Data sending method and device, computer equipment, readable storage medium and program product
By using deep learning network models and asymmetric encryption algorithms, a data channel between terminal devices and the metering master station is constructed, solving the problem that static passwords are easily cracked and achieving the secure and stable operation of the information network.
Patent Information
- Application Number
- CN202511111192.8
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-08-08
- Publication Date
- 2025-11-07
AI Technical Summary
In existing technologies, static passwords and basic question-and-answer verification methods are easily cracked, making it impossible to guarantee the secure and stable operation of information networks.
By receiving authentication requests from terminal devices, a data channel is constructed between the metering master station and the terminal devices using a deep learning network model combined with asymmetric encryption and hash algorithms to perform two-way authentication and data transmission, thereby ensuring the trustworthiness of the terminal devices.
It enables security verification of authenticated terminal devices, prevents threats to information networks, and ensures the safe and stable operation of information networks.
Smart Images
Figure CN120915464A_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present application relates to the technical field of identity verification, and in particular to a data sending method and device, a computer device, a readable storage medium and a program product. BACKGROUND
[0002] With the rapid development of cutting-edge technologies such as cloud computing, mobile Internet, Internet of Things and artificial intelligence, we are witnessing the entry of various industries into a new era of information development. This change has brought unprecedented convenience and efficiency. Whether it is industrial production, urban management, or medical health, financial services, information technology has become a key force driving social progress and economic development. However, behind this glorious process, there are also increasingly complex domestic and foreign security threats, which are intertwined and escalating, posing unprecedented challenges to national security, information network security of enterprises and institutions, and even personal privacy protection. Therefore, the security authentication of user terminals has become the focus of various industries.
[0003] In the prior art, static passwords or basic question and answer verification methods are often used to authenticate the identity information of users, but these methods are extremely vulnerable to cracking and cannot guarantee the safe and stable operation of information networks. SUMMARY
[0004] Therefore, it is necessary to provide a data sending method, device, computer device, readable storage medium and program product that can guarantee the safe and stable operation of information networks in view of the above technical problems.
[0005] In a first aspect, the present application provides a data sending method, which comprises:
[0006] receiving an identity authentication request sent by a terminal device; the identity authentication request comprising identification information, a MAC address and token information of the terminal device;
[0007] in the case where the identification information is the original identification of the terminal device, the MAC address is located in a preset MAC address table, and the token information indicates that the identity authentication request is legal, obtaining a resource type of the identity authentication request, and historical behavior patterns and current network environment data of the terminal device;
[0008] inputting the resource type, the historical behavior patterns and the current network environment data into a deep learning network model to output a trustworthiness index value of the terminal device;
[0009] in the case where the trustworthiness index value is greater than a preset index value, constructing a data channel between a metering master station and the terminal device;
[0010] receive a data acquisition request sent by the terminal device through the data channel, and send target data corresponding to the data acquisition request to the terminal device through the data channel.
[0011] In one of the embodiments, the data acquisition request comprises the identification information, a signature value of the identification information and a first hash value, the signature value is generated by the terminal device based on a private key signing the identification information, the first hash value is generated by the terminal device inputting the identification information into a hash model, and the private key is generated by the terminal device based on an asymmetric encryption model.
[0012] In one of the embodiments, the sending of the target data corresponding to the data acquisition request to the terminal device through the data channel comprises:
[0013] verifying the signature value and the identification information based on a public key to obtain a first verification result, wherein the public key is generated by the terminal device based on the asymmetric encryption model;
[0014] In a case where the first verification result indicates that the data acquisition request comes from the terminal device and is not tampered, the target data is sent to the terminal device based on the first hash value and the hash model.
[0015] In one of the embodiments, the sending of the target data to the terminal device based on the first hash value and the hash model comprises:
[0016] inputting the identification information into the hash model to generate a second hash value;
[0017] In a case where the first hash value is the same as the second hash value, the target data is sent to the terminal device.
