Data transmission method and medium

Abstract

The invention discloses a data transmission method and a medium, which are applied to the technical field of data transmission. The method comprises the following steps: carrying out identity authentication on mobile equipment which joins in an optical network established by a network management terminal; after the identity authentication succeeds, adjusting optical signal parameters of the optical network based on the environmental parameters, and establishing a data link with the corresponding mobile device; performing block encryption processing on the to-be-transmitted data to obtain a plurality of partially encrypted data; and binding the plurality of partially encrypted data with the optical signal of the corresponding wavelength, and transmitting the data to the mobile device through a data link. Therefore, according to the invention, the identity authentication is firstly carried out on the mobile equipment connected into the optical network, so that the equipment with security risk is prevented from accessing the network to obtain data, and the security is improved; in addition, optical signals are adopted for transmission, block encryption processing is further carried out on the data to be transmitted, the possibility of eavesdropping monitoring is reduced, and the mobility of mobile equipment is not limited.

Description

Technical Field

[0001] The present invention relates to the technical field of data transmission, and particularly to a data transmission method and medium. Background Art

[0002] Data is usually transmitted between different devices by wireless transmission or wired transmission. However, in the testing or office scenarios of confidential laboratories and confidential devices such as special machines and special servers, traditional radio communications (such as Wi-Fi) are prone to generate electromagnetic radiation. Therefore, sensitive data may be intercepted by external devices during the data transmission process, which does not meet the protection requirements of confidential laboratories and is easily stolen by signals that can penetrate walls; optical wireless communication can achieve an effective shielding effect in a single room because light cannot penetrate walls. However, light may be obtained when the laboratory door is opened. Therefore, there is also a possibility of being wiretapped and monitored when using optical signal wireless communication; while wired connections will seriously limit the mobility of devices. That is to say, the current data transmission has deficiencies in terms of security, reliability, and environmental adaptability.

[0003] It can be seen that how to ensure that data is not stolen by the outside world during the transmission process is a problem that needs to be solved by those skilled in the art. Summary of the Invention

[0004] The purpose of the embodiments of the present invention is to provide a data transmission method and medium, which can solve the problems of the deficiencies in security, reliability, and environmental adaptability of the wireless transmission method, as well as the problem that the wired transmission method limits the mobility of devices.

[0005] To solve the above technical problems, on the one hand, the embodiments of the present invention provide a data transmission method, which is applied to a network management terminal and includes:

[0006] Authenticate the identity of mobile devices joining the optical network established by the network management terminal;

[0007] After the identity authentication is successful, adjust the optical signal parameters of the optical network based on environmental parameters, and establish a data link with the corresponding mobile device;

[0008] Perform block encryption processing on the data to be transmitted to obtain a number of partially encrypted data;

[0009] Bind the number of partially encrypted data to optical signals of corresponding wavelengths, and transmit them to the mobile device through the data link.

[0010] In some embodiments, authenticating the identity of mobile devices joining the optical network established by the network management terminal includes:

[0011] Obtain the optical unique identifier corresponding to the mobile device;

[0012] If the optical unique identifier is included in the terminal whitelist database, the mobile device's identity authentication is successful;

[0013] If the optical unique identifier is not included in the terminal whitelist database, the mobile device is identified as an illegal device, and an alarm log is generated to indicate that the illegal device has invaded the network.

[0014] In some embodiments, adjusting an optical signal parameter of an optical network based on an environmental parameter includes:

[0015] Obtain obstacle location information and ambient light intensity in the space environment;

[0016] Determining a running trajectory of the mobile device based on a trajectory prediction model;

[0017] Determine the initial light signal parameters according to the obstacle location information, ambient light intensity and running trajectory;

[0018] Detecting the initial optical signal parameters based on any position in the space environment;

[0019] If the optical network corresponding to the initial optical signal parameters can be detected at any location, the detection result meets the coverage standard;

[0020] If the optical network corresponding to the initial optical signal parameters cannot be detected at any position, the detection result does not meet the coverage standard, and the process returns to the step of determining the initial optical signal parameters based on the obstacle position information, ambient light intensity, and running trajectory.

[0021] In some embodiments, the data to be transmitted is encrypted in blocks to obtain several partially encrypted data, including:

[0022] Classify the data to be transmitted based on the data type to obtain data blocks of different categories, and identify the location type of different types of data blocks based on the location and type of the data;

[0023] Based on the corresponding relationship between the data type and the encryption method, different types of data blocks are encrypted respectively to obtain a plurality of partially encrypted data.

[0024] In some embodiments, binding a plurality of partially encrypted data with optical signals of corresponding wavelengths includes:

[0025] Determine the wavelength sequence according to the encryption key corresponding to the data encryption process;

[0026] A number of different wavelengths are randomly selected from the wavelength sequence and matched with a number of partially encrypted data, so that each partially encrypted data is bound to the optical signal of the corresponding wavelength.

