Ship cargo data processing method and system based on multiple encryption
By combining multiple encryption and verification rules, the security risks in QR code data transmission are resolved, ensuring the reliability and trustworthiness of cargo information and improving the security and reliability of the ship cargo inventory system.
Patent Information
- Application Number
- CN202511172614.2
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2025-08-21
- Publication Date
- 2026-01-02
- Estimated Expiration
- 2045-08-21
AI Technical Summary
In existing technologies, there are security risks when QR code data is transmitted between devices, edge cloud servers, and cloud servers. The lack of effective encryption and verification mechanisms affects the reliability and trustworthiness of cargo information.
Multiple encryption methods are used to encrypt the scanned data in multiple layers, and verification is performed based on verification rules related to multiple encryption devices to determine whether the scanned data has been tampered with during transmission.
This improves data security during barcode scanning and transmission, reduces the risk of attacks and tampering, and enhances the reliability and trustworthiness of the overall ship cargo inventory system.
Smart Images

Figure CN120750638B_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present application relates to the technical field of data processing, and in particular to a ship cargo data processing method and system based on multiple encryption. BACKGROUND
[0002] With the rapid development of modern logistics management technology, the management and tracking of cargo information have gradually been digitized and monitored in real time with the help of various advanced equipment. Code scanning devices are widely used in the tracking and recording of ship cargo, and the cargo label is identified by scanning the code to ensure the accurate acquisition of cargo information. However, in the existing technology, there are certain security risks in the transmission and processing of the scanning data, especially in the multi-layer data transmission link, the scanning data may be tampered with between the device, the edge cloud server and the cloud server, which affects the reliability of the cargo information. In addition, due to the lack of effective encryption and verification mechanism, the security of the data in the transmission process cannot be fully guaranteed, which makes malicious attacks and data tampering problems occur from time to time, thereby affecting the reliability and credibility of the ship cargo management. It can be seen that the existing technology has defects and needs to be solved. SUMMARY
[0003] The technical problem to be solved by the present application is to provide a ship cargo data processing method and system based on multiple encryption, which can effectively improve the security of ship cargo data in the scanning operation transmission, reduce the risk of attack and tampering, and enhance the reliability and credibility of the overall ship cargo inventory system.
[0004] To solve the above technical problems, the present application discloses a ship cargo data processing method based on multiple encryption, which comprises:
[0005] Obtaining scanning data obtained by scanning the label code of the ship cargo by the scanning device operated by the operator;
[0006] According to the encryption rule corresponding to the scanning device, the scanning data is encrypted to obtain first encrypted data; the first encrypted data is used to be sent to the edge cloud server by the scanning device;
[0007] In response to the request of the cloud server, the first encrypted data is encrypted based on the encryption rule of the edge cloud server to obtain second encrypted data; the second encrypted data is used to be sent to the cloud server by the edge cloud server;
[0008] verify the second encrypted data based on a verification rule related to the code scanning device, the edge cloud server, or the cloud server to determine a tampering possibility corresponding to the code scanning data; the tampering possibility is used to indicate a possibility that the code scanning data is attacked and tampered when being transmitted between the code scanning device, the edge cloud server, and the cloud server.
[0009] As an optional implementation, in the first aspect of the present application, the code scanning data includes at least one of a name, a category, a quantity, a weight, a volume, a packaging type, a storage requirement, a loading mode, and transportation information of a cargo of a ship.
[0010] As an optional implementation, in the first aspect of the present application, the encrypting the code scanning data according to the encryption rule corresponding to the code scanning device to obtain first encrypted data includes:
[0011] obtaining a device parameter of the code scanning device; the device parameter includes at least one of a device model, device sensing data, device hardware parameters, and device software parameters; the device sensing data includes at least one of a device location, a device temperature, a device humidity, a device speed, a device acceleration, a device height, and a device inclination angle;
[0012] determining an encryption level according to the code scanning data;
[0013] generating a first encryption key according to the device parameter and the encryption level;
[0014] encrypting the code scanning data according to the first encryption key to obtain first encrypted data.
[0015] As an optional implementation, in the first aspect of the present application, the generating the first encryption key according to the device parameter and the encryption level includes:
[0016] determining a first key parameter according to the encryption level based on a preset correspondence between an encryption level and a key parameter; the first key parameter includes at least one of a key length, a key complexity, a key state, and a key random number;
[0017] generating the first encryption key based on a key generation algorithm according to the first key parameter and the device parameter.
[0018] As an optional implementation, in the first aspect of the present application, the encrypting the first encrypted data according to the encryption rule of the edge cloud server to obtain second encrypted data includes:
[0019] obtaining server parameters of the edge cloud server; the server parameters comprise at least one of hardware parameters, system parameters, time parameters, network parameters and working process random parameters;
[0020] generating a second encryption key according to the server parameters and the encryption level;
[0021] encrypting the first encrypted data according to the second encryption key to obtain second encrypted data.
[0022] As an optional implementation, in the first aspect of the present application, the generating a second encryption key according to the server parameters and the encryption level comprises:
[0023] determining a second key parameter according to the encryption level based on a preset correspondence between encryption levels and key parameters; the second key parameter comprises at least one of a key length, a key complexity, a key state and a key random number;
[0024] generating a second encryption key based on a key generation algorithm according to the second key parameter and the server parameters.
[0025] As an optional implementation, in the first aspect of the present application, the determining an encryption level according to the scan code data comprises:
[0026] inputting the scan code data into a trained cargo type recognition model to obtain a cargo type corresponding to the scan code data; the cargo type recognition model is trained by a training data set comprising a plurality of training scan code data and corresponding cargo type labels;
[0027] inputting the scan code data into a trained ship type recognition model to obtain a ship type corresponding to the scan code data; the ship type recognition model is trained by a training data set comprising a plurality of training scan code data and corresponding ship type labels;
[0028] determining an encryption level according to the cargo type and the ship type based on a preset level determination rule.
