A method and system for securing device log information

Abstract

The application belongs to the technical field of safety protection, and particularly relates to a safety protection method and system for device log information, which comprises the following steps: a wireless device sends log information to a terminal in a time manner, the log information is sent in the form of ciphertext, the ciphertext is composed of the encryption results of all plaintext data in the log information, the terminal stores the received log information of multiple wireless devices in a database, and the encryption result of the plaintext data is obtained by the following method: generating a chaotic sequence according to a secret key agreed upon by the terminal and the wireless device and a one-dimensional chaotic mapping system, obtaining the same character as the plaintext data and marking it as a character, dividing all code words of the character into categories according to the length, selecting a target category from the categories according to a chaotic value in the chaotic sequence and the encryption result of the previous plaintext data, and taking any code word in the target category as the encryption result of the plaintext data. The application improves the security of the log information.

Description

Technical Field

[0001] This invention relates to the field of security protection technology. More specifically, this invention relates to a method and system for protecting device log information. Background Technology

[0002] A wireless kit includes a terminal and multiple wireless devices. The log information of the wireless devices is crucial for maintaining the normal operation of the wireless devices, troubleshooting, and network security. By analyzing the log information, potential problems can be identified and resolved in a timely manner, ensuring the stability and reliability of the wireless kit.

[0003] In related technologies, for example, Chinese patent document CN110839038B discloses an intelligent monitoring method, platform server, and security device based on a security device. This method is applied to the platform server. First, it determines the health index of the security device based on its logs. When the health index indicates a specified abnormal state, an operation request is sent to the security device. The operation request includes a token, which is generated according to an agreed encryption method. Finally, when the security device fails to verify the token, it receives a first response from the security device, indicating that the operation request is an illegal request. Therefore, this monitoring method can promptly address security device issues in emergency situations, improving monitoring timeliness. By adding a token for verification to the operation request, it avoids security problems caused by malicious data theft by third parties, improving data security and enhancing monitoring reliability.

[0004] Among related technologies, the AES encryption algorithm has strong regularity, which allows attackers to perform statistical analysis attacks based on the regularity between plaintext and ciphertext, thereby cracking the ciphertext and seriously affecting the security of the device's log information. Summary of the Invention

[0005] To address the technical problem that the strong regularity of the AES encryption algorithm allows attackers to crack ciphertext through statistical analysis, seriously affecting the security of device log information, this invention provides solutions in the following aspects.

[0006] In a first aspect, the present invention provides a method for secure protection of device log information, comprising: a wireless array including a terminal and multiple wireless devices; multiple wireless devices periodically sending log information to the terminal, wherein the log information is sent in encrypted form, the encrypted form consisting of the encryption result of all plaintext data in the log information; the terminal storing the received log information from the multiple wireless devices in a database; the method for obtaining the encryption result of the plaintext data is: for the first... Given a set of plaintext data, a chaotic sequence is generated based on the key agreed upon between the terminal and the wireless device, and a one-dimensional chaotic mapping system; the sequence is then compared with the first set of plaintext data. Characters that are identical to each other in plaintext data are denoted as characters. ; Based on length, characters All codewords are divided into Categories The preset value; based on the chaotic value in the chaotic sequence and the first... The encryption result of plaintext data, from Select a target category from the given categories, and use any codeword from that target category as the encryption result of the plaintext data; wherein, characters are obtained from multiple constructed binary trees. All codewords, where codewords refer to binary trees. root node to character In a binary tree The path of the corresponding node in the binary tree It refers to characters A binary tree, and characters In a binary tree, all corresponding nodes are leaf nodes; when constructing multiple binary trees, it is required that the characters can be separated according to their length. All codewords are divided into There are 10 categories, and all codewords in each category have the same length, and the characters... The codeword for this character is different from the codewords for other characters.

