An intelligent analysis system and method for secure transmission of chip data

Abstract

The present invention discloses an intelligent analysis system and method for secure chip data transmission, which relates to the field of chip data security technology. The system comprises a demand environment data extraction module, a demand environment data differentiation module, an effective security encryption feature analysis module, a demand environment marking module to be analyzed, a prediction model analysis module and an encryption chain optimization module; the demand environment data extraction module is used to extract all demand environment data of an industrial robot when executing chip data transmission; the demand environment data differentiation module is used to distinguish different types of data transmission demand environments; the effective security encryption feature analysis module is used to output effective security encryption features in a security feature set; the demand environment marking module to be analyzed is used to mark the data transmission demand environment type that cannot output effective security encryption features as a demand environment to be analyzed; and the prediction model analysis module is used to construct a chip environment transmission prediction model.

Description

Technical Field

[0001] The present invention relates to the field of chip data security technology, and in particular to an intelligent analysis system and method for secure chip data transmission. Background Art

[0002] With the rapid development of technologies such as the Internet of Things, industrial automation, and artificial intelligence, the importance of secure data transmission for chips, as the core carrier of data processing and transmission, has become increasingly prominent. In actual application scenarios, chip data transmission faces a complex and changing environment. Different application scenarios have significantly different requirements for data security, and the device resource conditions are also different.

[0003] Traditional encryption algorithms play an important role in ensuring secure data transmission within chips, but they have numerous limitations when dealing with complex scenarios. Fixed encryption algorithms and key lengths struggle to meet the dynamic security and performance demands of diverse scenarios. For example, in the IoT, where sensor nodes and other devices are resource-constrained, employing high-intensity but computationally complex encryption algorithms (such as asymmetric algorithms like RSA) can lead to inefficient data transmission or even inoperability due to insufficient computing power and storage resources. Furthermore, when industrial robots perform a complete process, they face diverse scenarios requiring different encryption environments. Therefore, adaptively matching appropriate encryption algorithms is a worthy research topic. Furthermore, when multiple encryption algorithms are used within a single process, the conversion between algorithms and the resulting space resource usage also need to be considered. Furthermore, determining the appropriate encryption method in each individual environment and then optimizing the encryption chain within the overall process requires further consideration. Summary of the Invention

[0004] The purpose of the present invention is to provide an intelligent analysis system, method and system for secure transmission of chip data, so as to solve the problems raised in the prior art.

[0005] To achieve the above objectives, the present invention provides the following technical solution: an intelligent analysis method for secure chip data transmission, the method comprising:

[0006] Step S100: extracting all required environment data of the industrial robot when performing chip data transmission, the required environment data including the working environment, data sensitivity and transmission network; and quantifying relevant factors of the required environment data to distinguish different types of data transmission required environments;

[0007] Step S200: extracting the encryption algorithm and key length corresponding to data transmission in each type of data transmission requirement environment, storing them in a security feature set for the same type of data transmission requirement environment, and outputting the valid security encryption features in the security feature set;

[0008] Step S300: marking the data transmission requirement environment type that cannot output valid security encryption features as a requirement environment to be analyzed;

[0009] Step S400: Match the effective security encryption features with the corresponding type of quantified data transmission demand environment to generate a data group; build a chip environment transmission prediction model; and analyze the effective security encryption features corresponding to the demand environment prediction;

[0010] Step S500: Obtain the full-cycle execution process entered by the industrial robot, quantify the data transmission demand environment based on the full-cycle execution process, and match the corresponding effective security encryption features to generate an execution chip encryption chain; determine whether to optimize the execution chip encryption chain, and transmit the optimized execution chip encryption chain to the industrial robot to respond with encryption in the corresponding demand environment.

[0011] Furthermore, the demand environment data is quantified based on relevant factors to distinguish different types of data transmission demand environments, including the following specific contents:

[0012] Extract relevant factors recorded in the work environment data, including security level, physical security and personnel access rights, and perform interval scoring on the above three types of relevant factors to obtain the corresponding security level score P X1 , Physical Security Score P X2 and personnel access rights score P X3 ; and calculate the mean P based on the three categories of scores X0 Get quantified work environment data scores;

[0013] The relevant factors in data sensitivity include data type, data leakage impact and compliance requirements; and the corresponding score P is obtained based on the three relevant factors. Y1 、P Y2 、P Y3 , calculate the mean P Y0 Obtain a quantified data sensitivity score;

[0014] The relevant factors in the transmission network include network bandwidth, network delay, network stability and network security protection; the corresponding score P is obtained based on the four related factors. Z1 、P Z2 、P Z3 、P Z4 , calculate the mean P Z0 Obtain a quantified transmission network score;

[0015] The working environment data is scored as P X0 , data sensitivity score P Y0 and transmission network score P Z0The average value P0 of the chip data transmission is used as the comprehensive environment score of the chip data transmission event when the chip data transmission is executed; the comprehensive environment score P0 of all chip data transmission events recorded in the monitoring period is extracted, and the standard deviation of the comprehensive environment score T is calculated. P ;

[0016] The comprehensive environment scores are sorted in ascending order, and divided into several scoring intervals with the comprehensive environment score standard deviation TP as the interval. Each scoring interval represents a type of data transmission demand environment.