[0029] As an optional implementation, in the first aspect of the present application, the verifying the second encrypted data based on the verification rule related to the scan code device, the edge cloud server or the cloud server to determine a tampering possibility corresponding to the scan code data comprises:
[0030] obtaining a communication record between the scan code device, the edge cloud server and the cloud server;
[0031] According to the communication record, a first encryption process parameter corresponding to the second encryption data is determined; the first encryption process parameter includes an encryption number and an encryption time;
[0032] The second encryption data is input into a trained encryption process prediction neural network to obtain output second encryption process parameters; the second encryption process parameters include an encryption number and an encryption time; the encryption process prediction neural network is trained by a training data set including a plurality of training encryption data and corresponding encryption process parameter labels;
[0033] The difference between the first encryption process parameters and the second encryption process parameters is calculated to obtain a tampering possibility corresponding to the scanning code data.
[0034] The second aspect of the embodiment of the application discloses a ship cargo data processing system based on multiple encryption, and the system comprises:
[0035] An acquisition module is configured to acquire scanning code data obtained by scanning a label code of a ship cargo by a scanning code device operated by an operator;
[0036] A first encryption module is configured to encrypt the scanning code data according to an encryption rule corresponding to the scanning code device to obtain first encryption data; the first encryption data is used to be sent to an edge cloud server by the scanning code device;
[0037] A second encryption module is configured to encrypt the first encryption data according to an encryption rule of the edge cloud server to obtain second encryption data in response to a request of a cloud server; the second encryption data is used to be sent to the cloud server by the edge cloud server;
[0038] A verification module is configured to verify the second encryption data according to a verification rule related to the scanning code device, the edge cloud server or the cloud server to determine a tampering possibility corresponding to the scanning code data; the tampering possibility is used to indicate a possibility of the scanning code data being attacked and tampered with when being transmitted between the scanning code device, the edge cloud server and the cloud server.
[0039] As an optional implementation, in the second aspect of the application, the scanning code data includes at least one of a name, a category, a quantity, a weight, a volume, a packaging type, a storage requirement, a loading mode and transportation information of the ship cargo.
[0040] As an optional implementation, in the second aspect of the application, the specific manner in which the first encryption module encrypts the scanning code data according to the encryption rule corresponding to the scanning code device to obtain the first encryption data includes:
[0041] obtaining device parameters of the code scanning device; the device parameters include at least one of device model, device sensing data, device hardware parameters and device software parameters; the device sensing data includes at least one of device position, device temperature, device humidity, device speed, device acceleration, device height and device inclination angle;
[0042] determining an encryption level according to the code scanning data;
[0043] generating a first encryption key according to the device parameters and the encryption level;
[0044] encrypting the code scanning data according to the first encryption key to obtain first encrypted data.
[0045] As an optional implementation, in the second aspect of the present application, the specific manner of the first encryption module for generating the first encryption key according to the device parameters and the encryption level includes:
[0046] determining a first key parameter according to the encryption level based on a preset correspondence between encryption levels and key parameters; the first key parameter includes at least one of key length, key complexity, key state and key random number;
[0047] generating the first encryption key based on a key generation algorithm according to the first key parameter and the device parameters.
[0048] As an optional implementation, in the second aspect of the present application, the specific manner of the second encryption module for encrypting the first encrypted data to obtain second encrypted data based on the encryption rules of the edge cloud server includes:
[0049] obtaining server parameters of the edge cloud server; the server parameters include at least one of hardware parameters, system parameters, time parameters, network parameters and working process random parameters;
[0050] generating a second encryption key according to the server parameters and the encryption level;
[0051] encrypting the first encrypted data according to the second encryption key to obtain second encrypted data.
[0052] As an optional implementation, in the second aspect of the present application, the specific manner of the second encryption module for generating the second encryption key according to the server parameters and the encryption level includes:
[0053] determining a second key parameter according to the encryption level based on a preset correspondence between encryption levels and key parameters; the second key parameter includes at least one of key length, key complexity, key state and key random number;
[0054] generating a second encryption key based on a key generation algorithm according to the second key parameter and the server parameter.
[0055] As an optional implementation, in the second aspect of the present application, the specific manner in which the first encryption module determines the encryption level according to the scanned code data comprises:
[0056] inputting the scanned code data into a trained cargo type recognition model to obtain a cargo type corresponding to the scanned code data; the cargo type recognition model is trained by a training data set comprising a plurality of training scanned code data and corresponding cargo type labels;
[0057] inputting the scanned code data into a trained ship type recognition model to obtain a ship type corresponding to the scanned code data; the ship type recognition model is trained by a training data set comprising a plurality of training scanned code data and corresponding ship type labels;
[0058] determining the encryption level according to the cargo type and the ship type based on a preset level determination rule.
[0059] As an optional implementation, in the second aspect of the present application, the specific manner in which the verification module verifies the second encrypted data based on verification rules related to the scanned code device, the edge cloud server or the cloud server to determine the tampering possibility corresponding to the scanned code data comprises:
[0060] obtaining communication records between the scanned code device, the edge cloud server and the cloud server;
[0061] determining first encryption process parameters corresponding to the second encrypted data according to the communication records; the first encryption process parameters comprise encryption times and encryption times;
[0062] inputting the second encrypted data into a trained encryption process prediction neural network to obtain output second encryption process parameters; the second encryption process parameters comprise encryption times and encryption times; the encryption process prediction neural network is trained by a training data set comprising a plurality of training encrypted data and corresponding encryption process parameter labels;
[0063] calculating the difference between the first encryption process parameters and the second encryption process parameters to obtain the tampering possibility corresponding to the scanned code data.
[0064] The third aspect of the present application discloses another ship cargo data processing system based on multiple encryption, which comprises:
[0065] a memory storing executable program code;
[0066] a processor coupled with the memory;
[0067] The processor invokes the executable program code stored in the memory to execute part or all of the steps of the ship cargo data processing method based on multiple encryption disclosed in the first aspect of the application.
[0068] The fourth aspect of the application discloses a computer storage medium storing computer instructions, which are invoked to execute part or all of the steps of the ship cargo data processing method based on multiple encryption disclosed in the first aspect of the application.
[0069] Compared with the prior art, the embodiments of the application have the following beneficial effects:
[0070] The application can perform multi-layer encryption on the scanning code data when it is transmitted between the scanning code equipment, the edge cloud server and the cloud server, and verify the encrypted data based on the verification rules related to multiple encryption devices to determine whether the scanning code data is tampered with in the transmission process, thereby effectively improving the security of the ship cargo data in the scanning code operation transmission, reducing the risk of attack and tampering, and enhancing the reliability and credibility of the overall ship cargo inventory system. BRIEF DESCRIPTION OF DRAWINGS
[0071] In order to more clearly illustrate the technical solutions in the embodiments of the application, the following will briefly introduce the drawings needed to be used in the embodiment description. Obviously, the drawings in the following description are only some embodiments of the application, and other drawings can also be obtained by those skilled in the art without creative labor on the basis of these drawings.
