An environment-adaptive dynamic data encryption method and device

Abstract

This invention discloses an environment-adaptive dynamic data encryption method and apparatus, belonging to the field of data encryption. The method includes: acquiring environmental data from multiple preset sampling sources at the time of encryption of plaintext data to be transmitted, and performing hybrid hashing on all environmental data to generate an instantaneous environmental feature sequence; determining the encryption operation to be executed and operation data from a preset encryption operation instruction set based on the instantaneous environmental feature sequence, and performing a first encryption process on the plaintext data to be transmitted based on the determination result to obtain ciphertext data; generating a temporary key known only to the communicating parties based on the Doppler frequency shift characteristics of the wireless communication channel used for transmission, and performing a second encryption process on the instantaneous environmental feature sequence based on the temporary key to obtain the ciphertext sequence. This invention can effectively improve the transmission security of encrypted data.

Description

Technical Field

[0001] This invention relates to the field of data encryption technology, and in particular to an environment-adaptive dynamic data encryption method and apparatus. Background Technology

[0002] Data encryption refers to the process of using precisely designed mathematical rules and computational steps to transform raw, readable plaintext information (such as a document or a message) into seemingly meaningless, unreadable gibberish (i.e., ciphertext) through specific operations and keys. This process aims to ensure the confidentiality of information, so that even if the ciphertext is intercepted during transmission or storage, attackers cannot decipher its original content without the correct key.

[0003] In related technologies, traditional data encryption generally uses static keys to encrypt communication data. Since the key remains unchanged throughout its entire life cycle, the risk it exposes accumulates linearly over time. Once a single key is stolen, an attacker can decrypt all previously intercepted ciphertexts and decrypt or tamper with future communications, which results in serious security deficiencies in the encrypted data.

[0004] Therefore, there is an urgent need for an environment-adaptive dynamic data encryption method and device to solve the above-mentioned technical problems. Summary of the Invention

[0005] This invention provides an environment-adaptive dynamic data encryption method and apparatus, which can effectively improve the security of encrypted data. The technical solution is as follows:

[0006] On the one hand, an environment-adaptive dynamic data encryption method is provided, the method comprising:

[0007] The system acquires environmental data from multiple preset sampling sources at the moment of encryption of the plaintext data to be transmitted, and performs hybrid hashing on all environmental data to generate an instantaneous environmental feature sequence.

[0008] Based on the instantaneous environmental feature sequence, the encryption operation to be executed and the operation data are determined from a preset set of encryption operation instructions. Then, based on the determination result, the plaintext data to be transmitted undergoes a first encryption process to obtain ciphertext data. The set of encryption operation instructions includes multiple encryption operations, and each encryption operation includes multiple encryption methods.

[0009] Based on the Doppler frequency shift characteristics of the wireless communication channel used for transmission, a temporary key known only to the two communicating parties is generated, and the instantaneous environmental feature sequence is subjected to a second encryption process based on the temporary key to obtain a ciphertext sequence;

[0010] After receiving the ciphertext sequence and the ciphertext data, the receiver decrypts the ciphertext sequence using the temporary key, and decrypts the ciphertext data according to the instantaneous environmental feature sequence obtained from the decryption and the set of encryption operation instructions to obtain the plaintext data.

[0011] On the other hand, an environment-adaptive dynamic data encryption device is provided, the device comprising:

[0012] The acquisition module is used to acquire environmental data from multiple preset sampling sources at the time of encryption of the plaintext data to be transmitted, and to perform hybrid hashing on all environmental data to generate an instantaneous environmental feature sequence;

[0013] The first encryption module is used to determine the encryption operation to be executed and the operation data from a preset set of encryption operation instructions based on the instantaneous environmental feature sequence, and to perform a first encryption process on the plaintext data to be transmitted based on the determination result to obtain ciphertext data; wherein, the set of encryption operation instructions includes multiple encryption operations, and each encryption operation includes multiple encryption methods.

[0014] The second encryption module is used to generate a temporary key known only to the two communicating parties based on the Doppler frequency shift characteristics of the wireless communication channel used for transmission, and to perform a second encryption process on the instantaneous environmental feature sequence based on the temporary key to obtain a ciphertext sequence.

[0015] The decryption module is used to decrypt the ciphertext sequence using the temporary key after the receiver receives the ciphertext sequence and the ciphertext data, and to decrypt the ciphertext data according to the instantaneous environmental feature sequence obtained by decryption and the encryption operation instruction set to obtain the plaintext data.

[0016] On the other hand, a computer device is provided, the computer device including a memory and a processor, the memory for storing computer programs, and the processor for executing the computer programs stored in the memory to implement the steps of the above-described environment-adaptive dynamic data encryption method.

[0017] On the other hand, a computer-readable storage medium is provided, wherein a computer program is stored therein, and when the computer program is executed by a processor, the steps of the above-described environment-adaptive dynamic data encryption method are implemented.

[0018] On the other hand, a computer program product is provided, including a computer program that, when executed by a processor, implements the steps of the above-described environment-adaptive dynamic data encryption method.

[0019] The technical solution provided by this invention can bring at least the following beneficial effects: First, it dynamically encrypts plaintext by acquiring environmental information at the encryption time and a preset set of encryption operation instructions; then, it performs secondary encryption on the environmental information based on the channel state at the communication time, ensuring that neither the ciphertext nor the encrypted key can be deciphered by attackers. This method fundamentally solves many pain points of traditional encryption technologies by using environmental information generated based on real-time information to encrypt plaintext. By transforming each encryption operation into a unique "algorithm creation" deeply bound to the environment, it achieves dynamic defense without a fixed form. This renders attack methods that rely on analyzing fixed algorithms or solving fixed mathematical problems, such as those based on quantum computing algorithms, completely ineffective. Attached Figure Description

[0020] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0021] Figure 1 This is a flowchart of an environment-adaptive dynamic data encryption method provided in an embodiment of the present invention;

[0022] Figure 2 This is a structural diagram of an environment-adaptive dynamic data encryption device provided in an embodiment of the present invention;

[0023] Figure 3 This is a hardware architecture diagram of a computer device provided in an embodiment of the present invention. Detailed Implementation

[0024] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are some embodiments of the present invention, but not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative effort are within the scope of protection of the present invention.

[0025] As mentioned earlier, traditional data encryption typically uses static keys to encrypt communication data. Since the key remains unchanged throughout its lifecycle, attackers have ample time to attempt brute-force attacks, thereby reducing the security of the encryption.

