Terminal device communication session management method based on ngtld identifier

Abstract

The application discloses a terminal equipment communication session management method based on NgTLD identification, and belongs to the technical field of communication. The terminal equipment communication session management method based on NgTLD identification comprises the following steps: step 1: a sending equipment generates original information to be sent, and converts the original information into coded information; step 2: the sending equipment adds random noise to the coded information to generate initial information, and the sending equipment sends the initial information, domain name information generated by the sending equipment from the NgTLD identification and address information of a receiving equipment to a gateway equipment; and step 3: a transmitting gateway equipment receives the initial information and the domain name information of the sending equipment, checks the source of the domain name information, and adds the initial information and the domain name information that pass the check to a to-be-sent queue. The technical scheme provided by the application greatly guarantees information security.

Description

Technical Field

[0001] This application relates to the field of communication technology, and more specifically, to a method for managing communication sessions of terminal devices based on NgTLD identifiers. Background Technology

[0002] In communication scenarios using NgTLD identifiers, the terminal devices access the network via wireless or wired networks, using DNS services to resolve the NgTLD domain name to its corresponding IP address. Subsequently, the devices primarily utilize efficient IoT protocols such as MQTT and CoAP to conduct secure data transmission over IP networks. This data is typically aggregated via a gateway and ultimately connected to a cloud platform for unified management and application interaction.

[0003] However, in communication networks with high security requirements, the NgTLD domain name of each terminal device is fixed and unique, which poses a potential risk: attackers may send illegal information by forging the same NgTLD domain name; or, by intercepting data packets uploaded to the cloud, they can use the fixed domain name resolution information (which clearly identifies the source device of the information) and the actual data content resolved to accurately locate and associate the information sent by a specific target terminal device.

[0004] In summary, in the current communication architecture of terminal devices based on NgTLD identifiers, the domain name directly associates with and exposes the device's identity information. Once communication information is leaked, the risk of attackers re-associating and reusing information using the domain name information increases significantly, seriously threatening the security of communication sessions. Summary of the Invention

[0005] The summary section of this application is intended to provide a brief overview of the concepts, which will be described in detail in the detailed description section below. This summary section is not intended to identify key or essential features of the claimed technical solutions, nor is it intended to limit the scope of the claimed technical solutions.

[0006] As a first aspect of this application, in order to solve the technical problems mentioned in the background section above, some embodiments of this application provide a terminal device communication session management method based on NgTLD identifiers, including the following steps:

[0007] Step 1: The transmitting device generates the raw information to be sent and converts the raw information into encoded information;

[0008] Step 2: The transmitting device adds random noise to the encoded information to generate initial information. The transmitting device then sends the initial information, along with the domain name information generated by the transmitting device using the NgTLD identifier and the address information of the receiving device, to the gateway device.

[0009] Step 3: The transmitting gateway device receives the initial information and domain name information from the transmitting device, verifies the source of the domain name information, and adds the verified initial information and domain name information to the queue to be sent;

[0010] Step 4: The transmitting gateway device pre-builds a reversible residual network model and generates model parameters for the reversible residual network model based on the domain name information of the transmitting device;

[0011] Step 5: The transmitting gateway device sequentially inputs the initial information in the queue to be sent into the reversible residual network model corresponding to the domain name information, generates encrypted information, and sends the encrypted information, domain name information, and address information to the cloud device;

[0012] Step 6: The cloud device sends the encrypted information, domain name information, and address information to the receiving gateway device. The receiving gateway device loads the corresponding reversible residual network model based on the domain name information and inputs the encrypted information in reverse into the reversible residual network model to generate the initial information.

[0013] Step 7: The receiving gateway device sends the initial information, domain name information, and address information to the receiving device based on the address information; the receiving device removes noise information from the initial information, generates encoded information, and transcodes the encoded information back into the original information.

[0014] The technical solution provided in this application addresses the issue of low information security when information is uploaded to a cloud server. The sending device first adds noise to the original information to increase its redundancy. Then, the gateway device loads a reversible residual network model based on the domain name information of the sending device, and the reversible residual network model encrypts the initial information. After being transmitted from the cloud to the corresponding gateway device of the receiving device, the information is then fed back into the reversible residual network model, thus greatly ensuring information security. Attackers who illegally intercept information from the cloud to the gateway cannot decrypt the information because they lack the specific structure and corresponding model parameters of the residual network model, increasing the stability of the information. Furthermore, the reversible residual network model is a neural network model, which has high data processing efficiency regardless of whether the input is forward or backward. Compared to complex encryption algorithms, its internal computation is smaller, resulting in higher encryption and decryption efficiency. The addition of a large amount of redundant information to the initial information further mitigates information loss caused by encryption / decryption or during transmission.