[0072] Figure 1 is a flowchart of a ship cargo data processing method based on multiple encryption disclosed by the embodiments of the application.
[0073] Figure 2 is a structural schematic diagram of a ship cargo data processing system based on multiple encryption disclosed by the embodiments of the application.
[0074] Figure 3 is a structural schematic diagram of another ship cargo data processing system based on multiple encryption disclosed by the embodiments of the application. DETAILED DESCRIPTION
[0075] In the following, the technical solutions in the embodiments of the present application will be described clearly and completely in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative work fall within the scope of the present application.
[0076] The terms "first", "second", and the like in the specification and claims of the present application and the above-described drawings are used to distinguish different objects, rather than to describe a particular order. In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, device, product, or apparatus that includes a series of steps or units is not limited to the listed steps or units, but can optionally include steps or units not listed, or can optionally include other steps or units inherent to the process, method, product, or apparatus.
[0077] Reference herein to "an embodiment" means that a particular feature, structure, or characteristic described in connection with the embodiment can be included in at least one embodiment of the application. The appearance of the phrase in various places in the specification does not necessarily all refer to the same embodiment, nor is it necessarily mutually exclusive of other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein can be combined with other embodiments.
[0078] The present application discloses a kind of based on multiple encryption ship cargo data processing method and system, can be to the multi-layer encryption of scanning code data when transmission between scanning code equipment, edge cloud server and cloud server, and based on the verification rule related to multiple encryption devices to the encrypted data is verified to determine whether scanning code data is tampered in transmission process, to effectively improve the security of ship cargo data in scanning code operation transmission, reduce the risk of attack tampering, enhance the reliability and credibility of overall ship cargo inventory system. The following are described in detail respectively.
[0079] Embodiment one
[0080] Please refer to Figure 1 , Figure 1 It is a flowchart of the ship cargo data processing method based on multiple encryption disclosed in the embodiments of the present application. Among them, Figure 1 The ship cargo data processing method based on multiple encryption described can be applied in data processing system / data processing equipment / data processing server (wherein the server includes local processing server or cloud processing server). As Figure 1 The ship cargo data processing method based on multiple encryption can include the following operations:
[0081] 101. Obtain the scanning data of the label code of the ship cargo by the scanning device operated by the operator.
[0082] Specifically, the operator uses a scanning device (such as a handheld barcode scanner, an RFID reader, or a mobile terminal) to scan the label code on the ship cargo to obtain the corresponding scanning data.
[0083] Optionally, the label code can be a barcode, a two-dimensional code, or other forms of unique identifier of the cargo, containing basic information of the cargo, such as cargo number, type, source port, or destination, etc.
[0084] Specifically, the scanning data is the basis for subsequent processing, which can include metadata (such as operator ID, device identification, or timestamp) at the time of scanning to record the context information of the operation.
[0085] 102. Encrypt the scanning data according to the encryption rule corresponding to the scanning device to obtain first encrypted data.
[0086] Optionally, the first encrypted data is sent to the edge cloud server by the scanning device.
[0087] Optionally, the encryption rule can be a symmetric encryption algorithm (such as AES) or an asymmetric encryption algorithm (such as RSA), which is pre-set by the scanning device or dynamically allocated by the server.
[0088] Optionally, the first encrypted data can be ciphertext encrypted using the AES algorithm or ciphertext encrypted using the RSA algorithm, and the encryption step can specifically be to combine the scanning data with a key generated by the device serial number and then perform an encryption operation.
[0089] 103. In response to the request of the cloud server, encrypt the first encrypted data based on the encryption rule of the edge cloud server to obtain second encrypted data.
[0090] Optionally, the second encrypted data is sent to the cloud server by the edge cloud server.
[0091] Specifically, after receiving the request of the cloud server, the edge cloud server performs secondary encryption on the first encrypted data generated in step 102 to generate the second encrypted data. The encryption rule of the edge cloud server can be different from the encryption rule of the scanning device, for example, using a higher strength encryption algorithm or an additional key layer to meet the security requirements of the cloud server. The secondary encryption forms a layered protection mechanism to ensure that the data is further protected during transmission between the edge cloud and the cloud.
[0092] 104. verifying the second encrypted data based on a verification rule associated with the scanning device, the edge cloud server, or the cloud server to determine a tampering likelihood of the scanning data.
[0093] Optionally, the tampering likelihood is used to indicate a likelihood of the scanning data being tampered by an attack when being transmitted between the scanning device, the edge cloud server, and the cloud server.
[0094] Specifically, the verification rule can involve decrypting the second encrypted data and comparing with expected features of the first encrypted data or the original scanning data, or using a digital signature, a hash check (e.g., SHA-256), or the like to confirm the integrity of the data.
[0095] Optionally, the verification rule can be designed based on specific parameters (e.g., a public key, a pre-shared key, or a device identifier) of the scanning device, the edge cloud server, or the cloud server.
[0096] As can be seen, the above embodiments can encrypt the scanning data in multiple layers when being transmitted between the scanning device, the edge cloud server, and the cloud server, and verify the encrypted data based on verification rules associated with multiple encryption devices to determine whether the scanning data is tampered in the transmission process, thereby effectively improving the security of the ship cargo data in the scanning operation transmission, reducing the risk of being tampered by an attack, and enhancing the reliability and credibility of the overall ship cargo inventory system.
[0097] As an optional embodiment, in the above steps, the scanning data includes at least one of a name, a category, a quantity, a weight, a volume, a packaging type, a storage requirement, a loading method, and transportation information of the ship cargo.
[0098] As can be seen, by the above optional embodiments, the content of the scanning data is limited to comprehensively reflect the relevant features of the cargo data, improve the integrity and accuracy of the cargo data, and provide accurate data support for subsequent encryption and verification of the scanning data, thereby assisting in effectively improving the security of the ship cargo data in the scanning operation transmission, reducing the risk of being tampered by an attack, and enhancing the reliability and credibility of the overall ship cargo inventory system.
