VPN-based data security transmission method

Abstract

The application relates to the field of data transmission, in particular to a data security transmission method based on VPN, which comprises the following steps: acquiring protocol IP packets, determining an uplink transmission state according to a TLC channel instability coefficient and a protocol IP packet quantity reference value, determining an uplink transmission mode of each protocol IP packet according to the uplink transmission state, wherein the uplink transmission mode is combined transmission or single transmission; under preset uplink transmission conditions, determining a downlink transmission state according to a transmission time delay reference value of the protocol IP packet and a transmission channel difference degree, and determining a downlink transmission optimization mode of each updated IP packet according to the downlink transmission state; under preset downlink transmission conditions, transmitting parsed IP packets to the VPN; and the application can improve data transmission efficiency.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of data transmission, and in particular to a data security transmission method based on VPN. BACKGROUND

[0002] In the data transmission process of mobile terminal devices, due to the complexity of network environment and potential security threats, the data transmission security problem of mobile terminal devices is increasingly prominent. Therefore, in order to meet the high standard demand of mobile terminal devices for data security, VPN technology is usually used for data communication. However, when using VPN technology for communication, there are problems such as large number of IP packets, network congestion and transmission delay, which result in poor data transmission efficiency. Therefore, how to improve the data transmission efficiency is a technical problem to be solved by the technical personnel in the field.

[0003] Chinese patent publication No. CN110430111A discloses a data transmission method of OpenVPN and a VPN server. The method comprises: obtaining a request message to be transmitted; determining the type to which the request message belongs; in the case of a protocol message to which the request message belongs, negotiating with a first user terminal that sends the request message based on the request message to generate security alliance information; establishing a mapping relationship between the generated security alliance information and the outer source IP and source port contained in the generated security alliance information; in the case of a data message to which the request message belongs, searching for security alliance information for decrypting the request message in the mapping relationship; and decrypting the request message using the searched security alliance information to obtain a plaintext message, and forwarding the plaintext message to a second user terminal through a network card used for sending the message. It can be seen that the above technical solution has the following problems: the data transmission is based only on the type of message, the data transmission mode is single, and the transmission efficiency is poor because the transmission mode cannot be adaptively adjusted according to the actual transmission state. SUMMARY

[0004] Therefore, the present application provides a data security transmission method based on VPN to overcome the problem that the data transmission mode in the prior art is single and the transmission efficiency is poor because the transmission mode cannot be adaptively adjusted according to the actual transmission state.

[0005] To achieve the above-mentioned purpose, the present application provides a data security transmission method based on VPN, comprising:

[0006] Obtaining a protocol IP packet, determining an uplink transmission state according to a TLC channel instability coefficient and a protocol IP packet quantity reference value, and determining an uplink transmission mode of each protocol IP packet according to the uplink transmission state, wherein the uplink transmission mode is combined transmission or separate transmission.

[0007] In the combined transmission, a combination mode is determined according to a similar reference value to obtain an associated IP packet group, and a TLC channel selection mode of the associated IP packet group is determined according to a transmission index, the combination mode is determined according to a characteristic reference value or a traffic information degree to obtain the associated IP packet group, and the TLC channel selection mode is determined according to a sensitive influence degree or a transmission difficulty reference value to select the TLC channel;

[0008] In the separate transmission, a priority coefficient of selecting a TLC channel by each protocol IP packet is determined according to a traffic information degree, and a corresponding TLC channel of each protocol IP packet is selected according to an interaction correlation degree;

[0009] Under a preset uplink transmission condition, a downlink transmission state is determined according to a transmission delay reference value of the protocol IP packet and a transmission channel difference degree, and a downlink transmission optimization mode of each update IP packet is determined according to the downlink transmission state;

[0010] The downlink transmission optimization mode includes direct transmission of the original TLC channel, interval transmission of the original TLC channel, and a shunt transmission mode determined according to a comprehensive evaluation coefficient, and the shunt transmission mode includes scheduling shunt transmission and interaction shunt transmission;

[0011] Under a preset downlink transmission condition, the parsed IP packet is transmitted to a VPN.

[0012] Further, the uplink transmission mode of each protocol IP packet is determined according to an uplink transmission state, including:

[0013] If the uplink transmission state is that a TLC channel instability coefficient is less than a preset TLC channel instability coefficient or a protocol IP packet number reference value is less than a preset protocol IP packet number reference value, the uplink transmission mode is combined transmission;

[0014] If the uplink transmission state is that the TLC channel instability coefficient is greater than or equal to the preset TLC channel instability coefficient and the protocol IP packet number reference value is greater than or equal to the preset protocol IP packet number reference value, the uplink transmission mode is separate transmission.

[0015] Further, the confirmation mode of the TLC channel instability coefficient includes:

[0016] If the channel overhead coefficient is greater than or equal to a preset channel overhead coefficient, the TLC channel instability coefficient is determined according to a congestion coefficient;

[0017] If the channel overhead coefficient is less than the preset channel overhead coefficient, the TLC channel instability coefficient is determined according to an effective transmission coefficient and a time delay fluctuation threshold.

[0018] Further, the combination mode is determined according to a similar reference value, including:

[0019] If the similar reference value is less than the preset similar reference value, the combination manner is to determine the associated IP packet group according to the flow information degree;

[0020] If the similar reference value is greater than or equal to the preset similar reference value, the combination manner is to determine the associated IP packet group according to the feature matching coefficient.

[0021] Further, the confirmation manner of the flow information degree comprises:

[0022] For a single protocol IP packet,

[0023] According to the sequence feature value, the protocol IP packet corresponding IP message is uniformly divided to obtain a plurality of detection regions;

[0024] According to the radiation coefficient and the regularity representative degree of a single detection region, the sliding window area corresponding to the detection region is determined, and according to the information jitter value of the character sequence corresponding to the sliding window, the feature sequence in the IP message is determined;

[0025] If the feature sequence proportion is greater than or equal to the preset feature sequence proportion, the flow information degree is determined according to the feature sequence jitter coefficient;

[0026] If the feature sequence proportion is less than the preset feature sequence proportion, the ratio of the feature coefficient to the feature sequence proportion determines the flow information degree;

[0027] The sliding window area corresponding to a single detection region has a positive correlation with the radiation coefficient and the regularity representative degree of the detection region.

[0028] Further, the TLC channel selection manner of the associated IP packet group is determined according to the transmission index, comprising:

[0029] If the transmission index is greater than or equal to the preset transmission index, the TLC channel selection manner is to select the TLC channel according to the sensitive influence degree;

[0030] If the transmission index is less than the preset transmission index, the TLC channel selection manner is to select the TLC channel according to the transmission difficulty reference value.

[0031] Further, the priority coefficient of the TLC channel selected by each protocol IP packet is determined according to the flow information degree, and the TLC channel corresponding to each protocol IP packet is selected according to the interactive correlation degree;

[0032] The priority coefficient of the TLC channel selected by a single protocol IP packet has a positive correlation with the flow information degree corresponding to the protocol IP packet;

[0033] The TLC channel with the minimum interactive correlation degree with the single protocol IP packet is selected.