[0027] In some embodiments, after being transmitted to the mobile device via the data link, it further includes:

[0028] Determine whether a data loss signal sent by the mobile device is received within a preset time;

[0029] If a data loss signal is received, determine the position type identifier of the partially encrypted data characterized as lost in the data loss signal, and reproduce and send the corresponding partially encrypted data of the position type identifier to the mobile device;

[0030] If a data loss signal is not received, re-determine the data to be transmitted based on the data transmission rule.

[0031] In some embodiments, it further includes:

[0032] During the transmission of the data to be transmitted, real-time determine whether the mobile device joined to the optical network suddenly becomes a non-compliant device and real-time detect whether the position information of the obstacles in the space environment changes suddenly;

[0033] If the mobile device of the optical network suddenly becomes a non-compliant device, disconnect the data link with the mobile device and generate an alarm log characterizing the intrusion of the non-compliant device into the network;

[0034] If the position of the obstacles in the space environment changes suddenly, re-determine the optical path reflection channel based on the current position information of the obstacles and re-transmit the data to be transmitted.

[0035] On the other hand, the present invention also provides a data transmission method, which is applied to a mobile device and includes:

[0036] Send a connection request to the optical network established by the network management terminal, so that the network management terminal performs identity authentication according to the connection request and establishes a data link after the identity authentication is successful;

[0037] Obtain the corresponding partially encrypted data of several optical signals with different wavelengths through the data link;

[0038] Sort and decrypt several pieces of partially encrypted data to obtain the data to be transmitted corresponding to several pieces of partially encrypted data.

[0039] In some embodiments, sorting and decrypting several pieces of partially encrypted data to obtain the data to be transmitted corresponding to several pieces of partially encrypted data includes:

[0040] Perform data sorting based on the position type identifiers carried by several pieces of partially encrypted data, and perform data decryption on several pieces of partially encrypted data based on the corresponding relationship between the data type and the decryption method to obtain the data to be transmitted corresponding to several pieces of partially encrypted data;

[0041] If data loss is determined during the process of data sorting or decryption failure is determined during the process of data decryption, a data loss signal is sent to the network management terminal.

[0042] On the other hand, the present invention also provides an electronic device, including:

[0043] A memory for storing a computer program;

[0044] A processor for executing the computer program to implement the steps of the above data transmission method.

[0045] On the other hand, the present invention also provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the steps of the above data transmission method are implemented.

[0046] On the other hand, the present invention also provides a computer program product, including a computer program / instructions, and when the computer program / instructions are executed by a processor, the steps of the above data transmission method are implemented.

[0047] It can be seen from the above technical solutions that a data transmission method provided by the present invention is applied to a network management terminal, including: authenticating the identity of a mobile device joining an optical network established by the network management terminal; after successful identity authentication, adjusting the optical signal parameters of the optical network based on environmental parameters, and establishing a data link with the corresponding mobile device; performing block encryption processing on the data to be transmitted to obtain a plurality of partially encrypted data; binding the plurality of partially encrypted data to optical signals of corresponding wavelengths, and transmitting them to the mobile device through the data link. Among them, in the present invention, the identity of the mobile device connected to the optical network is authenticated first, ensuring that only allowed devices can be connected, avoiding the access of devices with security risks to the network to obtain data, and improving security; and in order to avoid wireless signals penetrating walls, the present invention uses optical signals for transmission, and in order to avoid risk devices obtaining optical signals and thus data when the door of a laboratory or the like is opened, the present invention further performs block encryption processing on the data to be transmitted, reducing the possibility of being wiretapped and monitored; and the present invention uses optical signals for data transmission, so the mobility of the mobile device is not restricted. Thus, the data transmission method provided by the present invention improves the security, reliability and environmental adaptability of data transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0048] In order to more clearly illustrate the embodiments of the present invention, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments of the present invention, and those of ordinary skill in the art can also obtain other drawings based on these drawings without creative efforts.

[0049] Figure 1 Flow chart of a data transmission method provided by an embodiment of the present invention;

[0050] Figure 2 Flow chart of identity authentication provided by an embodiment of the present invention;

[0051] Figure 3 Flow chart of adjusting optical signal parameters provided by an embodiment of the present invention;

[0052] Figure 4 Flow chart of data block encryption processing and wavelength binding provided by an embodiment of the present invention;

[0053] Figure 5 Complete flow chart of a data transmission method provided by an embodiment of the present invention;

[0054] Figure 6 Structural diagram of an electronic device provided by an embodiment of the present invention. Detailed implementation manners

[0055] Next, the technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

[0056] The terms "including" and "having" in the specification of the present invention and any deformations related to "including" and "having" are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not limited to the listed steps or units, but may include steps or units not listed.

[0057] In order to enable those skilled in the art to better understand the solution of the present invention, the present invention will be further described in detail below in conjunction with the accompanying drawings and specific implementation manners.