[0017] Furthermore, step S200 includes the following specific steps:

[0018] Step S201: Using the encryption algorithm and key length as a security feature group for each chip data transmission event under the data transmission requirement environment; traversing the security feature groups of all chip data transmission event records under the same data transmission requirement environment to construct a security feature set;

[0019] Step S202: When all security feature groups in the security feature set are the same, obtain the number of attack behavior records C for all chip data transmission events under the data transmission requirement environment of this type. Attack behavior refers to behavior that poses a transmission risk to chip data transmission. Calculate the feature transmission risk value F, where F = C / D. D represents the total number of chip data transmission events recorded under the corresponding data transmission requirement environment. A larger F indicates a lower security for the corresponding encryption algorithm and key length.

[0020] When there are different security feature groups in the security feature set, the chip data transmission events in each security feature group are extracted and the feature transmission risk value F under the corresponding event is calculated;

[0021] Step S203: Setting a feature transmission risk value threshold F0, marking a security feature group with a unique data transmission requirement environment smaller than F0 as a valid security encryption feature;

[0022] For data transmission requirements in which the security feature group types are not unique, the security feature groups are sorted from small to large according to the transmission risk value, and the security feature group corresponding to the smallest value that is less than F0 is selected as the effective security encryption feature.

[0023] Furthermore, S400 includes the following specific steps:

[0024] Step S410: Quantify the encryption algorithm and key length in each valid security encryption feature; for the encryption algorithm, obtain the average decryption speed of the encryption algorithm as a first value, and the key space used by the encryption algorithm as a second value, normalize the first value and the second value, and then calculate the average value to obtain the first feature value of the corresponding encryption algorithm; normalize the key length to obtain the second feature value of the corresponding encryption algorithm;

[0025] Step S420: Calculate the sum of the first feature quantity and the second feature quantity to obtain a quantized value R corresponding to the effective security encryption feature;

[0026] The data set is composed of the data transmission requirement environment as the input independent variable and the quantitative value of the effective security encryption feature as the output dependent variable, then the data set A=[(P X0 、P Y0 、P Z0 ),R];

[0027] Step S430: Constructing a chip environment transmission prediction model r,

[0028] r(R)=k1×P X0 +k2×P Y0 +k3×P Z0 +ε;

[0029] Extract the data group A corresponding to different types of data transmission demand environments and substitute it into the functional relationship r to calculate the corresponding reference coefficients k1, k2, k3 and the error term ε;

[0030] Step S440: Extract the P corresponding to the demand environment to be analyzed X0 、P Y0 、P Z0 , substitute it into the chip environment transmission prediction model to obtain the output value r(R), and traverse the data group to find the valid security encryption feature corresponding to the smallest difference with the output value r(R) and less than or equal to the difference threshold as the valid security encryption feature corresponding to the prediction of the demand environment to be analyzed.

[0031] By analyzing the chip environment transmission prediction model, we can not only further confirm the optimal effective security encryption features for the demand environment to be analyzed, so as to improve the security and reliability of chip data transmission in different types of demand environments, but also adaptively calculate the input variables by quantifying the environmental characteristics when the environment changes to obtain matching output variables, thereby improving the intelligence and applicability of the chip transmission security monitoring system.

[0032] Furthermore, step S500 includes the following specific steps:

[0033] The full-cycle execution process is divided into unit execution processes based on different data transmission requirement environments; different unit execution processes correspond to different data transmission requirement environments; the data transmission requirement environment recorded for each unit execution process is obtained, and if the historical records show the same data transmission requirement environment, the corresponding valid and secure encryption feature is extracted as the current encryption feature; if the historical records do not show the same data transmission requirement environment, the chip environment transmission prediction model is substituted to predict the output of the valid and secure encryption feature;

[0034] The execution chip encryption chain refers to the encryption chain formed by sequentially linking the valid security encryption features of the execution process records of each unit;

[0035] Obtain the resource usage and system response time of each valid security encryption feature in the execution chip encryption chain, normalize the resource usage and system response time, and sum them as the target evaluation value of each valid security encryption feature; mark the valid security encryption feature corresponding to the minimum target evaluation value as the target encryption feature;

[0036] Extract the characteristic transmission risk value recorded by the target encryption feature under the corresponding data transmission requirement environment as the guided risk value; and extract the characteristic transmission risk value of the data transmission requirement environment of other valid security encryption features except the target encryption feature in the execution chip encryption chain as the observation risk value; mark the unit execution process corresponding to the observation risk value greater than the guided risk value as the observation process, transmit the optimization signal, and convert the valid security encryption features in the observation process into the target encryption feature;

[0037] If there is a unit execution process with an observed risk value less than or equal to the guided risk value, it is marked as a safe process, and the effective security encryption feature of the safe process record is retained;

[0038] After observing the risk values ​​of all unit execution processes in turn, the optimized execution chip encryption chain is output.

[0039] On the one hand, by optimizing the execution chip encryption chain, the resource usage of encryption algorithm conversion in different data transmission environments when the industrial robot performs the complete process can be reduced, thereby improving the efficiency of chip data transmission. On the other hand, for data transmission in multiple transmission environments, through analysis and optimization of the encryption chain, not only the security and integrity of data transmission are guaranteed, but also the chip data security in each type of data transmission environment is improved while being convenient and efficient; and the risk of external attacks brought about by the need for chip encryption algorithm conversion in different transmission environments is avoided; and the encryption efficiency and the resource space occupied by the system are optimized.

