System and method for dynamically realizing scrambling based on security level

Abstract

The invention discloses a system and a method for dynamically realizing scrambling based on a security level. The system adopts a four-layer architecture of a sensing layer, a decision-making layer, an execution layer and a management layer. The sensing layer is responsible for acquiring equipment security levels, channel quality parameters and interference signal characteristics; the decision-making layer calculates the optimal scrambling seed length through a dynamic evaluation function, and intelligently selects an anti-interference sequence family by using an interference pattern recognition algorithm; the execution layer dynamically adjusts the structure through a configurable scrambling code generator to execute scrambling and descrambling; and the management layer is responsible for strategy configuration, equipment state monitoring and seed life cycle management. According to the method, adaptive adjustment of the scrambling strength and the sequence family is realized through multi-factor weighted evaluation and pattern recognition, user-customized updating strategy and off-line equipment safety rotation are supported, and the method has dynamic networking management capability. According to the method, the capability of resisting exhaustive attack and specific interference is remarkably improved, accurate defense and resource optimization are realized, and the method is suitable for high-security demand scenes such as 5G / 6G and the Internet of Things.

Description

Technical Field

[0001] This invention relates to the field of communication security technology, specifically to a scrambling system and method based on security level dynamic implementation. Background Technology

[0002] In digital communication systems, scrambling is a fundamental and crucial technology. Its main functions are twofold: first, by randomizing transmitted data, it reduces the probability of long strings of "0"s and "1"s appearing in the data stream, thus facilitating clock recovery at the receiving end and ensuring communication stability; second, it performs pseudo-randomization on the data to a certain extent, providing basic security features and preventing data from being easily eavesdropped on or analyzed.

[0003] Traditional scrambling schemes typically use a fixed-length scrambling seed to initialize a pseudo-random sequence generator (such as a linear feedback shift register, LFSR). The transmitter and receiver use the same seed and generator polynomial to generate synchronized pseudo-random sequences for scrambling and descrambling data. This fixed-seed scheme is simple to implement and was widely used in early communication scenarios where security requirements were not high.

[0004] However, with the rapid development of communication technologies, especially the large-scale deployment of distributed and heterogeneous device networks such as the Internet of Things (IoT), the Industrial Internet, 5G / 6G mobile communication, vehicle-to-everything (V2X), and satellite communication, the limitations of traditional fixed scrambling code schemes are becoming increasingly apparent, mainly due to the following drawbacks: 1. Low security: Fixed-length scrambling seeds have a finite sequence space. Attackers can use brute force to traverse all possible seed combinations within a finite time, thereby cracking the scrambling sequence and leading to the leakage of communication content. In today's world of increasingly powerful computing capabilities, this security mechanism based on a finite sequence space is particularly vulnerable.

[0005] 2. Rigid and inflexible: Traditional "one-size-fits-all" scrambling strategies cannot adapt to the diversity of devices and services in heterogeneous networks. For example, a common temperature sensor and a critical control node, or a common SMS service and a high-security payment service, have different requirements for communication security levels. Traditional solutions cannot provide differentiated scrambling protection based on device identity or service type, resulting in either insufficient security or wasted resources.

[0006] 3. Lack of environmental adaptability: The communication channel environment is dynamically changing. For example, the signal-to-noise ratio and bit error rate can fluctuate due to interference, fading, and other factors. Simultaneously, network threats are also dynamic, with various types of active interference or eavesdropping attacks possible. Traditional scrambling schemes are static and cannot perceive these real-time changing environmental factors or adapt accordingly. They may quickly fail in poorly regulated channels or under attack.

[0007] 4. Lack of intelligent decision-making: Existing solutions typically lack a closed-loop control mechanism that comprehensively analyzes multi-dimensional information (device attributes, channel status, threat intelligence) and makes intelligent decisions. Adjustments to scrambling parameters often rely on simple, preset rules, failing to achieve precise and efficient dynamic optimization.

[0008] 5. Weak management of scrambling code seeds: Traditional solutions have significant shortcomings in terms of management: (1) Lack of customizable update strategy: Users cannot flexibly set the update frequency of scrambling seed according to actual security needs, making it difficult to achieve a balance between security and management convenience.