[0058] Next, a data transmission method and medium provided by an embodiment of the present invention will be introduced in detail. Figure 1 Flow chart of a data transmission method provided by an embodiment of the present invention, as Figure 1 shown, including the following processes:

[0059] S10: Authenticate a mobile device joining an optical network established by a network management terminal.

[0060] In this embodiment, the data transmission method provided by the present invention is applied to a network management terminal, mainly to achieve data transmission with a mobile terminal. Its specific application scenarios are enclosed spaces such as a confidential meeting room or a confidential laboratory. In a confidential meeting room, the network management terminal first establishes an optical network to achieve data transmission through the optical network. In this meeting room, mobile devices such as staff members' mobile phones and computers join the optical network constructed by the network management terminal through wireless devices.

[0061] Since in a confidential meeting room, the number of mobile devices that need to transmit data and the identification of the devices are clear. Therefore, generally, the mobile devices connected to the optical network are all allowed to be connected and can perform data transmission. However, in some specific scenarios, there may be a situation of network leakage. At this time, some of the mobile devices connected to the optical network are allowed to be connected, and some pose security risks. Therefore, in order to reduce the risk of devices with security risks accessing the network to obtain data and improve security, a terminal whitelist database is determined before the network management terminal establishes the optical network, and identity authentication is performed on the mobile devices joining the optical network. The specific authentication result is related to the terminal whitelist database and the mobile devices.

[0062] If the mobile device is included in the terminal whitelist database, the identity authentication is successful; if the mobile device is not included in the terminal whitelist database, the identity authentication fails.

[0063] S11: After the identity authentication is successful, adjust the optical signal parameters of the optical network based on the environmental parameters and establish a data link with the corresponding mobile device.

[0064] In the embodiment, after the identity authentication is successful, it means that the mobile devices connected to the optical network at this time are all secure devices and are allowed to be connected. Only when the optical network covers the entire space, that is, covers the entire confidential meeting room, can the data to be transmitted be received at any point in the internal space of the confidential meeting room. However, since there are obstacles such as desks and chairs in the confidential meeting room, and at the same time, the staff will walk around in the confidential meeting room with mobile devices in their hands, and some signals will be reflected when encountering obstacles. Therefore, it is necessary to adjust the optical signal parameters of the optical network based on environmental parameters (obstacles, mobile device trajectories, etc.) so that the optical network covers the entire confidential meeting room.

[0065] After adjusting the optical signal parameters to ensure that the optical network covers the entire confidential meeting room, it is necessary to establish a data link with the corresponding mobile device for transmitting the data to be transmitted. It should be noted that when performing the identity authentication process in step S10, the link between the network management terminal and the mobile device is not a data link and cannot perform data transmission, but only can perform identity authentication.

[0066] S12: Perform block encryption on the data to be transmitted to obtain several pieces of partially encrypted data.

[0067] In the embodiment, the data to be transmitted is the data transmitted between the network management terminal and the mobile device. To prevent the data to be transmitted from being eavesdropped, the present invention performs block encryption on the data to be transmitted, that is, divides the complete data to be transmitted (such as a document) into blocks. The blocks can be divided according to the number of pages or the data types inside. After dividing the data into blocks, encrypt each block separately, and at this time, several pieces of partially encrypted data are obtained.

[0068] For example: The data to be transmitted is a 20-page document composed of pictures, texts, numbers, and English, and it is divided into blocks according to the number of pages. Then the specific implementation method of performing block encryption on the data to be transmitted to obtain several pieces of partially encrypted data is: Divide the 20-page document into 20 data blocks, and encrypt these 20 data blocks using different encryption methods. At this time, several pieces of partially encrypted data are obtained.

[0069] Or: The data to be transmitted is a 20-page document composed of pictures, texts, numbers, and English, and it is divided into blocks according to the types. Then the specific implementation method of performing block encryption on the data to be transmitted to obtain several pieces of partially encrypted data is: Divide the data according to the data types in the 20-page document to obtain picture data blocks, text data blocks, number data blocks, English data blocks, etc. Encrypt different types of data blocks using different types of encryption methods. At this time, several pieces of partially encrypted data are obtained.

[0070] S13: Bind several pieces of partially encrypted data to optical signals of corresponding wavelengths, and transmit them to the mobile device through the data link.

[0071] In the embodiment, the network management terminal matches an optical signal of a waveform for each of several pieces of partially encrypted data, that is, binds several pieces of partially encrypted data to optical signals of corresponding wavelengths. In this way, when the network management terminal sends optical signals of different wavelengths, the corresponding mobile device will only receive the partially encrypted data corresponding to the current wavelength. The network management terminal continuously switches the wavelength to ensure that the mobile device receives all the partially encrypted data.

[0072] It can also be understood that several pieces of partially encrypted data are bound to optical signals of corresponding wavelengths, and the partially encrypted data is transmitted to the mobile device through channels of different wavelengths.