[0015] In existing NgTLD-based communication architectures, if the raw information uploaded by terminal devices (usually binary data streams) is directly processed (e.g., by adding noise or encryption), there are issues with coarse-grained information processing and difficulty in uniformly integrating noise. This leads to localized distortion or aberration of the raw information during noise addition, efficient neural network encryption / decryption, and network transmission, reducing the integrity and accuracy of the final reconstructed information and affecting communication reliability.

[0016] Step 1 includes the following steps:

[0017] Step 11: The sending device generates the original information to be sent and the address information of the original information;

[0018] Step 12: The transmitting device divides the raw information into several segments of binary code, and sequentially converts the binary code into a cosine function curve x. j (t), where j represents the index of the binary code;

[0019] Step 13: Combine all cosine function curves x j (t) are merged into encoded information X; X = {x1(t), x2(t), ..., x j (t)...x J (t)}; J represents the number of binary codes.

[0020] This application achieves refined and structured information processing by segmenting the original information into cosine function curves and merging them into coded information X. This transformation method allows subsequently added random noise to be embedded more evenly and naturally into each segment of the information, significantly improving the redundancy and robustness of the information. This evenly distributed redundancy effectively mitigates distortion or information loss problems that may be introduced during noise addition, encryption / decryption operations of reversible residual network models, and data transmission, thereby greatly improving the integrity and accuracy of the original information restored by the final receiving end and enhancing the reliability of the overall communication session.

[0021] Furthermore, ;

[0022] Where A represents the preset amplitude, b represents the value of the corresponding bit in the binary code, n represents the index of the binary code, f represents the carrier frequency, g represents the wave function, T represents the symbol period, t represents the time, and t=n+1.

[0023] In the technical solution provided in this application, when converting binary encoding into a cosine curve, 0 and 1 are used on the cosine curve set by the cosine, so the encoding conversion can be completed quickly.

[0024] In existing NgTLD-based communication security schemes, the method of adding noise to information to increase redundancy and obfuscation has limitations: First, the generated noise often lacks strong correlation with specific communication sessions (sender-receiver pairs), making it easy for attackers to analyze or filter; second, the distribution pattern of noise (such as simple random noise) may not be easily distinguishable from real signals, or may introduce uncontrollable interference in subsequent processing (such as neural network encryption); third, if the noise insertion method is not uniform or intelligent enough, it may lead to increased local distortion of information or difficulty in effective separation, which in turn reduces the accuracy and efficiency of decoding.

[0025] Furthermore, step 2 includes the following steps:

[0026] Step 21: The sending device generates a random seed based on its own domain name information and the address information of the receiving device;

[0027] Step 22: Generate a random number sequence u based on a random seed;

[0028] u = {u1, u2, ... u} k …u M-1}; where k represents the index of the random number;

[0029] U k =H2(h) se ), h se =H1(Seed), where H1 represents the initialization function, H2 represents the state transition function, and M represents the length of the random number sequence;

[0030] Step 23: Preset the noise intensity α, and generate a Gaussian noise sequence D, D={d0, d1, ... d2} M-1};

[0031] u={d0, d1, ... d v …d M-1};

[0032] ;

[0033] ;

[0034] ;

[0035] ;

[0036] ;

[0037] Step 24: Uniformly insert the Gaussian noise sequence D into the coded information X to generate the initial information XD;

[0038] XD=D&X; & indicates uniform insertion operation;

[0039] Step 25: Send the initial information XD, the domain name information of the sending device, and the address information of the receiving device to the gateway device.

[0040] This application generates a session-related random seed (Seed) based on the sending device's domain name and the receiving device's address, and produces a reproducible random number sequence (u), which in turn generates a noise sequence (D) with good statistical properties (e.g., following a Gaussian distribution). This design ensures that the noise is tightly bound to a specific communication session, significantly enhancing its resistance to analysis. Furthermore, the Gaussian noise sequence (D) is incorporated into the encoded information (X) through a uniform insertion operation to form the initial information (XD), making the noise evenly and naturally distributed throughout the information stream. The characteristics of Gaussian noise make it easy for the model to learn and effectively separate in subsequent processing (especially in the denoising step at the receiving end). This noise addition mechanism, combining session binding, Gaussian properties, and uniform distribution, not only significantly improves the confusion and redundancy of information but also effectively resists information correlation analysis, thereby ensuring the integrity and reliability of end-to-end communication.