[0099] As an optional embodiment, in the above steps, the encryption of the scanning data according to the encryption rule corresponding to the scanning device to obtain the first encrypted data includes:
[0100] obtaining a device parameter of the scanning device;
[0101] determining an encryption level according to the scanning data;
[0102] generating a first encryption key according to the device parameter and the encryption level;
[0103] The code scanning data is encrypted according to the first encryption key to obtain first encrypted data.
[0104] Optionally, the device parameters include at least one of a device model, device sensor data, device hardware parameters, and device software parameters; and the device sensor data includes at least one of a device location, a device temperature, a device humidity, a device speed, a device acceleration, a device height, and a device tilt angle.
[0105] As can be seen, by the above optional embodiments, by combining the device parameters of the code scanning device and the encryption level, the encryption key related to the code scanning device can be dynamically generated, thereby ensuring the security of the code scanning data in the transmission process, preventing the data from being tampered with or leaked during transmission between the code scanning device and the edge cloud server, and assisting in effectively improving the security of the ship cargo data in the code scanning operation transmission, reducing the risk of attack and tampering, and enhancing the reliability and credibility of the overall ship cargo inventory system.
[0106] As an optional embodiment, in the above steps, the first encryption key is generated according to the device parameters and the encryption level, including:
[0107] Based on the preset correspondence between the encryption level and the key parameter, the first key parameter is determined according to the encryption level;
[0108] According to the first key parameter and the device parameter, the first encryption key is generated based on a key generation algorithm.
[0109] Optionally, the first key parameter includes at least one of a key length, a key complexity, a key state, and a key random number.
[0110] Optionally, the encryption level can be a system-defined security level (such as low, medium, and high), or a specific numerical value, used to indicate the required encryption strength.
[0111] Optionally, the preset correspondence between the encryption level and the key parameter can be a mapping table or an algorithm model, which associates the encryption level with specific key attributes, and can be obtained by pre-setting by an operator or by mathematical fitting or model training on a large amount of historical data or experimental data.
[0112] Optionally, the first encryption key can be an AES symmetric key or an RSA public-private key pair.
[0113] Specifically, in the present application, the step of generating a key can be inputting the key length in the key parameter and the related device parameters such as the MAC address into the preset HMAC-SHA256 algorithm API to generate the key, or selecting a specific existing key generation algorithm according to the actual situation by an operator.
[0114] It can be seen that, by the above optional embodiments, the key parameters are dynamically determined based on the encryption level, and the encryption key is generated in combination with the device parameters, which can ensure that the encryption process adapts to different security requirements, while enhancing the complexity and security of the key, and assisting in effectively improving the security of the ship cargo data in the scanning code operation transmission, reducing the risk of being attacked and tampered, and enhancing the reliability and credibility of the overall ship cargo inventory system.
[0115] As an optional embodiment, in the above step, the second encrypted data is obtained by encrypting the first encrypted data based on the encryption rule of the edge cloud server, including:
[0116] Obtaining server parameters of the edge cloud server;
[0117] Generating a second encryption key according to the server parameters and the encryption level;
[0118] Encrypting the first encrypted data according to the second encryption key to obtain the second encrypted data.
[0119] Optionally, the server parameters include at least one of hardware parameters, system parameters, time parameters, network parameters, and working process random parameters, and the server parameters are characteristic data related to the edge cloud server, which can reflect the hardware configuration, system state or running environment. The acquisition method can include calling the API of the server, reading the system log or directly extracting data from the hardware interface.
[0120] It can be seen that, by the above optional embodiments, the encryption key is dynamically generated based on the server parameters, and the first encrypted data is encrypted twice, which can further enhance the security of the scanning code data in the transmission process, while ensuring the encryption strategy adaptability in different server environments, improving the flexibility and attack resistance of data protection, and assisting in effectively improving the security of the ship cargo data in the scanning code operation transmission, reducing the risk of being attacked and tampered, and enhancing the reliability and credibility of the overall ship cargo inventory system.
[0121] As an optional embodiment, in the above step, the second encryption key is generated according to the server parameters and the encryption level, including:
[0122] According to the preset correspondence between the encryption level and the key parameter, the second key parameter is determined according to the encryption level; optionally, the second key parameter includes at least one of key length, key complexity, key state and key random number;
[0123] According to the second key parameter and the server parameters, the second encryption key is generated based on a key generation algorithm.
[0124] It can be seen that, through the above optional embodiments, by adaptively determining the key parameters according to the encryption level and dynamically generating the encryption key in combination with the server parameters, the security and adaptability of the key can be ensured, the strength and attack resistance of data encryption can be improved, the security requirements in different server environments can be matched, and the security of the ship cargo data in the code scanning operation transmission can be effectively improved, the risk of being attacked and tampered is reduced, and the reliability and credibility of the overall ship cargo inventory system are enhanced.
[0125] As an optional embodiment, in the above step, the encryption level is determined according to the code scanning data, including:
[0126] The code scanning data is input into the trained cargo type identification model to obtain the cargo type corresponding to the code scanning data; optionally, the cargo type identification model is trained by a training data set including a plurality of training code scanning data and corresponding cargo type labels;
[0127] The code scanning data is input into the trained ship type identification model to obtain the ship type corresponding to the code scanning data; optionally, the ship type identification model is trained by a training data set including a plurality of training code scanning data and corresponding ship type labels;
[0128] Based on the preset level determination rule, the encryption level is determined according to the cargo type and the ship type.
[0129] Specifically, according to the preset level determination rule, the encryption level suitable for subsequent encryption operation is derived in combination with the cargo type and the ship type, wherein the level determination rule can be a logical mapping table or a conditional judgment mechanism, which associates the cargo type (such as high-value cargo) and the ship type (such as long-distance transport ship) with the security requirements. Specifically, the encryption level is usually divided into multiple levels (such as low, medium and high) or a specific numerical value, reflecting the strength requirement of data protection, and used to guide the selection of key generation or encryption algorithm.
[0130] Optionally, the cargo type identification model is a machine learning model that can extract features and classify cargo types (such as electronic products, food or raw materials) according to input data, and the output result is a specific category of cargo type for subsequent processing or decision-making. Optionally, the cargo type identification model can be a convolutional neural network model or a random forest model.
