A big data network security data transmission method

Abstract

The present application relates to the field of data encryption transmission, and more particularly to a big data network security data transmission method, the present application sets up a number of disguised receiving ends and a third party supervision unit for supervision and verification, and sets up a number of encryption algorithms and corresponding decryption algorithms associated with data volume interval, order sequence, time interval and number sequence, selects an encryption algorithm based on the data volume of the to-be-sent plaintext to encrypt the plaintext to obtain encrypted ciphertext, splits the encrypted ciphertext into a number of ciphertext segments based on the number sequence associated with the encryption algorithm, sends the ciphertext segments to the disguised receiving end after encryption by a public key according to the order sequence and the time interval, selects a decryption algorithm associated with the matched data volume interval, calls the ciphertext segments based on the order sequence and the time interval associated with the decryption algorithm, obtains the encrypted ciphertext after decryption and combination by a private key, and obtains the plaintext after decryption of the encrypted ciphertext by the decryption algorithm, thereby improving the security of data transmission in the network.

Description

Technical Field

[0001] This invention relates to the field of encrypted data transmission, and in particular to a method for secure data transmission in big data networks. Background Technology

[0002] Network security data transmission methods refer to various security measures and technologies adopted in big data environments to ensure the confidentiality, integrity, and availability of data during transmission, in order to prevent security threats such as unauthorized access, data leakage, data tampering, and denial of service, and thus protect the security of big data.

[0003] Chinese Patent Publication No. CN115695019A discloses the following: This invention relates to the field of encrypted data transmission, specifically a method for transmitting big data network security data. The method involves collecting and standardizing log datasets of attacked websites to obtain a standardized dataset; extracting log data information features from each data entry in the dataset; grouping the dataset according to the attack target to obtain data groups; assigning weights to the data in each data group based on the data's timestamp, attack source, and attack method to obtain voting weights for the corresponding information features; weighting the data in each data group using these voting weights to obtain weighted data information, thus obtaining a weighted data information set; and layering all data groups according to the weighted data information set, encrypting each layer using different encryption methods. This invention's solution can filter and classify data based on its features, applying different encryption methods to the filtered and classified logs, thereby improving the reliability of transmission.

[0004] However, the following problems still exist in the existing technology:

[0005] In existing technologies, the possibility of a fake sender or fake receiver accessing data during network data intrusion is not considered. Furthermore, traditional plaintext encryption algorithms are simplistic and lack high security. Summary of the Invention

[0006] To address the above problems, this invention provides a method for network security data transmission of big data, comprising:

[0007] Step S1: Set up several fake receivers between the data sending end and the data receiving end, and set up a third-party monitoring unit connected to each fake receiver to detect the data transmission status in each fake receiver, perform monitoring verification based on the transmission status, and stop the fake receiver from receiving or sending data when the monitoring verification does not meet the predetermined standard.

[0008] Step S2: Set up several encryption algorithms and corresponding decryption algorithms, and establish the association between each encryption algorithm and decryption algorithm and the data volume range, sequential sequence, time interval, and quantity sequence.

[0009] The sequential sequence, time interval, and quantity sequence associated with each of the encryption algorithms are different.

[0010] Step S3: Obtain the amount of plaintext to be sent by the data sender, match the amount of plaintext with each of the data amount intervals, select the encryption algorithm associated with the matched data amount interval to encrypt the plaintext, obtain the encrypted ciphertext, obtain the quantity sequence associated with the encryption algorithm, split the encrypted ciphertext into several ciphertext segments based on the quantity sequence, encrypt each of the ciphertext segments with a public key and send them one by one to the corresponding fake receiver in the order sequence, and the sending interval is the same as the time interval;

[0011] Step S4: The data receiving end matches the data volume with each of the data volume intervals, selects the decryption algorithm associated with the matched data volume interval, obtains the sequence and time interval associated with the decryption algorithm, and the data receiving end calls the ciphertext segment encrypted with the public key from the corresponding fake receiving end one by one based on the sequence, with the call interval being the same as the time interval. The called ciphertext segment is decrypted with the private key and combined to obtain the encrypted ciphertext. The encrypted ciphertext is decrypted by the decryption algorithm to obtain the plaintext.

