Intelligent fusion terminal data transmission system based on multi-channel dynamic encryption

Abstract

The invention relates to the field of intelligent power grids and intelligent fusion terminals, in particular to an intelligent fusion terminal data transmission system based on multi-channel dynamic encryption, and the system comprises the steps: obtaining to-be-transmitted business data through an intelligent fusion terminal; selecting a plurality of target channels for parallel data transmission through a parallel transmission distribution module, and performing service data distribution based on the activeness of each target channel to obtain target service data of each target channel; obtaining a preset key of each target channel through a data encryption module to encrypt corresponding target service data, and obtaining a target service data ciphertext of each target channel; transmitting the corresponding target service data ciphertext to a data processing terminal in parallel by using each target channel through a data transmission module; and obtaining a preset key of each target channel through the data processing terminal to decrypt the target service data ciphertext, and restoring to obtain the original service data. According to the invention, the real-time performance and reliability of service data transmission of the intelligent fusion terminal are improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of smart grid and smart fusion terminal, in particular to a smart fusion terminal data transmission system based on multi-channel dynamic encryption. BACKGROUND

[0002] With the rapid development of smart grid, as the core node of power grid business data acquisition and transmission, smart fusion terminal undertakes the key tasks of real-time monitoring of power grid operation state, acquisition of power consumption information and execution of remote control. Smart fusion terminal transmits the collected key business data such as voltage, current and load to the cloud or control center through wireless communication channels (such as 4G / 5G, LoRa or dedicated frequency band), realizing intelligent monitoring and decision-making of power grid.

[0003] At present, the business data transmission logic of smart fusion terminal includes that after the smart fusion terminal completes data acquisition locally, the business data is packaged according to the preset protocol, the business data is sent to the data processing terminal (such as the cloud or the control center) after encryption, and the data processing terminal analyzes and processes the decrypted business data. This transmission logic ensures the complete flow of data from the smart fusion terminal to the data processing terminal, and is the basic support for efficient and accurate management of smart grid.

[0004] In the process of business data transmission of smart fusion terminal, the necessity of encryption technology is self-evident. The business data of power grid involves user privacy, power grid operation safety and key control instructions. Once this data is stolen or tampered with, it may cause large-scale power outage, data leakage or malicious manipulation, threatening the safety and stability of power grid. Therefore, the encryption mechanism must guarantee the confidentiality, integrity and anti-repudiation of business data, prevent man-in-the-middle attacks, data eavesdropping or replay attacks, and ensure the credibility and reliability of power grid operation.

[0005] The applicant found in the actual research that in the process of business data transmission of smart fusion terminal, the existing technology generally relies on a single physical channel for business data transmission and encryption, and does not consider the state of the channel. When the single channel encounters interference, signal attenuation or potential security threats (such as malicious scanning), the entire data transmission link will face the risk of interruption, not only making the business data easy to be cracked in high-risk channel transmission, but also easily amplifying the impact of single-point failure due to excessive dependence on single channel, resulting in loss or delay of power grid business data, which cannot meet the requirements of high reliability and real-time of smart grid.

[0006] Therefore, there is an urgent need for a data transmission system that can meet the low delay requirement and high security requirement of smart fusion terminal business data transmission. SUMMARY

[0007] In view of the above prior art deficiencies, the technical problem to be solved by the present application is: how to provide a multi-channel dynamic encryption-based intelligent fusion terminal data transmission system, which realizes parallel transmission of intelligent fusion terminal service data through multiple target channels, meets the low delay requirement and high security requirement of intelligent fusion terminal service data transmission, and thereby improves the real-time performance and reliability of intelligent fusion terminal service data transmission.

[0008] To solve the above technical problems, the present application adopts the following technical solutions:

[0009] A multi-channel dynamic encryption-based intelligent fusion terminal data transmission system, which acquires service data to be transmitted by an intelligent fusion terminal and transmits the service data to a parallel transmission distribution module; selects a plurality of target channels for parallel transmission of data by the parallel transmission distribution module, distributes service data based on the activity of each target channel, obtains target service data of each target channel, and transmits the target service data to a data encryption module; obtains a pre-set key of each target channel by the data encryption module to encrypt the corresponding target service data, obtains target service data ciphertext of each target channel, and transmits the target service data ciphertext to a data transmission module; parallel transmits the corresponding target service data ciphertext to a data processing terminal by the data transmission module using each target channel; obtains a pre-set key of each target channel by the data processing terminal to decrypt the corresponding target service data ciphertext, obtains plaintext of the target service data of each target channel, and restores the original service data.

[0010] The parallel transmission distribution module comprises:

[0011] A data acquisition unit for acquiring physical parameters of each target channel;

[0012] An activity calculation unit for calculating the activity of each target channel based on the physical parameters of each target channel acquired by the data acquisition unit;

[0013] A data distribution unit for distributing service data based on the activity of each target channel, obtaining target service data of each target channel.

