Scheme and system for data information secure transmission

Abstract

The invention discloses a data information secure transmission scheme and system, and relates to the technical field of data transmission, and the method comprises the steps: determining data, needing to be transmitted, of a collection end as target data, and dividing the target data according to a preset time period to obtain segment data; carrying out integrity marking on the segment data and storing the segment data in a layer packet at the position of the acquisition end; the segment data is transmitted according to the layer packet, if the layer packet is accessed in the transmission process, unshelling is carried out immediately, and the segment data continues to be transmitted until the segment data is transmitted to a data platform; integrity verification is carried out after the data platform receives the segment data, the segment data is stored after verification is passed, the collection end needing data transmission is determined, and the data collected by the collection end serves as target data. According to the invention, the data can be ensured not to have errors in the transmission process through the layer packet, and the segment data received by the data platform can be ensured not to have errors, so that the public data can be better analyzed.

Description

Technical Field

[0001] This invention relates to the field of data transmission technology, and specifically to a scheme and system for secure data transmission. Background Technology

[0003] With the rapid development of information technology, data has become a vital resource, playing a crucial role in public services and social governance. The reliability and security of data are directly related to public interests and social stability, especially data in public safety management. If data is leaked or tampered with, resulting in errors, it may affect fire safety decisions and threaten public safety and property. Summary of the Invention

[0004] The purpose of this invention is to provide a solution and system for secure data transmission to address the shortcomings in the prior art.

[0005] To achieve the above objectives, the present invention provides the following technical solution: a scheme for secure data transmission, comprising the following steps:

[0006] The data that the acquisition end needs to transmit is determined as the target data, and the target data is divided into segments according to a preset time period to obtain segment data;

[0007] The segment data is marked for integrity and stored in the layer packet at the acquisition end location;

[0008] The segment data is transmitted according to the layer packet. If the layer packet is accessed during the transmission process, it is immediately unpacked and the segment data is continued to be transmitted until it is transmitted to the data platform.

[0009] After receiving the segment data, the data platform performs integrity verification. Once the verification is successful, the segment data is stored.

[0010] In a preferred embodiment, the step of determining the data to be transmitted by the acquisition end as target data and dividing the target data into segments according to a preset time period includes:

[0011] Identify the data acquisition terminal that needs to transmit data, and use the data collected by the acquisition terminal as the target data;

[0012] Define a preset time period, configure a temporary storage for the target data at the corresponding acquisition terminal, and use the target data corresponding to the preset time period as segment data.

[0013] In a preferred embodiment, the step of marking the segment data for integrity and storing it in the layer packet at the acquisition end location includes:

[0014] The segment data is labeled with unit time data according to the order of collection time to obtain data encoding;

[0015] The data encoding of the unit time data is continuous according to the order of collection time;

[0016] Multiple layer packets are configured for the corresponding acquisition end, and the segment data after marking is stored in the layer packets.

[0017] In a preferred embodiment, the corresponding acquisition end is configured with multiple layer packets, and the step of storing the marked segment data in the layer packets includes:

[0018] The corresponding acquisition end is configured with storage space, and multiple layers are set in the storage space. Each layer consists of multiple sub-packets in a wrapper-like manner. Fake data is stored between the multiple sub-packets, and each sub-packet has an open port.

[0019] The storage space is activated based on the segment data. Each segment data corresponds to a single layer package, and the marked segment data is stored in the innermost sub-package of the layer package.

[0020] In a preferred embodiment, the step of transmitting segment data according to layer packets, and immediately unpacking the layer packets and continuing to transmit the segment data if they are accessed during transmission, until they are transmitted to the data platform, includes:

[0021] Establish a communication channel between the acquisition terminal and the data platform. The communication channel includes a data transmission channel and a packet recycling channel. Multiple open nodes are set on the data transmission channel.

[0022] The layer package containing segmented data is transmitted through the data transmission channel between the acquisition terminal and the data platform;

[0023] During transmission, if a layer packet is accessed, the outer first-layer sub-packet and multiple inner sub-packets are de-packed, and the multiple inner sub-packets are used as the de-packed layer packet.

[0024] The unpacked packets continue to be transmitted until they are transmitted to the data platform, where the segment data is extracted from the unpacked packets.

[0025] The data platform will transmit the unpacked layers that meet the preset number of layers to the acquisition terminal through the layer package recycling channel, and then put them back into the storage space.

