Information security transmission application method and system based on national cryptographic algorithm

Abstract

The invention relates to the technical field of data security transmission, in particular to an information security transmission application method and system based on a national secret algorithm, and the method comprises the steps: collecting the data state of to-be-transmitted data, and obtaining related information features; reinforcement learning decision algorithm: constructing a national cryptographic algorithm selection model according to the related information features to obtain a national cryptographic algorithm adapted to the current transmission data; calling a national secret algorithm to encrypt transmission data, and transmitting the encrypted data; the transmission effect is evaluated, and a data transmission mode is selected through an evaluation result; and the receiving end calls a decryption algorithm according to the national cryptographic algorithm identifier to obtain original transmission data. The beneficial effects of the invention are that data encryption transmission is carried out by adopting the national secret algorithm, the security and efficiency of data transmission are effectively improved, and the data are prevented from being stolen or tampered in the transmission process. And selecting a national cryptographic algorithm adaptive to the current transmission data through a reinforcement learning decision algorithm to optimize the performance of the handheld terminal PDA.

Description

Technical Field

[0001] The present invention relates to the technical field of data security transmission, and particularly to an information security transmission application method and system based on national cryptographic algorithms. Background Art

[0002] In the context of the rapid development of information technology today, handheld terminals such as PDAs have been widely used in fields such as logistics distribution, medical care, and power equipment inspection. These application scenarios involve the transmission of a large amount of sensitive information. However, existing data encryption transmission technologies have some deficiencies. Traditional encryption algorithms, such as AES, RSA, etc., although they can ensure the security of data transmission to a certain extent, on resource-constrained devices such as handheld terminals PDAs, the key lengths of these algorithms are relatively long, resulting in longer calculation times and more power consumption for encryption and decryption operations. This not only affects the efficiency of data transmission but may also cause problems such as device overheating and accelerated battery consumption, thus affecting the service life of the device. In addition, traditional encryption algorithms may have security risks in some special application scenarios and cannot fully meet the security requirements of handheld terminals PDAs in different data types and transmission scenarios. Summary of the Invention

[0003] Therefore, the technical problem to be solved by the present invention is that the prior art cannot meet the security and efficiency requirements of handheld terminals PDAs in different data types and transmission scenarios.

[0004] The above technical problem is solved by the following technical solutions: The present invention proposes an information security transmission application method based on national cryptographic algorithms, which includes collecting the data state of the data to be transmitted to obtain relevant information features;

[0005] A reinforcement learning decision algorithm is used to construct a national cryptographic algorithm selection model according to the relevant information features to obtain a national cryptographic algorithm adapted to the currently transmitted data;

[0006] Call the national cryptographic algorithm to encrypt the transmitted data and transmit the encrypted data;

[0007] Evaluate the transmission effect and select the data transmission method according to the evaluation result;

[0008] The receiving end calls the decryption algorithm according to the national cryptographic algorithm identifier to obtain the original transmitted data.

[0009] In a preferred embodiment of the information security transmission application method based on national cryptographic algorithms of the present invention: The relevant information features include data sensitivity information, data capacity information, data format type information, and device resource information.

[0010] In a preferred embodiment of the information security transmission application method based on the national cryptographic algorithm of the present invention: The data sensitivity information includes dividing the data into sensitivity levels according to a preset threshold and determining the classification criteria for the data sensitivity.

[0011] The classification criteria are as follows: Data with a value higher than the preset threshold is of high sensitivity, and data with a value lower than the preset threshold is of low sensitivity.

[0012] In a preferred embodiment of the information security transmission application method based on the national cryptographic algorithm of the present invention: The data volume information includes using bytes as the measurement unit, dividing the data into intervals according to a preset data threshold. The interval smaller than the preset data threshold is the small data interval, and the interval larger than the preset data threshold is the large data interval.

[0013] In a preferred embodiment of the information security transmission application method based on the national cryptographic algorithm of the present invention: The reinforcement learning decision algorithm includes selecting a combination of national cryptographic algorithms and constructing a defined state space, action space, and reward function.

