Data transmission method and equipment

Abstract

The invention discloses a data transmission method and device, and the method is applied to a receiving end, and comprises the steps: obtaining query information, and generating corresponding query index information based on the semantics of the query information; the query index information and the data index information are compared to determine a transmission data identifier, and the data index information is generated based on semantic features of candidate data of the data end; and obtaining required target data according to the transmission data identifier, wherein the target data is data corresponding to the transmission data identifier in the candidate data of the data end.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of data transmission, and particularly relates to a data transmission method and device. BACKGROUND

[0002] In the related art, different electronic devices can transmit data to each other, that is, one electronic device sends its own data to another electronic device. At present, such data transmission depends on accurate path matching, that is, the party receiving the data needs to specify a specific storage path, and the party providing the data can find the local data based on the storage path and provide it to the party receiving the data. Such transmission method cannot meet the use requirements of users in some scenarios. SUMMARY

[0003] To this end, the present application discloses the following technical solutions:

[0004] The first aspect of the present application provides a data transmission method applied to a receiving end, and the method comprises the following steps:

[0005] Obtaining query information, and generating corresponding query index information based on the semantics of the query information;

[0006] Comparing the query index information and data index information to determine a transmission data identifier, wherein the data index information is generated based on the semantic features of candidate data of a data end;

[0007] Obtaining target data required according to the transmission data identifier, wherein the target data is data corresponding to the transmission data identifier in the candidate data of the data end.

[0008] Optionally, the step of obtaining target data required according to the transmission data identifier comprises at least one of the following:

[0009] In the data uploaded to a data center by the data end, obtaining data corresponding to the transmission data identifier as target data required;

[0010] Receiving data corresponding to the transmission data identifier sent by the data end as target data required;

[0011] In the case of establishing a communication connection with the data end, obtaining data collected in real time by a target module as target data required, wherein the target module is a data collection module corresponding to the transmission data identifier in the data end.

[0012] Optionally, the step of comparing the query index information and the data index information to determine the transmission data identifier comprises:

[0013] comparing the query index information and the data index information, determining data identifiers corresponding to the data index information matched with the query index information as initial data identifiers;

[0014] obtaining permission information corresponding to the initial data identifiers, the permission information representing access permissions of the receiving end to data corresponding to the initial data identifiers;

[0015] determining a transmission data identifier from the initial data identifiers according to the permission information, the transmission data identifier being an initial data identifier for which the receiving end has access permissions to corresponding data.

[0016] Optionally, the obtaining of the permission information corresponding to the initial data identifiers comprises:

[0017] performing behavior detection according to log information of the receiving end to obtain a detection result representing security of the receiving end, the log information representing instructions executed by the receiving end in a preset historical period;

[0018] determining the permission information corresponding to the initial data identifiers according to the detection result.

[0019] Optionally, the method further comprises:

[0020] obtaining trustworthiness proof information corresponding to the initial data identifiers, the trustworthiness proof information representing whether a data end corresponding to the initial data identifiers is a trusted data end, the data end corresponding to the initial data identifiers referring to a data end providing data corresponding to the initial data identifiers;

[0021] The determining of the transmission data identifier from the initial data identifiers according to the permission information comprises:

[0022] if the trustworthiness proof information represents that the data end corresponding to the initial data identifiers is a trusted data end, determining the transmission data identifier from the initial data identifiers according to the permission information.

[0023] Optionally, the obtaining of the required target data according to the transmission data identifier comprises:

[0024] determining a transmission performance index according to bandwidth information, delay information and energy consumption information of the data end;

[0025] determining a target transmission mode according to the transmission performance index, and obtaining the required target data based on the target transmission mode.

[0026] Optionally, the obtaining of the required target data based on the target transmission mode comprises at least one of:

[0027] Based on the communication connection with the data terminal, receiving the transmission data identifier directly sent by the data terminal, and obtaining the target data corresponding to the transmission data identifier;

[0028] Receiving the data fragment from the data terminal forwarded by the relay node, and obtaining the target data composed of the data fragment;

[0029] Scanning the target image generated by the data terminal based on the target data, and decoding the target data based on the scanning result.

[0030] Optionally, the target data required is obtained according to the transmission data identifier, including:

[0031] Obtaining the encrypted data encrypted based on the target encryption strategy provided by the data terminal according to the transmission data identifier;

[0032] Processing the encrypted data based on the decryption strategy corresponding to the target encryption strategy to obtain the target data required;

[0033] The target encryption strategy is related to the bandwidth information, delay information, energy consumption information and log information of the data terminal, and the log information represents the instructions executed by the receiving terminal in a preset historical period.

[0034] Optionally, the target data required is obtained according to the transmission data identifier, including:

[0035] Displaying a transmittable list, the transmittable list including the transmission data identifier;

[0036] In response to an instruction for at least one of the transmission data identifiers, sending a target data request to the data terminal;

[0037] Receiving the target data fed back by the data terminal in response to the target data request.

[0038] The second aspect of the application provides an electronic device applied to a receiving terminal, including:

[0039] A memory for storing a computer program;

[0040] A processor for executing the computer program to perform:

[0041] Obtaining query information, and generating corresponding query index information based on the semantics of the query information;

[0042] Comparing the query index information with data index information to determine a transmission data identifier, the data index information being generated based on the semantic features of candidate data of a data terminal;

[0043] According to the transmission data identifier, target data required is obtained, the target data being data corresponding to the transmission data identifier in candidate data of the data end. BRIEF DESCRIPTION OF DRAWINGS

[0044] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the drawings needed to be used in the embodiments or prior art description will be briefly introduced. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without creative labor on the basis of the provided drawings.

[0045] Figure 1 is a flowchart of a data transmission method provided by an embodiment of the present application;

[0046] Figure 2 is a schematic diagram of an application scenario of a data transmission method provided by an embodiment of the present application;

[0047] Figure 3 is a structural schematic diagram of an electronic device provided by an embodiment of the present application. DETAILED DESCRIPTION

[0048] The technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only some of the embodiments of the present application, not all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor fall within the scope of protection of the present application.