[0073] Based on this, it is determined that before establishing the optical network, the network management terminal needs to set the terminal whitelist database, the encryption algorithm corresponding to the block encryption process, the block division rules, and the wavelength matching rules.

[0074] In addition, it should be noted that, in addition to performing authentication and adjusting the dimming signal parameters before data transmission, it is also necessary to judge it during the transmission process. That is to say, during the transmission of the data to be transmitted, it is also necessary to judge in real time whether the mobile device joining the optical network suddenly becomes a non-compliant device (that is, a device with security risks) and to detect in real time whether the position information of the obstacles in the space environment has changed; if the mobile device of the optical network suddenly becomes a non-compliant device, the data link with the mobile device is disconnected, and an alarm log indicating the intrusion of the non-compliant device into the network is generated; if the position of the obstacles in the space environment changes, the optical path reflection channel is re-determined based on the current position information of the obstacles, and the transmission of the data to be transmitted is re-performed. Among them, it should be noted that this part of the content can be adjusted according to the needs of the user, that is, different emergency measures are taken according to the actual situation to ensure the stability and security of data transmission.

[0075] As can be seen from the above technical solutions, a data transmission method provided by the present invention is applied to a network management terminal, and includes: performing identity authentication on a mobile device joining an optical network established by the network management terminal; after the identity authentication is successful, adjusting the optical signal parameters of the optical network based on environmental parameters, and establishing a data link with the corresponding mobile device; performing block encryption processing on the data to be transmitted to obtain a plurality of partially encrypted data; binding the plurality of partially encrypted data with optical signals of corresponding wavelengths, and transmitting them to the mobile device through the data link. Among them, in the present invention, the identity authentication of the mobile device connected to the optical network is performed first, ensuring that only allowed devices can be connected, avoiding the access of devices with security risks to the network to obtain data, and improving security; and in order to avoid wireless signals penetrating walls, the present invention uses optical signals for transmission, and in order to avoid risk devices obtaining optical signals and thus obtaining data when opening doors in laboratories, etc., the present invention further performs block encryption processing on the data to be transmitted, reducing the possibility of being eavesdropped and monitored; and the present invention uses optical signals for data transmission, so it does not limit the mobility of the mobile device. It can be seen that the data transmission method provided by the present invention improves the security, reliability and environmental adaptability of data transmission.

[0076] In some embodiments, the specific implementation manner of the above S10 step: performing identity authentication on a mobile device joining an optical network established by the network management terminal is: obtaining the optical unique identifier corresponding to the mobile device; if the optical unique identifier is included in the terminal white list database, the identity authentication of the mobile device is successful; if the optical unique identifier is not included in the terminal white list database, the mobile device is identified as a non-compliant device, and an alarm log indicating the intrusion of the non-compliant device into the network is generated.

[0077] In an embodiment, the network management terminal establishes an optical network, and the mobile device sends a connection request to it after startup. The network management terminal will check the optical unique identifier of the requested mobile device through optical waves. If the mobile device is in the terminal whitelist database, the identity authentication is successful; if the mobile device is not in the terminal whitelist database, the identity authentication fails, the mobile device is an illegal device, and an alarm log characterizing the invasion of the illegal device into the network is generated to remind the staff that the current optical network has been invaded.

[0078] It should be noted that the optical unique identifier of a mobile device can be understood as: there is a built-in optical element in the mobile device, and the optical element corresponds to a unique identifier, so the mobile device also corresponds to a unique optical unique identifier, that is, the identity of the mobile device can be determined based on the optical unique identifier.

[0079] Based on the above steps, the specific process of identity authentication is as follows: Figure 2 As shown, the following steps are included:

[0080] S20: Receive a connection request from a mobile device.

[0081] S21: Detecting the optical unique identifier corresponding to the mobile device.

[0082] S22: Determine whether the optical unique identifier is in the terminal whitelist database.

[0083] S23: If yes, the identity authentication is successful.

[0084] S24: If not, generate an alarm log indicating that the illegal device has invaded the network.

[0085] The present invention provides specific steps for authenticating the identity of a mobile device in an optical network established by a network management terminal, and determines the identity of the mobile device based on a dual-factor authentication method of optical unique identification and position, thereby improving the security of data transmission in the connection stage.

[0086] In some embodiments, the specific implementation method of adjusting the optical signal parameters of the optical network based on environmental parameters in the above-mentioned S11 step is: obtaining obstacle position information and ambient light intensity in the spatial environment; determining the operation trajectory of the mobile device based on the trajectory prediction model; determining the initial optical signal parameters according to the obstacle position information, ambient light intensity and operation trajectory; detecting the initial optical signal parameters based on any position in the spatial environment; if the optical network corresponding to the initial optical signal parameters can be detected at any position, the detection result meets the coverage standard; if the optical network corresponding to the initial optical signal parameters cannot be detected at any position, the detection result does not meet the coverage standard, and returns to the step of determining the initial optical signal parameters according to the obstacle position information, ambient light intensity and operation trajectory.