[0014] Preferably, the parallel transmission distribution module further comprises:

[0015] A channel risk calculation unit for calculating a risk index of each target channel based on the physical parameters of each target channel acquired by the data acquisition unit;

[0016] A channel key strengthening unit for generating a strengthened key for a target channel when the risk index of the target channel exceeds a risk threshold, indicating that the target channel has a security risk.

[0017] Preferably, the parallel transmission distribution module further comprises:

[0018] a channel anomaly calculation unit, configured to calculate an anomaly index of each target channel based on the physical parameters of each target channel collected by the data collection unit;

[0019] a target channel switching unit, configured to replace a target channel with another channel having the highest activity when the risk index of the target channel exceeds the risk threshold and the anomaly index exceeds the anomaly threshold.

[0020] Preferably, the activity calculation unit calculates the activity of the target channel by the following formula:

[0021] ;

[0022] In the formula: represents the activity of the target channel ; represents the load rate of the target channel ; represents the transmission delay normalized value of the target channel ; represents the CINR value of the target channel ; , represents the maximum and minimum load rate of the target channel ; , represents the maximum and minimum CINR value of the target channel ; represents the set activity weight.

[0023] Preferably, the processing steps of the data allocation unit include:

[0024] S01: obtaining the total amount of data of the service data;

[0025] S02: calculating the basic bandwidth of each target channel based on the activity of each target channel and the total bandwidth resource of the system;

[0026] The formula is as follows:

[0027] ;

[0028] In the formula: represents the basic bandwidth of the target channel ; represents the total bandwidth resource of the system; represents the activity of the target channel ; represents the number of target channels;

[0029] S03: calculating the transmission data amount of each target channel based on the basic bandwidth of each target channel and the total data amount of the service data;

[0030] The formula is:

[0031] ;

[0032] In the formula: represents the transmission data amount of the target channel ; represents the total data amount of the service data;

[0033] S04: distributing the service data based on the transmission data amount of each target channel, and distributing the target service data of corresponding data amount to each target channel.

[0034] Preferably, the channel risk calculation unit calculates the risk index of the target channel by the following formula:

[0035] ;

[0036] ;

[0037] ;

[0038] ;

[0039] ;

[0040] In the formula: represents the risk index of the target channel ; represents the load rate of the target channel ; represents the bit error rate of the target channel ; represents the transmission delay standardization value of the target channel ; represents the adjusted CINR value of the target channel ; and represent the historical delay mean and standard deviation of the corresponding target channel; represents the CINR value of the target channel ; represents the CINR maximum value of the target channel ; represents the risk weight coefficient of the target channel .

[0041] Preferably, the processing steps of the channel key strengthening unit include:

[0042] S11: Calculate the corresponding basic intensity value based on the risk index of the target channel;

[0043] The formula is:

[0044] ;

[0045] In the formula: represents the basic intensity value of the target channel ; represents the risk index of the target channel ; represents the risk sensitivity coefficient; represents the set weight requirement;

[0046] S12: Calculate the corresponding encryption intensity parameter based on the basic intensity value of the target channel combined with the sensitivity amplification coefficient;

[0047] The formula is:

[0048] ;

[0049] In the formula: represents the encryption intensity parameter of the target channel ; represents the sensitivity amplification coefficient; represents the set weight requirement;

[0050] S13: Select the corresponding encryption algorithm based on the encryption intensity parameter of the target channel;

[0051] The formula is:

[0052] ;

[0053] In the formula: represents the encryption algorithm selected for the target channel ; , and represent three different encryption algorithms;

[0054] S14: Calculate the corresponding encryption key length based on the encryption intensity parameter of the target channel;

[0055] The formula is:

[0056] ;

[0057] In the formula: represents the key length of the target channel ;

[0058] S15: generating a strengthened key based on the encryption algorithm of the target channel and the strengthened key length.

[0059] Preferably, the channel anomaly calculating unit calculates the anomaly index of the target channel by the following formula:

[0060] ;

[0061] ;

[0062] ;

[0063] ;

[0064] ;

[0065] In the formula: represents the anomaly index of the target channel ; represents the error code rate burst rate of the target channel ; represents the delay burst rate of the target channel ; represents the load drop rate of the target channel ; represents the adjusted signal-to-noise ratio of the target channel ; represents the anomaly weight coefficient of the target channel ; represents the current error code rate of the target channel ; represents the maximum error code rate of the target channel ; represents the current transmission delay of the target channel ; represents the delay threshold of the target channel ; represents the current load rate of the target channel ; represents the minimum load of the target channel ; represents the current signal-to-noise ratio of the target channel ; , represents the highest and lowest signal-to-noise ratio of the target channel ; represents the length of the time window, , , respectively represents the target channel at the time point The bit error rate, transmission delay and load rate at the moment.