[0018] In one of the embodiments, before the receiving of the data acquisition request sent by the terminal device through the data channel, the method comprises:
[0019] receiving a first digital certificate sent by the terminal device, and sending a second digital certificate to the terminal device;
[0020] verifying the first digital certificate to obtain a second verification result, and receiving a third verification result generated by the terminal device after verifying the second digital certificate;
[0021] In a case where the second verification result indicates that the first digital certificate is valid, and the third verification result indicates that the second digital certificate is valid, the receiving of the data acquisition request sent by the terminal device through the data channel is performed.
[0022] In one of the embodiments, the method further comprises:
[0023] obtaining a plurality of preset credibility ranges, wherein different preset credibility ranges correspond to different access permissions;
[0024] determining a preset credibility range in which the credibility index value is located as a target credibility range, and determining an access permission corresponding to the target credibility range as the access permission of the terminal device.
[0025] In a second aspect, the present application further provides a data sending device, the device comprising:
[0026] a first receiving module configured to receive an identity authentication request sent by a terminal device, wherein the identity authentication request comprises identification information, a MAC address and token information of the terminal device;
[0027] an obtaining module configured to, in a case where the identification information is a native identification of the terminal device, the MAC address is located in a preset MAC address table, and the token information indicates that the identity authentication request is legal, obtain a resource type of the identity authentication request, and historical behavior patterns and current network environment data of the terminal device;
[0028] an input module configured to input the resource type, the historical behavior patterns and the current network environment data into a deep learning network model, and output a credibility index value of the terminal device;
[0029] a constructing module configured to, in a case where the credibility index value is greater than a preset index value, construct a data channel between a metering master station and the terminal device;
[0030] a second receiving module configured to receive a data acquisition request sent by the terminal device through the data channel, and send target data corresponding to the data acquisition request to the terminal device through the data channel.
[0031] In a third aspect, the present application further provides a computer device. The computer device comprises a memory and a processor, the memory stores a computer program, and the processor implements the steps of the method in any one of the above embodiments when executing the computer program.
[0032] In a fourth aspect, the present application further provides a computer readable storage medium. The computer readable storage medium stores a computer program, and the computer program is executed by a processor to implement the steps of the method in any one of the above embodiments.
[0033] In a fifth aspect, the present application provides a computer program product. The computer program product comprises a computer program which, when executed by a processor, implements the steps of the method in any one of the above embodiments.
[0034] The data sending method, device, computer device, readable storage medium and program product described above receive an identity authentication request sent by a terminal device. The identity authentication request comprises identification information, a MAC address and token information of the terminal device. In a case where the identification information is a native identification of the terminal device, the MAC address is located in a preset MAC address table, and the token information indicates that the identity authentication request is legal, a resource type of the identity authentication request, and historical behavior patterns and current network environment data of the terminal device are acquired. The resource type, the historical behavior patterns and the current network environment data are input into a deep learning network model to output a trustworthiness index value of the terminal device. In a case where the trustworthiness index value is greater than a preset index value, a data channel between a metering master station and the terminal device is constructed. A data acquisition request sent by the terminal device through the data channel is received, and target data corresponding to the data acquisition request is sent to the terminal device through the data channel. The method provided in the present application can ensure that a terminal device that passes authentication does not pose a threat to an information network, thereby ensuring the safe and stable operation of the information network. BRIEF DESCRIPTION OF DRAWINGS
[0035] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the related art, the drawings needed to be used in the description of the embodiments of the present application or the related art will be briefly introduced. Obviously, the drawings in the following description only some embodiments of the present application, and for those skilled in the art, other related drawings can also be obtained without creative labor on the basis of these drawings.
[0036] Figure 1 A flowchart of a data sending method in an embodiment;
[0037] Figure 2 A schematic diagram of a multi-modal neural network model architecture in an embodiment;
[0038] Figure 3 A flowchart of a target data sending method in an embodiment;
[0039] Figure 4 A flowchart of a data sending method in another embodiment;
[0040] Figure 5 A block diagram of a data sending device in an embodiment;
[0041] Figure 6 An internal structure diagram of a computer device in an embodiment. DETAILED DESCRIPTION
[0042] In order to make the purposes, technical solutions and advantages of the present application clearer, the present application will be further described in detail below with reference to the drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and not intended to limit the present application.