[0014] In a preferred embodiment of the information security transmission application method based on the national cryptographic algorithm of the present invention: The state space consists of data sensitivity information, data volume information, and device resources;

[0015] The action space consists of the selected combination of national cryptographic algorithms;

[0016] The reward function is obtained based on the encryption performance metrics and the resource consumption of the handheld terminal PDA.

[0017] In a preferred embodiment of the information security transmission application method based on the national cryptographic algorithm of the present invention: The encryption performance metrics include encryption speed and the integrity verification result after decryption;

[0018] The device resource consumption metrics include the increase in CPU load, the power consumption rate, and the memory occupancy.

[0019] To solve the above technical problems, the present invention also provides the following technical solution: An information security transmission application system based on the national cryptographic algorithm, which includes a data collection module for collecting the data to be transmitted and related information features;

[0020] A communication module for encrypting and transmitting the data according to the selected national cryptographic algorithm;

[0021] A data receiving module for decrypting the received ciphertext data and restoring the original data.

[0022] A computer device includes a memory and a processor. The memory stores a computer program, and is characterized in that when the processor executes the computer program, it realizes the content of an information security transmission application method based on the national cryptographic algorithm.

[0023] A computer-readable storage medium having a computer program stored thereon, characterized in that the computer program implements the content of an information security transmission application method based on a national secret algorithm when executed by a processor.

[0024] Beneficial effects of the present invention: The present invention uses a national secret algorithm to encrypt and transmit data, which effectively improves the security and efficiency of data transmission and prevents data from being stolen or tampered with during transmission. At the same time, by selecting a national secret algorithm that is suitable for the current transmission data through a reinforcement learning decision algorithm, the performance advantages of different encryption algorithms under different data scales can be fully utilized to optimize the performance of the handheld terminal PDA. In addition, the present invention also takes into account device resource information to avoid selecting a national secret algorithm with high resource consumption when resources are tight, prolong battery life and reasonably utilize memory space, thereby improving the overall operation stability of the handheld terminal PDA. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following briefly introduces the drawings of the embodiments of the present invention. Obviously, the drawings in the following description only relate to some embodiments of the present invention, but are not intended to limit the present invention.

[0026] Figure 1 A schematic diagram of the application process of the national secret algorithm based on the information security transmission application method of the national secret algorithm is shown.

[0027] Figure 2 A schematic diagram of the decision-making process of the national secret algorithm based on the information security transmission application method of the national secret algorithm is shown. DETAILED DESCRIPTION

[0028] In order to enable those skilled in the art to better understand the present invention, the present invention is further described in detail below in conjunction with specific implementation methods and drawings.

[0029] The terms used in the present invention are those general terms currently widely used in the art in consideration of the functions of the present invention, but these terms may vary according to the intention of a person of ordinary skill in the art, precedents, or new technologies in the art. In addition, specific terms may be selected by the applicant, and in this case, their detailed meanings will be described in the detailed description of the present invention. Therefore, the terms used in the specification should not be understood as simple names, but rather as a general description based on the meaning of the terms and the present invention.

[0030] Example 1

[0031] like Figures 1 to 2 This embodiment provides an information security transmission application method based on a national secret algorithm, including:

[0032] S1: Collect the data status of the data to be transmitted to obtain relevant information features;

[0033] S2: Use the reinforcement learning decision algorithm to construct a national cryptography algorithm selection model based on the relevant information features to obtain a national cryptography algorithm adapted to the current transmitted data;

[0034] S3: Invoke the national cryptography algorithm to encrypt the transmitted data and transmit the encrypted data;

[0035] S4: Evaluate the transmission effect and select the data transmission method based on the evaluation result;

[0036] S5: The receiving end invokes the decryption algorithm according to the national cryptography algorithm identifier to obtain the original transmitted data.

[0037] Furthermore, the relevant information features include data sensitivity information, data capacity information, data format type information, and device resource information.

[0038] It should be noted that the device resource information includes the current CPU (Central Processing Unit) usage rate, remaining battery power, and available memory.

[0039] Furthermore, the data sensitivity information includes dividing the data sensitivity level according to a preset threshold and determining the grading standard for the data sensitivity level;

[0040] The grading standard is that data higher than the preset threshold is of high sensitivity level, and data lower than the preset threshold is of low sensitivity level.

