and forward IP packets, and the node includes but is not limited to switches, routers and servers. This is easy for technicians in this field to understand and will not be described in detail.

[0087] The delay fluctuation threshold is confirmed by recording each monitoring period before the current monitoring period as a historical monitoring period. The reference IP packet is an IP packet that has been protocol-encapsulated by the target server and transmitted to the resolution server within the historical monitoring period. The delay fluctuation threshold is the standard deviation of the sub-reference value corresponding to each reference IP packet. For a single reference IP packet, the sub-reference value corresponding to the reference IP packet is the time it takes for the reference IP packet to be transmitted from the target server to the resolution server.

[0088] Effective transmission coefficient = (the number of reference IP packets whose sub-reference value is less than the preset sub-reference value) / total number of reference IP packets. The value of the preset sub-reference value can be determined by the user according to the actual application scenario. The smaller the value of the preset sub-reference value, the greater the user's demand for improving transmission efficiency. A value of the preset sub-reference value is provided, and the average value of the sub-reference values ​​corresponding to the historical records that can meet the user's needs is recorded as the preset sub-reference value.

[0089] Specifically, the combination method is determined based on similar reference values, including:

[0090] If the similarity reference value is less than the preset similarity reference value, the combination method is to determine the associated IP packet group according to the flow information degree;

[0091] If the similarity reference value is greater than or equal to the preset similarity reference value, the combination method is to determine the associated IP packet group according to the feature matching coefficient.

[0092] Among them, the similarity reference value is the average value of the sub-similarity reference values ​​corresponding to each protocol IP packet, and the sub-similarity reference value corresponding to a single protocol IP packet is the average value of the matching coefficients corresponding to the protocol IP packet and other protocol IP packets; for the IP packets corresponding to any two protocol IP packets, the larger value of the number of keywords corresponding to the two IP packets is recorded as a, and the number of keywords appearing in both IP packets is recorded as b, and the matching coefficient = b / a;

[0093] For any two protocol IP packets, feature matching coefficient = 1-(the absolute value of the difference between the feature reference values ​​corresponding to the two protocol IP packets / the larger value of the feature reference values ​​corresponding to the two protocol IP packets);

[0094] The confirmation method of characteristic reference value includes:

[0095] For a single protocol IP packet,

[0096] If the sequence length reference value is greater than or equal to the preset sequence length reference value, determining a feature reference value according to the sequence characterization value, wherein the feature reference value is positively correlated with the sequence characterization value;

[0097] If the sequence length reference value is less than the preset sequence length reference value, the feature reference value is determined according to the protocol comparison coefficient, wherein the feature reference value is negatively correlated with the protocol comparison coefficient;

[0098] The sequence length reference value is the total number of characters appearing in the IP message corresponding to a single protocol IP packet, and the sequence characterization value = the number of keywords appearing in the IP message corresponding to a single protocol IP packet - the influence coefficient. For a single protocol IP packet, the keyword that appears most times in the protocol IP packet is recorded as the reference keyword, and the number of characters between the first reference keyword and the last reference keyword in the order of text reading from front to back is recorded as the influence coefficient;

[0099] The protocol comparison coefficient is confirmed in the following manner: for a single protocol IP packet, the protocol IP packet is recorded as a target packet, other protocol IP packets other than the target packet are recorded as reference packets, the keywords appearing in the IP message corresponding to the target packet are recorded as analysis keywords, and the average value of the number of analysis keywords corresponding to each reference packet is recorded as the protocol comparison coefficient;

[0100] The combination method is to determine the associated IP packet group according to the flow information degree, including: sorting each protocol IP packet in the order of flow information degree from large to small and recording it as a reference sequence, recording the protocol IP packet not recorded in the associated IP packet group as a reference packet, selecting the reference packets in the reference sequence in the order of flow information degree from large to small, until the sum of the flow information degrees corresponding to the selected reference packets is greater than the preset flow information degree, then recording the set of each reference packet before the order of the last selected reference packet as an associated IP packet group, and continuing to divide the protocol IP packets not recorded in the associated IP packet group until each protocol IP packet is recorded in the associated IP packet group;