[0026] Based on this, the concept of the present invention is to encrypt plaintext by using environmental information generated based on real-time information, thereby transforming each encryption operation into a unique algorithm creation that is deeply bound to the environment, fundamentally solving the pain points of traditional encryption technology.

[0027] The following describes the specific implementation of the above concept.

[0028] Please refer to Figure 1 The present invention provides an environment-adaptive dynamic data encryption method, the method comprising:

[0029] Step 100: Obtain environmental data from multiple preset sampling sources at the time of encryption of the plaintext data to be transmitted, and perform hybrid hashing on all environmental data to generate an instantaneous environmental feature sequence;

[0030] Step 102: Based on the instantaneous environmental feature sequence, determine the encryption operation to be executed and the operation data from a preset set of encryption operation instructions, and perform a first encryption process on the plaintext data to be transmitted based on the determination result to obtain ciphertext data; wherein, the set of encryption operation instructions includes multiple encryption operations, and each encryption operation includes multiple encryption methods.

[0031] Step 104: Based on the Doppler frequency shift characteristics of the wireless communication channel used for transmission, generate a temporary key that is known only to the two communicating parties, and perform a second encryption process on the instantaneous environmental feature sequence based on the temporary key to obtain the ciphertext sequence;

[0032] Step 106: After the receiver receives the ciphertext sequence and the ciphertext data, it decrypts the ciphertext sequence using the temporary key, and decrypts the ciphertext data according to the instantaneous environmental feature sequence obtained from the decryption and the encryption operation instruction set to obtain the plaintext data.

[0033] In this embodiment of the invention, plaintext is first dynamically encrypted by acquiring environmental information at the encryption time and a preset set of encryption operation instructions; then, the environmental information is encrypted a second time based on the channel state at the communication time, ensuring that neither the ciphertext nor the encrypted key can be deciphered by an attacker. This method fundamentally solves many pain points of traditional encryption technologies by using environmental information generated based on real-time information to encrypt plaintext. By transforming each encryption operation into a unique "algorithm creation" deeply bound to the environment, it achieves dynamic defense without a fixed form. This renders attack methods that rely on analyzing fixed algorithms or solving fixed mathematical problems, such as those based on quantum computing algorithms, completely ineffective.

[0034] The following description Figure 1 The execution method of each step is shown.

[0035] First, for step 100, environmental data from multiple preset sampling sources are obtained at the time of encryption of the plaintext data to be transmitted, and all environmental data are mixed and hashed to generate an instantaneous environmental feature sequence.

[0036] Environmental information, as the core of this method, is responsible for injecting unique and uncopyable uniqueness into each encryption. Its task is to quickly capture a "snapshot" of the current physical environment and system state at the moment the encryption command is issued, and compress this snapshot into a decisive sequence—the instantaneous environmental feature sequence.

[0037] The security of instantaneous environmental feature sequences lies in the unpredictability and non-reproducibility of their sampling sources. The environmental information extractor collects real-time data in parallel from multiple preset sources. These sources are carefully selected to ensure the instantaneity of their values ​​and the difficulty in malicious reproduction. Subsequently, the collected data of various units and ranges (such as temperature, time, and delay) are standardized into a unified digital format. All standardized data are concatenated together and fed into a cryptographic hash function (such as SHA-3) to generate a hash value, thus obtaining the instantaneous environmental feature sequence used for this encryption.

[0038] For example, suppose a user clicks the "Encrypt" button at 2:30:15.123456789 PM on September 25, 2025. At this time, the environment extractor will record data from the pre-selected source, such as:

[0039] High-precision timestamps, such as the low-order value of a system clock accurate to nanoseconds or even picoseconds: 20240525143015123456789;

[0040] Hardware fingerprint noise, such as hardware features extracted from CPU temperature sensors, minute fluctuations in memory access latency, and hard drive seek time: the instantaneous temperature of CPU core 0 is 68.521℃; a micro-measurement of the current memory access latency is 142.8 ns;

[0041] Network entropy sources, such as the precise arrival time interval of current network packets and instantaneous fluctuations in the local radio environment (Wi-Fi, Bluetooth signal strength): the timestamp of the last received network packet is 1.324ms from the last one; the Wi-Fi signal strength is -47 dBm;

[0042] User biometrics, such as the hash value of short-term user biometrics collected in real time (such as the key press rhythm and mouse movement trajectory): from the time the user pressed the mouse to the time they released it lasted 156ms.

[0043] Next, these data are concatenated into a long string: 2024...56789|68.521|142.8|1.324|-47|156. Then, a SHA-3 hash is calculated on this string, yielding a 256-bit hash value, for example: a1b2c3d4e5f6... This hash value is the instantaneous environmental characteristic sequence of this encryption. It's like a digital fingerprint of this encryption operation, almost impossible to completely reproduce at another time or on another machine.

[0044] By fusing data collected from these sources, the transient environmental feature sequence ensures that even if an attacker possesses the exact same hardware, software, and keys, they cannot reconstruct the uniquely correct transient environmental feature sequence if they cannot reproduce these physical conditions in the exact same spatiotemporal coordinates, and therefore cannot decrypt the data.

[0045] Then, for step 102, the encryption operation to be executed and the operation data are determined from the preset encryption operation instruction set according to the instantaneous environmental feature sequence, and the plaintext data to be transmitted is subjected to the first encryption process according to the determination result to obtain ciphertext data.

[0046] In this embodiment of the invention, the encryption operation instruction set is not a data repository, but a creative repository of encryption transformations. It does not store specific keys, but rather thousands of encryption operation instruction templates on how to "transform" data. These templates are the most basic, indivisible encryption operation metaphrases.

[0047] The encryption operations in the set are pre-categorized and stored. For example, they can be divided into "structural transformation," "numerical transformation," and "obfuscation," with hundreds or thousands of specific encryption methods under each operation. Furthermore, each specific encryption method is defined using a standardized descriptor, describing its function, required parameter types, and approximate effect. It is itself a piece of logic waiting to be activated and parameterized.

