An internet platform encryption transmission method and system for industrial data security

Abstract

The application is suitable for the technical field of data security, and provides an internet platform encryption transmission method and system for industrial data security, which realizes real-time collection of multi-dimensional characteristic data of an industrial site; inputs the multi-dimensional characteristic data into a preset risk assessment model to obtain a comprehensive risk index R, compares the comprehensive risk index R with a first threshold value, and determines the risk level of a current transmission task according to the comparison result; determines the encryption strength level through the sensitive level, acquires a transmission strategy set, matches the corresponding transmission strategy set S according to the risk level; splits the encrypted data according to a link redundancy strategy to obtain original data through threshold secret sharing and multi-link concurrent transmission, and delivers the core control instruction for execution after time stamp anti-replay verification, has multiple security dimensions such as zero-trust access verification and time stamp anti-replay verification, and has the advantages of unified strategy decision center cooperation and linkage.

Description

Technical Field

[0001] This invention belongs to the field of data security technology, and in particular relates to an encrypted transmission method and system for Internet platforms for industrial data security. Background Technology

[0002] As a product of the deep integration of next-generation information technology and manufacturing, the Industrial Internet is driving the rapid development of industrial production towards digitalization, networking, and intelligence. Under the Industrial Internet architecture, massive amounts of industrial equipment (such as PLCs, sensors, and frequency converters) collect data, remotely monitor, and issue commands through internet platforms, enabling remote operation and maintenance and collaborative optimization of the production process. However, when industrial data is transmitted through the public internet, it faces various security threats, including data eavesdropping, man-in-the-middle attacks, command tampering, and replay attacks. This is especially true for the transmission of core control commands such as equipment start-up and shutdown, and parameter modification. If intercepted or tampered with by attackers, this could lead to equipment malfunctions, production line shutdowns, or even safety accidents. Therefore, ensuring the security of industrial data during transmission through internet platforms has become a critical technical issue that urgently needs to be addressed in the Industrial Internet field.

[0003] Existing technologies for encrypted transmission of industrial data mainly employ the following approaches: First, using fixed encryption algorithms (such as AES and RSA) to uniformly encrypt all data. While simple to implement, this approach fails to consider the diverse nature of industrial data, applying the same encryption strength to ordinary status data and core control commands, resulting in resource waste or insufficient security. Second, using a PKI key management system based on digital certificates, where a certificate authority issues digital certificates for each device to achieve identity authentication and key negotiation. However, the sheer number and complexity of devices in industrial settings make certificate deployment, updates, and revocation management extremely costly, hindering large-scale application. Third, employing multi-link transmission technology to improve transmission reliability. However, existing solutions typically focus only on link redundancy and backup, without linking to data sensitivity levels and real-time risk status, failing to dynamically adjust security strategies based on risk changes. Furthermore, existing technologies lack targeted protection for industrial control commands, especially for critical operations such as emergency stop commands, where effective anti-replay and multi-link collaborative protection mechanisms have not yet been established.

[0004] In summary, existing industrial data encryption transmission methods suffer from the following shortcomings: fixed and rigid security strategies that cannot be dynamically adjusted according to risk conditions; complex key management that is difficult to adapt to scenarios with massive amounts of industrial equipment; a lack of targeted protection for core control commands; and independent security dimensions that fail to form a collaborative protection system. Therefore, there is an urgent need for an industrial data encryption transmission method that can dynamically adjust encryption strategies based on multi-dimensional risk conditions in the industrial environment, simplify key management, strengthen the protection of core commands, and achieve multi-dimensional collaborative protection. Summary of the Invention

[0005] The purpose of this invention is to provide an encrypted transmission method for internet platforms aimed at industrial data security, in order to solve the problems raised in the third part of the background technology.

[0006] This invention is implemented as follows: a method for encrypted transmission of industrial data on an internet platform, the method comprising: Real-time acquisition of multi-dimensional feature data from industrial sites, including data content features, equipment behavior features, network environment features, and identity trust features; Obtain a risk assessment model, input the multidimensional feature data into a preset risk assessment model to obtain a comprehensive risk index R, compare the comprehensive risk index R with a first threshold, and determine the risk level of the current transmission task based on the comparison result; The encryption strength level is determined by the sensitivity level, the transmission policy set is obtained, and the corresponding transmission policy set S is matched according to the risk level. According to the link redundancy strategy, the encrypted data is split into threshold secret sharing segments and transmitted concurrently through multiple links to obtain the original data. The core control instructions are then timestamped to prevent replay before being delivered for execution.

[0007] Preferably, the step of obtaining the risk assessment model, which involves inputting the multidimensional feature data into a preset risk assessment model to obtain a comprehensive risk index R, comparing the comprehensive risk index R with a first threshold, and determining the risk level of the current transmission task based on the comparison result, specifically includes: A risk assessment model is obtained, which is used to calculate the comprehensive risk index R. The multidimensional feature data is input into the preset risk assessment model to obtain the comprehensive risk index R. Obtain a first threshold and a second threshold. The first threshold corresponds to the triggering condition of the key management strategy, and the second threshold corresponds to the triggering condition of the link redundancy strategy. Compare the comprehensive risk index R with the first threshold. If the comprehensive risk index R is determined to be greater than the first threshold, then the comprehensive risk index R is compared with the second threshold. If the second threshold is higher than the first threshold, the risk level of the current transmission task is determined based on the comparison result.

[0008] Preferably, the steps of determining the encryption strength level through the sensitivity level, obtaining the transmission policy set, and matching the corresponding transmission policy set S according to the risk level specifically include: Obtain a sensitivity level mapping table, which is used to assess the sensitivity level of different data source types and determine the encryption strength level based on the sensitivity level. When the risk level reaches the level corresponding to the first threshold, the key management method is configured as a real-time key distribution mechanism. When the risk level reaches the level corresponding to the second threshold and the sensitivity level is a core control instruction, the link redundancy strategy is adopted to split the encrypted data into N fragments and transmit them concurrently through M independent physical links, where M≥2 and N≥M. Obtain a transmission strategy set, which includes encryption strength level, key management method and link redundancy strategy, and match the corresponding transmission strategy set S according to the risk level.

[0009] Preferably, the step of splitting the encrypted data according to the link redundancy strategy by threshold secret sharing and transmitting it concurrently through multiple links to obtain the original data, and then performing timestamp anti-replay verification on the core control instructions before delivery for execution, specifically includes: The execution data is obtained by encrypting the original data according to the encryption strength level and requesting and obtaining the IBE session key based on the device fingerprint from the key center through key management. The encrypted data is split into threshold secret sharing segments according to the link redundancy strategy and transmitted concurrently through multiple links. The zero-trust access verification strength is dynamically adjusted according to the risk level, and the access request is verified with zero trust according to the access verification strength. After successful verification, the received fragments are reassembled and decrypted to obtain the original data. The core control instructions are then timestamped to prevent replay before being delivered for execution.

[0010] Preferably, the comprehensive risk index R is calculated using a weighted summation model: R = α·S_data + β·D_dev + γ·N_risk + δ·T_trust, where S_data is the data sensitivity, D_dev is the device behavior deviation, N_risk is the network risk value, T_trust is the device trust value, and α, β, γ, and δ are preset weights, satisfying α+β+γ+δ=1.

[0011] Another objective of this invention is to provide an encrypted transmission system for an internet platform aimed at industrial data security, the system comprising: The multidimensional feature data module collects multidimensional feature data from the industrial site in real time. The multidimensional feature data includes data content features, equipment behavior features, network environment features, and identity trust features. The risk assessment model module acquires a risk assessment model, inputs the multidimensional feature data into a preset risk assessment model to obtain a comprehensive risk index R, compares the comprehensive risk index R with a first threshold, and determines the risk level of the current transmission task based on the comparison result. The transmission strategy module determines the encryption strength level based on the sensitivity level, obtains the transmission strategy set, and matches the corresponding transmission strategy set S according to the risk level. The execution module performs threshold secret sharing splitting on the encrypted data according to the link redundancy strategy and transmits it concurrently through multiple links to obtain the original data. After performing timestamp anti-replay verification on the core control instructions, it delivers them for execution.