[0007] This invention encrypts all plaintext data in the log information when a wireless device sends log information to a terminal, transmitting the log information in ciphertext form. This effectively prevents log information leakage during transmission and improves log information security. Specifically, this invention categorizes all codewords containing characters identical to the current plaintext data into multiple classes based on their length. Then, based on the chaotic value in the chaotic sequence and the encryption result of the previous plaintext data, a target class is selected from these classes. Any codeword from the target class is then used as the encryption result of the current plaintext data. Therefore, the length of the final encrypted result is not fixed. Compared to the AES encryption method, which encrypts plaintext data into fixed-length ciphertext, the encryption method of this invention has weaker regularity. Therefore, the ciphertext obtained through this invention has strong resistance to statistical analysis attacks, effectively preventing log information leakage during transmission and improving log information security.

[0008] Preferably, the wireless device includes, but is not limited to, 4G cameras and WiFi cameras; the log information includes, but is not limited to, device startup logs, configuration change logs, connection logs, error and exception logs, performance logs, security logs, data transmission logs, user activity logs, maintenance logs, power management logs, location information logs, network status logs, event logs, system logs, and storage logs; the log information also records the device identifier of the wireless device.

[0009] Log information from wireless devices is crucial for maintaining their normal operation, troubleshooting, and network security. Therefore, this invention collects and transmits log information to enable terminals to analyze the log information, promptly identify and resolve potential problems, and ensure the stability and reliability of the wireless array.

[0010] Preferably, the key is agreed upon by the terminal and the wireless device based on the initial conditions of the one-dimensional chaotic mapping system. The initial conditions of the one-dimensional chaotic mapping system include initial values ​​and parameters. Within the range of values ​​of the initial values ​​and the range of values ​​of the parameters, a combination of initial values ​​and parameters is randomly generated as the key.

[0011] Due to the pseudo-randomness, unpredictability, and extreme sensitivity to initial conditions inherent in chaotic mapping systems, the key obtained through chaotic mapping systems in this invention increases the difficulty of cracking, effectively preventing log information from being leaked during transmission and improving the security of log information.

[0012] Preferably, generating a chaotic sequence based on the key agreed upon by the terminal and the wireless device and the one-dimensional chaotic mapping system includes: using the key as the initial condition of the one-dimensional chaotic mapping system, and iterating the one-dimensional chaotic mapping system. Next time, obtain There are several chaotic values, among which... This indicates the total number of plaintext data entries in the log message. , This is a preset value. For integers greater than 30; the th value among all obtained chaotic values To the A sequence of chaotic values ​​is used as a chaotic sequence, and the length of the resulting chaotic sequence is equal to... .

[0013] Preferably, the from Select a target category from the categories, including: for the first category in the log information. The first plaintext data, will be the first The category is used as the target category, where, The first in the chaotic sequence A chaotic value, This is the floor function; for the first... Plaintext data, , This indicates the total number of plaintext data entries in the log message. The category is used as the target category; where, , , , , They are binary numbers The first in Bit, 2nd bit, 3rd bit Bit and the Bits, the total number of bits in this binary number 1 bit , This is a preset value. Represents a decimal number. binary number The corresponding decimal number.

[0014] This invention selects a target category from multiple categories based on the chaotic value in the chaotic sequence and the encryption result of the previous plaintext data. When decrypting the ciphertext subsequently, even a slight change caused by a decryption error in any ciphertext data will cause an indistinguishable change in the decryption result of the ciphertext. Therefore, the ciphertext obtained by the encryption method according to this invention has a strong avalanche effect, which can effectively prevent log information from being leaked during transmission and improve the security of log information.

[0015] Preferably, the binary number The first in Bit equal to the The encryption result of plaintext data The first in Bit, where , , This is a preset value. The first in the chaotic sequence A chaotic value, For the first in the log information The encryption result of plaintext data Length, This is the floor function.

[0016] Preferably, the method further includes: processing the obtained codewords in the category in ascending or descending order of their lengths. Sort the categories according to the number of categories, and then label the sorted categories as the 1st, 2nd, 3rd, 4th, 5th, 6th, 7th, 8th, 9th, 10th, 11th, 12th, 13th, 14th, 15th, 16th, 17th, 18th, 19 ... Category to No. category.

