A geological disaster monitoring data transmission encryption method

Abstract

The application discloses a geological disaster monitoring data transmission encryption method, and relates to the technical field of data encryption. The method periodically collects geological disaster monitoring data of a target region, encrypts the geological disaster monitoring data according to a ciphertext parameter and an encryption key, determines a first intercepting amount through the ciphertext parameter, intercepts a plurality of two-character groups, encrypts the two-character groups through the encryption key, and constructs an encryption operation sequence and an encryption symbol group list based on the intercepted two-character groups. On the one hand, the encryption key only encrypts part of the geological disaster monitoring data, so that the encryption process of the geological disaster monitoring data is free from complete dependence on the key. On the other hand, the first processing data after interception is derived from the data itself and encryption logic, and the encrypted data has dynamic variability due to the difference of the periodic geological disaster monitoring data itself, so that the safety of the geological disaster monitoring data in the transmission process is ensured.

Description

Technical Field

[0001] This invention relates to the field of data encryption technology, specifically a method for encrypting the transmission of geological disaster monitoring data. Background Technology

[0002] Geological disaster monitoring data is the core of disaster prevention and mitigation, directly affecting the accuracy of disaster early warning and the effectiveness of emergency response. Nowadays, with the help of the Internet of Things and sensor technology, data such as displacement and water content of disasters such as landslides and debris flows can be collected in real time. This data needs to be uploaded to the monitoring center through the network for analyzing disaster changes and issuing early warnings.

[0003] Monitoring data contains sensitive information such as core disaster parameters and monitoring point locations. If it is illegally obtained or altered, it may leak disaster prevention deployments, or even lead to misjudgments in early warnings, resulting in serious consequences. Therefore, encrypting the transmission of monitoring data is an essential requirement for geological disaster monitoring systems.

[0004] Currently, key encryption is the main method for encrypting monitoring data transmission: the original data is turned into scrambled text (ciphertext) using a preset key, and the receiver then decrypts and restores it using the same or paired key. This method is divided into symmetric encryption (such as AES) and asymmetric encryption (such as RSA). Symmetric encryption is more suitable for monitoring scenarios with high real-time requirements because of its speed. For example, many systems use a fixed key to encrypt the displacement data collected by the sensor in real time.

[0005] However, the existing solution relies entirely on keys, which presents significant problems. First, key management is costly. Geological disaster monitoring points are often widespread and numerous, and each device requires a key. The generation, distribution, and updating of keys all require dedicated manpower and technology. For example, when changing keys periodically, a large number of devices need to be configured one by one, which is not only cumbersome but also prone to errors, affecting data transmission.

[0006] More importantly, the risk of key leakage is high. The key is the only key to decryption. Once it is leaked, attackers can directly crack the data. Moreover, in many scenarios, one key is used for multiple monitoring points. The leakage of a single key may cause the monitoring data of the entire area to get out of control. Although asymmetric encryption can reduce the risk of key transmission, private key storage requires additional equipment, which is costly. If it is leaked, the encryption will also fail.

[0007] In addition, key updates are not suitable for monitoring scenarios. Disaster-prone periods are often accompanied by extreme weather, and equipment is often unattended, making it difficult to update keys; however, if keys are not updated for a long time, the risk of key leakage will increase.

[0008] To address the above problems, this invention proposes a solution. Summary of the Invention

[0009] The purpose of this invention is to provide a method for encrypting the transmission of geological disaster monitoring data, in order to solve the problems mentioned in the background art.

[0010] This invention provides a method for encrypting the transmission of geological disaster monitoring data, comprising the following steps:

[0011] Step S1: The monitoring and acquisition module collects data on the target area once every monitoring cycle to obtain the geological disaster monitoring data of the target area in the monitoring cycle, and transmits the geological disaster monitoring data of the monitoring cycle to the encrypted interaction module;

[0012] Step S2: After receiving geological disaster monitoring data for each monitoring cycle, the encrypted interaction module obtains the ciphertext parameter of the target area, multiplies the ciphertext parameter with the value 16, and uses the result as the number of encryption units of the target area in the monitoring cycle.

[0013] Step S3: The encrypted interaction module encrypts the geological disaster monitoring data according to the number of encryption units and a preset encryption rule to obtain the encrypted interactive data of the target area in the monitoring period, and transmits the encrypted interactive data to the remote response center.

