Subway information communication method and system based on encryption processing
By using a hybrid encryption algorithm and a communication network anomaly detection model to encrypt and conceal subway information, the problem of sensitive information leakage in subway information transmission is solved, and secure information transmission and privacy protection are achieved.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- CHENGDU SHUANGYANG RAIL TRANSIT EQUIPMENT CO LTD
- Filing Date
- 2026-01-27
- Publication Date
- 2026-04-24
- Estimated Expiration
- Not applicable · inactive patent
AI Technical Summary
The existing subway information communication system has a security risk of sensitive information leakage during transmission. How can an effective technical solution be provided to solve this problem?
A hybrid encryption algorithm is used to encrypt train information, and a pre-optimized communication network anomaly detection model is used to detect fluctuations in the transmitted information. If an anomaly is detected, it is concealed and double-encrypted. After being transmitted to the control center, it is decrypted to ensure information security.
By employing hybrid encryption and double-layer encryption, the risk of information leakage is reduced, the security and privacy of transmitted information are improved, resource waste is avoided, and application and promotion are facilitated.
Smart Images
Figure CN121924474A_ABST
Abstract
Description
Technical Field
[0001] This invention belongs to the field of encrypted communication technology, specifically relating to a subway information communication method and system based on encryption processing. Background Technology
[0002] With the acceleration of urbanization, the subway, as an important window of modern urban transportation, is of paramount importance for its safe, efficient and reliable operation. Specifically, existing subway information is sent from the subway control room in the command center to various departments in the subway station. The subway communication system must have the ability to transmit various operation and management information quickly, accurately and reliably. Subway information includes voice, data and images. The transmission between subway information is achieved through classic communication technologies, such as transmission protocols based on optical fiber or wireless networks, and operational efficiency is improved through optimization algorithms, but its information transmission mechanism is still electromagnetic wave transmission.
[0003] Subway communication systems radiate electromagnetic energy during operation, which may carry sensitive information. If this energy is intercepted and the sensitive information is recovered, it could lead to information leakage and security risks. Therefore, providing an effective technical solution to address the problem of sensitive information leakage and security risks in existing technologies has become a pressing issue. Summary of the Invention
[0004] The purpose of this invention is to provide a subway information communication method and system based on encryption processing, so as to solve the above-mentioned problems existing in the prior art.
[0005] To achieve the above objectives, the present invention adopts the following technical solution: In a first aspect, the present invention provides a subway information communication method based on encryption processing, comprising: Train information is obtained and encrypted using a hybrid encryption algorithm to obtain Level 1 encrypted information; Network performance indicators are selected as samples of transmitted information. The pre-optimized communication network anomaly detection model is used to detect the transmitted information samples and obtain the time series anomaly deviation. The time series anomaly deviation is compared with the preset deviation threshold to detect the communication network fluctuation status. If the time series anomaly deviation is less than the preset deviation threshold, it means that the transmitted information is normal and the first-level encrypted information is transmitted to the control center in the standard transmission mode. If the time series deviation exceeds the preset deviation threshold, it indicates abnormal fluctuations in the transmitted information. The first-level encrypted information is then concealed to obtain the second-level concealed information. The secondary covert information is mapped into a one-dimensional space to perform double-layer encryption on the secondary covert information, and the final encrypted information is obtained. The final encrypted information is then transmitted to the control center in a covert transmission mode. If the control center receives Level 1 encrypted information, it uses a hybrid encryption algorithm to decrypt the Level 1 encrypted information to obtain the train information; If the control center receives the final encrypted information, it uses the secondary encryption key and two-dimensional spatial mapping algorithm to reverse-engineer the final encrypted information to obtain the restored secondary covert information, and then decrypts the restored secondary covert information to obtain the train information.
[0006] In one possible design, a hybrid encryption algorithm is used to encrypt the train information, resulting in first-level encrypted information, including: Randomly generate encryption parameter combinations, and select an elliptic curve based on the elliptic curve cryptography generation mechanism, choosing a point on the elliptic curve as the base point; A hybrid encryption algorithm is used to encrypt the combination of encryption parameters and the base point to obtain the public key; The public key is verified for risk according to the preset verification rules. If the public key verification is successful, a randomly generated integer is obtained. The integer, public key and base point are then encrypted using a hybrid encryption algorithm to obtain the encrypted private key. The train information is encrypted using a private key and a public key to obtain Level 1 encrypted information.