[0131] Optionally, the ship type identification model is a machine learning model that can infer the transport ship type (such as cargo ship, container ship or oil tanker) of the cargo according to the features in the code scanning data. Specifically, the code scanning data may indirectly contain information related to the ship (such as transport batch or port code), and the model classifies through these information. Optionally, the ship type identification model can be a support vector machine model or a deep learning model.
[0132] It can be seen that through the above optional embodiments, by identifying the cargo type and the ship type based on the scanning code data respectively, and combining the preset level determination rule to adaptively determine the encryption level, the data encryption strength can be flexibly adjusted according to the safety requirements of different cargos and ships, the security and tamper-proofing capability of data transmission are improved, and at the same time, unnecessary high-strength encryption is avoided to cause waste of computing and communication resources, thereby optimizing the security and efficiency of the encryption strategy, assisting to effectively improve the security of the ship cargo data in the scanning operation transmission, reducing the risk of being attacked and tampered, and enhancing the reliability and credibility of the overall ship cargo inventory system.
[0133] As an optional embodiment, in the above step, the second encrypted data is verified based on the verification rule related to the scanning device, the edge cloud server or the cloud server to determine the tampering possibility corresponding to the scanning code data, comprising:
[0134] Obtaining the communication record between the scanning device, the edge cloud server and the cloud server;
[0135] According to the communication record, the first encryption process parameter corresponding to the second encrypted data is determined; optionally, the first encryption process parameter includes the encryption times and the encryption time;
[0136] The second encrypted data is input into the trained encryption process prediction neural network to obtain the output second encryption process parameter; optionally, the second encryption process parameter includes the encryption times and the encryption time; the encryption process prediction neural network is trained by a training data set including a plurality of training encrypted data and corresponding encryption process parameter labels;
[0137] The difference degree of the first encryption process parameter and the second encryption process parameter is calculated to obtain the tampering possibility corresponding to the scanning code data.
[0138] Optionally, the communication record generated by the scanning device, the edge cloud server and the cloud server in the data transmission process is obtained, wherein the communication record includes the data interaction log, the timestamp or the transmission state between the devices, which is used for subsequent analysis of the encryption process.
[0139] Optionally, the first encryption process parameter is obtained by analyzing the encryption event in the communication record, and the determination step can be specifically obtained by counting the execution times and the encryption time point of the encryption operation in the communication record.
[0140] Optionally, the difference degree parameter can be obtained by calculating the vector distance or the same data relationship such as the data ratio between the first encryption process parameter and the second encryption process parameter.
[0141] It can be seen that, through the above optional embodiments, the first encryption process parameter is extracted based on the communication record, and the second encryption process parameter is calculated in combination with the trained encryption process prediction neural network, and the tampering possibility is evaluated by comparing the difference between the two, which can effectively detect whether there is abnormal encryption behavior or potential tampering risk in the transmission process of the code scanning data, improve the data security and transmission credibility, reduce the calculation overhead that may be caused by the traditional encryption verification method, and improve the real-time performance and reliability of the system.
[0142] Embodiment two
[0143] Please refer to Figure 2 , Figure 2 is a structural schematic diagram of a ship cargo data processing system based on multiple encryption disclosed by an embodiment of the application. Among them, Figure 2 The ship cargo data processing system based on multiple encryption described can be applied in a data processing system / data processing device / data processing server (wherein the server includes a local processing server or a cloud processing server). As Figure 2 indicated, the ship cargo data processing system based on multiple encryption can include:
[0144] The acquisition module 201 is configured to acquire scanning data obtained by the operator through the scanning code device for scanning the label code of the ship cargo.
[0145] The first encryption module 202 is configured to encrypt the scanning data according to the encryption rule corresponding to the scanning code device to obtain first encrypted data.
[0146] Optionally, the first encrypted data is used for being sent to the edge cloud server by the scanning code device.
[0147] The second encryption module 203 is configured to encrypt the first encrypted data based on the encryption rule of the edge cloud server to obtain second encrypted data in response to the request of the cloud server.
[0148] Optionally, the second encrypted data is used for being sent to the cloud server by the edge cloud server.
[0149] The verification module 204 is configured to verify the second encrypted data based on the verification rule related to the scanning code device, the edge cloud server or the cloud server, to determine the tampering possibility corresponding to the scanning data.
[0150] Optionally, the tampering possibility is used to indicate the possibility of being attacked and tampered when the scanning data is transmitted between the scanning code device, the edge cloud server and the cloud server.
[0151] It can be seen that the above embodiments of the application can perform multi-layer encryption on the scanning code data when the scanning code data is transmitted between the scanning code device, the edge cloud server and the cloud server, and verify the encrypted data based on the verification rules related to the plurality of encryption devices to determine whether the scanning code data is tampered with in the transmission process, thereby effectively improving the security of the ship cargo data in the scanning code operation transmission, reducing the risk of being attacked and tampered with, and enhancing the reliability and credibility of the overall ship cargo inventory system.
[0152] As an optional embodiment, the scanning code data includes at least one of the name, category, quantity, weight, volume, packaging type, storage requirement, loading method and transportation information of the ship cargo.
[0153] It can be seen that through the above optional embodiments, the content of the scanning code data is limited to comprehensively reflect the relevant characteristics of the cargo data, improve the integrity and accuracy of the cargo data, and provide accurate data support for subsequent scanning code data encryption and verification, thereby assisting in effectively improving the security of the ship cargo data in the scanning code operation transmission, reducing the risk of being attacked and tampered with, and enhancing the reliability and credibility of the overall ship cargo inventory system.
[0154] As an optional embodiment, the specific manner in which the first encryption module encrypts the scanning code data according to the encryption rule corresponding to the scanning code device to obtain the first encrypted data includes:
[0155] Obtaining the device parameters of the scanning code device; optionally, the device parameters include at least one of the device model, device sensing data, device hardware parameters and device software parameters; the device sensing data includes at least one of the device position, device temperature, device humidity, device speed, device acceleration, device height and device inclination angle;
[0156] Determining the encryption level according to the scanning code data;
[0157] Generating the first encryption key according to the device parameters and the encryption level;
[0158] Encrypting the scanning code data according to the first encryption key to obtain the first encrypted data.