[0066] Preferably, when the data transmission module transmits the target service data ciphertext of each target channel to the data processing terminal in parallel, the data transmission module transmits the target service data ciphertext of each target channel to the data processing terminal in fragments.

[0067] Preferably, the processing steps of the data transmission module for transmitting the target service data ciphertext of the target channel in fragments include:

[0068] S21: calculating the corresponding fragment size based on the activity of the target channel and the total amount of service data;

[0069] The formula is as follows:

[0070] ;

[0071] In the formula: represents the fragment size of the target channel ; represents the adaptive coefficient set;

[0072] S22: calculating the corresponding fragment number based on the fragment size of the target channel and the transmission data amount of the target channel;

[0073] The formula is as follows:

[0074] ;

[0075] In the formula: represents the fragment number of the target channel ;

[0076] S23: calculating the corresponding fragment transmission time based on the fragment size of the target channel, the basic bandwidth of the target channel and the activity of the target channel;

[0077] The formula is as follows:

[0078] ;

[0079] In the formula: represents the fragment transmission time of the target channel ;

[0080] S24: transmitting the target service data ciphertext of the target channel to the data processing terminal in fragments based on the fragment number and the fragment transmission time of the target channel.

[0081] Compared with the prior art, the intelligent fusion terminal data transmission system based on multi-channel dynamic encryption has the following beneficial effects:

[0082] The application realizes parallel transmission of intelligent fusion terminal service data through multiple target channels, meets the low delay requirement and high security requirement of intelligent fusion terminal service data transmission. On the one hand, the parallel transmission logic of the application realizes dynamic collaborative optimization of transmission resources, avoids the bottleneck problem of traditional single channel transmission, and can allocate data flow to multiple target channels with optimal activity through the parallel transmission allocation module in high concurrency or network fluctuation scenarios, maximize the use of available bandwidth resources of the system, thereby effectively shorten the end-to-end service data transmission delay, and improve the efficiency of intelligent fusion terminal service data transmission. On the other hand, the parallel transmission strategy of the application realizes multi-channel redundancy, when any target channel appears abnormal, it can switch to other high activity channels to maintain transmission, improve the risk of service interruption caused by single point failure, optimize the global utilization rate of system resources through this parallel transmission mode, provide continuous and stable communication guarantee for intelligent terminal in complex dynamic environment, thereby improve the real-time and reliability of intelligent fusion terminal service data transmission and interaction.

[0083] On the basis of multi-channel parallel transmission, the application further designs the logic of channel fragment transmission, and schedules and transmits the target service data ciphertext of the target channel by splitting it into fine-grained fragments. On the one hand, the fragment transmission strategy designed by the application realizes adaptive control of fragment granularity by calculating the number of fragments and fragment transmission time, ensures the uniform distribution of data fragments in the target channel, avoids the congestion or queue accumulation phenomenon caused by too large data block in traditional transmission, and effectively solves the resource competition and efficiency loss problem in data transmission. On the other hand, the application realizes local error recovery through the fragment mechanism, when a single fragment transmission fails, the system only needs to retransmit the fragment instead of the entire data packet, greatly reduces the data transmission redundancy and time overhead, and provides an efficient and reliable transmission basis for application scenarios with high real-time requirements.

[0084] The application calculates a risk index through physical parameters of a target channel, and dynamically generates a strengthened key for the channel when the risk index continuously exceeds a standard, so as to ensure the safety of data transmission through the generated strengthened key. The traditional fixed encryption strategy has limitations when the safety risk of a channel dynamically changes, while the application can predict the channel risk according to the real-time channel state (physical parameters) and adjust the encryption strength, and when a potential safety risk of the channel is detected, a high-security encryption algorithm is selected through dynamic calculation of a basic strength value and an encryption strength parameter, and a strengthened key with a high entropy value is generated. Through this dynamic key management mechanism, the encryption strength is matched with the real-time risk level of the channel, effectively preventing data from being cracked or leaked in high-risk channel transmission, while avoiding the performance loss caused by excessive encryption, and realizing the initiative of safety protection. Moreover, the encryption strategy of the application can adaptively evolve with the change of the channel environment, providing a continuous and reliable data security barrier for the intelligent fusion terminal, thereby improving the safety and adaptive ability of data transmission of the intelligent fusion terminal.

[0085] The application breaks through the limitations of single index judgment, accurately predicts channel abnormalities through comprehensive evaluation of multi-dimensional physical parameters such as error code rate surge rate, delay surge rate, and load drop rate, and avoids frequent channel switching caused by misjudgment. Moreover, when the risk index and the abnormal index continuously exceed the standard, the backup channel with the optimal activity is dynamically selected based on the activity, so as to ensure that the data transmission path is always in the best state. The application effectively prevents transmission interruption caused by channel abnormalities through this dual-index collaborative decision mechanism, while reducing the delay and resource waste during system switching, thereby improving the reliability and business continuity of data transmission of the intelligent fusion terminal. BRIEF DESCRIPTION OF DRAWINGS

[0086] In order to make the purpose, technical scheme and advantages of the application clearer, the application will be further described in detail below with reference to the drawings, in which:

[0087] Figure 1 The figure is a logic block diagram of a multi-channel dynamic encryption-based intelligent fusion terminal data transmission system.