[0101] The combination method is to determine the associated IP packet group according to the characteristic reference value, including: performing an association analysis on each protocol IP packet, when performing an association analysis on a single protocol IP packet, recording the protocol IP packet as a target protocol IP packet, recording other protocol IP packets except the target protocol IP packet as reference protocol IP packets, recording the reference protocol IP packets whose characteristic matching coefficient with the target protocol IP packet is greater than a preset characteristic matching coefficient and the set of the target protocol IP packets as an associated IP packet group, and continuing to perform an association analysis on the protocol IP packets that are not recorded in the associated IP packet group until all protocol IP packets are recorded in the associated IP packet group;

[0102] The values ​​of the preset similarity reference value and the preset sequence length reference value can be determined by the user according to the actual application scenario. The larger the value of the preset similarity reference value, the greater the user's need to determine the associated IP packet group according to the traffic information degree. A value of the preset similarity reference value is provided. The preset similarity reference value is 50%. The larger the value of the preset sequence length reference value, the greater the user's need to determine the feature reference value according to the protocol comparison coefficient. A value of the preset sequence length reference value is provided, and the historical records of determining the feature reference value according to the protocol comparison coefficient are detected, and the average value of the sequence length reference value corresponding to the historical records that can meet the user's needs is recorded as the preset sequence length reference value;

[0103] The values ​​of the preset traffic information degree and the preset feature matching coefficient can be determined by the user according to the actual application scenario. The greater the user's demand for improving the transmission efficiency of the associated IP packet group, the smaller the values ​​of the preset traffic information degree and the preset feature matching coefficient are. A value of the preset traffic information degree and the preset feature matching coefficient is provided, and the historical records of determining the associated IP packet group based on the traffic information degree are detected. The average value of the reference threshold values ​​corresponding to each associated IP packet group corresponding to the historical records that can meet the user's needs is recorded as the preset traffic information degree. The reference threshold value corresponding to a single associated IP packet group is the sum of the traffic information degrees corresponding to each protocol IP packet in the associated IP packet group. The preset feature matching coefficient is 70%.

[0104] Specifically, the methods for confirming traffic information include:

[0105] For a single protocol IP packet,

[0106] The IP message corresponding to the protocol IP packet is evenly divided according to the sequence characterization value to obtain a number of detection areas;

[0107] Determine the sliding window area corresponding to a single detection area according to the radiation coefficient and regularity representativeness of the detection area, and determine the characteristic sequence in the IP message according to the information shift value of the character sequence corresponding to the sliding window;

[0108] If the characteristic sequence ratio is greater than or equal to the preset characteristic sequence ratio, the flow information degree is determined according to the characteristic sequence shift coefficient;

[0109] If the characteristic sequence ratio is less than the preset characteristic sequence ratio, the ratio of the characteristic coefficient to the characteristic sequence ratio determines the flow information degree;

[0110] The sliding window area corresponding to a single detection area is positively correlated with the radiation coefficient and regularity representativeness of the detection area.

[0111] The IP message corresponding to the protocol IP packet is evenly divided according to the sequence characterization value to obtain a number of detection areas, wherein the IP message is divided into a number of detection areas of equal size and area, and the number of detection areas is positively correlated with the sequence characterization value;

[0112] The method for confirming the radiation coefficient and the regular representativeness is that for a single detection area in an IP message corresponding to a single protocol IP packet, the detection area is recorded as a target detection area, other detection areas except the target detection area are recorded as reference detection areas, and the keywords in the target detection area are recorded as detection keywords. The radiation coefficient = radiation range reference value / the number of detection keywords in the target detection area, the keywords that are the same as the detection keywords in the reference detection area are recorded as radiation keywords, the number of characters between the first radiation keyword and the last radiation keyword that appear in the reading order from first to last is recorded as the radiation range reference value, and the regular representativeness corresponding to the target detection area = the number of reference detection areas where the radiation keywords appear / the total number of reference detection areas;

[0113] The sliding window is a square area. The moving step of the sliding window is the same as the side length of the sliding window. The sliding window slides from the upper left corner of a single detection area to the lower right corner of the monitoring area according to the moving step. The character sequence is a set of characters located in the sliding window when the sliding window slides to a certain position. Each position of the sliding window in the detection area corresponds to a character sequence.

