Industrial internet of things-oriented device communication data encryption method, system, terminal and storage medium

Abstract

The application discloses an industrial internet of things-oriented equipment communication data encryption method and system, a terminal and a storage medium, and relates to the technical field of data encryption.The method comprises the following steps: acquiring data security transmission requirements of an industrial internet of things equipment, performing analysis and processing to obtain a requirement analysis result, and acquiring corresponding industrial equipment communication data; performing preprocessing on the industrial equipment communication data to obtain target communication data, performing encapsulation processing on the target communication data to obtain communication encapsulation data, and performing compression processing on the communication encapsulation data to obtain target compression data; performing encryption processing on the target compression data to obtain communication encryption data, performing multi-platform adaptation on the communication encryption data to obtain target communication encryption data, and performing equipment transmission on the target communication encryption data to obtain an equipment communication result.The equipment communication data encryption method provided by the application not only reduces resource consumption, but also greatly reduces encryption delay while improving security.

Description

Technical Field

[0001] This invention relates to the field of data encryption technology, and in particular to a method, system, terminal, and computer-readable storage medium for encrypting device communication data for the Industrial Internet of Things. Background Technology

[0002] With the rapid development of industry and intelligent manufacturing, the number of Industrial Internet of Things (IIoT) devices is growing rapidly. As the number of IIoT devices increases, secure communication in industrial environments faces severe challenges; therefore, it is necessary to ensure the security of communication between IIoT devices.

[0003] However, existing technologies ensure the communication security of industrial IoT devices by encrypting the communication data between devices, but existing encryption methods have the following shortcomings: (1) Unable to withstand quantum computing threats: Industrial IoT devices have a long lifespan (at least 15 years). When faced with quantum attacks, the quantum-resistant schemes in existing encryption schemes are not compatible with the ISO / IEC 11855 industrial security protocol, which makes it impossible to guarantee the communication security between industrial IoT devices. (2) The contradiction between industrial real-time requirements and encryption delay is prominent: Industrial control systems are extremely sensitive to communication delay. For example, power system protection devices require end-to-end delay ≤10ms. However, existing encryption schemes perform poorly on resource-constrained devices and cannot meet the needs of industrial real-time control, forcing the system to compromise between security and real-time. (3) Existing post-quantum cryptography schemes have excessive resource overhead: Although the post-quantum cryptography schemes standardized by NIST have quantum resistance capabilities, their resource requirements are seriously mismatched with the industrial environment. Resource constraints prevent existing post-quantum schemes from being deployed on edge devices, creating security blind spots. (4) Fragmentation of key management across industrial platforms: Existing encryption schemes use separate key systems on different industrial platforms, which increases the cost of key management and causes significant delays when performing cross-system key synchronization.

[0004] Therefore, existing technologies still need to be improved and developed. Summary of the Invention

[0005] The main objective of this invention is to provide a method, system, terminal, and computer-readable storage medium for encrypting device communication data for the Industrial Internet of Things (IIoT), aiming to solve the problems of low security, high encryption latency, and high resource consumption in existing industrial equipment communication data encryption methods.

[0006] To achieve the above objectives, the present invention provides a device communication data encryption method for the Industrial Internet of Things (IIoT), the method comprising the following steps: The data security transmission requirements of industrial IoT devices are obtained, the data security transmission requirements are analyzed and processed to obtain the requirements analysis results, and the corresponding industrial device communication data is obtained based on the requirements analysis results. The industrial equipment communication data is preprocessed to obtain target communication data, the target communication data is encapsulated to obtain communication encapsulated data, and the communication encapsulated data is compressed to obtain target compressed data. The target compressed data is encrypted to obtain communication encrypted data. The communication encrypted data is then adapted to multiple platforms to obtain target communication encrypted data. Finally, the target communication encrypted data is transmitted to the device to obtain the device communication result.

[0007] Optionally, the device communication data encryption method for the Industrial Internet of Things (IIoT), wherein obtaining the data security transmission requirements of the IIoT devices, analyzing and processing the data security transmission requirements to obtain a requirement analysis result, and obtaining the corresponding industrial device communication data based on the requirement analysis result, specifically includes: Set time constraint parameters, and perform demand detection on industrial IoT devices based on the time constraint parameters, wherein the time constraint parameters include device communication cycle, control command response time limit and data acquisition frequency; When a data security transmission requirement is detected in an industrial IoT device, the data security transmission requirement is obtained, and a multi-dimensional analysis is performed on the data security transmission requirement to obtain the requirement analysis results. The multi-dimensional analysis includes device information analysis and data encryption analysis. If the requirement analysis result indicates that the data security transmission requirement meets the communication encryption conditions, then the corresponding industrial equipment communication data is obtained based on the requirement analysis result.

