A wireless stealth network construction method based on an adaptive mechanism

Abstract

This invention relates to the field of wireless communication network security technology, and in particular to a method for constructing a wireless stealth network based on an adaptive mechanism, comprising the following steps: S1, performing full-domain passive monitoring on multiple candidate nodes participating in the same network construction task, continuously collecting background activity information of multiple candidate channels within a continuous observation period, and simultaneously acquiring node status information of each candidate node in its current operating state. This wireless stealth network construction method based on an adaptive mechanism achieves network layer stealth through full-domain passive monitoring and dual perception of channel status and node status, combined with a central server-dongle dedicated architecture, IP whitelist, and ICMP protocol disabling. It also achieves adaptive screening of candidate contact time periods and shared communication resources by using contact sequences without fixed identifiers and noise uncertainty to mask physical layer signal characteristics, thereby avoiding fixed signal characteristics at the physical layer and significantly reducing the risk of network detection, identification, and unauthorized access.

Description

Technical Field

[0001] This invention relates to the field of wireless communication network security technology, specifically to a method for constructing a wireless stealth network based on an adaptive mechanism. Background Technology

[0002] With the rapid development of wireless communication technology, wireless networks are increasingly being used in government, military, finance and other fields with high requirements for security and anonymity. However, the open transmission characteristics of traditional wireless communication networks make them vulnerable to many security problems such as easy detection, unauthorized access and easy identification of transmission signal characteristics, making it difficult to effectively guarantee network anonymity and data transmission security.

[0003] In terms of network anonymity, traditional wireless networks mostly use simple password encryption methods to achieve access control, lacking a full-layer anonymity design from the network access layer to the physical layer. Unauthorized entities can easily discover the existence of network nodes through network probing tools such as ping and traceroute, using ICMP protocol echo requests. At the same time, the power, time slots, and other characteristics of network transmission signals are fixed, making them easy for external devices to capture and analyze, greatly increasing the probability of the network being detected and intruded upon, and failing to meet the requirements for highly anonymous communication.

[0004] In terms of channel adaptation and resource allocation, wireless communication channels are susceptible to factors such as multipath fading, environmental interference, and traffic variations, exhibiting dynamic and time-varying characteristics. Traditional wireless networks mostly use static allocation modes for transmission power and communication resources, lacking real-time perception and adaptive adjustment capabilities for channel states. This makes it impossible to achieve efficient utilization of power resources and ensure stable transmission of core service data when channel gain attenuates and interference increases. At the same time, co-channel interference problems in the network are difficult to solve effectively, and interference signals can easily damage transmitted data, reducing the reliability and efficiency of data transmission. Poor channel adaptation capability has become a core problem restricting the quality of wireless transmission.

[0005] In terms of fault recovery, traditional wireless network fault handling relies heavily on centralized scheduling on the server side. Terminal nodes lack the ability to independently detect and recover from faults. When problems such as link interruption, signal loss, or device communication module failure occur, they need to wait for the server to issue instructions before repairing. Fault recovery response is slow and the process is cumbersome. Moreover, single node failure can easily cause local network transmission interruption, which has a significant impact on the stability of the overall network and cannot be adapted to application scenarios with high requirements for communication continuity.

[0006] In terms of unauthorized transmission detection, traditional wireless network security detection often employs multi-dimensional detection logic. The complexity of these detection dimensions leads to high server resource consumption and significant judgment latency. Furthermore, the detection thresholds are mostly empirically preset values, failing to comprehensively optimize by combining false alarm probability and missed detection probability. This easily results in misjudgment: either normal transmissions are misjudged as unauthorized transmissions, triggering false alarms and wasting network resources; or actual unauthorized transmission behaviors are missed, causing network security protection to fail. It is difficult to balance detection accuracy and efficiency, making it impossible to achieve rapid and accurate identification and blocking of unauthorized transmission behaviors. Summary of the Invention

[0007] The purpose of this invention is to provide a method for constructing wireless covert networks based on an adaptive mechanism, so as to solve the problems mentioned in the background art.