[0159] It can be seen that through the above optional embodiments, by combining the device parameters of the scanning code device and the encryption level, an encryption key related to the scanning code device can be dynamically generated, thereby ensuring the security of the scanning code data in the transmission process, preventing the data from being tampered with or leaked when transmitted between the scanning code device and the edge cloud server, and assisting in effectively improving the security of the ship cargo data in the scanning code operation transmission, reducing the risk of being attacked and tampered with, and enhancing the reliability and credibility of the overall ship cargo inventory system.
[0160] As an optional embodiment, the first encryption module generates the first encryption key according to the device parameters and the encryption level in the following specific manner, which comprises:
[0161] According to the preset correspondence between the encryption level and the key parameter, the first key parameter is determined according to the encryption level; optionally, the first key parameter comprises at least one of the key length, the key complexity, the key state and the key random number;
[0162] According to the first key parameter and the device parameter, the first encryption key is generated based on the key generation algorithm.
[0163] It can be seen that, through the above optional embodiment, the key parameter is dynamically determined based on the encryption level, and the encryption key is generated in combination with the device parameter, which can ensure that the encryption process adapts to different security requirements, enhances the complexity and security of the key, and assists in effectively improving the security of the ship cargo data in the scanning code operation transmission, reducing the risk of being attacked and tampered, and enhancing the reliability and credibility of the overall ship cargo inventory system.
[0164] As an optional embodiment, the second encryption module encrypts the first encrypted data based on the encryption rule of the edge cloud server to obtain the second encrypted data in the following specific manner, which comprises:
[0165] The server parameter of the edge cloud server is obtained; optionally, the server parameter comprises at least one of the hardware parameter, the system parameter, the time parameter, the network parameter and the working process random parameter;
[0166] According to the server parameter and the encryption level, the second encryption key is generated;
[0167] The first encrypted data is encrypted according to the second encryption key to obtain the second encrypted data.
[0168] It can be seen that, through the above optional embodiment, the encryption key is dynamically generated based on the server parameter, and the first encrypted data is encrypted twice, which can further enhance the security of the scanning code data in the transmission process, ensure the encryption strategy adaptability in different server environments, improve the flexibility and anti-attack ability of data protection, and assist in effectively improving the security of the ship cargo data in the scanning code operation transmission, reducing the risk of being attacked and tampered, and enhancing the reliability and credibility of the overall ship cargo inventory system.
[0169] As an optional embodiment, the second encryption module generates the second encryption key according to the server parameter and the encryption level in the following specific manner, which comprises:
[0170] According to the preset correspondence between the encryption level and the key parameter, the second key parameter is determined according to the encryption level; optionally, the second key parameter includes at least one of a key length, a key complexity, a key state, and a key random number;
[0171] According to the second key parameter and the server parameter, a second encryption key is generated based on a key generation algorithm.
[0172] It can be seen that, through the above optional embodiments, by adaptively determining the key parameter according to the encryption level and dynamically generating the encryption key in combination with the server parameter, the security and adaptability of the key can be ensured, the strength and attack resistance of data encryption can be improved, the security requirements in different server environments can be matched, and the security of the ship cargo data in the scanning operation transmission can be effectively improved, the risk of being attacked and tampered with can be reduced, and the reliability and credibility of the overall ship cargo inventory system can be enhanced.
[0173] As an optional embodiment, the specific manner in which the first encryption module determines the encryption level according to the scanning code data includes:
[0174] The scanning code data is input into the trained cargo type recognition model to obtain the cargo type corresponding to the scanning code data; optionally, the cargo type recognition model is trained by a training data set including a plurality of training scanning code data and corresponding cargo type labels;
[0175] The scanning code data is input into the trained ship type recognition model to obtain the ship type corresponding to the scanning code data; optionally, the ship type recognition model is trained by a training data set including a plurality of training scanning code data and corresponding ship type labels;
[0176] According to the cargo type and the ship type, the encryption level is determined based on a preset level determination rule.
[0177] It can be seen that, through the above optional embodiments, by respectively identifying the cargo type and the ship type based on the scanning code data and adaptively determining the encryption level in combination with the preset level determination rule, the data encryption strength can be flexibly adjusted according to the security requirements of different cargos and ships, the security and tamper-proofing capability of data transmission can be improved, unnecessary waste of computing and communication resources caused by high-strength encryption can be avoided, and thus the security and efficiency of the encryption strategy can be optimized, the security of the ship cargo data in the scanning operation transmission can be effectively improved, the risk of being attacked and tampered with can be reduced, and the reliability and credibility of the overall ship cargo inventory system can be enhanced.
[0178] As an optional embodiment, the specific manner in which the verification module verifies the second encrypted data based on the verification rules related to the scanning code device, the edge cloud server, or the cloud server to determine the tampering possibility corresponding to the scanning code data includes:
[0179] Obtaining a communication record between the code scanning device, the edge cloud server and the cloud server;
[0180] According to the communication record, the first encryption process parameter corresponding to the second encryption data is determined; optionally, the first encryption process parameter includes the encryption times and the encryption time;
[0181] The second encryption data is input into the trained encryption process prediction neural network to obtain the output second encryption process parameter; optionally, the second encryption process parameter includes the encryption times and the encryption time; the encryption process prediction neural network is trained by a training data set including a plurality of training encryption data and corresponding encryption process parameter labels;
[0182] The difference between the first encryption process parameter and the second encryption process parameter is calculated to obtain the tampering possibility of the code scanning data.
[0183] As can be seen, through the above optional embodiments, the first encryption process parameter is extracted based on the communication record, and the second encryption process parameter is calculated in combination with the trained encryption process prediction neural network, and the tampering possibility is evaluated by comparing the difference between the two, which can effectively detect whether there is an abnormal encryption behavior or a potential tampering risk in the transmission process of the code scanning data, improve the data security and transmission credibility, and at the same time reduce the calculation overhead that may be caused by the traditional encryption verification method, improve the real-time performance and reliability of the system.
[0184] Embodiment three
[0185] Please refer to Figure 3 , Figure 3 The application discloses a ship cargo data processing system based on multiple encryption. Figure 3 The ship cargo data processing system based on multiple encryption is applied to a data processing system / data processing device / data processing server (wherein the server includes a local processing server or a cloud processing server). As shown in Figure 3 The ship cargo data processing system based on multiple encryption can include:
[0186] a memory 301 storing executable program codes;
[0187] a processor 302 coupled with the memory 301;
[0188] The processor 302 calls the executable program codes stored in the memory 301 to execute the steps of the ship cargo data processing method based on multiple encryption described in embodiment one.
