A data encryption and transmission method based on wireless passive sensor

Abstract

This application relates to the field of data transmission technology and discloses a data encryption and transmission method based on a wireless passive sensor. The method includes: acquiring information to be transmitted from the wireless passive sensor; preprocessing the information to be transmitted to obtain a digital signal; encrypting the digital signal to obtain first encrypted data and second encrypted data; decrypting the first encrypted data and second encrypted data to obtain first decrypted data and second decrypted data; calculating a first hash value from the digital signal; calculating a second hash value and a third hash value from the first decrypted data and second decrypted data; comparing the first hash value with the second hash value and the third hash value respectively; if the comparison result indicates that the encryption method needs to be changed, the encryption method is changed according to the comparison result, and the security of the digital signal transmission after encryption using the newly added encryption method is verified. This application improves the reliability of data transmission.

Description

Technical Field

[0001] This application relates to the field of data transmission technology, and more specifically, to a data encryption and transmission method based on a wireless passive sensor. Background Technology

[0002] With the rapid development of Industrial Internet of Things (IIoT) technology, an increasing number of critical equipment and pipelines are being incorporated into remote monitoring systems. Wireless passive sensors, due to their lack of power cords and unique reliability advantages, are widely used for condition monitoring and data acquisition in harsh environments, such as monitoring pipe thickness changes and corrosion. However, the open nature of wireless data transmission exposes them to security threats such as data theft, tampering, and forgery. Especially in the industrial sector, the accuracy and integrity of sensor data are crucial for production safety. Therefore, ensuring the security and integrity of data during wireless transmission has become an urgent problem to be solved.

[0003] Traditional encryption methods typically employ a single encryption algorithm (such as AES or RSA) to protect sensor data. However, single encryption methods have potential security vulnerabilities when faced with complex attacks (such as algorithm cracking or key leakage). Furthermore, in certain harsh wireless communication environments, data loss or interference may occur, further reducing the reliability of transmitted data. Summary of the Invention

[0004] This application proposes a data encryption and transmission method based on wireless passive sensors, aiming to solve the problem of low reliability in traditional sensor data transmission.

[0005] In a first aspect, this application proposes a data encryption and transmission method based on a wireless passive sensor, comprising: acquiring the information to be transmitted from a wireless passive sensor installed on a pipeline to be monitored; preprocessing the information to be transmitted to obtain a digital signal; encrypting the digital signal using two different encryption methods to obtain first encrypted data and second encrypted data; decrypting the first encrypted data and second encrypted data to obtain first decrypted data and second decrypted data; comparing the first decrypted data and second decrypted data to determine whether to perform integrity verification on the first decrypted data and second decrypted data; if it is determined that integrity verification should be performed, calculating a first hash value on the digital signal using a hash algorithm; calculating a second hash value and a third hash value on the first decrypted data and second decrypted data respectively using a hash algorithm; comparing the first hash value with the second hash value and the third hash value respectively; determining whether to change the encryption method based on the comparison result; if it is determined that the encryption method should be changed, changing the encryption method based on the comparison result; if the changed encryption method is a newly added encryption method, verifying whether the transmission of the digital signal encrypted using the newly added encryption method is secure.

[0006] Optionally, when acquiring the information to be transmitted from the wireless passive sensor installed on the pipeline to be monitored, and obtaining a digital signal after preprocessing the information to be transmitted, the process includes: acquiring the ultrasonic signal corresponding to the information to be transmitted collected by the wireless passive sensor; amplifying the ultrasonic signal through a low-noise amplifier; performing bandpass filtering on the amplified ultrasonic signal; and converting the bandpass-filtered ultrasonic signal into a digital signal through an analog-to-digital converter.

[0007] Optionally, when acquiring the information to be transmitted from the wireless passive sensor installed on the pipeline to be monitored, and obtaining a digital signal after preprocessing the information to be transmitted, the method further includes: dividing the digital signal output by the analog-to-digital converter into data packets of fixed length; attaching metadata to each data packet; wherein the metadata includes a timestamp, the sensor identifier of the wireless passive sensor, and the data sequence number; the timestamp is generated by the built-in clock of the wireless passive sensor and is used to mark the acquisition time point of the information to be transmitted; and using binary phase-shift keying or quadrature amplitude modulation to generate the final digital signal from the data packets with attached metadata.

[0008] Optionally, when decrypting the first encrypted data and the second encrypted data to obtain the first decrypted data and the second decrypted data, and comparing the first decrypted data and the second decrypted data to determine whether to perform integrity verification on the first decrypted data and the second decrypted data, the following steps are taken: decrypting the first encrypted data using the decryption method corresponding to the encryption method of the first encrypted data to obtain the first decrypted data; decrypting the second encrypted data using the decryption method corresponding to the encryption method of the second encrypted data to obtain the second decrypted data; if the first decrypted data and the second decrypted data are the same, it is determined that no integrity verification is performed; if the first decrypted data and the second decrypted data are different, it is determined that integrity verification is performed.

[0009] Optionally, if the first decrypted data and the second decrypted data are different, the determination to perform integrity verification includes: if the encryption method of the first encrypted data and / or the encryption method of the second encrypted data are insecure, resulting in the first decrypted data and the second decrypted data being different, then the determination to perform integrity verification is made.

[0010] Optionally, when comparing the first hash value with the second hash value and the third hash value respectively, and determining whether to change the encryption method based on the comparison results, the following steps are taken: if the first hash value is equal to the second hash value and the first hash value is equal to the third hash value, then it is determined that the encryption method should not be changed; if the first hash value is not equal to the second hash value and / or the first hash value is not equal to the third hash value, then it is determined that the encryption method should be changed.

[0011] Optionally, if it is determined that the encryption method needs to be changed, when changing the encryption method according to the comparison result, the following steps are taken: if the first hash value is equal to the second hash value and the first hash value is not equal to the third hash value, then the encryption method corresponding to the second encrypted data is changed to the encryption method corresponding to the first encrypted data; if the first hash value is not equal to the second hash value and the first hash value is equal to the third hash value, then the encryption method corresponding to the first encrypted data is changed to the encryption method corresponding to the second encrypted data; if the first hash value is not equal to the second hash value and the first hash value is not equal to the third hash value, then a new encryption method different from the encryption method corresponding to the first encrypted data and the encryption method corresponding to the second encrypted data is added.