[0041] In existing communication systems based on NgTLD identifiers, there is a lack of an instant verification mechanism at the gateway level to verify the authenticity of the sending device's domain name information. This allows attackers to easily send illegal information by forging legitimate device domain names and enter the subsequent communication process.

[0042] Furthermore, step 3 includes the following steps:

[0043] Step 31: The transmitting gateway device receives the initial information XD, the domain name information of the transmitting device, and the address information of the receiving device. It checks whether the IP address and domain name information of the information source correspond. If they correspond, it is used as the required information; otherwise, the information is deleted.

[0044] Step 32: The transmitting gateway device will acquire all the demand information, arrange the demand information in order of reception time, and generate a queue to be sent.

[0045] This application effectively intercepts illegal information with forged domain names by implementing matching and verification between domain name information and source IP address at the transmission gateway. This blocks such attacks at the gateway entry point and significantly improves the source credibility of the communication system.

[0046] Existing encryption schemes based on fixed encryption algorithms or general models for encrypting device information have relatively simple encryption modes and lack device specificity. Once the encryption mechanism is analyzed or cracked by attackers, the information security of all devices using the mechanism faces systemic risks.

[0047] Furthermore, step 4 includes the following steps:

[0048] Step 41: The transmitting gateway constructs a basic reversible residual network model;

[0049] The initial weight matrix of the invertible residual network model is θR;

[0050] Step 42: The transmitting gateway obtains the domain name information of the demand information in the queue to be sent, and adjusts the initial weight matrix based on the domain name information to generate model parameters corresponding to the demand information.

[0051] This application achieves highly differentiated encryption methods for different sending devices by dynamically generating exclusive model parameters for the reversible residual network model based on the unique NgTLD domain name information of the sending device. This greatly increases the difficulty for attackers to decipher encrypted information and effectively improves the security of information transmission.

[0052] While pursuing security, existing information encryption methods often introduce complex transformations that significantly increase the dimensionality of information or make the structure overly complex. This not only increases the computational cost of encryption / decryption, but may also introduce unnecessary distortion or information redundancy during the transformation process, making it difficult to balance security and processing efficiency.

[0053] Furthermore, invertible residual network models include:

[0054] The reversible initialization module is used to convert the input initial information into network features and perform feature segmentation to obtain the first network features. Second network features ;

[0055] The transformation of network features mainly involves embedding one-dimensional features of the initial information sequence into a two-dimensional network;

[0056] A reversible residual block performs a reversible transformation on the first network features and the second network features;

[0057] ;

[0058] in, , , They represent the residual functions, For activation function, This is element-wise multiplication.

[0059] The reversible residual network model employed in this application achieves highly nonlinear encryption transformation while maintaining a constant total amount of information through its unique feature segmentation and reversible transformation structure. This design avoids significantly increasing the complexity or dimensionality of the information, while ensuring strong obfuscation of the transformation, achieving a crucial balance between guaranteeing high encryption quality (difficult to decipher) and maintaining processing efficiency.

[0060] In IoT communication, applying the same encryption strength and processing method to metadata containing critical routing information (such as domain names and addresses) and data subjects containing actual payloads (including redundant noise) cannot achieve the optimal balance between security and efficiency. This either results in insufficient protection of critical metadata or imposes high-overhead encryption on massive payload data.

[0061] Furthermore, step 5 includes the following steps:

[0062] Step 51: Input the initial information into the reversible residual network model corresponding to the domain name information to generate encrypted information;

[0063] Step 52: Each receiving gateway device and each transmitting gateway device configures a pair of keys, and each receiving gateway device and each transmitting gateway device stores the keys of the other gateway devices;

[0064] Step 53: The transmitting gateway device extracts the receiving gateway device from the address information, and uses the receiving gateway device's key to encrypt the domain name information and address information to generate an address file;

[0065] Step 54: Send the address file and encrypted information to the cloud device.