[0049] The present embodiment provides a data transmission method, applied to a receiving end, as shown in the figure, the method can include the following steps. Figure 1

[0050] S101, obtain query information, and generate corresponding query index information based on the semantics of the query information.

[0051] S102, compare the query index information and data index information to determine a transmission data identifier, the data index information being generated based on the semantic features of candidate data of the data end.

[0052] S103, according to the transmission data identifier, obtain target data required, the target data being data corresponding to the transmission data identifier in candidate data of the data end.

[0053] ​The embodiment has the beneficial effect that by comparing the data index information and the query index information generated based on the semantics of the query information, the scheme can directly query the transmission data identifier of the candidate data corresponding to the semantics of the query information that matches the semantics of the query information, and then obtain the target data that matches the semantics of the query information based on the transmission data identifier, so that the receiving end can directly obtain the corresponding data based on the semantics of the query information without the need for the user to provide a specific storage path, thereby improving the efficiency and convenience of the receiving end in obtaining data.

[0054] The technical solutions of the present application will be described in detail below in conjunction with embodiments, Figure 1 is a schematic flowchart of a data transmission method provided by the embodiment of the present application, and the data transmission method can be applied to a receiving end, Figure 1 The method in S101-S103.

[0055] S101, obtain query information, and generate corresponding query index information based on the semantics of the query information.

[0056] The execution subject of the data transmission method of the embodiment can be any terminal electronic device as a receiving end, for example, a smart phone, a notebook computer, a tablet computer, etc. electronic device, specifically, it can be an intelligent agent (AI Agent) module configured on the receiving end, or other modules on the electronic device. The intelligent agent module is a software module configured on the electronic device, which can call a data processing model with natural language understanding capability when running, such as calling a large language model (Large Language Model, LLM) to analyze the information input into the electronic device, to perform corresponding operations based on the semantics of the input information.

[0057] The query information can be natural language information obtained through any input method such as text input, voice recognition, image recognition, etc. For example, the query information can be the information "find the design draft with a blue cover" obtained by recognizing the user's voice.

[0058] In S101, the intelligent agent module of the receiving end can call the data processing model to process the query information and obtain the query index information related to the semantics of the query information. The query index information can be an N-dimensional vector, where N is a predetermined integer determined by the specific structure of the data processing model, such as 128, 256, etc.

[0059] The data processing model can be deployed locally on the receiving end or on a server. In the case of deployment on a server, the receiving end can send the query information to the server and receive the query index information fed back by the server.

[0060] S102, compare the query index information and the data index information to determine the transmission data identifier, the data index information is generated based on the semantic features of the candidate data of the data end.

[0061] The data end refers to other terminal electronic devices different from the receiving end, for example, the receiving end is a smart phone A, and the data end can be a notebook computer B, another smart phone C or other electronic devices.

[0062] Each data end can provide at least one candidate data, which can be data stored locally by the data end, or real-time data collected by the data end based on the data collection module.

[0063] The number of data ends is not limited, for example, in Figure 2 There can be two data ends of device B and device C, and device A as the receiving end.

[0064] For each data end, the data end can process each candidate data that the data end can provide using a data processing model to obtain an N-dimensional feature vector related to the semantics of the candidate data, and use the N-dimensional feature vector as the data index information corresponding to the candidate data.

[0065] The data processing model for generating data index information and the data processing model for generating query index information can have the same model structure and parameters, that is, the two models are exactly the same, so that the comparison result between the query index information and the data index information accurately reflects the semantic correlation between the query information and the candidate data.

[0066] If the candidate data is data already stored in the data end, the data processing model can be used to directly process the candidate data to generate its data index information; if the candidate data is real-time data collected by the data end through a related data collection module, the data processing model can be used to process the attributes of the data collection module corresponding to the candidate data to generate its data index information.

[0067] For example, if the candidate data is a document data, the data processing model can be used to process the document data to obtain corresponding data index information, which can reflect the type of the document data (such as design manuscript, poster, operation manual or other types), and can also reflect other attributes of the document data, such as cover color, page number, language, etc.

[0068] If the candidate data is real-time video data collected by the rear camera of the data end, the data processing model can be used to process the attributes of the rear camera of the data end to obtain corresponding data index information, which can reflect the device type, device identifier of the data end, and the resolution, focal length and other parameters of the rear camera of the data end.

[0069] The data terminal can be configured with an intelligent agent module, and the candidate data corresponding to the data index information is generated based on the intelligent agent module.

[0070] Each candidate data corresponds to a data identifier, which can uniquely identify the corresponding candidate data in at least one candidate data provided by at least one data terminal. The specific form and content of the data identifier are not limited in this embodiment. As an example, the data identifier of a candidate data can include the device identifier of the data terminal providing the candidate data and the storage path of the candidate data in the corresponding data terminal, can include the storage path of the candidate data in the data center, or can include the device identifier of the data terminal providing the candidate data and the module identifier of the data acquisition module used to acquire the candidate data (such as the identifier of the rear camera).

[0071] The data index information and the data identifier of the candidate data of each data terminal can be correspondingly stored in the pre-established fingerprint library. In combination with Figure 2 the example, the fingerprint library can include the data index information and the corresponding data identifier of the candidate data that device B can provide, and the data index information and the corresponding data identifier of the candidate data that device C can provide.

[0072] The above-mentioned fingerprint library can be stored in the receiving terminal, or can also be stored in the data center between the receiving terminal and the data terminal. For the latter case, the receiving terminal can access the fingerprint library of the data center in S102 to compare the query index information with the data index information stored in the fingerprint library.

[0073] The data center is equivalent to a server device that can connect the receiving terminal and each data terminal. The data center can also be configured with an intelligent agent module to interact with the receiving terminal and the data terminal based on the intelligent agent module.