[0012] Optionally, the encryption methods corresponding to the first and second encrypted data are single encryption, including symmetric encryption, asymmetric encryption and stream encryption; the newly added encryption method is multiple encryption, including double encryption and triple encryption.

[0013] Optionally, if the encryption method after replacement is a newly added encryption method, verifying whether the digital signal transmission encrypted with the newly added encryption method is secure includes: encrypting the digital signal with the newly added encryption method to obtain third encrypted data, decrypting the third encrypted data to obtain fourth decrypted data; calculating the fourth hash value of the fourth decrypted data using a hash algorithm, comparing the fourth hash value with the first hash value, and determining whether the encrypted digital signal transmission is secure based on the comparison result.

[0014] Optionally, when determining whether the encrypted digital signal transmission is secure based on the comparison result, the process includes: if the first hash value equals the fourth hash value, then the digital signal transmission encrypted using the newly added encryption method is deemed secure, and the encryption method is not changed; if the first hash value is not equal to the fourth hash value, then the digital signal transmission encrypted using the newly added encryption method is deemed insecure, and the encryption method is changed until the first hash value is the same as the hash value calculated based on the decrypted data corresponding to the changed encryption method.

[0015] Secondly, a data encryption and transmission device based on a wireless passive sensor is provided, comprising: a communication unit and a processing unit; the communication unit is used to acquire the information to be transmitted from the wireless passive sensor installed on the pipeline to be monitored, and to obtain a digital signal after preprocessing the information to be transmitted; the processing unit is used to encrypt the digital signal using two different encryption methods to obtain first encrypted data and second encrypted data; the processing unit is used to decrypt the first encrypted data and the second encrypted data to obtain first decrypted data and second decrypted data, and to compare the first decrypted data and the second decrypted data to determine whether to perform integrity verification on the first decrypted data and the second decrypted data; if it is determined that integrity verification is to be performed, the processing unit is used to calculate a first hash value on the digital signal using a hash algorithm, and to calculate a second hash value and a third hash value on the first decrypted data and the second decrypted data respectively using a hash algorithm, and to compare the first hash value with the second hash value and the third hash value respectively, and to determine whether to change the encryption method based on the comparison result; the processing unit is used to change the encryption method according to the comparison result if it is determined that the encryption method should be changed, and if the changed encryption method is a newly added encryption method, to verify whether the transmission of the digital signal encrypted using the newly added encryption method is secure.

[0016] Thirdly, a data encryption and transmission device based on a wireless passive sensor is provided, including a memory and a processor; the memory is used to store computer execution instructions, and the processor is connected to the memory via a bus; when the data encryption and transmission device based on a wireless passive sensor is running, the processor executes the computer execution instructions stored in the memory, so that the data encryption and transmission device based on a wireless passive sensor performs the data encryption and transmission method based on a wireless passive sensor described in the first aspect.

[0017] The data encryption and transmission device based on a wireless passive sensor can be a network device or a component of a network device, such as a chip system within the network device. This chip system supports the network device in implementing the functions involved in the first aspect and any of its possible implementations, such as acquiring, determining, and transmitting the data and / or information involved in the aforementioned data encryption and transmission method based on a wireless passive sensor. The chip system includes a chip, but may also include other discrete devices or circuit structures.

[0018] Fourthly, a computer-readable storage medium is provided, comprising computer-executable instructions that, when executed on a computer, cause the computer to perform the data encryption and transmission method based on a wireless passive sensor as described in the first aspect.

[0019] Fifthly, a computer program product is also provided, which includes computer instructions that, when executed on a data encryption and transmission device based on a wireless passive sensor, cause the data encryption and transmission device based on a wireless passive sensor to perform the data encryption and transmission method based on a wireless passive sensor as described in the first aspect above.

[0020] It should be noted that the aforementioned computer instructions may be stored, in whole or in part, on a computer-readable storage medium. This computer-readable storage medium may be packaged together with the processor of the wireless passive sensor-based data encryption and transmission device, or it may be packaged separately from the processor of the wireless passive sensor-based data encryption and transmission device; this application does not limit this.

[0021] The descriptions of the second, third, fourth, and fifth aspects of this application can be referenced to the detailed description of the first aspect.

[0022] In the embodiments of this application, the names of the aforementioned data encryption and transmission devices based on wireless passive sensors do not limit the devices or functional modules themselves. In actual implementation, these devices or functional modules may appear under other names. For example, the receiving unit may also be called a receiving module, receiver, etc. As long as the functions of each device or functional module are similar to those of this application, they fall within the scope of the claims of this application and their equivalents.

[0023] This application effectively detects the integrity and consistency of data during transmission by comparing data decrypted using two different encryption methods, preventing security risks caused by the cracking of a single encryption algorithm or data tampering. Furthermore, this application introduces a hash algorithm for verification. By calculating and comparing the hash values ​​of the original digital signal and the decrypted data, the integrity and reliability of data transmission are further ensured. If insufficient security is detected, the encryption method can be dynamically changed based on the comparison results, thereby improving the adaptability and resistance to attacks in data transmission. When a new encryption method is added, its transmission effect is further verified to ensure the security and stability of data in the new environment. The overall solution balances high security and flexibility, helping to address potential threats in complex wireless communication environments and providing reliable protection for critical data monitoring and transmission in industrial scenarios. Attached Figure Description

[0024] Various other advantages and benefits will become apparent to those skilled in the art upon reading the following detailed description of preferred embodiments. The accompanying drawings are for illustrative purposes only and are not intended to limit the scope of this application. Furthermore, the same reference numerals denote the same parts throughout the drawings. In the drawings:

[0025] Figure 1A structural diagram of a data encryption and transmission system based on a wireless passive sensor provided in this application embodiment;

[0026] Figure 2 This application provides a schematic diagram of a hardware structure for a data encryption and transmission device based on a wireless passive sensor, as shown in the embodiments of this application.