[0088] Figure 2 The figure is a logic block diagram of a parallel transmission allocation module.

[0089] Figure 3 The figure is a workflow diagram of a data allocation unit.

[0090] Figure 4 The figure is a workflow diagram of a channel key strengthening unit.

[0091] Figure 5A workflow diagram for fragmented transmission of a data transmission module. DETAILED DESCRIPTION

[0092] In order to make the objects, technical solutions and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are some but not all of the embodiments of the present application. The components of the embodiments of the present application described and shown in the drawings herein can be arranged and designed in various different configurations. Therefore, the following detailed description of the embodiments of the present application provided in the drawings is not intended to limit the scope of the claimed present application, but only represents selected embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative work fall within the scope of protection of the present application.

[0093] The following will be further described in detail through specific embodiments:

[0094] Embodiment

[0095] The present embodiment discloses a kind of intelligent fusion terminal data transmission system based on multi-channel dynamic encryption.

[0096] As shown in Figure 1 A kind of intelligent fusion terminal data transmission system based on multi-channel dynamic encryption, through intelligent fusion terminal, the service data to be transmitted are acquired and are transmitted to parallel transmission distribution module;Through parallel transmission distribution module, several (4) target channels for parallel transmission data are selected, service data distribution is carried out based on the activity of each target channel, the target service data of each target channel is obtained and is transmitted to data encryption module;Through data encryption module, the key of each target channel is obtained to encrypt corresponding target service data, the target service data ciphertext of each target channel is obtained and is transmitted to data transmission module;Through data transmission module, corresponding target service data ciphertext is parallelly transmitted to data processing terminal using each target channel;Through data processing terminal, the key of each target channel is obtained to decrypt corresponding target service data ciphertext, the plaintext of the target service data of each target channel is obtained and original service data is restored, and then corresponding data processing is carried out on service data.

[0097] In the present embodiment, the system includes HPLC, RS485 and CAN and various types of channels, each type includes several channels. In the initial state, several channels with the highest activity are selected as target channels.

[0098] The preset key of each channel is stored by the storage module. The fingerprint of the channel is generated by the hardware abstraction layer, and the hash value is calculated by the channel fingerprint, the first 16 bytes of the hash value are intercepted as the unique identifier of the channel, and then the unique identifier of the channel is bound with the corresponding key and stored.

[0099] In order to better introduce the technical scheme of the present application, the present embodiment is introduced in more detail through the following several parts.

[0100] I. Intelligent fusion terminal

[0101] The intelligent fusion terminal is used for collecting the business data of the power grid as the input of the whole system.

[0102] II. Data processing terminal

[0103] The data processing terminal is used for performing corresponding data processing on the original business data obtained by restoration as the output of the whole system. The data processing terminal can be a cloud or a control center.

[0104] III. Data encryption module

[0105] After obtaining the preset key of the target channel from the storage module, the data encryption module encrypts the target business data of the target channel by using the existing encryption logic to obtain the ciphertext of the target business data.

[0106] IV. Parallel transmission distribution module

[0107] In the present embodiment, the overall logic of each unit in the parallel transmission distribution module is as shown in Figure 2

[0108] 1. Data acquisition unit

[0109] The physical parameters of the target channel collected by the data acquisition unit include the current traffic, the number of error packets, the total number of packets, the actual delay, the CINR (Carrier-to-Interference plus Noise Ratio) value and the signal-to-noise ratio.

[0110] 2. Activity calculation unit

[0111] The activity calculation unit is used for calculating the activity of each target channel based on the physical parameters of each target channel collected by the data acquisition unit.

[0112] Specifically, the activity of the target channel is calculated by the following formula:

[0113] ;

[0114] In the formula, the target channel ​​activity of the target channel; load rate of the target channel ; transmission delay normalized value of the target channel ; CINR value of the target channel ; , maximum and minimum load rate of the target channel ; , maximum and minimum CINR value of the target channel ; activity weight set.

[0115] 3、data allocation unit

[0116] data allocation unit, for allocating service data based on activity of each target channel to obtain target service data of each target channel.