[0040] An intelligent analysis system for secure chip data transmission, comprising a demand environment data extraction module, a demand environment data differentiation module, an effective and secure encryption feature analysis module, a demand environment to be analyzed marking module, a prediction model analysis module, and an encryption chain optimization module;

[0041] The demand environment data extraction module is used to extract all the demand environment data of the industrial robot when performing chip data transmission;

[0042] The demand environment data differentiation module is used to differentiate and obtain different types of data transmission demand environments;

[0043] The effective security encryption feature analysis module is used to output the effective security encryption features in the security feature set;

[0044] The to-be-analyzed requirement environment marking module is used to mark the data transmission requirement environment type that cannot output valid security encryption features as the to-be-analyzed requirement environment;

[0045] The prediction model analysis module is used to build a chip environment transmission prediction model;

[0046] The encryption chain optimization module is used to determine whether to optimize the execution chip encryption chain, and transmit the optimized execution chip encryption chain to the industrial robot to respond with encryption in the corresponding demand environment.

[0047] Furthermore, the demand environment data differentiation module includes a relevant factor extraction unit, a score calculation unit, and a ranking output unit;

[0048] The relevant factor extraction unit is used to extract relevant factors recorded in the work environment data;

[0049] The scoring calculation unit is used to calculate the quantified scores of each relevant factor;

[0050] The sorting output unit is used to calculate the standard deviation of the comprehensive environment score, sort the comprehensive environment score in ascending order, and divide it into several score intervals with the standard deviation of the comprehensive environment score as the interval. Each score interval is a type of data transmission demand environment.

[0051] Furthermore, the effective security encryption feature analysis module includes a security feature group generation unit, a feature transmission risk value calculation unit, and an effective security encryption feature output unit;

[0052] The security feature group generating unit is used to use the encryption algorithm and key length as the security feature group of each chip data transmission event under the data transmission requirement environment;

[0053] The characteristic transmission risk value calculation unit is used to calculate the characteristic transmission risk value;

[0054] The effective security encryption feature output unit is used to set the feature transmission risk value threshold, and mark the security feature group with a unique security feature group type and a value less than the threshold as a valid security encryption feature; for the data transmission requirement environment where the security feature group type is not unique, the security feature groups are sorted from small to large according to the transmission risk value, and the security feature group corresponding to the smallest value that is less than the threshold is selected as the valid security encryption feature.

[0055] Furthermore, the prediction model analysis module includes a feature quantification unit and a prediction model construction unit;

[0056] The feature quantization unit is used to quantify the encryption algorithm and key length in each valid security encryption feature;

[0057] The prediction model building unit is used to build a chip environment transmission prediction model based on the quantized value, and to analyze the effective security encryption features corresponding to the demand environment prediction.

[0058] Furthermore, the encryption chain optimization module includes an encryption chain generation unit, a target encryption feature determination unit, and a feature optimization unit;

[0059] The encryption chain generation unit is used to sequentially link the valid security encryption features of the process records of each unit to form an encryption chain;

[0060] The target encryption feature determination unit is used to mark the valid security encryption feature corresponding to the minimum target evaluation value as the target encryption feature;

[0061] The feature optimization unit is used to extract the feature transmission risk value recorded by the target encryption feature in the corresponding data transmission requirement environment as the guided risk value; and the feature transmission risk value of the data transmission requirement environment of other valid and secure encryption features except the target encryption feature in the execution chip encryption chain as the observed risk value; compare the relationship between the observed risk value and the guided risk value, and output a feature optimization signal to optimize the encryption chain.

[0062] Compared with the prior art, the present invention has the following beneficial effects:

[0063] The present invention analyzes the chip data transmission environment recorded in different process links and comprehensively considers the encryption characteristics of historical records to construct effective encryption characteristics that meet the data transmission environment of each type of chip. This achieves intelligent matching and adaptive encryption characteristics under changing environment types.

[0064] The present invention can, on the one hand, reduce the resource usage of encryption algorithm conversion in different data transmission environments when the industrial robot executes a complete process by optimizing the execution chip encryption chain, thereby improving the efficiency of chip data transmission. On the other hand, for data transmission in multiple transmission environments, the analysis and optimization of the encryption chain not only ensures the security and integrity of data transmission, but also improves the chip data security in each type of data transmission environment while being convenient and efficient. BRIEF DESCRIPTION OF THE DRAWINGS

[0065] Figure 1 This is a structural diagram of an intelligent analysis method for secure chip data transmission according to the present invention. DETAILED DESCRIPTION

[0066] Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making any creative work shall fall within the scope of protection of the present invention.

[0067] Example: Figure 1 As shown, the present invention provides an intelligent analysis method for secure chip data transmission, the method comprising:

[0068] Step S100: extracting all required environment data of the industrial robot when performing chip data transmission, the required environment data including the working environment, data sensitivity and transmission network; and quantifying relevant factors of the required environment data to distinguish different types of data transmission required environments;

[0069] Step S200: extracting the encryption algorithm and key length corresponding to data transmission in each type of data transmission requirement environment, storing them in a security feature set for the same type of data transmission requirement environment, and outputting the valid security encryption features in the security feature set;

[0070] Step S300: marking the data transmission requirement environment type that cannot output valid security encryption features as a requirement environment to be analyzed;

[0071] Step S400: Match the effective security encryption features with the corresponding type of quantified data transmission demand environment to generate a data group; build a chip environment transmission prediction model; and analyze the effective security encryption features corresponding to the demand environment prediction;

[0072] Step S500: Obtain the full-cycle execution process entered by the industrial robot, quantify the data transmission demand environment based on the full-cycle execution process, and match the corresponding effective security encryption features to generate an execution chip encryption chain; determine whether to optimize the execution chip encryption chain, and transmit the optimized execution chip encryption chain to the industrial robot to respond with encryption in the corresponding demand environment.