[0043] It should be noted that the terms "first", "second", etc. used in the present application can be used to describe various elements, but these elements are not limited by these terms. These terms are only used to distinguish the first element from the second element. The terms "include" and "have" used in the present application and any variations thereof are intended to cover non-exclusive inclusion. The term "a plurality of" used in the present application means two or more. The term "and / or" used in the present application means one of the options or any combination of multiple options.
[0044] In one embodiment, as shown in Figure 1 The present embodiment illustrates the method applied to a terminal, and it should be understood that the method can also be applied to a server, and can also be applied to a system including a terminal and a server, and is realized through the interaction of the terminal and the server. In the present embodiment, the method includes the following steps:
[0045] S102, receiving an identity authentication request sent by a terminal device; the identity authentication request includes identification information, a MAC address and token information of the terminal device.
[0046] The identification information of the terminal device can include, but is not limited to, a SIM card serial number, a special network port number and a terminal address.
[0047] The token information of the terminal device is a digital certificate used for identity authentication, authorization or session management, which is usually issued by a server and stored on the terminal device.
[0048] Optionally, when the terminal device attempts to access the zero trust gateway, the terminal device sends an identity authentication request to the gateway, and the gateway checks the legality of the access request of the terminal device according to the preset security policy and the internally maintained MAC address table. If the terminal identity verification fails, the gateway will immediately reject the access application, and if the verification passes, it will enter the next step of credibility verification stage. The gateway is used to measure the communication transmission between the host station and the terminal device.
[0049] S104, in the case that the identification information is the original identification of the terminal device, the MAC address is located in the preset MAC address table, and the token information represents that the identity authentication request is legal, obtaining the resource type of the identity authentication request, and the historical behavior mode and the current network environment data of the terminal device.
[0050] wherein, the resource type refers to a resource type of target data requested by the identity authentication request, and the resource type can be structured data, unstructured data or semi-structured data; the historical behavior mode refers to quantifiable and predictable operation characteristics exhibited by the device in a long-term running process; the current network environment data refers to network state information of the device at this time of connection, and is used for real-time risk assessment; and the native identifier of the terminal device refers to a hardware identifier with uniqueness and persistence assigned by a manufacturer when the terminal device is manufactured.
[0051] Optionally, only when the MAC address is located in the MAC address table, the corresponding terminal device has the qualification to perform identity authentication.
[0052] S106, inputting the resource type, the historical behavior mode and the current network environment data into a deep learning network model, and outputting a trustworthiness index value of the terminal device.
[0053] wherein, the trustworthiness index value of the device is a standardized numerical value or a level used for quantitatively evaluating the trustworthiness of the device in terms of security, reliability and behavior compliance.
[0054] Optionally, the deep learning network model can be but is not limited to a multi-modal neural network model. Figure 2 The figure is a multi-modal neural network model architecture, the input layer in the figure includes two parts of time series data input and discrete data input, after the time series data input, the time series data will be processed through Fast Fourier Transform (FFT) and Discrete Cosine Transform (DCT) in turn, and multi-scale feature extraction will be performed on the processed time series data in the Inception (multi-channel convolution) module, 1x1 in the Inception module is local feature, 3x1 and 5x1 are time series or spatial features of different receptive fields, Maxpool (maximum pooling operation) is used for down-sampling, then the time series data is up-sampled through bilinear interpolation to improve the feature map resolution, and the time series data is down-sampled through stride convolution; after the discrete data input, the discrete data will be processed through the self-attention mechanism, then the discrete data is up-sampled through bilinear interpolation to improve the feature map resolution, and the discrete data is down-sampled through stride convolution; finally, the processed time series data and discrete data are cross-modal fused, and the trustworthiness score of the terminal device is outputted.
[0055] S108, in the case that the trustworthiness index value is greater than a preset index value, a data channel between the metering master station and the terminal device is constructed.
[0056] The metering master station refers to the core management platform of the power or energy metering system, which is responsible for the centralized collection, processing, storage and monitoring of data from terminal equipment (such as electricity meters, data acquisition terminals, etc.).
[0057] Optionally, if the credibility index value is greater than the preset index value, it indicates that the credibility of the terminal device is high, and it can be considered that the terminal device will not pose a threat to the information network. Therefore, a data channel can be established between the metering master station and the terminal device.