[0012] Preferably, the risk assessment model module includes: The risk assessment model unit obtains a risk assessment model, which is used to calculate the comprehensive risk index R. The multidimensional feature data is input into the preset risk assessment model to obtain the comprehensive risk index R. The threshold acquisition unit acquires a first threshold and a second threshold. The first threshold corresponds to the triggering condition of the key management strategy, and the second threshold corresponds to the triggering condition of the link redundancy strategy. The unit compares the comprehensive risk index R with the first threshold. If the threshold comparison unit determines that the comprehensive risk index R is greater than the first threshold, it compares the comprehensive risk index R with the second threshold. If the second threshold is higher than the first threshold, it determines the risk level of the current transmission task based on the comparison result.

[0013] Preferably, the transmission strategy module includes: Sensitivity level unit: Obtains sensitivity level mapping table, which is used to evaluate the sensitivity level of different data source types and determine the encryption strength level through the sensitivity level; The comparison processing unit configures the key management method as a real-time key distribution mechanism when the risk level reaches the level corresponding to the first threshold. When the risk level reaches the level corresponding to the second threshold and the sensitivity level is a core control instruction, the link redundancy strategy is adopted to split the encrypted data into N fragments and transmit them concurrently through M independent physical links, where M≥2 and N≥M. The transmission strategy set unit acquires a transmission strategy set, which includes encryption strength level, key management method and link redundancy strategy, and matches the corresponding transmission strategy set S according to the risk level.

[0014] Preferably, the execution module includes: The encryption unit acquires execution data, which is the original data encrypted according to the encryption strength level, and requests and acquires the IBE session key based on the device fingerprint from the key center through key management. The trust verification unit performs threshold secret sharing splitting on the encrypted data according to the link redundancy strategy and transmits it concurrently through multiple links. It dynamically adjusts the zero-trust access verification strength according to the risk level and performs zero-trust verification on access requests according to the access verification strength. The execution unit, after verification, reassembles and decrypts the received fragments to obtain the original data, and performs timestamp anti-replay verification on the core control instructions before delivering them for execution.

[0015] Preferably, the comprehensive risk index R is calculated using a weighted summation model: R = α·S_data + β·D_dev + γ·N_risk + δ·T_trust, where S_data is the data sensitivity, D_dev is the device behavior deviation, N_risk is the network risk value, T_trust is the device trust value, and α, β, γ, and δ are preset weights, satisfying α+β+γ+δ=1.

[0016] This invention provides an encrypted transmission method for internet platforms aimed at industrial data security. By collecting multi-dimensional feature data from industrial sites in real time, constructing a risk assessment model to calculate a comprehensive risk index R, and dynamically matching an encrypted transmission strategy set according to the risk level, this invention achieves a dynamic adaptive balance between security and transmission efficiency. When the risk is low, lightweight encryption and single-link transmission are used to ensure the real-time requirements of industrial data. When the risk increases, strong security measures such as IBE real-time key distribution and threshold secret sharing multi-link transmission are automatically triggered, avoiding the resource waste caused by the traditional "one-size-fits-all" high-strength encryption in industrial sites. Simultaneously, a tiered response mechanism activates high-overhead security measures only when necessary, ensuring controllable resource consumption and fully adapting to the computing power and bandwidth constraints of industrial site equipment.

[0017] This invention uses a sensitivity level mapping table to finely identify industrial data source types, distinguishing between core control commands and ordinary status data. When core control commands face high-risk scenarios, a threshold-based secret sharing mechanism automatically initiates, splitting the data into multiple fragments and transmitting them concurrently through multiple independent physical links. Any fragment can be used to recover the original data, effectively defending against man-in-the-middle attacks and link hijacking. Simultaneously, combined with timestamp-based replay protection, it prevents attackers from intercepting and replaying historical commands, thus preventing malfunctions in industrial equipment and significantly improving the reliability and security of critical commands transmitted over the public network.

[0018] This invention employs an Identity-Based Encryption (IBE) mechanism based on device fingerprints, directly utilizing hardware identifiers such as the device's MAC address and CPU serial number as public keys. It eliminates the need for pre-installed digital certificates and complex certificate chain management. When the risk level reaches a trigger condition, the platform issues a session private key in real time, achieving dynamic key updates with a "one-time key" mechanism. This significantly reduces the key deployment and maintenance costs for massive industrial equipment. Furthermore, this invention integrates multiple security dimensions, including multi-dimensional risk perception, hierarchical encryption, IBE dynamic key distribution, threshold secret sharing across multiple links, zero-trust access verification, and timestamp-based replay protection. Through a unified policy decision center, a complete defense-in-depth system is formed from the data source to the platform. The platform dynamically adjusts the strength and frequency of zero-trust verification based on the risk level, ensuring that only trusted devices and trusted requests can enter the decryption execution phase. Attached Figure Description

[0019] Figure 1 A flowchart illustrating an encrypted transmission method for industrial data security on an internet platform, provided by an embodiment of the present invention; Figure 2 A flowchart of the steps for determining the risk level of the current transmission task based on the comparison result by comparing the comprehensive risk index R and the first threshold, as provided in this embodiment of the invention; Figure 3 A flowchart of the steps provided in this embodiment of the invention for determining the encryption strength level by the sensitivity level, obtaining the transmission strategy set, and matching the corresponding transmission strategy set S according to the risk level; Figure 4 The flowchart illustrates the steps of the following steps provided in this embodiment of the invention: First, the encrypted data is split according to the link redundancy strategy, then the encrypted data is transmitted concurrently through multiple links to obtain the original data. Finally, the core control command is timestamped to prevent replay and then delivered for execution. Figure 5 An architecture diagram of an encrypted transmission system for an internet platform aimed at industrial data security is provided in an embodiment of the present invention. Figure 6 This is an architecture diagram of the risk assessment model module provided in an embodiment of the present invention; Figure 7 An architecture diagram of the transmission strategy module provided in an embodiment of the present invention; Figure 8 This is an architecture diagram of the execution module provided in an embodiment of the present invention. Detailed Implementation

[0020] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the invention.

[0021] like Figure 1 As shown in the figure, an encrypted transmission method for internet platforms aimed at industrial data security is provided by an embodiment of the present invention. The method includes: S100 collects multi-dimensional feature data from the industrial site in real time. The multi-dimensional feature data includes data content features, equipment behavior features, network environment features, and identity trust features.

[0022] In this step, multi-dimensional feature data from the industrial site is collected in real time. The data acquisition module of the edge security gateway collects multi-dimensional feature data from the industrial site at a preset period (e.g., 100 milliseconds). The multi-dimensional feature data includes data content features, equipment behavior features, network environment features, and identity trust features.

[0023] The data content characteristics are obtained through deep packet inspection, including the protocol header information and original payload of the data to be transmitted. For example, when a Modbus TCP packet is acquired, parsing reveals a function code of 0x05 (write single coil), a register address of 0x0001 (emergency stop register), and a data value of 0xFF00 (stop instruction). This information is used for subsequent sensitivity level determination.

[0024] The device behavior characteristics include the operating status parameters of the transmitting device and their deviation from the historical baseline. For example, the CPU utilization rate, network connection count, and command transmission frequency of the PLC device are collected and compared with the historical baseline to calculate the deviation index. The network environment characteristics include the latency jitter, packet loss rate, and abnormal traffic detection results of the current communication link. If port scanning behavior is detected on a link, it is marked as high risk. The identity trust characteristics include the device's hardware fingerprint (such as MAC address and CPU serial number) and the context information of the access environment (such as geographical location and access time). If the access time exceeds the normal working window, it is marked as an abnormal time period.