[0074] The way of transmitting the data identifier is not limited by comparing the query index information and the data index information.

[0075] One optional way is to calculate the similarity between the query index information and each data index information in the fingerprint library, determine the data index information that meets the matching condition as the data index information matched with the query index information, and determine the data identifier corresponding to the matched data index information as the transmission data identifier. The matching condition can be that the similarity is greater than a preset similarity threshold, for example, greater than 0.85 or other threshold.

[0076] For example, after calculation, the similarity corresponding to the data index information 1 and the similarity corresponding to the data index information 2 both meet the matching condition, so it is determined that the transmission data identifier includes the data identifier 1 corresponding to the data index information 1 and the data identifier 2 corresponding to the data index information 2.

[0077] The method for calculating the similarity of the query index information and the data index information is not limited, for example, the similarity of the query index information and the data index information can be calculated by using a locality-sensitive hashing (LSH) algorithm, or can be calculated by using other algorithms for calculating similarity in the related art, and the calculation principle of the LSH algorithm can be referred to the related art, and is not described herein.

[0078] S103, obtaining the target data required according to the transmission data identifier, the target data being data corresponding to the transmission data identifier in the candidate data of the data end.

[0079] If the transmission data identifier is only one, the receiving end can directly obtain the candidate data corresponding to the transmission data identifier as the target data required.

[0080] If the transmission data identifier is multiple, the receiving end can determine one of the multiple transmission data identifiers, and obtain the candidate data corresponding to the transmission data identifier as the target data required.

[0081] In the method of the embodiment, the data end and the receiving end are not fixed, that is, at a moment, the device A can be the receiving end to obtain the target data provided by the device B, and at another moment, the device B can also be the receiving end to obtain the target data provided by the device A or the device C. Thus, asynchronous data collaboration and sharing can be realized among multiple electronic devices.

[0082] The embodiment has the beneficial effect that after obtaining the query information, the transmission data identifier of the candidate data whose semantics match the semantics of the query information is directly queried by comparing the query index information and the data index information, and then the target data whose semantics match the semantics of the query information is obtained based on the transmission data identifier, for example, in the case that the query information is "find the design draft with blue cover", the design draft data with blue cover provided by a data end can be obtained as the target data. Thus, the receiving end can obtain the data meeting the user's demand based on the semantics of the query information input by the user, without the user providing a specific storage path, and the efficiency and convenience of the receiving end to obtain data are improved.

[0083] On the other hand, in the embodiment, the data end stores the data index information corresponding to the candidate data in the fingerprint library, but does not store the original candidate data, and only provides the corresponding target data after the transmission data identifier is determined by the receiving end. In this way, the information stored in the fingerprint library can be blurred, data leakage can be avoided, and security is improved.

[0084] Each data terminal can upload all or part of candidate data provided by itself to the data center for storage. When the target data is obtained, the data center can or can not store the target data, and the target data can be pre-generated and stored data or real-time data collected by the data collection module of the data terminal.

[0085] According to different storage locations and types of the target data, the manner of obtaining the target data in S103 can include at least one of the following:

[0086] In the first obtaining manner, the data corresponding to the transmission data identifier is obtained from the data uploaded by the data terminal to the data center as the target data required.

[0087] In the second obtaining manner, the data corresponding to the transmission data identifier sent by the data terminal is received as the target data required.

[0088] In the third obtaining manner, when the communication connection is established with the data terminal, the data collected by the target module in real time is obtained as the target data required, the target module being the data collection module corresponding to the transmission data identifier in the data terminal.

[0089] When it is determined that the target data to be obtained is online data, the receiving terminal can obtain the target data based on the first obtaining manner. In this case, the receiving terminal can access the data center, send the transmission data identifier to the data center, and receive the target data obtained by the data center based on the transmission data identifier. The online data refers to the candidate data uploaded by the data terminal to the data center.

[0090] For example, the device B and the device C upload data to the data center in advance. The data center can pre-process the uploaded data, for example, generate index information corresponding to the data, and store the index information and the data correspondingly. After the device A as the receiving terminal sends the transmission data identifier to the data center, the data center queries the index information based on the transmission data identifier to determine the target data corresponding to the transmission data identifier, and sends the target data to the device A.

[0091] In a case where it is determined that the target data to be obtained belongs to offline data, the receiving end can obtain the target data based on the second obtaining manner. In this case, the receiving end can access the data end to which the target data belongs, send the transmission data identifier to the data end, and then obtain the target data fed back by the data end based on the transmission data identifier. Offline data refers to candidate data that is only stored in the local memory of the data end and has not been uploaded to the data center. For example, the intelligent agent module of device A accesses the intelligent agent module of device B, sends the transmission data identifier to the intelligent agent module of device B, and the intelligent agent module of device B queries offline data stored locally in device B based on the transmission data identifier, and feeds back the target data corresponding to the transmission data identifier obtained by the query to the intelligent agent module of device A.

[0092] In a case where it is determined that the target data to be obtained belongs to real-time data provided by the data collection module of the data end, the receiving end can obtain the target data based on the third obtaining manner. For example, if the target data is real-time video stream data captured by the camera of notebook computer B in real time, the target data can be obtained based on the third obtaining manner.

[0093] In this case, the intelligent agent module of the receiving end can access the intelligent agent module of the data end that provides the target data, establish a communication connection based on the intelligent agent module of the data end and the target module of the data end, and then receive real-time data collected by the target module of the data end as the target data in real time based on the communication connection. For example, the intelligent agent module of device A accesses the intelligent agent module of device B, establishes a communication connection based on the intelligent agent module of device B and the camera module of device B, and then receives real-time video stream data collected by the camera module of device B as the target data in real time.