[0058] S110. Receive a data acquisition request sent by the terminal device through the data channel, and send the target data corresponding to the data acquisition request to the terminal device through the data channel.
[0059] Optionally, before sending the target data to the terminal device, the terminal device can be further verified based on the SM2 and SM3 algorithms. If the verification is successful, the target data can then be sent to the terminal device. The SM2 and SM3 algorithms are both commercial cryptographic algorithms released by the State Cryptography Administration. The SM2 algorithm is an asymmetric encryption algorithm based on elliptic curve cryptography, and the SM3 algorithm is a hash algorithm.
[0060] In the aforementioned data transmission method, an authentication request is received from a terminal device. This authentication request includes the terminal device's identification information, MAC address, and token information. If the identification information is the terminal device's native identifier, the MAC address is within a preset MAC address table, and the token information indicates the authentication request is legitimate, the resource type of the authentication request, as well as the terminal device's historical behavior patterns and current network environment data, are obtained. The resource type, historical behavior patterns, and current network environment data are input into a deep learning network model, and the terminal device's credibility index value is output. If the credibility index value is greater than a preset index value, a data channel is established between the metering master station and the terminal device. A data acquisition request is received from the terminal device through the data channel, and the target data corresponding to the data acquisition request is sent to the terminal device through the data channel. The method provided in this application ensures that authenticated terminal devices do not pose a threat to the information network, thereby guaranteeing the secure and stable operation of the information network.
[0061] In some embodiments, the data acquisition request includes identification information, a signature value of the identification information, and a first hash value. The signature value is generated by the terminal device signing the identification information based on a private key. The first hash value is generated by the terminal device inputting the identification information into a hash model. The private key is generated by the terminal device based on an asymmetric encryption model.
[0062] In some embodiments, such as Figure 3 As shown, the data acquisition request-related target data is sent to the terminal device via the data channel, including:
[0063] S302, verifying the signature value and the identification information based on the public key to obtain a first verification result, wherein the public key is generated by the terminal device based on an asymmetric encryption model.
[0064] S304, in a case where the first verification result indicates that the data acquisition request is from the terminal device and is not tampered, sending the target data to the terminal device based on the first hash value and a hash model.
[0065] Optionally, the signature process of the signature value is as follows:
[0066] σ = SM2Sign(M, SK)
[0067] In the formula, σ is the signature value, M is the identification information, and SK is the private key.
[0068] Optionally, the verification process of the signature value and the identification information based on the public key is as follows:
[0069] Result = SM2Verify(M, σ, PK)
[0070] In the formula, PK is the public key.
[0071] In the embodiment, the signature value and the identification information are verified based on the public key to obtain the first verification result, and the target data is sent to the terminal device based on the first verification result, which can ensure the security of data transmission.
[0072] In some embodiments, sending the target data to the terminal device based on the first hash value and the hash model comprises: inputting the identification information into the hash model to generate a second hash value; and in a case where the first hash value is the same as the second hash value, sending the target data to the terminal device.
[0073] Optionally, the generation process of the first hash value is as follows:
[0074] H = SM3Hash(M)
[0075] In the embodiment, the identification information is input into the hash model to generate the second hash value, and in a case where the first hash value is the same as the second hash value, the target data is sent to the terminal device, which can effectively prevent the target data from being tampered during transmission.
[0076] In some embodiments, before receiving the data acquisition request sent by the terminal device through the data channel, the method comprises: receiving a first digital certificate sent by the terminal device, and sending a second digital certificate to the terminal device; verifying the first digital certificate to obtain a second verification result, and receiving a third verification result generated by the terminal device after verifying the second digital certificate; and in the case that the second verification result indicates that the first digital certificate is valid and the third verification result indicates that the second digital certificate is valid, performing the step of receiving the data acquisition request sent by the terminal device through the data channel.
[0077] The digital certificate of the device is an electronic certificate based on a public key infrastructure, which is used to uniquely identify and verify the identity of the device, and to ensure the security and trustworthiness of communication between devices.