[0025] S200, input the multidimensional feature data into a preset risk assessment model to obtain a comprehensive risk index R, compare the comprehensive risk index R with a first threshold, and determine the risk level of the current transmission task based on the comparison result.

[0026] In this step, the multidimensional feature data is input into a preset risk assessment model. The risk perception module inputs the multidimensional feature data collected in step A and the sensitivity level determined in step B into the preset risk assessment model, which then calculates the comprehensive risk index R. The risk assessment model uses a weighted summation algorithm to normalize the multidimensional feature data and perform fusion calculations according to preset weights.

[0027] After obtaining the comprehensive risk index R, the risk perception module compares R with a preset first threshold (e.g., 0.3). If R is greater than or equal to 0.3, the current transmission task is determined to be of a high-risk level; if R is less than 0.3, it is determined to be of a low-risk level. In this example, R = 0.695 ≥ 0.3, so the current transmission task is determined to be of a high-risk level. This determination result is used to generate the subsequent encryption transmission strategy.

[0028] S300 determines the encryption strength level based on the sensitivity level, obtains the transmission policy set, and matches the corresponding transmission policy set S according to the risk level.

[0029] In this step, the encryption strength level is determined based on the sensitivity level. The policy decision center first determines the encryption strength level based on the sensitivity level determined in step B. The encryption strength level is positively correlated with the sensitivity level: when the sensitivity level is ordinary state data, a lightweight encryption strength is used, such as the SM4 symmetric encryption algorithm with a key length of 128 bits; when the sensitivity level is core control instructions, a high-strength encryption is used, such as a combination of SM2 asymmetric encryption and SM4 symmetric encryption, increasing the key length to 256 bits, and digitally signing the instructions.

[0030] Subsequently, the strategy decision center obtains a preset transmission strategy set. This transmission strategy set includes security configuration parameters across multiple dimensions, such as encryption strength level, key management method, link redundancy strategy, and access authentication strength. Different risk levels correspond to different transmission strategy sets, and the strategy decision center matches the corresponding transmission strategy set S from the strategy mapping table based on the risk level determined in step C.

[0031] S400: According to the link redundancy strategy, the encrypted data is split into threshold secret sharing segments and transmitted concurrently through multiple links to obtain the original data. The core control command is then timestamped to prevent replay before being delivered for execution.

[0032] In this step, the encrypted data is split into threshold secret sharing segments according to the link redundancy strategy and transmitted concurrently through multiple links. After receiving the encrypted transmission strategy set S generated in step D, the strategy execution engine coordinates each execution module to split the encrypted data into threshold secret sharing segments according to the link redundancy strategy and transmit it concurrently through multiple links.

[0033] After the platform-side access gateway receives fragments transmitted from each link, the reassembly and decryption module collects the fragments and reassembles them. Taking the aforementioned (3,5) threshold scheme as an example, after collecting fragment 1, fragment 2, and fragment 5 (from 5G and fiber optic links), the recovery function of the Shamir threshold algorithm is called to calculate the original encrypted data packet, and then the original instructions and additional information are restored through the decryption module.

[0034] like Figure 2As shown in the preferred embodiment of the present invention, the step of obtaining a risk assessment model, which involves inputting the multidimensional feature data into a preset risk assessment model to obtain a comprehensive risk index R, comparing the comprehensive risk index R with a first threshold, and determining the risk level of the current transmission task based on the comparison result, specifically includes: S201, Obtain the risk assessment model, which is used to calculate the comprehensive risk index R. Input the multidimensional feature data into the preset risk assessment model to obtain the comprehensive risk index R.

[0035] In this step, a risk assessment model is acquired and configured in advance. This risk assessment model is used to calculate the comprehensive risk index R. The risk assessment model is pre-built based on historical data from the industrial site and knowledge from safety experts. Its core components include the normalized mapping relationship of multi-dimensional feature data, the weight coefficients of each dimension, and the calculation logic of weighted summation.

[0036] Specifically, the risk assessment model employs a weighted summation algorithm, pre-defining normalization rules and weight allocations for feature data across each dimension. For example, the normalization rule for data sensitivity S_data is: core control commands are mapped to 0.8, and ordinary state data to 0.2; device behavior deviation D_dev is directly normalized to the [0,1] interval after calculation using Mahalanobis distance; network risk value N_risk is mapped based on anomaly detection results: 0 for no anomalies, 0.3 for low risk, 0.6 for medium risk, and 0.9 for high risk; identity trust value T_trust is normalized to the [0,1] interval after comprehensive scoring based on continuous authentication duration and access context. Weight coefficients are preset according to the importance of the industrial scenario, such as α=0.35, β=0.25, γ=0.25, and δ=0.15, with data sensitivity having the highest weight to reflect the dominant role of core control commands in risk assessment.

[0037] The comprehensive risk index R is calculated using a weighted summation model: R = α·S_data + β·D_dev + γ·N_risk + δ·T_trust, where S_data is the data sensitivity, D_dev is the device behavior deviation, N_risk is the network risk value, T_trust is the device trust value, and α, β, γ, and δ are preset weights, satisfying α+β+γ+δ=1.

[0038] Substituting the above values ​​into the weighted summation formula: R = 0.35×0.8 + 0.25×0.82 + 0.25×0.6 + 0.15×0.4 = 0.28 + 0.205 + 0.15 + 0.06 = 0.695, which gives the comprehensive risk index R as 0.695.

[0039] S202, obtain the first threshold and the second threshold, the first threshold corresponds to the triggering condition of the key management policy, the second threshold corresponds to the triggering condition of the link redundancy policy, and compare the comprehensive risk index R with the first threshold.

[0040] In this step, a first threshold and a second threshold are obtained and pre-configured. The first threshold corresponds to the triggering condition of the key management strategy, and the second threshold corresponds to the triggering condition of the link redundancy strategy. The specific values ​​of the first and second thresholds are pre-set according to the security requirements and transmission reliability requirements of the industrial scenario. For example, the first threshold is set to 0.3 and the second threshold is set to 0.6, with the second threshold being higher than the first threshold, to reflect the progressive relationship of different security protection strategies.

[0041] The calculated comprehensive risk index R is compared with the first threshold. This value is then compared with the first threshold of 0.3. Since 0.695 ≥ 0.3, it is determined that the triggering condition of the key management policy is met, that is, the current transmission task needs to trigger the IBE real-time key distribution mechanism based on device fingerprint.

[0042] Subsequently, the comprehensive risk index R is compared with the second threshold. Since the second threshold is 0.6, and R = 0.695 ≥ 0.6, it is determined that the triggering condition of the link redundancy strategy is met simultaneously. That is, the current transmission task needs to activate the threshold secret sharing algorithm to split the encrypted data into multiple fragments and transmit them concurrently through multiple independent physical links. If the comprehensive risk index R only meets the first threshold but does not reach the second threshold (e.g., R = 0.5), only the key management strategy is triggered, and the link redundancy strategy is not activated, thereby avoiding excessive consumption of transmission resources while ensuring security.

[0043] S203. If the comprehensive risk index R is greater than the first threshold, then compare the comprehensive risk index R with the second threshold. If the second threshold is higher than the first threshold, determine the risk level of the current transmission task based on the comparison result.

[0044] In this step, if the comprehensive risk index R is greater than the first threshold, and the comprehensive risk index R is greater than the first threshold but less than the second threshold, the current transmission task is determined to be of medium risk level; if the comprehensive risk index R is greater than or equal to the second threshold, the current transmission task is determined to be of high risk level; and if the comprehensive risk index R is less than or equal to the first threshold, the current transmission task is determined to be of low risk level.