[0008] To achieve the above objectives, the present invention provides the following technical solution: a method for constructing a wireless covert network based on an adaptive mechanism, comprising the following steps: S1. Perform full-domain passive monitoring on multiple candidate nodes participating in the same network construction task, continuously collect background activity information of multiple candidate channels within a continuous observation period, and simultaneously acquire node status information of each candidate node in its current operating state; build a wireless stealth network infrastructure, deploy a central server at the network end, configure customized dongles on candidate nodes, establish a dedicated communication link between the dongle and the server, the server presets a whitelist of legitimate access IPs, disables the ICMP protocol for access requests from non-whitelisted IPs, and the dongle senses the channel gain, noise power, and traffic status core parameters in real time during network transmission, providing basic data support for subsequent node contact and link construction; S2. Based on the background activity information and the node status information, determine the candidate contact time period for each candidate node on each candidate channel; based on the overlap of the candidate contact time periods of any two candidate nodes on the same candidate channel, determine the shared contact time period and shared candidate channel for the corresponding node pair; based on the obtained channel status information and the network parameters fed back by the dongle, the server adaptively allocates transmission power and communication resources for the service data transmission of the candidate nodes. S3. The sending node sends a contact sequence through the shared candidate channel during the corresponding shared contact period. The receiving node detects the received signal and returns an acknowledgment sequence when the detection result meets the acknowledgment conditions. After the sending node receives the acknowledgment sequence, it establishes the adjacency relationship information of the corresponding node pair. The dongle and the server complete identity authentication through a preset encryption algorithm. After successful authentication, a temporary communication codebook is generated. The dongle adjusts the codebook mapping relationship and transmission time slot according to the real-time network status. At the same time, continuous interference cancellation technology is used to eliminate the impact of co-channel interference signals in the network on the transmitted data. S4. Based on the adjacency information of each node pair between the data source node and the data destination node, determine the active forwarding relationship chain for data transmission, and configure the corresponding transmission power, occupied channel and transmission time period according to each active forwarding relationship in the active forwarding relationship chain; the server follows the principle of minimum power to meet the minimum rate and remaining power to improve anti-interference, prioritizes the transmission of core business data, reduces non-core communication overhead with the dongle, and ensures reliable transmission of core business data; S5. For each active forwarding relationship in the active forwarding relationship chain, filter out the backup forwarding relationship that shares at least one endpoint node with the corresponding active forwarding relationship from other adjacency relationship information that has not been selected into the current active forwarding relationship chain, and establish a mapping relationship between the active forwarding relationship and the backup forwarding relationship. S6. During operation, passive listening continues, and the adjacency information is updated based on subsequent listening results. When the adjacency information corresponding to any active forwarding relationship in the active forwarding relationship chain changes and triggers the replacement condition, the corresponding backup forwarding relationship is called within the local forwarding segment for replacement, and the adjacency information corresponding to the local forwarding segment is updated synchronously. Candidate nodes carry out data transmission through the dongle. The server performs algorithm verification on the transmission signal emitted by the dongle. If channel state degradation is detected during transmission, the dongle adjusts its power allocation strategy or communication parameters. If a device failure occurs, a hierarchical self-recovery mechanism is triggered. S7. The server performs real-time detection of the transmission signals across the entire network, employing a binary detection method. It collects the average signal power and compares it with a preset optimal detection threshold to determine if unauthorized transmission occurs. The detection threshold is obtained by the server through calculating the minimum false detection probability. Simultaneously, it leverages the uncertainty of noise to enhance the overall stealth of the network and reduce the probability of detection errors. Furthermore, the background activity information specifically includes four core parameters: channel occupancy rate of the candidate channel during the continuous observation period, channel idle duration, channel background energy fluctuation value, and received signal quality value. The continuous observation period is composed of multiple fixed-length listening windows combined in an orderly manner, and each listening window is divided into multiple basic time slices of the smallest granularity according to a unified standard. The candidate contact period is defined as a high-quality time segment that stably repeats within at least two consecutive observation periods and simultaneously meets three conditions: channel occupancy rate is lower than a first preset threshold, background energy fluctuation value is lower than a second preset threshold, and the number of consecutive basic time slices is not less than a twelfth preset threshold.

[0009] Furthermore, the node status information includes the node's remaining energy, buffer load, and transmit / receive resource occupancy rate; when determining the candidate contact time period for each candidate node on each candidate channel, the basic time slices with the node's remaining energy below the third preset threshold, buffer load above the fourth preset threshold, or transmit / receive resource occupancy rate above the fifth preset threshold are removed, and the remaining continuous basic time slices are combined to form the candidate contact time period.

[0010] Furthermore, the shared candidate channel is a candidate channel that appears simultaneously in the candidate contact period of two corresponding candidate nodes; the shared contact period is the overlapping interval of the candidate contact periods of two corresponding candidate nodes on the shared candidate channel, and the duration of the overlapping interval is not less than a sixth preset threshold; when there are multiple shared candidate channels between two corresponding candidate nodes, the candidate channel with the lowest channel occupancy rate is selected first; when the channel occupancy rates of multiple candidate channels are the same, the candidate channel with the lowest background energy fluctuation value is selected as the shared candidate channel.

[0011] Furthermore, the contact sequence is jointly determined by the current network round number, time window number, and random disturbance amount according to a preset mapping rule, and does not include fixed node addresses or fixed node identifiers; the receiving node generates a reference sequence based on the current network round number, time window number, and the preset mapping rule, and performs correlation operations between the received signal and the reference sequence during the shared contact period; when the correlation value is not lower than a seventh preset threshold, the receiving node sends an acknowledgment sequence during a reserved return period within the shared contact period; after detecting the acknowledgment sequence during the reserved return period, the sending node establishes a temporary adjacency identifier for the corresponding node pair.