[0048] For example, suppose the plaintext to be encrypted in this embodiment is a simple sentence: "Attack at dawn.", and the encryption operation instruction set includes operations A, B, and C:

[0049] Operation A (Structure Rearrangement): Its function is "multidimensional matrix transpose". The descriptor requires the input parameter: {dimension}. When Operation A is called for encryption, it first fills the data stream into a matrix of the specified dimension, and then reads it out according to a specific path (such as a spiral), thus shuffling the order. For example, when selecting Operation A, if the parameter {dimension: 4x4} is set, then "Attack at dawn." will first be placed in a 4x4 grid, and then, instead of reading by row or column, it may start from the bottom right corner and read in a counter-clockwise spiral, generating a new, disordered encrypted data stream.

[0050] Operation B (Range Transformation): Its function is "Dynamic Radix Transformation". The descriptor requires the input parameter: {radix sequence}. Instead of using traditional binary or hexadecimal, it dynamically changes the radix of the representation. For example, when Operation B is selected, a radix sequence {7, 5, 3} is derived from an environment parameter. Then, each byte in the data stream (usually base 256) is reinterpreted and converted and re-encoded according to a 7-base, 5-base, 3-base sequence, completely changing the numerical representation of the data.

[0051] Operation C (Semantic Obfuscation): Its function is "intelligent obfuscated insertion." The descriptor requires the input parameters: {insertion position algorithm, obfuscated data source}. It inserts meaningless obfuscated bytes into the data, but these bytes are not completely random; rather, they are related to certain environmental parameters or the data itself, making them appear as part of valid data. For example, when Operation C is selected, the parameters are set to {insertion every 3 bytes, data source: network delay hash}. Then, when encrypting "Attack atdawn.", it will insert a byte calculated from the current network delay every 3 plaintext bytes. This greatly increases the redundancy of the ciphertext and the difficulty of analysis.

[0052] It is evident that the pre-constructed set of encryption operation instructions does not perform data encryption itself, but rather provides all possible encryption methods for data encryption. How to encrypt plaintext data is determined by the transient environmental feature sequence generated in step 100. The role of the transient environmental feature sequence is to ensure that the choice of encryption process is completely determined by the environment and is reproducible, while also appearing random and uniformly utilizing the entire gene pool.

[0053] Specifically, the first step is to determine the encryption operation and operation data to be executed from a preset set of encryption operation instructions based on the instantaneous environmental feature sequence, including S21-S23:

[0054] S21. Initialize the instantaneous environmental feature sequence, and create a byte pointer for recording the position of the currently used sequence byte and a usage history table for tracking each sequence byte segment.

[0055] For example, a transient environmental feature sequence with a 256-bit hash value is treated as a continuous 32-byte sequence; then a byte pointer is created, initially at position 0, to record the position of the currently used byte; subsequently, a usage history table is created to track the usage of each byte segment.

[0056] It is worth noting that, in order to avoid the exhaustion of the transient environmental feature sequence during use, an entropy expansion algorithm can be preset in practical applications, such as SHA3 (original environmental DNA + number of bytes used + constant salt value). However, this is only triggered in extreme cases, and the regular transient environmental feature sequence is sufficient to complete all decisions.

[0057] Further, in step S22, the byte pointer is used to move and select along the instantaneous environmental feature sequence after initialization according to the preset sequence byte segment selection scheme, and the encryption operation length, encryption operation order, encryption method and running parameters corresponding to the instantaneous environmental feature sequence are determined.

[0058] In this embodiment of the invention, determining the encryption operation length, encryption operation order, encryption method, and operating parameters corresponding to the instantaneous environmental feature sequence includes S31-S34:

[0059] S31. Starting from the initial position of the byte pointer, select a continuous first sequence of bytes and calculate the selection result to determine the encryption operation length of the plaintext encryption corresponding to the instantaneous environmental feature sequence; wherein, the encryption operation length is used to characterize the number of encryption operations that need to be performed in the encryption process.

[0060] Continuing with the previous example, first, starting from the initial position of the byte pointer, take four consecutive bytes at that position as the first sequence byte segment (32 bits): for example, positions 0-3, with values ​​[0xE0, 0xA1, 0xB2, 0xC3]. Then, convert the four bytes to unsigned integers using big-endian: 0xE0A1B2C3 = 3,769,189,059. Subsequently, map the result to a preset length range using modulo operation. For example, the preset encryption operation length range includes 3-7 operations. The range mapping is calculated by adding the shortest length to the modulo of the integer and the median of the length, resulting in: 3 + (3,769,189,059% 5) = 3 + 3 = 6. Therefore, the decision result determines that the length of the encryption operation is 6.

[0061] After completing the above operations, advance the byte pointer by 4 bits, now pointing to position 4, and record in the usage history: byte 0-3 → chromosome length = 6.

[0062] Further, S32, calculate the template index corresponding to the encryption operation length based on the next adjacent first sequence byte of the first sequence byte segment, so as to determine the corresponding encryption operation order from the preset encryption operation order template according to the template index; wherein, the encryption operation order is used to characterize the types of encryption operations to be performed under the encryption operation length and the execution order of each encryption operation;

[0063] For example, suppose there are 8 predefined encryption operation sequence templates:

[0064] Template 0: [S, V, C, S, V, C], Template 1: [S, S, V, C, C, V], Template 2: [V, C, S, V, C, S], etc. up to Template 7, where S represents structural rearrangement, V represents value range transformation, and C represents semantic confusion.

[0065] The next byte determines which encryption operation order template to use. Take the byte at position 4 and perform an integer conversion: 0xD4 = 212. Then, calculate the template index based on the conversion result: 212 % 8 = 4, indicating that the encryption result selected this time is template 4: [S, V, S, C, V, C].

[0066] At this point, all the types of operations required for this encryption and their execution order are determined: first, the structure rearrangement encryption operation is performed, then the value domain transformation encryption operation, followed by the structure rearrangement encryption operation, and so on. The byte pointer is then advanced to position 5, and recorded in the usage history: byte 4 → encryption operation sequence template 4.

[0067] Furthermore, S33, starting from the next adjacent byte of the first sequence byte, select a series of consecutive second sequence byte segments with the same length as the encryption operation, and calculate the method index corresponding to each second sequence byte segment to determine the encryption method corresponding to each encryption operation; wherein, the selection order of the second sequence byte segments corresponds one-to-one with the encryption operation order;

[0068] For example, since any given encryption operation contains a variety of more detailed encryption algorithms, it is now necessary to select a specific encryption method for each encryption operation in the given template 4. This is a precise index calculation process.