[0045] The calculated comprehensive risk index R = 0.695. The risk perception module first compares R = 0.695 with the first threshold of 0.3, and the result is R > 0.3, which meets the condition of being greater than the first threshold. Subsequently, R = 0.695 is compared with the second threshold of 0.6, and the result is R ≥ 0.6. Therefore, the current transmission task is determined to be of a high-risk level.

[0046] In another scenario, if a temperature sensor uploads ordinary data and calculates a comprehensive risk index R=0.5, then R=0.5 is first compared with the first threshold of 0.3, resulting in R>0.3; then R=0.5 is compared with the second threshold of 0.6, resulting in R<0.6. Therefore, the current transmission task is determined to be of medium risk level. If a device transmits data under normal operating conditions and calculates R=0.2, then R≤0.3, and it is directly determined to be of low risk level, without needing to perform a second threshold comparison. Through the above-mentioned hierarchical judgment mechanism, the system can accurately identify different risk levels, providing a basis for the subsequent generation of differentiated strategies.

[0047] like Figure 3 As shown, in a preferred embodiment of the present invention, the steps of determining the encryption strength level through the sensitivity level, obtaining the transmission strategy set, and matching the corresponding transmission strategy set S according to the risk level specifically include: S301, Obtain the sensitivity level mapping table, which is used to evaluate the sensitivity level of different data source types and determine the encryption strength level based on the sensitivity level.

[0048] In this step, a sensitivity level mapping table is obtained. This table uses the data source identifier as an index and defines the sensitivity level for each data source or data type. For example, the register address range 0x0000-0x0010 in a PLC controller involving emergency stop functionality is mapped to core control instructions; the parameter modification register address range 0x1000-0x2000 in a frequency converter is also mapped to core control instructions; the data acquisition channel of a temperature sensor is mapped to normal status data; and the reading report of a flow meter is mapped to normal status data.

[0049] The data packet has a function code of 0x05 and a register address of 0x0001. By querying the preset rules in the sensitivity level mapping table (function code 0x05 and register address falling within the range of 0x0000-0x0010), it is determined that the sensitivity level corresponding to this data source type is a core control instruction. The encryption strength level is determined by the sensitivity level. When the sensitivity level is a core control instruction, the corresponding encryption strength level is high-strength encryption, using a combination of SM2 asymmetric encryption and SM4 symmetric encryption. When the sensitivity level is ordinary state data, the corresponding encryption strength level is lightweight encryption, using SM4 symmetric encryption with a key length of 128 bits.

[0050] S302, when the risk level reaches the level corresponding to the first threshold, the key management method is configured as a real-time key distribution mechanism. When the risk level reaches the level corresponding to the second threshold and the sensitivity level is a core control instruction, the encrypted data is split into N fragments using a link redundancy strategy and transmitted concurrently through M independent physical links, where M≥2 and N≥M.

[0051] In this step, when the risk level reaches the level corresponding to the first threshold, it has reached the level corresponding to the first threshold (medium risk and above) and the level corresponding to the second threshold (high risk). Therefore, the key management method is configured as a real-time key distribution mechanism, that is, triggering IBE real-time key distribution based on device fingerprint, using the device MAC address as the public key to request the current session private key from the platform, realizing one-time one-key.

[0052] Meanwhile, since the risk level has reached the level corresponding to the second threshold (high risk) and the sensitivity level is the core control instruction, the link redundancy strategy is configured to initiate threshold secret sharing. Specifically, a (3,5) threshold scheme is used to split the encrypted data into 5 fragments, which are transmitted concurrently through 3 independent physical links. For example, the 5 fragments are allocated to a 5G link, an industrial WIFI link, and a wired fiber optic link: the 5G link transmits fragments 1 and 2, the industrial WIFI link transmits fragments 3 and 4, and the wired fiber optic link transmits fragment 5. M=3, N=5, satisfying the condition N≥M. Any 3 fragments can be used to recover the original data. Even if a link is attacked or interrupted, as long as at least two links are normal, the complete transmission of data can be guaranteed.

[0053] In another scenario, a temperature sensor uploads ordinary data, and the risk level is determined to be medium risk (R=0.5). This has reached the level corresponding to the first threshold (medium risk) but has not reached the level corresponding to the second threshold (high risk). In this case, only the key management mode is configured as a real-time key distribution mechanism, the link redundancy strategy is not activated, and single-link transmission is used to ensure key security while avoiding excessive consumption of transmission resources.

[0054] S303, Obtain the transmission strategy set, which includes encryption strength level, key management method and link redundancy strategy, and match the corresponding transmission strategy set S according to the risk level.

[0055] In this step, a transmission strategy set is obtained. The strategy decision center matches the corresponding transmission strategy set S from the strategy mapping table based on the risk level determined in step C. For example, the strategy mapping table is configured as follows: When the risk level is low risk, the matched transmission strategy set S includes a lightweight encryption level (SM4-128), a pre-shared key management method, and a single-link transmission redundancy strategy; when the risk level is medium risk, the matched transmission strategy set S includes a medium-strength encryption level (SM4-256), an IBE real-time key distribution key management method, and a single-link transmission redundancy strategy; when the risk level is high risk and the sensitivity level is core control command, the matched transmission strategy set S includes a high-strength encryption level (SM2+SM4), an IBE real-time key distribution key management method, and a (3,5) threshold secret sharing combined with three-link concurrent transmission redundancy strategy.

[0056] The strategy decision center queries the strategy mapping table and obtains the corresponding transmission strategy set S: the encryption strength level is SM2+SM4 high-strength encryption, the key management method is the IBE real-time key distribution mechanism based on device fingerprints, and the link redundancy strategy is (3,5) threshold secret sharing combined with concurrent transmission of three independent physical links: 5G, industrial WIFI, and wired fiber optic. This strategy set S will be issued to the execution module to guide subsequent encryption, key acquisition, and transmission operations.

[0057] like Figure 4 As shown, in a preferred embodiment of the present invention, the steps of splitting the encrypted data according to the link redundancy strategy by threshold secret sharing and transmitting it concurrently through multiple links to obtain the original data, and then performing timestamp anti-replay verification on the core control instructions before delivery for execution, specifically include: S401, Obtain execution data, wherein the execution data is the original data encrypted according to the encryption strength level, and the IBE session key based on the device fingerprint is requested and obtained from the key center through the key management method.

[0058] In this step, the execution engine first parses the encryption strength level in policy set S to obtain execution data. Taking the aforementioned scenario of PLC-001 transmitting core control instructions as an example, the encryption strength level in policy set S is SM2+SM4 high-strength encryption. The execution engine calls the encryption module to encrypt the original data according to this encryption strength level: first, the original instructions and the attached anti-replay token are encrypted using the SM4 symmetric encryption algorithm to generate ciphertext; then, the ciphertext is digitally signed using the SM2 asymmetric encryption algorithm to ensure data integrity and non-repudiation.

[0059] Simultaneously, the policy execution engine, based on the key management method in policy set S, triggers the key client to request and obtain the IBE session key based on the device fingerprint from the key center. Taking the aforementioned scenario as an example, the key management method is configured as the IBE real-time key distribution mechanism. The key client reads the hardware fingerprint of the sending device (such as the MAC address AA:BB:CC:DD:EE:FF), uses this device fingerprint as the public key identifier, and initiates a session key request to the platform-side key generation center (PKG). After verifying the device identity and current risk level, the key generation center uses the master key to calculate and generate a session private key corresponding to the device fingerprint, and distributes it to the key client through a secure channel (such as a TLS encrypted link). This session private key is used only for this transmission, achieving one-time password protection and effectively preventing the mass cracking of historical data due to key leakage.

[0060] S402, according to the link redundancy strategy, the encrypted data is split into threshold secret sharing segments and transmitted concurrently through multiple links. The zero-trust access verification strength is dynamically adjusted according to the risk level, and the access request is verified with zero trust according to the access verification strength.