[0066] This application implements a dual differentiated encryption strategy: for address information and domain name information (metadata) with small information volume but extremely high security requirements, an address file is generated using a high-strength traditional encryption algorithm based on a pre-shared key; for initial information (payload data) with large information volume and already containing redundant noise, an efficient neural network based on a reversible residual network model is used to generate encrypted information, thereby significantly optimizing the encryption processing efficiency of the system while ensuring overall communication security.

[0067] Furthermore, step 6 includes the following steps:

[0068] Step 61: The cloud device receives the encrypted information and address file, and broadcasts the encrypted information and address file to the receiving gateway device;

[0069] Step 62: The receiving gateway device uses its own key to parse the address file. If the parsing is successful, it continues to collect the encrypted information corresponding to the address file; otherwise, it does not receive the encrypted information corresponding to the address file.

[0070] Step 63: The receiving gateway device loads the corresponding reversible residual network model based on the domain name information, and inputs the encrypted information in reverse to the reversible residual network model to generate initial information.

[0071] In the technical solution provided in this application, the information sent between the gateway device and the cloud device consists of an address file and encrypted information, which are encrypted separately. This enhances information security, allowing the address file to be encrypted using a more complex encryption algorithm, thus reducing the risk of information leakage.

[0072] Furthermore, step 7 includes the following steps:

[0073] Step 71: The receiving gateway device sends the initial information, domain name information, and address information to the receiving device based on the address information;

[0074] Step 72: The receiving device generates a seed based on the domain name and address information;

[0075] Step 73: The receiving device reconstructs and generates the noise sequence D based on the seed.

[0076] Step 74: The receiving device converts the initial information XD into coded information X based on the reconstructed noise sequence D.

[0077] In the technical solution provided in this application, the noise information added to the encoded information can be completely restored by using the determined address information and domain name information. Therefore, given the noise information, the complete encoded information can be obtained by directly performing reverse operation on the initial information.

[0078] This solution has the following superior effects:

[0079] (1) The sending end adds random noise to the original information to generate initial information with high redundancy, which increases information entropy and interferes with potential analysis.

[0080] (2) The gateway device uses the NgTLD domain name information of the sending device to dynamically configure the preset reversible residual network model parameters and efficiently encrypt the initial information. The corresponding gateway device at the receiving end uses the same domain name information to load the matching model for reverse decryption.

[0081] (3) When attackers intercept encrypted information from the cloud to the gateway, they cannot effectively decrypt it due to the lack of specific structure and parameters of the reversible residual network model bound to a specific domain name, thus ensuring the confidentiality and anti-cracking (stability) of the information.

[0082] (4) As a neural network model, the reversible residual network has efficient processing capabilities in both forward (encryption) and reverse (decryption) operations. Compared with traditional complex encryption algorithms, the computational overhead is significantly reduced, thus improving the encryption and decryption speed.

[0083] (5) The high redundancy noise data introduced in the initial information enhances the fault tolerance of the information. Whether it is the slight distortion that may be introduced by the encryption and decryption process itself, or the loss or error of data packets that may occur during transmission, this redundancy feature can alleviate information loss to a certain extent and improve the reliability of communication. Attached Figure Description

[0084] The accompanying drawings, which form part of this application, are used to provide a further understanding of the application and to make other features, objects, and advantages of the application more apparent. The illustrative embodiments and descriptions of this application are used to explain the application and do not constitute an undue limitation of the application.

[0085] Furthermore, throughout the accompanying drawings, the same or similar reference numerals denote the same or similar elements. It should be understood that the drawings are schematic, and the elements are not necessarily drawn to scale.

[0086] In the attached diagram:

[0087] Figure 1 This is a flowchart of a terminal device communication session management method based on NgTLD identifiers.

[0088] Figure 2 This is a schematic diagram of the device structure corresponding to the terminal device communication session management method based on NgTLD identifier. Detailed Implementation

[0089] Embodiments of this application will now be described in more detail with reference to the accompanying drawings. While some embodiments of this application are shown in the drawings, it should be understood that this application can be implemented in various forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided to provide a more thorough and complete understanding of this application. It should be understood that the drawings and embodiments of this application are for illustrative purposes only and are not intended to limit the scope of protection of this application.

[0090] It should also be noted that, for ease of description, only the parts relevant to the invention are shown in the accompanying drawings. Unless otherwise specified, the embodiments and features described herein can be combined with each other.

[0091] The present application will now be described in detail with reference to the accompanying drawings and embodiments.