[0014] Step S4: After receiving the transmitted target area's interactive encrypted data during the monitoring period, the remote response center decrypts and restores it to obtain the geological disaster monitoring data of the target area during the monitoring period, and stores the geological disaster monitoring data.

[0015] Furthermore, in step S1, the geological disaster monitoring data includes the monitoring values ​​of several monitoring parameters.

[0016] Furthermore, in S2, the encrypted interaction module stores the ciphertext parameters and encryption key of the target area. The stored ciphertext parameters are updated after each pair of geological disaster monitoring data for a monitoring cycle is encrypted.

[0017] Furthermore, in step S2, the updated content of the encrypted parameters of the target area is as follows: First, obtain the data capacity of the geological disaster monitoring data of the target area in the previous monitoring period. Then, divide the data capacity by a preset value and take the largest integer solution corresponding to the calculation result. The integer solution satisfies that it is less than or equal to the threshold P1. The threshold P1 is the threshold for the number of sensitive data non-leakage critical characters selected by the management personnel based on the core content characteristics of the geological disaster monitoring data and after security assessment. Its value must ensure that the risk of leakage of sensitive information during data transmission is effectively avoided while ensuring the data encryption security.

[0018] Furthermore, in step S3, the encryption rules for encrypting the geological disaster monitoring data are as follows:

[0019] S31: Perform a number system conversion operation on the geological disaster monitoring data to obtain the first processed data;

[0020] S32: Calculate the first interception amount C1 of the first processed data using the formula C1=(B1-1×A1) / 5, where B1 is the number of encryption units in the target area during the monitoring period, and A1 is the ciphertext parameter of the target area obtained.

[0021] S33: Perform a grouping and truncation operation on the first processed data to obtain two-character groups D1, D2, ..., Dd, where d = 1, 2, ..., C1. Concatenate the two-character groups D1, D2, ..., Dd in the order of D1, D2, ..., Dd, and encrypt the concatenated data according to the encryption key of the stored target area to obtain the header encryption sequence of the target area in the monitoring period.

[0022] S34: The first C1 groups of two-character groups are further divided according to the classification rule of grouping every 5 groups of two-character groups into one category, resulting in group sets E1, E2, ..., Ee, where e = 1, 2, ..., C1 / 5; within any group set, the subscripts of the two-character groups from left to right are consecutive and increasing;

[0023] S35: Select a two-character group from the grouping sets E1, E2, ..., Ee respectively, according to the preset selection rules, as the binary character group of the corresponding grouping set. The selection rules are as follows:

[0024] S351: Iterate through the group set E1 and select the two-character group with the most consistent occurrences as the binary character group of the group set E1;

[0025] S352: Calculate and determine the binary symbol groups of the grouping sets E2, E3, ..., Ee in sequence according to S351;

[0026] S36: Use a discrete point filtering algorithm to process the binary symbol groups of the group set E1, E2, ..., Ee. During the data processing, all binary symbol groups with a frequency ratio less than or equal to P2 are removed. All the remaining binary symbol groups after removal are concatenated to obtain the encrypted operation sequence of the target area in the monitoring period. The encrypted operation sequence is temporarily stored. P2 is a preset frequency filtering threshold.

[0027] The frequency percentage of any two-character group is calculated as follows: the total number of two-character groups that match the given two-character group in the group set E1, E2, ..., Ee is divided by the total number of group sets e, and the result is the frequency percentage of the given two-character group.

[0028] Based on all the two-character groups after removal, a list of encrypted character groups for the target area in the current monitoring period is generated, and the list of encrypted character groups is temporarily stored.

[0029] S37: Perform a sequence truncation operation on the first processed data after the group truncation operation to obtain the target area's encryption sequence G1 in the monitoring period;

[0030] The sequence extraction operation is performed as follows: extract a sequence consisting of P3 characters from the first processed data in order from left to right. The sequence is the target area's encryption sequence G1 in the monitoring period, and P3 is the preset number of single sequence characters.

[0031] The encrypted sequence of the sequence to be encrypted is obtained by performing an XOR operation between the sequence to be encrypted G1 and the encryption operation sequence.

[0032] S38: After obtaining the encryption sequence of the sequence to be encrypted G1, update the encryption operation sequence and encryption symbol group list of the temporarily stored target area in the monitoring period.