[0017] Preferably, the path is a binary tree. root node to character In a binary tree It consists of the labels of all branches between the corresponding nodes.

[0018] Secondly, the present invention provides a security protection system for device log information, including a processor and a memory, wherein the memory stores computer program instructions, and when the computer program instructions are executed by the processor, the above-mentioned security protection method for device log information is implemented.

[0019] By adopting the above technical solution, a computer program is generated from the above-mentioned method for protecting device log information and stored in a memory so that it can be loaded and executed by a processor. This allows for the creation of a terminal device based on the memory and processor, making it convenient to use.

[0020] The beneficial effects of this invention are as follows:

[0021] This invention encrypts all plaintext data in the log information when a wireless device sends log information to a terminal, transmitting the log information in ciphertext form. This effectively prevents log information leakage during transmission and improves log information security. Specifically, this invention categorizes all codewords containing characters identical to the current plaintext data into multiple classes based on their length. Then, based on the chaotic value in the chaotic sequence and the encryption result of the previous plaintext data, a target class is selected from these classes. Any codeword from the target class is then used as the encryption result of the current plaintext data. Therefore, the length of the final encrypted result is not fixed. Compared to the AES encryption method, which encrypts plaintext data into fixed-length ciphertext, the encryption method of this invention has weaker regularity. Therefore, the ciphertext obtained through this invention has strong resistance to statistical analysis attacks, effectively preventing log information leakage during transmission and improving log information security.

[0022] Furthermore, based on the chaotic value in the chaotic sequence and the encryption result of the previous plaintext data, the present invention selects a target category from multiple categories. When decrypting the ciphertext subsequently, any slight change caused by a decryption error in any ciphertext data will cause an indistinguishable change in the decryption result of the ciphertext. Therefore, the ciphertext obtained by the encryption method of the present invention has a strong avalanche effect, which can effectively prevent log information from being leaked during transmission and improve the security of log information. Attached Figure Description

[0023] The above and other objects, features, and advantages of exemplary embodiments of the present invention will become readily apparent upon reading the following detailed description with reference to the accompanying drawings. In the drawings, several embodiments of the invention are illustrated by way of example and not limitation, and like or corresponding reference numerals denote like or corresponding parts, wherein:

[0024] Figure 1 This is a flowchart illustrating a method for protecting device log information according to the present invention;

[0025] Figure 2 This is a schematic diagram illustrating a 4G-type camera;

[0026] Figure 3 This is a schematic diagram illustrating a WiFi-based camera;

[0027] Figure 4 This is a flowchart illustrating step S3 in the present invention;

[0028] Figure 5 This is a schematic diagram illustrating the construction of the first binary tree;

[0029] Figure 6 This is a schematic diagram illustrating the construction of the second binary tree;

[0030] Figure 7 This is a schematic diagram illustrating the construction of the third binary tree;

[0031] Figure 8 This is a schematic diagram illustrating the construction of the fourth binary tree;

[0032] Figure 9 This is a schematic diagram illustrating the construction of the 5th binary tree. Detailed Implementation

[0033] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0034] The specific embodiments of the present invention will now be described in detail with reference to the accompanying drawings.

[0035] This invention discloses a method for protecting device log information, referring to... Figure 1 This includes steps S1-S3:

[0036] S1. Log information is collected from multiple wireless devices in the wireless kit.

[0037] It should be noted that the wireless kit includes one terminal and multiple wireless devices. The log information of the wireless devices is crucial for maintaining the normal operation of the wireless devices, troubleshooting, and network security. By analyzing the log information, potential problems can be identified and resolved in a timely manner, ensuring the stability and reliability of the wireless kit.