[0073] Quantify the relevant factors of the demand environment data and distinguish different types of data transmission demand environments, including the following specific contents:

[0074] Extract relevant factors recorded in the work environment data, including security level, physical security and personnel access rights, and perform interval scoring on the above three types of relevant factors to obtain the corresponding security level score P X1 , Physical Security Score P X2 and personnel access rights score P X3 ; and calculate the mean P based on the three categories of scores X0 Get quantified work environment data scores;

[0075] The relevant factors in data sensitivity include data type, data leakage impact and compliance requirements; and the corresponding score P is obtained based on the three relevant factors. Y1 、P Y2 、P Y3 , calculate the mean P Y0 Obtain a quantified data sensitivity score;

[0076] The relevant factors in the transmission network include network bandwidth, network delay, network stability and network security protection; the corresponding score P is obtained based on the four related factors. Z1 、P Z2 、P Z3 、P Z4 , calculate the mean P Z0 Obtain a quantified transmission network score;

[0077] Score the working environment data P X0 , data sensitivity score P Y0 and transmission network score P Z0 The average value P0 of the chip data transmission is used as the comprehensive environment score of the chip data transmission event when the chip data transmission is executed; the comprehensive environment score P0 of all chip data transmission events recorded in the monitoring period is extracted, and the standard deviation of the comprehensive environment score T is calculated. P ;

[0078] The comprehensive environment scores are sorted in ascending order, and divided into several scoring intervals with the comprehensive environment score standard deviation TP as the interval. Each scoring interval represents a type of data transmission demand environment.

[0079] As shown in the embodiment, the safety level in the working environment data can be determined based on the working scenario of the industrial robot. For example, in fields with high safety requirements such as military and aerospace, the safety level can be set to the highest level 5, with a score of 5; while in ordinary consumer product production workshops, the safety level may be lower, 3 or 2, with a score of 3 or 2.

[0080] Physical Security: Assess the physical security measures in place, such as access control systems, surveillance equipment, and protective fencing. These measures are scored based on their comprehensiveness. For example, a comprehensive, multi-faceted physical security system might receive a score of 8-10, while a facility with fewer or more vulnerable security measures might receive a score of 3-5.

[0081] Personnel access rights: This examines the management of personnel access rights in the work environment. An environment that strictly restricts access to unauthorized personnel and maintains detailed access records and permission levels for authorized personnel may be rated 8-10 points. An environment with loose personnel access management and certain security risks may be rated 4-6 points.

[0082] The data sensitivity factor is the data type: the sensitivity is determined based on the type of data transmitted by the industrial robot. Data involving confidential information such as product design drawings, production process parameters, and customer orders can be defined as highly sensitive, with a score of 8-10 points; while data such as equipment operating status and general production statistics are relatively less sensitive, with a score of 3-5 points.

[0083] Impact of a data breach: Assess the potential impact of a data breach. If a data breach would result in significant financial losses, reputational damage, or legal risks to the company, the sensitivity rating could be 9-10 points. If a data breach would only cause minor disruption to production processes, the sensitivity rating could be 4-6 points.

[0084] Compliance requirements: Consider whether the data is strictly protected by relevant laws and standards. For example, personal privacy data or industry-specific sensitive data, such as patient data in the medical industry, which is subject to strict regulatory oversight, may be rated 9-10 points in terms of sensitivity. On the other hand, some general industrial data, if subject to lower compliance requirements, may be rated 4-6 points in terms of sensitivity. The specific rating can be determined based on historical rating requirements.

[0085] Network Bandwidth: Measures the available bandwidth for network transmission, measured in Mbps. Higher bandwidth means faster data transmission. A threshold can be set based on actual needs. For example, a bandwidth greater than 100 Mbps could be rated 8-10 points, between 10 and 100 Mbps 4-7 points, and less than 10 Mbps 1-3 points.

[0086] Network Latency: This measure is measured in milliseconds. Low latency is crucial for real-time industrial robotics applications. Latency less than 10ms is rated 8-10, 10-50ms is rated 4-7, and greater than 50ms is rated 1-3.

[0087] Network stability: This is assessed by measuring the packet loss rate and fluctuations over a specific period of time. A network with a packet loss rate below 1% and minimal fluctuations is rated 8-10 points; a network with a packet loss rate between 1% and 5% with some fluctuations is rated 4-7 points; and a network with a packet loss rate greater than 5% or significant fluctuations is rated 1-3 points.

[0088] Network security protection: This examines the network's security measures, such as firewalls, intrusion detection systems, and encrypted channels. A comprehensive, multi-layered network security protection system is rated 8-10 points, while average security measures are rated 4-6 points, and weak security measures are rated 1-3 points.