[0012] The regulatory verification includes both reception verification and invocation verification.

[0013] Receive verification includes verifying the order, time interval, and number of characters in the received ciphertext segments by each spoofed receiver;

[0014] The call verification includes verifying the order and time interval of calls to each fake receiver.

[0015] Furthermore, in step S2, the sequence is a sequence composed of the corresponding serial numbers of several fake receivers, and the quantity sequence is a sequence composed of several numerical values.

[0016] Further, in step S3 or step S4, the data volume is matched with each of the data volume intervals, wherein,

[0017] If the preset data volume matching condition is met, then the data volume is determined to match the data volume range;

[0018] The preset data volume matching condition is that the data volume is within the data volume range.

[0019] Further, in step S3, the encrypted ciphertext is split into several ciphertext segments based on the quantity sequence, including:

[0020] Starting from the beginning of the encrypted ciphertext, several character extractions are performed. The number of characters extracted in the i-th character extraction is the same as the i-th value in the number sequence. The i-th character extraction yields the i-th density segment, where i is an integer greater than 0.

[0021] Further, in step S3, each of the ciphertext segments is encrypted using a public key and then sent one by one to the corresponding fake receiving end in the specified order.

[0022] Starting from the beginning, call the sequence numbers in the sequential sequence one by one, and send the i-th ciphertext segment to the spoofed receiver corresponding to the i-th sequence number in the sequential sequence.

[0023] Further, in step S4, the data receiving end retrieves the ciphertext segments encrypted with the public key from the corresponding spoofed receiving end one by one based on the sequential sequence, including:

[0024] The sequence numbers in the sequential sequence are called one by one from the beginning, and the ciphertext segment corresponding to the tampered receiver of the ith sequence number is called.

[0025] Further, in step S1, the order, time interval, and number of characters in the received ciphertext segment are verified for each fake receiver.

[0026] Verify whether the actual sequence of ciphertext segments received by each spoofed receiver satisfies the same condition as the sequence of ciphertext segments, verify whether the reception interval of ciphertext segments received by the spoofed receiver satisfies the same condition as the time interval, and verify whether the actual quantity sequence generated based on the number of characters in each ciphertext segment satisfies the same condition as the quantity sequence.

[0027] Furthermore, in step S1, the order and time interval of the calls to each fake receiver are verified, wherein...

[0028] Verify whether the actual call sequence of the data receiving end to each fake receiving end meets the same condition as the sequential sequence, and verify whether the call interval of the data receiving end meets the same condition as the time interval.

[0029] Furthermore, in step S1, the predetermined criteria are that the order, time interval, and number of characters of the received ciphertext segment of each fake receiver meet the conditions when performing the reception verification, and that the order and time interval of each fake receiver being called meet the conditions when performing the call verification.

[0030] Furthermore, step S3 also includes sending the data volume to a third-party monitoring unit and a data receiving end.

[0031] Compared with existing technologies, this invention improves the security of data transmission in the network by setting up several disguised receiving terminals and a third-party monitoring unit for supervision and verification, and setting up several encryption algorithms and corresponding decryption algorithms associated with data volume ranges, sequence sequences, time intervals, and quantity sequences. Based on the data volume of the plaintext to be sent, an encryption algorithm is selected to encrypt the plaintext to obtain encrypted ciphertext. Based on the quantity sequence associated with the encryption algorithm, the encrypted ciphertext is split into several ciphertext segments. Each ciphertext segment is encrypted with a public key and sent to the disguised receiving terminal according to the sequence sequence and time interval. A decryption algorithm associated with the matched data volume range is selected, and the ciphertext segments are invoked based on the sequence sequence and time interval associated with the decryption algorithm. The ciphertext is then decrypted with a private key and combined to obtain encrypted ciphertext. Finally, the encrypted ciphertext is decrypted using a decryption algorithm to obtain the plaintext, thus improving the security of data transmission in the network.