[0012] Furthermore, the adjacency information includes the shared contact period, shared candidate channel, allowed transmission power limit, hold duration, and time connection interval between the corresponding node pair and the adjacent adjacency information; the time connection interval is the time interval between the end time of the shared contact period corresponding to the previous adjacency information and the start time of the shared contact period corresponding to the next adjacency information; the allowed transmission power limit is determined in the following way: the transmitting node transmits the contact sequence in multiple incremental power levels, the receiving node records the received signal quality value corresponding to each power level, and returns the lowest power level that makes the received signal quality value reach the eighth preset threshold in the acknowledgment sequence, and the transmitting node determines the allowed transmission power limit according to the lowest power level and the preset power margin.

[0013] Furthermore, when determining the active forwarding relationship chain, the following conditions are met: the time connection interval between two adjacent active forwarding relationships is not greater than a ninth preset threshold; the number of times the same relay node is selected into the active forwarding relationship chain in multiple consecutive data transmission cycles is not greater than a tenth preset threshold; the retention time of each active forwarding relationship in the active forwarding relationship chain covers the current data transmission cycle, and there is a reachable forwarding link between the data source node and the data destination node formed by sequentially connecting multiple adjacency relationship information; when there are multiple reachable forwarding links that meet the above conditions, the reachable forwarding link with the fewest total number of times the relay node is repeatedly selected is given priority; when the total number of times the relay nodes are repeatedly selected is the same, the reachable forwarding link with the smallest cumulative time connection interval is selected as the active forwarding relationship chain.

[0014] Furthermore, the backup forwarding relationship originates from other adjacency information not selected into the current active forwarding relationship chain; the backup forwarding relationship shares at least one endpoint node with the corresponding active forwarding relationship, and the time connection interval between the backup forwarding relationship and the upstream or downstream active forwarding relationship of the replaced active forwarding relationship is not greater than the ninth preset threshold; when there are multiple backup forwarding relationships that meet the conditions, the backup forwarding relationship whose retention duration covers the current data transmission cycle is selected first; when there are multiple backup forwarding relationships whose retention durations all cover the current data transmission cycle, the backup forwarding relationship with the lowest allowed transmission power limit is selected; when the allowed transmission power limits are the same, the backup forwarding relationship with the longest shared contact period duration is selected.

[0015] Furthermore, the replacement conditions include any of the following situations: the retention period in the corresponding adjacency relationship information expires; no forwarding confirmation is received within the eleventh consecutive preset number of data transmission cycles; the transmission power required to maintain the corresponding active forwarding relationship exceeds the allowed transmission power limit; the corresponding shared contact period changes, causing the time connection interval between two adjacent active forwarding relationships to be greater than the ninth preset threshold.

[0016] Furthermore, the local forwarding segment consists of the replaced active forwarding relationship and its directly adjacent upstream and downstream active forwarding relationships; when a backup forwarding relationship is invoked for replacement, only the adjacency information involved in the local forwarding segment is updated; between adjacent data transmission cycles, by re-executing contact sequence transmission, acknowledgment sequence return, and monitoring result acquisition within the corresponding shared contact time period, the adjacency information corresponding to the local forwarding segment is updated with shared contact time period, hold duration, and allowed transmission power limit.

[0017] Furthermore, when the dongle and the server exchange pilot sequences to estimate the link channel state information, the dongle's estimation of the channel state information includes the channel coefficient and the channel gain. The channel in the network is an independent and identically distributed Rayleigh fading channel, and the bidirectional channel coefficients from the terminal to the server and from the server to the terminal are consistent. The noise power sensed by the dongle follows a logarithmic uniform distribution, and the noise has an uncertainty within a preset range.

[0018] Furthermore, when the server performs adaptive power allocation based on channel state information and network parameters fed back by the dongle, the server allocates the minimum power required to meet the minimum transmission rate for the service data, and the remaining power is used to ensure the channel's anti-interference capability. When the channel gain cannot support the service data to reach the minimum transmission rate, the server increases the service data transmission power, while the dongle reduces non-core communication overhead to ensure the reliable transmission of core service data.

[0019] Furthermore, when the dongle detects a link interruption or signal loss, it first retransmits the pilot sequence to estimate the current channel state. If the channel is recoverable, it automatically adjusts the connection parameters to rebuild the communication link. If the channel cannot be recovered, it switches to the backup communication frequency band and sends a fault alarm message to the server. The server then updates the node status within the network synchronously.