[0078] Optionally, the gateway and the terminal device can verify each other's digital certificates based on mTSL (Modified Transport Layer Security) technology.
[0079] In the embodiment, in the case that the second verification result indicates that the first digital certificate is valid and the third verification result indicates that the second digital certificate is valid, the step of receiving the data acquisition request sent by the terminal device through the data channel is performed, which can effectively ensure the security of data transmission.
[0080] In some embodiments, the method further comprises: obtaining a plurality of preset trustworthiness ranges; wherein different preset trustworthiness ranges correspond to different access permissions; determining the preset trustworthiness range in which the trustworthiness index value is located as a target trustworthiness range, and determining the access permission corresponding to the target trustworthiness range as the access permission of the terminal device.
[0081] Optionally, the gateway is provided with different access permissions for devices with different trustworthiness, and if the trustworthiness of a device is too low, the device does not have access permission.
[0082] In the embodiment, the preset trustworthiness range in which the trustworthiness index value is located is determined as the target trustworthiness range, and the access permission corresponding to the target trustworthiness range is determined as the access permission of the terminal device, which can effectively ensure the security of the information network.
[0083] In one embodiment, as shown in Figure 4 Another data sending method is provided, which introduces advanced two-way authentication encryption technology to build a secure and reliable transmission channel with full-process data encryption, thereby fully improving the security protection system of intelligent measurement data and significantly strengthening the defense-in-depth capability of the power network.
[0084] It should be understood that although each step in the flowchart involved in the above-described embodiments is shown in sequence according to the direction of the arrow, these steps are not necessarily executed in the order indicated by the arrow. Unless otherwise specified herein, the execution of these steps is not strictly limited in sequence, and these steps can be executed in other orders. Moreover, at least some of the steps in the flowchart involved in the above-described embodiments can include multiple steps or multiple stages, which are not necessarily executed at the same time but can be executed at different times, and the execution of these steps or stages is not necessarily sequential but can be performed alternately or alternately with at least some of the other steps or steps or stages in other steps. It can be understood that the steps in different embodiments can be freely combined as needed, and various non-contradictory schemes formed by the combination are within the scope of protection of the present application.
[0085] Based on the same inventive concept, the embodiments of the present application also provide a data sending device for implementing the above-mentioned data sending method. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme described in the above method, so the specific limitations in one or more data sending device embodiments provided below can refer to the limitations of the data sending method in the above text, which will not be repeated here.
[0086] In one exemplary embodiment, as shown in Figure 5 A data sending device 500 is provided, comprising a first receiving module 501, an obtaining module 502, an input module 503, a constructing module 504 and a second receiving module 505, wherein:
[0087] The first receiving module 501 is configured to receive an identity authentication request sent by a terminal device; the identity authentication request comprises identification information, a MAC address and token information of the terminal device.
[0088] The obtaining module 502 is configured to, in a case where the identification information is a native identification of the terminal device, the MAC address is located in a preset MAC address table, and the token information indicates that the identity authentication request is legal, obtain a resource type of the identity authentication request, and historical behavior patterns and current network environment data of the terminal device.
[0089] The input module 503 is configured to input the resource type, the historical behavior patterns and the current network environment data into a deep learning network model, and output a trustworthiness index value of the terminal device.
[0090] The constructing module 504 is configured to, in a case where the trustworthiness index value is greater than a preset index value, construct a data channel between a metering master station and the terminal device.
[0091] The second receiving module 505 is configured to receive a data acquisition request sent by the terminal device through the data channel, and send target data corresponding to the data acquisition request to the terminal device through the data channel.
[0092] In some embodiments, the data sending apparatus 500 is specifically configured to: the data acquisition request comprises the identification information, a signature value of the identification information, and a first hash value, the signature value is generated by the terminal device based on a private key signing the identification information, the first hash value is generated by the terminal device inputting the identification information into a hash model, and the private key is generated by the terminal device based on an asymmetric encryption model.
[0093] In some embodiments, the second receiving module 505 is further configured to verify the signature value and the identification information based on a public key to obtain a first verification result, wherein the public key is generated by the terminal device based on the asymmetric encryption model; and in a case where the first verification result indicates that the data acquisition request comes from the terminal device and is not tampered, the target data is sent to the terminal device based on the first hash value and the hash model.