[0061] In this step, the encrypted data is split into fragments using threshold secret sharing according to the link redundancy strategy and transmitted concurrently across multiple links. The link redundancy module first calls the threshold secret sharing algorithm to split the encrypted data packet into multiple fragments. After splitting, the multi-link transmission module allocates the five fragments to three independent physical links: 5G link for fragment 1 and fragment 2, industrial WIFI link for fragment 3 and fragment 4, and wired fiber optic link for fragment 5. The three links transmit concurrently, ensuring that even if one link is interrupted or attacked, as long as any two links are normal, at least three fragments can be collected to recover the original data.

[0062] Meanwhile, the platform-side access gateway dynamically adjusts the zero-trust access verification strength based on the aforementioned risk level. Specifically, the access gateway has a built-in verification strength configuration table that maps risk levels to verification strengths: when the risk level is low, the verification strength is basic verification, only verifying device identity and IP address; when the risk level is medium, the verification strength is enhanced verification, adding geographical location verification and time window verification to the basic verification; when the risk level is high, the verification strength is continuous verification, adding behavioral consistency verification and hardware token secondary authentication to the enhanced verification, and the verification frequency is increased to once every 100 milliseconds. Taking the aforementioned high-risk scenario as an example, when the risk level is high, the access gateway dynamically adjusts the verification strength to continuous verification mode.

[0063] S403, after successful verification, the received fragments are reassembled and decrypted to obtain the original data, and the core control instructions are timestamped to prevent replay before being delivered for execution.

[0064] In this step, after successful verification, the received fragments are reassembled and decrypted. The reassembly and decryption module first collects fragments from multiple links. Taking the core control command in the aforementioned high-risk scenario as an example, the link redundancy strategy adopts (3,5) threshold secret sharing. The encrypted data is split into 5 fragments and transmitted through three links: 5G, industrial WIFI, and wired fiber optic.

[0065] For core control commands, the command verification module performs timestamp-based replay protection checks after decryption. If all checks pass, the shutdown command is deemed valid and executed by the execution unit. If any check fails—for example, if an attacker intercepts and replays an old command, the timestamp T differs from the current time by more than 5 seconds, or the random number Nonce has been marked as used—it is considered a replay attack. The command is discarded, and a security alarm is triggered, effectively preventing man-in-the-middle replay attacks from causing malfunctions in industrial equipment.

[0066] like Figure 5 As shown in the figure, an encrypted transmission system for an internet platform for industrial data security is provided by an embodiment of the present invention. The system includes: The multidimensional feature data module 100 is used to collect multidimensional feature data from the industrial site in real time. The multidimensional feature data includes data content features, equipment behavior features, network environment features, and identity trust features.

[0067] In this system, the multidimensional feature data module 100 collects multidimensional feature data from the industrial site in real time, while the data acquisition module of the edge security gateway collects multidimensional feature data from the industrial site in real time at a preset period (e.g., 100 milliseconds). The multidimensional feature data includes data content features, equipment behavior features, network environment features, and identity trust features.

[0068] The data content characteristics are obtained through deep packet inspection, including the protocol header information and original payload of the data to be transmitted. For example, when a Modbus TCP packet is acquired, parsing reveals a function code of 0x05 (write single coil), a register address of 0x0001 (emergency stop register), and a data value of 0xFF00 (stop instruction). This information is used for subsequent sensitivity level determination.

[0069] The device behavior characteristics include the operating status parameters of the transmitting device and their deviation from the historical baseline. For example, the CPU utilization rate, network connection count, and command transmission frequency of the PLC device are collected and compared with the historical baseline to calculate the deviation index. The network environment characteristics include the latency jitter, packet loss rate, and abnormal traffic detection results of the current communication link. If port scanning behavior is detected on a link, it is marked as high risk. The identity trust characteristics include the device's hardware fingerprint (such as MAC address and CPU serial number) and the context information of the access environment (such as geographical location and access time). If the access time exceeds the normal working window, it is marked as an abnormal time period.

[0070] The risk assessment model module 200 is used to input the multidimensional feature data into a preset risk assessment model to obtain a comprehensive risk index R, compare the comprehensive risk index R with a first threshold, and determine the risk level of the current transmission task based on the comparison result.

[0071] In this system, the risk assessment model module 200 inputs the multidimensional feature data into a preset risk assessment model, and the risk perception module inputs the multidimensional feature data collected in step A and the sensitivity level determined in step B into the preset risk assessment model. The model then calculates the comprehensive risk index R. The risk assessment model uses a weighted summation algorithm to normalize the multidimensional feature data and perform fusion calculations according to preset weights.

[0072] After obtaining the comprehensive risk index R, the risk perception module compares R with a preset first threshold (e.g., 0.3). If R is greater than or equal to 0.3, the current transmission task is determined to be of a high-risk level; if R is less than 0.3, it is determined to be of a low-risk level. In this example, R = 0.695 ≥ 0.3, so the current transmission task is determined to be of a high-risk level. This determination result is used to generate the subsequent encryption transmission strategy.

[0073] The transmission strategy module 300 is used to determine the encryption strength level through the sensitivity level, obtain the transmission strategy set, and match the corresponding transmission strategy set S according to the risk level.

[0074] In this system, the transmission strategy module 300 determines the encryption strength level based on the sensitivity level. The strategy decision center first determines the encryption strength level based on the sensitivity level determined in step B. The encryption strength level is positively correlated with the sensitivity level: when the sensitivity level is ordinary state data, a lightweight encryption strength is used, such as the SM4 symmetric encryption algorithm with a key length of 128 bits; when the sensitivity level is core control instructions, a high-strength encryption is used, such as a combination of SM2 asymmetric encryption and SM4 symmetric encryption, increasing the key length to 256 bits, and digitally signing the instructions.

[0075] Subsequently, the strategy decision center obtains a preset transmission strategy set. This transmission strategy set includes security configuration parameters across multiple dimensions, such as encryption strength level, key management method, link redundancy strategy, and access authentication strength. Different risk levels correspond to different transmission strategy sets, and the strategy decision center matches the corresponding transmission strategy set S from the strategy mapping table based on the risk level determined in step C.

[0076] The execution module 400 is used to split the encrypted data into threshold secret sharing segments according to the link redundancy strategy and transmit them concurrently through multiple links to obtain the original data, and to deliver the core control instructions for execution after performing timestamp anti-replay verification.

[0077] In this system, the execution module 400 performs threshold secret sharing splitting on the encrypted data according to the link redundancy strategy and transmits it concurrently through multiple links. After receiving the encrypted transmission strategy set S generated in step D, the strategy execution engine coordinates each execution module to perform threshold secret sharing splitting on the encrypted data according to the link redundancy strategy and transmit it concurrently through multiple links.

[0078] After the platform-side access gateway receives fragments transmitted from each link, the reassembly and decryption module collects the fragments and reassembles them. Taking the aforementioned (3,5) threshold scheme as an example, after collecting fragment 1, fragment 2, and fragment 5 (from 5G and fiber optic links), the recovery function of the Shamir threshold algorithm is called to calculate the original encrypted data packet, and then the original instructions and additional information are restored through the decryption module.

[0079] like Figure 6 As shown, in a preferred embodiment of the present invention, the risk assessment model module 200 includes: Risk assessment model unit 201 is used to obtain a risk assessment model, which is used to calculate a comprehensive risk index R. The multidimensional feature data is input into a preset risk assessment model to obtain the comprehensive risk index R.

[0080] In this module, the risk assessment model unit 201 acquires and configures a risk assessment model in advance. This risk assessment model is used to calculate the comprehensive risk index R. The risk assessment model is pre-built based on historical data from the industrial site and knowledge from safety experts. Its core components include the normalized mapping relationship of multi-dimensional feature data, the weight coefficients of each dimension, and the calculation logic of weighted summation.