[0033] S39: Perform H1 sequence truncation operations on the first processed data according to S37. Each time a sequence truncation operation is performed on the first processed data, a sequence to be encrypted in the target area during the monitoring period is obtained. Each sequence to be encrypted is XORed with the temporarily stored encryption operation sequence of the target area during the monitoring period to obtain the encryption sequence of the sequence to be encrypted. The calculation formula of H1 is H1=int((I1-P3) / P3), where int() is the floor function and I1 is the total number of characters in the first processed data after the group truncation operation is performed.

[0034] For each encrypted sequence of a sequence to be encrypted, the encryption operation sequence and encryption symbol group list of the temporarily stored target area in the monitoring period are updated once according to S38.

[0035] S310: Concatenate all the obtained encrypted sequences, and then concatenate the concatenated data to the rightmost end of the header encrypted sequence to obtain the interactive encrypted data of the target area during the monitoring period.

[0036] Furthermore, in S36, the process of generating a list of encrypted character groups for the target region in the current monitoring period based on all the removed two-character groups is as follows:

[0037] First, an empty list is created. During the data processing phase, after each two-character group is removed, the removed two-character group is appended to the end of the empty list using the append() function. After all the two-character groups to be removed have been appended, the list becomes the list of encrypted character groups for the target area during the monitoring period.

[0038] Furthermore, the S38 update includes the following:

[0039] S381: Perform a block truncation operation on the sequence to be encrypted G1: group the two characters in the sequence to be encrypted G1 into a two-character group according to the rule that every two characters form a two-character group from left to right, so that several groups of two-character groups can be obtained from the sequence to be encrypted G1.

[0040] S382: Use a discrete point filtering algorithm to process all two-character groups in the encryption group list of the target area in the monitoring period and all two-character groups obtained from the encryption sequence G1. During the data processing, remove all two-character groups whose frequency ratio is less than or equal to P2. Concatenate all the remaining two-character groups after removal to obtain a new encryption operation sequence of the target area in the monitoring period. Update and replace the temporarily stored encryption operation sequence of the target area in the monitoring period according to the encryption operation sequence.

[0041] Based on all the removed two-character groups, a new list of encrypted character groups for the target area in the current monitoring period is generated, and the temporarily stored list of encrypted character groups for the target area in the monitoring period is updated and replaced according to the encrypted character group list.

[0042] Furthermore, the remote response center stores the decryption key and ciphertext parameters of the target area.

[0043] Furthermore, in step S4, after restoring the geological disaster monitoring data of the target area for the monitoring period, the stored encrypted parameters of the target area are updated once.

[0044] Compared with existing technologies, it has the following advantages:

[0045] This invention periodically collects geological disaster monitoring data from a target area, encrypts the data based on stored ciphertext parameters and encryption keys for the target area, and during the encryption process, a first truncation amount is determined by the ciphertext parameters, extracting several sets of two-character groups. The sequence formed by these two-character groups is then encrypted using the encryption key. An encryption operation sequence and a list of encryption symbols are constructed based on the extracted two-character groups. A discrete point filtering algorithm is introduced during the construction process. Based on the first processed data after performing a number base conversion operation and completing one truncation, the encryption operation sequence is used to encrypt the data multiple times. Each encryption update is based on the previous encryption sequence, updating the encryption operation sequence and the list of encryption symbols for the next encryption. In this way, on the one hand, the encryption key only encrypts a portion of the geological disaster monitoring data, freeing the encryption process from complete reliance on the key; on the other hand, the first processed data after truncation depends on the data used for encryption, which originates from the data itself and the encryption logic. The encrypted data is dynamically variable due to the differences in the periodic geological disaster monitoring data, ensuring the security of the geological disaster monitoring data transmission process.