[0038] Specifically, the wireless kit includes one terminal and multiple wireless devices, including but not limited to 4G cameras and WiFi cameras. The 4G cameras include, but are not limited to, a 4MP dual-light 4G PTZ camera, a 4MP binocular 4-inch intelligent dual-light 4G PTZ camera, a 3MP 4-inch intelligent dual-light 4G PTZ camera, and a binocular 4G PTZ camera Q404F-GM2. A schematic diagram of the 4G cameras is shown below. Figure 2 As shown; WiFi cameras include, but are not limited to, 3MP starlight 4-inch wireless PTZ cameras and 4MP binocular pan-tilt cameras. A schematic diagram of a WiFi camera is shown below. Figure 3 As shown.

[0039] Furthermore, the wireless device periodically collects and sends the device's log information through a timed thread, writes the collected log information into a local data queue, and sends the collected log information from the local data queue to the terminal when the sending time arrives.

[0040] The log information includes, but is not limited to, device startup logs, configuration change logs, connection logs, error and exception logs, performance logs, security logs, data transmission logs, user activity logs, maintenance logs, power management logs, location information logs, network status logs, event logs, system logs, and storage logs. In addition, the log information also records the device identifier of the wireless device, which facilitates the terminal to summarize the log information transmitted by different wireless devices.

[0041] The device startup log records system initialization information during the device startup process, including startup time, system version, and startup order; the configuration change log records any changes to the device configuration, such as IP address, wireless settings, and user permissions; the connection log records the time, duration, and reason for disconnection when the device connects to the network; the error and exception log records all errors and exceptions encountered during device operation, including hardware failures, software crashes, and configuration errors; the performance log records device performance metrics, such as CPU usage, memory usage, storage space, and battery life; the security log records security events, including login attempts, access control list changes, security warnings, and intrusion detection system alerts; and the data transmission log records detailed information about data transmission, including the amount of data sent and received. The system log records the following information: transmission rate and data loss; user activity log records any user operations on the device, such as video viewing, setting changes, and user login; maintenance log records device maintenance and repair activities, including firmware updates, software patches, and hardware replacements; power management log records the device's power status, such as power on, power off, and power failure; location information log records the device's geographical location information; network status log records the device's network status, including signal strength, connection quality, and other network parameters; event log records any events triggered by the device, such as alarm triggering, sensor activation, and system warnings; system log records system-level activities, such as system restarts, service status, and system messages; and storage log records storage device usage, including storage space allocation and release.

[0042] Furthermore, the same plaintext data in the log information is treated as a single character.

[0043] For example, when the log information is "IP address: 192.168.1.20", there are 17 plaintext data in the log information, namely: "I", "P", ":", "1", "9", "2", ".", "1", "6", "8", ".", "1", ".", "2", and "0". Among them, 10 characters are involved, namely: "0", "1", "2", "6", "8", "9", "I", "P", ":", and ".".

[0044] S2. The terminal and each wireless device agree on a key based on the initial conditions of the one-dimensional chaotic mapping system.

[0045] It should be noted that the pseudo-randomness, unpredictability, and extreme sensitivity to initial conditions of chaotic mapping systems make keys obtained from chaotic mapping systems more difficult to crack and highly secure.

[0046] Specifically, the key is agreed upon by the terminal and the wireless device based on the initial conditions of the one-dimensional chaotic mapping system. The initial conditions of the one-dimensional chaotic mapping system include initial values ​​and parameters. Within the range of values ​​of the initial values ​​and the range of values ​​of the parameters, a combination of initial values ​​and parameters is randomly generated as the key.

[0047] In one embodiment, the one-dimensional chaotic mapping system is a one-dimensional logistic chaotic mapping system, wherein the initial conditions of the one-dimensional logistic chaotic mapping system include an initial value. and a parameter and initial value The range of values ​​is ,parameter The range of values ​​is ; at the initial value The range of values ​​and parameters Within the range of values, randomly generate a set of initial values. and parameters combination , as the key.