[0117] As shown in Figure 3 , the processing steps of the data allocation unit include:

[0118] S01: obtaining total data amount of service data;

[0119] S02: calculating basic bandwidth of each target channel based on activity of each target channel and total bandwidth resource of the system;

[0120] The formula is:

[0121] ;

[0122] In the formula: basic bandwidth of the target channel ; total bandwidth resource of the system; activity of the target channel ; number of target channels;

[0123] S03: calculating transmission data amount of each target channel based on basic bandwidth of each target channel and total data amount of service data;

[0124] The formula is:

[0125] ;

[0126] In the formula: transmission data amount of the target channel ; total data amount of service data;

[0127] S04: Distribute service data based on the transmission data amount of each target channel, and allocate target service data of the corresponding data amount to each target channel.

[0128] 4. Channel risk calculation unit and channel anomaly calculation unit

[0129] Most of the prior art adopts static key configuration, and the key generation and update are completely based on initial settings, lacking real-time evaluation and response ability to channel security risks. When the channel risk index continues to rise, it is unable to automatically adjust the encryption strength or generate a temporary enhanced key, resulting in that the encryption strength lags behind the security threat, significantly increasing the risk of data leakage.

[0130] In view of the above problems, the channel risk calculation unit and the channel anomaly calculation unit are designed to realize key strengthening.

[0131] The channel risk calculation unit is used to calculate the risk index of each target channel based on the physical parameters of each target channel collected by the data acquisition unit.

[0132] Specifically, the risk index of the target channel is calculated by the following formula:

[0133] ;

[0134] ;

[0135] ;

[0136] ;

[0137] ;

[0138] In the formula: represents the risk index of the target channel ; represents the load rate of the target channel ; represents the bit error rate of the target channel ; represents the transmission delay standardized value of the target channel ; represents the adjusted CINR value of the target channel ; and represent the historical delay mean and standard deviation of the corresponding target channel; represents the CINR value of the target channel ; represents the maximum CINR value of the target channel ; represents the CINR value of the target channel Risk weighting coefficient.

[0139] Specifically, the risk index of the target channel is corrected by setting a risk threshold;

[0140] The formula is expressed as:

[0141] ;

[0142] In the formula: This indicates the revised risk index; This indicates the set risk threshold (set to 0.6). This represents the correction factor, which is determined through experimental data.

[0143] Specifically, target channel Risk weight coefficient Dynamic adjustments are made based on historical data of the target channel to adapt to different network environments;

[0144] The formula is expressed as:

[0145] ;

[0146] ;

[0147] ;

[0148] ;

[0149] In the formula: This indicates the corresponding initial weight; Indicates the target channel The historical average of the corresponding data; Indicates channel The maximum value of the corresponding data.

[0150] The channel key enhancement unit is used to determine that there is a security risk in a target channel when the risk index of a target channel exceeds the risk threshold (multiple times or for a period of time), and to generate an enhanced key for the target channel.

[0151] like Figure 4 As shown, the processing steps of the channel key enhancement unit include:

[0152] S11: Calculate the corresponding basic strength value based on the risk index of the target channel;

[0153] The formula is expressed as:

[0154] ;

[0155] In the formula: The base strength value of the target channel The base strength value of the target channel The risk index of the target channel The risk index of the target channel The risk sensitivity coefficient (set to 0.7) The set weight requirement

[0156] S12: Calculate the corresponding encryption strength parameter based on the base strength value of the target channel combined with the sensitivity amplification coefficient

[0157] The formula is as follows:

[0158] ;

[0159] In the formula: The encryption strength parameter of the target channel The encryption strength parameter of the target channel The sensitivity amplification coefficient (set to 0.3) for strengthening the encryption strength of high-sensitive data The set weight requirement

[0160] S13: Select the corresponding encryption algorithm based on the encryption strength parameter of the target channel

[0161] The formula is as follows:

[0162] ;

[0163] In the formula: The encryption algorithm selected for the target channel The encryption algorithm selected for the target channel AES-256-GCM algorithm, which has high security and is suitable for high-sensitive data ChaCha20-Poly1305 algorithm, which can balance performance and security XOR-Cipher algorithm, which has low overhead and is suitable for scenarios with high real-time requirements

[0164] S14: Calculate the corresponding encryption key length based on the encryption strength parameter of the target channel

[0165] The formula is as follows:

[0166] ;

[0167] In the formula: The key length of the target channel The key length of the target channel, which is 32-128 bits, and the specific number of bits is determined according to the strength linear mapping

[0168] S15: generating a strengthened key based on the encryption algorithm and the strengthened key length of the target channel through a hardware security module (HSM), and replacing the preset key of the target channel with the strengthened key.

[0169] 5. Channel anomaly calculation unit

[0170] The prior art cannot detect the abnormal state of the target channel, cannot predict and dynamically switch the optimal target channel in advance before the target channel appears abnormal, and thus leads to that the data transmission interruption cannot be quickly recovered when the channel is abnormal (such as burst congestion or attack).

[0171] In view of the above problems, the channel anomaly calculation unit and the target channel switching unit are designed to realize the dynamic switching of the target channel.