[0020] Furthermore, the server employs a binary detection method for network transmission signals, detecting and identifying signals in two states: authorized normal transmission and unauthorized transmission. The detection threshold is the optimal threshold value obtained by the server through calculating the minimum false detection probability, which is the sum of the false alarm probability and the missed detection probability. When the average power of the detected signal is higher than the detection threshold, the server determines that there is unauthorized transmission behavior on the network and triggers the protection mechanism.

[0021] Compared with the prior art, the beneficial effects of the present invention are: 1. This adaptive mechanism-based wireless stealth network construction method achieves network layer stealth through passive monitoring across the entire domain and dual perception of channel and node status. It combines a dedicated architecture of central server-dongle, IP whitelist, and ICMP protocol disabling. In addition, it uses contact sequences without fixed identifiers and noise uncertainty to mask physical layer signal characteristics, enabling adaptive screening of candidate contact time periods and shared communication resources. This avoids fixed signal characteristics at the physical layer and significantly reduces the risk of network detection, identification, and unauthorized access.

[0022] 2. This adaptive mechanism-based wireless covert network construction method adopts a coordinated strategy of dynamic power configuration, time-slot channel occupancy, balanced selection of relay nodes, adaptive power allocation, dynamic codebook adjustment and continuous interference cancellation to achieve adaptive and accurate allocation of communication resources, effectively reduce co-channel interference and node load imbalance, and ensure stable transmission of core service data in complex time-varying wireless environments.

[0023] 3. This adaptive mechanism-based wireless covert network construction method, through pre-generated backup forwarding relationships and a local segment rapid replacement mechanism, combined with hierarchical autonomous fault recovery of the dongle, achieves autonomous detection, real-time switching, and adaptive recovery of link faults, and can quickly repair link anomalies without centralized scheduling; at the same time, it is equipped with optimal threshold binary detection to balance the probability of false alarms and missed detections, and achieves accurate and rapid identification of unauthorized transmissions, comprehensively improving network robustness, covertness, and communication continuity. Attached Figure Description

[0024] To more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0025] Figure 1 This is the overall construction process of the wireless stealth network of the present invention; Figure 2 This is a network architecture diagram of the central server-donkey of the present invention; Figure 3 This is the candidate contact time period and shared time period screening process of the present invention; Figure 4 The process for establishing node contact and adjacency relationships in this invention; Figure 5 This is the active forwarding chain + backup relationship replacement process of the present invention; Figure 6 This is the unauthorized transmission binary detection and protection process of the present invention; Figure 7 This invention provides a hierarchical fault recovery process for the dongle. Detailed Implementation

[0026] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0027] In this invention, unless otherwise explicitly specified and limited, the terms installation, connection, linking, fixing, etc., should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral part; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium; they can refer to the internal communication of two components or the interaction between two components. Those skilled in the art can understand the specific meaning of the above terms in this invention according to the specific circumstances.

[0028] Please see Figure 1-2 This invention provides a technical solution: the overall process follows a closed-loop logic of infrastructure construction, full-domain passive monitoring, node contact matching, adjacency relationship establishment, forwarding link planning, backup relationship mapping, dynamic adaptive maintenance, and real-time security detection. Under the premise of central server control and no fixed communication time slots or exposed node identifiers, it achieves covert networking and stable transmission. In this embodiment, the number of candidate nodes is 10, and the number of candidate channels is 8. The preset threshold values ​​are determined according to the actual scenario, specifically as follows: the first preset threshold (channel occupancy rate) is 20%, the second preset threshold (background energy fluctuation value) is 5dB, the third preset threshold (node ​​remaining energy) is 30%, the fourth preset threshold (buffer load) is 70%, the fifth preset threshold (transmit / receive resource occupancy rate) is 60%, the sixth preset threshold (shared contact period duration) is 100ms, and the seventh preset threshold (correlation value) is 0.8. The eighth preset threshold (received signal quality value) is -70dBm, the ninth preset threshold (time interval) is 50ms, the tenth preset threshold (number of times a relay node is repeatedly selected) is 3 times, the eleventh preset threshold (number of consecutive times no acknowledgment is received) is 5 times, and the twelfth preset threshold (number of consecutive basic time slices) is 10; the basic time slice length is 10ms, the listening window length is 1s, the continuous observation period is 5 listening windows (i.e., 5s), the network round cycle is 10s, the data transmission cycle is 2s, and the preset power margin is 3dB. The specific implementation steps are as follows: Step 1: Infrastructure Setup and Global Passive Monitoring & Parameter Acquisition A central server is deployed on the network side, with a pre-defined whitelist of legitimate IPs and ICMP protocol disabled for non-whitelisted IPs; 10 candidate nodes connect to a customized dongle through a physical interface, and the dongle establishes a dedicated communication link with the server to complete two-way authentication after power-on.