[0009] (2) Lack of offline security mechanisms: There is a lack of effective scrambling seed maintenance and synchronization mechanisms for devices that may go offline (such as mobile devices and intermittently operating IoT devices). During the offline period, there is a risk of leakage of the scrambling seed; when the device comes back online, if the old seed is used, it will bring security risks.

[0010] (3) Lack of dynamic networking support: In multi-device networking scenarios, devices may dynamically join or leave the network. Traditional solutions lack an efficient centralized management mechanism, making it difficult to securely and efficiently distribute and update scrambling seeds when device status changes, which can easily lead to management chaos and security vulnerabilities.

[0011] Therefore, there is an urgent need in this field for a new scrambling code technology solution that can overcome the above-mentioned shortcomings and has high security, adaptability, intelligence and convenient management. Summary of the Invention

[0012] The purpose of this invention is to solve the following problems: the security problem that traditional fixed scrambling code schemes are easily cracked by exhaustive attacks due to limited sequence space; the problem that it is impossible to provide differentiated scrambling code protection based on device identity and service requirements in heterogeneous networks; the problem that existing scrambling code schemes cannot adaptively adjust according to real-time channel status and dynamic network threats; the problem that users cannot flexibly customize scrambling code seed update strategies; and the problem that it is difficult to manage and synchronize scrambling code seeds securely when devices are offline.

[0013] To solve the above-mentioned technical problems, embodiments of the present invention provide the following technical solution: a system for dynamically implementing scrambling codes based on security levels, comprising a perception layer, a decision layer, an execution layer, and a management layer connected in sequence to the decision layer and the execution layer; The sensing layer is used to collect device security level, channel quality parameters and interference signal characteristics; The decision layer is used to calculate the scrambling seed length through a dynamic evaluation function based on the information collected by the perception layer, and to select a scrambling sequence family through an interference pattern recognition algorithm. The execution layer includes a configurable scrambling generator, which dynamically configures its own structure according to the scrambling seed length and scrambling sequence family output by the decision layer, and performs data scrambling and descrambling operations. The management layer is used to store and manage user-defined update strategies, scrambling information mapping relationships of online devices, and seed materials of offline devices, and is responsible for triggering seed updates and processing device lifecycle events.

[0014] Preferably, the sensing layer includes: The device security level module is used to store or retrieve the static security identifier of the device. The channel quality monitoring module is used to measure and output the signal-to-noise ratio and bit error rate of the channel in real time. The threat perception module includes a spectrum analysis unit, which is used to monitor the spectrum of the received signal and extract interference features.

[0015] Preferably, the decision-making layer includes a strategy control module, which executes the dynamic evaluation function by including: The input parameters are normalized, and the input parameters include at least the device security level, signal-to-noise ratio, bit error rate, and number of attacks per unit time. The normalized parameters are weighted and summed to obtain the comprehensive score of scrambling code strength. Based on the comparison between the comprehensive score and the preset threshold, the corresponding scrambling seed length is mapped and output.

[0016] Preferably, the decision layer executes the interference pattern recognition algorithm using a decision tree model, the process of which includes: If the interference bandwidth is determined to be less than the narrowband threshold, then the Gold sequence family is selected; If not, and the peak-to-average power ratio of the interference signal is greater than the pulse threshold, then select the m-sequence family; If none of the above conditions are met, then the chaotic sequence family is selected.

[0017] Preferably, the configurable scrambling generator is implemented based on a linear feedback shift register (LFSR) and is capable of: According to the scrambling sequence family instructions issued by the decision-making layer, the corresponding generator polynomial is dynamically loaded into the feedback logic of the LFSR; The effective bit width of the LFSR status register and the seed loading register is dynamically adjusted according to the scrambling seed length instruction issued by the decision layer.