[0032] In particular, this invention sets up a third-party monitoring unit to monitor and verify the data transmission status of each disguised receiver. In practice, setting up a third-party monitoring unit to monitor and verify the data transmission status of the disguised receiver, and stopping the disguised receiver from receiving or sending data when the monitoring and verification do not meet the predetermined standards, can prevent malicious attacks or data tampering and other problems from occurring, thereby improving the security of data transmission in the network.

[0033] In particular, in this invention, the amount of plaintext to be sent by the data sender is obtained, and an encryption algorithm associated with the data amount range matching the data amount is selected to encrypt the plaintext. In practice, selecting an encryption algorithm based on the amount of plaintext to be sent can ensure that the encryption algorithm corresponding to different plaintexts will change. A non-fixed encryption algorithm can increase data security. If the encryption algorithm is fixed, it is easier to understand and analyze the weaknesses of the encryption algorithm, thereby cracking the encryption algorithm to obtain the plaintext. If the encryption algorithm is not fixed, it is more difficult to crack the encryption algorithm, thereby improving the security of data transmission in the network.

[0034] In particular, in this invention, the encrypted ciphertext is divided into several ciphertext segments based on a quantity sequence. Each ciphertext segment is encrypted with a public key and then sent sequentially to the corresponding fake receiver. The sending interval is the same as the time interval. By splitting the encrypted ciphertext according to the quantity sequence associated with the selected encryption algorithm, and sending the split ciphertext segments to the fake receiver in the order of the sequence number associated with the selected encryption algorithm, and the sending interval of the ciphertext segments to the fake receiver is the same as the time interval associated with the selected encryption algorithm, the fake receiver can receive the data from the data sender only when all three conditions are met. The encryption method is not limited to the encryption algorithm or key itself. Verification is performed from multiple dimensions, including sending interval, sending order, and sending quantity, thereby improving the security of data transmission in the network.

[0035] In particular, in this invention, the data receiving end matches the data volume with each data volume interval and selects the decryption algorithm associated with the matched data volume interval. Since the data volume interval associated with the encryption algorithm and the corresponding decryption algorithm is the same, the decryption algorithm associated with the data volume interval that matches the data volume is the decryption algorithm corresponding to the encryption algorithm. Since the sequence associated with the encryption algorithm and the corresponding decryption algorithm is the same, the ciphertext segments can be called one by one from the fake receiving end through the sequence associated with the decryption algorithm. After decryption and combination with the private key, the encrypted ciphertext before splitting can be obtained, which improves the security of data transmission in the network.

[0036] In particular, in this invention, the data receiving end calls the ciphertext segments encrypted with the public key from the corresponding fake receiving end one by one according to the sequential sequence, and the call interval is the same as the time interval. By calling the ciphertext segments according to the sequential sequence associated with the decryption algorithm, and decrypting and combining them with the private key to obtain the encrypted ciphertext again, and the call interval is the same as the time interval associated with the decryption algorithm, the fake data end can send data to the data receiving end when both of the above conditions are met, thereby improving the security of data transmission in the network. Attached Figure Description

[0037] Figure 1 This is a schematic diagram illustrating the steps of a big data network security data transmission method according to an embodiment of the invention.

[0038] Figure 2 This is a schematic diagram of the data transmission process according to an embodiment of the invention;

[0039] In the diagram, 1: data sender, 2: fake receiver, 3: data receiver. Detailed Implementation

[0040] To make the objectives and advantages of the present invention clearer, the present invention will be further described below with reference to embodiments; it should be understood that the specific embodiments described herein are merely for explaining the present invention and are not intended to limit the present invention.

[0041] Preferred embodiments of the present invention will now be described with reference to the accompanying drawings. Those skilled in the art should understand that these embodiments are merely illustrative of the technical principles of the present invention and are not intended to limit the scope of protection of the present invention.