[0027] Figure 3 A flowchart illustrating a data encryption and transmission method based on a wireless passive sensor, provided in this application embodiment;

[0028] Figure 4 This is a schematic diagram of a data encryption and transmission device based on a wireless passive sensor, provided in an embodiment of this application. Detailed Implementation

[0029] Exemplary embodiments of the present disclosure will now be described in more detail with reference to the accompanying drawings. While exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be implemented in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided to enable a more thorough understanding of the present disclosure and to fully convey the scope of the disclosure to those skilled in the art. It should be noted that, unless otherwise specified, the embodiments and features described in this application can be combined with each other. The present application will now be described in detail with reference to the accompanying drawings and embodiments.

[0030] With the rapid development of Industrial Internet of Things (IIoT) technology, an increasing number of critical equipment and pipelines are being incorporated into remote monitoring systems. Wireless passive sensors, due to their lack of power cords and unique reliability advantages, are widely used for condition monitoring and data acquisition in harsh environments, such as monitoring pipe thickness changes and corrosion. However, the openness of wireless data transmission exposes them to security threats such as data theft, tampering, and forgery. In the industrial sector, the accuracy and integrity of sensor data are crucial for production safety; therefore, ensuring data security and integrity during wireless transmission has become a critical issue that urgently needs to be addressed. Traditional encryption methods typically employ a single encryption algorithm (such as symmetric encryption) to protect sensor data. However, single encryption algorithms have certain security vulnerabilities when facing complex attacks (such as algorithm cracking or key leakage). Furthermore, in harsh wireless communication environments, data may be lost or interfered with, further reducing the reliability of data transmission.

[0031] Therefore, it is necessary to provide a data encryption and transmission method based on wireless passive sensors to solve the problem of low reliability of traditional sensor data transmission.

[0032] The above-mentioned data encryption and transmission method based on wireless passive sensors can be applied to data encryption and transmission systems based on wireless passive sensors. Figure 1 A schematic diagram of the data encryption and transmission system is shown. Figure 1 As shown, the data encryption and transmission system based on a wireless passive sensor includes: a pipeline to be monitored 101, a wireless passive sensor 102, a reader 103, and a computer 104.

[0033] Optionally, the pipeline to be monitored 101 can be of different types, such as natural gas pipelines, crude oil pipelines, refined oil pipelines, etc.

[0034] Among them, a wireless passive sensor 102 is installed on the pipeline 101 to be monitored.

[0035] The wireless passive sensor 102 is used to collect the information to be transmitted from the pipe 101 to be monitored, such as parameters like thickness and temperature.

[0036] In some embodiments of this application, the wireless passive sensor can be a wireless passive ultrasonic thickness sensor.

[0037] Optionally, the aforementioned wireless passive sensor 102 can also be an ultrasonic sensor, temperature sensor, vibration sensor, flow sensor, and pressure sensor, etc. An ultrasonic sensor converts ultrasonic signals into other energy signals (usually electrical signals) and is typically used to detect parameters such as the thickness of the object being measured. A temperature sensor is typically used to detect the temperature of the object being measured. A vibration sensor is typically used to detect the vibration state of the object being measured. A flow sensor is typically used to detect the flow rate generated when fluid flows within the object being measured. A pressure sensor is typically used to detect the pressure of the object being measured.

[0038] The reader 103 is used to acquire the first encrypted data and the second encrypted data and transmit them to the computer 104. The first encrypted data and the second encrypted data are obtained by encrypting the digital signal using two different encryption methods. The digital signal is obtained by preprocessing the information to be transmitted from the wireless passive sensor.

[0039] Computer 104 is used to decrypt the first encrypted data and the second encrypted data to obtain the first decrypted data and the second decrypted data. It compares the first decrypted data and the second decrypted data to determine whether to perform integrity verification. If integrity verification is required, a first hash value is calculated on the digital signal using a hash algorithm. A second hash value and a third hash value are then calculated on the first decrypted data and the second decrypted data respectively using the same hash algorithm. The first hash value is compared with the second hash value and the third hash value. Based on the comparison results, it is determined whether to change the encryption method. If the encryption method needs to be changed, the encryption method is changed according to the comparison results. If the changed encryption method is a newly added encryption method, it verifies whether the transmission of the digital signal encrypted using the newly added encryption method is secure.

[0040] The basic hardware structure of a computer includes: Figure 2 The data encryption and transmission device shown includes the following components. Figure 2 Taking the data encryption and transmission device shown as an example, the hardware structure of computer 104 is introduced.

[0041] like Figure 2 The diagram shown is a hardware structure schematic of a data encryption and transmission device based on a wireless passive sensor provided in an embodiment of this application. The data encryption and transmission device includes a processor 21, a memory 22, a communication interface 23, and a bus 24. The processor 21, memory 22, and communication interface 23 are connected via the bus 24.

[0042] Processor 21 is the control center of the data encryption and transmission device. It can be a single processor or a collective term for multiple processing elements. For example, processor 21 can be a general-purpose central processing unit (CPU) or other general-purpose processors. Among them, the general-purpose processor can be a microprocessor or any conventional processor.

[0043] As one embodiment, processor 21 may include one or more CPUs, for example Figure 2 CPU 0 and CPU 1 are shown in the diagram.

[0044] The memory 22 may be a read-only memory (ROM) or other type of static storage device capable of storing static information and instructions, random access memory (RAM) or other type of dynamic storage device capable of storing information and instructions, or electrically erasable programmable read-only memory (EEPROM), disk storage media or other magnetic storage devices, or any other medium capable of carrying or storing desired program code in the form of instructions or data structures and accessible by a computer, but is not limited thereto.

[0045] In one possible implementation, the memory 22 can exist independently of the processor 21. The memory 22 can be connected to the processor 21 via a bus 24 and is used to store instructions or program code. When the processor 21 calls and executes the instructions or program code stored in the memory 22, it can implement the data acquisition method provided in the following embodiments of this application.