[0026] In a preferred embodiment, the step of unpacking the outer first-layer sub-packet and multiple inner sub-packets, with the multiple inner sub-packets serving as the unpacked layer packet during transmission, includes:

[0027] If a sub-packet in the outer first layer is accessed by an external network, all sub-packets inside the outer first layer sub-packet will be transmitted through the open port of the outer first layer sub-packet to detach from the outer first layer sub-packet, thus completing the unpacking between the outer first layer sub-packet and multiple internal sub-packets.

[0028] The outer first-layer sub-packet is connected to the external network, and the outer first-layer sub-packet and the connected external network are disconnected from the data transmission channel through the next open node in the transmission direction;

[0029] Multiple internal sub-packages are treated as layers after unpacking.

[0030] In a preferred embodiment, the step of performing integrity verification after the data platform receives the segment data, and storing the segment data after successful verification, includes:

[0031] The continuity of the corresponding data codes on the segment data is verified. If the data codes are continuous, it means that the segment data is complete; if the data codes are not continuous, it means that the segment data is not complete.

[0032] The complete segment data is stored in the data platform.

[0033] The present invention also provides a data information secure transmission system, comprising:

[0034] The processing module is used to determine the data that the acquisition end needs to transmit as the target data, and divide the target data according to a preset time period to obtain segment data;

[0035] The storage module, connected to the processing module, is used to mark the integrity of segment data and store it in the layer packet at the acquisition end location;

[0036] The transmission module, connected to the storage module, is used to transmit segment data according to the layer packet. If the layer packet is accessed during the transmission process, it is immediately unpacked and the segment data continues to be transmitted until it is transmitted to the data platform.

[0037] The verification module, connected to the transmission module, is used to perform integrity verification after the data platform receives segment data. Once the verification is successful, the segment data is stored.

[0038] The technical effects and advantages provided by the present invention in the above technical solution are as follows:

[0039] This invention can store the collected data in layer packets, which can resist external networks and ensure that the data will not be corrupted during transmission. This ensures that the segment data received by the data platform will not be corrupted, thus enabling better analysis of public data. Attached Figure Description

[0040] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in this invention. For those skilled in the art, other drawings can be obtained based on these drawings.

[0041] Figure 1 This is a flowchart of the method of the present invention.

[0042] Figure 2 This is a system block diagram of the present invention.

[0043] Figure 3 This is a schematic diagram of the layered logic of the present invention. Detailed Implementation

[0044] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0045] Example 1, please refer to Figure 1 and 3 As shown in the figure, the data information security transmission scheme described in this embodiment includes the following steps:

[0046] S1. Determine the data that the acquisition end needs to transmit as the target data, and divide the target data according to the preset time period to obtain segment data;

[0047] S2. Mark the segment data for integrity and store it in the layer packet at the acquisition end location;

[0048] S3. Transmit segment data according to the layer packet. If the layer packet is accessed during the transmission process, immediately unpack it and continue to transmit the segment data until it is transmitted to the data platform.

[0049] S4. After receiving the segment data on the data platform, perform integrity verification. If the verification is successful, store the segment data to prevent errors in the received information and ensure the integrity and accuracy of information transmission.

[0050] As described in steps S1-S4 above, the external first-layer sub-packet can carry the external network away from the data transmission channel, preventing the external network from remaining in the data transmission channel and affecting its stability. After being separated from the external first-layer sub-packet, the internal sub-packets continue to be transmitted as layer packets until they reach the data platform. The data platform extracts and stores the segment data within them. Since layer packets may still exist after transmission and use, they still have the function of transmitting segment data and protecting its security. Therefore, a preset number of layers is set. For example, layer packets with at least 5 layers can continue to be used. Layer packets with extracted segment data can be transmitted to the acquisition end through a recycling channel and then redeployed into the storage space for reuse. Layer packets with fewer than 5 layers are unable to withstand external network access during transmission and are discarded by the data platform. Layer packets need to be replenished in the storage space periodically to ensure a sufficient number for the cyclical use of segment data. Layer packets ensure that data transmission is error-free and that the segment data received by the data platform is error-free, thereby enabling better analysis of public data and better management of public security.

[0051] In one embodiment, the step S1, which determines the data to be transmitted by the acquisition end as the target data and divides the target data into segments according to a preset time period, includes:

[0052] S11. Determine the acquisition terminal that needs to transmit data, and use the data collected by the acquisition terminal as the target data;

[0053] S12. Set a preset time period, configure a temporary storage for the target data at the corresponding acquisition terminal, and use the target data corresponding to the preset time period as segment data.