[0018] Preferably, the management layer includes: The user policy configuration interface is used to receive the user-defined scrambling seed forced update cycle; The strategy engine is used to parse user policies and periodically trigger the seed update process; Device lifecycle manager is used to monitor the online status of field devices; A dynamic sequence mapping table is used to maintain the mapping relationship between online device identifiers and the currently used scrambling seed and parameters; An offline device seed pool is used to securely store discarded seeds from offline devices and assign new seeds to devices that come back online.

[0019] This invention also proposes a method for dynamically implementing scrambling codes based on security levels, applied to the system described above, the method comprising: S1: Collect device security level, channel quality parameters, and interference signal characteristics through the sensing layer; S2: The decision-making layer calculates the scrambling code strength score based on the information collected by S1 using a multi-factor weighted dynamic evaluation function, and decides on the scrambling code seed length. S3: The decision-making layer selects a scrambling code sequence family based on the interference pattern recognition algorithm and the characteristics of the interference signal collected in S1; S4: The execution layer dynamically configures the configurable scrambling generator based on the scrambling seed length and scrambling sequence family determined by S2 and S3, and scrambles or descrambles the communication data.

[0020] Preferably, a seed update step is also included: S5: The management system automatically triggers the seed update process based on the user's preset update cycle, including sending new seeds to devices, updating mapping relationships, and controlling the devices and management terminal to switch to the new seeds synchronously.

[0021] Preferably, it also includes offline device security processing steps: S6: When a device is detected to be offline, the management removes it from the online device mapping table and marks its old seed as invalid; when the device comes back online and is successfully certified, the management assigns and issues a new seed to it and updates the online device mapping table.

[0022] Preferably, it also includes network management steps: S7: For newly joined devices, after authentication, the management layer creates an entry for it in the mapping table and assigns an initial seed and parameters; for offline devices, their entry is immediately deleted from the mapping table.

[0023] The present invention has the following beneficial effects: 1. A leap forward in security: By dynamically expanding the length of the scrambling seed, the possible sequence space grows exponentially with the length, greatly increasing the difficulty and time cost of brute-force attacks, and fundamentally improving the system's resistance to cracking.

[0024] 2. Precise Resource Allocation: Based on a weighted evaluation of multiple factors such as device security level, channel quality, and threat perception, precise on-demand allocation of scrambling code strength is achieved. This provides stronger protection for high-security devices or harsh environments, while saving computing and communication resources for scenarios with low security requirements, achieving a balance between security and efficiency.

[0025] 3. Environmental Adaptability and Resilience: The system can intelligently adjust the scrambling code complexity based on real-time channel quality (SNR / BER). When channel conditions are favorable, the scrambling intensity may be appropriately reduced to conserve resources, while the scrambling code will be strengthened to maintain communication reliability when channel conditions deteriorate. Simultaneously, through interference pattern recognition, it can switch to the most effective anti-interference sequence family for specific interference types, enhancing the system's resilience and survivability in complex electromagnetic environments.

[0026] 4. Intelligent and Precise Defense: Through interference pattern recognition algorithms, the system has achieved a leap from "general defense" to "precision defense." It is no longer limited to fixed scrambling strategies, but can "identify threats and address them accordingly," greatly improving the effectiveness of combating targeted interference.

[0027] 5. Customizable Strategy: Supports users to define scrambling code update strategies as needed, allowing for differentiated update cycles to be set for devices with different security levels or the entire network. This enables the system to meet different security compliance requirements while also ensuring ease of management, achieving a good balance between security and operational flexibility.

[0028] 6. Enhanced Offline Security: A unique seed rotation mechanism ensures that the scrambling seed is forcibly updated whenever a device goes offline and then comes back online. This effectively prevents the risk of scrambling seed leakage due to device loss, theft, or temporary network disconnection, providing crucial security for mobile devices and IoT terminals.

[0029] 7. Dynamic Networking Support: The system can automatically detect device online / offline status and centrally manage scrambling code resources through a dynamic sequence mapping table. This enables devices to enter the network securely with a "plug and play" approach and to securely isolate themselves after leaving the network, making it ideal for large-scale, dynamically changing IoT and private network communication scenarios. Attached Figure Description

[0030] Figure 1 This is a schematic diagram of the four-layer intelligent architecture of the system described in this invention.