[0034] Further, the downlink transmission optimization mode of each updated IP packet is determined according to the downlink transmission state, including:

[0035] If the downlink transmission state is that the transmission delay reference value is less than the preset transmission delay reference value, the downlink transmission optimization mode is direct transmission of the original TLC channel;

[0036] If the downlink transmission state is that the transmission delay reference value is greater than or equal to the preset transmission delay reference value and the transmission channel difference degree is greater than or equal to the preset transmission channel difference degree, the downlink transmission optimization mode is interval transmission between the original TLC channels;

[0037] If the downlink transmission state is that the transmission delay reference value is greater than or equal to the preset transmission delay reference value and the transmission channel difference degree is less than the preset transmission channel difference degree, the downlink transmission optimization mode is to determine the shunt transmission mode according to the comprehensive evaluation coefficient.

[0038] Further, if the comprehensive evaluation coefficient is greater than or equal to the preset comprehensive evaluation coefficient, the shunt transmission mode is scheduling shunt transmission;

[0039] In the scheduling shunt transmission, the to-be-shunted updated IP packet is determined based on the transmission time;

[0040] The initial scheduling range of the to-be-shunted updated IP packet is determined according to the anomaly index of the to-be-shunted updated IP packet and the channel balance coefficient;

[0041] The request difficulty value in the initial scheduling range is detected, and when the difference between the request difficulty value and the preset request difficulty value is greater than 0, the initial scheduling range of the to-be-shunted updated IP packet is adjusted to increase according to the difference between the request difficulty value and the preset request difficulty value, and the adjusted initial scheduling range is recorded as the scheduling range;

[0042] The to-be-shunted updated IP packet is uniformly scheduled to each TLC channel corresponding to the scheduling range for transmission.

[0043] Further, if the comprehensive evaluation coefficient is less than the preset comprehensive evaluation coefficient, the shunt transmission mode is interactive shunt transmission;

[0044] In the interactive shunt transmission, the interactive channel combination scale is determined according to the interactive channel number reference value and the influence coefficient, and the interactive channel combination is determined according to the channel balance coefficient;

[0045] For a single interactive channel combination, the to-be-shunted updated IP packet in each interactive channel in the interactive channel combination is allocated to the matching channel corresponding to each interactive channel for transmission.

[0046] Compared with the prior art, the beneficial effects of the present application are that, in the technical scheme of the present application, the uplink transmission state is determined according to the TLC channel instability coefficient and the protocol IP packet quantity reference value, the stability degree of the TLC channel and the transmission difficulty of the protocol IP packet are effectively reflected through the TLC channel instability coefficient and the protocol IP packet quantity reference value, and then different uplink transmission modes are adaptively selected according to the uplink transmission state, so that the selection of the uplink transmission mode is more in line with the actual application scene, the network bandwidth and transmission resources can be fully utilized through combined transmission, the efficiency and speed of data transmission are improved, the mutual influence and interference between multiple protocol IP packets can be avoided through separate transmission, the possibility of transmission conflict and congestion is reduced, and then the data transmission efficiency is improved.

[0047] Further, in the present application, the transmission state of the TLC channel is effectively reflected through the transmission index, and then different TLC channel selection modes are adaptively selected according to the transmission index, the TLC channel is selected according to the sensitive influence degree, the more secure TLC channel for transmission can be intelligently selected, and then the data leakage risk is reduced, and the TLC channel is selected according to the transmission difficulty reference value, and the data transmission efficiency can be improved.

[0048] Further, in the present application, the correlation degree of the protocol IP packet and the TLC channel is effectively reflected through the interaction correlation degree, and then the TLC channel corresponding to each protocol IP packet is selected according to the interaction correlation degree, which helps to reduce the error rate and loss rate in the data transmission process, and then the reliability of data transmission is improved.

[0049] Further, in the present application, the downlink transmission state is determined according to the transmission time delay reference value and the transmission channel difference degree, the transmission characteristics of the protocol IP packet are effectively reflected through the transmission time delay reference value and the transmission channel difference degree, and then different downlink transmission optimization modes are adaptively selected according to the downlink transmission state, which can reduce the data loss or transmission interruption caused by transmission failure, and then the data transmission efficiency is improved. BRIEF DESCRIPTION OF DRAWINGS

[0050] Fig. 1 It is a schematic diagram of the data security transmission method based on VPN of the present application;

[0051] Fig. 2 It is a flowchart of the present application for determining the uplink transmission mode of each protocol IP packet according to the uplink transmission state;

[0052] Fig. 3 It is a flowchart of the present application for determining the combined mode according to the similarity reference value;

[0053] Fig. 4 It is a flowchart of the present application for determining the shunt transmission mode according to the comprehensive evaluation coefficient. DETAILED DESCRIPTION

[0054] In order to make the objects, technical schemes and advantages of the present application clearer, the following further describes the present application with reference to the embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and not to limit the present application.

[0055] The preferred embodiments of the present application are described below with reference to the drawings. Those skilled in the art should understand that the embodiments are only used to explain the technical principles of the present application and not to limit the protection scope of the present application.

[0056] It should be noted that, in the description of the present application, the terms indicating the direction or positional relationship such as "upper", "lower", "left", "right", "inner", "outer" and the like are based on the direction or positional relationship shown in the drawings, which is only for the convenience of description and does not indicate or imply that the device or element must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the present application.

[0057] In addition, it should be further noted that, in the description of the present application, unless otherwise explicitly specified and limited, the terms "mounting", "connecting", "connection" should be understood in a broad sense, for example, can be fixedly connected, can be detachably connected, or integrally connected; can be mechanically connected, can be electrically connected; can be directly connected, can be indirectly connected through an intermediate medium, or can be the communication between two elements. Those skilled in the art can understand the specific meaning of the above terms in the present application according to the specific circumstances.

[0058] Please refer to Figs. 1 to 4 As shown in the drawings, the present application provides a VPN-based data security transmission method, comprising:

[0059] Obtaining protocol IP packets, determining the uplink transmission state according to the TLC channel instability coefficient and the protocol IP packet quantity reference value, and determining the uplink transmission mode of each protocol IP packet according to the uplink transmission state, wherein the uplink transmission mode is combined transmission or separate transmission;

[0060] In the combined transmission, the combined mode is determined according to the similar reference value to obtain the associated IP packet group, and the TLC channel selection mode of the associated IP packet group is determined according to the transmission index, wherein the combined mode is to determine the associated IP packet group according to the characteristic reference value or the flow information degree, and the TLC channel selection mode is to select the TLC channel according to the sensitive influence degree or the transmission difficulty reference value;

[0061] In the separate transmission, the priority coefficient of selecting the TLC channel for each protocol IP packet is determined according to the flow information degree, and the corresponding TLC channel of each protocol IP packet is selected according to the interaction correlation degree;

[0062] Under the preset uplink transmission condition, the downlink transmission state is determined according to the transmission delay reference value of the protocol IP packet and the transmission channel difference, and the downlink transmission optimization mode of each updated IP packet is determined according to the downlink transmission state.