[0007] In one possible design, the public key is subjected to risk verification according to preset verification rules, including: The public key coordinates are obtained by performing coordinate processing on the public key based on the encryption combination parameters and the base point. Project the public key coordinates onto the elliptic curve; Determine whether the public key coordinates meet a preset judgment condition, wherein the preset judgment condition is whether the public key coordinates are mutually prime numbers and belong to a finite field.
[0008] In one possible design, the optimization process of the communication network anomaly detection model includes: By combining the autoregressive model and the moving average model, we obtain the autoregressive moving average model, the expression of which is: ; In the formula, This represents an autoregressive moving average model. This represents an autoregressive model. Represents a random variable. Represents a moving average model; The propagation characteristics of historical communication network data are obtained, and the propagation characteristics of historical communication network data are judged to be normal based on the pre-acquired historical transmission time sequence diagram of the communication network. If there are abnormal time sequences, the abnormal time sequences in the historical communication network data are differentially processed to obtain the abnormal traffic of the historical communication network. The historical communication network abnormal traffic was analyzed using an autoregressive moving average model to obtain historical communication network observations. The perturbation error of the autoregressive moving average model, which has a dependency relationship at different periods, is obtained. Based on historical communication network observations and the perturbation error of the autoregressive moving average model, the autoregressive moving average model is optimized to obtain an optimized communication network anomaly detection model. The expression of the optimized communication network anomaly detection model is as follows: ; In the formula, This represents the optimized communication network anomaly detection model. Represents the first constant term. Represents historical communication network observations. This represents the second constant term. Indicates parameter items, Indicates the order.
[0009] In one possible design, the first-level encrypted information is concealed to obtain the second-level concealed information, including: The original carrier image is obtained, and the pixel values of the original carrier image are converted from decimal to binary representation to obtain the converted original carrier image. The original carrier image is an ordinary image used for information concealment. The least significant bit at the corresponding position in the pixel value of the original carrier image after conversion is replaced by the binary bit stream of the first-level encrypted information to obtain the replaced carrier image. The replaced carrier image is converted from binary to decimal representation to obtain a cryptic image, which is then used as secondary cover information.
[0010] In one possible design, after obtaining the secondary concealment information, the method further includes: Based on the secondary covert information, false information is generated for honeypot deception. The expression of the false information is: ; In the formula, This indicates false information. This indicates secondary concealed information. This indicates the sequence number of the train information. This represents the pseudo-information generation function. Represents a string of pseudo-information; A fake transmission channel is established based on the false messages used for honeypot deception to lure intruders into intercepting the false information. The access to the fake transmission channel is monitored by the control center, and warning information is generated based on the access situation.
[0011] In one possible design, the secondary covert information is mapped onto a one-dimensional space to perform double-layer encryption on the secondary covert information, resulting in the final encrypted information, including: The secondary covert information is input into the distributed editor to encode the secondary covert information, thereby obtaining secondary coded information. The secondary coded information is then mapped to the seed space according to the probability density function to obtain the mapped transmission information. A one-dimensional mapping algorithm is used to map the transmitted information to a one-dimensional space, and the first-layer encrypted ciphertext is generated based on the pseudo-information. The first-layer encrypted ciphertext is encrypted using a two-dimensional mapping algorithm to obtain the second-layer encrypted ciphertext, which is then used as the final encrypted information.
[0012] Secondly, the present invention provides a subway information communication system based on encryption processing, comprising: The first encryption module is used to obtain train information and encrypt the train information using a hybrid encryption algorithm to obtain first-level encrypted information. The first transmission module is used to select network performance indicators as transmission information samples, use a pre-optimized communication network anomaly detection model to detect the transmission information samples, obtain the time series anomaly deviation, compare the time series anomaly deviation with a preset deviation threshold to detect the communication network fluctuation status. If the time series anomaly deviation is less than the preset deviation threshold, it means that the transmission information is normal, and the first-level encrypted information is transmitted to the control center in the standard transmission mode. The second encryption module is used to conceal the first-level encrypted information and obtain the second-level concealed information if the time series abnormal deviation is greater than the preset deviation threshold, indicating abnormal fluctuation of the transmitted information. The second transmission module is used to map the secondary covert information into a one-dimensional space to perform double-layer encryption on the secondary covert information, obtain the final encrypted information, and transmit the final encrypted information to the control center in a covert transmission mode. The first decryption module is used to decrypt the first-level encrypted information using a hybrid encryption algorithm to obtain the train information if the control center receives the first-level encrypted information. The second decryption module is used to reverse-engineer the final encrypted information using a secondary encryption key and a two-dimensional spatial mapping algorithm if the control center receives the final encrypted information, to obtain the restored secondary covert information, and then decrypt the restored secondary covert information to obtain the train information.