[0046] In this embodiment, the software programs stored in the memory 22 of the computer 104 are different, so the functions implemented by the computer 104 are different. The functions performed by each device will be described with reference to the following flowchart.

[0047] In another possible implementation, the memory 22 can also be integrated with the processor 21.

[0048] Communication interface 23 is used for connecting the data encryption and transmission device with other devices via a communication network, such as Ethernet, wireless access network, or wireless local area network (WLAN). Communication interface 23 may include a receiving unit for receiving data and a sending unit for sending data.

[0049] Bus 24 can be an industry standard architecture (ISA) bus, a peripheral component interconnect (PCI) bus, or an extended industry standard architecture (EISA) bus, etc. This bus can be divided into address bus, data bus, control bus, etc. For ease of representation, Figure 2 The bus is represented by a single thick line, but this does not mean that there is only one bus or one type of bus.

[0050] It should be pointed out that, Figure 2 The structure shown does not constitute a limitation on the data encryption and transmission device, except Figure 2 In addition to the components shown, the data encryption and transmission device may include more or fewer components than those shown, or combine certain components, or have different component arrangements.

[0051] The data acquisition method provided in the embodiments of this application will be described in detail below with reference to the accompanying drawings.

[0052] In some embodiments of this application, see Figure 3 As shown, this embodiment provides a data encryption and transmission method based on a wireless passive sensor, including the following steps:

[0053] S301. Obtain the information to be transmitted from the wireless passive sensor installed on the pipeline to be monitored, and obtain a digital signal after preprocessing the information to be transmitted.

[0054] Specifically, a wireless passive sensor is installed on the pipeline to be monitored to acquire the information to be transmitted from the wireless passive sensor, and the information to be transmitted is preprocessed to obtain a digital signal.

[0055] S302. The digital signal is encrypted using two different encryption methods to obtain the first encrypted data and the second encrypted data.

[0056] Specifically, the digital signal is encrypted using two different encryption methods to obtain first encrypted data and second encrypted data. The first encrypted data and second encrypted data are simultaneously transmitted to the reader, and then transmitted to the computer through the reader.

[0057] S303. Decrypt the first encrypted data and the second encrypted data to obtain the first decrypted data and the second decrypted data.

[0058] S304. Compare the first decrypted data and the second decrypted data, and determine whether to perform integrity verification on the first decrypted data and the second decrypted data.

[0059] Specifically, the computer decrypts the first and second encrypted data to obtain the first and second decrypted data. The first and second decrypted data are then compared to determine whether an integrity verification is required.

[0060] S305. If it is determined that integrity verification is required, the first hash value is obtained by calculating the digital signal using a hash algorithm.

[0061] S306. Calculate the second hash value and the third hash value by using a hash algorithm on the first decrypted data and the second decrypted data respectively. Compare the first hash value with the second hash value and the third hash value respectively. Determine whether to change the encryption method based on the comparison results.

[0062] S307. If it is determined that the encryption method has been changed, the encryption method shall be changed according to the comparison results. If the changed encryption method is a newly added encryption method, the security of the digital signal transmission after encryption using the newly added encryption method shall be verified.

[0063] Understandably, this application effectively detects the integrity and consistency of data during transmission by comparing data decrypted using two different encryption methods, preventing security risks caused by the cracking of a single encryption algorithm or data tampering. Furthermore, the method incorporates a hash algorithm for verification. By calculating and comparing the hash values ​​of the original digital signal and the decrypted data, the integrity and reliability of data transmission are further ensured. If insufficient security is detected, the encryption method can be dynamically changed based on the comparison results, thereby improving the adaptability and resistance to attacks in data transmission. When a new encryption method is added, its transmission effect is further verified to ensure the security and stability of data in new environments. The overall solution balances high security and flexibility, helping to address potential threats in complex wireless communication environments and providing reliable protection for critical data monitoring and transmission in industrial scenarios.

[0064] In other words, this application does not directly encrypt data twice to obtain a single encrypted data. Instead, it uses two separate encryption methods to obtain two encrypted data sets. These two sets of data are then compared to determine the security of the data transmission. Integrity verification is only triggered when a problem is found in the transmitted data (the two decrypted data sets are different). This avoids redundant verification for every transmission, improving system efficiency while ensuring security. It also dynamically changes the encryption method if a problem is identified. Furthermore, this application achieves more efficient transmission security monitoring and targeted automatic encryption optimization through the combination of dual independent encryption and layered verification, improving security while demonstrating greater flexibility and intelligence in resource utilization and algorithm selection.

[0065] Common technologies directly verify the integrity of data transmission through hash values. This application avoids unnecessary hash value verification. When a problem occurs, it can be detected in time by directly comparing the two decrypted data, and then verified again through hash values. This ensures that the problem is not misidentified and also ensures the security of data transmission.

[0066] In some embodiments of this application, the method for obtaining the information to be transmitted from the wireless passive sensor installed on the pipeline to be monitored, and obtaining a digital signal after preprocessing the information to be transmitted, specifically includes:

[0067] The ultrasonic signal corresponding to the information to be transmitted is acquired by the wireless passive sensor; the ultrasonic signal is amplified by a low-noise amplifier, and the amplified ultrasonic signal is bandpass filtered; the bandpass filtered ultrasonic signal is converted into a digital signal by an analog-to-digital converter.

[0068] In other words, when installing a wireless passive sensor on the pipeline to be monitored, acquiring the information to be transmitted from the wireless passive sensor, and obtaining a digital signal after preprocessing the information to be transmitted, the process includes:

[0069] Wireless passive sensors collect ultrasonic signals;

[0070] The received ultrasonic signal is amplified by a low-noise amplifier, and the amplified ultrasonic signal is then subjected to bandpass filtering.

[0071] The ultrasonic signal, after bandpass filtering, is converted into a digital signal using an analog-to-digital converter.

[0072] Understandably, this embodiment improves the accuracy and reliability of data transmission through preprocessing and digitization of the wireless passive sensor signal. First, the received ultrasonic signal is amplified using a low-noise amplifier, and bandpass filtering is applied to the ultrasonic signal to effectively remove environmental noise and interference, improving signal quality and signal-to-noise ratio. Subsequently, an analog-to-digital converter is used to convert the analog signal into a digital signal, providing a foundation for subsequent data processing and encryption.