[0087] In an embodiment, since the optical network needs to cover the entire space, and the current space is a confidential meeting room, which is an enclosed space, including fixed obstacles such as tables and chairs, and moving obstacles caused by the back-and-forth movement of staff, in order to ensure that the optical network needs to cover the entire space, it is necessary to detect environmental parameters, that is, the position information of obstacles in the space environment, the ambient light intensity, and determine the running trajectory of the mobile device according to the trajectory prediction model (AI algorithm optimization model). Subsequently, the optical signal parameters (the parameters at this time are the initial optical signal parameters) will be dynamically adjusted according to the results of detecting the environmental parameters, such as selecting the best wavelength sequence, adjusting the emission angle, optimizing the signal intensity, etc. After the above operations are completed, the data link can be formally established.

[0088] Among them, after adjusting the optical signal parameters, it is also necessary to detect the optical network corresponding to the current optical signal parameters (initial optical signal parameters). That is to say, if the optical network corresponding to the initial optical signal parameters can be detected at any position in the current space, the detection result meets the coverage standard; if the optical network corresponding to the initial optical signal parameters cannot be detected at any position, the detection result does not meet the coverage standard, and the step of determining the initial optical signal parameters according to the obstacle position information, ambient light intensity and running trajectory is returned, and the optical signal parameters are adjusted again.

[0089] In summary, the steps of adjusting the optical signal parameters are as Figure 3 shown, including the following steps:

[0090] S30: Obtain and detect environmental parameters.

[0091] S31: Adjust the optical signal parameters based on the environmental parameters.

[0092] S32: Detect the optical network corresponding to the optical signal parameters.

[0093] S33: Determine whether the optical network corresponding to the initial optical signal parameters can be detected at any position.

[0094] S34: If so, the detection result meets the coverage standard.

[0095] S35: If not, the detection result does not meet the coverage standard, and the step of S31 is returned.

[0096] The present invention provides a specific implementation method for adjusting the optical signal parameters of the optical network based on environmental parameters. An optical network is constructed by using optical signals, without radio frequency radiation and without electromagnetic leakage, meeting the protection and safety requirements, and the adjusted optical signal parameters are also related to the ambient light intensity, improving the adaptability to complex environments.

[0097] In some embodiments, the specific implementation of the above S12 step for performing block encryption on the data to be transmitted to obtain a plurality of partially encrypted data is as follows: classify the data in the data to be transmitted based on the data type to obtain data blocks of different categories, and perform position type identification on the data blocks of different types based on the position and type of the data; based on the correspondence between the data type and the encryption method, encrypt the data blocks of different categories respectively to obtain a plurality of partially encrypted data.

[0098] The specific implementation of the above S13 step of binding a plurality of partially encrypted data to optical signals of corresponding wavelengths is as follows: determine a wavelength sequence according to the encryption key corresponding to the data encryption process; arbitrarily select a plurality of different wavelengths from the wavelength sequence and match them with the plurality of partially encrypted data, so as to bind each part of the encrypted data to the optical signal of the corresponding wavelength.

[0099] After the above S13 step is transmitted to the mobile device through the data link, it further includes: determining whether a data loss signal sent by the mobile device is received within a preset time; if the data loss signal is received, determining the position type identifier of the partially encrypted data characterized as lost in the data loss signal, and re-transmitting the partially encrypted data corresponding to the position type identifier to the mobile device; if the data loss signal is not received, re-determine the data to be transmitted based on the data transmission rule.

[0100] In the embodiment, the data to be transmitted is first block-divided at the network management terminal. The present invention defines that the block division uses data type classification, that is, classify the pictures, English, numbers, etc. in the data to be transmitted, and each category is used as a data block. Then, because different categories will have failures when using the same encryption algorithm (for example: AES encryption) due to different types and corresponding bytes during the encryption process, the present invention will preset the correspondence between the data type and the encryption method, and at this time, call the correspondence to encrypt the data blocks of different types respectively, and at this time, a plurality of partially encrypted data are obtained. It should be noted that in order to reduce the difficulty of sorting and decrypting the plurality of partially encrypted data by the subsequent mobile device, position type identification is performed on the data blocks of different types based on the position and type of the data.

[0101] Determine a wavelength sequence according to the encryption key corresponding to the data encryption process, and then arbitrarily select a plurality of different wavelengths from the wavelength sequence and match them with the plurality of partially encrypted data, so as to bind each part of the encrypted data to the optical signal of the corresponding wavelength, which can also be understood as distributing and modulating the plurality of partially encrypted data into different wavelength channels for transmission. The plurality of partially encrypted data will be sent out through a multi-wavelength array or a wavelength converter.