[0189] Embodiment four
[0190] The embodiment of the present application discloses a computer readable storage medium storing a computer program for electronic data exchange, wherein the computer program causes a computer to execute the steps of the ship cargo data processing method based on multiple encryption described in embodiment one.
[0191] Embodiment five
[0192] The embodiment of the present application discloses a computer program product comprising a non-transitory computer readable storage medium storing a computer program, and the computer program is operable to cause a computer to execute the steps of the ship cargo data processing method based on multiple encryption described in embodiment one.
[0193] The above describes specific embodiments of the present application, other embodiments are within the scope of the appended claims. In some cases, the acts or steps recited in the claims can be performed in a different order than those described in the embodiments and still achieve desirable results. In addition, the processes depicted in the figures do not necessarily require the particular order shown or sequential order in order to achieve the desired results. In certain implementations, multitasking and parallel processing can be advantageous.
[0194] The systems, apparatuses, modules or units illustrated by the above embodiments can be specifically implemented by a computer chip or entity, or by a product with certain functions. A typical implementation device is a computer. Specifically, the computer may, for example, be a personal computer, a laptop computer, a cellular phone, a camera phone, a smartphone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.
[0195] For the convenience of description, the above apparatus is described as various units respectively by functions when described. Of course, the functions of each unit can be implemented in the same or multiple software and / or hardware when implementing the present specification.
[0196] Those skilled in the art will understand that the embodiments of the present specification can be provided as a method, a system, or a computer program product. Therefore, the embodiments of the present specification can take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Moreover, the embodiments of the present specification can take the form of a computer program product implemented on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.
[0197] The specification is presented with reference to flow diagrams and / or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the specification. It will be understood that each block of the flow diagrams and / or block diagrams, and combinations of blocks in the flow diagrams and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processing element or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flow diagrams and / or block diagrams block or blocks. Figure 1 The flow diagrams and / or block diagrams in the specification can present a method, apparatus or computer program product according to embodiments of the specification. Although the flow diagrams and / or block diagrams can present a method, apparatus or computer program product according to embodiments of the specification, it can be understood that each block in the flow diagrams and / or block diagrams and combinations of blocks in the flow diagrams and / or block diagrams can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processing element or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flow diagrams and / or block diagrams block or blocks. Figure 1 The flow diagrams and / or block diagrams in the specification can present a method, apparatus or computer program product according to embodiments of the specification. Although the flow diagrams and / or block diagrams can present a method, apparatus or computer program product according to embodiments of the specification, it can be understood that each block in the flow diagrams and / or block diagrams and combinations of blocks in the flow diagrams and / or block diagrams can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processing element or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flow diagrams and / or block diagrams block or blocks.
[0198] These computer program instructions can also be loaded into a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flow diagrams and / or block diagrams block or blocks. Figure 1 The flow diagrams and / or block diagrams in the specification can present a method, apparatus or computer program product according to embodiments of the specification. Although the flow diagrams and / or block diagrams can present a method, apparatus or computer program product according to embodiments of the specification, it can be understood that each block in the flow diagrams and / or block diagrams and combinations of blocks in the flow diagrams and / or block diagrams can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processing element or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flow diagrams and / or block diagrams block or blocks. Figure 1 The flow diagrams and / or block diagrams in the specification can present a method, apparatus or computer program product according to embodiments of the specification. Although the flow diagrams and / or block diagrams can present a method, apparatus or computer program product according to embodiments of the specification, it can be understood that each block in the flow diagrams and / or block diagrams and combinations of blocks in the flow diagrams and / or block diagrams can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processing element or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flow diagrams and / or block diagrams block or blocks.
[0199] These computer program instructions can also be loaded into a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flow diagrams and / or block diagrams block or blocks. Figure 1 The flow diagrams and / or block diagrams in the specification can present a method, apparatus or computer program product according to embodiments of the specification. Although the flow diagrams and / or block diagrams can present a method, apparatus or computer program product according to embodiments of the specification, it can be understood that each block in the flow diagrams and / or block diagrams and combinations of blocks in the flow diagrams and / or block diagrams can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processing element or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flow diagrams and / or block diagrams block or blocks. Figure 1 The flow diagrams and / or block diagrams in the specification can present a method, apparatus or computer program product according to embodiments of the specification. Although the flow diagrams and / or block diagrams can present a method, apparatus or computer program product according to embodiments of the specification, it can be understood that each block in the flow diagrams and / or block diagrams and combinations of blocks in the flow diagrams and / or block diagrams can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processing element or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flow diagrams and / or block diagrams block or blocks.
[0200] In a typical configuration, a computing device includes one or more processors (CPUs), input / output interfaces, network interfaces, and memory.
[0201] The memory can include non-persistent memory and / or volatile memory, such as random access memory (RAM) for example. Mass storage can include, in examples, RAM, flash memory, or a read only memory (ROM), and can be used to store information and instructions for use by processors. The memory is an example of computer-readable media.
[0202] Computer-readable media includes permanent and non-permanent, movable and non-movable media that can be implemented by any method or technology to store information. The information can be computer-readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassette, magnetic disk storage or other magnetic storage devices, or any other non-transmission medium that can be used to store information accessible by a computing device. According to the definition herein, computer-readable media does not include transitory media such as modulated data signals and carriers.
[0203] It should also be noted that the terms "comprising", "including", or any other variant thereof are intended to cover non-exclusive inclusions, so that processes, methods, articles or devices that include a series of elements not only include those elements, but also include other elements not explicitly listed, or inherent to such processes, methods, articles or devices. Without more limitations, the element defined by the statement "including a" does not exclude the presence of other identical elements in the process, method, article or device including the element.
[0204] The specification can be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. The specification can also be practiced in a distributed computing environment, in which tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media, including storage devices.
[0205] Each embodiment in the specification is described in a progressive manner, and the same or similar parts between each embodiment can be referred to each other. Each embodiment focuses on the difference from other embodiments. In particular, for system embodiments, since they are basically similar to method embodiments, the description is relatively simple, and the relevant parts can be referred to the part of the method embodiment.