[0092] Reference Figure 1 and Figure 2 The terminal device communication session management method based on NgTLD identifiers includes the following steps:

[0093] Step 1: The transmitting device generates the raw information to be transmitted and converts the raw information into encoded information.

[0094] Step 1 includes the following steps:

[0095] Step 11: The sending device generates the original information to be sent and the address information of the original information.

[0096] The original message is the session content, which generally includes identity information, message body, and trailing markers. The address information is the domain name of the final receiving device for the original message. Based on the address information, the original message can be directed to the corresponding receiving device.

[0097] Step 12: The transmitting device divides the raw information into several segments of binary code, and sequentially converts the binary code into a cosine function curve x. j (t), where j represents the index of the binary code;

[0098] Furthermore, ;

[0099] Where A represents the preset amplitude, b represents the value of the corresponding bit in the binary code, n represents the index of the binary code, f represents the carrier frequency, g represents the wave function, T represents the symbol period, t represents the time, and t=n+1.

[0100] Both the original information and the address information are stored in binary code. Therefore, binary code segmentation here actually involves dividing the binary code sequences of the original information and address information recorded in the storage into several binary code segments. Each binary code segment has the same length, which is a preset length.

[0101] Each individual binary code segment can be mapped to a cosine function to generate a cosine function curve, or cosine function information, which represents the corresponding binary code segment.

[0102] Step 13: Combine all cosine function curves x j (t) are merged into encoded information X; X = {x1(t), x2(t), ..., x j (t)...x J (t)}; J represents the number of binary codes.

[0103] The encoded information X is actually an information sequence composed of multiple cosine function curves. Noise information can be added between any cosine function curves, or directly on the cosine function curves.

[0104] Step 2: The transmitting device adds random noise to the encoded information to generate initial information. The transmitting device then sends the initial information, along with the domain name information generated by the transmitting device using the NgTLD identifier and the address information of the receiving device, to the gateway device.

[0105] Signals are prone to distortion during transmission, especially when gateway devices and cloud devices communicate over long distances and with limited available frequency bands. Therefore, this solution superimposes noise onto the original information to increase redundancy and reduce the impact of distortion on actual signal transmission.

[0106] Step 2 includes the following steps:

[0107] Step 21: The sending device generates a random seed based on its own domain name information and the address information of the receiving device.

[0108] Noise information is primarily used to prevent the transmission of real information from being compromised due to signal loss during data transmission. Therefore, noise information is added, resulting in a high ratio between noise and actual encoded information. If the noise information is all in a uniform format, it becomes easy to reverse-engineer the subsequent encrypted information using known noise information, leading to a decrease in encryption security. Therefore, the noise information in this scheme needs to have a high degree of randomness.

[0109] To address this, a random seed is generated using the domain name information and the address information of the receiving device. Since the domain name and address information are inconsistent for each piece of information, the information uploaded and distributed by the cloud device contains a large amount of different noise. Attackers, with limited information samples, cannot extract the corresponding noise from the intercepted information, thus reducing the risk of reverse engineering. The method for generating the random seed is existing technology and will not be elaborated upon here.

[0110] Step 22: Generate a random number sequence u based on a random seed;

[0111] u = {u1, u2, ... u} k …u M-1}; where k represents the index of the random number;

[0112] U k =H2(h) se ), h se =H1(Seed), where H1 represents the initialization function, H2 represents the state transition function, and M represents the length of the random number sequence;

[0113] Step 23: Preset the noise intensity α, and generate a Gaussian noise sequence D, D={d0, d1, ... d2} M-1};

[0114] u={d0, d1, ... d v …d M-1};

[0115] ;

[0116] ;

[0117] ;

[0118] ;

[0119] ;

[0120] Step 24: Uniformly insert the Gaussian noise sequence D into the coded information X to generate the initial information XD;

[0121] XD=D&X; & indicates uniform insertion operation;

[0122] The uniform insertion in this scheme mainly aims to make M=J, so that x j The cosine functions in (t) and Gaussian noise sequence D are arranged alternately. In practice, the noise information is the cosine function, and the real information is the original function. After decryption, the required information can be extracted quickly and accurately, reducing the difficulty of noise filtering.

[0123] Step 25: Send the initial information XD, the domain name information of the sending device, and the address information of the receiving device to the gateway device.