[0054] As described in steps S11-S12 above, in public safety management, it is necessary to collect information about the environment through various sensors, such as air gas data and temperature data, and other relevant safety data, which can play a role in fire safety management. Here, the sensor is the acquisition end, and the data collected by the acquisition end is taken as the target data. In order to ensure the secure transmission of the data, it is packaged and sent. According to the preset time period, the collected target data is temporarily stored according to the preset time period. The temporary storage can be the built-in storage configured on the corresponding acquisition end. Then, the target data is packaged according to the data collected within the preset time period as segment data, and then the segment data can be transmitted to achieve the protection of segment data.

[0055] In one embodiment, step S2, which involves marking the segment data for integrity and storing it in a layer packet at the acquisition end location, includes:

[0056] S21. Mark the segment data according to the order of acquisition time to obtain the data encoding;

[0057] S22. The data encoding of the unit time data corresponding to the collection time sequence is continuous;

[0058] S23. Configure multiple layer packets for the corresponding acquisition end and store the marked segment data in the layer packets.

[0059] In one embodiment, the corresponding acquisition terminal is configured with multiple layer packets. Step S23, which stores the marked segment data in the layer packets, includes:

[0060] S231. The corresponding acquisition end is configured with storage space, and multiple layers are set in the storage space. Each layer consists of multiple sub-packets in a wrapper-like manner. Fake data is stored between the multiple sub-packets, and each sub-packet has an open port.

[0061] S232. Enable the layer package in the storage space according to the segment data. Each segment data corresponds to a single layer package. Store the marked segment data in the innermost sub-package of the layer package.

[0062] As described in steps S21-S23 above, to prevent the subsequent data platform from receiving erroneous data, transmission protection is implemented for the corresponding data segments. Since the acquisition end continuously collects environmental data, data segmentation is first encoded to protect the data. This data segment is data within a preset time period. Encoding is performed on the data segment based on unit time, such as one second. Within the same data segment, the encoding is continuous according to the acquisition time sequence. Therefore, if the encoding of subsequent data segments is discontinuous, it indicates a potential error in the data segment. A storage mechanism for multiple segments is configured at the acquisition end. The storage space of the layer packet is mainly composed of multiple sub-packets arranged in a package-like manner. Essentially, one sub-packet stores another sub-packet, and this packaging is continuously repeated to obtain multiple layers of packaged storage, forming the layer packet. In addition, dummy data, which is useless and messy data, is stored between adjacent packaged sub-packets. This messy data is used to confuse external network access later. Each sub-packet has an open port. After the layer packet is in place, it is activated according to the segment data, and the segment data is stored in the innermost sub-packet of the layer packet for security protection during the transmission of segment data, so as to avoid data errors in the segment data.

[0063] In one embodiment, step S3, which involves transmitting segment data according to layer packets, and immediately unpacking the packets if they are accessed during transmission, continuing the transmission of the segment data until it reaches the data platform, includes:

[0064] S31. Establish a communication channel between the acquisition terminal and the data platform. The communication channel includes a data transmission channel and a packet recycling channel. Multiple open nodes are set on the data transmission channel (the open nodes are network ports, which are used to remove sub-packets that are connected to the external network from the data transmission channel).

[0065] S32. Transmit the layer packet containing segment data through the data transmission channel between the acquisition terminal and the data platform;

[0066] S33. During transmission, if a layer packet is accessed, the outer first layer sub-packet and multiple inner sub-packets are de-packed, and the multiple inner sub-packets are used as the de-packed layer packet.

[0067] S34. Continue transmitting the unpacked layer packet until it is transmitted to the data platform, and extract the segment data from the unpacked layer packet.

[0068] S35. The data platform will transmit the unpacked layer packets that meet the preset number of layers to the acquisition terminal through the layer packet recycling channel, and then put them back into the storage space.

[0069] In one embodiment, step S33, where, during transmission, if a layer packet receives an access request, the outer first-layer sub-packet and multiple inner sub-packets are de-packed, and the multiple inner sub-packets become the de-packed layer packet, includes:

[0070] S331. If a sub-packet in the outer first layer is accessed by an external network, all sub-packets inside the outer first layer sub-packet are transmitted through the open port of the outer first layer sub-packet to detach from the outer first layer sub-packet, thus completing the unpacking between the outer first layer sub-packet and multiple internal sub-packets.