[0114] The character sequence corresponding to the sliding window whose information error value is greater than the preset information error value is recorded as a feature sequence;

[0115] Sliding window area = 0.2 × (radiance + regularity representativeness) × area of ​​a single detection area;

[0116] The information dislocation value is positively correlated with the matching coefficient. The matching coefficient is confirmed by recording the keywords in a single sliding window as window keywords. The matching coefficient = the number of reference IP packets in which the keywords of each window appear at the same time / the total number of all reference IP packets;

[0117] The value of the preset information deviation value can be determined by the user according to the actual application scenario. The larger the value of the preset information deviation value is, the greater the user's need to determine the character sequence as a feature sequence. A value of the preset information deviation value is provided, and the average value of the information deviation values ​​corresponding to the historical records that can meet the user's needs is recorded as the preset information deviation value;

[0118] Feature sequence ratio = number of feature sequences / number of character sequences in a single detection area;

[0119] The value of the preset feature sequence ratio can be determined by the user according to the actual application scenario. The smaller the value of the preset feature sequence ratio is, the greater the user's demand for determining the flow information degree according to the feature sequence misalignment coefficient is. A value of the preset feature sequence ratio is provided, and the preset feature sequence ratio is 50%;

[0120] If the characteristic sequence ratio is greater than or equal to the preset characteristic sequence ratio, the flow information degree is positively correlated with the characteristic sequence shift coefficient;

[0121] If the characteristic sequence ratio is less than the preset characteristic sequence ratio, the flow information degree = characteristic coefficient / characteristic sequence ratio;

[0122] The feature sequence misalignment coefficient is the average line of the distance reference values ​​corresponding to each feature sequence in a single protocol IP packet. The distance reference value corresponding to a single feature sequence is the average value of the shortest distance from the center position of the feature sequence to the center position of other feature sequences. The center position of a single feature sequence is the center of the circumscribed circle of the smallest rectangle that can contain all the characters in the feature sequence. The feature coefficient is the average value of the information misalignment values ​​corresponding to each feature sequence corresponding to a single protocol IP packet.

[0123] Specifically, the TLC channel selection method of the associated IP packet group is determined according to the transmission index, including:

[0124] If the transmission index is greater than or equal to the preset transmission index, the TLC channel selection method is to select the TLC channel according to the sensitivity impact;

[0125] If the transmission index is less than the preset transmission index, the TLC channel selection method is to select a TLC channel according to the transmission difficulty reference value.

[0126] Where, transmission index = 1 / (TLC channel instability coefficient + total number of associated IP packet groups);

[0127] The value of the preset transmission index can be determined by the user according to the actual application scenario. The larger the value of the preset transmission index is, the greater the user's need to select the TLC channel according to the transmission difficulty reference value is. A value of the preset transmission index is provided, and the historical records of selecting the TLC channel according to the sensitivity impact are detected, and the average value of the transmission index corresponding to the historical records that can meet the user's needs is recorded as the preset transmission index;

[0128] In selecting a TLC channel according to the sensitivity, when selecting a TCL channel for a single associated IP packet group, a TCL channel of an unassigned associated IP packet group with the smallest sensitivity to the associated IP packet group is selected for transmission;

[0129] In selecting a TLC channel according to a transmission difficulty reference value, when selecting a TCL channel for a single associated IP packet group, a TCL channel of an unassigned associated IP packet group with a minimum transmission difficulty reference value for the associated IP packet group is selected for transmission;

[0130] The method for confirming the sensitivity impact is that, for a single TCL channel and a single associated IP packet group, the IP packet that has been protocol-encapsulated and is being transmitted in the TCL channel during the current monitoring period is recorded as a transmission packet, and the average of the sensitivity means of each protocol IP packet corresponding to the associated IP packet group is recorded as the sensitivity impact, and the sensitivity mean of a single protocol IP packet is the maximum value of the matching coefficients corresponding to the protocol IP packet and each transmission packet;

[0131] Transmission difficulty reference value = sub-overhead value - sub-congestion coefficient.

[0132] Specifically, the priority coefficient of each protocol IP packet to select the TCL channel is determined according to the flow information degree, and the TCL channel corresponding to each protocol IP packet is selected according to the interactive correlation degree;

[0133] Among them, the priority coefficient of a single protocol IP packet selecting a TCL channel is positively correlated with the flow information degree corresponding to the protocol IP packet;

[0134] For a single protocol IP packet, a TCL channel with the smallest interaction correlation with the protocol IP packet is selected.

[0135] The confirmation method of the interactive correlation is that, for a single protocol IP packet and a single TCL channel, the protocol IP packet is recorded as the target packet, and the IP packets that have been protocol-encapsulated and are being transmitted in the TCL channel in the current monitoring period in the TCL channel and the protocol IP packets allocated to the TCL channel are recorded as the first transmission packets; the interactive correlation is the average value of the information similarity corresponding to the target packet and each first transmission packet, and the information similarity corresponding to the target packet and a single first transmission packet = 1 / the absolute value of the difference between the flow information degree corresponding to the target packet and the first transmission packet;

[0136] The greater the flow information of a single protocol IP packet, the higher the priority of the protocol IP packet in selecting the TCL channel.