[0048] In another embodiment, the one-dimensional chaotic mapping system is a one-dimensional Singer chaotic mapping system, wherein the initial conditions of the one-dimensional Singer chaotic mapping system include an initial value. and a parameter and initial value The range of values ​​is ,parameter The range of values ​​is ; at the initial value The range of values ​​and parameters Within the range of values, randomly generate a set of initial values. and parameters combination , as the key.

[0049] In other embodiments, implementers may select a one-dimensional chaotic mapping system according to the actual application scenario and requirements, including but not limited to a one-dimensional Tent chaotic mapping system, a one-dimensional Sine chaotic mapping system, a one-dimensional Sinusoidal chaotic mapping system, a one-dimensional Piecewise chaotic mapping system, and a one-dimensional Cubic chaotic mapping system.

[0050] It should be noted that different wireless devices and terminals use different keys; the key obtained by this invention through a chaotic mapping system increases the difficulty of cracking, effectively preventing log information from being leaked during transmission and improving the security of log information.

[0051] S3. Log information is sent to the terminal by multiple wireless devices at regular intervals. The log information is sent in encrypted form, which consists of the encrypted result of all plaintext data in the log information. The terminal stores the log information received from the multiple wireless devices in a database.

[0052] It should be noted that the AES encryption algorithm encrypts plaintext data into fixed-length ciphertext data, which exhibits strong regularity. This allows attackers to perform statistical analysis attacks based on the regularity between the plaintext and ciphertext, thereby cracking the ciphertext and seriously affecting the security of the device's log information. To ensure the security of log information, this invention proposes an encryption method that can resist statistical analysis attacks, as follows:

[0053] The flowchart for obtaining the encryption result of the plaintext data in step S3 is shown below. Figure 4 This includes steps S301 to S303, specifically:

[0054] S301. Generate a chaotic sequence based on the key agreed upon between the terminal and the wireless device and the one-dimensional chaotic mapping system.

[0055] Specifically, the key is used as the initial condition for the one-dimensional chaotic mapping system, and the one-dimensional chaotic mapping system is iterated. Next time, obtain There are several chaotic values, among which... This indicates the total number of plaintext data entries in the log message. , The preset value; the first of all obtained chaotic values To the A sequence of chaotic values ​​is used as a chaotic sequence, and the length of the resulting chaotic sequence is equal to... .

[0056] in, For integers greater than 30, in this embodiment... Set to 35; in other embodiments, The specific values ​​can be set according to the actual application scenario and requirements.

[0057] In one embodiment, generating a chaotic sequence based on a key and a one-dimensional Logistic chaotic mapping system includes: using the key as an initial condition for the one-dimensional Logistic chaotic mapping system, and iterating through the one-dimensional Logistic chaotic mapping system. Next time, obtain There are several chaotic values, among which... This indicates the total number of plaintext data entries in the log message. , The preset value; the first of all obtained chaotic values To the A sequence of chaotic values ​​is used as a chaotic sequence, and the length of the resulting chaotic sequence is equal to... .

[0058] The one-dimensional Logistic chaotic mapping system satisfies the expression:

[0059] ;

[0060] In the formula, The first obtained by iteratively obtaining a one-dimensional Logistic chaotic mapping system A chaotic value, The first obtained by iteratively obtaining a one-dimensional Logistic chaotic mapping system A chaotic value, The range of values ​​is .

[0061] when hour, , The first obtained by iteratively obtaining a one-dimensional Logistic chaotic mapping system A chaotic value, , This refers to the initial value and parameters in the key.

[0062] In another embodiment, generating a chaotic sequence based on a key and a one-dimensional Singer chaotic mapping system includes: using the key as an initial condition for the one-dimensional Singer chaotic mapping system, and iterating through the one-dimensional Singer chaotic mapping system. Next time, obtain There are several chaotic values, among which... This indicates the total number of plaintext data entries in the log message. , The preset value; the first of all obtained chaotic values To the A sequence of chaotic values ​​is used as a chaotic sequence, and the length of the resulting chaotic sequence is equal to... .