[0042] It should be noted that in the description of this invention, the terms "upper", "lower", "left", "right", "inner", "outer", etc., which indicate directions or positional relationships, are based on the directions or positional relationships shown in the accompanying drawings. This is only for the convenience of description and is not intended to indicate or imply that the device or element must have a specific orientation, or be constructed and operated in a specific orientation. Therefore, it should not be construed as a limitation of this invention.

[0043] Furthermore, it should be noted that, in the description of this invention, unless otherwise explicitly specified and limited, the terms "installation," "connection," and "linking" should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral connection; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium; and they can refer to the internal connection of two components. Those skilled in the art can understand the specific meaning of the above terms in this invention according to the specific circumstances.

[0044] Please see Figure 1 as well as Figure 2 The diagram shown illustrates the steps and process of a big data network security data transmission method according to an embodiment of the present invention. The big data network security data transmission method of the present invention includes:

[0045] Step S1: Set up a number of fake receivers 2 between the data sending end 1 and the data receiving end 3, and set up a third-party monitoring unit connected to each of the fake receivers 2 to detect the data transmission status in each fake receiver 2, perform monitoring verification based on the transmission status, and stop the fake receiver 2 from receiving or sending data when the monitoring verification does not meet the predetermined standard.

[0046] Step S2: Set up several encryption algorithms and corresponding decryption algorithms, and establish the association between each encryption algorithm and decryption algorithm and the data volume range, sequential sequence, time interval, and quantity sequence.

[0047] The sequential sequence, time interval, and quantity sequence associated with each of the encryption algorithms are different.

[0048] Step S3: Obtain the amount of plaintext to be sent by data sender 1, match the amount of plaintext with each data amount interval, select the encryption algorithm associated with the matched data amount interval to encrypt the plaintext, obtain encrypted ciphertext, obtain the quantity sequence associated with the encryption algorithm, split the encrypted ciphertext into several ciphertext segments based on the quantity sequence, encrypt each ciphertext segment with a public key and send them one by one to the corresponding fake receiver 2 in the order sequence, and the sending interval is the same as the time interval;

[0049] Step S4: The data receiving end 3 matches the data volume with each of the data volume intervals, selects the decryption algorithm associated with the matched data volume interval, obtains the sequence and time interval associated with the decryption algorithm, and the data receiving end 3 calls the ciphertext segment encrypted with the public key from the corresponding fake receiving end 2 one by one based on the sequence, with the call interval being the same as the time interval. The called ciphertext segment is decrypted with the private key and combined to obtain the encrypted ciphertext. The encrypted ciphertext is decrypted by the decryption algorithm to obtain the plaintext.

[0050] The regulatory verification includes both reception verification and invocation verification.

[0051] The receiving verification includes verifying the order, time interval, and number of characters in the received ciphertext segments of each fake receiver 2;

[0052] The call verification includes verifying the order and time interval of each fake receiver 2 being called.

[0053] Specifically, in this invention, a third-party monitoring unit is set up to monitor and verify the data transmission status of each fake receiving terminal 2. In actual practice, the third-party monitoring unit monitors and verifies the data transmission status of the fake receiving terminal 2. When the monitoring and verification does not meet the predetermined standards, the fake receiving terminal 2 stops receiving or sending data, which can prevent malicious attacks or data tampering and improve the security of data transmission in the network.

[0054] Specifically, in this invention, the data receiving end 3 matches the data volume with each data volume interval and selects the decryption algorithm associated with the matched data volume interval. Since the data volume interval associated with the encryption algorithm and the corresponding decryption algorithm is the same, the decryption algorithm associated with the data volume interval that matches the data volume is the decryption algorithm corresponding to the encryption algorithm. Since the sequence associated with the encryption algorithm and the corresponding decryption algorithm is the same, the ciphertext segments can be called one by one from the fake receiving end 2 through the sequence associated with the decryption algorithm. After decryption and combination with the private key, the encrypted ciphertext before splitting can be obtained, which improves the security of data transmission in the network.