[0094] The above-mentioned several obtaining manners have the following advantages. On the one hand, through the second and third obtaining manners, the receiving end can directly communicate with the data end without passing through the data center to directly obtain data locally in the data center, so that part of the relatively sensitive data of the data end can be avoided to be stored in the data center, and the data security is improved. On the other hand, through the first obtaining manner, the receiving end can directly obtain the target data from the data center, so that when obtaining less sensitive data, the receiving end does not need to interact with the data end, and the load of the data end is reduced. In summary, through the above-mentioned obtaining manners, the security of part of the data of the data end can be ensured, and the network load of the data end can be relieved to a certain extent.

[0095] Optionally, in S102, the receiving end can also determine the transmission data identifier in the following manner:

[0096] Compare the query index information and the data index information, and determine the data identifier corresponding to the data index information matched with the query index information as the initial data identifier;

[0097] The initial data identifier is associated with corresponding permission information, and the permission information indicates an access permission of the receiving end to data corresponding to the initial data identifier.

[0098] According to the permission information, a transmission data identifier is determined from the plurality of initial data identifiers, and the transmission data identifier is an initial data identifier for which the receiving end has an access permission to corresponding data.

[0099] The manner of determining the initial data identifier is described above with reference to the manner of determining the transmission data identifier based on the similarity between the query index information and the data index information, and thus is not described herein.

[0100] The permission information corresponding to one initial data identifier can indicate whether the receiving end has a permission to access candidate data corresponding to the initial data identifier. For example, the permission information of the initial data identifier 1 can indicate that the receiving end has a permission to access the candidate data 1, and the permission information of the initial data identifier 2 can indicate that the receiving end does not have a permission to access the candidate data 2.

[0101] The method of the embodiment can control the data obtained by the receiving end, and only allow the receiving end to obtain data with a permission to access, and prohibit the receiving end to obtain data without a permission to access, thereby improving the security of the data. In addition, the transmission data identifier is determined based on the access permission, which can avoid the receiving end from requesting data without a permission to access and being rejected by the data center or the data end, reduce the number of interactions between the receiving end and the data center or the data end, and improve the efficiency of the receiving end to obtain data with a permission to access.

[0102] In an optional embodiment, the manner of obtaining the permission information of one initial data identifier can be as follows:

[0103] The fingerprint library can record the permission requirement corresponding to each data identifier, and the permission requirement indicates which permission levels are allowed to access the candidate data corresponding to the data identifier. In addition, the receiving end can be preconfigured with a permission level, and the permission level of the receiving end and the permission requirement of the initial data identifier are compared to determine the permission information of the initial data identifier.

[0104] For example, the permission requirement corresponding to the initial data identifier 1 is to allow a first permission level and a second permission level to access, and the permission level of the receiving end is the second permission level. Therefore, it can be determined that the permission information of the initial data identifier 1 is that the receiving end has a permission to access the candidate data 1.

[0105] The permission requirement corresponding to the initial data identifier 2 is to allow only the first permission level to access, and the permission level of the receiving end is the second permission level. Therefore, it can be determined that the permission information of the initial data identifier 2 is that the receiving end does not have a permission to access the candidate data 2.

[0106] In an optional embodiment, the initial data identifier corresponding permission information can also be determined based on the following manner:

[0107] According to the log information of the receiving end, the behavior detection is performed to obtain a detection result representing the security of the receiving end, and the log information represents instructions executed by the receiving end in a preset historical period;

[0108] According to the detection result, the initial data identifier corresponding permission information is determined.

[0109] In this embodiment, the intelligent agent module of the receiving end can read the log information of the receiving end in a preset time period. The preset time period can be set as needed and is not limited. For example, the log information in the last 1 hour or the log information in the last 12 hours can be read.

[0110] After reading the log information, the intelligent agent module calls a pre-set abnormality detection model to process the log information, and obtains a detection result representing the security of the receiving end in the preset time period.

[0111] The detection result can have multiple forms and is not limited. As some examples, the detection result can include the probability of the receiving end being attacked by the network in the preset time period corresponding to the log information, or the detection result can include whether the receiving end is attacked by the network in the corresponding preset time period, and the type and number of network attacks, or the detection result can include whether the receiving end has a vulnerability that may cause data to be stolen in the corresponding preset time period, and the number and type of vulnerabilities, etc.

[0112] The abnormality detection model can be the data processing model used by the receiving end to generate the query index information, or can be other neural network models different from the data processing model. The abnormality detection model can be trained based on pre-collected sample log information, and can determine the detection result of the security of the device based on the input log information of any device. Thus, the intelligent agent module can determine the initial data identifier corresponding permission information according to the detection result.

[0113] Based on the detection result, more data can be allowed to be accessed by the receiving end when the security of the receiving end is good, so as to facilitate the user to query various data on the receiving end, and the data that can be accessed by the receiving end can be limited when the security of the receiving end is poor, thereby improving the security of the data of the data end.

[0114] In some specific embodiments, the manner of determining the initial data identifier corresponding permission information according to the detection result can be:

[0115] obtaining a pre-set initial permission level of the receiving end, determining whether to lower the initial permission level or keep the initial permission level according to the detection result, if it is determined to lower the initial permission level, determining the permission information based on the lowered permission level, and if it is determined to keep the initial permission level, determining the permission information based on the initial permission level. The way of determining the permission information based on the lowered permission level and the way of determining the permission information based on the initial permission level are described above, and will not be repeated here.

[0116] Lowering the initial permission level means adjusting the initial permission level to a permission level corresponding to a lower permission. For example, it is assumed that there are four permission levels, i.e., a first permission level, a second permission level, a third permission level and a fourth permission level, and the permission of the first permission level is the highest and the permission of the fourth permission level is the lowest. If the initial permission level of the receiving end is the second permission level, the permission level of the receiving end can be lowered to the third permission level or the fourth permission level.

[0117] If the detection result meets a certain security condition, the initial permission level can be kept, and if the detection result does not meet the security condition, the initial permission level can be lowered. The lower the security of the receiving end is, the greater the lowering range is.