[0206] Finally, it should be noted that: the application embodiment discloses a kind of ship cargo data processing method and system based on multiple encryption, only for the preferred embodiment of the application, only for describing the technical solutions of the application, not for its limitation;Although the application is described in detail with reference to the foregoing embodiments, those skilled in the art should understand;It can still modify the technical solutions recorded in the foregoing embodiments, or make equivalent replacement to part of the technical features;And these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the application.
Claims
1. A method for processing ship cargo data based on multiple encryption, characterized in that, The method includes: Acquire the barcode scanning data obtained by operators scanning the barcode labels of cargo on ships using barcode scanning devices; The scanned data is encrypted according to the encryption rules corresponding to the scanning device to obtain first encrypted data; the first encrypted data is used to be sent by the scanning device to the edge cloud server. In response to a request from the cloud server, the first encrypted data is encrypted based on the encryption rules of the edge cloud server to obtain second encrypted data; the second encrypted data is used to be sent from the edge cloud server to the cloud server. Based on the verification rules associated with the scanning device, the edge cloud server, or the cloud server, the second encrypted data is verified to determine the tampering probability corresponding to the scanned data; the tampering probability is used to indicate the possibility that the scanned data may be attacked and tampered with during transmission between the scanning device, the edge cloud server, and the cloud server.
2. The method for processing ship cargo data based on multiple encryption according to claim 1, characterized in that, The scanned data includes at least one of the following: name, category, quantity, weight, volume, packaging type, storage requirements, loading method, and transportation information of the vessel's cargo.
3. The method for processing ship cargo data based on multiple encryption according to claim 1, characterized in that, The step of encrypting the scanned data according to the encryption rules corresponding to the scanning device to obtain the first encrypted data includes: Obtain the device parameters of the scanning device; the device parameters include at least one of device model, device sensor data, device hardware parameters and device software parameters; the device sensor data includes at least one of device position, device temperature, device humidity, device speed, device acceleration, device height and device tilt angle; The encryption level is determined based on the scanned data; Generate a first encryption key based on the device parameters and the encryption level; The scanned data is encrypted using the first encryption key to obtain the first encrypted data.
4. The method for processing ship cargo data based on multiple encryption according to claim 3, characterized in that, The step of generating a first encryption key based on the device parameters and the encryption level includes: Based on a preset correspondence between encryption levels and key parameters, a first key parameter is determined according to the encryption level; the first key parameter includes at least one of key length, key complexity, key state, and key random number. Based on the first key parameters and the device parameters, a first encryption key is generated using a key generation algorithm.
5. The method for processing ship cargo data based on multiple encryption according to claim 3, characterized in that, The encryption of the first encrypted data based on the encryption rules of the edge cloud server to obtain the second encrypted data includes: Obtain the server parameters of the edge cloud server; the server parameters include at least one of hardware parameters, system parameters, time parameters, network parameters, and random parameters during operation; A second encryption key is generated based on the server parameters and the encryption level; The first encrypted data is encrypted using the second encryption key to obtain the second encrypted data.
6. The method for processing ship cargo data based on multiple encryption according to claim 5, characterized in that, The step of generating a second encryption key based on the server parameters and the encryption level includes: Based on a preset correspondence between encryption levels and key parameters, a second key parameter is determined according to the encryption level; the second key parameter includes at least one of key length, key complexity, key state, and key random number. Based on the second key parameters and the server parameters, a second encryption key is generated using a key generation algorithm.
7. The method for processing ship cargo data based on multiple encryption according to claim 3, characterized in that, The step of determining the encryption level based on the scanned data includes: The scanned data is input into a trained goods type recognition model to obtain the goods type corresponding to the scanned data; the goods type recognition model is trained using a training dataset that includes multiple training scanned data and corresponding goods type labels. The scanned data is input into a trained vessel type recognition model to obtain the vessel type corresponding to the scanned data; the vessel type recognition model is trained using a training dataset that includes multiple training scanned data and corresponding vessel type labels. Based on preset level determination rules, the encryption level is determined according to the type of cargo and the type of vessel.
8. The method for processing ship cargo data based on multiple encryption according to claim 1, characterized in that, The verification of the second encrypted data based on verification rules related to the scanning device, the edge cloud server, or the cloud server to determine the likelihood of tampering with the scanned data includes: Obtain the communication records between the scanning device, the edge cloud server, and the cloud server; Based on the communication records, the first encryption process parameters corresponding to the second encrypted data are determined; the first encryption process parameters include the number of encryption attempts and the encryption time. The second encrypted data is input into a trained encryption process prediction neural network to obtain the output second encryption process parameters; the second encryption process parameters include the number of encryptions and the encryption time; the encryption process prediction neural network is trained using a training dataset that includes multiple training encrypted data and corresponding encryption process parameter annotations; The difference between the first encryption process parameters and the second encryption process parameters is calculated to obtain the tampering probability corresponding to the scanned data.
9. A ship cargo data processing system based on multiple encryption, characterized in that, The system includes: The acquisition module is used to acquire the scan data obtained by the operator through the scanning device to scan the label code of the cargo on the ship; The first encryption module is used to encrypt the scanned data according to the encryption rules corresponding to the scanning device to obtain first encrypted data; the first encrypted data is used to be sent by the scanning device to the edge cloud server. The second encryption module is used to respond to a request from the cloud server and encrypt the first encrypted data based on the encryption rules of the edge cloud server to obtain second encrypted data; the second encrypted data is used to be sent from the edge cloud server to the cloud server. The verification module is used to verify the second encrypted data based on verification rules related to the scanning device, the edge cloud server, or the cloud server, so as to determine the tampering probability corresponding to the scanned data; the tampering probability is used to indicate the possibility that the scanned data may be attacked and tampered with during transmission between the scanning device, the edge cloud server, and the cloud server.
10. A ship cargo data processing system based on multiple encryption, characterized in that, The system includes: Memory containing executable program code; A processor coupled to the memory; The processor calls the executable program code stored in the memory to execute the ship cargo data processing method based on multiple encryption as described in any one of claims 1-8.
Citation Information
Patent Citations
Offline verification system, code scanning equipment and server
CN108737394A
Encryption Device and Method for Ship-Shore Data Communication Based on SM2 Encryption Algorithm
CN114938272A