[0137] Specifically, the downlink transmission optimization mode of each updated IP packet is determined according to the downlink transmission state, including:

[0138] If the downlink transmission status is that the transmission delay reference value is less than the preset transmission delay reference value, the downlink transmission optimization mode is direct transmission through the original TLC channel;

[0139] If the downlink transmission status is that the transmission delay reference value is greater than or equal to the preset transmission delay reference value and the transmission channel difference is greater than or equal to the preset transmission channel difference, the downlink optimized transmission mode is the original TLC channel interval transmission;

[0140] If the downlink transmission status is that the transmission delay reference value is greater than or equal to the preset transmission delay reference value and the transmission channel difference is less than the preset transmission channel difference, the downlink optimized transmission mode is to determine the diversion transmission mode according to the comprehensive evaluation coefficient.

[0141] Among them, the downlink transmission state includes a first downlink transmission state, a second downlink transmission state and a third downlink transmission state, the first downlink transmission state is that the transmission delay reference value is less than the preset transmission delay reference value, the second downlink transmission state is that the transmission delay reference value is greater than or equal to the preset transmission delay reference value and the transmission channel difference is greater than or equal to the preset transmission channel difference, and the third downlink transmission state is that the transmission delay reference value is greater than or equal to the preset transmission delay reference value and the transmission channel difference is less than the preset transmission channel difference;

[0142] The transmission delay reference value is the absolute value of the difference between the maximum and minimum transmission times of each protocol IP packet; the transmission time corresponding to a single protocol IP packet is the time it takes for the protocol IP packet to be transmitted from the target server to the resolution server;

[0143] Transmission channel difference = number of TCL channels corresponding to protocol IP packets whose transmission time is greater than the preset transmission time / total number of TCL channels;

[0144] The values ​​of the preset transmission delay reference value, the preset transmission channel difference and the preset transmission time can be determined by the user according to the actual application scenario. The greater the user's demand for improving transmission efficiency, the smaller the preset transmission delay reference value and the preset transmission time are. A value of the preset transmission delay reference value is provided. The historical records of direct transmission through the original TLC channel are detected, and the average value of the transmission delay reference values ​​that can meet the user's needs is recorded as the preset transmission delay reference value. The preset transmission time is 1s. The greater the value of the preset transmission channel difference, the greater the user's demand for determining the diversion transmission mode according to the comprehensive evaluation coefficient. A value of the preset transmission channel difference is provided. The historical records of interval transmission using the original TLC channel are detected, and the average value of the transmission channel difference corresponding to the historical records that can meet the user's needs is recorded as the preset transmission channel difference.

[0145] In the original TLC channel direct transmission, for a single update IP packet, the TLC channel of the protocol IP packet corresponding to the update IP packet is selected to be transmitted from the resolution server to the target server;

[0146] In the original TLC channel interval transmission, for a single update IP packet, the TCL channel of the protocol IP packet corresponding to the update IP packet is selected to be transmitted from the resolution server to the target server. The transmission interval of the update IP packet corresponding to a single TLC channel is positively correlated with the transmission delay reference value; the transmission interval is the time interval between the start of transmission of two adjacent update IP packets.

[0147] Specifically, if the comprehensive evaluation coefficient is greater than or equal to the preset comprehensive evaluation coefficient, the diversion transmission mode is scheduled diversion transmission;

[0148] In scheduling the diversion transmission, the updated IP packets to be diverted are determined based on the transmission time;

[0149] Determine the initial scheduling range of the IP packets to be diverted and updated according to the abnormal index of the IP packets to be diverted and the channel balance coefficient;

[0150] Detect the request difficulty value within the initial scheduling range, increase and adjust the initial scheduling range of the IP packet to be updated for diversion according to the difference between the request difficulty value and the preset request difficulty value, and record the initial scheduling range after the increase and adjustment as the scheduling range;

[0151] The updated IP packets to be diverted are evenly dispatched to the TLC channels corresponding to the scheduling range for transmission.