[0172] The channel anomaly calculation unit is used for calculating the abnormal index of each target channel based on the physical parameters of each target channel collected by the data acquisition unit.

[0173] Specifically, the abnormal index of the target channel is calculated by the following formula:

[0174] ;

[0175] ;

[0176] ;

[0177] ;

[0178] ;

[0179] In the formula: the abnormal index of the target channel ; the error code rate burst rate of the target channel ; the delay burst rate of the target channel ; the load drop rate of the target channel ; the adjusted signal-to-noise ratio of the target channel ; the abnormal weight coefficient of the target channel ; the current error code rate of the target channel ; the maximum error code rate of the target channel ; the current transmission delay of the target channel ; the current transmission delay of the target channel The delay threshold; Indicates the target channel The current load rate; Indicates the target channel Minimum load; Indicates the target channel The current signal-to-noise ratio; , Indicates the target channel The highest and lowest signal-to-noise ratios; Indicates the length of the time window. , , Representing the target channel At the point of time Error rate, transmission delay, and load rate at that time.

[0180] Specifically, the anomaly index is corrected by setting an anomaly threshold, as expressed by the formula:

[0181] ;

[0182] In the formula: This indicates the corrected anomaly index; This indicates the set exception threshold (set to 0.6). The correction coefficient for the anomaly index is determined through experimental data; Indicates the duration of the anomaly; Indicates the maximum tolerance time.

[0183] Target Channel Abnormal weight coefficient The system is dynamically adjusted based on historical data from the channel, enabling it to prioritize responses to the most common anomaly patterns.

[0184] The target channel switching unit is used to determine that the target channel is abnormal when the risk index (multiple times or for a period of time) of a target channel exceeds the risk threshold and the abnormal index (multiple times or for a period of time) exceeds the abnormal threshold, and to replace the target channel with another channel with the highest activity.

[0185] V. Data Transmission Module

[0186] The data transmission module uses each target channel to transmit the corresponding target service data encrypted in parallel to the data processing terminal.

[0187] Specifically, when the data transmission module transmits the corresponding target service data ciphertext in parallel to the data processing terminal using each target channel, it also fragments the target service data ciphertext of each target channel and transmits it to the data processing terminal.

[0188] like Figure 5 As shown, the data transmission module's process of fragmenting and transmitting the ciphertext of the target service data on the target channel includes:

[0189] S21: Calculate the corresponding fragment size based on the activity level of the target channel and the total amount of service data;

[0190] The formula is expressed as:

[0191] ;

[0192] In the formula: Indicates the target channel The size of the fragment; This indicates the set adaptive coefficient;

[0193] S22: Calculate the corresponding number of fragments based on the fragment size of the target channel and the amount of data it transmits;

[0194] The formula is expressed as:

[0195] ;

[0196] In the formula: Indicates the target channel The number of fragments;

[0197] S23: Calculate the corresponding fragment transmission time based on the fragment size of the target channel, combined with its base bandwidth and activity level;

[0198] The formula is expressed as:

[0199] ;

[0200] In the formula: Indicates the target channel The time for fragmented transmission;

[0201] S24: Based on the number of fragments and the fragment transmission time of the target channel, transmit the encrypted target service data to the data processing terminal in fragments.

[0202] This invention achieves parallel transmission of intelligent converged terminal service data through multiple target channels, meeting the low latency and high security requirements of intelligent converged terminal service data transmission. On one hand, the parallel transmission logic of this invention realizes dynamic collaborative optimization of transmission resources, avoiding the bottleneck problem of traditional single-channel transmission. In high-concurrency or network fluctuation scenarios, the parallel transmission allocation module can allocate data streams to multiple target channels with optimal activity in real time, maximizing the utilization of available bandwidth resources and effectively shortening end-to-end service data transmission latency, thereby improving the efficiency of intelligent converged terminal service data transmission. On the other hand, the parallel transmission strategy of this invention achieves multi-channel redundancy. When any target channel malfunctions, it can switch to other highly active channels to maintain transmission, mitigating the risk of service interruption due to single-point failures. This parallel transmission mode optimizes the global utilization of system resources, providing continuous and stable communication guarantees for intelligent terminals in complex dynamic environments, thereby improving the real-time performance and reliability of intelligent converged terminal service data transmission and interaction.

[0203] This invention, building upon multi-channel parallel transmission, further designs a channel fragmentation transmission logic. It schedules transmission by splitting the ciphertext of target service data on the target channel into fine-grained fragments. On one hand, the fragmentation transmission strategy designed in this invention achieves adaptive control of fragmentation granularity by calculating the number of fragments and fragmentation transmission time. This ensures the uniform distribution of data fragments in the target channel, avoiding congestion or queue accumulation caused by excessively large data blocks in traditional transmission, effectively solving the problems of resource contention and efficiency loss in data transmission. On the other hand, this invention achieves local error recovery through the fragmentation mechanism. When a single fragment transmission fails, the system only needs to retransmit that fragment instead of the entire data packet, significantly reducing data transmission redundancy and time overhead, providing an efficient and reliable transmission foundation for applications with high real-time requirements.