[0069] Each encryption operation has a pre-defined standardized index table. For example, the structure rearrangement operation contains 1200 encryption methods with an index of 0-1199; the value range transformation operation contains 850 encryption methods with an index of 0-849; and the semantic obfuscation operation contains 900 encryption methods with an index of 0-899.

[0070] Next, based on the determined template 4, a corresponding encryption method is selected for each operation. First, the structure rearrangement operation, which is the first one in template 4, is selected: since the byte pointer has moved to position 5, the bytes at positions 5 and 6 in the instantaneous environment feature sequence [0xE5, 0xF6] are treated as the second sequence byte segment and converted to integers: 0xE5F6 = 58,870; then, the corresponding method index is determined by modulo operation: 58,870 % 1200 = 670; subsequently, the encryption method with index number 670 is selected from the 1200 indices of the structure rearrangement, for example, multidimensional spiral transpose. Therefore, operation 1 performed in template 4 is multidimensional spiral transpose. The byte pointer is then moved to position 7.

[0071] Similarly, for the second value range transformation operation in template 4, assuming the bytes at positions 7 and 8 in the instantaneous environmental feature sequence are [0x78, 0x90], performing integer conversion and modulo operation sequentially yields: 0x7890 = 30,864, 30,864 % 850 = 264. Therefore, from the 850 indices of the value range transformation, the encryption method with index number 264 is selected, assuming it is dynamic Fibonacci encoding. Thus, operation 2 performed in template 4 is dynamic Fibonacci encoding. The byte pointer is then moved to position 9.

[0072] The above process is repeated until each operation in template 4 has determined the corresponding encryption method. For example: Operation 3 (structure): the specific method is obtained by indexing bytes 9-10 of the instantaneous environment feature sequence; Operation 4 (obfuscation): the specific method is obtained by indexing bytes 11-12 of the instantaneous environment feature sequence; Operation 5 (value range): the specific method is obtained by indexing bytes 13-14 of the instantaneous environment feature sequence; Operation 6 (obfuscation): the specific method is obtained by indexing bytes 15-16 of the instantaneous environment feature sequence.

[0073] Finally, S34, starting from the next adjacent byte of the last selected second sequence byte segment, select multiple consecutive second sequence bytes according to the parameter requirement template of each encryption method, and calculate the running parameters of the encryption method corresponding to each second sequence byte.

[0074] Although the specific encryption methods to be executed in this encryption process have been determined, each method requires specific running parameters. That is, each method has a predefined parameter requirement template. For example, the multidimensional spiral transpose requires: {dimension X, dimension Y, scan path}; dynamic Fibonacci encoding requires: {seed value, number of iterations}; and delay-based deceptive insertion requires: {insertion interval, data source selection}.

[0075] Therefore, this embodiment takes the multidimensional spiral transpose method as an example to determine the corresponding operating parameters based on the instantaneous environmental feature sequence.

[0076] First, byte 0xA1 at position 17 in the instantaneous environmental feature sequence is selected and subjected to integer conversion and range mapping calculations. For example, 0xA1 = 161, 3 + (161 % 8) = 3 + 1 = 4, thus determining the parameter of dimension X as 4, i.e., dimension 4. Next, byte 0xB2 at position 18 is selected and subjected to integer conversion and range mapping calculations. For example, 0xB2 = 178, 3 + (178 % 8) = 3 + 2 = 5, thus determining the parameter of dimension Y as 5, i.e., dimension 5. Finally, byte 0xC3 at position 19 is selected, which is mapped to 4 paths: 195 % 4 = 3, where 0 = clockwise spiral, 1 = counterclockwise spiral, 2 = zigzag, and 3 = random walk. Thus, parameter 3 = random walk is determined. Finally, the running parameters of the first encryption method in template 4 are {4, 5,"random walk"}.

[0077] Similarly, the corresponding operating parameters are determined for each subsequent method based on the instantaneous environmental feature sequence.

[0078] S23. Record all sequence bytes that have participated in the encryption operation in the usage history table, and re-select sequence bytes when a selection conflict occurs in the recording results, so as to obtain encryption operation and operation data that meet the security requirements.

[0079] In this embodiment of the invention, when a sequence selection conflict occurs, the byte pointer position before the conflict occurred can be returned, or the next available byte segment can be used to reselect. In rare cases, a preset correction rule can also be used for correction.

[0080] Finally, after complete selection and calculation, the complete operation for template 4 is output as follows:

[0081] Operation 1: Multidimensional spiral transpose {4,5,"random walk"};

[0082] Operation 2: Dynamic Fibonacci encoding {Seed: 0x..., Iteration: 5};

[0083] Operation 3: Block swap cipher {block size: 8, swap mode: 2};

[0084] Operation 4: Delay-based deceptive insertion {interval: 3, data source: 1};

[0085] Operation 5: Chaotic mapping encoding {Initial value: 0x..., Parameter: 3.76};

[0086] Operation 6: Smart deceptive embedding {Mode: 2, Strength: 7}.

[0087] In summary, the above process ensures that when both parties have the same set of encryption operation instructions and input the same instantaneous environmental feature sequence, at any time and any place, the same encryption algorithm process will be generated through the same mapping rules, thereby achieving reliable reproducibility while ensuring the uniqueness and security of each encryption algorithm.

[0088] After determining the encryption operation and operation data for the plaintext, the plaintext data can be subjected to the first encryption process, specifically including steps S41-S43:

[0089] S41. Input the plaintext data to be transmitted as the initial data into the preset encryption model, execute the first encryption process according to the determined encryption operation sequence, and output the initial encrypted data.

[0090] S42. Input the initial encrypted data into the preset encryption model, execute the next encryption process according to the encryption operation sequence, and output multiple encrypted data.

[0091] S43. Input the encrypted data multiple times into the preset encryption model and repeat the encryption process of step S42 until all encryption processes are completed in the order of the encryption operations, and output the ciphertext data.

[0092] For example, when encrypting the plaintext data "Attack at dawn.", operation 1 is first performed to fill the plaintext into a 4x5 matrix. Then, the filling result is randomly scanned and read to generate intermediate ciphertext 1. Similarly, operation 2 is performed on intermediate ciphertext 1 to obtain intermediate ciphertext 2, and so on. Finally, operation 6 is performed on intermediate ciphertext 5 to obtain the final ciphertext data.