[0073] In some embodiments of this application, when obtaining the information to be transmitted from the wireless passive sensor installed on the pipeline to be monitored in step S301, and obtaining a digital signal after preprocessing the information to be transmitted, the method further includes:

[0074] The digital signal output by the analog-to-digital converter is divided into data packets of fixed length;

[0075] Metadata is appended to each data packet; the metadata includes a timestamp, the sensor identifier of the wireless passive sensor, and the data sequence number; the timestamp is generated by the built-in clock of the wireless passive sensor and is used to mark the acquisition time of the information to be transmitted;

[0076] The final digital signal is generated by using binary phase-shift keying or quadrature amplitude modulation with added metadata to the data packet.

[0077] Understandably, by dividing digital signals into fixed-length data packets and attaching metadata (such as timestamps, sensor identifiers, and data sequence numbers), effective data management and tracking can be achieved, ensuring the orderliness and integrity of data during transmission. The addition of timestamps provides precise recording of the acquisition time, facilitating time synchronization and historical data traceability. Finally, embedding metadata into the data packets using binary phase-shift keying or quadrature amplitude modulation further enhances the signal's anti-interference capability while ensuring data stability during transmission. This preprocessing scheme, combining hardware and digital signal processing technologies, provides reliable assurance for high-precision data monitoring and transmission in complex environments.

[0078] In some embodiments of this application, decrypting the first encrypted data and the second encrypted data to obtain the first decrypted data and the second decrypted data, and comparing the first decrypted data and the second decrypted data to determine whether to perform integrity verification on the first decrypted data and the second decrypted data, includes:

[0079] The first encrypted data is decrypted using the decryption method corresponding to the encryption method of the first encrypted data to obtain the first decrypted data;

[0080] The second encrypted data is decrypted using the decryption method corresponding to the encryption method of the second encrypted data to obtain the second decrypted data;

[0081] The first decrypted data is compared with the second decrypted data. If the first decrypted data and the second decrypted data are the same, it is determined that no integrity verification is required.

[0082] If the first decrypted data differs from the second decrypted data, then it is determined that integrity verification is required.

[0083] It is understood that this embodiment effectively improves the integrity and security of data transmission by comparing the decryption results of the first and second encrypted data. When the two decryption results are the same, it indicates that both encryption methods are effective and secure, avoiding repeated integrity verification and improving efficiency. When the decryption results are different, the integrity verification mechanism is triggered by judging potential security risks (such as one or two encryption methods being insecure), further confirming whether the data has been tampered with or attacked. This allows the application to proactively identify potential security risks and perform targeted verification and processing, thereby enhancing its fault tolerance to malicious attacks and transmission interference.

[0084] In some embodiments of this application, if the first decrypted data and the second decrypted data are different, the determination to perform integrity verification includes:

[0085] If the encryption method of the first encrypted data and / or the encryption method of the second encrypted data are insecure, such that the first decrypted data is different from the second decrypted data, then an integrity verification is required.

[0086] Specifically, if an encryption method is insecure, such that the first decrypted data is different from the second decrypted data, then integrity verification is required;

[0087] If both encryption methods are insecure, such that the first decrypted data is different from the second decrypted data, then integrity verification is required.

[0088] Understandably, by classifying and handling potential problems (single or double insecurity), not only is the accuracy of data integrity verification improved, but a basis for dynamically adjusting encryption strategies is also provided, further enhancing the reliability and flexibility of data transmission, which is especially suitable for industrial IoT application scenarios with high security requirements.

[0089] In some embodiments of this application, when comparing the first hash value with the second hash value and the third hash value respectively, and determining whether to change the encryption method based on the comparison results, the method includes:

[0090] If the first hash value is equal to the second hash value, and the first hash value is equal to the third hash value, then it is determined that the encryption method should not be changed.

[0091] Otherwise, the encryption method is changed. That is, if the first hash value is not equal to the second hash value and / or the first hash value is not equal to the third hash value, the encryption method is changed.

[0092] In some embodiments of this application, if it is determined that the encryption method needs to be changed, the method is changed according to the comparison result, including:

[0093] If the first hash value is equal to the second hash value, and the first hash value is not equal to the third hash value, then the encryption method corresponding to the second encrypted data is replaced with the encryption method corresponding to the first encrypted data.

[0094] If the first hash value is not equal to the second hash value, and the first hash value is equal to the third hash value, then the encryption method corresponding to the first encrypted data is replaced with the encryption method corresponding to the second encrypted data.

[0095] If the first hash value is not equal to the second hash value, and the first hash value is not equal to the third hash value, then it is determined that a new encryption method is added, that is, a new encryption method is added that is different from the encryption method corresponding to the first encrypted data and the encryption method corresponding to the second encrypted data.

[0096] Understandably, this embodiment enhances the dynamic adaptability and security of data transmission by determining whether to change the encryption method based on hash value comparison results. When all hash values ​​are equal, it indicates that both encryption methods are effective and the data has not been tampered with, allowing the existing encryption method to continue, thereby reducing resource consumption. However, when the comparison results show inconsistencies in hash values, it can accurately identify which encryption method poses a security risk and replace the insecure method accordingly, ensuring data integrity and resistance to attacks. Furthermore, when both encryption methods prove insecure, a more advanced or secure encryption method can be added to address complex threat scenarios. This solution achieves intelligent adjustment of encryption methods, not only improving the security and flexibility of data transmission but also providing a basis for real-time response to potential attacks and optimization of transmission encryption strategies. It is particularly suitable for wireless sensor networks with high security requirements and complex environmental changes.

[0097] In some embodiments of this application, if the first hash value is not equal to the second hash value and the first hash value is not equal to the third hash value, then determining the addition of a new encryption method includes:

[0098] The encryption methods corresponding to the first and second encrypted data are single encryption, including symmetric encryption, asymmetric encryption and stream encryption;

[0099] The newly added encryption method is multi-layered encryption, including double encryption and triple encryption.