[0046] In this invention, the two-character data encrypted by the encryption key is selected by the management personnel based on the core content characteristics of the geological disaster monitoring data and after security assessment. The threshold value of the sensitive data non-leakage critical character number is chosen to ensure that the data encryption security is guaranteed while effectively avoiding the risk of leakage of sensitive information during data transmission. The decryption key only decrypts the two-character data. Even if the encrypted and decrypted data is leaked, it will not cause the leakage of encrypted data. It does not require too much manpower and technology for special maintenance and management, effectively reducing resource consumption during encrypted transmission. It does not require frequent key changes and effectively avoids the situation where it is difficult to change keys due to monitoring environment problems. Attached Figure Description

[0047] Figure 1 This is a schematic diagram of the process of the present invention. Detailed Implementation

[0048] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0049] Step S1: The monitoring and acquisition module collects data on the target area once every monitoring cycle to obtain the geological disaster monitoring data of the target area in the monitoring cycle, and transmits the geological disaster monitoring data of the monitoring cycle to the encrypted interaction module;

[0050] In step S1, the geological disaster monitoring data includes the monitoring values ​​of several monitoring parameters, including but not limited to surface horizontal displacement, vertical settlement, crack displacement, rainfall, soil moisture content, groundwater level, air temperature, air pressure, rock and soil density, internal friction angle, cohesion, stratum lithology, fault activity, etc.

[0051] In step S1, the interval of the monitoring cycle is preset by the management personnel based on the susceptibility of geological disasters in the target area, the complexity of geological environmental conditions, and the frequency of historical disasters.

[0052] Step S2: After receiving geological disaster monitoring data for each monitoring cycle, the encrypted interaction module obtains the encrypted parameters of the target area stored at the time of reception. Based on the encrypted parameters, it performs a multiplication operation with the value 16. The result of the operation is used as the number of encrypted units of the target area in the monitoring cycle. The selection logic of the value 16 is as follows: after a single Chinese character is converted into binary data, its corresponding binary bits are 16 bits. Based on this data characteristic, the value 16 is determined as the multiplication operation coefficient.

[0053] In step S2, the encrypted interaction module stores the ciphertext parameters and encryption key of the target area. The initial value of the ciphertext parameters is preset by the administrator and input into the encrypted interaction module. The updated ciphertext parameters are synchronously stored in the encrypted interaction module. It should be noted that the original ciphertext parameters will be deleted each time the ciphertext parameters are updated.

[0054] In one embodiment of the present invention, the update content of the encrypted parameters of the target area is as follows: First, the data capacity of the geological disaster monitoring data of the monitoring period closest to the current time is obtained. Then, the data capacity is divided by a preset value, and the largest integer solution corresponding to the calculation result is taken. The integer solution satisfies that it is less than or equal to a preset threshold P1. The threshold P1 is the threshold for the number of sensitive data non-leakage critical characters selected by the management personnel based on the core content characteristics of the geological disaster monitoring data and after security assessment. Its value must ensure that the risk of leakage of sensitive information during data transmission is effectively avoided while ensuring the data encryption security.

[0055] It should be noted that after encrypting the geological disaster monitoring data of each target area within a monitoring cycle, the stored encrypted parameters of the target area are updated once.

[0056] Step S3: According to the number of encryption units, the geological disaster monitoring data is encrypted according to the preset encryption rules to obtain the encrypted interactive encrypted data of the target area in the monitoring period, and the interactive encrypted data is transmitted to the remote response platform.

[0057] In step S3, the encryption rules for encrypting the geological disaster monitoring data are as follows:

[0058] S31: Perform a number system conversion operation on the geological disaster monitoring data to obtain first processed data. The number system conversion operation is as follows: receive the geological disaster monitoring data through a preset conversion tool and use it as input data. The conversion tool may be a text number converter.

[0059] The text base converter has the function of standardizing and converting the input geological disaster monitoring data into binary data. During the conversion process, it strictly follows the data format compatibility protocol to ensure that the information integrity of the original monitoring data is not affected by the base conversion operation.

[0060] S32: Calculate the first interception amount C1 of the first processed data using the formula C1=(B1-1×A1) / 5, where B1 is the number of encryption units in the target area during the monitoring period, and A1 is the ciphertext parameter of the target area obtained.