[0029] Ten candidate nodes simultaneously activate passive listening mode. The radio frequency receiving module operates silently, without actively sending any signals, and continuously collects background activity information of eight candidate channels within a continuous 5-second observation period, including the channel occupancy rate, channel idle duration, channel background energy fluctuation value, and received signal quality value of each channel. Data is recorded once every 10ms (one basic time slice) and summarized once every 1s (one listening window).

[0030] The dongle collects data in 10ms increments, sensing key parameters such as channel gain, noise power, and traffic status in real time. The noise power follows a logarithmic uniform distribution and has a 3dB uncertainty. Each candidate node obtains its remaining energy, cache load, and transmit / receive resource utilization rate in real time, updating it every 500ms. The data is temporarily stored locally and not broadcast externally.

[0031] Step 2: Candidate / Shared Contact Period Determination and Adaptive Power Allocation Based on background activity information, candidate contact periods that are stable and repeating within 10 seconds and meet the conditions of channel occupancy, energy fluctuation, and number of time slices are selected. Ineligible time slices are eliminated based on node status to form valid candidate contact periods.

[0032] By traversing nodes in pairs, overlapping intervals of candidate contact periods on the same channel are extracted, and shared contact periods and shared candidate channels that meet the duration threshold are determined. When there are multiple channels, channels with low occupancy and small energy fluctuations are given priority.

[0033] The server receives channel status information and dongle feedback parameters, allocates power according to the principle of minimum power to meet the minimum data rate, and uses the remaining power to enhance anti-interference when the channel is good; when the channel gain is insufficient, it increases the power of core services, reduces non-core overhead of the dongle, and ensures the transmission of core data.

[0034] Step 3: Constructing Hidden Contact Interaction and Dynamic Adaptive Channels The dongle and server authenticate with each other using the SM2 encryption algorithm, generating a temporary communication codebook that is automatically updated every minute. During the shared contact period, the preset sending node transmits a contact sequence without fixed identifiers, generated from the network round number, time window number, and random perturbation, through a shared candidate channel.

[0035] The receiving node generates a reference sequence and performs related calculations. Once the relevant values ​​meet the criteria, it returns an acknowledgment sequence. After detecting the acknowledgment sequence, the sending node establishes a temporary adjacency identifier and adjacency relationship information. The dongle adjusts the codebook mapping relationship and transmission time slot according to the real-time network status, employs continuous interference cancellation technology to eliminate co-channel interference, and prioritizes decoding core service data.

[0036] Step 4: Building and Allocating Resources for Activity Forwarding Relationships Set the data source node and data destination node, traverse the adjacency information, and filter the reachable forwarding links that meet the conditions of time connection interval, number of relay selections, and retention time. Prioritize the links with fewer relay repetitions and shorter cumulative connection intervals as active forwarding relationship links.

[0037] Configure the transmission power, occupied channel, and transmission time period of each segment according to the activity forwarding relationship chain. The server combines adaptive power allocation rules to ensure that the power allocation does not exceed the allowed upper limit and that there are no conflicts or redundancies in communication resources.

[0038] Step 5: Filtering and Mapping Backup Forwarding Relationships For each segment of the active forwarding relationship chain, backup forwarding relationships that share endpoints and meet time connection conditions are selected from the unincluded adjacency relationships. Priority is given to backup relationships that maintain a duration that covers the transmission cycle, have a low power limit, and a long shared time period. An active-backup one-to-one mapping is established to provide alternative solutions for fault replacement.

[0039] Step Six: Data Transmission, Tiered Fault Recovery, and Dynamic Adaptive Maintenance Candidate node data is transmitted after being encrypted using a dongle (SM3 / SM4). After the server completes algorithm verification, targeted access is allowed. The dongle continuously monitors the channel status and autonomously adjusts power and parameters when the channel deteriorates. Upon detecting a link interruption, it first retransmits the pilot sequence to estimate the channel status; if recovery is possible, the link is rebuilt; otherwise, it switches to a backup frequency band and reports to the server.

[0040] The system continuously and passively monitors the network, updating the background and node status every 5 seconds. When an active forwarding relationship triggers a replacement condition (such as expiration of retention time, power exceeding limits, or connection interval exceeding the standard), it calls the backup relationship to replace the existing one in the local forwarding segment. This only updates the local adjacency information and does not affect the overall network operation. Adjacency parameters are refreshed during adjacent transmission cycles.

[0041] Step Seven: Real-time Network Detection and Stealth Enhancement The server collects the transmitted signals from the entire network at a period of 5ms, calculates the average power after filtering and noise reduction, and determines the optimal detection threshold by iteratively calculating the minimum error detection probability through the gradient descent algorithm.

[0042] A binary detection method is used to compare the average power of the signal with a threshold value. If the power is lower than the threshold value, it is considered normal transmission; if the power is higher than the threshold value, it is considered unauthorized transmission and protection is immediately triggered: disconnecting the suspicious link, increasing the encryption level, increasing the noise uncertainty to 5dB, and the response time is 10ms. The entire process uses noise uncertainty to cover up the characteristics of legitimate signals and enhances the network's stealth.