[0041] Furthermore, the data capacity information includes using bytes as the measurement unit, dividing the interval according to a preset data threshold, the interval smaller than the preset data threshold is the small data interval, and the interval larger than the preset data threshold is the large data interval.

[0042] Furthermore, the reinforcement learning decision algorithm includes selecting a combination of national cryptography algorithms and constructing a defined state space, action space, and reward function.

[0043] Furthermore, the state space consists of data sensitivity, data size, and device resources;

[0044] The action space consists of the selected combination of national cryptography algorithms;

[0045] The reward function is obtained based on the encryption performance metrics and the resource consumption of the handheld terminal PDA (Personal Digital Assistant).

[0046] Furthermore, the encryption performance metrics include encryption speed and the integrity verification result after decryption;

[0047] The device resource consumption metrics include the increase in CPU load, the power consumption rate, and the memory occupancy.

[0048] It should be noted that the sample data transmitted historically by the handheld terminal PDA is used to integrate the data sensitivity information, data volume information, and device resource information of the sample data into a state vector, and the state space is also composed of these three aspects of information;

[0049] All selectable national cryptographic algorithm encryption combinations are the action space;

[0050] The reward function is set by comprehensively considering various factors, including that for the encryption performance metric, the faster the encryption speed, the higher the reward; for the device resource consumption metric, the smaller the increase in CPU load, the lower the power consumption rate, and the less the memory occupancy, the higher the reward.

[0051] Reinforcement learning algorithms include the A2C algorithm (Advantage Actor-Critic), the A3C algorithm (Asynchronous Advantage Actor-Critic), the PPO algorithm (Proximal Policy Optimization), the DDPG algorithm (Deep Deterministic Policy Gradient), the SAC algorithm (Soft Actor-Critic), etc. In this embodiment, the A2C algorithm is taken as an example.

[0052] For the training of the A2C algorithm model, the weight parameters of the Actor network (actor network) and the Critic network (critic network) are randomly initialized. The state information is input into the Actor network to obtain the probability distribution of actions. According to this probability distribution, an action is randomly selected, that is, a national cryptographic algorithm, and the selected national cryptographic algorithm is used to encrypt the sample data to obtain the encryption result.

[0053] Among them, the state space is represented by s = [s1, s2, s3, s4, s5], where s1 represents the data sensitivity, s2 represents the data size, s3 represents the CPU usage rate, s4 represents the remaining battery power, and s5 represents the available memory;

[0054] The action space is represented as A = {a1, a2, a3, a4, a5, a6, a7}, where a1 to a7 represent the selected combination of national cryptographic algorithms. That is, a1 represents whether to enable the national cryptographic algorithm SM2. 0 means not enabled, and 1 means enabled; a2 represents whether to enable the national cryptographic algorithm SM3. 0 means not enabled, and 1 means enabled; a3 represents whether to enable the national cryptographic algorithm SM4. 0 means not enabled, and 1 means enabled; a4 represents whether to enable the national cryptographic algorithm SM7. 0 means not enabled, and 1 means enabled; a5 represents whether to enable the national cryptographic algorithm SM9. 0 means not enabled, and 1 means enabled; a6 represents whether to enable the national cryptographic algorithm ZUC. 0 means not enabled, and 1 means enabled; a7 represents whether to enable other national cryptographic algorithms or combinations. 0 means not enabled, and 1 means enabled.

[0055] The policy network outputs π(a|s), which represents the probability of selecting action a in the given state s. After applying the selected action to the sample data, the reward value corresponding to this action is calculated through the reward function. The state information is input into the Critic network to obtain the value estimate V(s) of the state. The formula for the reward function reward is as follows:

[0056] reward = ω1 × α1 + ω2 × α2 + ω3 × α3

[0057] Among them, ω1, ω2, and ω3 are weight coefficients, and α1, α2, and α3 are the encryption speed score, the integrity score after decryption, and the device resource consumption score respectively.