[0061] S33: Perform a grouping and truncation operation on the first processed data: group the data according to the rule that every two characters constitute a two-character group, and then truncate the first C1 groups of two-character groups in the first processed data in the order from left to right. According to the position of each group of two-character groups in the first processed data before truncation, mark all groups of two-character groups in the order from left to right as D1, D2, ..., Dd, where d=1, 2, ..., C1;

[0062] Simultaneously, the two-character groups D1, D2, ..., Dd are concatenated in the order of D1, D2, ..., Dd, and the encryption key of the stored target area is obtained to encrypt the concatenated data to obtain the header encryption sequence of the target area in the monitoring period;

[0063] S34: The first C1 groups of two-character groups are further divided according to the classification rule of grouping every 5 groups of two-character groups into one category, resulting in group sets E1, E2, ..., Ee, where e = 1, 2, ..., C1 / 5; within any group set, the subscripts of the two-character groups from left to right are consecutive and increasing;

[0064] The subscripts of all two-character groups in group set E1 are less than the subscripts of any two-character group in group set E2; similarly, the subscripts of all two-character groups in group set E2 are less than the subscripts of any two-character group in group set E3, and so on for subsequent group sets. That is, the subscripts of two-character groups in each group set are distributed in ascending order of the subscripts of the group set.

[0065] S35: Select a two-character group from the grouping sets E1, E2, ..., Ee respectively, according to the preset selection rules, and determine its index. The selection rules are as follows:

[0066] S351: Iterate through the group set E1 and select the two-character group with the most consistent occurrences as the binary character group of the group set E1;

[0067] For example, if the two-character groups in the group set E1 are 00, 01, 10, 00, 11 from left to right, and the number of two-character groups 00 in the group set E1 is 2, while the number of the other two-character groups is 1, then 00 is a binary character group in the group set E1.

[0068] S352: Calculate and determine the binary symbol groups of the grouping sets E2, E3, ..., Ee in sequence according to S351;

[0069] S36: Use a discrete point filtering algorithm to process the binary symbol groups of the group set E1, E2, ..., Ee. During the data processing, all binary symbol groups with a frequency ratio less than or equal to P2 are removed. All the remaining binary symbol groups after removal are concatenated to obtain the encrypted operation sequence of the target area in the monitoring period. The encrypted operation sequence is temporarily stored. P2 is a preset frequency filtering threshold.

[0070] The frequency percentage of any two-character group is calculated as follows: the total number of two-character groups that match the given two-character group in the group set E1, E2, ..., Ee is divided by the total number of group sets e, and the result is the frequency percentage of the given two-character group.

[0071] Based on all the removed two-character groups, a list of encrypted character groups for the target area in the current monitoring period is generated. The specific process is as follows: First, an empty list is created. During the data processing stage, after each two-character group is removed, the removed two-character group is appended to the end of the empty list using the append() function. After all the two-character groups to be removed have been appended, the list is the list of encrypted character groups for the target area in the monitoring period. The list of encrypted character groups is temporarily stored.

[0072] In this application, the append() function is used to add an element to the end of the list;

[0073] S37: Perform a sequence truncation operation on the first processed data after the group truncation operation to obtain the target area's encryption sequence G1 in the monitoring period;

[0074] The sequence extraction operation is performed as follows: extract a sequence consisting of P3 characters from the first processed data in order from left to right. The sequence is the target area's encryption sequence G1 in the monitoring period, and P3 is the preset number of single sequence characters.

[0075] The encrypted sequence of the sequence to be encrypted is obtained by performing an XOR operation between the sequence to be encrypted G1 and the encryption operation sequence.

[0076] S38: After obtaining the encryption sequence of the sequence to be encrypted G1, the encryption operation sequence and encryption symbol group list of the temporarily stored target area during the monitoring period are updated once. The updated content is as follows:

[0077] S381: Perform a grouping and truncation operation on the sequence to be encrypted G1: group the two characters in the sequence to be encrypted G1 into a two-character group according to the rule that every two characters form a two-character group from left to right. Several two-character groups can be obtained from the sequence to be encrypted G1. It should be noted that if the total number of characters in the sequence to be encrypted G1 is odd, the rightmost character is discarded when performing the grouping and truncation operation.

[0078] S382: Use a discrete point filtering algorithm to process all two-character groups in the encryption group list of the target area in the monitoring period and all two-character groups obtained from the encryption sequence G1. During the data processing, remove all two-character groups whose frequency ratio is less than or equal to P2. Concatenate all the remaining two-character groups after removal to obtain a new encryption operation sequence of the target area in the monitoring period. Update and replace the temporarily stored encryption operation sequence of the target area in the monitoring period according to the encryption operation sequence.