[0204] This invention calculates a risk index based on the physical parameters of the target channel and dynamically generates a strengthening key for the channel when the risk index continuously exceeds the limit. This strengthened key ensures secure data transmission. Traditional fixed encryption strategies have limitations when channel security risks change dynamically. This invention, however, predicts channel risk and adjusts encryption strength based on real-time channel conditions (physical parameters). When a potential security risk is detected, it selects a high-security encryption algorithm by dynamically calculating the base strength value and encryption strength parameters, and generates a high-entropy strengthening key. This dynamic key management mechanism ensures real-time matching between encryption strength and channel risk levels, effectively preventing data from being cracked or leaked during transmission through high-risk channels. It also avoids system performance degradation caused by over-encryption, achieving proactive security protection. Furthermore, the encryption strategy of this invention can adaptively evolve with changes in the channel environment, providing a continuous and reliable data security barrier for intelligent converged terminals, thereby improving the security and adaptability of data transmission in intelligent converged terminals.

[0205] This invention employs a dual-judgment mechanism using both risk and anomaly indices to dynamically switch to the most active channel when both security risks and anomalies occur simultaneously on the target channel. This invention overcomes the limitations of relying on a single indicator by comprehensively evaluating multi-dimensional physical parameters such as bit error rate spikes, latency spikes, and load drops to accurately predict channel anomalies, avoiding frequent channel switching due to misjudgments. Furthermore, when both the risk and anomaly indices exceed their limits consecutively, the invention dynamically selects the most active backup channel based on activity calculations, ensuring the data transmission path remains optimal. This dual-indicator collaborative decision-making mechanism effectively prevents transmission interruptions caused by channel anomalies, while reducing latency and resource waste during system switching, thereby improving the reliability and service continuity of data transmission in intelligent converged terminals.

[0206] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and not to limit the technical solutions. Those skilled in the art should understand that any modifications or equivalent substitutions to the technical solutions of the present invention without departing from the spirit and scope of the present invention should be covered within the scope of the claims of the present invention.

Claims

1. A data transmission system for an intelligent fusion terminal based on multi-channel dynamic encryption, characterized in that: The intelligent converged terminal acquires the business data to be transmitted and transmits it to the parallel transmission allocation module. The parallel transmission allocation module selects several target channels for parallel data transmission, allocates service data based on the activity of each target channel, obtains the target service data for each target channel, and transmits it to the data encryption module. The data encryption module obtains the preset key for each target channel to encrypt the corresponding target service data, and then transmits the ciphertext of the target service data for each target channel to the data transmission module. The data transmission module uses each target channel to transmit the corresponding target service data in ciphertext to the data processing terminal in parallel. The data processing terminal obtains the preset key of each target channel to decrypt the corresponding target service data ciphertext, obtains the plaintext of the target service data of each target channel, and restores the original service data. The parallel transmission allocation module includes: The data acquisition unit is used to collect the physical parameters of each target channel; The activity calculation unit is used to calculate the activity of each target channel based on the physical parameters of each target channel collected by the data acquisition unit. The data allocation unit is used to allocate service data based on the activity level of each target channel to obtain the target service data for each target channel.

2. The intelligent converged terminal data transmission system based on multi-channel dynamic encryption as described in claim 1, characterized in that: The parallel transmission allocation module also includes: The channel risk calculation unit is used to calculate the risk index of each target channel based on the physical parameters of each target channel collected by the data acquisition unit. The channel key enhancement unit is used to determine that a target channel has a security risk when the risk index of a target channel exceeds the risk threshold, and to generate an enhanced key for the target channel.

3. The intelligent fusion terminal data transmission system based on multi-channel dynamic encryption as described in claim 2, characterized in that: The parallel transmission allocation module also includes: The channel anomaly calculation unit is used to calculate the anomaly index of each target channel based on the physical parameters of each target channel collected by the data acquisition unit. The target channel switching unit is used to determine that a target channel is abnormal when the risk index of a target channel exceeds the risk threshold and the abnormality index exceeds the abnormality threshold, and to replace the target channel with another channel with the highest activity.

4. The intelligent fusion terminal data transmission system based on multi-channel dynamic encryption as described in claim 1, characterized in that: The activity calculation unit calculates the activity of the target channel using the following formula: ； In the formula: Indicates the target channel Activity level; Indicates the target channel Load rate; Indicates the target channel The normalized value of transmission delay; Indicates the target channel CINR value; , Indicates the target channel Maximum and minimum load rates; , Indicates the target channel Maximum and minimum CINR values; This indicates the activity weight set.