[0100] Understandably, this embodiment significantly improves data transmission security and resistance to attacks by dynamically adding multiple encryption methods when a single encryption method cannot guarantee data security. When the first hash value is inconsistent with all other hash values, it indicates that the existing single encryption method may have failed. In this case, introducing multiple encryption methods (such as double encryption or triple encryption) can provide a higher level of security protection for the data. Multiple encryption increases the complexity for attackers to crack by superimposing multiple encryption algorithms. Even if one layer of encryption is broken, the other layers of encryption can still protect the data from being stolen or tampered with. In addition, this mechanism can dynamically adjust to the ever-changing threat environment, ensuring that the encryption method matches the actual needs, thereby achieving a balance between security and flexibility. It is particularly suitable for industrial IoT scenarios with high security requirements, providing reliable protection for data transmission.

[0101] Specifically, single encryption refers to encrypting data using only one encryption algorithm, with the data undergoing encryption only once during transmission or storage. The encryption method can be any of symmetric, asymmetric, or stream encryption. The advantages of single encryption are its simplicity, fast processing speed, and low system resource consumption. Common single encryption methods include: symmetric encryption: using the same key for encryption and decryption (e.g., AES, DES); asymmetric encryption: using a public and private key pair for encryption and decryption (e.g., RSA, ECC); and stream encryption: continuously encrypting each bit in the data stream (e.g., RC4).

[0102] Multiple encryption refers to using multiple layers of encryption on data, with each layer employing a different encryption algorithm or the same algorithm multiple times, thereby enhancing data security. The advantage is that multiple layers of encryption increase the difficulty of cracking the data and enhance security. Common multiple encryption methods include: double encryption: encrypting the data twice, possibly using different encryption algorithms (e.g., encrypting with AES first, then with RSA); triple encryption: encrypting the data three times, usually combining multiple encryption algorithms.

[0103] In some embodiments of this application, if the replaced encryption method is a newly added encryption method, verifying the security of digital signal transmission encrypted using the newly added encryption method includes:

[0104] The digital signal is encrypted using a new encryption method to obtain the third encrypted data. The third encrypted data is then decrypted by a computer to obtain the fourth decrypted data.

[0105] The fourth hash value of the fourth decrypted data is calculated using a hash algorithm. The fourth hash value is then compared with the first hash value. Based on the comparison result, it is determined whether the encrypted digital signal transmission is secure.

[0106] In some embodiments of this application, determining whether the encrypted digital signal transmission is secure based on the comparison results includes:

[0107] If the first hash value is equal to the fourth hash value, then the digital signal transmission state after being encrypted with the newly added encryption method is determined to be secure, and the encryption method is not changed, that is, there is no need to change the encryption method.

[0108] If the first hash value is not equal to the fourth hash value, the digital signal transmission state after being encrypted using the newly added encryption method is determined to be insecure, and the encryption method is changed until the first hash value is the same as the hash value calculated based on the decryption data corresponding to the changed encryption method. In other words, the encryption method needs to be changed again until the first hash value is the same as the hash value calculated based on the decryption data.

[0109] Understandably, this embodiment further enhances the security and reliability of data transmission by introducing a new encryption method and verifying the security of the encrypted digital signal transmission. After encrypting and decrypting the digital signal using the new encryption method, hash value comparison can effectively detect whether the new encryption method truly improves data protection. If the signal transmission after encryption by the new encryption method is secure (i.e., the hash values ​​match), unnecessary changes to the encryption method can be avoided, improving efficiency. If the hash values ​​do not match, it indicates that the new encryption method has failed to effectively protect the data, and attempts to change the encryption method should continue until a suitable encryption scheme is found. This method provides flexible encryption method optimization and dynamic adjustment capabilities, ensuring that data transmission maintains high security under constantly changing security requirements and attack environments, avoiding data leakage or tampering due to encryption vulnerabilities. It is particularly suitable for wireless sensor network applications that require long-term stable operation and high reliability.

[0110] In summary, this application effectively detects the integrity and consistency of data during transmission by comparing data decrypted using two different encryption methods, preventing security risks caused by the cracking of a single encryption algorithm or data tampering. Furthermore, the method incorporates a hash algorithm for verification. By calculating and comparing the hash values ​​of the original digital signal and the decrypted data, the integrity and reliability of data transmission are further ensured. If insufficient security is detected, the encryption method can be dynamically changed based on the comparison results, thereby improving the adaptability and resistance to attacks in data transmission. When a new encryption method is added, its transmission effect is further verified to ensure the security and stability of data in new environments. The overall solution balances high security and flexibility, helping to address potential threats in complex wireless communication environments and providing reliable protection for critical data monitoring and transmission in industrial scenarios.

[0111] The foregoing mainly describes the solutions provided by the embodiments of this application from a methodological perspective. To achieve the above functions, it includes corresponding hardware structures and / or software modules for executing each function. Those skilled in the art should readily recognize that, based on the units and algorithm steps of the examples described in conjunction with the embodiments disclosed herein, this application can be implemented in hardware or a combination of hardware and computer software. Whether a function is executed in hardware or by computer software driving hardware depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0112] This application embodiment can divide the data encryption and transmission device into functional modules based on the above method examples. For example, each function can be divided into its own functional modules, or two or more functions can be integrated into one processing module. The integrated modules can be implemented in hardware or as software functional modules. Optionally, the module division in this application embodiment is illustrative and only represents one logical functional division; other division methods may be used in actual implementation.

[0113] like Figure 4 The diagram shown is a structural schematic of a data encryption and transmission device based on a wireless passive sensor provided in an embodiment of this application. Figure 4 The data encryption and transmission device based on a wireless passive sensor shown includes: a communication unit 401 and a processing unit 402;

[0114] The communication unit 401 is used to acquire the information to be transmitted from the wireless passive sensor installed on the pipeline to be monitored, and to obtain a digital signal after preprocessing the information to be transmitted.