[0102] The mobile device receives several pieces of partially encrypted data according to synchronization. After receiving the data, it sorts the data based on the position type identifier carried by the several pieces of partially encrypted data, and decrypts the several pieces of partially encrypted data based on the correspondence between the data type and the decryption method to obtain the data to be transmitted corresponding to the several pieces of partially encrypted data. And when verifying the data integrity through the verification algorithm, that is, if it is determined that data is lost during the data sorting process or decryption fails during the data decryption process, a data loss signal is sent to the network management terminal.

[0103] If the network management terminal receives the data loss signal sent by the mobile device within the preset time, it determines the position type identifier of the partially encrypted data representing the loss in the data loss signal, and resends the partially encrypted data corresponding to the position type identifier to the mobile device again, that is, only resends the part of the data corresponding to the data loss or decryption failure; if the data loss signal is not received, it re-determines the data to be transmitted based on the data transmission rule, that is, when multiple data need to be transmitted, after one data is transmitted, the next data is used as the data to be transmitted to implement the data transmission through the above process.

[0104] In summary, the process of its block encryption processing and wavelength binding is as Figure 4 shown, including the following steps:

[0105] S40: Generation of data to be transmitted.

[0106] S41: Perform block encryption processing on the data to be transmitted.

[0107] S42: Dynamic wavelength allocation.

[0108] S43: Transmit the corresponding partially encrypted data using different wavelengths.

[0109] S44: The mobile terminal receives several pieces of partially encrypted data and performs sorting and decryption processing.

[0110] S45: Determine whether a data loss signal is received within the preset time.

[0111] S46: If so, resend the partially encrypted data corresponding to the loss to the mobile device again.

[0112] S47: If not, data storage.

[0113] The present invention provides a method for block encryption processing of data and wavelength binding, in which a dynamic wavelength-key binding mechanism is adopted, and an encryption algorithm generates and a wavelength switching sequence to realize physical layer dynamic encryption, further reducing the possibility of being wiretapped and monitored.

[0114] In summary, the complete process of the data transmission method provided by the present invention is asFigure 5 As shown in the figure, it includes the following steps:

[0115] S50: Start.

[0116] S51: Initialize the device and system.

[0117] S52: Authenticate the mobile device.

[0118] S53: If the authentication is successful, adjust the optical signal parameters and establish a data link.

[0119] S54: If the authentication fails, generate an alarm log indicating that a violating device has invaded the network, and proceed to step S57.

[0120] S55: Perform data block encryption and wavelength binding processing.

[0121] S56: Detect and handle anomalies during data transmission.

[0122] S57: End.

[0123] It should be noted that the steps provided in this embodiment are only a summary of the above embodiment, so the present invention will not be elaborated here.

[0124] In addition, the current data transmission is that the data to be transmitted generated by the network management terminal is sent to the mobile device. Another possibility is: the main mobile device (the device that generates the data to be transmitted) - the network management terminal - the slave mobile device (the device that receives the data to be transmitted). For this case, the main mobile device and the slave mobile device respectively join the optical network corresponding to the network management terminal. The main mobile device first generates the data to be transmitted, and then performs the first block encryption process on it to obtain several data encryption blocks; the network management terminal obtains several data encryption blocks, sorts and decrypts them, and performs integrity detection on the decrypted data. After the data is complete, it is stored, and further undergoes the second block encryption process. Then, the optical signal parameters are adjusted to establish a data link with the slave mobile device. At this time, the data after the second block encryption process is bound to the optical signals of the corresponding wavelengths and transmitted to the slave mobile device through the data link. This method changes the data transmission from two-party transmission to three-party transmission, expanding the usage scenarios.

[0125] Thus, the data transmission method provided by the present invention has the following advantages:

[0126] 1. The optical signal has no radio frequency radiation and will not cause electromagnetic leakage, meeting the protection requirements.

[0127] 2. Dynamic wavelength switching requires monitoring multiple bands simultaneously to receive complete data, which is extremely costly, and the optical signal can be shielded and isolated by the laboratory walls, having the effect of physical isolation itself.

[0128] 3. Adjust the optical signal parameters to adapt to different environments.

[0129] 4. Optical signal communication is not affected by the electromagnetic interference of laboratory high-frequency instruments (such as oscilloscopes and spectrum analyzers), improving the robustness of data transmission.

[0130] 5. It can support a redundant architecture with an optical signal as the main link and radio as the emergency backhaul link.

[0131] 6. It realizes the coverage of optical wireless networks in meeting rooms, laboratories, etc., improving the convenience of equipment testing and office on the premise of meeting confidentiality and security.

[0132] 7. The bandwidth of the optical signal wireless network is almost infinite, and the transmission speed is much higher than that of traditional networks, greatly improving the information transfer efficiency.

[0133] On the other hand, the present invention also provides a data transmission method, which is applied to a mobile device and includes:

[0134] Sending a connection request to an optical network established by a network management terminal, so that the network management terminal performs identity authentication according to the connection request and establishes a data link after successful identity authentication;

[0135] Obtaining partial encrypted data corresponding to a plurality of optical signals with different wavelengths through the data link;

[0136] Sorting and decrypting a plurality of partial encrypted data to obtain the data to be transmitted corresponding to the plurality of partial encrypted data.