[0063] The downlink transmission optimization mode includes original TLC channel direct transmission, original TLC channel interval transmission and shunt transmission mode determined according to the comprehensive evaluation coefficient, and the shunt transmission mode includes scheduling shunt transmission and interactive shunt transmission.

[0064] Under the preset downlink transmission condition, the parsed IP packet is transmitted to the VPN.

[0065] The application scenario of the application is the transmission of IP packets in VPN, the protocol IP packet is an IP packet for protocol packetization of a target server in a current monitoring period, and the protocol packetization is realized by packet encapsulation technology, which is easily understood by those skilled in the art and will not be described in detail; each protocol IP packet corresponds to an IP message, and the IP message corresponding to a single protocol IP packet includes header information and data information, the header information includes a plurality of control information, and the control information includes but is not limited to identifier, flag, fragment offset, time to live, protocol, header check and target address, and the data information is a message of an upper layer protocol, and the upper layer protocol includes but is not limited to TCP and UDP, which is easily understood by those skilled in the art and will not be described in detail.

[0066] In the application, there are a plurality of TLC channels between the target server and the parsing server, the target server is a server accessed by a user through VPN, the parsing server is a server responsible for DNS parsing, and the TLC channel is a transmission path using a national secret algorithm, which is easily understood by those skilled in the art and will not be described in detail.

[0067] The preset uplink transmission condition is that each protocol IP packet is transmitted to the parsing server, and the parsing server updates each protocol IP packet to an updated IP packet.

[0068] The preset downlink transmission condition is that each updated IP packet of the parsing server is transmitted to the target server, and the target server parses each updated IP packet to a parsed IP packet.

[0069] The process that the parsing server updates each protocol IP packet to an updated IP packet includes that the parsing server parses the protocol IP packet, modifies the target address of the parsed protocol IP packet according to a mapping table according to user demand, and re-packetizes the modified IP packet, and the re-packetized IP packet is recorded as an updated IP packet, and the encapsulated IP packet is parsed, which is easily understood by those skilled in the art and will not be described in detail.

[0070] When the parsed IP packet is transmitted to the VPN, any path can be selected for transmission to the VPN, and no specific limitation is made;

[0071] The monitoring period is continuously cycled in the application, and the data state is determined once at the end of each monitoring period. The length of the monitoring period can be set according to the user's needs. The greater the user's demand for monitoring accuracy, the shorter the monitoring period. A monitoring period value is provided, and the monitoring period is 10s.

[0072] In the application, a plurality of historical records are correspondingly provided. Each historical record records the TLC channel instability coefficient, channel overhead coefficient, sequence length reference value, transmission index, transmission delay reference value, transmission channel difference, and request difficulty value in the historical process of at least one data transmission. Each historical record corresponds to a qualified mark. The qualified mark records whether the data transmission process meets the user's needs. The qualified mark can be recorded manually. It can be understood that the user can determine whether the data transmission process meets the needs according to the self-set index. The self-set index can be, but is not limited to, the number of delays. The number of delays is the number of monitoring periods with a transmission time greater than 5s. The transmission time is the time for transmitting all protocol IP packets in a single monitoring period to the analysis server.

[0073] Specifically, the uplink transmission mode of each protocol IP packet is determined according to the uplink transmission state, including:

[0074] If the uplink transmission state is that the TLC channel instability coefficient is less than the preset TLC channel instability coefficient or the protocol IP packet quantity reference value is less than the preset protocol IP packet quantity reference value, the uplink transmission mode is combined transmission.

[0075] If the uplink transmission state is that the TLC channel instability coefficient is greater than or equal to the preset TLC channel instability coefficient and the protocol IP packet quantity reference value is greater than or equal to the preset protocol IP packet quantity reference value, the uplink transmission mode is separate transmission.

[0076] The uplink transmission state includes a first uplink transmission state and a second uplink transmission state. The first uplink transmission state is that the TLC channel instability coefficient is less than the preset TLC channel instability coefficient or the protocol IP packet quantity reference value is less than the preset protocol IP packet quantity reference value. The second uplink transmission state is that the TLC channel instability coefficient is greater than or equal to the preset TLC channel instability coefficient and the protocol IP packet quantity reference value is greater than or equal to the preset protocol IP packet quantity reference value.

[0077] The protocol IP packet quantity reference value is the total amount of protocol IP packets in the current monitoring period.

[0078] The preset TLC channel instability coefficient and the preset protocol IP packet quantity reference value can be determined by the user according to the actual application scene. The greater the value of the preset TLC channel instability coefficient and the preset protocol IP packet quantity reference value, the greater the user's demand for combined transmission of protocol IP packets. A preset TLC channel instability coefficient and a preset protocol IP packet quantity reference value are provided. The historical records of combined transmission of protocol IP packets are detected. The average value of the TLC channel instability coefficient corresponding to the historical records that can meet the user's demand is recorded as the preset TLC channel instability coefficient. The preset protocol IP packet quantity reference value is 20.

[0079] Specifically, the confirmation method of the TLC channel instability coefficient includes:

[0080] If the channel overhead coefficient is greater than or equal to the preset channel overhead coefficient, the TLC channel instability coefficient is determined according to the congestion coefficient;

[0081] If the channel overhead coefficient is less than the preset channel overhead coefficient, the TLC channel instability coefficient is determined according to the effective transmission coefficient and the delay fluctuation threshold.

[0082] The channel overhead coefficient is the average value of the sub-overhead values corresponding to each TLC channel. The sub-overhead value corresponding to a single TLC channel is the maximum data amount that can be transmitted by the single TLC channel within 1s. The unit of the sub-overhead value is bits per second, and the unit of the data amount is bits.

[0083] The value of the preset channel overhead coefficient can be determined by the user according to the actual application scene. The smaller the value of the preset channel overhead coefficient, the greater the user's demand for determining the TLC channel instability coefficient according to the delay fluctuation threshold. A preset channel overhead coefficient is provided. The historical records of determining the TLC channel instability coefficient according to the delay fluctuation threshold are detected. The average value of the historical records that can meet the user's demand is recorded as the preset channel overhead coefficient.

[0084] If the channel overhead coefficient is greater than or equal to the preset channel overhead coefficient, the TLC channel instability coefficient and the congestion coefficient have a positive correlation;

[0085] If the channel overhead coefficient is less than the preset channel overhead coefficient, the TLC channel instability coefficient = delay fluctuation threshold - effective transmission coefficient;

[0086] The congestion coefficient is an average value of the sub-congestion coefficients corresponding to each TLC channel, and the sub-congestion coefficient corresponding to a single TLC channel is the number of nodes + the connection number reference value. The connection number reference value is determined in the following manner: for a single TLC channel, the TLC channel is regarded as a target channel, the nodes in the target channel are regarded as target nodes, and the other nodes outside the target channel are regarded as reference nodes. The connection number reference value is the number of reference nodes directly connected to the target nodes, and the reference nodes directly connected to the target nodes are IP packets that can be directly transmitted from the target nodes to the reference nodes without passing through other nodes except the target nodes and the reference nodes. The nodes can receive, process and forward IP packets, including but not limited to switches, routers and servers, which are easily understood by those skilled in the art and will not be described in detail.