[0124] In this solution, the transmitting gateway device and the receiving gateway device are the same device; in essence, the transmitting terminal and the receiving terminal are also the same type of device. A transmitting terminal can both transmit and receive information. When it is functioning to receive information, it is a receiving terminal; when it is functioning to transmit information, it is a transmitting terminal. The same applies to gateway devices; if a gateway device is used to upload information, it is a transmitting gateway device; otherwise, it is a receiving gateway device.

[0125] Step 3: The transmitting gateway device receives the initial information and domain name information from the transmitting device, verifies the source of the domain name information, and adds the verified initial information and domain name information to the queue to be sent.

[0126] Step 3 includes the following steps:

[0127] Step 31: The transmitting gateway device receives the initial information XD, the domain name information of the sending device, and the address information of the receiving device. It checks whether the IP address and domain name information of the information source correspond. If they correspond, it is used as the required information; otherwise, the information is deleted.

[0128] Gateway devices and terminal devices are located in the same area and are typically connected via a wired network. If a wireless network is used, the distance between them is also very short. Therefore, the gateway device can determine whether the received information originates from a genuine terminal device by tracking the information source. In practice, gateway devices and terminal devices can form a local area network (LAN) and reduce the risk of unauthorized individuals impersonating terminal devices by preventing other devices from joining.

[0129] Step 32: The transmitting gateway device will acquire all the demand information, arrange the demand information in order of reception time, and generate a queue to be sent.

[0130] The pending transmission queue is the queue of information that the transmitting gateway device needs to send to the cloud device. The transmitting gateway will send these information queues in sequence.

[0131] Step 4: The transmitting gateway device pre-builds a reversible residual network model and generates model parameters for the reversible residual network model based on the domain name information of the transmitting device.

[0132] Step 4 includes the following steps:

[0133] Step 41: The transmitting gateway constructs a basic reversible residual network model;

[0134] The initial weight matrix of the invertible residual network model is θR;

[0135] Step 42: The transmitting gateway obtains the domain name information of the demand information in the queue to be sent, and adjusts the initial weight matrix based on the domain name information to generate model parameters corresponding to the demand information.

[0136] Invertible residual network models include:

[0137] The reversible initialization module is used to convert the input initial information into network features and perform feature segmentation to obtain the first network features. Second network features ;

[0138] The transformation of network features mainly involves embedding one-dimensional features of the initial information sequence into a two-dimensional network;

[0139] A reversible residual block performs a reversible transformation on the first network features and the second network features;

[0140] ;

[0141] in, , , They represent the residual functions, For activation function, This is element-wise multiplication.

[0142] The output merging module merges y1 and y2 according to their channels to obtain the output feature y (encrypted information).

[0143] The residual function is a one-dimensional convolutional network. These three one-dimensional convolutional networks have the same structure, but different internal parameters.

[0144] In this scheme, the one-dimensional convolutional network consists of, in sequence: an input layer, a one-dimensional convolutional layer, a normalization layer, an activation layer, another one-dimensional convolutional layer, and an output layer. The model parameters are the specific values ​​of the corresponding parameters in the one-dimensional convolutional network within the residual function; thus, each model parameter is encrypted in a different way, and this encryption method is highly efficient, enabling rapid information encryption.

[0145] When information decryption is needed, the encrypted information can be input in reverse to the reversible residual network model to restore the corresponding information.

[0146] Step 5: The transmitting gateway device sequentially inputs the initial information in the queue to be sent into the reversible residual network model corresponding to the domain name information, generates encrypted information, and sends the encrypted information, domain name information, and address information to the cloud device.

[0147] Step 5 includes the following steps:

[0148] Step 51: Input the initial information into the reversible residual network model corresponding to the domain name information to generate encrypted information;

[0149] In other words, the gateway device sets a set of model parameters for each terminal device, finds the corresponding model parameters based on the domain name information of the initial information, loads the model parameters into the reversible residual network model, and then inputs the initial information into the reversible residual network model to obtain the encrypted information.

[0150] Step 52: Each receiving gateway device and each transmitting gateway device configures a pair of keys, and each receiving gateway device and each transmitting gateway device stores the keys of the other gateway devices.

[0151] The key pair here consists of a public key and a private key. Encryption is performed using the public key, and decryption is performed using the private key. The public key is stored in all gateway devices, while the private key is stored by the gateway itself.