[0031] Figure 2 This is a schematic diagram of the core intelligent decision-making process of this invention.

[0032] Figure 3 This is a flowchart of the lifecycle management process for equipment and scrambling seeds. Detailed Implementation

[0033] To make the technical problems, technical solutions and advantages of the present invention clearer, a detailed description will be given below in conjunction with the accompanying drawings and specific embodiments.

[0034] Example 1

[0035] This invention proposes a system and method for dynamically implementing scrambling codes based on security levels, wherein: 1. System Solution The system described in this invention constructs a complete adaptive scrambling system integrating environmental perception, intelligent decision-making, and centralized strategy management. Its core is a four-layer intelligent system architecture, including a perception layer, a decision-making layer, an execution layer, and a management layer.

[0036] 1) Perception Layer: Responsible for collecting environmental and state information needed for all decision-making. It includes: Device security level module: Static security identifiers for storage devices, such as classifying devices into different security levels like Level 1 (ordinary sensors), Level 2 (control nodes), and Level 3 (network management center).

[0037] Channel quality monitoring module: Integrated into the receiver, it calculates and outputs the channel's signal-to-noise ratio and bit error rate in real time by measuring pilot signals and other means.

[0038] Threat perception module: Includes a spectrum analysis unit (such as an FFT processor) to continuously monitor the spectrum of the received signal and extract interference features (such as -3dB bandwidth and peak / average power ratio) to provide data for subsequent interference pattern identification.

[0039] 2) Decision Layer: Its core is the policy control module, typically implemented by a microcontroller or CPU. It receives data from the perception layer and executes two core algorithms: Dynamic evaluation function algorithm: A dynamic evaluation function is established that integrates multiple factors such as device security level (D), real-time channel quality (SNR, BER), and historical and real-time attack awareness (e.g., number of attacks per unit time, A). By normalizing and weighting these factors and giving a comprehensive score (S), the optimal scrambling seed length (L) is calculated in real time and quantitatively.

[0040] Interference Pattern Recognition Algorithm: Design a lightweight classifier (such as a decision tree) to extract and recognize the features of interference signals provided by the threat perception module. Based on the identified interference type (such as narrowband interference, impulse interference), automatically and intelligently switch from multiple preset scrambling sequence families (such as Gold sequence, m sequence, chaotic sequence) to the most effective anti-interference sequence family (F).

[0041] 3. Execution Layer: The core is a configurable scrambling generator. It is based on a linear feedback shift register (LFSR) design, but its structure is dynamically configurable. Dynamically load generator polynomials: Based on the sequence family type (F) in the decision layer instructions, select one from multiple preset generator polynomials (corresponding to m-sequences, Gold sequences, chaotic sequences, etc.) and dynamically load it into the feedback logic of the LFSR.

[0042] Dynamically configure seed bit width: Adjust the effective bit width of the seed load register and LFSR state according to the seed length (L) in the decision layer instruction. For example, when L=7, only the lower 7 bits of the register are used; when L=15, all 15 bits are used. This supports variable-length scrambling seeds.

[0043] 4. Management Layer: Located within the administrator device (AD) of the network, it is the central hub for system policy enforcement and is responsible for overall security management. It includes: User policy configuration interface: Allows system administrators to set a mandatory update cycle for scrambling seeds for the entire network or a specific group of devices (e.g., 12 hours, 24 hours, etc.).

[0044] Policy Engine: Parses and stores user-configured policies, has a built-in high-precision clock, and periodically triggers the seed update process.

[0045] Device Lifecycle Manager: Monitors the online / offline status of all field devices (FDs), typically through a heartbeat mechanism.

[0046] Dynamic Sequence Mapping Table: A secure database that maintains only the mapping relationship between currently online devices and the scrambling sequence identifiers, seed values, and related parameters (sequence family F, seed length L) they use.

[0047] Offline Device Seed Pool: A secure storage area for managing scrambling seed material for offline devices. When a device goes offline, its old seeds are moved here and marked as "discarded"; when the device reconnects, a brand new seed is assigned to it from here.