[0008] Optionally, the device communication data encryption method for the Industrial Internet of Things (IIoT) includes, in part, preprocessing the industrial device communication data to obtain target communication data, and encapsulating the target communication data to obtain encapsulated communication data, specifically comprising: The industrial equipment communication data is filtered for abnormal data to obtain industrial equipment communication filtered data, and the industrial equipment communication filtered data is time-aligned to obtain target industrial equipment communication filtered data. The target industrial equipment communication filtering data is normalized to obtain target communication data, and the target communication data is encapsulated to obtain communication encapsulated data. The encapsulation process includes quantum-safe encapsulation, industrial protocol adaptive encapsulation, and industrial environment adaptive encapsulation.

[0009] Optionally, the device communication data encryption method for the Industrial Internet of Things, wherein compressing the communication encapsulated data to obtain target compressed data specifically includes: The communication encapsulation data is subjected to compression protocol matching to obtain the target compression protocol, and the curve parameters of the target compression protocol are obtained. The curve parameters are iteratively processed to obtain an Engel integer sequence, and the communication encapsulation data is compressed according to the Engel integer sequence to obtain the target compressed data.

[0010] Optionally, in the aforementioned method for encrypting device communication data for the Industrial Internet of Things, the iterative processing of the curve parameters specifically involves: ; in, For the first A sequence of integer steps For curve data, This represents the current iteration step. For the first A sequence of integers, and All are index variables. This is for rounding down.

[0011] Optionally, the device communication data encryption method for the Industrial Internet of Things (IIoT) further includes the following steps: preprocessing the industrial device communication data to obtain target communication data, encapsulating the target communication data to obtain encapsulated communication data, and compressing the encapsulated communication data to obtain target compressed data. The curve parameters are optimized for homogeneity to obtain homogeneous constants, and the homogeneous constants are iteratively mapped to homogeneity to obtain the corresponding target curve. The target curve is derived by performing invariant derivation to obtain curve invariants, and then encryption and delay processing is performed based on the curve invariants to obtain the encryption and delay processing result.

[0012] Optionally, in the device communication data encryption method for the Industrial Internet of Things, the iterative mapping of the homologous constants specifically involves: ; in, For the process The coordinates of the point after the second homology mapping Let x be the x-coordinate of a point on the original elliptic curve. The ordinate of a point on the original elliptic curve. The x-coordinate of the second-order twist point. These are homologous constants.

[0013] Optionally, in the aforementioned method for encrypting device communication data for the Industrial Internet of Things, the step of deriving invariants from the curve equation specifically involves: ; in, For the first Curve invariants after homologous mapping For the target curve, and All are the first The coefficients of the target curve obtained after homologous mapping.

[0014] Optionally, the device communication data encryption method for the Industrial Internet of Things, wherein encrypting the target compressed data to obtain encrypted communication data specifically includes: A key is generated based on the Engel integer sequence of the target compressed data and the curve invariant to obtain public key information and private key information. Encryption key information is then obtained based on the public key information and the private key information. A hash calculation is performed on the curve invariant to obtain a first hash value. A shared key is obtained based on the first hash value. The shared key and the curve invariant are encapsulated to obtain key encapsulation information. The target compressed data is encrypted based on the encryption key information and the key encapsulation information to obtain encrypted communication data.

[0015] Optionally, the device communication data encryption method for the Industrial Internet of Things (IIoT) further includes: performing hash calculation on the curve invariant to obtain a shared key; encapsulating the shared key and the curve invariant to obtain key encapsulation information; and then further including: The target curve is hashed to obtain a second hash value, and the key encapsulation information is decapsulated based on the second hash value to obtain a shared key.

[0016] Optionally, the device communication data encryption method for the Industrial Internet of Things, wherein the step of adapting the encrypted communication data to multiple platforms to obtain target encrypted communication data specifically includes: Obtain the hardware information of the industrial IoT device, and generate a target random number based on the hardware information; The target random number is used to perform adaptation protocol matching to obtain an industrial adaptation protocol, and the communication encryption data is adapted to multiple platforms according to the industrial adaptation protocol to obtain the target communication encryption data.

[0017] Optionally, in the aforementioned method for encrypting device communication data for the Industrial Internet of Things, the step of generating random numbers based on the hardware information specifically involves: ; in, For the target random number, It is a true random number generator. For the ADC noise of the ESP32 chip, For XOR operation, It is a pseudo-random number generator. This is the seed used to generate pseudo-random numbers.

[0018] Optionally, the device communication data encryption method for the Industrial Internet of Things, wherein transmitting the target encrypted communication data to the device to obtain the device communication result specifically includes: The target encrypted communication data is analyzed for communication protocols to obtain communication protocol analysis results. Based on the communication protocol analysis results, the protocol is retrieved to obtain the quantum-safe communication protocol. The target communication encrypted data is transmitted to the device according to the quantum-safe communication protocol to obtain the device communication result.