[0152] Step 53: The transmitting gateway device extracts the receiving gateway device from the address information, and uses the receiving gateway device's key to encrypt the domain name information and address information to generate an address file.

[0153] For example, if a transmitting gateway device needs to send information A to a terminal device B, and information A needs to be forwarded by a receiving gateway device C, the transmitting gateway device will encrypt the domain name information and address information corresponding to information A into an address file using the public key of the network management device C.

[0154] Step 54: Send the address file and encrypted information to the cloud device.

[0155] Step 6: The cloud device sends the encrypted information, domain name information, and address information to the receiving gateway device. The receiving gateway device loads the corresponding reversible residual network model based on the domain name information and inputs the encrypted information in reverse into the reversible residual network model to generate the initial information.

[0156] Step 6 includes the following steps:

[0157] Step 61: The cloud device receives the encrypted information and address file, and broadcasts the encrypted information and address file to the receiving gateway device;

[0158] Step 62: The receiving gateway device uses its own key to parse the address file. If the parsing is successful, it continues to collect the encrypted information corresponding to the address file; otherwise, it does not receive the encrypted information corresponding to the address file.

[0159] Step 63: The receiving gateway device loads the corresponding reversible residual network model based on the domain name information, and inputs the encrypted information in reverse to the reversible residual network model to generate initial information.

[0160] Step 7: The receiving gateway device sends the initial information, domain name information, and address information to the receiving device based on the address information; the receiving device removes noise information from the initial information, generates encoded information, and transcodes the encoded information back into the original information.

[0161] Step 7 includes the following steps:

[0162] Step 71: The receiving gateway device sends the initial information, domain name information, and address information to the receiving device based on the address information;

[0163] Step 72: The receiving device generates a seed based on the domain name and address information;

[0164] Step 73: The receiving device reconstructs and generates the noise sequence D based on the seed.

[0165] Step 74: The receiving device converts the initial information XD into coded information X based on the reconstructed noise sequence D.

[0166] The way the noise sequence D converts the initial information XD into the encoded information X is the inverse operation of adding noise information, and the specific method will not be further elaborated here.

[0167] The above description is merely a selection of preferred embodiments of this application and an explanation of the technical principles employed. Those skilled in the art should understand that the scope of the invention involved in the embodiments of this application is not limited to technical solutions formed by specific combinations of the above-described technical features, but should also cover other technical solutions formed by arbitrary combinations of the above-described technical features or their equivalents without departing from the above-described inventive concept. For example, technical solutions formed by substituting the above-described features with (but not limited to) technical features with similar functions disclosed in the embodiments of this application.

Claims

1. A terminal device communication session management method based on NgTLD identifiers, characterized in that, Includes the following steps: Step 1: The transmitting device generates the raw information to be sent and converts the raw information into encoded information; Step 2: The transmitting device adds random noise to the encoded information to generate initial information. The transmitting device then sends the initial information, along with the domain name information generated by the transmitting device using the NgTLD identifier and the address information of the receiving device, to the gateway device. Step 3: The transmitting gateway device receives the initial information and domain name information from the transmitting device, verifies the source of the domain name information, and adds the verified initial information and domain name information to the queue to be sent; Step 4: The transmitting gateway device pre-builds a reversible residual network model and generates model parameters for the reversible residual network model based on the domain name information of the transmitting device; Step 5: The transmitting gateway device sequentially inputs the initial information in the queue to be sent into the reversible residual network model corresponding to the domain name information, generates encrypted information, and sends the encrypted information, domain name information, and address information to the cloud device; Step 6: The cloud device sends the encrypted information, domain name information, and address information to the receiving gateway device. The receiving gateway device loads the corresponding reversible residual network model based on the domain name information and inputs the encrypted information in reverse into the reversible residual network model to generate the initial information. Step 7: The receiving gateway device sends the initial information, domain name information, and address information to the receiving device based on the address information; The receiving device removes noise from the initial information, generates encoded information, and then transcodes the encoded information back into the original information.

2. The terminal device communication session management method based on NgTLD identifier according to claim 1, characterized in that: Step 1 includes the following steps: Step 11: The sending device generates the original information to be sent and the address information of the original information; Step 12: The transmitting device divides the raw information into several segments of binary code, and sequentially converts the binary code into a cosine function curve x. j (t), where j represents the index of the binary code; Step 13: Combine all cosine function curves x j (t) are merged into encoded information X; X = {x1(t), x2(t), ..., x j (t)...x J (t)}; J represents the number of binary codes.