[0087] The delay fluctuation threshold is determined in the following manner: each monitoring period located before the current monitoring period is regarded as a historical monitoring period, the reference IP packet is an IP packet that has been protocol packetized by the target server in the historical monitoring period and has been transmitted to the analysis server, and the delay fluctuation threshold is the standard deviation of the sub-reference values corresponding to each reference IP packet. For a single reference IP packet, the sub-reference value corresponding to the reference IP packet is the time for the reference IP packet to be transmitted from the target server to the analysis server.

[0088] The effective transmission coefficient is (the number of reference IP packets with sub-reference values less than the preset sub-reference value) / the total amount of reference IP packets. The value of the preset sub-reference value can be determined by the user according to the actual application scenario. The smaller the value of the preset sub-reference value, the greater the user's demand for improving transmission efficiency. A value of the preset sub-reference value is determined, and the average value of the sub-reference values corresponding to the historical records that can meet the user's demand is regarded as the preset sub-reference value.

[0089] Specifically, the combination mode is determined according to the similar reference value, which includes:

[0090] If the similar reference value is less than the preset similar reference value, the combination mode is determined according to the traffic information degree to determine the associated IP packet group.

[0091] If the similar reference value is greater than or equal to the preset similar reference value, the combination mode is determined according to the feature matching coefficient to determine the associated IP packet group.

[0092] The similar reference value is an average value of the sub-similar reference values corresponding to each protocol IP packet, and the sub-similar reference value corresponding to a single protocol IP packet is an average value of the matching coefficients corresponding to the protocol IP packet and other protocol IP packets. For any two IP packets corresponding to protocol IP packets, the larger value of the number of keywords in the two IP packets is regarded as a, and the number of keywords appearing in both IP packets is regarded as b. The matching coefficient is b / a.

[0093] For any two protocol IP packets, the feature matching coefficient = 1 - (absolute value of difference between feature reference values corresponding to the two protocol IP packets / larger value of the feature reference values corresponding to the two protocol IP packets);

[0094] The confirmation method of the feature reference value comprises:

[0095] For a single protocol IP packet,

[0096] If the sequence length reference value is greater than or equal to a preset sequence length reference value, the feature reference value is determined according to the sequence feature value, wherein the feature reference value is in a positive correlation with the sequence feature value;

[0097] If the sequence length reference value is less than the preset sequence length reference value, the feature reference value is determined according to the protocol matching coefficient, wherein the feature reference value is in a negative correlation with the protocol matching coefficient;

[0098] The sequence length reference value is the total amount of characters appearing in the IP message corresponding to the single protocol IP packet, and the sequence feature value = number of keywords appearing in the IP message corresponding to the single protocol IP packet - influence coefficient. For a single protocol IP packet, the keyword appearing most frequently in the protocol IP packet is recorded as a reference keyword, and the number of characters between the first reference keyword and the last reference keyword in the text reading from front to back is recorded as the influence coefficient;

[0099] The confirmation method of the protocol matching coefficient is that, for a single protocol IP packet, the protocol IP packet is recorded as a target packet, other protocol IP packets outside the target packet are recorded as reference packets, keywords appearing in the IP message corresponding to the target packet are recorded as analysis keywords, and the average value of the number of analysis keywords corresponding to each reference packet is recorded as the protocol matching coefficient;

[0100] The combination method is to determine the associated IP packet group according to the flow information degree, comprising: sorting each protocol IP packet according to the flow information degree from large to small and recording as a reference sequence, recording protocol IP packets not recorded in the associated IP packet group as reference packets, and sequentially selecting reference packets in the reference sequence according to the flow information degree from large to small until the sum of the flow information degrees corresponding to the selected reference packets is greater than a preset flow information degree, then recording the set of each reference packet before the order of the last selected reference packet as an associated IP packet group, and continuing to divide the protocol IP packets not recorded in the associated IP packet group until each protocol IP packet is recorded in the associated IP packet group;

[0101] The combination manner is to determine the associated IP packet group according to the characteristic reference value, and the combination manner comprises: performing associated analysis on each protocol IP packet, when performing associated analysis on a single protocol IP packet, marking the protocol IP packet as a target protocol IP packet, marking other protocol IP packets except the target protocol IP packet as reference protocol IP packets, marking a set of the reference protocol IP packets and the target protocol IP packet, which have a characteristic matching coefficient greater than a preset characteristic matching coefficient, as an associated IP packet group, and continuing to perform associated analysis on the protocol IP packets not marked in the associated IP packet group until each protocol IP packet is marked in the associated IP packet group;

[0102] The values of the preset similarity reference value and the preset sequence length reference value can be determined by the user according to an actual application scenario, the greater the value of the preset similarity reference value is, the greater the demand of the user for determining the associated IP packet group according to the traffic information degree is, a value of the preset similarity reference value is provided, the preset similarity reference value is 50%, the greater the value of the preset sequence length reference value is, the greater the demand of the user for determining the characteristic reference value according to the protocol comparison coefficient is, a value of the preset sequence length reference value is provided, historical records of determining the characteristic reference value according to the protocol comparison coefficient are detected, and an average value of the sequence length reference values corresponding to the historical records that can meet the demand of the user is marked as the preset sequence length reference value;

[0103] The values of the preset traffic information degree and the preset characteristic matching coefficient can be determined by the user according to an actual application scenario, the greater the demand of the user for improving the transmission efficiency of the associated IP packet group is, the smaller the values of the preset traffic information degree and the preset characteristic matching coefficient are, a value of the preset traffic information degree and the preset characteristic matching coefficient is provided, historical records of determining the associated IP packet group according to the traffic information degree are detected, an average value of the reference thresholds corresponding to each associated IP packet group in the historical records that can meet the demand of the user is marked as the preset traffic information degree, the reference threshold corresponding to a single associated IP packet group is the sum of the traffic information degrees corresponding to each protocol IP packet in the associated IP packet group, and the preset characteristic matching coefficient is 70%.

[0104] Specifically, the confirmation manner of the traffic information degree comprises:

[0105] for a single protocol IP packet,

[0106] The IP message corresponding to the protocol IP packet is uniformly divided according to the sequence characteristic value to obtain a plurality of detection regions;

[0107] The sliding window area corresponding to the single detection region is determined according to the radiation coefficient and the regularity degree of the single detection region, and the characteristic sequence in the IP message is determined according to the information jitter value of the character sequence corresponding to the sliding window;

[0108] If the feature sequence proportion is greater than or equal to the preset feature sequence proportion, the flow information degree is determined according to the feature sequence displacement coefficient;

[0109] If the feature sequence proportion is less than the preset feature sequence proportion, the ratio of the feature coefficient to the feature sequence proportion determines the flow information degree.

[0110] The sliding window area corresponding to a single detection area is positively correlated with the radiation coefficient and the regularity degree of the detection area.

[0111] The IP packets corresponding to the protocol IP packet are uniformly divided according to the eigenvalue of the sequence to obtain a plurality of detection areas, wherein the IP packets are divided into a plurality of detection areas with the same size and equal area, and the number of detection areas is positively correlated with the eigenvalue of the sequence.