[0115] Processing unit 402 is used to encrypt digital signals using two different encryption methods to obtain first encrypted data and second encrypted data;

[0116] Processing unit 402 is used to decrypt the first encrypted data and the second encrypted data to obtain the first decrypted data and the second decrypted data, compare the first decrypted data and the second decrypted data, and determine whether to perform integrity verification on the first decrypted data and the second decrypted data.

[0117] The processing unit 402 is configured to, if it is determined that integrity verification is required, calculate a first hash value by hashing the digital signal, calculate a second hash value and a third hash value by hashing the first decrypted data and the second decrypted data respectively, compare the first hash value with the second hash value and the third hash value respectively, and determine whether to change the encryption method based on the comparison result;

[0118] The processing unit 402 is used to change the encryption method according to the comparison result if it is determined that the encryption method needs to be changed, and if the changed encryption method is a newly added encryption method, to verify whether the digital signal transmission encrypted with the newly added encryption method is secure.

[0119] Optionally, the communication unit 401 is specifically used for:

[0120] Acquire the ultrasonic signal corresponding to the information to be transmitted, collected by a wireless passive sensor;

[0121] The ultrasonic signal is amplified by a low-noise amplifier, and then the amplified ultrasonic signal is bandpass filtered.

[0122] The ultrasonic signal, after bandpass filtering, is converted into a digital signal using an analog-to-digital converter.

[0123] Optionally, the communication unit 401 is specifically used for:

[0124] The digital signal output by the analog-to-digital converter is divided into data packets of fixed length;

[0125] Metadata is appended to each data packet; the metadata includes a timestamp, the sensor identifier of the wireless passive sensor, and the data sequence number; the timestamp is generated by the built-in clock of the wireless passive sensor and is used to mark the acquisition time of the information to be transmitted;

[0126] The final digital signal is generated by using binary phase-shift keying or quadrature amplitude modulation with added metadata to the data packet.

[0127] Optionally, the processing unit 402 is specifically used for:

[0128] The first encrypted data is decrypted using the decryption method corresponding to the encryption method of the first encrypted data to obtain the first decrypted data;

[0129] The second encrypted data is decrypted using the decryption method corresponding to the encryption method of the second encrypted data to obtain the second decrypted data;

[0130] If the first decrypted data and the second decrypted data are the same, then it is determined that no integrity verification will be performed;

[0131] If the first decrypted data differs from the second decrypted data, then an integrity verification is required.

[0132] Optionally, the processing unit 402 is specifically used for:

[0133] If the encryption method of the first encrypted data and / or the encryption method of the second encrypted data are insecure, such that the first decrypted data is different from the second decrypted data, then an integrity verification is required.

[0134] Optionally, the processing unit 402 is specifically used for:

[0135] If the first hash value is equal to the second hash value, and the first hash value is equal to the third hash value, then it is determined that the encryption method should not be changed.

[0136] If the first hash value is not equal to the second hash value and / or the first hash value is not equal to the third hash value, then the encryption method should be changed.

[0137] Optionally, the processing unit 402 is specifically used for:

[0138] If the first hash value is equal to the second hash value, and the first hash value is not equal to the third hash value, then the encryption method corresponding to the second encrypted data is replaced with the encryption method corresponding to the first encrypted data.

[0139] If the first hash value is not equal to the second hash value, and the first hash value is equal to the third hash value, then the encryption method corresponding to the first encrypted data is replaced with the encryption method corresponding to the second encrypted data.

[0140] If the first hash value is not equal to the second hash value, and the first hash value is not equal to the third hash value, then add an encryption method that is different from the encryption method corresponding to the first encrypted data and the encryption method corresponding to the second encrypted data.

[0141] Optionally, the encryption method corresponding to the first encrypted data and the second encrypted data is a single encryption, including symmetric encryption, asymmetric encryption and stream encryption;

[0142] The newly added encryption method is multi-layered encryption, including double encryption and triple encryption.

[0143] Optionally, the processing unit 402 is specifically used for:

[0144] The digital signal is encrypted using a new encryption method to obtain the third encrypted data. The third encrypted data is then decrypted to obtain the fourth decrypted data.

[0145] The fourth hash value of the fourth decrypted data is calculated using a hash algorithm. The fourth hash value is then compared with the first hash value. Based on the comparison result, it is determined whether the encrypted digital signal transmission is secure.

[0146] Optionally, the processing unit 402 is specifically used for:

[0147] If the first hash value is equal to the fourth hash value, then the digital signal transmission state after being encrypted with the newly added encryption method is determined to be secure, and the encryption method is not changed.

[0148] If the first hash value is not equal to the fourth hash value, the digital signal transmission state after being encrypted using the newly added encryption method is determined to be insecure, and the encryption method is changed until the first hash value is the same as the hash value calculated based on the decrypted data corresponding to the changed encryption method.

[0149] This application also provides a computer-readable storage medium, which includes computer-executable instructions. When the computer-executable instructions are executed on a computer, the computer performs the data encryption and transmission method provided in the above embodiments.

[0150] This application also provides a computer program product that can be directly loaded into a memory and contains software code. After being loaded and executed by a computer, the computer program product can implement the data encryption and transmission methods provided in the above embodiments. Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and not to limit them. Although the present invention has been described in detail with reference to preferred embodiments, those skilled in the art should understand that modifications or equivalent substitutions can still be made to the technical solutions of the present invention, and these modifications or equivalent substitutions cannot cause the modified technical solutions to deviate from the spirit and scope of the technical solutions of the present invention.

[0151] The system provided in the above embodiments is only illustrated by the division of the above functional modules. In practical applications, the above functions can be assigned to different functional modules as needed, that is, the modules or steps in the embodiments of the present invention can be further decomposed or combined. For example, the modules in the above embodiments can be merged into one module, or further divided into multiple sub-modules to complete all or part of the functions described above. The names of the modules and steps involved in the embodiments of the present invention are only for distinguishing the various modules or steps and are not considered as an improper limitation of the present invention.