[0152] The updated IP packet to be diverted is an updated IP packet corresponding to the protocol IP packet whose transmission time is greater than the preset transmission time;

[0153] Determine the initial scheduling range of the updated IP packet to be diverted according to the abnormality index of the updated IP packet to be diverted and the channel balance coefficient, wherein the number of TCL channels included in the initial scheduling range of the updated IP packet to be diverted is determined according to the abnormality index of the updated IP packet to be diverted, the number of TCL channels included in the initial scheduling range of the updated IP packet to be diverted is positively correlated with the abnormality index of the updated IP packet to be diverted, and select TCL channels in which there are no protocol IP packets corresponding to the updated IP packet to be diverted in descending order of the channel balance coefficient until the number of TCL channels corresponding to the initial scheduling range is reached, and each selected TCL channel is recorded as the initial scheduling range;

[0154] Select TCL channels that do not have protocol IP packets corresponding to the updated IP packets to be diverted and are not allocated to the initial scheduling range in the order of channel balance coefficients from large to small, until the increase adjustment amount of the initial scheduling range of the updated IP packets to be diverted is reached;

[0155] Evenly dispatch the updated IP packets to be diverted to each TLC channel corresponding to the dispatching range for transmission, wherein the number of updated IP packets to be diverted allocated to each TLC channel corresponding to the dispatching range is the same;

[0156] For a single TCL channel, channel balance coefficient = 1 / (number of protocol IP packets transmitted by the TCL channel in the uplink transmission mode / sub-congestion coefficient corresponding to the TCL channel);

[0157] Request difficulty value = number of protocol IP packets transmitted through each TCL channel corresponding to the initial scheduling range in the uplink transmission mode / number of each TCL channel corresponding to the initial scheduling range;

[0158] The increase adjustment amount of the initial scheduling range of the IP packet to be updated is positively correlated with the difference between the request difficulty value and the preset request difficulty value. The increase adjustment amount of the initial scheduling range of the IP packet to be updated is (request difficulty value-preset request difficulty value)×the number of TCL channels corresponding to the initial scheduling range.

[0159] Abnormal index of the updated IP packets to be diverted = the number of updated IP packets to be diverted + the average transmission time of the protocol IP packets corresponding to the updated IP packets to be diverted;

[0160] The value of the preset request difficulty value can be determined by the user according to the actual application scenario. The greater the user's demand for improving data transmission efficiency, the smaller the value of the preset request difficulty value. A value of the preset request difficulty is provided, and the historical records of transmission using scheduling and diversion are detected. The average value of the request difficulty values ​​corresponding to the historical records that can meet the user's needs is recorded as the preset request difficulty value;

[0161] Comprehensive evaluation coefficient = transmission delay reference value + transmission channel difference. The value of the preset comprehensive evaluation coefficient can be determined by the user according to the actual application scenario. The larger the value of the preset comprehensive evaluation coefficient, the greater the user's demand for interactive diversion transmission. A preset value of the comprehensive evaluation coefficient is provided to detect the historical records of users using interactive diversion transmission, and the average value of the comprehensive evaluation coefficients corresponding to the historical records that can meet the user's needs is recorded as the preset comprehensive evaluation coefficient.

[0162] Specifically, if the comprehensive evaluation coefficient is less than the preset comprehensive evaluation coefficient, the diversion transmission mode is interactive diversion transmission;

[0163] In interactive traffic diversion transmission, the interactive channel combination scale is determined according to the interactive channel quantity reference value and the influence coefficient, and the interactive channel combination is determined according to the channel balance coefficient;

[0164] For a single interactive channel combination, the updated IP packets to be diverted in each interactive channel in the interactive channel combination are distributed to the matching channels corresponding to each interactive channel for transmission.

[0165] Among them, the TCL channel in the uplink transmission mode where the protocol IP packet corresponding to the updated IP packet to be diverted is recorded as an interactive channel, and the reference value of the number of interactive channels is the total number of interactive channels.

[0166] Impact coefficient = (maximum value among sub-influence coefficients corresponding to each interactive channel - minimum value among sub-influence coefficients corresponding to each interactive channel) / maximum value among sub-influence coefficients corresponding to each interactive channel, where the sub-influence coefficient is the time it takes for a single interactive channel to transmit all protocol IP packets corresponding to the interactive channel to the resolution server;

[0167] The interactive channel combination scale is positively correlated with the reference value of the number of interactive channels, and negatively correlated with the impact coefficient. Reference interactive channel combination scale = reference value of the number of interactive channels × (1-influence coefficient). It should be noted that the interactive channel combination scale is the smallest even number greater than or equal to the reference interactive channel combination scale.