[0118] For example, if the detection result includes a probability of being attacked by a network, the probability less than a pre-set threshold value means that the detection result meets the security condition, and the probability greater than or equal to the threshold value means that the detection result does not meet the security condition. The greater the probability is, the lower the security is, and the greater the lowering range is. If the detection result includes whether the receiving end is attacked by a network, and the type and number of network attacks, if the receiving end is not attacked by a network, the security condition is met, and if the receiving end is attacked by a network, the security condition is not met. The more the type and number of network attacks are, the lower the security is, and the greater the lowering range is. If the detection result includes whether there is a vulnerability, and the type and number of vulnerabilities, if there is no vulnerability, the security condition is met, and if there is a vulnerability, the security condition is not met. The more the type and number of vulnerabilities are, the lower the security is, and the greater the lowering range is.

[0119] The embodiment has the beneficial effect that the permission level of the receiving end is dynamically adjusted according to the security of the receiving end, and when the security of the receiving end is poor, the permission level of the receiving end is lowered to prevent the receiving end from accessing some sensitive data, thereby improving the security of the data.

[0120] In some optional embodiments, the method of the embodiment can further include:

[0121] obtain the trustworthiness proof information corresponding to the initial data identifier; the trustworthiness proof information represents whether the data end corresponding to the initial data identifier belongs to a trusted data end; the data end corresponding to the initial data identifier refers to a data end providing data corresponding to the initial data identifier;

[0122] According to the permission information, the transmission data identifier is determined from the plurality of initial data identifiers.

[0123] If the trustworthiness proof information represents that the data end corresponding to the initial data identifier belongs to a trusted data end, the transmission data identifier is determined from the plurality of initial data identifiers according to the permission information.

[0124] In this embodiment, the receiving end can send a verification request to each data end corresponding to each initial data identifier to receive the trustworthiness proof information fed back by each data end.

[0125] For example, by comparing the query index information and the data index information, 10 initial data identifiers are obtained, and the candidate data corresponding to the 10 initial data identifiers are provided by devices B, C and D respectively. Therefore, the device A as the receiving end can send a verification request to the devices B, C and D respectively, and receive the trustworthiness proof information fed back by the device B, the trustworthiness proof information fed back by the device C and the trustworthiness proof information fed back by the device D.

[0126] For any data end, the data end can generate its own trustworthiness proof information based on the zero trust architecture and send it to the receiving end. The receiving end verifies the received trustworthiness proof information based on the zero trust architecture to determine whether the data end belongs to a trusted data end. The generation and verification method of the trustworthiness proof information is not limited.

[0127] Taking the device A as the receiving end and the device B as the data end as an example, the intelligent agent module of the device B collects information capable of uniquely representing the identity of the device B as the trustworthiness proof information in response to the verification request, such as collecting any one or more of the key, certificate, hardware feature, device identifier and the like of the device B as the trustworthiness proof information, and then sending the trustworthiness proof information to the intelligent agent module of the device A;

[0128] The intelligent agent module of the device A compares the trustworthiness proof information of the device B with the information pre-registered in the preset trusted device list. If the trustworthiness proof information of the device B can be successfully matched with at least one item of information in the trusted device list, it can be determined that the device B belongs to a trusted data end. If the trustworthiness proof information of the device B fails to match with each item of information in the trusted device list, it can be determined that the device B belongs to an untrusted data end.

[0129] After the trusted data end is determined, the transmission data identifier can be determined only from the initial data identifier corresponding to the trusted data end, and the initial data identifier corresponding to the untrusted data end can be discarded directly.

[0130] In combination with the foregoing example, it is assumed that device B corresponds to initial data identifiers 1 to 3, that is, the candidate data corresponding to the initial data identifiers 1 to 3 is provided by device B, and by analogy, device C corresponds to initial data identifiers 4 to 7, and device D corresponds to initial data identifiers 8 to 10. If it is determined that device B and device D belong to the trusted data end, and device C belongs to the untrusted data end, then when the receiving end determines the transmission data identifier, the transmission data identifier is determined only from the initial data identifiers 1 to 3 and the initial data identifiers 8 to 10, and the initial data identifiers 4 to 7 can be discarded directly.

[0131] Through the method of the foregoing embodiment, it can be ensured that the receiving end only receives the target data provided by the trusted data end and does not receive the data provided by the untrusted data end, thereby avoiding information leakage caused by the receiving end receiving unsafe data.

[0132] Optionally, the target data required is obtained according to the transmission data identifier, including:

[0133] The transmission performance index is determined according to the bandwidth information, the delay information, and the energy consumption information of the data end;

[0134] The target transmission mode is determined according to the transmission performance index, so as to obtain the target data required based on the target transmission mode.

[0135] Before the target data is obtained, if it is determined that the target data does not exist in the data center and needs to be obtained from the data end, the intelligent agent module of the receiving end can negotiate with the intelligent agent module of the target data end in the foregoing manner, so as to obtain the target data based on the target transmission mode. The target data end refers to the data end that provides the target data.

[0136] In this embodiment, the intelligent agent module of the receiving end can send a trigger message to the intelligent agent module of the target data end, and the intelligent agent module of the target data end obtains the current bandwidth information, the delay information, and the energy consumption information of the target data end in response to the trigger message, and determines the transmission performance index based on these information.

[0137] The transmission performance index represents the network quality between the target data end and the receiving end, and the greater the transmission performance index, the better the network quality, and the smaller the transmission performance index, the worse the network quality.

[0138] The manner of determining the transmission performance index is not limited, and as an example, the current bandwidth information, the delay information, and the energy consumption information of the target data end can be calculated to obtain the transmission performance index QoE based on the following formula (1).

[0139] QoE = P1 * bandwidth information + P2 * delay information + P3 * energy consumption information, (1).

[0140] The bandwidth information can be the bandwidth currently available to the target data end, and the unit can be megabytes (MB). The delay information can be the average delay duration of the target data end at present, and the unit can be milliseconds (ms). The energy consumption information can be the power of the network transmission module of the target data end at present, and the unit can be watts (W).