[0048] 2. Methodology and Scheme Corresponding to the system, the method described in this invention realizes intelligent control of the entire process from environmental perception to scrambling code execution, specifically including the following steps: Step S1: Multi-dimensional environmental information perception.

[0049] The continuous acquisition device's security level (D), real-time quality parameters of the communication channel (signal-to-noise ratio SNR, bit error rate BER), and characteristics of potential interference signals (such as bandwidth BW, peak / average power ratio).

[0050] Step S2: Dynamic decision-making based on multi-factor weighted scrambling strength.

[0051] The parameters collected in step S1 are normalized and mapped to the [0,1] interval. Then, a weighted comprehensive scoring function is used to calculate the required scrambling strength comprehensive score S. Based on the comparison between the score S and a preset threshold (T1,T2), the optimal scrambling seed length L (e.g., S) is determined. <T1,L=7;T1<=S<T2,L=11;S> =T2, L=15).

[0052] Step S3: Intelligent selection of scrambling sequence families based on interference pattern recognition.

[0053] Lightweight classifiers (such as decision trees) are used to analyze interference features. First, it is determined whether the interference is narrowband (BW < narrowband threshold). If so, the Gold sequence family (F="Gold") is selected. Otherwise, it is determined whether the interference is impulse interference (peak-to-average power ratio > threshold). If so, the m-sequence family (F="m-sequence") is selected. If neither of the above applies, the chaotic sequence family (F="chaotic sequence") is selected to deal with complex interference.

[0054] Step S4: Configurable scrambling code generation and execution.

[0055] Based on the parameters (seed length L, sequence family F) determined in steps S2 and S3, the scrambling generator of the execution layer is dynamically configured: the corresponding generator polynomial is loaded, and an effective seed bit width is set. Subsequently, the configured scrambling generator is used to scramble or descramble the communication data.

[0056] Step S5: User-customized periodic seed updates.

[0057] Based on the administrator's preset update cycle (e.g., 00:00 daily), the policy engine automatically triggers the seed update process: a notification is sent to the target device, the device requests a new seed, the administrator generates an encrypted and secure random new seed on the device and distributes it through a secure channel, and at the same time updates the dynamic sequence mapping table. The device and the management terminal switch to the new seed synchronously, achieving forward security.

[0058] Step S6: Secure seed rotation for offline devices.

[0059] When the device lifecycle manager determines that a device is offline via heartbeat timeout, it immediately removes the device entry from the dynamic sequence mapping table and moves its old seed to the offline device seed pool, marking it as "invalid." When the device re-enters the network and passes authentication, a completely new seed is allocated to it from the offline seed pool and securely distributed, while a new entry is created in the mapping table. This achieves "one offline, one scrambling seed update," preventing seed leakage due to device capture.

[0060] Step S7: Dynamic sequence mapping management for multi-device networking.

[0061] For newly joined devices, after completing two-way authentication, the policy engine creates a new entry for it in the dynamic sequence mapping table and assigns an initial seed and parameters. Communication begins after secure distribution. For offline devices, their entry is immediately removed from the mapping table, terminating their communication capabilities. This policy ensures a strong correlation and synchronization between network scrambling resources and the online status of physical devices.

[0062] Example 2

[0063] I. System Architecture and Hardware Implementation The core of this invention is a four-layer intelligent system, the architecture of which is as follows: Figure 1 As shown. At the hardware level, the modules of the perception layer can be integrated into the baseband processing chip of the communication device or a separate signal processing unit; the policy control module of the decision layer can be handled by the device's main control microcontroller (MCU) or central processing unit (CPU); the configurable scrambling generator of the execution layer can be implemented by a field-programmable gate array (FPGA) or application-specific integrated circuit (ASIC) to provide hardware-level reconfiguration speed and processing performance; the management layer is usually deployed on the network-side management server or high-performance gateway device.

[0064] 1. Implementation of the perception layer: Equipment security level module: This can be preset at the factory or allocated and stored in the device's secure storage area by the management system when the device is connected to the network. This information participates in decision-making as a static attribute.