[0063] The one-dimensional Singer chaotic mapping system satisfies the expression:

[0064] ;

[0065] In the formula, The first obtained by iteratively for a one-dimensional Singer chaotic mapping system A chaotic value, The first obtained by iteratively for a one-dimensional Singer chaotic mapping system A chaotic value, The range of values ​​is ; , , and Let be the four coefficients of a one-dimensional Singer chaotic mapping system. All four coefficients are constants, and the coefficients are... ,coefficient ,coefficient ,coefficient .

[0066] when hour, , The first obtained by iteratively for a one-dimensional Singer chaotic mapping system A chaotic value, , This refers to the initial value and parameters in the key.

[0067] S302. By constructing multiple binary trees, obtain all codewords for each character.

[0068] In a binary tree, the nodes at level 1 are the root nodes, and the other levels include leaf nodes or branch nodes. A leaf node is a node that does not have a subtree, and a branch node is a node that has a subtree. Starting from the root node of the binary tree, the left branch is marked with the number 1, and the right branch is marked with the number 0. In other embodiments, the left branch is marked with the number 0, and the right branch is marked with the number 1. It should be noted that constructing a binary tree is a well-known technique, and will not be described in detail here.

[0069] Specifically, construct multiple binary trees, and the constructed binary trees satisfy the following conditions:

[0070] 1. The binary tree contains at least one character, and the node corresponding to each character in the binary tree is a leaf node.

[0071] 2. For any given character, its codewords can be divided into all possible values ​​based on its length. There are 10 categories, and all codewords in each category have the same length. This is a preset value.

[0072] Among them, preset values It can be set according to the actual application scenario and needs, and preset values ​​are available. ,in, The method for determining the value is as follows In this invention Then the preset value .

[0073] The codewords for this character are obtained from all binary trees. Specifically, for any binary tree, determine whether a node corresponding to the character exists in the tree. If a node exists If the character exists in the binary tree, then the codeword refers to the codeword from the root node to the node in the binary tree. The path, which is from the root node of the binary tree to the node... The labels of all branches between them constitute the structure; if no node exists. If the character does not exist in the binary tree, then the character does not have a codeword.

[0074] 3. For any given character, its codeword is different from that of any other character.

[0075] Furthermore, for any given character, all its codewords are used to create a ciphertext table for that character.

[0076] For example, when the preset value At that time, the schematic diagram of the constructed multiple binary trees is as follows: Figures 5 to 9 As shown: For the character "0", all its codewords are 00, 100, 0, 100010, 11. Based on the length, all the codewords of this character can be divided into... There are four categories, where category 1 contains the codeword "0", category 2 contains the codewords "00" and "11", category 3 contains the codeword "100", and category 4 contains the codeword "100010". The lengths corresponding to the categories are 1, 2, 3, and 6 respectively; for the character "1", all its codewords are 10, 000, 10010, 1110, and 1010. Based on the length, all the codewords of this character can be divided into... There are four categories, where category 1 contains the codeword "10", category 2 contains the codeword "000", category 3 contains the codewords "1110" and "1010", and category 4 contains the codeword "10010". The lengths corresponding to the categories are 2, 3, 4, and 5 respectively; for the character "2", all its codewords are 110, 0010, 10001, 100011, and 1011. Based on the length, all the codewords of this character can be divided into... There are four categories, where category 1 contains the codeword "110", category 2 contains the codewords "0010" and "1011", category 3 contains the codeword "10001", and category 4 contains the codeword "100011". The lengths corresponding to the categories are 3, 4, 5, and 6 respectively; for the character "3", all its codewords are 01, 0011, 101, 10000, and 01. Based on the length, all the codewords of this character can be divided into... There are four categories, where category 1 contains the codeword "01", category 2 contains the codeword "101", category 3 contains the codeword "0011", and category 4 contains the codeword "10000". The lengths corresponding to the categories are 2, 3, 4, and 5, respectively.