[0141] P1, P2 and P3 are preset weight coefficients, which can be fixed values or dynamically changed according to the type of target data. For example, when the target data is real-time data collected by a data acquisition module, the delay information has a greater impact on data transmission, and P2 can be set to a larger value. When the target data is file data pre-stored by the data end, the bandwidth information has a greater impact on data transmission, and P1 can be set to a larger value.

[0142] After obtaining the transmission performance index, the intelligent agent module of the target data end determines the target transmission mode based on the preset correspondence between the transmission performance index and the transmission mode, and notifies the intelligent agent module of the receiving end of the target transmission mode. Therefore, the intelligent agent module of the receiving end can obtain the target data based on the target transmission mode. Based on the method of the above embodiment, the network quality between the receiving end and the data end can be analyzed according to the bandwidth information, delay information and energy consumption information of the data end, so that the appropriate transmission mode can be determined according to the network quality. The data can be quickly transmitted between the receiving end and the data end when the network quality is good, and the data can be stably transmitted to the receiving end when the network quality is poor, so as to ensure uninterrupted data transmission and meet the demand of the receiving end to obtain target data under different network quality.

[0143] In some optional embodiments, the way to determine the target transmission mode can be to preset a plurality of different transmission modes and the performance index interval corresponding to each transmission mode. After obtaining the transmission performance index of the data end, the performance index interval in which the transmission performance index is located is determined, and then the transmission mode corresponding to the performance index interval is taken as the target transmission mode.

[0144] Optionally, the above method of determining the target transmission mode can also be performed by the intelligent agent module of the receiving end.

[0145] Optionally, the target transmission mode can be any one of the following transmission modes:

[0146] Transmission mode one: based on the communication connection with the data end, the target data corresponding to the transmission data identifier directly sent by the receiving data end is sent;

[0147] The transmission mode two is to receive the data fragments from the data end forwarded by the relay node to obtain the target data composed of the data fragments.

[0148] The transmission mode three is to scan the target images generated by the data end based on the target data to decode the target data based on the scanning result.

[0149] The transmission mode one can be applied to a case where a transmission performance index is high and a network quality is good, for example, a case where a bandwidth is high, a delay is low, and an energy consumption is low. In this case, the receiving end and the data end can transmit the target data in a P2P direct transmission manner according to the transmission mode one, that is, a communication link is directly established between the two ends, and the data end directly transmits the target data to the receiving end through the communication link.

[0150] The transmission mode two can be applied to a case where a transmission performance index is low and a network quality is poor, for example, a case where a bandwidth fluctuates greatly, a delay is high, and an energy consumption is normal. In this case, the receiving end and the data end can indirectly transmit the target data through one or more relay nodes according to the transmission mode two, and the target data is fragmented for transmission to prevent data loss, that is, the data end transmits the data fragments to the relay node, the relay node forwards the data fragments to the receiving end, and the receiving end combines the received multiple data fragments to obtain the target data.

[0151] The transmission mode three can be applied to a case where a transmission performance index is extremely low and a network quality is extremely poor, for example, a case where there is no network connection, devices are physically isolated, or a bandwidth is extremely low. In this case, the receiving end and the data end can transmit the target data in an encrypted two-dimensional code optical transmission manner according to the transmission mode three, that is, the data end generates target images based on the target data, the target images can include one or more two-dimensional code images, and then the receiving end scans the target images to decode the scanned target images to obtain the target data.

[0152] Optionally, the target data is obtained according to the transmission data identifier, including:

[0153] The encrypted data provided by the data end and encrypted based on a target encryption strategy is obtained according to the transmission data identifier.

[0154] The encrypted data is processed based on a decryption strategy corresponding to the target encryption strategy to obtain the target data.

[0155] The target encryption strategy is related to bandwidth information, delay information, energy consumption information, and log information of the data end, and the log information represents instructions executed by the receiving end in a preset historical period.

[0156] In this embodiment, a plurality of encryption strategies with different security levels can be set in advance. The higher the security level of an encryption strategy, the more difficult it is to crack the encrypted data, but the more time it takes to encrypt. The lower the security level of an encryption strategy, the easier it is to crack the encrypted data, but the less time it takes to encrypt.

[0157] Each encryption strategy can correspond to a performance index interval and a detection result. The better the security corresponding to the detection result, the lower the security level of the corresponding encryption strategy. The worse the security corresponding to the detection result, the higher the security level of the corresponding encryption strategy. The larger the median of the performance index interval, the faster the data transmission. At this time, more time can be allowed for encryption, so the higher the security level of the corresponding encryption strategy. The smaller the median of the performance index interval, the slower the data transmission. At this time, as little time as possible is needed for encryption to ensure data transmission efficiency, so the lower the security level of the corresponding encryption strategy.

[0158] Other optional corresponding relationships can also be set between the encryption strategy, the performance index interval, and the detection result as needed, not limited to the above examples.

[0159] On the basis of the above plurality of encryption strategies, the intelligent agent module of the receiving end can obtain a detection result representing the security of the receiving end according to log information, synchronize the detection result to the intelligent agent module of the target data end, obtain the transmission performance index of the target data end, and determine a target encryption strategy suitable for the current situation in the plurality of encryption strategies in combination with the detection result. After determining the target encryption strategy, the intelligent agent module of the target data end can synchronize the target encryption strategy to the receiving end, so that the receiving end can decrypt according to the corresponding decryption strategy. The specific obtaining method of the detection result and the transmission performance index is described in the above embodiments.

[0160] Through the method of this embodiment, the receiving end and the target data end can dynamically select a suitable encryption strategy according to network quality and security, which can meet the demand for data security and complete the transmission of target data as soon as possible.

[0161] Optionally, before each transmission of target data, the intelligent agent module of the target data end can generate a unique access token applicable only to this transmission, synchronize the unique access token to the receiving end, and encrypt based on the unique access token at the target data end. The receiving end decrypts based on the unique access token. After this transmission is completed, the unique access token is destroyed by both parties. In this way, encryption transmission based on dynamic credentials is realized, further improving security.