[0013] Thirdly, the present invention provides a computer device comprising a memory, a processor, and a transceiver connected in sequence and communication, wherein the memory is used to store a computer program, the transceiver is used to send and receive messages, and the processor is used to read the computer program and execute the subway information communication method based on encryption processing as described in the first aspect above.
[0014] Fourthly, the present invention provides a computer-readable storage medium storing instructions that, when executed on a computer, perform the subway information communication method based on encryption as described in the first aspect above.
[0015] Fifthly, the present invention provides a computer program product containing instructions that, when executed on a computer, cause the computer to perform the subway information communication method based on encryption as described in the first aspect above.
[0016] The beneficial effects of this invention are as follows: This invention discloses a subway information communication method and system based on encryption processing. First, train information is acquired and encrypted using a hybrid encryption algorithm to obtain first-level encrypted information. Network performance indicators are selected as transmission information samples, and a pre-optimized communication network anomaly detection model is used to detect the transmission information samples to obtain the time series anomaly deviation. The time series anomaly deviation is compared with a preset deviation threshold. If the time series anomaly deviation is less than the preset deviation threshold, it indicates that the transmission information is normal, and the encrypted information is transmitted to the control center in a standard transmission mode. If the time series anomaly deviation is greater than the preset deviation threshold, it indicates that the transmission information fluctuates abnormally, and the first-level encrypted information is concealed to obtain second-level concealed information. The second-level concealed information is mapped into a one-dimensional space to perform double-layer encryption on the second-level concealed information to obtain the final encrypted information. The final encrypted information is transmitted to the control center in a concealed transmission mode. After receiving the first-level or second-level encrypted information, the control center decrypts the first-level or second-level encrypted information to obtain the train information. This invention uses a communication network anomaly detection model to determine whether the transmitted information is normal, thereby deciding on the appropriate transmission method to reduce resource waste. When the transmitted information fluctuates abnormally, the train information encrypted by the hybrid encryption algorithm is processed with concealment and double encryption to improve the security and privacy of the transmitted information, avoid information leakage, and facilitate application and promotion. Attached Figure Description
[0017] Figure 1 A flowchart illustrating a subway information communication method based on encryption processing provided in an embodiment of the present invention; Figure 2 A block diagram of a subway information communication system based on encryption processing provided in an embodiment of the present invention. Detailed Implementation
[0018] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the present invention will be briefly introduced below in conjunction with the accompanying drawings and descriptions of the embodiments or the prior art. Obviously, the following description of the structure of the accompanying drawings is only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort. It should be noted that the description of these embodiments is for the purpose of helping to understand the present invention, but does not constitute a limitation of the present invention.
[0019] It should be understood that although the terms first, second, etc., may be used herein to describe various units, these units should not be limited by these terms. These terms are only used to distinguish one unit from another. For example, a first unit may be referred to as a second unit, and similarly, a second unit may be referred to as a first unit, without departing from the scope of the exemplary embodiments of the invention.
[0020] It should be understood that the term "and / or" that may appear in this document is merely a description of the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can mean: A exists alone, B exists alone, and A and B exist simultaneously. The term " / and" that may appear in this document describes another relationship between related objects, indicating that two relationships can exist. For example, A / and B can mean: A exists alone, and A and B exist alone. In addition, the character " / " that may appear in this document generally indicates that the related objects before and after it are in an "or" relationship.
[0021] Example: like Figure 1 As shown, the first aspect of this embodiment provides a subway information communication method based on encryption processing, which can be executed by, but is not limited to, a computer device or virtual machine with certain computing resources, such as a personal computer or smartphone, or a virtual machine; the subway information communication method based on encryption processing includes, but is not limited to, the following steps: S1. Obtain train information, encrypt the train information using a hybrid encryption algorithm, and obtain level 1 encrypted information; It should be noted that the train information in this embodiment includes, but is not limited to, train location, train status information, and operating status information. The train status information includes, but is not limited to, the train's current speed, train door status, and traction / braking system operating status. The operating status information includes, but is not limited to, train number, train length, train operating mode, and the status of other subsystems. In this embodiment, the hybrid encryption algorithm is an encryption algorithm based on RSA and AES. RSA is an asymmetric encryption algorithm, which works by using a pair of keys for encryption and decryption, such as a public key and a private key. AES is a symmetric encryption algorithm, which works by using the same key for encryption and decryption.