[0079] Based on all the removed two-character groups, a new list of encrypted character groups for the target area in the current monitoring period is generated. The specific process is as follows: First, an empty list is created. During the data processing stage, after each two-character group is removed, the removed two-character group is appended to the end of the empty list using the append() function. After all the two-character groups to be removed have been appended, the list is the new list of encrypted character groups for the target area in the monitoring period. The temporarily stored list of encrypted character groups for the target area in the monitoring period is updated and replaced according to the list of encrypted character groups.

[0080] S39: Perform H1 sequence truncation operations on the first processed data according to S37. Each time a sequence truncation operation is performed on the first processed data, a sequence to be encrypted in the target area during the monitoring period is obtained. Each sequence to be encrypted is XORed with the temporarily stored encryption operation sequence of the target area during the monitoring period to obtain the encryption sequence of the sequence to be encrypted. The calculation formula of H1 is H1=int((I1-P3) / P3), where int() is the floor function and I1 is the total number of characters in the first processed data after the group truncation operation is performed.

[0081] For each encrypted sequence of a sequence to be encrypted, the encryption operation sequence and encryption symbol group list of the temporarily stored target area in the monitoring period are updated once according to S38.

[0082] Each sequence truncation operation is performed sequentially based on the first processed data after the previous sequence truncation operation is completed. When performing the first sequence truncation operation on the first processed data, it is based on the first processed data after the group truncation operation is performed.

[0083] It should be noted that if there are still some characters remaining after performing the H1th sequence truncation operation on the first processed data, the sequence formed by all the remaining characters is marked as the target region's junction sequence in the monitoring period and temporarily stored.

[0084] S310: All the obtained encryption sequences are concatenated, and the concatenated data is concatenated to the rightmost end of the head encryption sequence to obtain the interactive encryption data of the target area in the monitoring period. It should be noted that if the knot sequence is temporarily stored, the knot sequence is concatenated to the rightmost end of the interactive encryption data.

[0085] It should be noted that after transmitting the interactive encrypted data of the target area during the monitoring period to the remote response center, all temporarily stored data during the generation of the interactive encrypted data is deleted, including the encryption operation sequence and encryption symbol list of the target area during the monitoring period.

[0086] In S3, after transmitting the interactive encrypted data of the target area during the monitoring period to the remote response center, the encrypted parameters of the target area stored therein are updated once.

[0087] Step S4: After receiving the transmitted target area's interactive encrypted data during the monitoring period, the remote response center decrypts and restores it to obtain the geological disaster monitoring data of the target area during the monitoring period, and stores the geological disaster monitoring data.

[0088] The remote response center stores geological disaster monitoring data for the target area in all past monitoring cycles, as well as the decryption key and ciphertext parameters for the target area.

[0089] In step S4, the decryption key of the stored target area and the encryption key of the target area stored in the encryption interaction module are paired keys under an asymmetric encryption system. The two follow the core logic of "public key encryption, private key decryption". The encryption key, as a public key, can be publicly disclosed and used to encrypt data in the target area; the decryption key, as a private key, must be stored confidentially and is only used to legally decrypt the encrypted data. In this application, the encryption key and decryption key can be generated based on the RSA algorithm, or can be generated using algorithms that conform to asymmetric encryption standards such as ECC (elliptic curve cryptography) and SM2. The key length can be configured to 2048 bits, 4096 bits, etc., according to the data security level requirements.

[0090] In S4, the decrypted and restored geological disaster monitoring data of the target area during the monitoring period are as follows:

[0091] S41: The received interactive encrypted data is identified and a fixed-length header encrypted sequence is extracted. The stored decryption key is used to decrypt and restore the header encrypted sequence to obtain two-character groups D1, D2, ..., Dd. Since the encryption key and decryption key are generated based on an asymmetric encryption algorithm, a fixed-length data is obtained when the data is encrypted using the encryption key. Therefore, the header encrypted sequence can be accurately extracted and restored based on this fixed length.

[0092] S42: Based on the two-character groups D1, D2, ..., Dd and the ciphertext parameters of the stored target area, the preset encryption rules are reversed to decrypt and restore the remaining interactive encrypted data after truncation, resulting in several sequences to be encrypted. All the sequences to be encrypted are concatenated, and the concatenated data is concatenated with the data obtained by concatenating the two-character groups D1, D2, ..., Dd to obtain the geological disaster monitoring data of the target area in the monitoring period.

[0093] It should be noted that all sequences to be encrypted are concatenated from left to right according to the order of their corresponding encrypted sequences before restoration.