[0058] Further, the Advantage function is used to calculate the gap between the immediate return of taking an action in the current state and the average return of all possible actions in this state. The formula is as follows:

[0059] A(s, a) = reward + γ × V(s′) - V(s)

[0060] Among them, γ is the discount factor, s′ is the next state, V(s′) is the expected cumulative reward that can be obtained starting from the next state s′ and following the current policy, and V(s) is the expected cumulative reward that can be obtained starting from the current state s and following the current policy.

[0061] Calculate the loss functions of the Actor network for the probability distribution of actions and the Critic, and use the backpropagation algorithm to update the parameters of the Actor network and the Critic network respectively to minimize their respective loss functions.

[0062] Use the policy gradient method to update the parameters θ1 to θ of the policy network to increase the probability of selecting a better combination of national cryptographic algorithms. The basic formula for updating the policy network parameters is as follows:

[0063]

[0064] where α is the learning rate, which determines the step size of parameter update; is the gradient of the log probability output by the policy network with respect to the parameters; A(a|s) is the advantage function, which measures the superiority of taking a certain action in a specific state relative to the average level.

[0065] The parameters of the policy network are updated by calculation, so that the probability of selecting an action with higher advantage increases. Further, the training rounds are repeated until the set number of training rounds is reached or the model converges.

[0066] Furthermore, the national secret algorithm is called to encrypt the transmitted data. After the encryption is completed, the on-site operation and maintenance personnel select a suitable data transmission method. For each transmission method, an evaluation function of the transmission effect is defined through the indicators of the transmission success rate x1, the average transmission time x2, the completeness of the transmitted data x3, and the resource consumption x4 of the PDA. And through the calculation results, it is intuitively evaluated which transmission method is better in the current scenario, and further, which transmission method to use for data transmission is determined according to the actual requirements.

[0067] The specific formula of the transmission evaluation function is as follows:

[0068]

[0069] where y represents the data transmission method, f(y) represents the index measuring the performance of the data transmission network, η1, η2, η3, η4 represent the weight coefficients of each index, and η1 + η2 + η3 + η4 = 1.

[0070] At the receiving end, the corresponding national secret decryption algorithm is called according to the same algorithm identifier to decrypt the data and restore the original transmitted data.

[0071] It should be further noted that during the transmission process, it is also necessary to perform statistical calculations on the data transmission success rate, the average transmission time, and the resource consumption.

[0072] Data transmission success rate: After each data transmission operation, the handheld terminal PDA system will record whether the transmission reaches the target device successfully, and record it in the form of a boolean value. The transmission success rate is calculated using the number of successful transmissions of various transmission methods.

[0073] Average transmission time: During each data transmission process, the handheld terminal PDA records the time interval from the moment it starts sending data to the moment it receives the transmission completion confirmation information returned by the target device, which is recorded as the single transmission time. After completing n transmission tasks, all single transmission times are accumulated to calculate the average transmission time. At the same time, the receiving end will verify the integrity of the received data. After n transmission tasks, the number of times the data integrity verification passes is counted to calculate the integrity of the transmitted data.

[0074] Resource consumption: During the data transmission process, the handheld terminal PDA monitors and records the changes in CPU usage caused by the transmission operation in real time, reflecting the additional overhead of CPU resource transmission. At the same time, the changes in memory usage and power consumption of the handheld terminal PDA during the transmission period are monitored to reflect the degree of memory resource consumption and power consumption during the data transmission process. The resource consumption data of these three dimensions are normalized and the weighted sum is used to represent the resource consumption.

[0075] It should be noted that when using the serial port to transmit encrypted data, the on-site operation and maintenance personnel will evaluate the recommended encryption algorithm based on the actual parameters of the current serial port and the device resources. If the data sensitivity allows and the real-time requirements are not high, the operation and maintenance personnel can choose to manually select an algorithm from the national encryption algorithm library that is relatively simple to calculate and occupies less CPU resources to replace the recommended national encryption algorithm encryption to ensure the smoothness of serial port transmission.

[0076] When using the network to transmit encrypted data, the on-site operation and maintenance personnel first check the key indicators of the current network and evaluate the network environment. If the current network bandwidth is low and the packet loss rate is high, and the encrypted data block of the encryption algorithm combination output by the algorithm is large, it may cause transmission failure or frequent retransmission. The on-site operation and maintenance personnel weigh the data sensitivity and transmission efficiency. If the data sensitivity allows, the operation and maintenance personnel select an algorithm with a relatively small amount of encrypted data, fast encryption and decryption speed, and high security to replace it, so as to improve the transmission success rate.