5. The intelligent fusion terminal data transmission system based on multi-channel dynamic encryption as described in claim 1, characterized in that: The processing steps of the data allocation unit include: S01: The total amount of business data to be acquired; S02: Calculate the basic bandwidth of each target channel based on the activity of each target channel and the total bandwidth resources of the system; The formula is expressed as: ； In the formula: Indicates the target channel Basic bandwidth; This represents the total bandwidth resources of the system; Indicates the target channel Activity level; Indicates the number of target channels; S03: Calculate the amount of data transmitted on each target channel based on the basic bandwidth of each target channel and the total amount of service data; The formula is expressed as: ； In the formula: Indicates the target channel The amount of data transmitted; This represents the total amount of business data; S04: Allocate service data based on the amount of data transmitted on each target channel, and allocate the corresponding amount of target service data to each target channel.

6. The intelligent fusion terminal data transmission system based on multi-channel dynamic encryption as described in claim 2, characterized in that: The channel risk calculation unit calculates the risk index of the target channel using the following formula: ； ； ； ； ； In the formula: Indicates the target channel The risk index; Indicates the target channel Load rate; Indicates the target channel The bit error rate; Indicates the target channel The normalized value of transmission delay; Indicates the target channel Adjusted CINR value; and This represents the historical mean and standard deviation of the corresponding target channel; Indicates the target channel CINR value; Indicates the target channel The maximum value of CINR; Indicates the target channel Risk weighting coefficient.

7. The intelligent fusion terminal data transmission system based on multi-channel dynamic encryption as described in claim 2, characterized in that: The processing steps of the channel key enhancement unit include: S11: Calculate the corresponding basic strength value based on the risk index of the target channel; The formula is expressed as: ； In the formula: Indicates the target channel Basic strength value; Indicates the target channel The risk index; Indicates the risk sensitivity coefficient; This indicates the weight requirements to be set; S12: Calculate the corresponding encryption strength parameters based on the base strength value of the target channel and the sensitivity amplification factor; The formula is expressed as: ； In the formula: Indicates the target channel The encryption strength parameter; Indicates the sensitivity amplification factor; This indicates the weight requirements to be set; S13: Select the corresponding encryption algorithm based on the encryption strength parameter of the target channel; The formula is expressed as: ； In the formula: Represented as target channel The chosen encryption algorithm; , and This represents three different encryption algorithms; S14: Calculate the corresponding enhanced key length based on the encryption strength parameters of the target channel; The formula is expressed as: ； In the formula: Indicates the target channel The key length; S15: Generate an enhanced key based on the encryption algorithm of the target channel and the enhanced key length.

8. The intelligent fusion terminal data transmission system based on multi-channel dynamic encryption as described in claim 3, characterized in that: The channel anomaly calculation unit calculates the anomaly index of the target channel using the following formula: ； ； ； ； ； In the formula: Indicates the target channel Abnormal index; Indicates the target channel The sudden increase in bit error rate; Indicates the target channel The rate of increase in delay; Indicates the target channel The load descent rate; Indicates the target channel Adjusted signal-to-noise ratio; Indicates the target channel Abnormal weight coefficients; Indicates the target channel The current bit error rate; Indicates the target channel Maximum bit error rate; Indicates the target channel The current transmission delay; Indicates the target channel The delay threshold; Indicates the target channel The current load rate; Indicates the target channel Minimum load; Indicates the target channel The current signal-to-noise ratio; , Indicates the target channel The highest and lowest signal-to-noise ratios; Indicates the length of the time window. , , Representing the target channel At the point of time Error rate, transmission delay, and load rate at that time.

9. The intelligent fusion terminal data transmission system based on multi-channel dynamic encryption as described in claim 5, characterized in that: When the data transmission module transmits the corresponding target service data ciphertext in parallel to the data processing terminal using each target channel, it also fragments the target service data ciphertext of each target channel and transmits it to the data processing terminal.

10. The intelligent fusion terminal data transmission system based on multi-channel dynamic encryption as described in claim 9, characterized in that: The data transmission module's process of fragmenting and transmitting the ciphertext of the target service data on the target channel includes: S21: Calculate the corresponding fragment size based on the activity level of the target channel and the total amount of service data; The formula is expressed as: ； In the formula: Indicates the target channel The size of the fragment; This indicates the set adaptive coefficient; S22: Calculate the corresponding number of fragments based on the fragment size of the target channel and the amount of data it transmits; The formula is expressed as: ； In the formula: Indicates the target channel The number of fragments; S23: Calculate the corresponding fragment transmission time based on the fragment size of the target channel, combined with its base bandwidth and activity level; The formula is expressed as: ； In the formula: Indicates the target channel The time for fragmented transmission; S24: Based on the number of fragments and the fragment transmission time of the target channel, transmit the encrypted target service data to the data processing terminal in fragments.

Images