[0089] Step S200 includes the following specific steps:

[0090] Step S201: Using the encryption algorithm and key length as a security feature group for each chip data transmission event under the data transmission requirement environment; traversing the security feature groups of all chip data transmission event records under the same data transmission requirement environment to construct a security feature set;

[0091] Step S202: When all security feature groups in the security feature set are the same, obtain the number of attack behavior records C for all chip data transmission events under the data transmission requirement environment of this type. Attack behavior refers to behavior that poses a transmission risk to chip data transmission. Calculate the feature transmission risk value F, where F = C / D. D represents the total number of chip data transmission events recorded under the corresponding data transmission requirement environment. A larger F indicates a lower security for the corresponding encryption algorithm and key length.

[0092] When there are different security feature groups in the security feature set, the chip data transmission events in each security feature group are extracted and the feature transmission risk value F under the corresponding event is calculated;

[0093] Step S203: Setting a feature transmission risk value threshold F0, marking a security feature group with a unique data transmission requirement environment smaller than F0 as a valid security encryption feature;

[0094] For data transmission requirements in which the security feature group types are not unique, the security feature groups are sorted from small to large according to the transmission risk value, and the security feature group corresponding to the smallest value that is less than F0 is selected as the effective security encryption feature.

[0095] S400 includes the following specific steps:

[0096] Step S410: Quantify the encryption algorithm and key length in each valid security encryption feature; for the encryption algorithm, obtain the average decryption speed of the encryption algorithm as a first value, and the key space used by the encryption algorithm as a second value, normalize the first value and the second value, and then calculate the average value to obtain the first feature value of the corresponding encryption algorithm; normalize the key length to obtain the second feature value of the corresponding encryption algorithm;

[0097] Step S420: Calculate the sum of the first feature quantity and the second feature quantity to obtain a quantized value R corresponding to the effective security encryption feature;

[0098] The data set is composed of the data transmission requirement environment as the input independent variable and the quantitative value of the effective security encryption feature as the output dependent variable, then the data set A=[(P X0 、P Y0 、P Z0 ),R];

[0099] Step S430: Constructing a chip environment transmission prediction model r,

[0100] r(R)=k1×P X0 +k2×P Y0 +k3×P Z0 +ε;

[0101] Extract the data group A corresponding to different types of data transmission demand environments and substitute it into the functional relationship r to calculate the corresponding reference coefficients k1, k2, k3 and the error term ε;

[0102] Step S440: Extract the P corresponding to the demand environment to be analyzed X0 、P Y0 、P Z0 , substitute it into the chip environment transmission prediction model to obtain the output value r(R), and traverse the data group to find the valid security encryption feature corresponding to the smallest difference with the output value r(R) and less than or equal to the difference threshold as the valid security encryption feature corresponding to the prediction of the demand environment to be analyzed.

[0103] If there is no minimum difference and the difference value is less than or equal to the difference threshold, the security feature corresponding to the minimum feature transmission risk value is selected as the effective security encryption feature of the demand environment to be analyzed.

[0104] By analyzing the chip environment transmission prediction model, we can not only further confirm the optimal effective security encryption features for the demand environment to be analyzed, so as to improve the security and reliability of chip data transmission in different types of demand environments, but also adaptively calculate the input variables by quantifying the environmental characteristics when the environment changes to obtain matching output variables, thereby improving the intelligence and applicability of the chip transmission security monitoring system.

[0105] Step S500 includes the following specific steps:

[0106] The full-cycle execution process is divided into unit execution processes based on different data transmission requirement environments; different unit execution processes correspond to different data transmission requirement environments; the data transmission requirement environment recorded for each unit execution process is obtained, and if the historical records show the same data transmission requirement environment, the corresponding valid and secure encryption feature is extracted as the current encryption feature; if the historical records do not show the same data transmission requirement environment, the chip environment transmission prediction model is substituted to predict the output of the valid and secure encryption feature;

[0107] The execution chip encryption chain refers to the encryption chain formed by sequentially linking the valid security encryption features of the execution process records of each unit;

[0108] Obtain the resource usage and system response time of each valid security encryption feature in the execution chip encryption chain, normalize the resource usage and system response time, and sum them as the target evaluation value of each valid security encryption feature; mark the valid security encryption feature corresponding to the minimum target evaluation value as the target encryption feature;

[0109] Extract the characteristic transmission risk value recorded by the target encryption feature under the corresponding data transmission requirement environment as the guided risk value; and extract the characteristic transmission risk value of the data transmission requirement environment of other valid security encryption features except the target encryption feature in the execution chip encryption chain as the observation risk value; mark the unit execution process corresponding to the observation risk value greater than the guided risk value as the observation process, transmit the optimization signal, and convert the valid security encryption features in the observation process into the target encryption feature;

[0110] If there is a unit execution process with an observed risk value less than or equal to the guided risk value, it is marked as a safe process, and the effective security encryption feature of the safe process record is retained;

[0111] After observing the risk values ​​of all unit execution processes in turn, the optimized execution chip encryption chain is output.