[0152] Those skilled in the art will recognize that the modules and method steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of both. The programs corresponding to the software modules and method steps can be placed in random access memory (RAM), main memory, read-only memory (ROM), electrically erasable programmable ROM, registers, hard disks, removable disks, CD-ROMs, or any other form of storage medium known in the art. To clearly illustrate the interchangeability of electronic hardware and software, the components and steps of the various examples have been generally described in terms of functionality in the foregoing description. Whether these functions are implemented in electronic hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of the invention.

Claims

1. A data encryption and transmission method based on a wireless passive sensor, characterized in that, include: The information to be transmitted from the wireless passive sensor installed on the pipeline to be monitored is obtained, and the information to be transmitted is preprocessed to obtain a digital signal. The digital signal is encrypted using two different encryption methods to obtain first encrypted data and second encrypted data. The first encrypted data and the second encrypted data are decrypted to obtain the first decrypted data and the second decrypted data. The first decrypted data and the second decrypted data are compared to determine whether to perform integrity verification on the first decrypted data and the second decrypted data. If it is determined that integrity verification is to be performed, the first hash value is calculated by the hash algorithm on the digital signal, the second hash value and the third hash value are calculated by the hash algorithm on the first decrypted data and the second decrypted data respectively, the first hash value is compared with the second hash value and the third hash value respectively, and it is determined whether to change the encryption method based on the comparison result; If it is determined that the encryption method needs to be changed, the encryption method is changed according to the comparison result. If the changed encryption method is a newly added encryption method, the security of the digital signal transmission encrypted with the newly added encryption method is verified.

2. The method of claim 1, wherein, The process of acquiring the information to be transmitted from the wireless passive sensor installed on the pipeline to be monitored, and obtaining a digital signal from the information to be transmitted after preprocessing, includes: Acquire the ultrasonic signal corresponding to the information to be transmitted, collected by the wireless passive sensor; The ultrasonic signal is amplified by a low-noise amplifier, and then the amplified ultrasonic signal is subjected to bandpass filtering. The ultrasonic signal, after bandpass filtering, is converted into a digital signal using an analog-to-digital converter.

3. The method of claim 2, wherein, When acquiring the information to be transmitted from the wireless passive sensor installed on the pipeline to be monitored, and obtaining a digital signal from the information to be transmitted after preprocessing, the method further includes: The digital signal output by the analog-to-digital converter is divided into data packets of fixed length; Metadata is appended to each data packet; wherein, the metadata includes a timestamp, the sensor identifier of the wireless passive sensor, and the data sequence number; the timestamp is generated by the built-in clock of the wireless passive sensor and is used to mark the acquisition time of the information to be transmitted; The data packet, after being supplemented with metadata using binary phase-shift keying or quadrature amplitude modulation, generates the final digital signal.

4. The method of claim 1, wherein, The step of decrypting the first encrypted data and the second encrypted data to obtain first decrypted data and second decrypted data, comparing the first decrypted data and the second decrypted data, and determining whether to perform integrity verification on the first decrypted data and the second decrypted data includes: The first encrypted data is decrypted using the decryption method corresponding to the encryption method of the first encrypted data to obtain the first decrypted data; The second encrypted data is decrypted using the decryption method corresponding to the encryption method of the second encrypted data to obtain the second decrypted data; If the first decrypted data is the same as the second decrypted data, then it is determined that no integrity verification will be performed; If the first decrypted data differs from the second decrypted data, then an integrity verification is required.

5. The method of claim 4, wherein, The step of determining that integrity verification is to be performed if the first decrypted data and the second decrypted data are different includes: If the encryption method of the first encrypted data and / or the encryption method of the second encrypted data are insecure, such that the first decrypted data is different from the second decrypted data, then it is determined that an integrity verification should be performed.

6. The method of claim 1, wherein, The step of comparing the first hash value with the second hash value and the third hash value respectively, and determining whether to change the encryption method based on the comparison results, includes: If the first hash value is equal to the second hash value, and the first hash value is equal to the third hash value, then it is determined that the encryption method will not be changed; If the first hash value is not equal to the second hash value and / or the first hash value is not equal to the third hash value, then it is determined that the encryption method should be changed.

7. The method of claim 6, wherein, If it is determined that the encryption method needs to be changed, and the encryption method is changed according to the comparison result, the following steps are included: If the first hash value is equal to the second hash value and the first hash value is not equal to the third hash value, then the encryption method corresponding to the second encrypted data is replaced with the encryption method corresponding to the first encrypted data. If the first hash value is not equal to the second hash value, and the first hash value is equal to the third hash value, then the encryption method corresponding to the first encrypted data is replaced with the encryption method corresponding to the second encrypted data. If the first hash value is not equal to the second hash value, and the first hash value is not equal to the third hash value, then a new encryption method is added that is different from the encryption method corresponding to the first encrypted data and the encryption method corresponding to the second encrypted data.

8. The method of claim 7, wherein, The encryption methods corresponding to the first encrypted data and the second encrypted data are single encryption methods, including symmetric encryption, asymmetric encryption and stream encryption; The newly added encryption method is multi-layered encryption, including double encryption and triple encryption.

9. The method of claim 1, wherein, If the changed encryption method is a newly added encryption method, when verifying whether the digital signal transmission encrypted using the newly added encryption method is secure, it includes: The digital signal is encrypted using a new encryption method to obtain third encrypted data, and the third encrypted data is decrypted to obtain fourth decrypted data. The fourth hash value of the fourth decrypted data is calculated using a hash algorithm, and the fourth hash value is compared with the first hash value. Based on the comparison result, it is determined whether the encrypted digital signal transmission is secure.

10. The data encryption and transmission method based on a wireless passive sensor according to claim 9, characterized in that, When determining whether the encrypted digital signal transmission is secure based on the comparison result, the following steps are included: If the first hash value is equal to the fourth hash value, then the digital signal transmission state after being encrypted with the newly added encryption method is determined to be secure, and the encryption method is not changed. If the first hash value is not equal to the fourth hash value, the digital signal transmission state after being encrypted using the newly added encryption method is determined to be insecure, and the encryption method is changed until the first hash value is the same as the hash value calculated based on the decryption data corresponding to the changed encryption method.

Images