[0077] S303. Divide all codewords of the same character as the plaintext data into multiple categories according to their length. Based on the chaotic value in the chaotic sequence and the encryption result of the previous plaintext data, select a target category and use any codeword in the target category as the encryption result of the plaintext data.

[0078] Specifically, for the first Given a set of plaintext data, a chaotic sequence is generated based on the key agreed upon between the terminal and the wireless device, and a one-dimensional chaotic mapping system; the sequence is then compared with the first set of plaintext data. Characters that are identical to each other in plaintext data are denoted as characters. ; Based on length, characters All codewords are divided into Categories The preset value; based on the chaotic value in the chaotic sequence and the first... The encryption result of plaintext data, from Select a target category from the available categories, and use any codeword from the target category as the encrypted result of the plaintext data.

[0079] It should be noted that, based on the chaotic value in the chaotic sequence and the encryption result of the previous plaintext data, the present invention selects a target category from multiple categories. When decrypting the ciphertext subsequently, any slight change caused by a decryption error in any ciphertext data will cause a change in the indistinguishability of the decryption result. Therefore, the ciphertext obtained by the encryption method of the present invention has a strong avalanche effect, which can effectively prevent log information from being leaked during transmission and improve the security of log information.

[0080] Among them, all obtained categories are sorted in ascending or descending order of length, and the sorted categories are denoted as the th category. Category to No. category.

[0081] Among them, the first in the log information When encrypting plaintext data, the first plaintext data will be encrypted. The category is used as the target category, where, The first in the chaotic sequence A chaotic value, This is the floor function.

[0082] Among them, for the first in the log information Plaintext data, , This indicates the total number of plaintext data entries in the log message. The category is used as the target category; where, , , , , They are binary numbers The first in Bit, 2nd bit, 3rd bit Bit and the Bits, the total number of bits in this binary number 1 bit , This is a preset value. To represent a decimal number, then binary number The corresponding decimal number.

[0083] Wherein, the binary number The first in Bit equal to the The encryption result of plaintext data The first in Bit, , , This is a preset value. The first in the chaotic sequence A chaotic value, For the first in the log information The encryption result of plaintext data Length, This is the floor function.

[0084] It should be noted that when a wireless device sends log information to a terminal, this invention encrypts all plaintext data in the log information and sends it in ciphertext form, effectively preventing log information leakage during transmission and improving log information security. Specifically, this invention divides all codewords with the same characters as the current plaintext data into multiple categories based on their length. Based on the chaotic value in the chaotic sequence and the encryption result of the previous plaintext data, a target category is selected from these categories. Then, any codeword from the target category is used as the encryption result of the current plaintext data. Therefore, the length of the final encrypted result is not fixed. Compared to the AES encryption method, which encrypts plaintext data into fixed-length ciphertext, the encryption method of this invention has weaker regularity. Therefore, the ciphertext obtained through this invention has strong resistance to statistical analysis attacks, effectively preventing log information leakage during transmission and improving log information security.

[0085] This invention also discloses a security protection system for device log information, including a processor and a memory. The memory stores computer program instructions, and when the computer program instructions are executed by the processor, a security protection method for device log information according to the present invention is implemented.

[0086] The system also includes other components well known to those skilled in the art, such as communication buses and communication interfaces, the settings and functions of which are known in the art and will not be described in detail here.

[0087] In the description of this specification, "multiple" or "several" means at least two, such as two, three or more, unless otherwise expressly and specifically defined.

[0088] While this specification has shown and described numerous embodiments of the invention, it will be apparent to those skilled in the art that such embodiments are provided by way of example only. Many modifications, alterations, and alternatives will occur to those skilled in the art without departing from the spirit and essence of the invention. It should be understood that various alternatives to the embodiments of the invention described herein may be employed in the practice of this invention.