[0077] In summary, the present invention effectively improves the security and efficiency of data transmission by adopting the national secret algorithm for data encryption transmission, and prevents data from being stolen or tampered with during the transmission process. At the same time, by selecting the national secret algorithm adapted to the current transmission data through the reinforcement learning decision algorithm, the performance advantages of different encryption algorithms under different data scales can be fully utilized to optimize the performance of the handheld terminal PDA. In addition, the present invention also takes into account the device resource information, avoids the selection of the national secret algorithm with high resource consumption when resources are tight, prolongs the battery life and reasonably utilizes the memory space, and improves the overall operation stability of the handheld terminal PDA.

[0078] Example 2

[0079] This embodiment provides an information security transmission application system based on national cryptographic algorithms, including a data acquisition module for collecting data to be transmitted and related information features;

[0080] It should be noted that the data acquisition module includes a handheld terminal PDA responsible for data acquisition, processing, and transmission.

[0081] A communication module for encrypting and transmitting data according to the selected national cryptographic algorithm;

[0082] It should be noted that the communication module includes a modem, a communication protocol stack, and an interface circuit;

[0083] The modem is used to modulate digital signals into analog signals suitable for transmission or convert received analog signals back into digital signals;

[0084] The communication protocol stack implements various communication protocols, such as serial communication protocols and wireless communication protocols;

[0085] The interface circuit includes an RJ45 interface (for network cable connection), a radio frequency interface (RF), an AV interface, a DIN interface, a VGA interface, a PCMCIA card interface, etc., for connecting different types of devices and transmission media.

[0086] A data receiving module for decrypting the received ciphertext data and restoring the original data.

[0087] It should be noted that the data receiving module includes an amplifier, a filter, and a demodulator;

[0088] The amplifier is used to enhance the signal strength so that the signal can remain stable during transmission. At the receiving end, the amplifier enhances the signal received from the antenna;

[0089] The filter is used to filter out unwanted signals and ensure that only signals within the desired frequency or bandwidth range are transmitted. At the receiving end, the filter can filter out unwanted signals to ensure that only the desired signals are processed.

[0090] The demodulator is used to convert the received analog signal into a digital signal so that a computer or other device can process it. The demodulator is responsible for converting the received analog signal into a digital signal.

[0091] In summary, the present invention realizes more convenient and efficient data collection, processing, and transmission through the data collection module. The communication module supports multiple communication protocols and interfaces, enabling the system to adapt to different communication environments and requirements. The interface circuit enables the system to be compatible with various devices and transmission media, improving the applicability and flexibility of the system. The data receiving module ensures the stability of the signal during transmission, especially in long-distance or weak-signal environments. The filter is used to filter out unnecessary signals, ensuring that only the required signals are transmitted and processed, improving the signal quality and the anti-interference ability of the system. The present invention also simplifies the system integration process and reduces the complexity and cost of the system by integrating multiple functional modules such as data collection, encryption, transmission, and decryption.

[0092] Embodiment 3

[0093] This embodiment is the third embodiment of the present invention. The difference from the previous two embodiments is as follows:

[0094] If a function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or a part of this technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods in various embodiments of the present invention. The aforementioned storage medium includes: USB flash drives, mobile hard disks, read-only memories (ROM, Read-Only Memory), random access memories (RAM, Random Access Memory), magnetic disks, or optical discs, etc., which can store program codes.

[0095] The logic and / or steps represented in the flowchart or described in other ways herein, for example, can be considered as a definite sequence list of executable instructions for implementing logical functions, and can be specifically implemented in any computer-readable medium for use by an instruction execution system, apparatus, or device (such as a computer-based system, a system including a processor, or other systems that can fetch instructions from the instruction execution system, apparatus, or device and execute the instructions), or used in combination with these instruction execution systems, apparatus, or devices. For the purposes of this specification, a "computer-readable medium" can be any device that can contain, store, communicate, propagate, or transmit a program for use by or in connection with an instruction execution system, apparatus, or device.