[0093] In summary, the above steps create a dynamic, environment-dependent, and formless encryption process. Furthermore, even if the gene pool contains only a few thousand genes, the possible number of chromosomes that can be generated is astronomical (for example, 1200×850×900×1200 is already in the billions for a 4-gene chromosome), making brute-force attacks completely impractical.

[0094] For step 104, based on the Doppler frequency shift characteristics of the wireless communication channel used for transmission, a temporary key known only to the two communicating parties is generated, and the instantaneous environmental feature sequence is subjected to a second encryption process based on the temporary key to obtain the ciphertext sequence.

[0095] Although the plaintext encrypted in the above process is almost impossible to crack, the instantaneous environmental feature sequence is the key to both encryption and decryption of the ciphertext. As long as the same instantaneous environmental feature sequence is input and the same "decision mapping" rules are followed (the same segmentation method and the same modular operation), the same gene chromosome will definitely be output.

[0096] Therefore, in order to ensure the security of the instantaneous environmental feature sequence during transmission, this embodiment further designs a method for encrypting the instantaneous environmental feature sequence by generating a dynamic temporary key based on the channel Doppler frequency shift during wireless communication.

[0097] When the transmitter, receiver, or scatterer in the electromagnetic wave propagation path undergoes relative motion, the frequency of the received signal will shift relative to the transmitted frequency. This method utilizes this physical phenomenon. Even if the two communicating parties appear stationary, changes in the scattering path caused by moving vehicles, pedestrians, etc., in the environment will produce a small and random "equivalent Doppler shift".

[0098] The Doppler shift characteristics experienced by the communication channels shared by legitimate communicating parties are highly correlated. However, eavesdroppers in different locations experience Doppler shift characteristics independently of the legitimate channels, and these characteristics are unrelated to the legitimate parties. Therefore, the temporary key generated by this characteristic is random and unpredictable to eavesdroppers. Encryption using this key is also very difficult to crack.

[0099] In this embodiment of the invention, the temporary key is generated through the following steps S51-S54:

[0100] S51. During the temporary key generation period, the two communicating parties alternately send a series of identical pilot signals; wherein, the pilot signals are used to capture the instantaneous state of the channel frequency response.

[0101] Specifically, within a very short period of time (e.g., tens of milliseconds) after the key generation request is initiated, the two communicating parties alternately send a known, specific probe signal to each other at a high time density, for example, every 0.5 milliseconds. c ( t Pilot signals, or pilot signals, are densely packed signals that act like "high-speed continuous photography" of a rapidly changing channel, aiming to capture the instantaneous state of the channel's frequency response. High-density sampling ensures that sufficiently subtle and rapid channel changes can be captured.

[0102] S52. Perform channel estimation for each received pilot signal, determine the instantaneous phase difference within adjacent pilot intervals, and calculate the instantaneous Doppler frequency shift sequence of the communication channel based on the pilot intervals.

[0103] After receiving each pilot signal from sender A, receiver B performs precise signal processing. Since the receiver knows what the original pilot signal was, it can estimate the channel's impact on the signal by comparing the received signal with the original signal.

[0104] In this embodiment of the invention, the instantaneous Doppler frequency shift sequence is obtained through the following steps S61-S63:

[0105] S61. Perform cross-correlation calculation on the received pilot signal and the transmitted pilot signal to obtain the correlation curve used to characterize whether the signal propagation path is effective.

[0106] Specifically, the receiver's antenna will receive a complex analog signal. u ( t This signal is not a pilot signal sent by the transmitter. c ( t It is not a single entity, but rather a series of entities that follow different paths, have different time delays and attenuations. c ( t It is composed of superposition and mixed with environmental electromagnetic noise. m ( t ).

[0107]

[0108] Where L is the number of paths. and These are the path gain and delay of the i-th path, respectively.

[0109] Furthermore, the recipient has u ( t ) and locally generated, and c ( t Perform cross-correlation calculations on identical copies to determine the two signals at different time delays. Similarity :

[0110]

[0111] When sliding delay Delay of a certain path component When they are equal, this component in the received signal c ( t -v i ) will with When perfectly aligned, their product integral will reach a local maximum (peak), while for noise... m ( t ) or other unrelated signals, with c ( tThe integral of will approach zero. Therefore, by calculating the cross-correlation function over the entire time delay range, a correlation curve will be obtained. A significant peak on the curve corresponds to an effective signal propagation path.

[0112] S62. The path whose peak value in the correlation curve exceeds the preset threshold is determined as the valid path, and the instantaneous phase difference is calculated based on the peak value of the valid path and the pilot interval.

[0113] In this embodiment of the invention, in order to distinguish between the real signal peak and the random fluctuations caused by noise, a reasonable detection threshold needs to be set, which is usually determined based on the statistical power of the noise.

[0114] Traverse the relevant curves; all peak values ​​with amplitudes exceeding a preset threshold are considered valid paths. For each identified valid peak value, record its corresponding time delay value. (i.e., the delay of the path) v i ) and the peak amplitude A (which includes the path gain) (Information).

[0115] Based on the peak amplitude information, the amplitude and phase relationship can be established as shown below, i.e., the complex form of the channel coefficient h:

[0116]

[0117] in, Phase is used to reflect minute changes in the propagation path of electromagnetic waves; j It is the imaginary unit.

[0118] Suppose that at time points t1 and t2 (corresponding to two consecutive pilot signals), the estimated channel coefficients for the same stable path are h1 and h2, respectively:

[0119]

[0120]

[0121] Then during this time interval Instantaneous phase difference occurring within It can be calculated as follows: first, calculate the conjugate product of the two consecutive channel coefficients:

[0122]

[0123] The instantaneous phase difference can then be obtained by extracting the argument of this product:

[0124]

[0125] Because phase is periodic, the directly calculated instantaneous phase difference may jump if the actual change exceeds 180°. For example, the actual phase change may be 190°, but the calculated instantaneous phase difference could be -170°.

[0126] Therefore, a simple phase unwinding algorithm is needed. For example, if the difference between two adjacent instantaneous phase differences suddenly becomes very large (e.g., close to 2π), then the current instantaneous phase difference is added to or subtracted by an integer multiple of 2π to smooth out the change. This ensures the correctness of subsequent calculations.

[0127] S63. Calculate the ratio of the instantaneous phase difference to the pilot interval to obtain the instantaneous Doppler frequency shift sequence.

[0128] According to the basic principle of the Doppler effect, the rate of change of frequency is equal to the rate of change of phase. Therefore, instantaneous Doppler frequency shift... Given by the following formula:

[0129]

[0130] The unit of instantaneous Doppler shift is Hertz.