[0112] The confirmation method of the radiation coefficient and the regularity degree is that, for a single detection area in the IP packet corresponding to a single protocol IP packet, the detection area is recorded as a target detection area, other detection areas except the target detection area are recorded as reference detection areas, and the keywords in the target detection area are recorded as detection keywords. The radiation coefficient = radiation range reference value / number of detection keywords in the target detection area, the keywords in the reference detection area that are the same as the detection keywords are recorded as radiation keywords, the number of characters between the first radiation keyword and the last radiation keyword appearing in the reading order from the first to the last is recorded as the radiation range reference value, and the regularity degree corresponding to the target detection area = number of reference detection areas where the radiation keywords appear / total amount of reference detection areas.

[0113] The sliding window is a square area, the moving step of the sliding window is the same as the length of the sliding window, the sliding window moves from the upper left corner of a single detection area to the lower right corner of the detection area according to the moving step, the character sequence is a set of characters located in the sliding window when the sliding window moves to a certain position, and the sliding window corresponds to a character sequence at each position in the detection area.

[0114] The character sequence corresponding to the sliding window with an information displacement value greater than a preset information displacement value is recorded as a feature sequence.

[0115] The sliding window area = 0.2 * (radiation coefficient + regularity degree) * area of a single detection area.

[0116] The information displacement value and the collocation coefficient are positively correlated, and the confirmation method of the collocation coefficient is that the keywords in a single sliding window are recorded as window keywords, and the collocation coefficient = number of reference IP packets in which all window keywords appear / total amount of all reference IP packets.

[0117] The value of the preset information shift value can be determined by the user according to the actual application scene. The greater the value of the preset information shift value, the greater the user's demand for determining the character sequence as the feature sequence. The average value of the information shift value corresponding to the historical record that can meet the user's demand is recorded as the preset information shift value;

[0118] The feature sequence proportion = the number of feature sequences / the number of character sequences in a single detection area;

[0119] The value of the preset feature sequence proportion can be determined by the user according to the actual application scene. The smaller the value of the preset feature sequence proportion, the greater the user's demand for determining the flow information degree according to the feature sequence shift coefficient. A value of the preset feature sequence proportion is provided, and the preset feature sequence proportion is 50%;

[0120] If the feature sequence proportion is greater than or equal to the preset feature sequence proportion, the flow information degree and the feature sequence shift coefficient have a positive correlation;

[0121] If the feature sequence proportion is less than the preset feature sequence proportion, the flow information degree = the feature coefficient / the feature sequence proportion;

[0122] The feature sequence shift coefficient is the average line of the distance reference values corresponding to each feature sequence in a single protocol IP packet. The distance reference value corresponding to a single feature sequence is the average value of the shortest distance from the center position of the feature sequence to the center positions of other feature sequences. The center position of a single feature sequence is the center of the circumscribed circle of the smallest rectangle that can contain all the characters in the feature sequence. The feature coefficient is the average value of the information shift values corresponding to each feature sequence corresponding to a single protocol IP packet.

[0123] Specifically, the TLC channel selection mode of the associated IP packet group is determined according to the transmission index, which includes:

[0124] If the transmission index is greater than or equal to the preset transmission index, the TLC channel selection mode is to select the TLC channel according to the sensitive influence degree;

[0125] If the transmission index is less than the preset transmission index, the TLC channel selection mode is to select the TLC channel according to the transmission difficulty reference value.

[0126] The transmission index = 1 / (TLC channel instability coefficient + total amount of the associated IP packet group);

[0127] The preset transmission index value can be determined by the user according to the actual application scene. The greater the preset transmission index value, the greater the user's demand for selecting the TLC channel according to the transmission difficulty reference value. A preset transmission index value is provided. The average value of the transmission index corresponding to the historical record that can meet the user's demand is recorded as the preset transmission index;

[0128] In the selection of the TLC channel according to the sensitive influence degree, when selecting the TLC channel for a single associated IP packet group, the TLC channel of the unassigned associated IP packet group with the minimum sensitive influence degree of the associated IP packet group is selected for transmission.

[0129] In the selection of the TLC channel according to the transmission difficulty reference value, when selecting the TLC channel for a single associated IP packet group, the TLC channel of the unassigned associated IP packet group with the minimum transmission difficulty reference value of the associated IP packet group is selected for transmission.

[0130] The confirmation method of the sensitive influence degree is that, for a single TLC channel and a single associated IP packet group, the IP packets that have been protocol packetized and are being transmitted in the TLC channel in the current monitoring period are recorded as transmission packets, and the average value of the sensitive average values of each protocol IP packet corresponding to the associated IP packet group is recorded as the sensitive influence degree. The sensitive average value of a single protocol IP packet is the maximum value in the matching coefficients corresponding to the protocol IP packet and each transmission packet.

[0131] The transmission difficulty reference value = the sub-overhead value - the sub-congestion coefficient.

[0132] Specifically, the priority coefficient of each protocol IP packet selecting the TLC channel is determined according to the traffic information degree, and the TLC channel corresponding to each protocol IP packet is selected according to the interaction correlation degree.

[0133] The priority coefficient of a single protocol IP packet selecting the TLC channel is in a positive correlation with the traffic information degree corresponding to the protocol IP packet.

[0134] The TLC channel with the minimum interaction correlation degree of a single protocol IP packet is selected.

[0135] The confirmation method of the interaction correlation degree is that, for a single protocol IP packet and a single TLC channel, the protocol IP packet is recorded as a target packet, the IP packets that have been protocol packetized and are being transmitted in the TLC channel in the current monitoring period in the TLC channel and the protocol IP packets assigned to the TLC channel are recorded as first transmission packets. The interaction correlation degree is the average value of the information similarity degrees corresponding to the target packet and each first transmission packet. The information similarity degree corresponding to the target packet and a single first transmission packet = 1 / absolute value of the difference between the traffic information degrees corresponding to the target packet and the first transmission packet.

[0136] The greater the flow information degree of the single protocol IP packet is, the more prior the order of selecting the TLC channel of the protocol IP packet is.

[0137] Specifically, the downlink transmission optimization mode of each updated IP packet is determined according to the downlink transmission state, including:

[0138] If the downlink transmission state is that the transmission time delay reference value is less than the preset transmission time delay reference value, the downlink transmission optimization mode is direct transmission of the original TLC channel;

[0139] If the downlink transmission state is that the transmission time delay reference value is greater than or equal to the preset transmission time delay reference value and the transmission channel difference degree is greater than or equal to the preset transmission channel difference degree, the downlink transmission optimization mode is interval transmission between the original TLC channels;

[0140] If the downlink transmission state is that the transmission time delay reference value is greater than or equal to the preset transmission time delay reference value and the transmission channel difference degree is less than the preset transmission channel difference degree, the downlink transmission optimization mode is the shunt transmission mode determined according to the comprehensive evaluation coefficient.