[0112] As shown in the embodiment: the initially generated execution chip encryption chain is as follows:

[0113] (encryption algorithm 1 + key length 1) → (encryption algorithm 2 + key length 2) → (encryption algorithm 3 + key length 3);

[0114] If the analysis shows that the resource usage and system response time corresponding to (encryption algorithm 2 + key length 2) are the smallest after quantization, mark encryption algorithm 2 and key length 2 as target encryption features;

[0115] It is necessary to further analyze the characteristic transmission risk value of the target encryption feature in the corresponding data transmission environment. If the characteristic transmission risk value of (encryption algorithm 1 + key length 1) in the corresponding data transmission environment is greater than the characteristic transmission risk value of the target encryption feature, then (encryption algorithm 1 + key length 1) can be optimized to (encryption algorithm 2 + key length 2). If the characteristic transmission risk value of (encryption algorithm 3 + key length 3) in the corresponding data transmission environment is less than the characteristic transmission risk value of the target encryption feature, then no optimization is performed.

[0116] The final optimized execution chip encryption chain is:

[0117] (Encryption algorithm 2 + key length 2) → (Encryption algorithm 2 + key length 2) → (Encryption algorithm 3 + key length 3).

[0118] On the one hand, by optimizing the execution chip encryption chain, the resource usage of encryption algorithm conversion in different data transmission environments when the industrial robot performs the complete process can be reduced, thereby improving the efficiency of chip data transmission. On the other hand, for data transmission in multiple transmission environments, through analysis and optimization of the encryption chain, not only the security and integrity of data transmission are guaranteed, but also the chip data security in each type of data transmission environment is improved while being convenient and efficient; and the risk of external attacks brought about by the need for chip encryption algorithm conversion in different transmission environments is avoided; and the encryption efficiency and the resource space occupied by the system are optimized.

[0119] An intelligent analysis system for secure chip data transmission, comprising a demand environment data extraction module, a demand environment data differentiation module, an effective and secure encryption feature analysis module, a demand environment to be analyzed marking module, a prediction model analysis module, and an encryption chain optimization module;

[0120] The demand environment data extraction module is used to extract all the demand environment data of the industrial robot when performing chip data transmission;

[0121] The demand environment data differentiation module is used to differentiate and obtain different types of data transmission demand environments;

[0122] The effective security encryption feature analysis module is used to output the effective security encryption features in the security feature set;

[0123] The to-be-analyzed requirement environment marking module is used to mark the data transmission requirement environment type that cannot output valid security encryption features as the to-be-analyzed requirement environment;

[0124] The prediction model analysis module is used to build a chip environment transmission prediction model;

[0125] The encryption chain optimization module is used to determine whether to optimize the execution chip encryption chain, and transmit the optimized execution chip encryption chain to the industrial robot to respond with encryption in the corresponding demand environment.

[0126] The demand environment data differentiation module includes a relevant factor extraction unit, a score calculation unit, and a ranking output unit;

[0127] The relevant factor extraction unit is used to extract relevant factors recorded in the work environment data;

[0128] The scoring calculation unit is used to calculate the quantified scores of each relevant factor;

[0129] The sorting output unit is used to calculate the standard deviation of the comprehensive environment score, sort the comprehensive environment score in ascending order, and divide it into several score intervals with the standard deviation of the comprehensive environment score as the interval. Each score interval is a type of data transmission demand environment.

[0130] The effective security encryption feature analysis module includes a security feature group generation unit, a feature transmission risk value calculation unit and an effective security encryption feature output unit;

[0131] The security feature group generating unit is used to use the encryption algorithm and key length as the security feature group of each chip data transmission event under the data transmission requirement environment;

[0132] The characteristic transmission risk value calculation unit is used to calculate the characteristic transmission risk value;

[0133] The effective security encryption feature output unit is used to set the feature transmission risk value threshold, and mark the security feature group with a unique security feature group type and a value less than the threshold as a valid security encryption feature; for the data transmission requirement environment where the security feature group type is not unique, the security feature groups are sorted from small to large according to the transmission risk value, and the security feature group corresponding to the smallest value that is less than the threshold is selected as the valid security encryption feature.

[0134] The prediction model analysis module includes a feature quantification unit and a prediction model construction unit;

[0135] The feature quantization unit is used to quantify the encryption algorithm and key length in each valid security encryption feature;

[0136] The prediction model building unit is used to build a chip environment transmission prediction model based on the quantized value, and to analyze the effective security encryption features corresponding to the demand environment prediction.

[0137] The encryption chain optimization module includes an encryption chain generation unit, a target encryption feature determination unit, and a feature optimization unit;

[0138] The encryption chain generation unit is used to sequentially link the valid security encryption features of the process records of each unit to form an encryption chain;

[0139] The target encryption feature determination unit is used to mark the valid security encryption feature corresponding to the minimum target evaluation value as the target encryption feature;

[0140] The feature optimization unit is used to extract the feature transmission risk value recorded by the target encryption feature in the corresponding data transmission requirement environment as the guided risk value; and the feature transmission risk value of the data transmission requirement environment of other valid and secure encryption features except the target encryption feature in the execution chip encryption chain as the observed risk value; compare the relationship between the observed risk value and the guided risk value, and output a feature optimization signal to optimize the encryption chain.

[0141] Finally, it should be noted that the above descriptions are merely preferred embodiments of the present invention and are not intended to limit the present invention. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art will be able to modify the technical solutions described in the aforementioned embodiments or substitute equivalents for some of the technical features. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present invention shall be included within the scope of protection of the present invention.