[0081] Specifically, the risk assessment model employs a weighted summation algorithm, pre-defining normalization rules and weight allocations for feature data across each dimension. For example, the normalization rule for data sensitivity S_data is: core control commands are mapped to 0.8, and ordinary state data to 0.2; device behavior deviation D_dev is directly normalized to the [0,1] interval after calculation using Mahalanobis distance; network risk value N_risk is mapped based on anomaly detection results: 0 for no anomalies, 0.3 for low risk, 0.6 for medium risk, and 0.9 for high risk; identity trust value T_trust is normalized to the [0,1] interval after comprehensive scoring based on continuous authentication duration and access context. Weight coefficients are preset according to the importance of the industrial scenario, such as α=0.35, β=0.25, γ=0.25, and δ=0.15, with data sensitivity having the highest weight to reflect the dominant role of core control commands in risk assessment.

[0082] The comprehensive risk index R is calculated using a weighted summation model: R = α·S_data + β·D_dev + γ·N_risk + δ·T_trust, where S_data is the data sensitivity, D_dev is the device behavior deviation, N_risk is the network risk value, T_trust is the device trust value, and α, β, γ, and δ are preset weights, satisfying α+β+γ+δ=1.

[0083] The threshold acquisition unit 202 is used to acquire a first threshold and a second threshold, wherein the first threshold corresponds to the triggering condition of the key management strategy and the second threshold corresponds to the triggering condition of the link redundancy strategy, and compares the comprehensive risk index R with the first threshold.

[0084] In this module, the threshold acquisition unit 202 acquires a first threshold and a second threshold, pre-acquires and configures the first and second thresholds. The first threshold corresponds to the triggering condition of the key management strategy, and the second threshold corresponds to the triggering condition of the link redundancy strategy. The specific values ​​of the first and second thresholds are pre-set according to the security requirements and transmission reliability requirements of the industrial scenario. For example, the first threshold is set to 0.3 and the second threshold is set to 0.6, and the second threshold is higher than the first threshold to reflect the progressive relationship of different security protection strategies.

[0085] The calculated comprehensive risk index R is compared with the first threshold. This value is then compared with the first threshold of 0.3. Since 0.695 ≥ 0.3, it is determined that the triggering condition of the key management policy is met, that is, the current transmission task needs to trigger the IBE real-time key distribution mechanism based on device fingerprint.

[0086] Subsequently, the comprehensive risk index R is compared with the second threshold. Since the second threshold is 0.6, and R = 0.695 ≥ 0.6, it is determined that the triggering condition of the link redundancy strategy is met simultaneously. That is, the current transmission task needs to activate the threshold secret sharing algorithm to split the encrypted data into multiple fragments and transmit them concurrently through multiple independent physical links. If the comprehensive risk index R only meets the first threshold but does not reach the second threshold (e.g., R = 0.5), only the key management strategy is triggered, and the link redundancy strategy is not activated, thereby avoiding excessive consumption of transmission resources while ensuring security.

[0087] The threshold comparison unit 203 is used to compare the comprehensive risk index R with the second threshold if the comprehensive risk index R is greater than the first threshold. The second threshold is higher than the first threshold, and the risk level of the current transmission task is determined based on the comparison result.

[0088] In this module, if the threshold comparison unit 203 determines that the comprehensive risk index R is greater than the first threshold, when the comprehensive risk index R is greater than the first threshold but less than the second threshold, the current transmission task is determined to be of medium risk level; when the comprehensive risk index R is greater than or equal to the second threshold, the current transmission task is determined to be of high risk level; when the comprehensive risk index R is less than or equal to the first threshold, the current transmission task is determined to be of low risk level.

[0089] The calculated comprehensive risk index R = 0.695. The risk perception module first compares R = 0.695 with the first threshold of 0.3, and the result is R > 0.3, which meets the condition of being greater than the first threshold. Subsequently, R = 0.695 is compared with the second threshold of 0.6, and the result is R ≥ 0.6. Therefore, the current transmission task is determined to be of a high-risk level.

[0090] In another scenario, if a temperature sensor uploads ordinary data and calculates a comprehensive risk index R=0.5, then R=0.5 is first compared with the first threshold of 0.3, resulting in R>0.3; then R=0.5 is compared with the second threshold of 0.6, resulting in R<0.6. Therefore, the current transmission task is determined to be of medium risk level. If a device transmits data under normal operating conditions and calculates R=0.2, then R≤0.3, and it is directly determined to be of low risk level, without needing to perform a second threshold comparison. Through the above-mentioned hierarchical judgment mechanism, the system can accurately identify different risk levels, providing a basis for the subsequent generation of differentiated strategies.

[0091] like Figure 7 As shown, in a preferred embodiment of the present invention, the transmission strategy module 300 includes: Sensitivity level unit 301 is used to obtain a sensitivity level mapping table, which is used to evaluate the sensitivity level of different data source types and determine the encryption strength level through the sensitivity level.

[0092] In this module, the sensitivity level unit 301 obtains a sensitivity level mapping table. This table, indexed by the data source identifier, defines the sensitivity level for each data source or data type. For example, the register address range 0x0000-0x0010 in the PLC controller related to the emergency stop function is mapped to core control instructions; the parameter modification register address range 0x1000-0x2000 in the frequency converter is also mapped to core control instructions; the data acquisition channel of the temperature sensor is mapped to normal status data; and the reading report of the flow meter is mapped to normal status data.

[0093] The data packet has a function code of 0x05 and a register address of 0x0001. By querying the preset rules in the sensitivity level mapping table (function code 0x05 and register address falling within the range of 0x0000-0x0010), it is determined that the sensitivity level corresponding to this data source type is a core control instruction. The encryption strength level is determined by the sensitivity level. When the sensitivity level is a core control instruction, the corresponding encryption strength level is high-strength encryption, using a combination of SM2 asymmetric encryption and SM4 symmetric encryption. When the sensitivity level is ordinary state data, the corresponding encryption strength level is lightweight encryption, using SM4 symmetric encryption with a key length of 128 bits.

[0094] The comparison processing unit 302 is configured to use a real-time key distribution mechanism for key management when the risk level reaches the level corresponding to the first threshold, and to use a link redundancy strategy to split the encrypted data into N fragments and transmit them concurrently through M independent physical links when the risk level reaches the level corresponding to the second threshold and the sensitivity level is a core control instruction.

[0095] In this module, when the risk level reaches the level corresponding to the first threshold, the comparison processing unit 302 has reached the level corresponding to the first threshold (medium risk and above) and the level corresponding to the second threshold (high risk). Therefore, the key management method is configured as a real-time key distribution mechanism, that is, triggering IBE real-time key distribution based on device fingerprint, using the device MAC address as the public key to request the current session private key from the platform, realizing one-time one-key.

[0096] Meanwhile, since the risk level has reached the level corresponding to the second threshold (high risk) and the sensitivity level is the core control instruction, the link redundancy strategy is configured to initiate threshold secret sharing. Specifically, a (3,5) threshold scheme is used to split the encrypted data into 5 fragments, which are transmitted concurrently through 3 independent physical links. For example, the 5 fragments are allocated to a 5G link, an industrial WIFI link, and a wired fiber optic link: the 5G link transmits fragments 1 and 2, the industrial WIFI link transmits fragments 3 and 4, and the wired fiber optic link transmits fragment 5. M=3, N=5, satisfying the condition N≥M. Any 3 fragments can be used to recover the original data. Even if a link is attacked or interrupted, as long as at least two links are normal, the complete transmission of data can be guaranteed.

[0097] In another scenario, a temperature sensor uploads ordinary data, and the risk level is determined to be medium risk (R=0.5). This has reached the level corresponding to the first threshold (medium risk) but has not reached the level corresponding to the second threshold (high risk). In this case, only the key management mode is configured as a real-time key distribution mechanism, the link redundancy strategy is not activated, and single-link transmission is used to ensure key security while avoiding excessive consumption of transmission resources.