[0043] When using this system, deploy a central server, configure a whitelist of legitimate IP addresses, and disable ICMP protocols on non-whitelisted nodes. Candidate nodes install customized dongles and establish dedicated encrypted communication links with the server. All candidate nodes initiate global passive monitoring, collecting background information such as candidate channel occupancy, energy fluctuations, and signal quality, while simultaneously acquiring status information such as remaining node energy and cache load. The dongles monitor channel gain, noise power, and traffic status in real time, providing data for subsequent network deployment.

[0044] Based on the monitoring results, candidate contact periods with idle channels and stable energy are selected, while time slots with substandard node states (low energy, high load) are eliminated. Candidate contact periods for matching node pairs are determined, and shared contact periods and shared candidate channels are identified, prioritizing channels with low occupancy and minimal interference. The server adaptively allocates transmission power and communication resources based on channel and node states.

[0045] The sending node transmits a contact sequence without a fixed identifier during a shared time slot and on a shared channel. The receiving node verifies the sequence through relevant calculations, and returns an acknowledgment sequence upon successful verification, establishing an adjacency relationship between the two nodes. The dongle completes authentication with the server, generates a temporary communication codebook, dynamically adjusts the mapping relationship and time slots, and eliminates co-channel interference.

[0046] Based on adjacency relationships, plan the active forwarding relationship chain from the data source to the data destination, satisfying constraints such as time coherence and relay reuse counts. Configure corresponding transmission power, occupied channels, and transmission time periods for each link, prioritizing the transmission of core services. For each active forwarding relationship, select backup forwarding relationships with shared endpoints and time compatibility. Establish a mapping between active and backup relationships to prepare for link replacement.

[0047] The network continues to operate, with nodes transmitting data encrypted using a dongle. It monitors and updates adjacency relationships in real time; when a replacement condition is triggered, it locally calls upon a backup relationship to replace the existing one, updating only the local segment information. The dongle autonomously detects the channel: adjusting parameters for channel degradation, reconnecting after link interruption, or switching to a backup frequency band, and reports these findings to the server synchronously.

[0048] The server collects the average power of the entire network signal and compares it with the optimal detection threshold. When unauthorized transmission is detected, protection is immediately triggered: suspicious links are disconnected, encryption is upgraded, noise uncertainty is increased, and stealth is enhanced.

[0049] It should be noted that, in this document, relational terms such as "first" and "second" are used merely to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the statement "comprising a..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0050] Although embodiments of the invention have been shown and described, it will be understood by those skilled in the art that various changes, modifications, substitutions and alterations can be made to these embodiments without departing from the principles and spirit of the invention, the scope of which is defined by the appended claims and their equivalents.

Claims

1. A method for constructing a wireless covert network based on an adaptive mechanism, characterized in that, Includes the following steps: S1. Perform full-domain passive monitoring on multiple candidate nodes participating in the same network construction task, continuously collect background activity information of multiple candidate channels within a continuous observation period, and simultaneously acquire node status information of each candidate node in its current operating state; build a wireless stealth network infrastructure, deploy a central server at the network end, configure customized dongles on candidate nodes, establish a dedicated communication link between the dongle and the server, the server presets a whitelist of legitimate access IPs, disables the ICMP protocol for access requests from non-whitelisted IPs, and the dongle senses the channel gain, noise power, and traffic status core parameters in real time during network transmission, providing basic data support for subsequent node contact and link construction; S2. Based on the background activity information and the node status information, determine the candidate contact time period for each candidate node on each candidate channel; Based on the overlapping interval of the candidate contact time periods of any two candidate nodes on the same candidate channel, determine the shared contact time period and shared candidate channel of the corresponding node pair; Based on the acquired channel state information and the network parameters fed back by the dongle, the server adaptively allocates transmission power and communication resources for the business data transmission of candidate nodes. S3. The sending node sends a contact sequence through the shared candidate channel during the corresponding shared contact period, and the receiving node detects the received signal and returns an acknowledgment sequence when the detection result meets the acknowledgment conditions. After receiving the confirmation sequence, the sending node establishes the adjacency relationship information of the corresponding node pair; The dongle and the server complete identity authentication through a preset encryption algorithm. After successful authentication, a temporary communication codebook is generated. The dongle adjusts the codebook mapping relationship and transmission time slot according to the real-time network status. At the same time, continuous interference cancellation technology is used to eliminate the impact of co-channel interference signals on the transmitted data. S4. Based on the adjacency relationship information of each node pair between the data source node and the data destination node, determine the active forwarding relationship chain for data transmission, and configure the corresponding transmission power, occupied channel and transmission time period according to each active forwarding relationship in the active forwarding relationship chain; The server follows the principle of minimizing power to meet the minimum data rate and using remaining power to enhance anti-interference capabilities, prioritizing the transmission of core business data. The dongle reduces non-core communication overhead and ensures reliable transmission of core business data. S5. For each active forwarding relationship in the active forwarding relationship chain, filter out the backup forwarding relationship that shares at least one endpoint node with the corresponding active forwarding relationship from other adjacency relationship information that has not been selected into the current active forwarding relationship chain, and establish a mapping relationship between the active forwarding relationship and the backup forwarding relationship. S6. During operation, continue to perform passive listening and update the adjacency information according to the subsequent listening results; when the adjacency information corresponding to any active forwarding relationship in the active forwarding relationship chain changes and triggers the replacement condition, call the corresponding backup forwarding relationship in the local forwarding segment to replace it, and synchronously update the adjacency information corresponding to the local forwarding segment. Candidate nodes transmit data using a dongle. The server performs algorithm verification on the transmission signals emitted by the dongle. If channel degradation is detected during transmission, the dongle automatically adjusts its power allocation strategy or communication parameters. If a device failure occurs, a hierarchical self-recovery mechanism is triggered. S7. The server performs real-time detection of the transmission signals of the entire network. It adopts a binary detection method, which collects the average power of the signal and compares it with the preset optimal detection threshold to determine whether there is unauthorized transmission behavior in the network. The detection threshold is obtained by the server by calculating the minimum false detection probability. At the same time, the uncertainty of noise is used to improve the overall stealth of the network and reduce the probability of detection errors.