[0022] In a preferred embodiment, a hybrid encryption algorithm is used to encrypt the train information to obtain first-level encrypted information, including: S11. Randomly generate a combination of encryption parameters, and select an elliptic curve based on the elliptic curve cryptography generation mechanism, and select a point on the elliptic curve as the base point; S12. Use a hybrid encryption algorithm to perform hybrid encryption on the combination of encryption parameters and the base point to obtain the public key; S13. Perform risk verification on the public key according to the preset verification rules. If the public key verification passes, obtain a randomly generated integer. Perform mixed encryption on the integer, public key and base point according to the mixed encryption algorithm to obtain the encrypted private key. S14. Use the private and public keys to encrypt the train information to obtain Level 1 encrypted information.
[0023] In this embodiment, the randomly generated encryption parameter combination includes parameters A, B, C, and D. This randomly generated encryption parameter combination is used as the private key. Simultaneously, the base point lies within a finite field defined on the elliptic curve and maintains a certain distance from the center of the elliptic curve. In step S12, the private key and base point are submitted to a Certificate Authority (CA). Within the CA, a hybrid encryption algorithm is used for hybrid encryption to obtain the public key. The expression for the public key is: In the formula, h represents the hybrid encryption algorithm. The public key is verified using a preset verification rule. If the verification passes, it means there is no risk of password leakage or invalid transmission. After generating the encrypted private key based on the randomly generated integer, public key and base point, the encrypted private key is verified using the elliptic curve digital signature algorithm to ensure the qualification of the encrypted private key.
[0024] Furthermore, the public key is subjected to risk verification according to preset verification rules, including: S13.1. Perform coordinate processing on the public key based on the encryption combination parameters and the base point to obtain the public key coordinates; S13.2. Project the public key coordinates onto the elliptic curve; S13.3. Determine whether the public key coordinates meet the preset judgment conditions, wherein the preset judgment conditions are whether the public key coordinates are mutually prime numbers and belong to a finite field.
[0025] It should be noted that the calculation expression for the public key coordinates is as follows: In the formula, Represents the public key coordinates. Indicates encrypted combination parameters, This represents the coordinates of the base point; specifically, the expression above is the sum of the base point coordinates and the base point itself. This process is repeated to obtain the public key coordinates. A finite field represents a field with a finite number of elements. If the public key coordinates belong to the finite field of an elliptic curve and the inscribed public key coordinates are coprime, then the public key verification is successful.
[0026] S2. Select network performance indicators as transmission information samples, use the pre-optimized communication network anomaly detection model to detect the transmission information samples, obtain the time series anomaly deviation, compare the time series anomaly deviation with the preset deviation threshold to detect the communication network fluctuation status. If the time series anomaly deviation is less than the preset deviation threshold, it means that the transmission information is normal, and the first-level encrypted information is transmitted to the control center in the standard transmission mode. Specifically, in step S2, the optimization process of the communication network anomaly detection model includes: S21. Combining the autoregressive model and the moving average model yields the autoregressive moving average model, the expression of which is: ; In the formula, This represents an autoregressive moving average model. This represents an autoregressive model. Represents a random variable. Represents a moving average model; Furthermore, the expression for the autoregressive model in this embodiment is: In the formula, The term represents the white noise disturbance; the expression for the moving average model is... .
[0027] S22. Obtain the propagation characteristics of historical communication network data, and determine whether the propagation characteristics of historical communication network data are normal based on the pre-obtained historical transmission time sequence diagram of the communication network. If there is an abnormal time sequence, perform differential processing on the abnormal time sequence in the historical communication network data to obtain the abnormal traffic of the historical communication network. S23. Use an autoregressive moving average model to perform regression analysis on the abnormal traffic of the historical communication network to obtain the historical communication network observations; S24. Obtain the perturbation error of the autoregressive moving average model that has a dependency relationship at different times. Optimize the autoregressive moving average model based on historical communication network observations and the perturbation error of the autoregressive moving average model to obtain the optimized communication network anomaly detection model. The expression of the optimized communication network anomaly detection model is: ; In the formula, This represents the optimized communication network anomaly detection model. Represents the first constant term. Represents historical communication network observations. This represents the second constant term. Indicates parameter items, Indicates the order.
[0028] In one possible design, before transmitting the first-level encrypted information to the control center in the standard transmission mode, one bit is added to the beginning of the first-level encrypted information. If transmitted in the standard transmission mode, a "0" is added before the first-level encrypted information so that the control center can read the "0" and invoke the decryption process of the standard transmission mode.