[0137] Among them, sorting and decrypting a plurality of partial encrypted data to obtain the data to be transmitted corresponding to the plurality of partial encrypted data includes:

[0138] Sorting the data based on the position type identifiers carried by the plurality of partial encrypted data, and decrypting the plurality of partial encrypted data based on the corresponding relationship between the data type and the decryption method to obtain the data to be transmitted corresponding to the plurality of partial encrypted data;

[0139] If it is determined that data is lost during the data sorting process or decryption fails during the data decryption process, a data loss signal is sent to the network management terminal.

[0140] Since this embodiment is the embodiment from the perspective of the mobile terminal side in the above embodiment, it is the same as the above-provided embodiment and has the same beneficial effects, and the present invention will not elaborate here.

[0141] Figure 6 It is a structural diagram of an electronic device provided by an embodiment of the present invention, as Figure 6As shown, the electronic device includes: a memory 60 for storing computer programs;

[0142] a processor 61 for implementing the steps of the data transmission method in the foregoing embodiments when executing the computer program.

[0143] The electronic device provided in this embodiment may include, but is not limited to, a smart phone, a tablet computer, a laptop computer, or a desktop computer, etc.

[0144] Among them, the processor 61 may include one or more processing cores, such as a 4-core processor, an 8-core processor, etc. The processor 61 may be implemented in at least one of the following hardware forms: Digital Signal Processing (DSP), Field-Programmable Gate Array (FPGA), and Programmable Logic Array (PLA). The processor 61 may also include a main processor and a coprocessor. The main processor is a processor for processing data in the wake state, also known as the Central Processing Unit (CPU); the coprocessor is a low-power processor for processing data in the standby state. In some embodiments, the processor 61 may be integrated with a Graphics Processing Unit (GPU), and the GPU is responsible for rendering and drawing the content to be displayed on the display screen. In some embodiments, the processor 61 may further include an Artificial Intelligence (AI) processor for processing computational operations related to machine learning.

[0145] The memory 60 may include one or more computer-readable storage media, and the computer-readable storage media may be non-transitory. The memory 60 may further include high-speed random access memory and non-volatile memory, such as one or more disk storage devices and flash storage devices. In this embodiment, the memory 60 is at least used to store the following computer program 601. After the computer program is loaded and executed by the processor 61, it can implement the relevant steps of the data transmission method disclosed in any of the foregoing embodiments. In addition, the resources stored in the memory 60 may also include an operating system 602 and data 603, etc., and the storage method may be temporary storage or permanent storage. Among them, the operating system 602 may include Windows, Unix, Linux, etc.

[0146] In some embodiments, the electronic device may further include a display screen 62, an input / output interface 63, a communication interface 64, a power supply 65, and a communication bus 66.

[0147] Those skilled in the art can understand that Figure 6 the structure shown in does not constitute a limitation on the electronic device, and may include more or fewer components than those shown in the figure.

[0148] It can be understood that if the data transmission method in the above embodiments is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on such an understanding, the technical solution of the present invention, in essence, or the part that contributes to the current technology, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and executes all or part of the steps of the methods in the various embodiments of the present invention. The foregoing storage medium includes: USB flash drive, mobile hard disk, read-only memory (ROM), random access memory (RAM), electrically erasable programmable ROM, register, hard disk, removable disk, CD-ROM, magnetic disk or optical disk, etc., which can store program codes.

[0149] Based on this, the embodiments of the present invention further provide a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the steps of the data transmission method as described above are implemented.

[0150] Based on this, the embodiments of the present invention further provide a computer program product, including a computer program / instructions, and when the computer program / instructions are executed by a processor, the steps of the data transmission method as described above are implemented.

[0151] The above has introduced in detail a data transmission method and medium provided by the embodiments of the present invention. The various embodiments in the specification are described in a progressive manner, and the key point of each embodiment is to illustrate the differences from other embodiments. The same or similar parts among the various embodiments can be referred to each other. For the device disclosed in the embodiments, since it corresponds to the method disclosed in the embodiments, the description is relatively simple, and the relevant parts can be referred to the description of the method part.

[0152] Those skilled in the art can further realize that the units and algorithm steps of the examples described in combination with the embodiments disclosed in this article can be implemented by electronic hardware, computer software, or a combination of the two. To clearly illustrate the interchangeability of hardware and software, the components and steps of the examples have been generally described according to functions in the above description. Whether these functions are executed in a hardware or software manner depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered to exceed the scope of the present invention.

[0153] The above has introduced in detail a data transmission method and medium provided by the present invention. Specific examples are used in this article to elaborate on the principle and implementation manner of the present invention. The description of the above embodiments is only used to help understand the method and its core idea of the present invention. It should be noted that for those of ordinary skill in the art, without departing from the principle of the present invention, several improvements and modifications can be made to the present invention, and these improvements and modifications also fall within the protection scope of the claims of the present invention.