[0168] The interaction channel combination scale is the number of interaction channels included in a single interaction channel combination;

[0169] Determining the interactive channel combination according to the channel balance coefficient includes: sorting the interactive channels in descending order according to the channel balance coefficient and recording them as a channel sequence, selecting interactive channels with the same number at both ends of the channel sequence, until the number of interactive channels in the interactive channel combination reaches the interactive channel combination scale, which is recorded as the end of the division of an interactive channel combination, and continuing to combine the interactive channels that are not recorded as the interactive channel combination until all the interactive channels are recorded as the interactive channel combination;

[0170] For a single interactive channel in a single interactive channel combination, the interactive channel is recorded as a target channel, and the interactive channels in the interactive channel combination are sorted in descending order according to the channel balance coefficient, and recorded as the first channel sequence.

[0171] The confirmation method of the matching channel corresponding to the target channel includes:

[0172] If the channel balance coefficient corresponding to the target channel is the minimum value among the channel balance coefficients corresponding to the interactive channel combination, then the matching channel corresponding to the target channel is the interactive channel with the largest channel balance coefficient in the interactive channel combination;

[0173] If the channel balance coefficient corresponding to the target channel is not the minimum value among the channel balance coefficients corresponding to the interactive channel combination, the matching channel corresponding to the target channel is the interactive channel in the first channel sequence that is adjacent to the target channel and has a larger channel balance coefficient than the target channel.

[0174] So far, the technical solutions of the present invention have been described in conjunction with the preferred embodiments shown in the accompanying drawings. However, it is easy for those skilled in the art to understand that the protection scope of the present invention is obviously not limited to these specific embodiments. Without departing from the principle of the present invention, those skilled in the art can make equivalent changes or substitutions to the relevant technical features, and the technical solutions after these changes or substitutions will fall within the protection scope of the present invention.

[0175] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A VPN-based data security transmission method, characterized in that: include: Acquire the protocol IP packet, determine the uplink transmission state according to the TLC channel instability coefficient and the reference value of the number of protocol IP packets, and determine the uplink transmission mode of each protocol IP packet according to the uplink transmission state. The uplink transmission mode is combined transmission or separate transmission. In combined transmission, a combination method is determined according to a similar reference value to obtain an associated IP packet group, and a TLC channel selection method of the associated IP packet group is determined according to a transmission index, wherein the combination method is to determine the associated IP packet group according to a characteristic reference value or a flow information degree, and the TLC channel selection method is to select a TLC channel according to a sensitivity impact degree or a transmission difficulty reference value; In separate transmission, the priority coefficient of each protocol IP packet to select the TCL channel is determined according to the traffic information degree, and the TCL channel corresponding to each protocol IP packet is selected according to the interactive correlation degree; Under the preset uplink transmission conditions, the downlink transmission state is determined according to the transmission delay reference value of the protocol IP packet and the transmission channel difference, and the downlink transmission optimization mode of each updated IP packet is determined according to the downlink transmission state; The downlink transmission optimization mode includes direct transmission through the original TLC channel, interval transmission through the original TLC channel, and determining a split transmission mode according to a comprehensive evaluation coefficient, wherein the split transmission mode includes scheduled split transmission and interactive split transmission; Under the preset downlink transmission conditions, the parsed IP packets are transmitted to the VPN.

2. The VPN-based data security transmission method according to claim 1, characterized in that: Determine the uplink transmission mode of each protocol IP packet according to the uplink transmission status, including: If the uplink transmission state is that the TLC channel instability coefficient is less than the preset TLC channel instability coefficient or the reference value of the number of protocol IP packets is less than the preset reference value of the number of protocol IP packets, the uplink transmission mode is combined transmission; If the uplink transmission status is that the TLC channel instability coefficient is greater than or equal to the preset TLC channel instability coefficient and the reference value of the number of protocol IP packets is greater than or equal to the preset reference value of the number of protocol IP packets, the uplink transmission mode is single transmission.

3. The VPN-based data security transmission method according to claim 2, characterized in that: The methods for confirming the instability coefficient of the TLC channel include: If the channel overhead coefficient is greater than or equal to the preset channel overhead coefficient, the TLC channel instability coefficient is determined according to the congestion coefficient; If the channel overhead coefficient is less than the preset channel overhead coefficient, the TLC channel instability coefficient is determined according to the effective transmission coefficient and the delay fluctuation threshold.