[0029] S3. If the time series deviation is greater than the preset deviation threshold, it indicates that the transmitted information fluctuates abnormally. The first-level encrypted information is then concealed to obtain the second-level concealed information. Furthermore, in step S3, the first-level encrypted information is processed to obtain the second-level concealed information, including: S31. Obtain the original carrier image and convert the pixel values of the original carrier image from decimal to binary representation to obtain the converted original carrier image. The original carrier image is an ordinary image used for information concealment. S32. Replace the least significant bit at the corresponding position in the pixel value of the converted original carrier image with the binary bit stream of the first-level encrypted information to obtain the replaced carrier image; S33. Convert the replaced carrier image from binary to decimal representation to obtain a cryptic image, and use the cryptic image as secondary cover information.
[0030] It should be noted that the original carrier image refers to an ordinary digital image that does not contain sensitive information and is used as an information hiding carrier. Its format can be jpg or png, etc. In the concealment process, encrypted information is embedded by modifying the least significant bit of its pixel value to generate a encrypted image, thereby realizing the disguise of information during transmission.
[0031] In practice, each pixel of the original carrier image is traversed and the corresponding RGB value of each pixel is obtained. Each pixel of the original carrier image is replaced with a binary bit stream of first-level encrypted information to generate new pixels and obtain the replaced carrier image. The encrypted image is obtained by converting the replaced carrier image.
[0032] In a preferred embodiment, in step S3, after obtaining the secondary concealment information, the method further includes: S34. Generate false information for honeypot deception based on the secondary concealment information, wherein the expression of the false information is: ; In the formula, This indicates false information. This indicates secondary concealed information. This indicates the sequence number of the train information. This represents the pseudo-information generation function. Represents a string of pseudo-information; S35. Establish a fake transmission channel based on the false messages used for honeypot deception to lure intruders into intercepting the false information. Monitor the access to the fake transmission channel through the control center and generate early warning information based on the access situation.
[0033] It should be noted that after generating the false information for honeypot deception, the false information is used to lure intruders into the communication network. Specifically, a fake port is deployed in the communication network. This fake port is used for port scanning after the network intruder enters the communication network. At the same time, in order to lower the intrusion threshold for the network intruder to intrude through the fake port, the password of the fake port is set to a simple numeric password. The honeypot provides the intruder with fake network transmission services, making the honeypot appear as a normal external communication node. The generated false information is distributed to the communication node. After the network intruder enters the honeypot, he can obtain the false information, thus successfully deceiving the network intruder into intercepting the false information and keeping the network intruder in the honeypot.
[0034] S4. Map the secondary covert information into a one-dimensional space to perform double-layer encryption on the secondary covert information to obtain the final encrypted information, and transmit the final encrypted information to the control center in a covert transmission mode; Specifically, in step S4, the secondary covert information is mapped into a one-dimensional space to perform double-layer encryption on the secondary covert information, obtaining the final encrypted information, including: S41. Input the secondary covert information into the distributed editor to encode the secondary covert information, obtain the secondary coded information, and map the secondary coded information to the seed space according to the probability density function to obtain the mapped transmission information; S42. Use a one-dimensional mapping algorithm to map the transmitted information to a one-dimensional space, and generate the first-layer encrypted ciphertext based on the pseudo-information; S43. Use a two-dimensional mapping algorithm to perform a second-level encryption on the first-level encrypted ciphertext to obtain a second-level encrypted ciphertext, and use the second-level encrypted ciphertext as the final encrypted information.
[0035] It should be noted that the secondary hidden information is input into the distributed editor, which encodes the secondary hidden information to obtain the encoded secondary coded information. Then, a probability density function is used to map the secondary coded information to a seed space. In this embodiment, the seed space is a lower-dimensional space containing essential features. Mapping the secondary coded information to the seed space is actually a feature extraction process, extracting more core and essential features from the secondary coded information, resulting in the mapped transmission information. In this embodiment, the one-dimensional mapping algorithm is a one-dimensional Logistic mapping, and the two-dimensional mapping algorithm is a two-dimensional Tent mapping algorithm. The principle of the one-dimensional Logistic mapping algorithm is to generate a sequence sensitive to initial conditions through nonlinear equations, and the generated sequence has characteristics such as pseudo-randomness, ergodicity, and unpredictability. The principle of the two-dimensional Tent mapping algorithm is to extend the one-dimensional Tent mapping to a two-dimensional space, generating chaotic sequences with better uniform distribution characteristics and mutual independence.