[0055] Specifically, the present invention does not limit the specific form of the data sending end 1, the data receiving end 3, and the disguised receiving end 2. They can be pre-established with a communication protocol and be able to complete the corresponding data sending and receiving functions. Preferably, the disguised receiving end 2 and the data receiving end 3 should be constructed in a similar way to achieve the disguise effect. This is the prior art and will not be described in detail here.

[0056] Specifically, the present invention does not limit the specific form of the third-party monitoring unit. It can be a detection port connected to the disguised receiver 2 or other vehicles. It only needs to be able to detect the data transmission status in each disguised receiver 2 and perform monitoring verification based on the transmission status. This will not be elaborated here.

[0057] Specifically, this invention does not limit the specific form of the encryption algorithm and the decryption algorithm. In the prior art, there are various encryption algorithms and decryption algorithms. It should be noted that the decryption algorithm must be able to decrypt the plaintext encrypted by the encryption algorithm. This will not be elaborated here.

[0058] Specifically, this invention does not limit the specific methods by which encryption and decryption algorithms establish relationships with data volume ranges, sequential sequences, time intervals, and quantity sequences. In computer technology, there are many ways to establish relationships between algorithms and data, which are existing technologies and will not be elaborated here.

[0059] Specifically, in this embodiment, each fake receiver 2 can be pre-assigned a unique serial number.

[0060] Specifically, this invention does not impose specific limitations on the form of public and private keys. The private and public keys are generated accordingly, which is a basic form in asymmetric encryption. In asymmetric encryption, encryption using public keys is more common. The generated public key can be distributed to the corresponding data sender 1, and the data receiver 3 retains the private key.

[0061] Specifically, the present invention does not limit the specific connection method between the third-party monitoring unit and each disguised receiving terminal 2. It can be connected in a variety of ways, as long as it can complete the data exchange function, which will not be elaborated further.

[0062] Specifically, in step S2, the sequence is a sequence composed of the corresponding serial numbers of several fake receivers 2, and the quantity sequence is a sequence composed of several numerical values.

[0063] Specifically, in step S3 or step S4, the data volume is matched with each of the data volume intervals, wherein...

[0064] If the preset data volume matching condition is met, then the data volume is determined to match the data volume range;

[0065] The preset data volume matching condition is that the data volume is within the data volume range.

[0066] Specifically, in this invention, the amount of plaintext to be sent by data sender 1 is obtained, and an encryption algorithm associated with the data amount range matching the data amount is selected to encrypt the plaintext. In practice, selecting an encryption algorithm based on the amount of plaintext to be sent ensures that the encryption algorithm corresponding to different plaintexts will change. A non-fixed encryption algorithm can increase data security. If the encryption algorithm is fixed, it is easier to understand and analyze the weaknesses of the encryption algorithm, thereby cracking the encryption algorithm to obtain the plaintext. If the encryption algorithm is not fixed, it is more difficult to crack the encryption algorithm, thereby improving the security of data transmission in the network.

[0067] Specifically, in step S3, the encrypted ciphertext is split into several ciphertext segments based on the quantity sequence, including:

[0068] Starting from the beginning of the encrypted ciphertext, several character extractions are performed. The number of characters extracted in the i-th character extraction is the same as the i-th value in the number sequence. The i-th character extraction yields the i-th density segment, where i is an integer greater than 0.

[0069] Specifically, in step S3, each of the ciphertext segments is encrypted using a public key and then sent sequentially to the corresponding fake receiver 2.

[0070] Starting from the first end, call the sequence number in the sequential sequence one by one, and send the i-th ciphertext segment to the spoofed receiver 2 corresponding to the i-th sequence number in the sequential sequence.

[0071] Specifically, in step S4, the data receiving end 3 retrieves the ciphertext segments encrypted with the public key from the corresponding fake receiving end 2 one by one based on the sequential sequence, including:

[0072] The sequence numbers in the sequential sequence are called one by one from the first end, and the ciphertext segment corresponding to the tampered receiver 2 of the ith sequence number is called.