[0071] S332. Connect the external first-layer sub-packet to the external network, and disconnect the external first-layer sub-packet and the connected external network from the data transmission channel through the next open node in the transmission direction.

[0072] S333, Treat multiple internal sub-packages as layers after unpacking.

[0073] As described in steps S31-S35 above, there are two channels between the acquisition terminal and the data platform: a data transmission channel and a layer packet recycling channel. Multiple open nodes are set up on the data transmission channel. These open nodes are only used to disconnect external first-layer sub-packets that are detached from the layer packets from the external network connected to the data transmission channel. After the channel is determined, the layer packets containing segment data are transmitted from the acquisition terminal to the data platform through the data transmission channel. During the transmission process, normally, the system will not access the layer packets related to the segment data. If a layer packet is accessed, it indicates... This refers to an unauthorized external network, denoted as the external network. During data transmission, if external network access occurs, all internal sub-packets will be aware of this while the outer first-layer sub-packet is being accessed. Subsequently, multiple internal sub-packets will "escape" through the open port of the outer first-layer sub-packet (this is called unpacking). The outer first-layer sub-packet remains to handle external network access, and it contains deceptive data that the external network can access, providing good deception. Afterward, the internal sub-packets, detached from the outer first-layer sub-packet, continue transmitting segmented data. If subsequent internal... Multiple sub-packets are accessed by the external network, undergoing layer-by-layer "unpacking" until the segment data is transmitted to the data platform. The first-layer external sub-packet escapes the data transmission channel through the next open node in the transmission direction (here, the transmission direction is the transmission direction from the acquisition end to the data platform in the data transmission channel). This first-layer external sub-packet carries the external network away from the data transmission channel, preventing the external network from remaining in the data transmission channel and affecting its stability. The internal sub-packets, after escaping the first-layer external sub-packet, continue to be transmitted as layer packets until they reach the data platform. The segment data is extracted and stored. Since multiple layers may remain after transmission, these layers still serve to transmit and protect segment data. Therefore, a preset number of layers is set; for example, layers with at least five layers can continue to be used. These extracted layers are then transmitted to the acquisition end via a recycling channel and redeployed into storage for reuse. Layers with fewer than five layers are deemed insufficient to withstand external network access during transmission and are discarded on the data platform. Storage needs to be replenished periodically to ensure a sufficient number of layers for segment data recycling. Layered packets ensure error-free data transmission and accurate segment data received by the data platform, thereby enabling better analysis of public data and improved public security management.

[0074] In one embodiment, step S4, which involves performing integrity verification after the data platform receives the segment data and storing the segment data after successful verification, includes:

[0075] S41. Perform continuity verification on the corresponding data codes of the segment data. If the data codes are continuous, it means that the segment data is complete; if the data codes are not continuous, it means that the segment data is not complete.

[0076] S42. Store the complete segment data in the data platform.

[0077] As described in steps S41-S42 above, the segment data is marked sequentially according to the unit time using continuous data encoding. If the segment data is increased or decreased, the corresponding data encoding will change, and the data encoding will be discontinuous. Discontinuity indicates that the segment data has errors, while continuity indicates that the segment data does not have errors. The segment data without errors is stored in the data platform, which facilitates the data platform to analyze the segment data and ensure the security of the public environment, thus providing effective management of public safety.

[0078] Example 2, please refer to Figure 2 As shown in the figure, the data information security transmission system described in this embodiment includes:

[0079] The processing module is used to determine the data that the acquisition end needs to transmit as the target data, and divide the target data according to a preset time period to obtain segment data;

[0080] The storage module, connected to the processing module, is used to mark the integrity of segment data and store it in the layer packet at the acquisition end location;

[0081] The transmission module, connected to the storage module, is used to transmit segment data according to the layer packet. If the layer packet is accessed during the transmission process, it is immediately unpacked and the segment data continues to be transmitted until it is transmitted to the data platform.

[0082] The verification module, connected to the transmission module, is used to perform integrity verification after the data platform receives segment data. Once the verification is successful, the segment data is stored.

[0083] It should be noted that layering ensures that data is transmitted without errors, and that the segmented data received by the data platform is error-free. This enables better analysis of public data and improved public safety management.