[0094] In some embodiments, the second receiving module 505 is further configured to input the identification information into the hash model to generate a second hash value; and in a case where the first hash value is the same as the second hash value, the target data is sent to the terminal device.
[0095] In some embodiments, the data sending apparatus 500 is further configured to receive a first digital certificate sent by the terminal device, and send a second digital certificate to the terminal device; verify the first digital certificate to obtain a second verification result, and receive a third verification result generated by the terminal device after verifying the second digital certificate; and in a case where the second verification result indicates that the first digital certificate is valid, and the third verification result indicates that the second digital certificate is valid, the step of receiving the data acquisition request sent by the terminal device through the data channel is performed.
[0096] In some embodiments, the data sending apparatus 500 is further configured to obtain a plurality of preset credibility ranges; wherein different preset credibility ranges correspond to different access permissions; a preset credibility range in which the credibility index value is located is determined as a target credibility range, and an access permission corresponding to the target credibility range is determined as the access permission of the terminal device.
[0097] The various modules in the data sending apparatus can be implemented by software, hardware, or a combination thereof, in whole or in part. The various modules can be embedded in or independent of a processor in a computer device in hardware form, or stored in a memory in a computer device in software form, so as to be invoked and executed by a processor to perform operations corresponding to the various modules.
[0098] In an exemplary embodiment, a computer device, which can be a terminal, has an internal structure diagram as shown in Figure 6 The computer device includes a processor, a memory, an input / output interface, a communication interface, a display unit, and an input device. The processor, the memory, and the input / output interface are connected through a system bus, and the communication interface, the display unit, and the input device are connected to the system bus through the input / output interface. The processor of the computer device is configured to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for running the operating system and the computer program in the non-volatile storage medium. The input / output interface of the computer device is configured to exchange information between the processor and external devices. The communication interface of the computer device is configured to perform wired or wireless communication with external terminals. The wireless communication can be achieved through WIFI, mobile cellular network, Near Field Communication (NFC), or other technologies. The computer program is executed by the processor to implement a data sending method.
[0099] Those skilled in the art can understand that Figure 6 The structure shown in the above embodiments is only a block diagram of part of the structure related to the scheme of the present application, and does not constitute a limitation on the computer device to which the scheme of the present application is applied. Specifically, the computer device can include more or fewer components than those shown in the diagram, or combine certain components, or have a different arrangement of components.
[0100] In an embodiment, a computer device is also provided, which includes a memory and a processor. The memory stores a computer program, and the processor executes the computer program to implement the steps in the above method embodiments.
[0101] In an embodiment, a computer readable storage medium is provided, which stores a computer program. The computer program is executed by a processor to implement the steps in the above method embodiments.
[0102] In an embodiment, a computer program product is provided, which includes a computer program. The computer program is executed by a processor to implement the steps in the above method embodiments.
[0103] It should be noted that the user information (including but not limited to user equipment information, user personal information, etc.) and data (including but not limited to data for analysis, stored data, displayed data, etc.) involved in the present application are all information and data authorized by the user or authorized by all parties, and the collection, use and processing of related data need to comply with relevant regulations.
[0104] It can be understood by those skilled in the art that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing related hardware through a computer program. The computer program can be stored in a non-volatile computer readable storage medium. When the computer program is executed, it can include the processes of the above-mentioned embodiments of each method. In the embodiments provided in the present application, any reference to memory, database or other medium can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical storage, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration but not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM), etc. The database involved in the embodiments provided in the present application can include at least one of a relational database and a non-relational database. The non-relational database can include a distributed database based on a block chain, etc., without being limited thereto. The processor involved in the embodiments provided in the present application can be a general-purpose processor, a central processing unit, a graphics processing unit, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., without being limited thereto.
[0105] Any technical features in the above embodiments can be combined, and for the sake of brevity, not all possible combinations are described above, however, any combination of these technical features is deemed to be within the scope of the present application.