2. The method for constructing a wireless covert network based on an adaptive mechanism according to claim 1, characterized in that: The background activity information includes the channel occupancy rate, idle duration, background energy fluctuation value, and received signal quality value of the candidate channel during the continuous observation period. The continuous observation period consists of multiple fixed-length listening windows, each of which is divided into multiple basic time slices; The candidate contact period is a time segment that repeats within at least two consecutive observation periods and simultaneously satisfies the following conditions: channel occupancy rate is lower than a first preset threshold, background energy fluctuation value is lower than a second preset threshold, and the number of consecutive basic time slices is not less than a twelfth preset threshold.

3. The method for constructing a wireless covert network based on an adaptive mechanism according to claim 2, characterized in that: The node status information includes the node's remaining energy, cache load, and transmit / receive resource utilization rate. When determining the candidate contact time period for each candidate node on each candidate channel, the basic time slices with the node's remaining energy below the third preset threshold, buffer load above the fourth preset threshold, or transmit / receive resource occupancy rate above the fifth preset threshold are removed, and the remaining continuous basic time slices are combined to form the candidate contact time period.

4. The method for constructing a wireless covert network based on an adaptive mechanism according to claim 3, characterized in that: The shared candidate channel is a candidate channel that appears simultaneously in the candidate contact period of two corresponding candidate nodes. The shared contact period is the overlapping interval of the candidate contact periods of two corresponding candidate nodes on the shared candidate channel, and the duration of the overlapping interval is not less than a sixth preset threshold. When there are multiple shared candidate channels between two corresponding candidate nodes, the candidate channel with the lowest channel occupancy rate is selected first; when the channel occupancy rates of multiple candidate channels are the same, the candidate channel with the lowest background energy fluctuation value is selected as the shared candidate channel.

5. The method for constructing a wireless covert network based on an adaptive mechanism according to claim 4, characterized in that: The contact sequence is determined by the current network round number, time window number, and random disturbance amount according to a preset mapping rule, and does not include fixed node addresses or fixed node identifiers. The receiving node generates a reference sequence based on the current network round number, time window number, and the preset mapping rule, and performs correlation operations between the received signal and the reference sequence during the shared contact period; When the relevant value is not lower than the seventh preset threshold, the receiving node sends an acknowledgment sequence during the reserved return period within the shared contact period; After the sending node detects the confirmation sequence within the reserved return period, it establishes a temporary adjacency identifier for the corresponding node pair.

6. The method for constructing a wireless covert network based on an adaptive mechanism according to claim 5, characterized in that: The adjacency information includes the shared contact period, shared candidate channel, maximum allowed transmission power, hold duration, and time connection interval between the corresponding node pair and the adjacent adjacency information before and after it; The time interval is the time interval between the end time of the shared contact period corresponding to the previous adjacency relationship information and the start time of the shared contact period corresponding to the next adjacency relationship information. The upper limit of the allowed transmission power is determined in the following way: the transmitting node transmits a contact sequence in multiple incremental power levels, the receiving node records the received signal quality value corresponding to each power level, and returns the lowest power level that makes the received signal quality value reach the eighth preset threshold in the acknowledgment sequence. The transmitting node determines the upper limit of the allowed transmission power based on the lowest power level and the preset power margin.