Claims

1. A method for protecting device log information, characterized in that, include: The wireless kit includes a terminal and multiple wireless devices: the multiple wireless devices periodically collect and send log information to the terminal, and the log information is sent in encrypted form. The encrypted text consists of the encrypted result of all plaintext data in the log information. The terminal receives and summarizes the log information of the multiple wireless devices and stores it in the database. The method for obtaining the encryption result of plaintext data is as follows: For the first... From the plaintext data, a chaotic sequence is generated based on the key agreed upon between the terminal and the wireless device and a one-dimensional chaotic mapping system; the sequence is then obtained from the current log information. Plaintext data with identical content are denoted as characters. ; Based on length, characters All codewords are divided into Categories The preset value; based on the chaotic value in the chaotic sequence and the first... The encryption result of plaintext data, from Select a target category from the categories, and use any codeword from the target category as the encryption result of the plaintext data; Among them, characters are obtained by constructing multiple binary trees. All codewords, codewords refer to binary trees root node to character In a binary tree The path of the corresponding node in the binary tree. It refers to characters A binary tree, and characters In a binary tree, all corresponding nodes are leaf nodes; during the construction of multiple binary trees, it is required that the characters can be sorted according to their length. All codewords are divided into There are 10 categories, and all codewords in each category have the same length, and the characters... The codeword of F is different from the codeword of other characters; the same character F corresponds to only one leaf node in the same binary tree G(F); The key is agreed upon by the terminal and the wireless device based on the initial conditions of the one-dimensional chaotic mapping system. The initial conditions of the one-dimensional chaotic mapping system include initial values ​​and parameters. Within the range of values ​​of the initial values ​​and the range of values ​​of the parameters, a combination of initial values ​​and parameters is randomly generated as the key. Based on the key agreed upon by the terminal and the wireless device, and a one-dimensional chaotic mapping system, a chaotic sequence is generated, including: using the key as the initial condition for the one-dimensional chaotic mapping system, and iterating the one-dimensional chaotic mapping system. Next time, obtain There are several chaotic values, among which... This indicates the total number of plaintext data entries in the log message. , This is a preset value. For integers greater than 30; the th value among all obtained chaotic values To the A sequence of chaotic values ​​is used as a chaotic sequence, and the length of the resulting chaotic sequence is equal to... ; from Select a target category from the categories, including: for the first category in the log information. The first plaintext data, will be the first The category is used as the target category, where, The first in the chaotic sequence A chaotic value, It is a rounding function; Regarding the first item in the log information Plaintext data, , This indicates the total number of plaintext data entries in the log message. The category is used as the target category; where, , , , , They are binary numbers The first in Bit, 2nd bit, 3rd bit Bit and the Bits, the total number of bits in this binary number 1 bit , This is a preset value. Represents a decimal number. binary number The corresponding decimal number; binary number The first in Bit equal to the The encryption result of plaintext data The first in Bit, where , , This is a preset value. The first in the chaotic sequence A chaotic value, For the first in the log information The encryption result of plaintext data Length, It is a rounding function; According to the length of the codewords in the category, in ascending or descending order, the obtained Sort the categories according to the number of categories, and then label the sorted categories as the 1st, 2nd, 3rd, 4th, 5th, 6th, 7th, 8th, 9th, 10th, 11th, 12th, 13th, 14th, 15th, 16th, 17th, 18th, 19 ... Category to No. category.

2. The security protection method for device log information according to claim 1, characterized in that, The wireless devices include, but are not limited to, 4G cameras and WiFi cameras; the log information includes, but is not limited to, device startup logs, configuration change logs, connection logs, error and exception logs, performance logs, security logs, data transmission logs, user activity logs, maintenance logs, power management logs, location information logs, network status logs, event logs, system logs, and storage logs; the log information also records the device identifier of the wireless device.

3. The security protection method for device log information according to claim 1, characterized in that, The path is a binary tree. root node to character In a binary tree It consists of the labels of all branches between the corresponding nodes.

4. A security protection system for device log information, characterized in that, include: A processor and a memory, wherein the memory stores computer program instructions that, when executed by the processor, implement a security protection method for device log information according to any one of claims 1-3.

Images