[0141] The downlink transmission state includes a first downlink transmission state, a second downlink transmission state and a third downlink transmission state, the first downlink transmission state is that the transmission time delay reference value is less than the preset transmission time delay reference value, the second downlink transmission state is that the transmission time delay reference value is greater than or equal to the preset transmission time delay reference value and the transmission channel difference degree is greater than or equal to the preset transmission channel difference degree, and the third downlink transmission state is that the transmission time delay reference value is greater than or equal to the preset transmission time delay reference value and the transmission channel difference degree is less than the preset transmission channel difference degree;

[0142] The transmission time delay reference value is the absolute value of the difference between the maximum value and the minimum value of the transmission time corresponding to each protocol IP packet; the transmission time corresponding to a single protocol IP packet is the time from the transmission of the protocol IP packet from the target server to the parsing server;

[0143] The transmission channel difference degree = the number of protocol IP packets corresponding to the TLC channel whose transmission time is greater than the preset transmission time / the total amount of the TLC channel;

[0144] The preset transmission time delay reference value, the preset transmission channel difference degree and the preset transmission time are determined by the user according to the actual application scene. The greater the user's demand for improving the transmission efficiency, the smaller the preset transmission time delay reference value and the preset transmission time. A preset transmission time delay reference value is provided. The historical records of direct transmission of the original TLC channel are detected. The average value of the transmission time delay reference value that can meet the user's demand is recorded as the preset transmission time delay reference value. The preset transmission time is 1s. The greater the preset transmission channel difference degree, the greater the user's demand for determining the shunt transmission mode according to the comprehensive evaluation coefficient. A preset transmission channel difference degree is provided. The historical records of interval transmission using the original TLC channel are detected. The average value of the transmission channel difference degree corresponding to the historical records that can meet the user's demand is recorded as the preset transmission channel difference degree.

[0145] In the original TLC channel direct transmission, the TLC channel corresponding to the protocol IP packet of the single update IP packet is selected from the analysis server to the target server.

[0146] In the original TLC channel interval transmission, the TLC channel corresponding to the protocol IP packet of the single update IP packet is selected from the analysis server to the target server. The transmission interval of the update IP packet corresponding to a single TLC channel has a positive correlation with the transmission time delay reference value. The transmission interval is the interval between the transmission start times of two adjacent transmission update IP packets.

[0147] Specifically, if the comprehensive evaluation coefficient is greater than or equal to the preset comprehensive evaluation coefficient, the shunt transmission mode is dispatch shunt transmission.

[0148] In the dispatch shunt transmission, the update IP packet to be shunted is determined based on the transmission time.

[0149] The initial dispatch range of the update IP packet to be shunted is determined according to the abnormality index of the update IP packet to be shunted and the channel balance coefficient.

[0150] The request difficulty value in the initial dispatch range is detected. When the difference between the request difficulty value and the preset request difficulty value is greater than 0, the initial dispatch range of the update IP packet to be shunted is adjusted according to the difference between the request difficulty value and the preset request difficulty value, and the adjusted initial dispatch range is recorded as the dispatch range.

[0151] The update IP packet to be shunted is uniformly dispatched to each TLC channel corresponding to the dispatch range for transmission.

[0152] Among them, the update IP packet to be shunted is the update IP packet corresponding to the protocol IP packet with a transmission time greater than the preset transmission time.

[0153] The initial scheduling range of the IP packet to be shunted is determined according to the abnormal index of the IP packet to be shunted and the channel balance coefficient, wherein the number of TLC channels contained in the initial scheduling range of the IP packet to be shunted is determined according to the abnormal index of the IP packet to be shunted, the number of TLC channels contained in the initial scheduling range of the IP packet to be shunted is in a positive correlation with the abnormal index of the IP packet to be shunted, and the TLC channels in which there is no protocol IP packet corresponding to the IP packet to be shunted are selected in descending order of the channel balance coefficient until the number of TLC channels corresponding to the initial scheduling range is reached, and each selected TLC channel is recorded as the initial scheduling range;

[0154] The TLC channels in which there is no protocol IP packet corresponding to the IP packet to be shunted and which are not allocated to the initial scheduling range are selected in descending order of the channel balance coefficient until the increase adjustment amount of the initial scheduling range of the IP packet to be shunted is reached;

[0155] The IP packets to be shunted are uniformly scheduled to each TLC channel corresponding to the scheduling range for transmission, wherein the number of IP packets to be shunted allocated to each TLC channel corresponding to the scheduling range is the same;

[0156] For a single TLC channel, the channel balance coefficient = 1 / (the number of protocol IP packets transmitted by the TLC channel in the uplink transmission mode / the sub-congestion coefficient corresponding to the TLC channel);

[0157] The request difficulty value = the number of protocol IP packets transmitted by each TLC channel corresponding to the initial scheduling range in the uplink transmission mode / the number of each TLC channel corresponding to the initial scheduling range;

[0158] The increase adjustment amount of the initial scheduling range of the IP packet to be shunted is in a positive correlation with the difference between the request difficulty value and the preset request difficulty value, and the increase adjustment amount of the initial scheduling range of the IP packet to be shunted = (the request difficulty value-the preset request difficulty value)×the number of each TLC channel corresponding to the initial scheduling range;

[0159] The abnormal index of the IP packet to be shunted = the number of IP packets to be shunted + the average value of the transmission time of the protocol IP packets corresponding to the IP packet to be shunted;

[0160] The value of the preset request difficulty value can be determined by the user according to the actual application scenario. The greater the user's demand for improving data transmission efficiency, the smaller the value of the preset request difficulty value. A value of the preset request difficulty is provided. The average value of the request difficulty value corresponding to the historical record in which the user's demand can be met is recorded as the preset request difficulty value by detecting the historical record of the scheduling shunt transmission;

[0161] The comprehensive evaluation coefficient is equal to the transmission time delay reference value and the transmission channel difference degree, the value of the preset comprehensive evaluation coefficient can be determined by the user according to the actual application scene, the greater the value of the preset comprehensive evaluation coefficient is, the greater the demand of the user for the interactive split transmission is, a value of the preset comprehensive evaluation coefficient is provided, the historical records of the user using the interactive split transmission are detected, and the average value of the comprehensive evaluation coefficient corresponding to the historical records meeting the demand of the user is recorded as the preset comprehensive evaluation coefficient.

[0162] Specifically, if the comprehensive evaluation coefficient is less than the preset comprehensive evaluation coefficient, the split transmission mode is the interactive split transmission.

[0163] In the interactive split transmission, the interactive channel combination scale is determined according to the interactive channel number reference value and the influence coefficient, and the interactive channel combination is determined according to the channel balance coefficient.

[0164] For a single interactive channel combination, the to-be-split-updated IP packets in each interactive channel in the interactive channel combination are distributed to the matching channels corresponding to the interactive channels for transmission.

[0165] Among them, the TLC channel in which there is a protocol IP packet corresponding to a to-be-split-updated IP packet in the uplink transmission mode is recorded as an interactive channel, the interactive channel number reference value is the total number of interactive channels,

[0166] The influence coefficient is equal to (the maximum value in the sub-influence coefficients corresponding to each interactive channel-the minimum value in the sub-influence coefficients corresponding to each interactive channel) / the maximum value in the sub-influence coefficients corresponding to each interactive channel, and the sub-influence coefficient is the time for a single interactive channel to transmit all the protocol IP packets corresponding to the interactive channel to the analysis server.