[0096] More specific examples (a non-exhaustive list) of computer-readable media include the following: electrical connections (electronic devices) having one or more wirings, portable computer diskettes (magnetic devices), random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber devices, and portable compact disc read-only memory (CDROM). Additionally, the computer-readable media can even be paper or other suitable media on which a program can be printed, as the program can be obtained electronically, for example, by optically scanning the paper or other media, then editing, interpreting, or otherwise processing it as appropriate, and then storing it in a computer memory.

[0097] It should be understood that the various parts of the present invention can be implemented by hardware, software, firmware, or a combination thereof. In the above-described embodiments, the multiple steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented in hardware, as in another embodiment, any one or a combination of the following techniques well known in the art can be used: discrete logic circuits having logic gate circuits for implementing logical functions on data signals, application specific integrated circuits having appropriate combinational logic gate circuits, programmable gate arrays (PGA), field programmable gate arrays (FPGA), etc.

[0098] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and not to limit them. Although the present invention has been described in detail with reference to the preferred embodiments, those of ordinary skill in the art should understand that the technical solutions of the present invention can be modified or equivalently replaced without departing from the spirit and scope of the technical solutions of the present invention, and they should all be covered within the scope of the claims of the present invention.

Claims

1. An information security transmission application method based on national secret algorithms, characterized in that: including Collect the data status of the data to be transmitted to obtain relevant information features; The reinforcement learning decision algorithm constructs a national cryptography algorithm selection model based on the relevant information features to obtain a national cryptography algorithm suitable for the current transmitted data; Call the national cryptography algorithm to encrypt the transmitted data and transmit the encrypted data; Evaluate the transmission effect and select the data transmission method through the evaluation results; The receiving end calls the decryption algorithm according to the national cryptography algorithm identifier to obtain the original transmitted data.

2. The information security transmission application method based on the national cryptographic algorithm according to claim 1, characterized in that: The relevant information features include data sensitivity information, data capacity information, data format type information, and device resource information.

3. A method for information security transmission application based on national cryptography algorithm according to claim 2, characterized in that: The data sensitivity information includes dividing the data sensitivity level according to a preset threshold and determining the classification standard for the data sensitivity level; The classification standard is that data higher than the preset threshold is of high sensitivity level, and data lower than the preset threshold is of low sensitivity level.

4. A method for information security transmission application based on national cryptographic algorithm according to claim 3, characterized in that: The data capacity information includes using bytes as the measurement unit, dividing the interval according to a preset data threshold, the interval smaller than the preset data threshold is the small data interval, and the interval larger than the preset data threshold is the large data interval.

5. A method for information security transmission application based on national cryptographic algorithm according to any one of claims 1 to 4, characterized in that: The reinforcement learning decision algorithm includes selecting a national cryptography algorithm combination and constructing a defined state space, action space, and reward function.

6. A method for information security transmission application based on national cryptographic algorithm according to claim 5, characterized in that: The state space consists of data sensitivity information, data capacity information, and device resources; The action space consists of the selected national cryptography algorithm combination; The reward function is obtained based on the encryption performance index and the resource consumption of the handheld terminal PDA.

7. A method for information security transmission application based on national cryptographic algorithm according to any one of claims 5 or 6, characterized in that: The encryption performance index includes encryption speed and the integrity verification result after decryption; The device resource consumption index includes the increase in CPU load, power consumption rate, and memory occupancy.

8. A system adopting an information security transmission application method based on a national secret algorithm as described in any one of claims 1 to 7, characterized in that: including A data acquisition module for collecting the data to be transmitted and relevant information features; A communication module for encrypting and transmitting the data according to the selected national cryptography algorithm; A data receiving module for decrypting the received ciphertext data and restoring the original data.

9. A computer device, comprising a memory and a processor, the memory storing a computer program, characterized in that, When the processor executes the computer program, it implements the content of a national cryptography algorithm-based information security transmission application method according to any one of claims 1 to 7.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the content of a national cryptography algorithm-based information security transmission application method according to any one of claims 1 to 7.

Images