Claims

1. An intelligent analysis method for secure chip data transmission, characterized by: The method comprises: Step S100: extracting all required environment data of the industrial robot when performing chip data transmission, the required environment data including the working environment, data sensitivity and transmission network; and quantifying relevant factors of the required environment data to distinguish different types of data transmission required environments; Step S200: extracting the encryption algorithm and key length corresponding to data transmission in each type of data transmission requirement environment, storing them in a security feature set for the same type of data transmission requirement environment, and outputting the valid security encryption features in the security feature set; Step S300: marking the data transmission requirement environment type that cannot output valid security encryption features as a requirement environment to be analyzed; Step S400: Match the effective security encryption features with the corresponding type of quantified data transmission demand environment to generate a data group; build a chip environment transmission prediction model; and analyze the effective security encryption features corresponding to the demand environment prediction; The S400 includes the following specific steps: Step S410: quantify the encryption algorithm and key length in each valid security encryption feature; for the encryption algorithm, obtain the average decryption speed of the encryption algorithm as a first value, and the key space used by the encryption algorithm as a second value, normalize the first value and the second value, and then calculate the average value to obtain the first feature quantity of the corresponding encryption algorithm; normalize the key length to obtain the second feature quantity of the corresponding encryption algorithm; Step S420: Calculate the sum of the first feature quantity and the second feature quantity to obtain a quantized value R corresponding to the effective security encryption feature; The data set is composed of the data transmission requirement environment as the input independent variable and the quantized value of the effective security encryption feature as the output dependent variable, so the data set A=[(P X0 、P Y0 、P Z0 ),R]; where P X0 Indicates the working environment data score, P Y0 Represents the data sensitivity score, P Z0 represents the transmission network score; Step S430: Constructing a chip environment transmission prediction model r, r(R)=k1×P X0 +k2×P Y0 +k3×P Z0 +e; Extract the data group A corresponding to different types of data transmission demand environments and substitute it into the functional relationship r to calculate the corresponding reference coefficients k1, k2, k3 and the error term ε; Step S440: Extract the P corresponding to the demand environment to be analyzed X0 、P Y0 、P Z0 , substitute it into the chip environment transmission prediction model to obtain the output value r(R), and traverse the data group to find the valid security encryption feature corresponding to the smallest difference with the output value r(R) and less than or equal to the difference threshold as the valid security encryption feature corresponding to the prediction of the demand environment to be analyzed; Step S500: Obtain the full-cycle execution process entered by the industrial robot, quantify the data transmission requirement environment based on the full-cycle execution process, and generate an execution chip encryption chain by matching the corresponding effective security encryption features; determine whether to optimize the execution chip encryption chain, and transmit the optimized execution chip encryption chain to the industrial robot for response encryption in the corresponding requirement environment; Obtain the resource usage and system response time of each valid security encryption feature in the execution chip encryption chain, normalize the resource usage and system response time, and sum them as the target evaluation value of each valid security encryption feature; mark the valid security encryption feature corresponding to the minimum target evaluation value as the target encryption feature; Extract the characteristic transmission risk value recorded by the target encryption feature under the corresponding data transmission requirement environment as the guided risk value; and extract the characteristic transmission risk value of the data transmission requirement environment of other valid security encryption features except the target encryption feature in the execution chip encryption chain as the observation risk value; mark the unit execution process corresponding to the observation risk value greater than the guided risk value as the observation process, transmit the optimization signal, and convert the valid security encryption features in the observation process into the target encryption feature; If there is a unit execution process with an observed risk value less than or equal to the guided risk value, it is marked as a safe process, and the effective security encryption feature of the safe process record is retained; After observing the risk values ​​of all unit execution processes in turn, the optimized execution chip encryption chain is output.

2. The intelligent analysis method for secure chip data transmission according to claim 1, characterized in that: The quantification of relevant factors of the demand environment data to distinguish different types of data transmission demand environments includes the following specific contents: Extract relevant factors recorded in the work environment data, including security level, physical security and personnel access rights, and perform interval scoring on the above three types of relevant factors to obtain the corresponding security level score P X1 , Physical Security Score P X2 and personnel access rights score P X3 ; and calculate the mean P based on the three categories of scores X0 Get quantified work environment data scores; The relevant factors in data sensitivity include data type, data leakage impact and compliance requirements; and the corresponding score P is obtained based on the three relevant factors. Y1 、P Y2 、P Y3 , calculate the mean P Y0 Obtain a quantified data sensitivity score; The relevant factors in the transmission network include network bandwidth, network delay, network stability and network security protection; the corresponding score P is obtained based on the four related factors. Z1 、P Z2 、P Z3 、P Z4 , calculate the mean P Z0 Obtain a quantified transmission network score; Score the working environment data P X0 , data sensitivity score P Y0 and transmission network score P Z0 The average value P0 of the chip data transmission is used as the comprehensive environment score of the chip data transmission event when the chip data transmission is executed; the comprehensive environment score P0 of all chip data transmission events recorded in the monitoring period is extracted, and the standard deviation of the comprehensive environment score T is calculated. P ; The comprehensive environment scores are sorted in ascending order, and divided into several scoring intervals with the comprehensive environment score standard deviation TP as the interval. Each scoring interval represents a type of data transmission demand environment.