[0036] In one possible design, before transmitting the final encrypted information to the control center in covert transmission mode, add one bit at the beginning of the final encrypted information. If transmitting in covert transmission mode, add a "1" before the final encrypted information so that the control center can read the "1" and then call the decryption process of covert transmission mode, thereby improving the feasibility and integrity of the project.
[0037] S5. If the control center receives Level 1 encrypted information, it uses a hybrid encryption algorithm to decrypt the Level 1 encrypted information to obtain the train information; Specifically, after receiving the first-level encrypted information, the control center uses a hybrid encryption algorithm to decode the first-level encrypted information based on the encryption private key to obtain the plaintext file of the transmitted information, i.e., the train information.
[0038] S6. If the control center receives the final encrypted information, it uses the secondary encryption key and the two-dimensional spatial mapping algorithm to reverse-engineer the final encrypted information to obtain the restored secondary cover information, and then decrypts the restored secondary cover information to obtain the train information.
[0039] Specifically, the primary encrypted information is obtained by separating the restored secondary cover information. The primary encrypted information is then decrypted using the encryption private key to obtain the original train information. The process of separating the restored secondary cover information to obtain the primary encrypted information includes: segmenting the restored secondary cover information into pixel-level secondary cover information; extracting the LSB bits of the color value of each pixel in the pixel-level secondary cover information; combining the LSB bits of the color value of each pixel to obtain combined LSB data; and decoding the combined LSB data to obtain the primary encrypted information.
[0040] In one possible design, the control center monitors the pseudo-transmission channel in real time, obtains all access behaviors to pseudo-information, analyzes the access behaviors to generate corresponding early warning information.
[0041] Based on the above-disclosed content, this embodiment provides a subway information communication method based on encryption processing. It employs a hybrid encryption algorithm to encrypt train information, transmitting the encrypted train information to the control center via standard transmission mode. However, if communication network fluctuations are detected, a covert transmission mode is used, concealing the encrypted train information within a carrier image and mapping it to a one-dimensional space. This double-layer encryption prevents the theft of the concealed information and avoids privacy leaks after decryption. Furthermore, this embodiment generates false information based on the concealed information to facilitate honeypot trapping, causing network intruders to enter the false transmission channel and fall into the trap. This further ensures the security and privacy of information transmission, facilitating application and promotion.
[0042] like Figure 2 As shown, the second aspect of this embodiment provides a subway information communication system based on encryption processing, including: The first encryption module is used to obtain train information and encrypt the train information using a hybrid encryption algorithm to obtain first-level encrypted information. The first transmission module is used to select network performance indicators as transmission information samples, use a pre-optimized communication network anomaly detection model to detect the transmission information samples, obtain the time series anomaly deviation, compare the time series anomaly deviation with a preset deviation threshold to detect the communication network fluctuation status. If the time series anomaly deviation is less than the preset deviation threshold, it means that the transmission information is normal, and the first-level encrypted information is transmitted to the control center in the standard transmission mode. The second encryption module is used to conceal the first-level encrypted information and obtain the second-level concealed information if the time series abnormal deviation is greater than the preset deviation threshold, indicating abnormal fluctuation of the transmitted information. The second transmission module is used to map the secondary covert information into a one-dimensional space to perform double-layer encryption on the secondary covert information, obtain the final encrypted information, and transmit the final encrypted information to the control center in a covert transmission mode. The first decryption module is used to decrypt the first-level encrypted information using a hybrid encryption algorithm to obtain the train information if the control center receives the first-level encrypted information. The second decryption module is used to reverse-engineer the final encrypted information using a secondary encryption key and a two-dimensional spatial mapping algorithm if the control center receives the final encrypted information, to obtain the restored secondary covert information, and then decrypt the restored secondary covert information to obtain the train information.
[0043] The working process, working details and technical effects of the subway information communication system based on encryption processing provided in the second aspect of this embodiment can be found in the subway information communication method based on encryption processing described in the first aspect, and will not be repeated here.
[0044] This embodiment provides a computer device, including a memory, a processor, and a transceiver connected in sequence for communication. The memory stores a computer program, the transceiver sends and receives messages, and the processor reads the computer program and executes the encrypted subway information communication method described in the first aspect. Specifically, the memory may include, but is not limited to, random-access memory (RAM), read-only memory (ROM), flash memory, first-input first-output (FIFO), and / or first-input last-output (FILO) memory, etc.; the processor may include, but is not limited to, an STM32F105 series microprocessor. Furthermore, the computer device may also include, but is not limited to, a power module, a display screen, and other necessary components.