3. The terminal device communication session management method based on NgTLD identifier according to claim 2, characterized in that: ； Where A represents the preset amplitude, b represents the value of the corresponding bit in the binary code, n represents the index of the binary code, f represents the carrier frequency, g represents the wave function, T represents the symbol period, and t represents the time.

4. The terminal device communication session management method based on NgTLD identifier according to claim 3, characterized in that: Step 2 includes the following steps: Step 21: The sending device generates a random seed based on its own domain name information and the address information of the receiving device; Step 22: Generate a random number sequence u based on a random seed; u = {u1, u2, ... u} k …u M-1 }; where k represents the index of the random number; U k =H2(h) se ), h se =H1(Seed), where H1 represents the initialization function, H2 represents the state transition function, and M represents the length of the random number sequence; Step 23: Preset the noise intensity α, and generate a Gaussian noise sequence D, D={d0, d1, ... d2} M-1 }; u={d0、d1、…d v …d M-1 }; ； ； ； ； ; Step 24: Uniformly insert the Gaussian noise sequence D into the coded information X to generate the initial information XD; XD=D&X; & indicates uniform insertion operation; Step 25: Send the initial information XD, the domain name information of the sending device, and the address information of the receiving device to the gateway device.

5. The terminal device communication session management method based on NgTLD identifier according to claim 1, characterized in that: Step 3 includes the following steps: Step 31: The transmitting gateway device receives the initial information XD, the domain name information of the transmitting device, and the address information of the receiving device. It checks whether the IP address and domain name information of the information source correspond. If they correspond, it is used as the required information; otherwise, the information is deleted. Step 32: The transmitting gateway device will acquire all the demand information, arrange the demand information in order of reception time, and generate a queue to be sent.

6. The terminal device communication session management method based on NgTLD identifier according to claim 5, characterized in that: Step 4 includes the following steps: Step 41: The transmitting gateway constructs a basic reversible residual network model; The initial weight matrix of the invertible residual network model is θR; Step 42: The transmitting gateway obtains the domain name information of the demand information in the queue to be sent, and adjusts the initial weight matrix based on the domain name information to generate model parameters corresponding to the demand information.

7. The terminal device communication session management method based on NgTLD identifier according to claim 3, characterized in that: Invertible residual network models include: The reversible initialization module is used to convert the input initial information into network features and perform feature segmentation to obtain the first network features. Second network features ; The transformation of network features mainly involves embedding one-dimensional features of the initial information sequence into a two-dimensional network; A reversible residual block performs a reversible transformation on the first network features and the second network features; ； in, , , They represent the residual functions, For activation function, This is element-wise multiplication.

8. The terminal device communication session management method based on NgTLD identifier according to claim 1, characterized in that: Step 5 includes the following steps: Step 51: Input the initial information into the reversible residual network model corresponding to the domain name information to generate encrypted information; Step 52: Each receiving gateway device and each transmitting gateway device configures a pair of keys, and each receiving gateway device and each transmitting gateway device stores the keys of the other gateway devices; Step 53: The transmitting gateway device extracts the receiving gateway device from the address information, and uses the receiving gateway device's key to encrypt the domain name information and address information to generate an address file; Step 54: Send the address file and encrypted information to the cloud device.

9. The terminal device communication session management method based on NgTLD identifier according to claim 8, characterized in that: Step 6 includes the following steps: Step 61: The cloud device receives the encrypted information and address file, and broadcasts the encrypted information and address file to the receiving gateway device; Step 62: The receiving gateway device uses its own key to parse the address file. If the parsing is successful, it continues to collect the encrypted information corresponding to the address file; otherwise, it does not receive the encrypted information corresponding to the address file. Step 63: The receiving gateway device loads the corresponding reversible residual network model based on the domain name information, and inputs the encrypted information in reverse to the reversible residual network model to generate initial information.

10. The terminal device communication session management method based on NgTLD identifier according to claim 9, characterized in that: Step 7 includes the following steps: Step 71: The receiving gateway device sends the initial information, domain name information, and address information to the receiving device based on the address information; Step 72: The receiving device generates a seed based on the domain name and address information; Step 73: The receiving device reconstructs and generates the noise sequence D based on the seed. Step 74: The receiving device converts the initial information XD into coded information X based on the reconstructed noise sequence D.

Images