[0084] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. A scheme for secure data transmission, characterized in that, Includes the following steps: The data that the acquisition end needs to transmit is determined as the target data, and the target data is divided into segments according to a preset time period to obtain segment data; The segment data is marked for integrity and stored in the layer packet at the acquisition end location; The segment data is transmitted according to the layer packet. If the layer packet is accessed during the transmission process, it is immediately unpacked and the segment data is continued to be transmitted until it is transmitted to the data platform. After receiving the segment data, the data platform performs integrity verification. Once the verification is successful, the segment data is stored.

2. The data information security transmission scheme according to claim 1, characterized in that, The step of determining the data to be transmitted by the acquisition end as the target data, and dividing the target data into segments according to a preset time period to obtain segment data includes: Identify the data acquisition terminal that needs to transmit data, and use the data collected by the acquisition terminal as the target data; Define a preset time period, configure a temporary storage for the target data at the corresponding acquisition terminal, and use the target data corresponding to the preset time period as segment data.

3. The data information security transmission scheme according to claim 1, characterized in that, The step of marking the segment data for integrity and storing it in the layer packet at the acquisition end location includes: The segment data is labeled with unit time data according to the order of collection time to obtain data encoding; The data encoding of the unit time data is continuous according to the order of collection time; Multiple layer packets are configured for the corresponding acquisition end, and the segment data after marking is stored in the layer packets.

4. A data information security transmission scheme according to claim 3, characterized in that, The step of configuring multiple layer packets at the corresponding acquisition end and storing the marked segment data in the layer packets includes: The corresponding acquisition end is configured with storage space, and multiple layers are set in the storage space. Each layer consists of multiple sub-packets in a wrapper-like manner. Fake data is stored between the multiple sub-packets, and each sub-packet has an open port. The storage space is activated based on the segment data. Each segment data corresponds to a single layer package, and the marked segment data is stored in the innermost sub-package of the layer package.

5. A data information security transmission scheme according to claim 1, characterized in that, The step of transmitting segment data according to layer packets, and immediately unpacking the layer packets if they are accessed during transmission, continuing the transmission of segment data until it is transmitted to the data platform, includes: Establish a communication channel between the acquisition terminal and the data platform. The communication channel includes a data transmission channel and a packet recycling channel. Multiple open nodes are set on the data transmission channel. The layer package containing segmented data is transmitted through the data transmission channel between the acquisition terminal and the data platform; During transmission, if a layer packet is accessed, the outer first-layer sub-packet and multiple inner sub-packets are de-packed, and the multiple inner sub-packets are used as the de-packed layer packet. The unpacked packets continue to be transmitted until they are transmitted to the data platform, where the segment data is extracted from the unpacked packets. The data platform will transmit the unpacked layers that meet the preset number of layers to the acquisition terminal through the layer package recycling channel, and then put them back into the storage space.

6. A data information security transmission scheme according to claim 5, characterized in that, During transmission, if a layer packet receives an access request, the outer first-layer sub-packet and multiple inner sub-packets are de-packed, and the multiple inner sub-packets are used as the de-packed layer packet. This step includes: If a sub-packet in the outer first layer is accessed by an external network, all sub-packets inside the outer first layer sub-packet will be transmitted through the open port of the outer first layer sub-packet to detach from the outer first layer sub-packet, thus completing the unpacking between the outer first layer sub-packet and multiple internal sub-packets. The outer first-layer sub-packet is connected to the external network, and the outer first-layer sub-packet and the connected external network are disconnected from the data transmission channel through the next open node in the transmission direction; Multiple internal sub-packages are treated as layers after unpacking.

7. A data information security transmission scheme according to claim 1, characterized in that, The step of performing integrity verification after receiving segment data on the data platform, and storing the segment data after successful verification, includes: The continuity of the corresponding data codes on the segment data is verified. If the data codes are continuous, it means that the segment data is complete; if the data codes are not continuous, it means that the segment data is not complete. The complete segment data is stored in the data platform.

8. A data information secure transmission system, used to implement the data information secure transmission scheme according to any one of claims 1-7, characterized in that, include: The processing module is used to determine the data that the acquisition end needs to transmit as the target data, and divide the target data according to a preset time period to obtain segment data; The storage module, connected to the processing module, is used to mark the integrity of segment data and store it in the layer packet at the acquisition end location; The transmission module, connected to the storage module, is used to transmit segment data according to the layer packet. If the layer packet is accessed during the transmission process, it is immediately unpacked and the segment data continues to be transmitted until it is transmitted to the data platform. The verification module, connected to the transmission module, is used to perform integrity verification after the data platform receives segment data. Once the verification is successful, the segment data is stored.

Images