[0094] The two-character groups D1, D2, ..., Dd are concatenated in ascending order of their subscripts.

[0095] In step S4, after restoring the geological disaster monitoring data of the target area for the monitoring period, the stored encrypted parameters of the target area are updated once, and the update is consistent with the update content of the encrypted parameters of the target area described in S2.

[0096] Some of the data in the above formulas are numerical calculations with dimensions removed, and the contents not described in detail in this specification are all prior art known to those skilled in the art.

[0097] The above embodiments are only used to illustrate the technical methods of the present invention and are not intended to limit it. Although the present invention has been described in detail with reference to preferred embodiments, those skilled in the art should understand that modifications or equivalent substitutions can be made to the technical methods of the present invention without departing from the spirit and scope of the technical methods of the present invention.

Claims

1. A method for encrypting the transmission of geological disaster monitoring data, characterized in that, Includes the following steps: Step S1: The monitoring and acquisition module collects data on the target area once every monitoring cycle to obtain the geological disaster monitoring data of the target area in the monitoring cycle, and transmits the geological disaster monitoring data of the monitoring cycle to the encrypted interaction module; Step S2: After receiving geological disaster monitoring data for each monitoring cycle, the encrypted interaction module obtains the ciphertext parameter of the target area, multiplies the ciphertext parameter with the value 16, and uses the result as the number of encryption units of the target area in the monitoring cycle. Step S3: The encrypted interaction module encrypts the geological disaster monitoring data according to the number of encryption units and a preset encryption rule, obtaining the encrypted interactive data of the target area during the monitoring period. The encrypted interactive data is then transmitted to the remote response center. The encryption rules are as follows: S31: Perform a number system conversion operation on the geological disaster monitoring data to obtain the first processed data; S32: Calculate the first interception amount C1 of the first processed data using the formula C1=(B1-1×A1) / 5, where B1 is the number of encryption units in the target area during the monitoring period, and A1 is the ciphertext parameter of the target area obtained. S33: Perform a grouping and truncation operation on the first processed data to obtain two-character groups D1, D2, ..., Dd, where d = 1, 2, ..., C1. Concatenate the two-character groups D1, D2, ..., Dd in the order of D1, D2, ..., Dd, and encrypt the concatenated data according to the encryption key of the stored target area to obtain the header encryption sequence of the target area in the monitoring period. S34: The first C1 groups of two-character groups are further divided according to the classification rule of grouping every 5 groups of two-character groups into one category, resulting in group sets E1, E2, ..., Ee, where e = 1, 2, ..., C1 / 5; within any group set, the subscripts of the two-character groups from left to right are consecutive and increasing; S35: Select a two-character group from the grouping sets E1, E2, ..., Ee respectively, according to the preset selection rules, as the binary character group of the corresponding grouping set. The selection rules are as follows: S351: Iterate through the group set E1 and select the two-character group with the most consistent occurrences as the binary character group of the group set E1; S352: Calculate and determine the binary symbol groups of the grouping sets E2, E3, ..., Ee in sequence according to S351; S36: Use a discrete point filtering algorithm to process the binary symbol groups of the group set E1, E2, ..., Ee. During the data processing, all binary symbol groups with a frequency ratio less than or equal to P2 are removed. All the remaining binary symbol groups after removal are concatenated to obtain the encrypted operation sequence of the target area in the monitoring period. The encrypted operation sequence is temporarily stored. P2 is a preset frequency filtering threshold. The frequency percentage of any two-character group is calculated as follows: the total number of two-character groups that match the given two-character group in the group set E1, E2, ..., Ee is divided by the total number of group sets e, and the result is the frequency percentage of the given two-character group. Based on all the two-character groups after removal, a list of encrypted character groups for the target area in the current monitoring period is generated, and the list of encrypted character groups is temporarily stored. S37: Perform a sequence truncation operation on the first processed data after the group truncation operation to obtain the target area's encryption sequence G1 in the monitoring period; The sequence extraction operation is performed as follows: extract a sequence consisting of P3 characters from the first processed data in order from left to right. The sequence is the target area's encryption sequence G1 in the monitoring period, and P3 is the preset number of single sequence characters. The encrypted sequence of the sequence to be encrypted is obtained by performing an XOR operation between the sequence to be encrypted G1 and the encryption operation sequence. S38: After obtaining the encryption sequence of the sequence to be encrypted G1, update the encryption operation sequence and encryption symbol group list of the temporarily stored target area in the monitoring period. S39: Perform H1 sequence truncation operations on the first processed data according to S37. Each time a sequence truncation operation is performed on the first processed data, a sequence to be encrypted in the target area during the monitoring period is obtained. Each sequence to be encrypted is XORed with the temporarily stored encryption operation sequence of the target area during the monitoring period to obtain the encryption sequence of the sequence to be encrypted. The calculation formula of H1 is H1=int((I1-P3) / P3), where int() is the floor function and I1 is the total number of characters in the first processed data after the group truncation operation is performed. For each encrypted sequence of a sequence to be encrypted, the encryption operation sequence and encryption symbol group list of the temporarily stored target area in the monitoring period are updated once according to S38. S310: Concatenate all the obtained encryption sequences, and concatenate the concatenated data to the rightmost end of the header encryption sequence to obtain the interactive encryption data of the target area in the monitoring period; Step S4: After receiving the transmitted target area's interactive encrypted data during the monitoring period, the remote response center decrypts and restores it to obtain the geological disaster monitoring data of the target area during the monitoring period, and stores the geological disaster monitoring data.