[0073] Specifically, in step S1, the order, time interval, and number of characters in the received ciphertext segments of each fake receiver 2 are verified.

[0074] Verify whether the actual sequence of the ciphertext segments received by each spoofed receiver 2 satisfies the same condition as the sequence of segments, verify whether the receiving interval of the ciphertext segments received by the spoofed receiver 2 satisfies the same condition as the time interval, and verify whether the actual number sequence generated based on the number of characters in each ciphertext segment satisfies the same condition as the number sequence.

[0075] In this embodiment, the actual quantity sequence generated based on the number of characters in each ciphertext segment includes: after the spoofed receiver receives the ciphertext segment, it arranges the number of characters in the single received ciphertext segment in order according to the receiving sequence to obtain the actual quantity sequence.

[0076] Specifically, in this invention, the encrypted ciphertext is divided into several ciphertext segments based on a quantity sequence. Each ciphertext segment is encrypted with a public key and then sent sequentially to the corresponding fake receiver 2. The sending interval is the same as the time interval. By splitting the encrypted ciphertext according to the quantity sequence associated with the selected encryption algorithm, and sending the split ciphertext segments to the fake receiver 2 in the order of the sequence number associated with the selected encryption algorithm, and the sending interval of the ciphertext segments to the fake receiver 2 is the same as the time interval associated with the selected encryption algorithm, the fake receiver 2 can receive the data from the data sender 1 only when all three conditions are met. The encryption method is not limited to the encryption algorithm or key itself. Verification is performed from multiple dimensions such as sending interval, sending order, and sending quantity, which improves the security of data transmission in the network.

[0077] Specifically, in step S1, the order and time interval of the calls to each fake receiver 2 are verified, wherein...

[0078] Verify whether the actual call sequence of the data receiving end 3 calling each fake receiving end 2 satisfies the same condition as the sequential sequence, and verify whether the call interval of the data receiving end 3 satisfies the same condition as the time interval.

[0079] Specifically, in this invention, the data receiving end 3 calls the ciphertext segments encrypted with the public key from the corresponding fake receiving end 2 one by one according to the sequential sequence, and the call interval is the same as the time interval. By calling the ciphertext segments according to the sequential sequence associated with the decryption algorithm, and decrypting and combining them with the private key to obtain the encrypted ciphertext again, and the call interval is the same as the time interval associated with the decryption algorithm, the fake data end can send data to the data receiving end 3 when both of the above conditions are met, thereby improving the security of data transmission in the network.

[0080] Specifically, in step S1, the predetermined criteria are that the order, time interval, and number of characters of the received ciphertext segment of each fake receiver 2 meet the conditions when performing the reception verification, and that the order and time interval of each fake receiver 2 being called meet the conditions when performing the call verification.

[0081] Specifically, step S3 also includes sending the data volume to a third-party monitoring unit and a data receiving end 3.

[0082] The technical solution of the present invention has been described above with reference to the preferred embodiments shown in the accompanying drawings. However, it will be readily understood by those skilled in the art that the scope of protection of the present invention is obviously not limited to these specific embodiments. Without departing from the principles of the present invention, those skilled in the art can make equivalent changes or substitutions to the relevant technical features, and the technical solutions after these changes or substitutions will all fall within the scope of protection of the present invention.