[0019] Furthermore, to achieve the above objectives, the present invention also provides a device communication data encryption system for the Industrial Internet of Things (IIoT), wherein the device communication data encryption system for the Industrial Internet of Things includes: The transmission demand analysis module is used to obtain the data security transmission requirements of industrial IoT devices, analyze and process the data security transmission requirements to obtain the demand analysis results, and obtain the corresponding industrial device communication data based on the demand analysis results. The communication data processing module is used to preprocess the communication data of the industrial equipment to obtain target communication data, encapsulate the target communication data to obtain encapsulated communication data, and compress the encapsulated communication data to obtain target compressed data. The communication data encryption module is used to encrypt the target compressed data to obtain communication encrypted data, perform multi-platform adaptation on the communication encrypted data to obtain target communication encrypted data, and transmit the target communication encrypted data to the device to obtain the device communication result.

[0020] Optionally, in the aforementioned device communication data encryption system for the Industrial Internet of Things, the requirements analysis module includes: A demand detection unit is used to set time constraint parameters and perform demand detection on industrial IoT devices based on the time constraint parameters, wherein the time constraint parameters include device communication cycle, control command response time limit and data acquisition frequency; The multi-dimensional demand analysis unit is used to obtain the data security transmission requirement when a data security transmission requirement is detected in an industrial IoT device, perform multi-dimensional analysis on the data security transmission requirement, and obtain the demand analysis results. The multi-dimensional analysis includes device information analysis and data encryption analysis. The condition confirmation unit is used to obtain the corresponding industrial equipment communication data based on the requirement analysis result if the data security transmission requirement meets the communication encryption condition.

[0021] Optionally, in the aforementioned device communication data encryption system for the Industrial Internet of Things, the communication data processing module includes: The data preprocessing unit is used to perform abnormal data filtering on the industrial equipment communication data to obtain industrial equipment communication filtered data, and to perform time-series alignment processing on the industrial equipment communication filtered data to obtain target industrial equipment communication filtered data. The data encapsulation unit is used to normalize the target industrial equipment communication filtering data to obtain target communication data, and to encapsulate the target communication data to obtain communication encapsulation data. The encapsulation process includes quantum-safe encapsulation, industrial protocol adaptive encapsulation, and industrial environment adaptive encapsulation. The protocol matching unit is used to perform compression protocol matching on the communication encapsulation data to obtain the target compression protocol and acquire the curve parameters of the target compression protocol. The data compression unit is used to iteratively process the curve parameters to obtain an Engel integer sequence, and to compress the communication encapsulation data according to the Engel integer sequence to obtain the target compressed data.

[0022] Optionally, in the aforementioned device communication data encryption system for the Industrial Internet of Things, the communication data encryption module includes: The key generation unit is used to generate a key based on the Engel integer sequence of the target compressed data and the curve invariant, to obtain public key information, and to obtain private key information, and to obtain encryption key information based on the public key information and the private key information; A key encapsulation unit is used to perform hash calculation on the curve invariant to obtain a first hash value, obtain a shared key based on the first hash value, encapsulate the shared key and the curve invariant to obtain key encapsulation information, and encrypt the target compressed data based on the encryption key information and the key encapsulation information to obtain encrypted communication data. A random number generation unit is used to acquire the hardware information of the industrial IoT device, generate random numbers based on the hardware information, and obtain a target random number. A multi-platform adaptation unit is used to perform adaptation protocol matching based on the target random number to obtain an industrial adaptation protocol, and to perform multi-platform adaptation on the communication encryption data based on the industrial adaptation protocol to obtain target communication encryption data. The protocol analysis unit is used to perform communication protocol analysis on the target communication encrypted data, obtain the communication protocol analysis result, and retrieve the protocol based on the communication protocol analysis result to obtain the quantum-safe communication protocol. The data transmission unit is used to transmit the target communication encrypted data to the device according to the quantum-safe communication protocol, so as to obtain the device communication result.

[0023] Optionally, the device communication data encryption system for the Industrial Internet of Things (IIoT) further includes a parameter homogeneity optimization module, which comprises: The homogeneous iteration unit is used to perform homogeneous optimization on the curve parameters to obtain homogeneous constants, and to perform iterative homogeneous mapping on the homogeneous constants to obtain the corresponding target curve; The invariant derivation unit is used to derive invariants from the target curve to obtain curve invariants, and to perform encryption delay processing based on the curve invariants to obtain the encryption delay processing result.

[0024] Furthermore, to achieve the above objectives, the present invention also provides a terminal, wherein the terminal includes: a memory, a processor, and a device communication data encryption program for the Industrial Internet of Things (IIoT) stored in the memory and executable on the processor, wherein when the device communication data encryption program for the Industrial Internet of Things is executed by the processor, it implements the steps of the device communication data encryption method for the Industrial Internet of Things as described above.