[0045] The working process, working details and technical effects of the aforementioned computer equipment provided in the third aspect of this embodiment can be found in the subway information communication method based on encryption processing described in the first aspect, and will not be repeated here.
[0046] The fourth aspect of this embodiment provides a computer-readable storage medium, wherein the computer-readable storage medium stores instructions, and when the instructions are executed on a computer, the subway information communication method based on encryption processing as described in the first aspect is performed. The computer-readable storage medium refers to a carrier for storing data, and may include, but is not limited to, computer-readable storage media such as floppy disks, optical disks, hard disks, flash memory, USB flash drives, and / or Memory Sticks. The computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices.
[0047] The working process, working details and technical effects of the aforementioned computer-readable storage medium provided in the fourth aspect of this embodiment can be found in the subway information communication method based on encryption processing as described in the first aspect, and will not be repeated here.
[0048] The fifth aspect of this embodiment provides a computer program product, including a computer program or instructions, which, when executed by a computer, are used to implement the subway information communication method based on encryption processing as described in the first aspect.
[0049] The working process, working details, and technical effects of the aforementioned computer program product provided in this embodiment can be found in the subway information communication method based on encryption processing as described in the first aspect, and will not be repeated here.
[0050] Finally, it should be noted that the above description is merely a preferred embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.
Claims
1. A subway information communication method based on encryption processing, characterized in that, include: Train information is obtained and encrypted using a hybrid encryption algorithm to obtain Level 1 encrypted information; Network performance indicators are selected as samples of transmitted information. The pre-optimized communication network anomaly detection model is used to detect the transmitted information samples and obtain the time series anomaly deviation. The time series anomaly deviation is compared with the preset deviation threshold to detect the communication network fluctuation status. If the time series anomaly deviation is less than the preset deviation threshold, it means that the transmitted information is normal and the first-level encrypted information is transmitted to the control center in the standard transmission mode. If the time series deviation exceeds the preset deviation threshold, it indicates abnormal fluctuations in the transmitted information. The first-level encrypted information is then concealed to obtain the second-level concealed information. The secondary covert information is mapped into a one-dimensional space to perform double-layer encryption on the secondary covert information, and the final encrypted information is obtained. The final encrypted information is then transmitted to the control center in a covert transmission mode. If the control center receives Level 1 encrypted information, it uses a hybrid encryption algorithm to decrypt the Level 1 encrypted information to obtain the train information; If the control center receives the final encrypted information, it uses the secondary encryption key and two-dimensional spatial mapping algorithm to reverse-engineer the final encrypted information to obtain the restored secondary covert information, and then decrypts the restored secondary covert information to obtain the train information.
2. The subway information communication method based on encryption processing according to claim 1, characterized in that, The train information is encrypted using a hybrid encryption algorithm to obtain Level 1 encrypted information, including: Randomly generate encryption parameter combinations, and select an elliptic curve based on the elliptic curve cryptography generation mechanism, choosing a point on the elliptic curve as the base point; A hybrid encryption algorithm is used to encrypt the combination of encryption parameters and the base point to obtain the public key; The public key is verified for risk according to the preset verification rules. If the public key verification is successful, a randomly generated integer is obtained. The integer, public key and base point are then encrypted using a hybrid encryption algorithm to obtain the encrypted private key. The train information is encrypted using a private key and a public key to obtain Level 1 encrypted information.
3. The subway information communication method based on encryption processing according to claim 2, characterized in that, The public key is verified for risk according to preset verification rules, including: The public key coordinates are obtained by performing coordinate processing on the public key based on the encryption combination parameters and the base point. Project the public key coordinates onto the elliptic curve; Determine whether the public key coordinates meet a preset judgment condition, wherein the preset judgment condition is whether the public key coordinates are mutually prime numbers and belong to a finite field.