[0131] For example, assuming the pilot spacing Δt = 1 ms, and the receiver measures a phase change Δθ = 0.036π radians between adjacent pilots, then the instantaneous Doppler frequency shift can be calculated. The value is 18 Hz. A positive 18 Hz frequency shift means that the effective path length is shortening during that time period, i.e., a trend towards opposite directions.

[0132] In summary, by performing the above processing steps on each consecutive pair of pilot signals, a final instantaneous Doppler frequency shift sequence is obtained: , where k is the number of pilot signals. This sequence dynamically characterizes the frequency response changes of the channel within the key generation window. Its randomness directly stems from the time-varying characteristics of the wireless channel, laying the foundation for subsequent generation of temporary keys.

[0133] S53. Calculate the difference between adjacent instantaneous frequency shifts in the instantaneous Doppler frequency shift sequence, and generate the corresponding binary sequence according to the sign of the difference.

[0134] To better reflect changes in channel frequency shift, this method calculates the first-order difference between adjacent instantaneous frequency shifts. :

[0135]

[0136] The difference value represents the trend or rate of change of the frequency shift. For example, the difference between a change from +10 Hz to -5 Hz is -15 Hz. This change is more random than the absolute frequency shift value, and because the fixed frequency offset is canceled out when the difference is calculated, it is not sensitive to common fixed frequency offsets.

[0137] Next, differential calculations are performed on all data in the instantaneous Doppler frequency shift sequence to obtain a differential sequence. Then, all differential values ​​are treated as a whole and divided into negative and positive value intervals with 0 as the boundary. If the differential value is greater than 0, bit 1 is output; if it is less than 0, bit 0 is output.

[0138] For example, if the difference sequence is measured to be [-15, +5, -3, +20] Hz, then the generated binary sequence is [0, 1, 0, 1].

[0139] S54. Hash the binary sequence and determine whether the hash results of the two communicating parties are the same. If they are, use the same binary sequence as the temporary key; otherwise, select another time period to regenerate the same temporary key.

[0140] After the above steps, the binary sequences obtained by both parties are hashed to obtain the corresponding hash value. If the calculation results obtained by both parties are the same, the binary sequence is retained as a temporary key; otherwise, the generated binary sequence is discarded, and the key generation process is restarted at the next opportunity.

[0141] Finally, after obtaining the temporary key through the above steps, the transient environmental feature sequence can be subjected to a second encryption process to obtain the ciphertext sequence.

[0142] Because the key is generated based on the direct channel characteristics between the sender and receiver. This channel is unique, shaped by the direct path between them and the surrounding local environment (such as nearby buildings and moving vehicles). The eavesdropper, however, is in a different location; therefore, the channel they perceive is statistically independent of the legitimate channel. Even if she intercepts all wireless signals, the Doppler shift sequence she measures is completely unrelated to the measurements taken by the communicating parties.

[0143] Encryption using the above method can ensure that the instantaneous environmental feature sequence during transmission cannot be decrypted by eavesdroppers.

[0144] Regarding step 106, after the receiver receives the ciphertext sequence and the ciphertext data, it decrypts the ciphertext sequence using the temporary key, and decrypts the ciphertext data according to the instantaneous environmental feature sequence obtained from the decryption and the encryption operation instruction set to obtain the plaintext data.

[0145] Once the receiver receives the ciphertext sequence, it decrypts it using the temporary key agreed upon by both parties to obtain the instantaneous environmental feature sequence. Simultaneously, based on the same set of encryption operation instructions and mapping relationship as the sender, and after obtaining the encryption process based on the instantaneous environmental feature sequence, the receiver reverses the processing to decrypt the ciphertext data, ultimately obtaining the transmitted plaintext data.

[0146] Please refer to Figure 2 This invention provides an environment-adaptive dynamic data encryption device, which includes:

[0147] The acquisition module 200 is used to acquire environmental data from multiple preset sampling sources at the time of encryption of the plaintext data to be transmitted, and to perform hybrid hashing on all environmental data to generate an instantaneous environmental feature sequence;

[0148] The first encryption module 202 is used to determine the encryption operation to be executed and the operation data from a preset encryption operation instruction set based on the instantaneous environmental feature sequence, and to perform a first encryption process on the plaintext data to be transmitted based on the determination result to obtain ciphertext data; wherein, the encryption operation instruction set includes multiple encryption operations, and each encryption operation includes multiple encryption methods.

[0149] The second encryption module 204 is used to generate a temporary key known only to the two communicating parties based on the Doppler frequency shift characteristics of the wireless communication channel used for transmission, and to perform a second encryption process on the instantaneous environmental feature sequence based on the temporary key to obtain a ciphertext sequence.

[0150] The decryption module 206 is used to decrypt the ciphertext sequence using the temporary key after the receiver receives the ciphertext sequence and the ciphertext data, and to decrypt the ciphertext data according to the instantaneous environmental feature sequence obtained by decryption and the encryption operation instruction set to obtain the plaintext data.

[0151] In this embodiment of the invention, when the first encryption module 202 determines the encryption operation and operation data to be executed from a preset set of encryption operation instructions based on the instantaneous environmental feature sequence, it specifically performs the following operations: Initializes the instantaneous environmental feature sequence, creating a byte pointer for recording the current position of the sequence byte and a usage history table for tracking each sequence byte segment; uses the byte pointer to move and select along the initialized instantaneous environmental feature sequence according to a preset sequence byte segment selection scheme, determining the encryption operation length, encryption operation order, encryption method, and running parameters corresponding to the instantaneous environmental feature sequence; records all sequence bytes that have participated in the encryption operation in the usage history table, and re-selects sequence bytes when a selection conflict occurs in the recording results, so as to obtain encryption operations and operation data that meet security requirements.