[0025] Furthermore, to achieve the above objectives, the present invention also provides a computer-readable storage medium, wherein the computer-readable storage medium stores a device communication data encryption program for the Industrial Internet of Things (IIoT), and when the device communication data encryption program for the IIoT is executed by a processor, it implements the steps of the device communication data encryption method for the IIoT as described above.

[0026] In this invention, the data security transmission requirements of industrial IoT devices are obtained, analyzed, and processed to obtain a requirement analysis result. Based on the requirement analysis result, corresponding industrial device communication data is obtained. The industrial device communication data is preprocessed to obtain target communication data. The target communication data is then encapsulated to obtain encapsulated communication data, which is then compressed to obtain target compressed data. The target compressed data is then encrypted to obtain encrypted communication data. This encrypted communication data is then adapted to multiple platforms to obtain target encrypted communication data. Finally, the target encrypted communication data is transmitted to the device to obtain the device communication result. This device communication data encryption method not only reduces resource consumption but also significantly reduces encryption latency while improving security. Attached Figure Description

[0027] Figure 1 This is a flowchart of a preferred embodiment of the device communication data encryption method of the present invention for the Industrial Internet of Things; Figure 2 This is a flowchart illustrating the specific implementation process of step S10 in a preferred embodiment of the device communication data encryption method for the Industrial Internet of Things of the present invention. Figure 3 This is a flowchart illustrating the specific implementation process of step S20 in a preferred embodiment of the device communication data encryption method for the Industrial Internet of Things of the present invention. Figure 4 This is a flowchart illustrating the specific implementation process of step S30 in a preferred embodiment of the device communication data encryption method for the Industrial Internet of Things of the present invention. Figure 5 This is a flowchart illustrating the specific implementation process of step S32 in a preferred embodiment of the device communication data encryption method for the Industrial Internet of Things of the present invention. Figure 6 This is a flowchart illustrating the specific implementation process of step S34 in a preferred embodiment of the device communication data encryption method for the Industrial Internet of Things of the present invention. Figure 7 This is a flowchart illustrating the specific implementation process of step S40 in a preferred embodiment of the device communication data encryption method for the Industrial Internet of Things of the present invention. Figure 8 This is a flowchart illustrating the specific implementation process of step S50 in a preferred embodiment of the device communication data encryption method for the Industrial Internet of Things of the present invention. Figure 9 This is a schematic diagram of a device communication data encryption system for the Industrial Internet of Things according to the present invention; Figure 10 This is another schematic diagram of the device communication data encryption system for the Industrial Internet of Things according to the present invention; Figure 11 This is a schematic diagram of the transmission requirement analysis module in the device communication data encryption system for the Industrial Internet of Things according to the present invention; Figure 12 This is a schematic diagram of the communication data processing module in the device communication data encryption system for the Industrial Internet of Things of this invention; Figure 13 This is a schematic diagram of the communication data encryption structure in the device communication data encryption system for the Industrial Internet of Things according to the present invention; Figure 14 This is a schematic diagram of the parameter homogeneity optimization module in the device communication data encryption system for the Industrial Internet of Things of the present invention; Figure 15 This is a structural diagram of a preferred embodiment of the terminal of the present invention. Detailed Implementation

[0028] To make the objectives, technical solutions, and advantages of this invention clearer and more explicit, the invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

[0029] With the rapid development of industry and intelligent manufacturing, the number of Industrial Internet of Things (IIoT) devices is growing rapidly. As the number of IIoT devices increases, secure communication in industrial environments faces severe challenges; therefore, it is necessary to ensure the security of communication between IIoT devices.

[0030] However, existing technologies ensure the communication security of industrial IoT devices by encrypting the communication data between devices, but existing encryption methods have the following shortcomings: (1) Unable to withstand quantum computing threats: Industrial IoT devices have a long lifespan (at least 15 years). When faced with quantum attacks, the quantum-resistant schemes in existing encryption schemes are not compatible with the ISO / IEC 11855 industrial security protocol, which makes it impossible to guarantee the communication security between industrial IoT devices. (2) The contradiction between industrial real-time requirements and encryption delay is prominent: Industrial control systems are extremely sensitive to communication delay. For example, power system protection devices require end-to-end delay ≤10ms. However, existing encryption schemes perform poorly on resource-constrained devices and cannot meet the needs of industrial real-time control, forcing the system to compromise between security and real-time. (3) Existing post-quantum cryptography schemes have excessive resource overhead: Although the post-quantum cryptography schemes standardized by NIST have quantum resistance capabilities, their resource requirements are seriously mismatched with the industrial environment. Resource constraints prevent existing post-quantum schemes from being deployed on edge devices, creating security blind spots. (4) Fragmentation of key management across industrial platforms: Existing encryption schemes use separate key systems on different industrial platforms, which increases the cost of key management and causes significant delays when performing cross-system key synchronization.

[0031] Therefore, this invention proposes a device communication data encryption method for the Industrial Internet of Things (IIoT) to overcome the problems of low security, high encryption latency, and high resource consumption in existing industrial device communication data encryption methods.