[0065] Channel quality monitoring module: This is a standard functional component of a communication receiver. It uses pilot signals or known training sequences to perform channel estimation, calculates the signal-to-noise power ratio (SNR) to obtain the bit rate (BER) through decoding and verification.

[0066] Threat perception module: Its spectrum analysis unit can be implemented using digital downconversion (DDC) and fast Fourier transform (FFT) IP cores. Feature extraction and pattern recognition algorithms can run in software on the relevant DSP or MCU.

[0067] 2. Implementation by the decision-making level: Policy control module: Runs on the device's application processor or dedicated logic. Its core consists of two algorithms: Dynamic evaluation function algorithm: 1) Objective: To quantitatively calculate the required scrambling strength and output the seed length L.

[0068] 2) Input: Device security level D, signal-to-noise ratio (SNR), bit error rate (BER), number of attacks per unit time (A).

[0069] 3) Processing flow: a. Normalization: Map the input parameters to the interval [0, 1].

[0070] b. Weighted composite score: c. Decision mapping: If S < T1, then output L = 7 (low intensity). If T1 <= S < T2, then output L = 11 (medium intensity). If S >= T2, then output L = 15 (high intensity). (2) Interference Pattern Recognition Algorithm (Lightweight Decision Tree): 1) Objective: To select the most effective scrambling sequence family F based on interference characteristics.

[0071] 2) Input: Spectral characteristics of the interference signal (e.g., -3dB bandwidth BW, peak power P_peak, average power P_avg).

[0072] 3) Processing flow (decision tree logic): a. Narrowband interference detection: First, the algorithm compares the interference bandwidth BW with the narrowband threshold BW_threshold_narrow.

[0073] Condition: If BW < BW_threshold_narrow, then the current interference is determined to be narrowband interference.

[0074] Decision: Set the scrambling sequence family F to "Gold sequence".

[0075] b. Impulse Interference Judgment: If the conditions in the first step are not met, further analyze the time-domain characteristics of the interference.

[0076] Condition met: Calculate the peak-to-average power ratio P_peak / P_avg of the interference signal. If the ratio is greater than the preset threshold P_ratio_threshold, then the current interference is determined to be pulse interference.

[0077] Decision: Set the scrambling sequence family F to "m sequence".

[0078] c. Default / Complex Interference Handling: If neither of the above two conditions is met, the default branch will be executed.

[0079] Decision: Set the scrambling sequence family F to "chaotic sequence".

[0080] 3. Execution layer implementation: Configurable scrambling generator: A parameterized LFSR can be used. Different generator polynomial feedback taps are selected via a multiplexer (MUX). The seed load register and the LFSR itself are designed for maximum bit width (e.g., 16 bits), and the effective bit width is controlled by an enable signal. When a shorter seed length is required, the higher bits are set to zero or ignored.

[0081] 4. Management implementation: The management layer software runs on the administrator device (AD) and includes a database (for mapping tables and seed pools), a policy engine scheduler, network communication interfaces, etc.

[0082] Dynamic sequence mapping tables and offline device seed pools must be stored in AD's secure storage area and protected with encryption.

[0083] II. Core Management and Work Processes The system's intelligent decision-making process, such as Figure 2 As shown, the device and scrambling seed lifecycle management process is as follows: Figure 3 As shown.

[0084] 1. User-customizable periodic seed update strategy Trigger: The timer in the policy engine reaches the user-preset UTC time (such as midnight every day).

[0085] implement: a. The engine sends a "seed update notification" to all online devices in the target device list.

[0086] b. After receiving the notification, the target device sends a "new seed request" with authentication information to AD.

[0087] c. After the AD verification request, a new random seed with a length that conforms to the current decision parameter L is generated using a cryptographically secure pseudo-random number generator.

[0088] d.AD distributes new seeds to devices via a secure channel (e.g., encrypted using a device pre-shared key or certificate).

[0089] e.AD immediately updates the seed information of the corresponding device in the dynamic sequence mapping table.

[0090] f. When the next agreed communication sequence begins, the device and AD will synchronously switch to the new seed for scrambling and descrambling.