Claims

1. A method for network security data transmission of big data, characterized in that, include: Step S1: Set up several fake receivers between the data sending end and the data receiving end, and set up a third-party monitoring unit connected to each fake receiver to detect the data transmission status in each fake receiver, perform monitoring verification based on the transmission status, and stop the fake receiver from receiving or sending data when the monitoring verification does not meet the predetermined standard. Step S2: Set up several encryption algorithms and corresponding decryption algorithms, and establish the association between each encryption algorithm and decryption algorithm and the data volume range, sequential sequence, time interval, and quantity sequence. The sequential sequence, time interval, and quantity sequence associated with each of the encryption algorithms are different. Step S3: Obtain the amount of plaintext to be sent by the data sender, match the amount of plaintext with each of the data amount intervals, select the encryption algorithm associated with the matched data amount interval to encrypt the plaintext, obtain the encrypted ciphertext, obtain the quantity sequence associated with the encryption algorithm, split the encrypted ciphertext into several ciphertext segments based on the quantity sequence, encrypt each of the ciphertext segments with a public key and send them one by one to the corresponding fake receiver in the order sequence, and the sending interval is the same as the time interval; Step S4: The data receiving end matches the data volume with each of the data volume intervals, selects the decryption algorithm associated with the matched data volume interval, obtains the sequence and time interval associated with the decryption algorithm, and then the data receiving end calls the ciphertext segment encrypted with the public key from the corresponding fake receiving end one by one based on the sequence, with the call interval being the same as the time interval. The called ciphertext segment is decrypted with the private key and combined to obtain the encrypted ciphertext. The encrypted ciphertext is then decrypted using the decryption algorithm to obtain the plaintext.

2. The big data network security data transmission method according to claim 1, characterized in that, The monitoring verification includes reception verification and invocation verification. Reception verification includes verifying the order, time interval, and number of characters in the received ciphertext segment of each fake receiver. Invocation verification includes verifying the order and time interval of each fake receiver being invoked.

3. The big data network security data transmission method according to claim 1, characterized in that, In step S2, the sequence is a sequence composed of the corresponding serial numbers of several fake receivers, and the quantity sequence is a sequence composed of several numerical values.

4. The big data network security data transmission method according to claim 1, characterized in that, In step S3 or step S4, the data volume is matched with each of the data volume intervals, wherein... If the preset data volume matching condition is met, then the data volume is determined to match the data volume range; The preset data volume matching condition is that the data volume is within the data volume range.

5. The big data network security data transmission method according to claim 1, characterized in that, In step S3, the encrypted ciphertext is split into several ciphertext segments based on the quantity sequence, including: Starting from the beginning of the encrypted ciphertext, several character extractions are performed. The number of characters extracted in the i-th character extraction is the same as the i-th value in the number sequence. The i-th character extraction yields the i-th density segment, where i is an integer greater than 0.

6. The big data network security data transmission method according to claim 1, characterized in that, In step S3, each of the ciphertext segments is encrypted using a public key and then sent sequentially to the corresponding fake receiver. Starting from the beginning, call the sequence numbers in the sequential sequence one by one, and send the i-th ciphertext segment to the spoofed receiver corresponding to the i-th sequence number in the sequential sequence.

7. The big data network security data transmission method according to claim 1, characterized in that, In step S4, the data receiving end retrieves the ciphertext segments encrypted with the public key from the corresponding fake receiving end one by one based on the sequential sequence. include, The sequence numbers in the sequential sequence are called one by one from the beginning, and the ciphertext segment corresponding to the tampered receiver of the ith sequence number is called.

8. The big data network security data transmission method according to claim 1, characterized in that, In step S1, the order, time interval, and number of characters in the received ciphertext segment are verified for each fake receiver. Verify whether the actual sequence of ciphertext segments received by each spoofed receiver satisfies the same condition as the sequence of ciphertext segments, verify whether the reception interval of ciphertext segments received by the spoofed receiver satisfies the same condition as the time interval, and verify whether the actual quantity sequence generated based on the number of characters in each ciphertext segment satisfies the same condition as the quantity sequence.

9. The big data network security data transmission method according to claim 1, characterized in that, In step S1, the order and time interval of the calls to each fake receiver are verified, wherein... Verify whether the actual call sequence of the data receiving end to each fake receiving end meets the same condition as the sequential sequence, and verify whether the call interval of the data receiving end meets the same condition as the time interval.

10. The big data network security data transmission method according to claim 2, characterized in that, In step S1, the predetermined criteria are that the order, time interval, and number of characters of the received ciphertext segment of each fake receiver must meet the conditions when performing the reception verification, and that the order and time interval of each fake receiver being called must meet the conditions when performing the call verification.

Images