[0106] The above embodiments only express several implementation manners of the present application, and the description is relatively specific and detailed, but it should not be understood as a limitation on the patent scope of the present application. It should be pointed out that, for ordinary skilled persons in the art, several modifications and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the appended claims.
Claims
1. A data transmission method, characterized by, The method comprises: receiving an identity authentication request sent by a terminal device; the identity authentication request comprising identification information, a MAC address and token information of the terminal device; in a case where the identification information is a native identification of the terminal device, the MAC address is located in a preset MAC address table, and the token information indicates that the identity authentication request is legal, obtaining a resource type of the identity authentication request, and historical behavior patterns and current network environment data of the terminal device; inputting the resource type, the historical behavior patterns and the current network environment data into a deep learning network model to output a trustworthiness index value of the terminal device; in a case where the trustworthiness index value is greater than a preset index value, constructing a data channel between a metering master station and the terminal device; receiving a data acquisition request sent by the terminal device through the data channel, and sending target data corresponding to the data acquisition request to the terminal device through the data channel.
2. The method of claim 1, wherein, The data acquisition request comprises the identification information, and a signature value and a first hash value of the identification information, the signature value being generated by the terminal device based on a private key signing the identification information, the first hash value being generated by the terminal device inputting the identification information into a hash model, and the private key being generated by the terminal device based on an asymmetric encryption model.
3. The method of claim 2, wherein, The sending of the target data corresponding to the data acquisition request to the terminal device through the data channel comprises: verifying the signature value and the identification information based on a public key to obtain a first verification result, wherein the public key is generated by the terminal device based on the asymmetric encryption model; in a case where the first verification result indicates that the data acquisition request comes from the terminal device and has not been tampered with, sending the target data to the terminal device based on the first hash value and the hash model.
4. The method of claim 3, wherein, The sending of the target data to the terminal device based on the first hash value and the hash model comprises: inputting the identification information into the hash model to generate a second hash value; in a case where the first hash value is the same as the second hash value, sending the target data to the terminal device.
5. The method of claim 1, wherein, Before the receiving of the data acquisition request sent by the terminal device through the data channel, the method comprises: receiving a first digital certificate sent by the terminal device, and sending a second digital certificate to the terminal device; verifying the first digital certificate to obtain a second verification result, and receiving a third verification result generated by the terminal device after verifying the second digital certificate; in a case where the second verification result indicates that the first digital certificate is valid, and the third verification result indicates that the second digital certificate is valid, performing the step of receiving the data acquisition request sent by the terminal device through the data channel.
6. The method of claim 1, wherein, The method further comprises: obtaining a plurality of preset trustworthiness ranges; wherein different preset trustworthiness ranges correspond to different access permissions; The preset credibility range in which the credibility index value is located is determined as a target credibility range, and corresponding access permission of the target credibility range is determined as the access permission of the terminal device.
7. A data transmission device, characterized in that, The apparatus comprises: A first receiving module configured to receive an identity authentication request sent by a terminal device, wherein the identity authentication request comprises identification information, a MAC address and token information of the terminal device; An obtaining module configured to, in a case where the identification information is a native identification of the terminal device, the MAC address is located in a preset MAC address table, and the token information indicates that the identity authentication request is legal, obtain a resource type of the identity authentication request, and historical behavior mode and current network environment data of the terminal device; An inputting module configured to input the resource type, the historical behavior mode and the current network environment data into a deep learning network model, and output a credibility index value of the terminal device; A constructing module configured to, in a case where the credibility index value is greater than a preset index value, construct a data channel between a metering master station and the terminal device; A second receiving module configured to receive a data acquisition request sent by the terminal device through the data channel, and send target data corresponding to the data acquisition request to the terminal device through the data channel. 8.A computer device, comprising a memory and a processor, wherein the memory stores a computer program, and the computer device is configured to perform the method according to any one of claims 1-7. The processor executes the computer program to implement the steps of the method in any one of claims 1 to 6.
9. A computer readable storage medium having stored thereon a computer program, characterized in that, The computer program is executed by the processor to implement the steps of the method in any one of claims 1 to 6.
10. A computer program product comprising a computer program, characterized in that, The computer program is executed by the processor to implement the steps of the method in any one of claims 1 to 6.