[0091] Effect: Achieves forward security by periodically discarding old scrambling seeds. Even if an attacker currently cracks a scrambling seed, they will be unable to decrypt past and future communications.

[0092] 2. Security seed maintenance and rotation mechanism for offline devices Offline processing: a. The device lifecycle manager determines that device FD_01 is offline by heartbeat timeout (e.g., no response is received for 3 consecutive heartbeat cycles).

[0093] b. The manager immediately removes the entry for FD_01 from the dynamic sequence map table. Thereafter, the network no longer recognizes communication initiated by this device using the old seed.

[0094] c. Store the old seed (Seed_old) of FD_01 into the offline device seed pool and mark its status as "invalid". This seed will never be used again.

[0095] Reconnection handling: a.FD_01 is back online. First, it completes the two-way authentication process with AD.

[0096] b. After successful authentication, AD's policy engine allocates a brand new seed Seed_new for FD_01 from the offline device seed pool.

[0097] c. AD sends Seed_new to FD_01 through a secure channel.

[0098] d. Create a new entry for FD_01 in the dynamic sequence mapping table, containing the device ID, the new seed Seed_new, and the currently decided parameters (F,L).

[0099] e. Clear all historical seed records (i.e., Seed_old marked as "invalid") related to FD_01 in the offline device seed pool to free up space.

[0100] Results: It strictly implements the principle of "one offline update, one scrambling seed update." This effectively addresses the risk of scrambling seed leakage that may occur when the device is offline due to loss, theft, or temporary maintenance.

[0101] 4. Dynamic sequence mapping table management strategy for multi-device networking New equipment joining the network: a. The new device FD_NEW initiates a network access request and completes two-way authentication with AD.

[0102] b. After successful authentication, the policy engine creates a new entry for it in the dynamic sequence mapping table and assigns an initial seed and parameters.

[0103] c. Send the entry information (seed, F, L) to FD_NEW through a secure channel.

[0104] d. Both parties initialize their respective scramblers with the new seed and parameters, and then begin formal communication.

[0105] Device offline: The processing procedure is the same as "Offline Processing" above. Immediately delete its entry from the mapping table so that it can no longer communicate effectively with other devices in the network, thus achieving secure isolation.

[0106] Effect: This ensures that the network scrambling seed space is completely synchronized with the online status of physical devices. Only online and authenticated devices have a valid, current scrambling seed, enabling dynamic and secure management of network members.

[0107] III. Error Handling and Fault Tolerance Mechanism To ensure system robustness, the present invention also includes the following mechanisms: Seed synchronization failure: If the device fails to synchronize with AD during seed switching (e.g., packet loss during transmission, temporary device malfunction), the system will automatically revert to the old seed and initiate a retry mechanism (such as exponential backoff algorithm to re-request), while simultaneously reporting an alarm to the management terminal. This ensures that the communication connection is not interrupted due to seed update failure.

[0108] Device authentication failure: For devices (FDs) that fail authentication repeatedly (such as incorrect passwords), the system will add them to a temporary blacklist and delay the time interval for their next authentication attempt, thereby effectively preventing password brute-force attacks.

[0109] Policy Engine Anomaly: When the system self-test module detects an anomaly in the policy control module (such as watchdog timeout or memory overflow), it can automatically degrade to a predefined default security policy (e.g., consistently using L=15 and chaotic sequences). This maintains basic safe operation of the system under abnormal conditions until the fault is repaired.

[0110] The above description represents the preferred embodiments of the present invention. It should be noted that those skilled in the art can make various improvements and modifications without departing from the principles of the present invention, and these improvements and modifications should also be considered within the scope of protection of the present invention.