[0032] The preferred embodiment of the device communication data encryption method for the Industrial Internet of Things (IIoT) of the present invention, such as... Figure 1 As shown, the device communication data encryption method for the Industrial Internet of Things includes the following steps: Step S10: Obtain the data security transmission requirements of industrial IoT devices, analyze and process the data security transmission requirements to obtain the requirements analysis results, and obtain the corresponding industrial device communication data based on the requirements analysis results.

[0033] Specifically, in this embodiment of the invention, time constraint parameters are set, and demand detection is performed on industrial IoT devices based on these parameters. The time constraint parameters include device communication cycle, control command response time limit, and data acquisition frequency. When a data security transmission requirement is detected in the industrial IoT device, the data security transmission requirement is acquired, and a multi-dimensional analysis is performed on the requirement to obtain a demand analysis result. This multi-dimensional analysis includes device information analysis and data encryption analysis. If the demand analysis result indicates that the data security transmission requirement meets communication encryption conditions, the corresponding industrial device communication data is obtained based on the demand analysis result.

[0034] like Figure 2 As shown, step S10 specifically includes: Step S11: Set time constraint parameters and perform demand detection on industrial IoT devices according to the time constraint parameters. The time constraint parameters include device communication cycle, control command response time limit and data acquisition frequency.

[0035] Specifically, step S11 is implemented as follows: Before encrypting the device communication data, it is necessary to detect the corresponding data security transmission requirements. The corresponding detection process is to set time constraint parameters and perform requirement detection on the industrial IoT device according to the time constraint parameters. The time constraint parameters include the device communication cycle, control command response time limit, and data acquisition frequency.

[0036] Step S12: When a data security transmission requirement is detected in an industrial IoT device, the data security transmission requirement is obtained, and a multi-dimensional analysis is performed on the data security transmission requirement to obtain the requirement analysis result. The multi-dimensional analysis includes device information analysis and data encryption analysis.

[0037] Specifically, step S12 is implemented as follows: After setting the time constraint parameters, the industrial IoT device performs real-time demand detection. When a data security transmission requirement is detected, the data security transmission requirement is obtained, and a multi-dimensional analysis is performed on the data security transmission requirement to obtain the demand analysis results. The multi-dimensional analysis includes device information analysis and data encryption analysis.

[0038] Step S13: If the requirement analysis result indicates that the data security transmission requirement meets the communication encryption conditions, then obtain the corresponding industrial equipment communication data based on the requirement analysis result.

[0039] Specifically, step S13 is implemented as follows: If the requirement analysis result indicates that the data security transmission requirement does not meet the communication encryption conditions, then the subsequently acquired communication data does not need to be encrypted; if the requirement analysis result indicates that the data security transmission requirement meets the communication encryption conditions, then the corresponding industrial equipment communication data is acquired according to the requirement analysis result.

[0040] Step S20: Preprocess the communication data of the industrial equipment to obtain target communication data, encapsulate the target communication data to obtain communication encapsulated data, and compress the communication encapsulated data to obtain target compressed data.

[0041] Specifically, after obtaining the industrial equipment communication data, it needs to be preprocessed. This involves filtering the industrial equipment communication data for abnormal data to obtain filtered industrial equipment communication data, performing time-series alignment on the filtered industrial equipment communication data to obtain target filtered industrial equipment communication data, normalizing the target industrial equipment communication data to obtain target communication data, and encapsulating the target communication data to obtain encapsulated communication data. The encapsulation process includes quantum-safe encapsulation, industrial protocol adaptive encapsulation, and industrial environment adaptive encapsulation. Next, the encapsulated communication data is subjected to compression protocol matching to obtain a target compression protocol, and the curve parameters of the target compression protocol are obtained. The curve parameters are iteratively processed to obtain an Engel integer sequence, and the encapsulated communication data is compressed according to the Engel integer sequence to obtain the target compressed data.

[0042] like Figure 3 As shown, step S20 specifically includes: Step S21: Perform abnormal data filtering on the industrial equipment communication data to obtain industrial equipment communication filtered data, and perform time-series alignment processing on the industrial equipment communication filtered data to obtain target industrial equipment communication filtered data.

[0043] Specifically, step S21 is implemented as follows: After obtaining the industrial equipment communication data, it is necessary to preprocess the industrial equipment communication data. Specifically, abnormal data filtering is performed on the industrial equipment communication data to obtain industrial equipment communication filtered data, and time-series alignment processing is performed on the industrial equipment communication filtered data to obtain target industrial equipment communication filtered data.

[0044] Step S22: Normalize the target industrial equipment communication filtering data to obtain target communication data, and encapsulate the target communication data to obtain communication encapsulated data. The encapsulation process includes quantum-safe encapsulation, industrial protocol adaptive encapsulation, and industrial environment adaptive encapsulation.