7. The method for constructing a wireless covert network based on an adaptive mechanism according to claim 6, characterized in that: When determining the activity forwarding relationship chain, the following conditions must be met: The time interval between two adjacent forwarding activities shall not exceed the ninth preset threshold. The number of times the same relay node is selected into the active forwarding relationship chain in multiple consecutive data transmission cycles does not exceed the tenth preset threshold; The duration of each activity forwarding relationship in the activity forwarding relationship chain covers the current data transmission cycle, and there is a reachable forwarding link between the data source node and the data destination node, which is formed by sequentially connecting multiple adjacency relationship information. When there are multiple reachable forwarding links that meet the above conditions, the reachable forwarding link with the fewest total number of times the relay node is repeatedly selected is given priority; when the total number of times the relay node is repeatedly selected is the reachable forwarding link with the smallest cumulative time connection interval is selected as the active forwarding relationship chain.

8. The method for constructing a wireless covert network based on an adaptive mechanism according to claim 7, characterized in that: The backup forwarding relationship is derived from other adjacency relationship information that was not selected into the current active forwarding relationship chain; The backup forwarding relationship and the corresponding active forwarding relationship share at least one endpoint node, and the time connection interval between the backup forwarding relationship and the upstream or downstream active forwarding relationship of the replaced active forwarding relationship is not greater than the ninth preset threshold. When multiple backup forwarding relationships meet the conditions, the backup forwarding relationship with the retention duration covering the current data transmission cycle is selected first; when multiple backup forwarding relationships with retention durations all covering the current data transmission cycle are selected, the backup forwarding relationship with the lowest allowed transmission power limit is selected; when the allowed transmission power limits are the same, the backup forwarding relationship with the longest shared contact period duration is selected.

9. The method for constructing a wireless covert network based on an adaptive mechanism according to claim 7, characterized in that: The replacement conditions include any of the following: The retention period in the corresponding adjacency information has expired; No forwarding confirmation was received within the eleventh consecutive preset number of data transmission cycles; The transmission power required to maintain the corresponding activity forwarding relationship exceeds the allowed transmission power limit; The corresponding shared contact period changes, causing the time connection interval between two adjacent activity forwarding relationships to be greater than the ninth preset threshold.

10. The method for constructing a wireless covert network based on an adaptive mechanism according to claim 9, characterized in that: The local forwarding segment consists of the replaced activity forwarding relationship and the upstream and downstream activity forwarding relationships directly adjacent to it; When the backup forwarding relationship is invoked for replacement, only the adjacency relationship information within the local forwarding segment is updated; Between adjacent data transmission cycles, by re-executing contact sequence transmission, acknowledgment sequence return, and monitoring result acquisition within the corresponding shared contact period, the adjacency relationship information corresponding to the local forwarding segment is updated with shared contact period, hold duration, and allowed transmission power limit.

11. The method for constructing a wireless covert network based on an adaptive mechanism according to claim 10, characterized in that: When the dongle and the server exchange pilot sequences to estimate the link channel state information, the dongle's estimation of the channel state information includes the channel coefficient and the channel gain. The channel in the network is an independent and identically distributed Rayleigh fading channel, and the bidirectional channel coefficients from the terminal to the server and from the server to the terminal are consistent. The noise power sensed by the dongle follows a logarithmic uniform distribution, and the noise has an uncertainty within a preset range.

12. The method for constructing a wireless covert network based on an adaptive mechanism according to claim 11, characterized in that: When the server performs adaptive power allocation based on channel state information and network parameters fed back by the dongle, the server allocates the minimum power to the service data to meet the minimum transmission rate requirement, and the remaining power is used to ensure the channel's anti-interference capability; when the channel gain cannot support the service data to reach the minimum transmission rate, the server increases the service data transmission power, while the dongle reduces non-core communication overhead to ensure the reliable transmission of core service data.

13. The method for constructing a wireless covert network based on an adaptive mechanism according to claim 12, characterized in that: When the dongle detects a link interruption or signal loss, it first retransmits the pilot sequence to estimate the current channel state. If the channel is recoverable, it automatically adjusts the connection parameters to rebuild the communication link. If the channel cannot be recovered, it switches to the backup communication frequency band and sends a fault alarm message to the server. The server then updates the node status within the network synchronously.

14. The method for constructing a wireless covert network based on an adaptive mechanism according to claim 13, characterized in that: The server employs a binary detection method for network transmission signals, detecting and identifying signals in two states: authorized normal transmission and unauthorized transmission. The detection threshold is the optimal threshold value obtained by the server through calculating the minimum false detection probability, which is the sum of the false alarm probability and the missed detection probability. When the average power of the detected signal exceeds the detection threshold, the server determines that unauthorized transmission behavior exists on the network and triggers the protection mechanism.

Images