4. The subway information communication method based on encryption processing according to claim 1, characterized in that, The optimization process of the communication network anomaly detection model includes: By combining the autoregressive model and the moving average model, we obtain the autoregressive moving average model, the expression of which is: ; In the formula, This represents an autoregressive moving average model. This represents an autoregressive model. Represents a random variable. Represents a moving average model; The propagation characteristics of historical communication network data are obtained, and the propagation characteristics of historical communication network data are judged to be normal based on the pre-acquired historical transmission time sequence diagram of the communication network. If there are abnormal time sequences, the abnormal time sequences in the historical communication network data are differentially processed to obtain the abnormal traffic of the historical communication network. The historical communication network abnormal traffic was analyzed using an autoregressive moving average model to obtain historical communication network observations. The perturbation error of the autoregressive moving average model, which has a dependency relationship at different periods, is obtained. Based on historical communication network observations and the perturbation error of the autoregressive moving average model, the autoregressive moving average model is optimized to obtain an optimized communication network anomaly detection model. The expression of the optimized communication network anomaly detection model is as follows: ; In the formula, This represents the optimized communication network anomaly detection model. Represents the first constant term. Represents historical communication network observations. This represents the second constant term. Indicates parameter items, Indicates the order.
5. A subway information communication method based on encryption processing according to claim 1, characterized in that, The first-level encrypted information is then processed to obtain the second-level hidden information, which includes: The original carrier image is obtained, and the pixel values of the original carrier image are converted from decimal to binary representation to obtain the converted original carrier image. The original carrier image is an ordinary image used for information concealment. The least significant bit at the corresponding position in the pixel value of the original carrier image after conversion is replaced by the binary bit stream of the first-level encrypted information to obtain the replaced carrier image. The replaced carrier image is converted from binary to decimal representation to obtain a cryptic image, which is then used as secondary cover information.
6. The subway information communication method based on encryption processing according to claim 1, characterized in that, After obtaining the secondary concealment information, the method further includes: Based on the secondary covert information, false information is generated for honeypot deception. The expression of the false information is: ; In the formula, This indicates false information. This indicates secondary concealed information. This indicates the sequence number of the train information. This represents the pseudo-information generation function. Represents a string of pseudo-information; A fake transmission channel is established based on the false messages used for honeypot deception to lure intruders into intercepting the false information. The access to the fake transmission channel is monitored by the control center, and warning information is generated based on the access situation.
7. A subway information communication method based on encryption processing according to claim 6, characterized in that, The secondary covert information is mapped onto a one-dimensional space to perform double-layer encryption, resulting in the final encrypted information, including: The secondary covert information is input into the distributed editor to encode the secondary covert information, thereby obtaining secondary coded information. The secondary coded information is then mapped to the seed space according to the probability density function to obtain the mapped transmission information. A one-dimensional mapping algorithm is used to map the transmitted information to a one-dimensional space, and the first-layer encrypted ciphertext is generated based on the pseudo-information. The first-layer encrypted ciphertext is encrypted using a two-dimensional mapping algorithm to obtain the second-layer encrypted ciphertext, which is then used as the final encrypted information.
8. A subway information communication system based on encryption processing, used to implement the method according to any one of claims 1 to 7, characterized in that, include: The first encryption module is used to obtain train information and encrypt the train information using a hybrid encryption algorithm to obtain first-level encrypted information. The first transmission module is used to select network performance indicators as transmission information samples, use a pre-optimized communication network anomaly detection model to detect the transmission information samples, obtain the time series anomaly deviation, compare the time series anomaly deviation with a preset deviation threshold to detect the communication network fluctuation status. If the time series anomaly deviation is less than the preset deviation threshold, it means that the transmission information is normal, and the first-level encrypted information is transmitted to the control center in the standard transmission mode. The second encryption module is used to conceal the first-level encrypted information and obtain the second-level concealed information if the time series abnormal deviation is greater than the preset deviation threshold, indicating abnormal fluctuation of the transmitted information. The second transmission module is used to map the secondary covert information into a one-dimensional space to perform double-layer encryption on the secondary covert information, obtain the final encrypted information, and transmit the final encrypted information to the control center in a covert transmission mode. The first decryption module is used to decrypt the first-level encrypted information using a hybrid encryption algorithm to obtain the train information if the control center receives the first-level encrypted information. The second decryption module is used to reverse-engineer the final encrypted information using a secondary encryption key and a two-dimensional spatial mapping algorithm if the control center receives the final encrypted information, to obtain the restored secondary covert information, and then decrypt the restored secondary covert information to obtain the train information.
9. A computer device, characterized in that, The device includes a memory, a processor, and a transceiver that are sequentially connected in communication. The memory is used to store a computer program, the transceiver is used to send and receive messages, and the processor is used to read the computer program and execute the subway information communication method based on encryption processing as described in any one of claims 1 to 7.
10. A computer program product, comprising a computer program or instructions, characterized in that, When the computer program or the instructions are executed by the computer, they implement the subway information communication method based on encryption processing as described in any one of claims 1 to 7.