[0162] Optionally, the target data required is obtained according to the transmission data identifier, including:

[0163] displaying a transmittable list, the transmittable list including a transmission data identifier;

[0164] sending a target data request to the data end in response to an instruction for the at least one transmission data identifier;

[0165] receiving target data fed back by the data end in response to the target data request.

[0166] The intelligent agent module of the receiving end can display the at least one transmission data identifier on a display screen of the receiving end, and can also synchronously display description information of candidate data corresponding to each transmission data identifier, so that the user can better select the transmission data identifier. For example, the candidate data corresponding to the transmission data identifier 1 is a document data, the content of which is a poster of a certain theme, and the data amount is 5 MB. When the transmission data identifier 1 is displayed in the transmittable list, the following information can also be displayed: the data type is document data, the content is a poster of a certain theme, and the data amount is 5 MB.

[0167] After the transmittable list is displayed, the receiving end can respond to a selection instruction of the user for at least one transmission data identifier in the list, determine the selected transmission data identifier as a target transmission data identifier, send a target data request to a target data end that provides data corresponding to the target transmission data identifier, and the target data request can carry the target transmission data identifier. After the target data request is received by the target data end, the target data stored locally can be found according to the target transmission data identifier and sent to the receiving end.

[0168] The above transmission method can also be applicable to the case where the receiving end obtains target data from the data center, and the specific implementation process is the same as above, which will not be described herein again.

[0169] Optionally, when the target data is transmitted between the receiving end and the data end, and when the target data is transmitted between the receiving end and the data center, a digital watermark and / or a preset biological feature (for example, a voiceprint feature, a fingerprint feature) can be embedded in the transmitted data, so that the receiving end can verify the digital watermark and / or the biological feature in the received data after receiving the data, thereby ensuring that the data source is credible.

[0170] Therefore, the receiving end can verify whether the received target data is from a credible data end or data center, avoid receiving and processing unsafe data transmitted by an untrustworthy third party other than the data end and the data center, and improve the security of the receiving end.

[0171] The embodiment of the present application also provides an electronic device applied to the receiving end, please refer to Figure 3 The device can include:

[0172] The memory 301 is configured to store a computer program;

[0173] The processor 302 is configured to execute the computer program to perform:

[0174] obtain query information, and generate corresponding query index information based on semantics of the query information;

[0175] compare the query index information and data index information to determine a transmission data identifier, the data index information being generated based on semantic features of candidate data at a data end;

[0176] obtain target data required according to the transmission data identifier, the target data being data corresponding to the transmission data identifier in the candidate data at the data end.

[0177] Optionally, the processor 302 obtains the target data required according to the transmission data identifier, including at least one of the following:

[0178] obtain, from data uploaded to a data center by the data end, data corresponding to the transmission data identifier as the target data required;

[0179] receive, as the target data required, data corresponding to the transmission data identifier sent by the data end;

[0180] in a case where a communication connection is established with the data end, obtain, as the target data required, data collected in real time by a target module, the target module being a data collection module corresponding to the transmission data identifier in the data end.

[0181] Optionally, the processor 302 compares the query index information and the data index information to determine the transmission data identifier, including:

[0182] compare the query index information and the data index information, and determine, as an initial data identifier, a data identifier corresponding to data index information matched with the query index information;

[0183] obtain permission information corresponding to the initial data identifier, the permission information representing an access right of the receiving end to data corresponding to the initial data identifier;

[0184] determine, according to the permission information, the transmission data identifier from a plurality of initial data identifiers, the transmission data identifier being an initial data identifier for which the receiving end has an access right to corresponding data.

[0185] Optionally, the processor 302 obtains the permission information corresponding to the initial data identifier, including:

[0186] perform behavior detection according to log information of the receiving end to obtain a detection result representing security of the receiving end, the log information representing instructions executed by the receiving end in a preset historical period;

[0187] determine the permission information corresponding to the initial data identifier according to the detection result.

[0188] Optionally, the processor 302 is further configured to:

[0189] obtaining trustiness proof information corresponding to the initial data identifier; the trustiness proof information represents whether the data end corresponding to the initial data identifier belongs to a trusted data end; the data end corresponding to the initial data identifier refers to a data end providing data corresponding to the initial data identifier;

[0190] determining the transmission data identifier from the plurality of initial data identifiers according to the permission information, including:

[0191] if the trustiness proof information represents that the data end corresponding to the initial data identifier belongs to a trusted data end, determining the transmission data identifier from the plurality of initial data identifiers according to the permission information.

[0192] Optionally, the processor 302 obtains the required target data according to the transmission data identifier, including:

[0193] determining the transmission performance index according to the bandwidth information, the delay information and the energy consumption information of the data end;

[0194] determining a target transmission mode according to the transmission performance index, so as to obtain the required target data based on the target transmission mode.

[0195] Optionally, the processor 302 obtains the required target data based on the target transmission mode, including at least one of the following:

[0196] receiving the target data corresponding to the transmission data identifier directly sent by the data end based on the communication connection with the data end;

[0197] receiving the data fragment from the data end forwarded by the relay node to obtain the target data composed of the data fragment;

[0198] scanning the target image generated by the data end based on the target data to obtain the target data based on the scanning result.

[0199] Optionally, the processor 302 obtains the required target data according to the transmission data identifier, including:

[0200] obtaining encrypted data provided by the data end and encrypted based on a target encryption strategy according to the transmission data identifier;

[0201] processing the encrypted data based on a decryption strategy corresponding to the target encryption strategy to obtain the required target data;

[0202] wherein the target encryption strategy is related to the bandwidth information, the delay information, the energy consumption information and the log information of the data end, and the log information represents instructions executed by the receiving end in a preset historical period.