[0045] Specifically, step S22 is implemented as follows: After obtaining the target industrial equipment communication filtering data, the target industrial equipment communication filtering data is normalized to obtain target communication data, and the target communication data is encapsulated to obtain communication encapsulated data. The encapsulation process includes quantum-safe encapsulation, industrial protocol adaptive encapsulation, and industrial environment adaptive encapsulation.

[0046] Step S23: Perform compression protocol matching on the communication encapsulation data to obtain the target compression protocol, and obtain the curve parameters of the target compression protocol.

[0047] Specifically, step S23 is implemented as follows: The communication encapsulation data is subjected to compression protocol matching to obtain the target compression protocol, and the curve parameters of the target compression protocol are obtained. The purpose of obtaining the curve parameters is to subsequently compress the communication encapsulation data.

[0048] Step S24: Iterate through the curve parameters to obtain an Engel integer sequence, and compress the communication encapsulation data according to the Engel integer sequence to obtain the target compressed data.

[0049] Specifically, step S24 is implemented as follows: After obtaining the curve parameters, iterative processing is performed on the curve parameters to obtain the Engel integer sequence, the corresponding expression of which is: ; in, For the first A sequence of integer steps For curve data, This represents the current iteration step. For the first A sequence of integers, and All are index variables. The data is then rounded down. Next, the communication encapsulation data is compressed according to the Engel integer sequence to obtain the target compressed data. This invention compresses curve parameters into a compact Engel integer sequence, where a greedy algorithm ensures that the residual increments at each step, thereby achieving predictable precision control.

[0050] Step S30: Encrypt the target compressed data to obtain communication encrypted data, adapt the communication encrypted data to multiple platforms to obtain target communication encrypted data, and transmit the target communication encrypted data to the device to obtain the device communication result.

[0051] Specifically, after obtaining the target compressed data, it is necessary to encrypt the target compressed data. This involves generating a key based on the Engel integer sequence of the target compressed data and the curve invariant to obtain public key information and private key information; obtaining encryption key information based on the public and private key information; performing a hash calculation on the curve invariant to obtain a first hash value; obtaining a shared key based on the first hash value; encapsulating the shared key and the curve invariant to obtain key encapsulation information; and encrypting the target compressed data based on the encryption key information and the key encapsulation information to obtain encrypted communication data.

[0052] Next, the hardware information of the industrial IoT device is acquired, and a random number is generated based on the hardware information to obtain a target random number. Adaptation protocol matching is performed based on the target random number to obtain an industrial adaptation protocol. The encrypted communication data is then adapted to multiple platforms according to the industrial adaptation protocol to obtain target encrypted communication data. Communication protocol analysis is performed on the target encrypted communication data to obtain the communication protocol analysis result. Protocol retrieval is performed based on the communication protocol analysis result to obtain a quantum-safe communication protocol. The target encrypted communication data is then transmitted to the device according to the quantum-safe communication protocol to obtain the device communication result.

[0053] like Figure 4 As shown, step S30 specifically includes: Step S31: Generate a key based on the Engel integer sequence of the target compressed data and the curve invariant to obtain public key information and private key information, and obtain encryption key information based on the public key information and the private key information.

[0054] Specifically, step S31 is implemented as follows: After obtaining the target compressed data, it is necessary to encrypt the target compressed data. Before encryption, the corresponding encryption key information needs to be obtained. Specifically, a key is generated based on the Engel integer sequence of the target compressed data and the curve invariant to obtain public key information and private key information. Encryption key information is then obtained based on the public key information and the private key information.

[0055] Step S32: Perform hash calculation on the curve invariant to obtain a first hash value, obtain a shared key based on the first hash value, encapsulate the shared key and the curve invariant to obtain key encapsulation information, and encrypt the target compressed data based on the encryption key information and the key encapsulation information to obtain encrypted communication data.

[0056] Specifically, a hash calculation is performed on the curve invariant to obtain a first hash value. A shared key is obtained based on the first hash value. The shared key and the curve invariant are encapsulated to obtain key encapsulation information. The target compressed data is encrypted based on the encryption key information and the key encapsulation information to obtain encrypted communication data.

[0057] like Figure 5 As shown, step S32 specifically includes: Step S321: Perform a hash calculation on the curve invariant to obtain a first hash value, and obtain a shared key based on the first hash value.

[0058] Specifically, step S321 is implemented as follows: A hash calculation is performed on the curve invariant to obtain a first hash value, and a shared key is obtained based on the first hash value.

[0059] Step S322: Encapsulate the shared key and the curve invariant to obtain key encapsulation information, and encrypt the target compressed data according to the encryption key information and the key encapsulation information to obtain communication encrypted data.

[0060] Specifically, step S322 is implemented as follows: The shared key and the curve invariant are encapsulated to obtain key encapsulation information. The target compressed data is then encrypted based on the encryption key information and the key encapsulation information to obtain encrypted communication data.