Claims

1. A data transmission method, characterized in that, Applicable to network management terminals, including: Performing identity authentication on a mobile device that joins the optical network established by the network management terminal; After successful identity authentication, adjusting optical signal parameters of the optical network based on environmental parameters, and establishing a data link with the corresponding mobile device; Block encryption is performed on the data to be transmitted to obtain several partially encrypted data; Several of the partially encrypted data are bound to optical signals of corresponding wavelengths and transmitted to the mobile device via the data link.

2. The data transmission method according to claim 1, wherein The step of authenticating the identity of a mobile device added to the optical network established by the network management terminal comprises: Obtaining an optical unique identifier corresponding to the mobile device; If the optical unique identifier is included in the terminal whitelist database, the identity authentication of the mobile device is successful; If the terminal whitelist database does not include the optical unique identifier, the mobile device is identified as an illegal device, and an alarm log indicating that the illegal device has invaded the network is generated.

3. The data transmission method according to claim 1, wherein Adjusting optical signal parameters of the optical network based on environmental parameters includes: Obtain obstacle location information and ambient light intensity in the space environment; Determining a running trajectory of the mobile device based on a trajectory prediction model; Determining initial light signal parameters according to the obstacle position information, the ambient light intensity and the running trajectory; Detecting the initial light signal parameters based on any position in the spatial environment; If the optical network corresponding to the initial optical signal parameters can be detected at any position, the detection result meets the coverage standard; If the optical network corresponding to the initial optical signal parameters cannot be detected at any position, the detection result does not meet the coverage standard, and the process returns to the step of determining the initial optical signal parameters according to the obstacle position information, the ambient light intensity and the running trajectory.

4. The data transmission method according to claim 1, wherein The block encryption process of the data to be transmitted is performed to obtain a plurality of partially encrypted data, including: Classifying the data in the data to be transmitted based on the data type to obtain data blocks of different categories, and identifying the location type of the data blocks of different types based on the location and type of the data; Based on the correspondence between the data type and the encryption method, the data blocks of different categories are encrypted respectively to obtain a plurality of the partially encrypted data.

5. The data transmission method according to claim 1, wherein The step of binding the plurality of partially encrypted data with optical signals of corresponding wavelengths comprises: Determining a wavelength sequence according to an encryption key corresponding to the data encryption process; A number of different wavelengths are randomly selected from the wavelength sequence and matched with a number of the partially encrypted data, so that each of the partially encrypted data is bound to an optical signal of a corresponding wavelength.

6. The data transmission method according to claim 1, wherein After transmitting to the mobile device via the data link, the method further comprises: Determining whether a data loss signal sent by the mobile device is received within a preset time; If the data loss signal is received, determining a location type identifier in the data loss signal that represents the lost portion of the encrypted data, and re-sending the portion of the encrypted data corresponding to the location type identifier to the mobile device; If the data loss signal is not received, the data to be transmitted is re-determined based on the data transmission rule.

7. The data transmission method according to any one of claims 1-6, characterized in that, It further includes: During the transmission of the data to be transmitted, it is determined in real time whether the mobile device joined to the optical network suddenly becomes a non-compliant device and it is detected in real time whether the position information of the obstacle in the space environment changes; If the mobile device of the optical network suddenly becomes the non-compliant device, the data link with the mobile device is disconnected, and an alarm log indicating the intrusion of the non-compliant device into the network is generated; If the position of the obstacle in the space environment changes, the optical path reflection channel is re-determined based on the current position information of the obstacle, and the data to be transmitted is re-transmitted.

8. A data transmission method, characterized in that, Applied to a mobile device, it includes: Sending a connection request to the optical network established by the network management terminal, so that the network management terminal performs identity authentication according to the connection request and establishes a data link after successful identity authentication; Obtaining partial encrypted data corresponding to a plurality of optical signals with different wavelengths through the data link; Performing sorting decryption on the plurality of partial encrypted data to obtain the data to be transmitted corresponding to the plurality of partial encrypted data.

9. The data transmission method according to claim 8, characterized in that The performing sorting decryption on the plurality of partial encrypted data to obtain the data to be transmitted corresponding to the plurality of partial encrypted data includes: Sorting the data based on the position type identifiers carried by the plurality of partial encrypted data, and decrypting the plurality of partial encrypted data based on the correspondence between the data type and the decryption method to obtain the data to be transmitted corresponding to the plurality of partial encrypted data; If data loss is determined during the data sorting process or decryption failure is determined during the data decryption process, a data loss signal is sent to the network management terminal.

10. A computer-readable storage medium, characterized in that, A computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the steps of the data transmission method according to any one of claims 1 to 7 or any one of claims 8 - 9 are implemented.

Images