[0203] Optionally, the processor 302 obtains the required target data according to the transmission data identifier, including:

[0204] displaying a transmittable list, the transmittable list including the transmission data identifier;

[0205] in response to the instruction for the at least one transmission data identifier, sending a target data request to the data end;

[0206] receiving target data fed back by the data end in response to the target data request.

[0207] The electronic device of the embodiment has the working principle as described in the foregoing embodiment of the data transmission method, which is not repeated here.

[0208] It should be noted that each embodiment in the present specification is described in a progressive manner, and each embodiment focuses on the difference from other embodiments. The same or similar parts between embodiments can be referred to each other.

[0209] For the convenience of description, the above system or device is described as various modules or units in terms of functions. Of course, the functions of each unit can be implemented in the same or multiple software and / or hardware in the implementation of the present application.

[0210] From the above description of the embodiments, those skilled in the art can clearly understand that the present application can be implemented by means of software and the necessary general hardware platform. Based on such understanding, the technical solutions of the present application can be embodied in the form of a software product, which can be stored in a storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., and includes a plurality of instructions to make a computer device (which can be a personal computer, server, or network device, etc.) execute the methods described in various embodiments or some parts of the embodiments of the present application.

[0211] Finally, it should be noted that in this document, relational terms such as first and second, and third and fourth, are used solely to distinguish one entity or action from another entity or action, without necessarily requiring or implying any such actual relationship or order between such entities or actions. Moreover, the terms "comprises", "comprising", or any other variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but can include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without more limitations, an element defined by the statement "comprising a" does not exclude the existence of additional identical elements in the process, method, article, or apparatus that includes the element.

[0212] The above merely describes the preferred embodiments of the present application, and it should be pointed out that, for those skilled in the art, some improvements and refinements can be made without departing from the principles of the present application, and these improvements and refinements should also be considered as the protection scope of the present application.

Claims

1. A data transmission method applied at a receiving end, the method comprising: Obtain the query information and generate the corresponding query index information based on the semantics of the query information; The query index information and the data index information are compared to determine the transmitted data identifier. The data index information is generated based on the semantic features of the candidate data at the data end. The required target data is obtained based on the transmission data identifier, wherein the target data is the data corresponding to the transmission data identifier in the candidate data of the data end.

2. The method according to claim 1, wherein obtaining the desired target data based on the transmission data identifier includes at least one of the following: From the data uploaded from the data terminal to the data center, the data corresponding to the transmitted data identifier is obtained as the required target data; The data corresponding to the transmission data identifier sent by the data terminal is received as the required target data; When a communication connection is established with the data terminal, the data collected in real time by the target module is obtained as the required target data, wherein the target module is the data acquisition module in the data terminal that corresponds to the data transmission identifier.

3. The method according to claim 1, wherein comparing the query index information and the data index information to determine the transmitted data identifier includes: By comparing the query index information and the data index information, the data identifier corresponding to the data index information that matches the query index information is determined as the initial data identifier; Obtain the permission information corresponding to the initial data identifier, wherein the permission information represents the access permission of the receiving end to the data corresponding to the initial data identifier; Based on the permission information, a transmission data identifier is determined from among the multiple initial data identifiers. The transmission data identifier is an initial data identifier for which the receiving end has access permission to the corresponding data.

4. The method according to claim 3, wherein obtaining the permission information corresponding to the initial data identifier includes: Behavior detection is performed based on the log information of the receiving end to obtain a detection result characterizing the security of the receiving end. The log information characterizes the instructions executed by the receiving end within a preset historical time period. The permission information corresponding to the initial data identifier is determined based on the detection results.

5. The method according to claim 3, further comprising: Obtain the credibility proof information corresponding to the initial data identifier; The credibility proof information indicates whether the data terminal corresponding to the initial data identifier is a trusted data terminal; The data terminal corresponding to the initial data identifier refers to the data terminal that provides the data corresponding to the initial data identifier. The step of determining the transmission data identifier from among the multiple initial data identifiers based on the permission information includes: If the credibility proof information indicates that the data terminal corresponding to the initial data identifier is a trusted data terminal, the transmission data identifier is determined from among the multiple initial data identifiers based on the permission information.

6. The method according to claim 1, wherein obtaining the desired target data based on the transmission data identifier comprises: The transmission performance indicators are determined based on the bandwidth, latency, and energy consumption information of the data terminal. The target transmission mode is determined based on the transmission performance indicators, so as to obtain the required target data based on the target transmission mode.

7. The method according to claim 6, wherein obtaining the required target data based on the target transmission mode comprises at least one of the following: Based on the communication connection with the data terminal, the target data corresponding to the transmission data identifier directly sent by the data terminal is received; Receive data fragments forwarded by the relay node from the data terminal to obtain target data composed of the data fragments; The target image generated by the data terminal based on the target data is scanned, and the target data is obtained by decoding based on the scan results.

8. The method according to claim 1, wherein obtaining the desired target data based on the transmission data identifier comprises: The encrypted data provided by the data terminal, encrypted based on the target encryption strategy, is obtained according to the transmitted data identifier. The encrypted data is processed based on the decryption strategy corresponding to the target encryption strategy to obtain the required target data; The target encryption strategy is related to the bandwidth information, latency information, energy consumption information and log information of the data terminal, and the log information represents the instructions executed by the receiving terminal within a preset historical period.

9. The method according to claim 1, wherein obtaining the desired target data based on the transmission data identifier comprises: Display a list of transferable data, which includes the identifiers of the transferable data. In response to an instruction for at least one of the transmitted data identifiers, a target data request is sent to the data terminal; The receiving end responds to the target data request with the target data.

10. An electronic device used at a receiving end, comprising: Memory, used to store computer programs; A processor for executing the computer program to perform: Obtain the query information and generate the corresponding query index information based on the semantics of the query information; The query index information and the data index information are compared to determine the transmitted data identifier. The data index information is generated based on the semantic features of the candidate data at the data end. The required target data is obtained based on the transmission data identifier, wherein the target data is the data corresponding to the transmission data identifier in the candidate data of the data end.

Images