[0061] Step S33: Obtain the hardware information of the industrial IoT device, generate a random number based on the hardware information, and obtain the target random number.

[0062] Specifically, step S33 is implemented as follows: To provide a quantum entropy-resistant source, this invention generates corresponding random numbers by combining hardware information of industrial IoT devices. Specifically, it obtains the hardware information of the industrial IoT devices, generates random numbers based on the hardware information, and obtains a target random number, the corresponding expression of which is: ; in, For the target random number, It is a true random number generator. For the ADC noise of the ESP32 chip, For XOR operation, It is a pseudo-random number generator. This is the seed used to generate pseudo-random numbers.

[0063] Step S34: Perform adaptation protocol matching based on the target random number to obtain the industrial adaptation protocol, and perform multi-platform adaptation on the communication encryption data based on the industrial adaptation protocol to obtain the target communication encryption data.

[0064] Specifically, after obtaining the target random number, multi-platform adaptation is required. Specifically, the adaptation protocol is matched according to the target random number to obtain the industrial adaptation protocol, and the communication encryption data is adapted to multiple platforms according to the industrial adaptation protocol to obtain the target communication encryption data.

[0065] like Figure 6 As shown, step S34 specifically includes: Step S341: Perform adaptation protocol matching based on the target random number to obtain the industrial adaptation protocol.

[0066] Specifically, step S341 is implemented as follows: The industrial adaptation protocol is obtained by matching the target random number with the adaptation protocol.

[0067] Step S342: Perform multi-platform adaptation on the communication encryption data according to the industrial adaptation protocol to obtain the target communication encryption data.

[0068] Specifically, step S342 is implemented as follows: The communication encryption data is adapted to multiple platforms according to the industrial adaptation protocol to obtain the target communication encryption data.

[0069] Step S35: Perform communication protocol analysis on the target communication encrypted data to obtain the communication protocol analysis result, and retrieve the protocol based on the communication protocol analysis result to obtain the quantum-safe communication protocol.

[0070] Specifically, step S35 is implemented as follows: After obtaining the target encrypted communication data, it is necessary to transmit the target encrypted communication data to the device. Before transmitting the data to the device, a corresponding quantum-safe communication protocol is required. The specific process of obtaining the quantum-safe communication protocol is as follows: perform communication protocol analysis on the target encrypted communication data to obtain the communication protocol analysis result, and retrieve the protocol based on the communication protocol analysis result to obtain the quantum-safe communication protocol.

[0071] Step S36: Transmit the target communication encrypted data to the device according to the quantum secure communication protocol to obtain the device communication result.

[0072] Specifically, step S36 is implemented as follows: After obtaining the quantum-safe communication protocol, the target communication encrypted data is transmitted to the device according to the quantum-safe communication protocol to obtain the device communication result.

[0073] Furthermore, such as Figure 7 As shown, the process of preprocessing the industrial equipment communication data to obtain target communication data, encapsulating the target communication data to obtain encapsulated communication data, and compressing the encapsulated communication data to obtain target compressed data further includes: Step S41: Perform homologous optimization on the curve parameters to obtain homologous constants, and perform iterative homologous mapping on the homologous constants to obtain the corresponding target curve; Step S42: Derive the invariants from the target curve to obtain the curve invariants, and perform encryption delay processing based on the curve invariants to obtain the encryption delay processing result.

[0074] Specifically, the curve parameters are optimized for homogeneity to obtain homogeneity constants, and the homogeneity constants are iteratively mapped to homogeneity to obtain the corresponding target curve. The corresponding expression is: The iterative mapping of the homologous constants specifically involves: ; in, For the process The coordinates of the point after the second homology mapping Let x be the x-coordinate of a point on the original elliptic curve. The ordinate of a point on the original elliptic curve. The x-coordinate of the second-order twist point. These are homologous constants.

[0075] Next, invariants are derived from the target curve to obtain the curve invariants, the corresponding expressions of which are: ; in, For the first Curve invariants after homologous mapping For the target curve, and All are the first The coefficients of the target curve obtained after the homologous mapping are used. Encryption delay processing is then performed based on the curve invariants to obtain the encryption delay processing result.

[0076] Furthermore, such as Figure 8 As shown, the curve invariant is hashed to obtain a shared key. The shared key and the curve invariant are then encapsulated to obtain key encapsulation information. The process further includes: Step S51: Perform a hash calculation on the target curve to obtain a second hash value; Step S52: Deseal the key encapsulation information according to the second hash value to obtain the shared key.

[0077] Specifically, a hash calculation is performed on the target curve to obtain a second hash value; then, the key encapsulation information is decapsulated based on the second hash value to obtain a shared key.