[0152] In this embodiment of the invention, when the first encryption module 202 determines the encryption operation length, encryption operation order, encryption method, and operating parameters corresponding to the instantaneous environment feature sequence, it specifically performs the following operations: selecting a continuous first sequence of bytes starting from the initial position of the byte pointer, and calculating the selection result to determine the encryption operation length for plaintext encryption corresponding to the instantaneous environment feature sequence; wherein, the encryption operation length is used to characterize the number of encryption operations to be performed in the encryption process; calculating the template index corresponding to the encryption operation length based on the next adjacent first sequence byte of the first sequence byte segment, so as to determine the corresponding encryption operation order from a preset encryption operation order template based on the template index; its In this context, the encryption operation sequence is used to characterize the types of encryption operations to be performed under the encryption operation length and the execution order of each encryption operation; starting from the next adjacent byte of the first sequence byte, a series of consecutive second sequence byte segments with the same encryption operation length are selected, and the method index corresponding to each second sequence byte segment is calculated to determine the encryption method corresponding to each encryption operation; wherein, the selection order of the second sequence byte segments corresponds one-to-one with the encryption operation sequence; starting from the next adjacent byte of the last selected second sequence byte segment, a series of consecutive second sequence bytes are selected according to the parameter requirement template of each encryption method, and the running parameters of the encryption method corresponding to each second sequence byte are calculated.

[0153] In this embodiment of the invention, when the first encryption module 202 performs a first encryption process on the plaintext data to be transmitted according to the determined result to obtain ciphertext data, it specifically performs the following operations: S41, inputting the plaintext data to be transmitted as initial data into a preset encryption model, performing the first encryption process according to the determined encryption operation sequence, and outputting the initial encrypted data; S42, inputting the initial encrypted data into the preset encryption model, performing the next encryption process according to the encryption operation sequence, and outputting multiple encrypted data; S43, inputting the multiple encrypted data into the preset encryption model and repeating the encryption process of step S42 until all encryption processes are performed according to the encryption operation sequence, and outputting the ciphertext data.

[0154] In this embodiment of the invention, when the second encryption module 204 generates a temporary key known only to the two communicating parties based on the Doppler frequency shift characteristics of the wireless communication channel used for transmission, it specifically performs the following operations: During the temporary key generation period, the two communicating parties alternately send a series of identical pilot signals; wherein, the pilot signals are used to capture the instantaneous state of the channel frequency response; channel estimation is performed on each received pilot signal to determine the instantaneous phase difference within adjacent pilot intervals, and the instantaneous Doppler frequency shift sequence of the communication channel is calculated based on the pilot intervals; the difference value between adjacent instantaneous frequency shifts in the instantaneous Doppler frequency shift sequence is calculated, and a corresponding binary sequence is generated based on the sign of the difference value; the binary sequence is hashed, and it is determined whether the hash results of the two communicating parties are the same. If they are, the same binary sequence is used as the temporary key; otherwise, another time period is selected to regenerate the same temporary key.

[0155] In this embodiment of the invention, when the second encryption module 204 performs channel estimation for each received pilot signal, determines the instantaneous phase difference within adjacent pilot intervals, and calculates the instantaneous Doppler frequency shift sequence of the communication channel based on the pilot intervals, it specifically performs the following operations: performing cross-correlation operations on the received pilot signal and the transmitted pilot signal to obtain a correlation curve characterizing whether the signal propagation path is effective; determining the path whose peak value in the correlation curve exceeds a preset threshold as an effective path, and calculating the instantaneous phase difference based on the peak value of the effective path and the pilot interval; calculating the ratio of the instantaneous phase difference to the pilot interval to obtain the instantaneous Doppler frequency shift sequence.

[0156] In this embodiment of the invention, the instantaneous phase difference is calculated using the following formula:

[0157]

[0158] In the formula, A1 represents the instantaneous phase difference; A2 and A1 represent the peak amplitudes at time points t1 and t2 corresponding to the two consecutive pilot signals, respectively. j It is the imaginary unit.

[0159] It should be noted that the environment-adaptive dynamic data encryption device provided in the above embodiments is only an example of the division of the above functional modules. In practical applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the device can be divided into different functional modules to complete all or part of the functions described above. In addition, the environment-adaptive dynamic data encryption device and the environment-adaptive dynamic data encryption method embodiments provided in the above embodiments belong to the same concept, and their specific implementation process can be found in the method embodiments, which will not be repeated here.

[0160] Embodiments of this application also provide a computer device, please refer to... Figure 3 The computer device includes a processor and a memory, the memory storing at least one instruction, at least one program, code set or instruction set, the at least one instruction, at least one program, code set or instruction set being loaded and executed by the processor to implement the environment-adaptive dynamic data encryption method provided in the above method embodiments.

[0161] Embodiments of this application also provide a computer-readable storage medium storing at least one instruction, at least one program, code set, or instruction set, wherein the at least one instruction, at least one program, code set, or instruction set is loaded and executed by a processor to implement the environment-adaptive dynamic data encryption method provided in the above-described method embodiments.

[0162] Embodiments of this application also provide a computer program product, which includes a computer program. A processor of a computer device reads the computer program from a computer-readable storage medium and executes the computer program, causing the computer device to perform any of the environment-adaptive dynamic data encryption methods described in the above embodiments.

[0163] For ease of description, the above systems or devices are described separately as various modules or units based on their functions. Of course, in implementing this application, the functions of each unit can be implemented in one or more software and / or hardware components.

[0164] As can be seen from the above description of the embodiments, those skilled in the art can clearly understand that this application can be implemented by means of software plus necessary general-purpose hardware platforms. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods described in various embodiments or some parts of the embodiments of this application.

[0165] Finally, it should be noted that in this document, relational terms such as first, second, third, and fourth are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0166] The above description is only a preferred embodiment of this application. It should be noted that for those skilled in the art, several improvements and modifications can be made without departing from the principle of this application, and these improvements and modifications should also be considered within the scope of protection of this application.