Claims

1. A system for dynamically implementing scrambling codes based on security levels, characterized in that, It includes a perception layer, a decision layer, an execution layer, and a management layer that are connected in sequence to the decision layer and the execution layer; The sensing layer is used to collect device security level, channel quality parameters and interference signal characteristics; The decision layer is used to calculate the scrambling seed length through a dynamic evaluation function based on the information collected by the perception layer, and to select a scrambling sequence family through an interference pattern recognition algorithm. The execution layer includes a configurable scrambling generator, which dynamically configures its own structure according to the scrambling seed length and scrambling sequence family output by the decision layer, and performs data scrambling and descrambling operations. The management layer is used to store and manage user-defined update strategies, scrambling information mapping relationships of online devices, and seed materials of offline devices, and is responsible for triggering seed updates and processing device lifecycle events.

2. The system according to claim 1, characterized in that, The sensing layer includes: The device security level module is used to store or retrieve the static security identifier of the device. The channel quality monitoring module is used to measure and output the signal-to-noise ratio and bit error rate of the channel in real time. The threat perception module includes a spectrum analysis unit, which is used to monitor the spectrum of the received signal and extract interference features.

3. The system according to claim 1, characterized in that, The decision-making layer includes a strategy control module, whose process for executing the dynamic evaluation function includes: The input parameters are normalized, and the input parameters include at least the device security level, signal-to-noise ratio, bit error rate, and number of attacks per unit time. The normalized parameters are weighted and summed to obtain the comprehensive score of scrambling code strength. Based on the comparison between the comprehensive score and the preset threshold, the corresponding scrambling seed length is mapped and output.

4. The system according to claim 1 or 3, characterized in that, The decision layer executes the interference pattern recognition algorithm using a decision tree model, and the process includes: If the interference bandwidth is determined to be less than the narrowband threshold, then the Gold sequence family is selected; If not, and the peak-to-average power ratio of the interference signal is greater than the pulse threshold, then select the m-sequence family; If none of the above conditions are met, then the chaotic sequence family is selected.

5. The system according to claim 1, characterized in that, The configurable scrambling generator is implemented based on a linear feedback shift register (LFSR) and is capable of: According to the scrambling sequence family instructions issued by the decision-making layer, the corresponding generator polynomial is dynamically loaded into the feedback logic of the LFSR; The effective bit width of the LFSR status register and the seed loading register is dynamically adjusted according to the scrambling seed length instruction issued by the decision layer.

6. The system according to claim 1, characterized in that, The management team includes: The user policy configuration interface is used to receive the user-defined scrambling seed forced update cycle; The strategy engine is used to parse user policies and periodically trigger the seed update process; Device lifecycle manager is used to monitor the online status of field devices; A dynamic sequence mapping table is used to maintain the mapping relationship between online device identifiers and the currently used scrambling seed and parameters; An offline device seed pool is used to securely store discarded seeds from offline devices and assign new seeds to devices that come back online.

7. A method for dynamically implementing scrambling codes based on security levels, characterized in that, Applied to the system as described in any one of claims 1-6, the method comprises: S1: Collect device security level, channel quality parameters, and interference signal characteristics through the sensing layer; S2: The decision-making layer calculates the scrambling code strength score based on the information collected by S1 using a multi-factor weighted dynamic evaluation function, and decides on the scrambling code seed length. S3: The decision-making layer selects a scrambling code sequence family based on the interference pattern recognition algorithm and the characteristics of the interference signal collected in S1; S4: The execution layer dynamically configures the configurable scrambling generator based on the scrambling seed length and scrambling sequence family determined by S2 and S3, and scrambles or descrambles the communication data.

8. The method according to claim 7, characterized in that, It also includes the seed update step: S5: The management system automatically triggers the seed update process based on the user's preset update cycle, including sending new seeds to devices, updating mapping relationships, and controlling the devices and management terminal to switch to the new seeds synchronously.

9. The method according to claim 7 or 8, characterized in that, It also includes offline device security handling steps: S6: When a device is detected to be offline, the management removes it from the online device mapping table and marks its old seed as invalid; when the device comes back online and is successfully certified, the management assigns and issues a new seed to it and updates the online device mapping table.

10. The method according to claim 7, characterized in that, It also includes network management steps: S7: For newly joined devices, after their authentication is successful, the management layer creates an entry for them in the mapping table and assigns an initial seed and parameters; for offline devices, their entries are immediately deleted from the mapping table.

Images