4. The VPN-based data security transmission method according to claim 3, characterized in that: Determine the combination method based on similar reference values, including: If the similarity reference value is less than the preset similarity reference value, the combination method is to determine the associated IP packet group according to the flow information degree; If the similarity reference value is greater than or equal to the preset similarity reference value, the combination method is to determine the associated IP packet group according to the feature matching coefficient.

5. The VPN-based data security transmission method according to claim 4, characterized in that: The methods for confirming traffic information include: For a single protocol IP packet, The IP message corresponding to the protocol IP packet is evenly divided according to the sequence characterization value to obtain a number of detection areas; Determine the sliding window area corresponding to a single detection area according to the radiation coefficient and regularity representativeness of the detection area, and determine the characteristic sequence in the IP message according to the information shift value of the character sequence corresponding to the sliding window; If the characteristic sequence ratio is greater than or equal to the preset characteristic sequence ratio, the flow information degree is determined according to the characteristic sequence shift coefficient; If the characteristic sequence ratio is less than the preset characteristic sequence ratio, the ratio of the characteristic coefficient to the characteristic sequence ratio determines the flow information degree; The sliding window area corresponding to a single detection area is positively correlated with the radiation coefficient and regularity representativeness of the detection area.

6. The VPN-based data security transmission method according to claim 4, characterized in that: The TLC channel selection method of the associated IP packet group is determined according to the transmission index, including: If the transmission index is greater than or equal to the preset transmission index, the TLC channel selection method is to select the TLC channel according to the sensitivity impact; If the transmission index is less than the preset transmission index, the TLC channel selection method is to select a TLC channel according to the transmission difficulty reference value.

7. The VPN-based data security transmission method according to claim 2, characterized in that: Determine the priority coefficient of each protocol IP packet to select the TCL channel according to the flow information degree, and select the TCL channel corresponding to each protocol IP packet according to the interaction correlation degree; Among them, the priority coefficient of a single protocol IP packet selecting a TCL channel is positively correlated with the flow information degree corresponding to the protocol IP packet; For a single protocol IP packet, a TCL channel with the smallest interaction correlation with the protocol IP packet is selected.

8. The VPN-based data security transmission method according to claim 7, characterized in that: Determine the downlink transmission optimization mode of each updated IP packet according to the downlink transmission state, including: If the downlink transmission status is that the transmission delay reference value is less than the preset transmission delay reference value, the downlink transmission optimization mode is direct transmission through the original TLC channel; If the downlink transmission status is that the transmission delay reference value is greater than or equal to the preset transmission delay reference value and the transmission channel difference is greater than or equal to the preset transmission channel difference, the downlink optimized transmission mode is the original TLC channel interval transmission; If the downlink transmission status is that the transmission delay reference value is greater than or equal to the preset transmission delay reference value and the transmission channel difference is less than the preset transmission channel difference, the downlink optimized transmission mode is to determine the diversion transmission mode according to the comprehensive evaluation coefficient.

9. The VPN-based data security transmission method according to claim 8, characterized in that: If the comprehensive evaluation coefficient is greater than or equal to the preset comprehensive evaluation coefficient, the diversion transmission mode is scheduled diversion transmission; In scheduling the diversion transmission, the updated IP packets to be diverted are determined based on the transmission time; Determine the initial scheduling range of the IP packets to be diverted and updated according to the abnormal index of the IP packets to be diverted and the channel balance coefficient; Detect the request difficulty value within the initial scheduling range, increase and adjust the initial scheduling range of the IP packet to be updated for diversion according to the difference between the request difficulty value and the preset request difficulty value, and record the initial scheduling range after the increase and adjustment as the scheduling range; The updated IP packets to be diverted are evenly dispatched to the TLC channels corresponding to the scheduling range for transmission.

10. The VPN-based data security transmission method according to claim 8, characterized in that: If the comprehensive evaluation coefficient is less than the preset comprehensive evaluation coefficient, the diversion transmission mode is interactive diversion transmission; In interactive traffic diversion transmission, the interactive channel combination scale is determined according to the interactive channel quantity reference value and the influence coefficient, and the interactive channel combination is determined according to the channel balance coefficient; For a single interactive channel combination, the updated IP packets to be diverted in each interactive channel in the interactive channel combination are distributed to the matching channels corresponding to each interactive channel for transmission.

Images