Claims

1. An environment-adaptive dynamic data encryption method, characterized in that, The method includes: The system acquires environmental data from multiple preset sampling sources at the moment of encryption of the plaintext data to be transmitted, and performs hybrid hashing on all environmental data to generate an instantaneous environmental feature sequence. Based on the instantaneous environmental feature sequence, the encryption operation to be executed and the operation data are determined from the preset encryption operation instruction set, and the plaintext data to be transmitted is subjected to a first encryption process based on the determination result to obtain ciphertext data; wherein, the encryption operation instruction set contains a variety of encryption operations, and each encryption operation contains multiple encryption methods; Based on the Doppler frequency shift characteristics of the wireless communication channel used for transmission, a temporary key known only to the two communicating parties is generated, and the instantaneous environmental feature sequence is subjected to a second encryption process based on the temporary key to obtain a ciphertext sequence; When the receiver receives the ciphertext sequence and the ciphertext data, it decrypts the ciphertext sequence using the temporary key, and decrypts the ciphertext data according to the instantaneous environmental feature sequence obtained from the decryption and the encryption operation instruction set to obtain the plaintext data. The step of determining the encryption operation to be executed and the operation data from a preset set of encryption operation instructions based on the instantaneous environmental feature sequence includes: The instantaneous environmental feature sequence is initialized to create byte pointers for recording the current position of the sequence byte and a usage history table for tracking each sequence byte segment; Using the byte pointer, the selection is performed along the instantaneous environmental feature sequence after initialization according to a preset sequence byte segment selection scheme, thereby determining the encryption operation length, encryption operation order, encryption method, and running parameters corresponding to the instantaneous environmental feature sequence; All sequence bytes that have participated in the encryption operation are recorded in the usage history table. When a selection conflict occurs in the record results, the sequence bytes are selected again to obtain the encryption operation and operation data that meet the security requirements. The determination of the encryption operation length, encryption operation order, encryption method, and operating parameters corresponding to the instantaneous environmental feature sequence includes: Starting from the initial position of the byte pointer, a continuous first sequence of bytes is selected, and the selection result is calculated to determine the encryption operation length of the plaintext encryption corresponding to the instantaneous environmental feature sequence; wherein, the encryption operation length is used to characterize the number of encryption operations that need to be performed in the encryption process; The template index corresponding to the encryption operation length is calculated based on the next adjacent first sequence byte of the first sequence byte segment, so as to determine the corresponding encryption operation order from the preset encryption operation order template according to the template index; wherein, the encryption operation order is used to characterize the types of encryption operations to be performed under the encryption operation length and the execution order of each encryption operation; Starting from the next adjacent byte of the first sequence byte, select a series of consecutive second sequence byte segments with the same length as the encryption operation, and calculate the method index corresponding to each second sequence byte segment to determine the encryption method corresponding to each encryption operation; wherein, the selection order of the second sequence byte segments corresponds one-to-one with the encryption operation order; Starting from the next adjacent byte of the last selected second sequence byte segment, select multiple consecutive second sequence bytes according to the parameter requirement template of each encryption method, and calculate the running parameters of the encryption method corresponding to each second sequence byte.

2. The method as described in claim 1, characterized in that, The first encryption process performed on the plaintext data to be transmitted based on the determined result to obtain ciphertext data includes: S41. Input the plaintext data to be transmitted as the initial data into the preset encryption model, execute the first encryption process according to the determined encryption operation sequence, and output the initial encrypted data. S42. Input the initial encrypted data into the preset encryption model, execute the next encryption process according to the encryption operation sequence, and output multiple encrypted data. S43. Input the encrypted data multiple times into the preset encryption model and repeat the encryption process of step S42 until all encryption processes are completed in the order of the encryption operations, and output the ciphertext data.

3. The method as described in claim 1, characterized in that, The step of generating a temporary key known only to the two communicating parties based on the Doppler frequency shift characteristics of the wireless communication channel used for transmission includes: During the temporary key generation period, the two communicating parties alternately send a series of identical pilot signals; wherein, the pilot signals are used to capture the instantaneous state of the channel frequency response; Channel estimation is performed on each received pilot signal to determine the instantaneous phase difference within adjacent pilot intervals, and the instantaneous Doppler frequency shift sequence of the communication channel is calculated based on the pilot intervals. Calculate the difference between adjacent instantaneous frequency shifts in the instantaneous Doppler frequency shift sequence, and generate the corresponding binary sequence according to the sign of the difference; The binary sequence is hashed, and it is determined whether the hash results of the two communicating parties are the same. If they are the same, the same binary sequence is used as the temporary key; otherwise, the same temporary key is regenerated at another time period.

4. The method as described in claim 3, characterized in that, The process of performing channel estimation for each received pilot signal, determining the instantaneous phase difference within adjacent pilot intervals, and calculating the instantaneous Doppler frequency shift sequence of the communication channel based on the pilot intervals includes: Cross-correlation is performed on the received pilot signal and the transmitted pilot signal to obtain a correlation curve that characterizes whether the signal propagation path is effective; The path whose peak value in the correlation curve exceeds a preset threshold is determined as a valid path, and the instantaneous phase difference is calculated based on the peak value of the valid path and the pilot spacing. The instantaneous Doppler frequency shift sequence is obtained by calculating the ratio of the instantaneous phase difference to the pilot interval.

5. The method as described in claim 4, characterized in that, The instantaneous phase difference is calculated using the following formula: In the formula, A1 represents the instantaneous phase difference; A2 and A1 represent the peak amplitudes at time points t1 and t2 corresponding to the two consecutive pilot signals, respectively. j It is the imaginary unit.

6. An environment-adaptive dynamic data encryption device, characterized in that, The apparatus, used in the method of any one of claims 1-5, comprises: The acquisition module is used to acquire environmental data from multiple preset sampling sources at the time of encryption of the plaintext data to be transmitted, and to perform hybrid hashing on all environmental data to generate an instantaneous environmental feature sequence; The first encryption module is used to determine the encryption operation to be executed and the operation data from a preset set of encryption operation instructions based on the instantaneous environmental feature sequence, and to perform a first encryption process on the plaintext data to be transmitted based on the determination result to obtain ciphertext data; wherein, the set of encryption operation instructions includes multiple encryption operations, and each encryption operation includes multiple encryption methods. The second encryption module is used to generate a temporary key known only to the two communicating parties based on the Doppler frequency shift characteristics of the wireless communication channel used for transmission, and to perform a second encryption process on the instantaneous environmental feature sequence based on the temporary key to obtain a ciphertext sequence. The decryption module is used to decrypt the ciphertext sequence using the temporary key after the receiver receives the ciphertext sequence and the ciphertext data, and to decrypt the ciphertext data according to the instantaneous environmental feature sequence obtained by decryption and the encryption operation instruction set to obtain the plaintext data.

7. A computer device, characterized in that, The computer device includes a memory and a processor. The memory is used to store computer programs, and the processor is used to execute the computer programs stored in the memory to implement the steps of the method according to any one of claims 1-5.

8. A computer-readable storage medium, characterized in that, The storage medium stores a computer program, which, when executed by a processor, implements the steps of the method described in any one of claims 1-5.

9. A computer program product, characterized in that, Includes a computer program, which, when executed by a processor, implements the steps of the method according to any one of claims 1-5.

Images