[0098] The transmission strategy set unit 303 is used to obtain a transmission strategy set, which includes encryption strength level, key management method and link redundancy strategy, and matches the corresponding transmission strategy set S according to the risk level.

[0099] In this module, the transmission strategy set unit 303 acquires the transmission strategy set, and the strategy decision center matches the corresponding transmission strategy set S from the strategy mapping table according to the risk level determined in step C. For example, the strategy mapping table is configured as follows: when the risk level is low risk, the matched transmission strategy set S includes a lightweight encryption level (SM4-128), a pre-shared key management method, and a single-link transmission redundancy strategy; when the risk level is medium risk, the matched transmission strategy set S includes a medium-strength encryption level (SM4-256), an IBE real-time key distribution key management method, and a single-link transmission redundancy strategy; when the risk level is high risk and the sensitivity level is core control command, the matched transmission strategy set S includes a high-strength encryption level (SM2+SM4), an IBE real-time key distribution key management method, and a (3,5) threshold secret sharing combined with three-link concurrent transmission redundancy strategy.

[0100] The strategy decision center queries the strategy mapping table and obtains the corresponding transmission strategy set S: the encryption strength level is SM2+SM4 high-strength encryption, the key management method is the IBE real-time key distribution mechanism based on device fingerprints, and the link redundancy strategy is (3,5) threshold secret sharing combined with concurrent transmission of three independent physical links: 5G, industrial WIFI, and wired fiber optic. This strategy set S will be issued to the execution module to guide subsequent encryption, key acquisition, and transmission operations.

[0101] like Figure 8 As shown, in a preferred embodiment of the present invention, the execution module 400 includes: The encryption unit 401 is used to obtain execution data, which is the original data encrypted according to the encryption strength level, and requests and obtains the IBE session key based on the device fingerprint from the key center through the key management method.

[0102] In this module, the encryption unit 401 obtains execution data, which is the original data encrypted according to the encryption strength level, and requests and obtains the IBE session key based on the device fingerprint from the key center through the key management method.

[0103] In this step, the execution engine first parses the encryption strength level in policy set S to obtain execution data. Taking the aforementioned scenario of PLC-001 transmitting core control instructions as an example, the encryption strength level in policy set S is SM2+SM4 high-strength encryption. The execution engine calls the encryption module to encrypt the original data according to this encryption strength level: first, the original instructions and the attached anti-replay token are encrypted using the SM4 symmetric encryption algorithm to generate ciphertext; then, the ciphertext is digitally signed using the SM2 asymmetric encryption algorithm to ensure data integrity and non-repudiation.

[0104] Simultaneously, the policy execution engine, based on the key management method in policy set S, triggers the key client to request and obtain the IBE session key based on the device fingerprint from the key center. Taking the aforementioned scenario as an example, the key management method is configured as the IBE real-time key distribution mechanism. The key client reads the hardware fingerprint of the sending device (such as the MAC address AA:BB:CC:DD:EE:FF), uses this device fingerprint as the public key identifier, and initiates a session key request to the platform-side key generation center (PKG). After verifying the device identity and current risk level, the key generation center uses the master key to calculate and generate a session private key corresponding to the device fingerprint, and distributes it to the key client through a secure channel (such as a TLS encrypted link). This session private key is used only for this transmission, achieving one-time password protection and effectively preventing the mass cracking of historical data due to key leakage.

[0105] The trust verification unit 402 is used to split the encrypted data into threshold secret sharing segments according to the link redundancy strategy and transmit them concurrently through multiple links, dynamically adjust the zero-trust access verification strength according to the risk level, and perform zero-trust verification on access requests according to the access verification strength.

[0106] In this module, the trust verification unit 402 performs threshold secret sharing splitting on the encrypted data according to the link redundancy strategy and transmits it concurrently through multiple links. The link redundancy module first calls the threshold secret sharing algorithm to split the encrypted data packet into multiple fragments. After splitting, the multi-link transmission module allocates the 5 fragments to three independent physical links: 5G link for transmitting fragments 1 and 2, industrial WIFI link for transmitting fragments 3 and 4, and wired fiber optic link for transmitting fragment 5. The three links transmit concurrently, ensuring that even if one link is interrupted or attacked, as long as any two links are normal, at least 3 fragments can be collected to recover the original data.

[0107] Meanwhile, the platform-side access gateway dynamically adjusts the zero-trust access verification strength based on the aforementioned risk level. Specifically, the access gateway has a built-in verification strength configuration table that maps risk levels to verification strengths: when the risk level is low, the verification strength is basic verification, only verifying device identity and IP address; when the risk level is medium, the verification strength is enhanced verification, adding geographical location verification and time window verification to the basic verification; when the risk level is high, the verification strength is continuous verification, adding behavioral consistency verification and hardware token secondary authentication to the enhanced verification, and the verification frequency is increased to once every 100 milliseconds. Taking the aforementioned high-risk scenario as an example, when the risk level is high, the access gateway dynamically adjusts the verification strength to continuous verification mode.

[0108] The execution unit 403 is used to reassemble and decrypt the received fragments after verification to obtain the original data, and to perform timestamp anti-replay verification on the core control instructions before delivery for execution.

[0109] In this module, after the execution unit 403 verifies the data, it reassembles and decrypts the received fragments. The reassembly and decryption module first collects fragments from multiple links. Taking the core control command in the aforementioned high-risk scenario as an example, the link redundancy strategy adopts a (3,5) threshold secret sharing, and the encrypted data is split into 5 fragments and transmitted through three links: 5G, industrial WIFI, and wired fiber optic.

[0110] For core control commands, the command verification module performs timestamp-based replay protection checks after decryption. If all checks pass, the shutdown command is deemed valid and executed by the execution unit. If any check fails—for example, if an attacker intercepts and replays an old command, the timestamp T differs from the current time by more than 5 seconds, or the random number Nonce has been marked as used—it is considered a replay attack. The command is discarded, and a security alarm is triggered, effectively preventing man-in-the-middle replay attacks from causing malfunctions in industrial equipment.

[0111] In one embodiment, a computer device is provided, the computer device including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor, when executing the computer program, performs the following steps: Real-time acquisition of multi-dimensional feature data from industrial sites, including data content features, equipment behavior features, network environment features, and identity trust features; The multidimensional feature data is input into a preset risk assessment model to obtain a comprehensive risk index R. The comprehensive risk index R is compared with a first threshold, and the risk level of the current transmission task is determined based on the comparison result. The encryption strength level is determined by the sensitivity level, the transmission policy set is obtained, and the corresponding transmission policy set S is matched according to the risk level. According to the link redundancy strategy, the encrypted data is split into threshold secret sharing segments and transmitted concurrently through multiple links to obtain the original data. The core control instructions are then timestamped to prevent replay before being delivered for execution.

[0112] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored, which, when executed by a processor, causes the processor to perform the following steps: Real-time acquisition of multi-dimensional feature data from industrial sites, including data content features, equipment behavior features, network environment features, and identity trust features; The multidimensional feature data is input into a preset risk assessment model to obtain a comprehensive risk index R. The comprehensive risk index R is compared with a first threshold, and the risk level of the current transmission task is determined based on the comparison result. The encryption strength level is determined by the sensitivity level, the transmission policy set is obtained, and the corresponding transmission policy set S is matched according to the risk level. According to the link redundancy strategy, the encrypted data is split into threshold secret sharing segments and transmitted concurrently through multiple links to obtain the original data. The core control instructions are then timestamped to prevent replay before being delivered for execution.

[0113] It should be understood that although the steps in the flowcharts of the various embodiments of the present invention are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the various embodiments may include multiple sub-steps or multiple stages. These sub-steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these sub-steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least a portion of the sub-steps or stages of other steps. Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The program can be stored in a non-volatile computer-readable storage medium, and when executed, it can include the processes of the embodiments of the above methods. Any references to memory, storage, databases, or other media used in the embodiments provided in this application can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in various forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), dual data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link DRAM (SLDRAM), Rambus direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.