3. The intelligent analysis method for secure chip data transmission according to claim 2, characterized in that: The step S200 includes the following specific steps: Step S201: Using the encryption algorithm and key length as a security feature group for each chip data transmission event under the data transmission requirement environment; traversing the security feature groups of all chip data transmission event records under the same data transmission requirement environment to construct a security feature set; Step S202: When all security feature groups in the security feature set are the same, obtain the number C of attack behavior records in all chip data transmission events under the data transmission requirement environment of this type, where the attack behavior refers to the behavior that poses a transmission risk to the chip data transmission; Calculate the characteristic transmission risk value F, F = C / D; where D represents the total number of chip data transmission events recorded under the corresponding type of data transmission requirement environment; When there are different security feature groups in the security feature set, the chip data transmission events in each security feature group are extracted and the feature transmission risk value F under the corresponding event is calculated; Step S203: Setting a feature transmission risk value threshold F0, marking a security feature group with a unique data transmission requirement environment smaller than F0 as a valid security encryption feature; For data transmission requirements in which the security feature group types are not unique, the security feature groups are sorted from small to large according to the transmission risk value, and the security feature group corresponding to the smallest value that is less than F0 is selected as the effective security encryption feature.

4. The intelligent analysis method for secure chip data transmission according to claim 3, characterized in that: The step S500 includes the following specific steps: The full-cycle execution process is divided into unit execution processes according to different data transmission requirement environments; different unit execution processes correspond to different data transmission requirement environments; the data transmission requirement environment recorded for each unit execution process is obtained, and if the historical records show the same data transmission requirement environment, the corresponding valid and secure encryption feature is extracted as the current encryption feature; if the historical records do not show the same data transmission requirement environment, the chip environment transmission prediction model is substituted to predict and output the valid and secure encryption feature; The execution chip encryption chain refers to an encryption chain formed by sequentially linking the valid security encryption features of the execution process records of each unit.

5. An intelligent analysis system for secure chip data transmission using the intelligent analysis method for secure chip data transmission according to any one of claims 1 to 4, characterized in that: The system includes a demand environment data extraction module, a demand environment data differentiation module, an effective and secure encryption feature analysis module, a demand environment to be analyzed marking module, a prediction model analysis module and an encryption chain optimization module; The required environment data extraction module is used to extract all required environment data when the industrial robot performs chip data transmission; The demand environment data distinguishing module is used to distinguish different types of data transmission demand environments; The effective security encryption feature analysis module is used to output the effective security encryption features in the security feature set; The to-be-analyzed requirement environment marking module is used to mark the data transmission requirement environment type that cannot output valid security encryption features as the to-be-analyzed requirement environment; The prediction model analysis module is used to build a chip environment transmission prediction model; The encryption chain optimization module is used to determine whether to optimize the execution chip encryption chain, and transmit the optimized execution chip encryption chain to the industrial robot to respond with encryption in the corresponding demand environment.

6. The intelligent analysis system for secure chip data transmission according to claim 5, characterized in that: The demand environment data differentiation module includes a relevant factor extraction unit, a score calculation unit and a ranking output unit; The relevant factor extraction unit is used to extract relevant factors recorded in the working environment data; The score calculation unit is used to calculate the quantified score of each relevant factor; The sorting output unit is used to calculate the standard deviation of the comprehensive environment score, sort the comprehensive environment score in ascending order, and divide it into several score intervals with the standard deviation of the comprehensive environment score as the interval, each score interval being a type of data transmission demand environment.

7. The intelligent analysis system for secure chip data transmission according to claim 6, characterized in that: The effective security encryption feature analysis module includes a security feature group generation unit, a feature transmission risk value calculation unit and an effective security encryption feature output unit; The security feature group generating unit is used to use the encryption algorithm and key length as the security feature group of each chip data transmission event under the data transmission requirement environment; The characteristic transmission risk value calculation unit is used to calculate the characteristic transmission risk value; The effective security encryption feature output unit is used to set a feature transmission risk value threshold, and mark a security feature group with a unique data transmission requirement environment and a security feature group with a value less than the threshold as a valid security encryption feature; In a data transmission requirement environment where the security feature group types are not unique, each security feature group is sorted from small to large according to the transmission risk value, and the security feature group corresponding to the smallest value that is less than a threshold is selected as the effective security encryption feature.

8. The intelligent analysis system for secure chip data transmission according to claim 7, characterized in that: The prediction model analysis module includes a feature quantification unit and a prediction model construction unit; The feature quantization unit is used to quantify the encryption algorithm and key length in each valid security encryption feature; The prediction model building unit is used to build a chip environment transmission prediction model based on the quantized value, and to analyze the effective security encryption features corresponding to the demand environment prediction.

9. The intelligent analysis system for secure chip data transmission according to claim 7, characterized in that: The encryption chain optimization module includes an encryption chain generation unit, a target encryption feature determination unit, and a feature optimization unit; The encryption chain generation unit is used to sequentially link the valid security encryption features of the process records of each unit to form an encryption chain; The target encryption feature determination unit is used to mark the valid security encryption feature corresponding to the minimum target evaluation value as the target encryption feature; The feature optimization unit is used to extract the feature transmission risk value recorded by the target encryption feature in the corresponding data transmission requirement environment and guide the risk value; And the feature transmission risk value of other valid and secure encryption features except the target encryption feature in the execution chip encryption chain under the data transmission requirement environment is the observed risk value; Compare the relationship between the observed risk value and the guided risk value and output the feature optimization signal to optimize the encryption chain.

Images