[0167] The interactive channel combination scale and the interactive channel number reference value are in a positive correlation, the interactive channel combination scale and the influence coefficient are in a negative correlation, the reference interactive channel combination scale is equal to the interactive channel number reference value*(1-the influence coefficient), and it should be noted that the interactive channel combination scale is the smallest even number greater than or equal to the reference interactive channel combination scale.

[0168] The interactive channel combination scale is the number of interactive channels contained in a single interactive channel combination.

[0169] The interactive channel combination is determined according to the channel balance coefficient, including: sorting each interactive channel in the order of the channel balance coefficient from large to small, and recording it as a channel sequence, selecting the same number of interactive channels at both ends of the channel sequence, until the number of interactive channels in the interactive channel combination reaches the interactive channel combination scale, then recording the division of an interactive channel combination as the end, and continuing to combine the interactive channels that are not recorded as interactive channel combinations until each interactive channel is recorded as an interactive channel combination.

[0170] For a single interactive channel in a single interactive channel combination, the interactive channel is recorded as a target channel, each interactive channel in the interactive channel combination is sorted according to the channel balance coefficient from large to small, and recorded as a first channel sequence,

[0171] The confirmation mode of the matching channel corresponding to the target channel includes:

[0172] If the channel balance coefficient corresponding to the target channel is the minimum value in each channel balance coefficient corresponding to the interactive channel combination, the matching channel corresponding to the target channel is the interactive channel with the largest channel balance coefficient in the interactive channel combination;

[0173] If the channel balance coefficient corresponding to the target channel is not the minimum value in each channel balance coefficient corresponding to the interactive channel combination, the matching channel corresponding to the target channel is the interactive channel adjacent to the target channel and greater than the channel balance coefficient of the target channel in the first channel sequence.

[0174] So far, the technical solutions of the present application have been described in combination with the preferred embodiments shown in the drawings, but those skilled in the art can easily understand that the protection scope of the present application is obviously not limited to these specific embodiments. Those skilled in the art can make equivalent changes or replacements to the related technical features without departing from the principles of the present application, and the technical solutions after the changes or replacements will fall within the protection scope of the present application.

[0175] The above description is only the preferred embodiments of the present application and is not used to limit the present application; for those skilled in the art, the present application can have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principles of the present application shall be included in the protection scope of the present application.

Claims

1. A method for secure transmission of data based on VPN, characterized in that, The method comprises the following steps: acquiring a protocol IP packet, determining an uplink transmission state according to a TLC channel instability coefficient and a protocol IP packet quantity reference value, and determining an uplink transmission mode of each protocol IP packet according to the uplink transmission state, wherein the uplink transmission mode is combined transmission or individual transmission; in the combined transmission, a combined mode is determined according to a similar reference value to obtain an associated IP packet group, and a TLC channel selection mode of the associated IP packet group is determined according to a transmission index, wherein the combined mode is determined according to a characteristic reference value or a flow information degree, and the TLC channel selection mode is selected according to a sensitive influence degree or a transmission difficulty reference value; in the individual transmission, a priority coefficient of each protocol IP packet for selecting a TLC channel is determined according to a flow information degree, and a corresponding TLC channel of each protocol IP packet is selected according to an interaction correlation degree; under a preset uplink transmission condition, a downlink transmission state is determined according to a transmission time delay reference value of the protocol IP packet and a transmission channel difference degree, and a downlink transmission optimization mode of each updated IP packet is determined according to the downlink transmission state; the downlink transmission optimization mode comprises original TLC channel direct transmission, original TLC channel interval transmission, and a shunt transmission mode determined according to a comprehensive evaluation coefficient, wherein the shunt transmission mode comprises dispatching shunt transmission and interaction shunt transmission; under a preset downlink transmission condition, the parsed IP packet is transmitted to a VPN; the TLC channel is a transmission path using a national secret algorithm; the confirmation mode of the TLC channel instability coefficient comprises: if the channel overhead coefficient is greater than or equal to a preset channel overhead coefficient, the TLC channel instability coefficient is determined according to a congestion coefficient; if the channel overhead coefficient is less than the preset channel overhead coefficient, the TLC channel instability coefficient is determined according to an effective transmission coefficient and a time delay fluctuation threshold value; the channel overhead coefficient is an average value of sub-overhead values corresponding to each TLC channel, and the sub-overhead value corresponding to a single TLC channel is a maximum data amount that can be transmitted by the single TLC channel within 1s; if the comprehensive evaluation coefficient is greater than or equal to a preset comprehensive evaluation coefficient, the shunt transmission mode is dispatching shunt transmission; in the dispatching shunt transmission, a to-be-shunted updated IP packet is determined based on a transmission time; an initial dispatching range of the to-be-shunted updated IP packet is determined according to an abnormal index of the to-be-shunted updated IP packet and a channel balance coefficient; the to-be-shunted updated IP packet is uniformly dispatched to each TLC channel corresponding to the dispatching range for transmission; if the comprehensive evaluation coefficient is less than the preset comprehensive evaluation coefficient, the shunt transmission mode is interaction shunt transmission; in the interaction shunt transmission, an interaction channel combination scale is determined according to an interaction channel quantity reference value and an influence coefficient, and an interaction channel combination is determined according to a channel balance coefficient; for a single interaction channel combination, the to-be-shunted updated IP packets in each interaction channel in the interaction channel combination are distributed to matching channels corresponding to the interaction channels for transmission.

2. The VPN-based data security transmission method according to claim 1, characterized in that, determining the uplink transmission mode of each protocol IP packet according to the uplink transmission state comprises: if the uplink transmission state is a first uplink transmission state in which the TLC channel instability coefficient is less than a preset TLC channel instability coefficient or the protocol IP packet quantity reference value is less than a preset protocol IP packet quantity reference value, the uplink transmission mode is combined transmission; If the uplink transmission state is a second uplink transmission state in which the TLC channel instability coefficient is greater than or equal to a preset TLC channel instability coefficient and the protocol IP packet quantity reference value is greater than or equal to a preset protocol IP packet quantity reference value, the uplink transmission mode is separate transmission. The uplink transmission state includes a first uplink transmission state and a second uplink transmission state.

3. The VPN-based data security transmission method according to claim 1, characterized in that, The combination mode is determined according to the similarity reference value, including: If the similarity reference value is less than a preset similarity reference value, the combination mode is to determine the associated IP packet group according to the traffic information degree; If the similarity reference value is greater than or equal to the preset similarity reference value, the combination mode is to determine the associated IP packet group according to the feature matching coefficient; The similarity reference value is an average value of sub-similarity reference values corresponding to each protocol IP packet, and the sub-similarity reference value corresponding to a single protocol IP packet is an average value of matching coefficients corresponding to the protocol IP packet and other protocol IP packets; for any two IP packets corresponding to IP messages, a larger value in the number of keywords corresponding to the two IP messages is recorded as a, and the number of keywords appearing in both IP messages is recorded as b, and the matching coefficient is b / a.