[0114] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0115] The embodiments described above are merely illustrative of several implementations of the present invention, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of the present invention. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of the present invention, and these modifications and improvements all fall within the scope of protection of the present invention. Therefore, the scope of protection of this patent should be determined by the appended claims.

[0116] The above description is merely a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present invention should be included within the protection scope of the present invention.

Claims

1. A method for encrypted transmission of industrial data on an internet platform, characterized in that: The method includes: Real-time acquisition of multi-dimensional feature data from industrial sites, including data content features, equipment behavior features, network environment features, and identity trust features; The multidimensional feature data is input into a preset risk assessment model to obtain a comprehensive risk index R. The comprehensive risk index R is compared with a first threshold, and the risk level of the current transmission task is determined based on the comparison result. The encryption strength level is determined by the sensitivity level, the transmission policy set is obtained, and the corresponding transmission policy set S is matched according to the risk level. According to the link redundancy strategy, the encrypted data is split into threshold secret sharing segments and transmitted concurrently through multiple links to obtain the original data. The core control instructions are then timestamped to prevent replay before being delivered for execution.

2. The method for encrypted transmission of internet platform data for industrial data security according to claim 1, characterized in that, The step of acquiring a risk assessment model, which involves inputting the multidimensional feature data into a preset risk assessment model to obtain a comprehensive risk index R, comparing the comprehensive risk index R with a first threshold, and determining the risk level of the current transmission task based on the comparison result, specifically includes: A risk assessment model is obtained, which is used to calculate the comprehensive risk index R. The multidimensional feature data is input into the preset risk assessment model to obtain the comprehensive risk index R. Obtain a first threshold and a second threshold. The first threshold corresponds to the triggering condition of the key management strategy, and the second threshold corresponds to the triggering condition of the link redundancy strategy. Compare the comprehensive risk index R with the first threshold. If the comprehensive risk index R is determined to be greater than the first threshold, then the comprehensive risk index R is compared with the second threshold. If the second threshold is higher than the first threshold, the risk level of the current transmission task is determined based on the comparison result.

3. The method for encrypted transmission of industrial data on an internet platform according to claim 1, characterized in that, The steps of determining the encryption strength level through the sensitivity level, obtaining the transmission policy set, and matching the corresponding transmission policy set S according to the risk level specifically include: Obtain a sensitivity level mapping table, which is used to assess the sensitivity level of different data source types and determine the encryption strength level based on the sensitivity level. When the risk level reaches the level corresponding to the first threshold, the key management method is configured as a real-time key distribution mechanism. When the risk level reaches the level corresponding to the second threshold and the sensitivity level is a core control instruction, the link redundancy strategy is adopted to split the encrypted data into N fragments and transmit them concurrently through M independent physical links, where M≥2 and N≥M. Obtain a transmission strategy set, which includes encryption strength level, key management method and link redundancy strategy, and match the corresponding transmission strategy set S according to the risk level.

4. The method for encrypted transmission of industrial data on an internet platform according to claim 1, characterized in that, The steps of splitting the encrypted data according to the link redundancy strategy using threshold secret sharing and transmitting it concurrently through multiple links to obtain the original data, and then performing timestamp-based replay verification on the core control instructions before delivery for execution, specifically include: The execution data is obtained by encrypting the original data according to the encryption strength level and requesting and obtaining the IBE session key based on the device fingerprint from the key center through key management. The encrypted data is split into threshold secret sharing segments according to the link redundancy strategy and transmitted concurrently through multiple links. The zero-trust access verification strength is dynamically adjusted according to the risk level, and the access request is verified with zero trust according to the access verification strength. After successful verification, the received fragments are reassembled and decrypted to obtain the original data. The core control instructions are then timestamped to prevent replay before being delivered for execution.

5. The method for encrypted transmission of internet platform data for industrial data security according to claim 1, characterized in that, The comprehensive risk index R is calculated using a weighted summation model: R = α·S_data + β·D_dev + γ·N_risk + δ·T_trust, where S_data is the data sensitivity, D_dev is the device behavior deviation, N_risk is the network risk value, T_trust is the device trust value, and α, β, γ, and δ are preset weights, satisfying α+β+γ+δ=1.

6. An encrypted transmission system for an internet platform for industrial data security, characterized in that: The system includes: The multidimensional feature data module collects multidimensional feature data from the industrial site in real time. The multidimensional feature data includes data content features, equipment behavior features, network environment features, and identity trust features. The risk assessment model module inputs the multidimensional feature data into a preset risk assessment model to obtain a comprehensive risk index R. It compares the comprehensive risk index R with a first threshold and determines the risk level of the current transmission task based on the comparison result. The transmission strategy module determines the encryption strength level based on the sensitivity level, obtains the transmission strategy set, and matches the corresponding transmission strategy set S according to the risk level. The execution module performs threshold secret sharing splitting on the encrypted data according to the link redundancy strategy and transmits it concurrently through multiple links to obtain the original data. After performing timestamp anti-replay verification on the core control instructions, it delivers them for execution.

7. The encrypted transmission system for an internet platform for industrial data security according to claim 6, characterized in that, The risk assessment model module includes: The risk assessment model unit obtains a risk assessment model, which is used to calculate the comprehensive risk index R. The multidimensional feature data is input into the preset risk assessment model to obtain the comprehensive risk index R. The threshold acquisition unit acquires a first threshold and a second threshold. The first threshold corresponds to the triggering condition of the key management strategy, and the second threshold corresponds to the triggering condition of the link redundancy strategy. The unit compares the comprehensive risk index R with the first threshold. If the threshold comparison unit determines that the comprehensive risk index R is greater than the first threshold, it compares the comprehensive risk index R with the second threshold. If the second threshold is higher than the first threshold, it determines the risk level of the current transmission task based on the comparison result.

8. The encrypted transmission system for an internet platform for industrial data security according to claim 7, characterized in that, The transmission strategy module includes: Sensitivity level unit: Obtains sensitivity level mapping table, which is used to evaluate the sensitivity level of different data source types and determine the encryption strength level through the sensitivity level; The comparison processing unit configures the key management method as a real-time key distribution mechanism when the risk level reaches the level corresponding to the first threshold. When the risk level reaches the level corresponding to the second threshold and the sensitivity level is a core control instruction, the link redundancy strategy is adopted to split the encrypted data into N fragments and transmit them concurrently through M independent physical links, where M≥2 and N≥M. The transmission strategy set unit acquires a transmission strategy set, which includes encryption strength level, key management method and link redundancy strategy, and matches the corresponding transmission strategy set S according to the risk level.

9. The encrypted transmission system for an internet platform for industrial data security according to claim 8, characterized in that, The execution module includes: The encryption unit acquires execution data, which is the original data encrypted according to the encryption strength level, and requests and acquires the IBE session key based on the device fingerprint from the key center through key management. The trust verification unit performs threshold secret sharing splitting on the encrypted data according to the link redundancy strategy and transmits it concurrently through multiple links. It dynamically adjusts the zero-trust access verification strength according to the risk level and performs zero-trust verification on access requests according to the access verification strength. The execution unit, after verification, reassembles and decrypts the received fragments to obtain the original data, and performs timestamp anti-replay verification on the core control instructions before delivering them for execution.

10. The encrypted transmission system for an internet platform for industrial data security according to claim 9, characterized in that, The comprehensive risk index R is calculated using a weighted summation model: R = α·S_data + β·D_dev + γ·N_risk + δ·T_trust, where S_data is the data sensitivity, D_dev is the device behavior deviation, N_risk is the network risk value, T_trust is the device trust value, and α, β, γ, and δ are preset weights, satisfying α+β+γ+δ=1.

Images