2. The method for encrypting the transmission of geological disaster monitoring data according to claim 1, characterized in that, In step S1, the geological disaster monitoring data includes the monitoring values ​​of several monitoring parameters.

3. The method for encrypting the transmission of geological disaster monitoring data according to claim 1, characterized in that, In S2, the encrypted interaction module stores the ciphertext parameters and encryption key of the target area. The stored ciphertext parameters are updated after each pair of geological disaster monitoring data for a monitoring cycle is encrypted.

4. The method for encrypting the transmission of geological disaster monitoring data according to claim 3, characterized in that, In step S2, the updated content of the encrypted parameters of the target area is as follows: First, obtain the data capacity of the geological disaster monitoring data of the target area in the previous monitoring period. Then, divide the data capacity by a preset value and take the largest integer solution corresponding to the result. The integer solution is less than or equal to the threshold P1. The threshold P1 is the threshold for the number of sensitive data non-leakage critical characters selected by the management personnel based on the core content characteristics of the geological disaster monitoring data and after security assessment. Its value must ensure that the risk of leakage of sensitive information during data transmission is effectively avoided while ensuring the data encryption security.

5. The method for encrypting the transmission of geological disaster monitoring data according to claim 1, characterized in that, In S36, the process of generating a list of encrypted character groups for the target region in the current monitoring period based on all the removed two-character groups is as follows: First, an empty list is created. During the data processing phase, after each two-character group is removed, the removed two-character group is appended to the end of the empty list using the append() function. After all the two-character groups to be removed have been appended, the list becomes the list of encrypted character groups for the target area during the monitoring period.

6. The method for encrypting the transmission of geological disaster monitoring data according to claim 1, characterized in that, S38, the updated content is as follows: S381: Perform a block truncation operation on the sequence to be encrypted G1: group the two characters in the sequence to be encrypted G1 into a two-character group according to the rule that every two characters form a two-character group from left to right, so that several groups of two-character groups are obtained from the sequence to be encrypted G1. S382: Use a discrete point filtering algorithm to process all two-character groups in the encryption group list of the target area in the monitoring period and all two-character groups obtained from the encryption sequence G1. During the data processing, remove all two-character groups whose frequency ratio is less than or equal to P2. Concatenate all the remaining two-character groups after removal to obtain a new encryption operation sequence of the target area in the monitoring period. Update and replace the temporarily stored encryption operation sequence of the target area in the monitoring period according to the encryption operation sequence. Based on all the removed two-character groups, a new list of encrypted character groups for the target area in the current monitoring period is generated, and the temporarily stored list of encrypted character groups for the target area in the monitoring period is updated and replaced according to the encrypted character group list.

7. The method for encrypting the transmission of geological disaster monitoring data according to claim 1, characterized in that, The remote response center stores the decryption key and ciphertext parameters of the target area.

8. The method for encrypting the transmission of geological disaster monitoring data according to claim 1, characterized in that, In step S4, after restoring the geological disaster monitoring data of the target area for the monitoring period, the stored encrypted parameters of the target area are updated once.

Images