4. The VPN-based data security transmission method according to claim 3, characterized in that, The TLC channel selection mode for determining the associated IP packet group according to the transmission index, including: If the transmission index is greater than or equal to a preset transmission index, the TLC channel selection mode is to select the TLC channel according to the sensitive influence degree; If the transmission index is less than the preset transmission index, the TLC channel selection mode is to select the TLC channel according to the transmission difficulty reference value; The confirmation method of the sensitive influence degree is that, for a single TLC channel and a single associated IP packet group, the IP packet that has been protocol packaged and is being transmitted in the TLC channel in the current monitoring period is recorded as a transmission packet, and the average value of the sensitive average values of each protocol IP packet corresponding to the associated IP packet group is recorded as the sensitive influence degree, and the sensitive average value of a single protocol IP packet is the maximum value in the matching coefficients corresponding to each transmission packet; The transmission difficulty reference value = the sub-overhead value - the sub-congestion coefficient.

5. The VPN-based data security transmission method according to claim 2, wherein, The priority coefficient of each protocol IP packet for selecting the TLC channel is determined according to the traffic information degree, and the TLC channel corresponding to each protocol IP packet is selected according to the interaction correlation degree; The priority coefficient of a single protocol IP packet for selecting the TLC channel is in a positive correlation with the traffic information degree corresponding to the protocol IP packet; The TLC channel with the minimum interaction correlation degree with the single protocol IP packet is selected for the single protocol IP packet; The confirmation method of the interaction correlation degree is that, for a single protocol IP packet and a single TLC channel, the protocol IP packet is recorded as a target packet, and the IP packet that has been protocol packaged and is being transmitted in the TLC channel in the current monitoring period and the protocol IP packet allocated to the TLC channel in the TLC channel are recorded as first transmission packets; the interaction correlation degree is an average value of information similarity degrees corresponding to the target packet and each first transmission packet, and the information similarity degree corresponding to the target packet and a single first transmission packet = 1 / absolute value of a difference between the traffic information degrees corresponding to the target packet and the first transmission packet.

6. The VPN-based data security transmission method according to claim 5, characterized in that, The downlink transmission optimization mode of each update IP packet is determined according to the downlink transmission state, including: If the downlink transmission state is a first downlink transmission state in which the transmission time delay reference value is less than the preset transmission time delay reference value, the downlink transmission optimization mode is direct transmission of the original TLC channel; If the downlink transmission state is a second downlink transmission state in which the transmission time delay reference value is greater than or equal to the preset transmission time delay reference value and the transmission channel difference degree is greater than or equal to the preset transmission channel difference degree, the downlink transmission optimization mode is interval transmission of the original TLC channel; If the downlink transmission state is a third downlink transmission state in which the transmission time delay reference value is greater than or equal to the preset transmission time delay reference value and the transmission channel difference degree is less than the preset transmission channel difference degree, the downlink transmission optimization mode is a shunt transmission mode determined according to the comprehensive evaluation coefficient; The transmission channel difference degree = the number of TLC channels corresponding to protocol IP packets with transmission time greater than the preset transmission time / the total number of TLC channels; The downlink transmission state includes a first downlink transmission state, a second downlink transmission state, and a third downlink transmission state; In the interval transmission of the original TLC channel, the TLC channel corresponding to the protocol IP packet of a single update IP packet is selected to transmit the update IP packet from the analysis server to the target server, and the transmission interval of the update IP packet corresponding to a single TLC channel and the transmission time delay reference value are in a positive correlation relationship; The comprehensive evaluation coefficient = the transmission time delay reference value + the transmission channel difference degree.

7. The VPN-based data security transmission method of claim 1, wherein, The protocol IP packet is an IP packet that is protocol packetized by the target server in the current monitoring period; The analysis server analyzes the protocol IP packet, modifies the target address of the analyzed protocol IP packet according to the mapping table according to user requirements, and protocol packetizes the modified IP packet again, and the IP packet protocol packetized again is recorded as an update IP packet; The analysis IP packet is an update IP packet that is analyzed by the target server.

8. The VPN-based data security transmission method of claim 1, wherein, The confirmation mode of the feature reference value includes: For a single protocol IP packet, If the sequence length reference value is greater than or equal to the preset sequence length reference value, the feature reference value is determined according to the sequence feature value, and the feature reference value and the sequence feature value are in a positive correlation relationship; If the sequence length reference value is less than the preset sequence length reference value, the feature reference value is determined according to the protocol comparison coefficient, and the feature reference value and the protocol comparison coefficient are in a negative correlation relationship; The sequence feature value = the number of keywords appearing in the IP message corresponding to a single protocol IP packet - the influence coefficient, for a single protocol IP packet, the keyword appearing most frequently in the protocol IP packet is recorded as a reference keyword, and the number of characters between the first reference keyword and the last reference keyword in the text reading from front to back is recorded as the influence coefficient.

9. The VPN-based data security transmission method of claim 1, wherein, The confirmation mode of the flow information degree includes: For a single protocol IP packet, The IP message corresponding to the protocol IP packet is uniformly divided according to the sequence feature value to obtain a plurality of detection regions; The sliding window area corresponding to a single detection region is determined according to the radiation coefficient and the regularity degree of the detection region, and the feature sequence in the IP message is determined according to the information jitter value of the character sequence corresponding to the sliding window; If the feature sequence proportion is greater than or equal to the preset feature sequence proportion, the flow information degree is determined according to the feature sequence jitter coefficient; If the feature sequence proportion is less than the preset feature sequence proportion, the flow information degree is determined by the ratio of the feature coefficient to the feature sequence proportion; The sliding window area corresponding to a single detection area is positively correlated with the radiation coefficient and the regularity representative degree of the detection area; The radiation coefficient = radiation range reference value / number of detection keywords in the target detection area; The regularity representative degree corresponding to the target detection area = number of reference detection areas with radiation keywords / total number of reference detection areas; The feature sequence displacement coefficient is the average line of the distance reference values corresponding to each feature sequence in a single protocol IP packet, and the distance reference value corresponding to a single feature sequence is the average value of the shortest distances from the center position of the feature sequence to the center positions of other feature sequences.

10. The VPN-based data security transmission method according to claim 1, wherein, The request difficulty value in the initial scheduling range is detected, and when the difference between the request difficulty value and the preset request difficulty value is greater than 0, the initial scheduling range of the to-be-shunted update IP packet is increased according to the difference between the request difficulty value and the preset request difficulty value, and the adjusted initial scheduling range is recorded as the scheduling range; The abnormality index of the to-be-shunted update IP packet = number of to-be-shunted update IP packets + average value of transmission time of protocol IP packets corresponding to the to-be-shunted update IP packets; For a single TLC channel, the channel balance coefficient = sub-congestion coefficient corresponding to the TLC channel / number of protocol IP packets transmitted by the TLC channel in the uplink transmission mode; The preset uplink transmission condition is that each protocol IP packet is transmitted to the analysis server and each protocol IP packet is updated to an update IP packet by the analysis server; The preset downlink transmission condition is that each update IP packet of the analysis server is transmitted to the target server and each update IP packet is parsed to an analysis IP packet by the target server.

Images