[0078] The technical effects that this invention can bring are as follows: (1) By using the Engel compression engine to compress the target communication data, the contradiction between industrial terminal resource limitations and traditional encryption is resolved; (2) By optimizing the same-source mapping algorithm, the problem of excessive security latency in industrial real-time control systems was solved, and the encryption latency was significantly reduced; (3) By seamlessly integrating quantum-resistant security with industrial protocol stacks, the threat of quantum computing to industrial infrastructure security is solved, and the security of data transmission is improved; (4) Distributed key management solves the problem of fragmented key management across multiple industrial platforms, thereby reducing key management costs and reducing latency when performing cross-system key synchronization.

[0079] Furthermore, such as Figure 9As shown, based on the above-described device communication data encryption method for the Industrial Internet of Things (IIoT), this invention also provides a device communication data encryption system for the IIoT, wherein the device communication data encryption system for the IIoT includes: The transmission demand analysis module 50 is used to obtain the data security transmission demand of industrial IoT devices, analyze and process the data security transmission demand to obtain the demand analysis result, and obtain the corresponding industrial device communication data based on the demand analysis result. The communication data processing module 60 is used to preprocess the communication data of the industrial equipment to obtain target communication data, encapsulate the target communication data to obtain communication encapsulated data, and compress the communication encapsulated data to obtain target compressed data. The communication data encryption module 70 is used to encrypt the target compressed data to obtain communication encrypted data, perform multi-platform adaptation on the communication encrypted data to obtain target communication encrypted data, and transmit the target communication encrypted data to the device to obtain the device communication result.

[0080] like Figures 10 to 13 As shown in this embodiment of the invention, another embodiment of the device communication data encryption system for the Industrial Internet of Things (IIoT) is presented. In this embodiment, the requirements analysis module 50 includes: The demand detection unit 501 is used to set time constraint parameters and perform demand detection on industrial IoT devices according to the time constraint parameters, wherein the time constraint parameters include device communication cycle, control command response time limit and data acquisition frequency. The multi-dimensional demand analysis unit 502 is used to obtain the data security transmission requirement when a data security transmission requirement is detected in an industrial IoT device, perform multi-dimensional analysis on the data security transmission requirement, and obtain the demand analysis result. The multi-dimensional analysis includes device information analysis and data encryption analysis. The condition confirmation unit 503 is used to obtain the corresponding industrial equipment communication data based on the requirement analysis result if the data security transmission requirement meets the communication encryption condition.

[0081] In this embodiment, the communication data processing module 60 includes: The data preprocessing unit 601 is used to perform abnormal data filtering on the industrial equipment communication data to obtain industrial equipment communication filtered data, and to perform time-series alignment processing on the industrial equipment communication filtered data to obtain target industrial equipment communication filtered data. The data encapsulation unit 602 is used to normalize the target industrial equipment communication filtering data to obtain target communication data, and to encapsulate the target communication data to obtain communication encapsulation data. The encapsulation process includes quantum-safe encapsulation, industrial protocol adaptive encapsulation, and industrial environment adaptive encapsulation. Protocol matching unit 603 is used to perform compression protocol matching on the communication encapsulation data to obtain the target compression protocol and acquire the curve parameters of the target compression protocol; The data compression unit 604 is used to iteratively process the curve parameters to obtain an Engel integer sequence, and to compress the communication encapsulation data according to the Engel integer sequence to obtain the target compressed data.

[0082] In this embodiment, the communication data encryption module 70 includes: The key generation unit 701 is used to generate a key based on the Engel integer sequence of the target compressed data and the curve invariant, to obtain public key information and private key information, and to obtain encryption key information based on the public key information and the private key information. The key encapsulation unit 702 is used to perform hash calculation on the curve invariant to obtain a first hash value, obtain a shared key based on the first hash value, encapsulate the shared key and the curve invariant to obtain key encapsulation information, and encrypt the target compressed data based on the encryption key information and the key encapsulation information to obtain communication encrypted data. The random number generation unit 703 is used to acquire the hardware information of the industrial IoT device, generate random numbers based on the hardware information, and obtain a target random number. The multi-platform adaptation unit 704 is used to perform adaptation protocol matching based on the target random number to obtain an industrial adaptation protocol, and to perform multi-platform adaptation on the communication encryption data based on the industrial adaptation protocol to obtain target communication encryption data. The protocol analysis unit 705 is used to perform communication protocol analysis on the target communication encrypted data, obtain the communication protocol analysis result, and retrieve the protocol based on the communication protocol analysis result to obtain the quantum-safe communication protocol. The data transmission unit 706 is used to transmit the target communication encrypted data to the device according to the quantum secure communication protocol, so as to obtain the device communication result.

[0083] like Figure 14 As shown, in this embodiment, the device communication data encryption system for the Industrial Internet of Things further includes a parameter homogeneity optimization module 80, which includes: The homogeneous iteration unit 801 is used to perform homogeneous optimization on the curve parameters to obtain homogeneous constants, and to perform iterative homogeneous mapping on the homogeneous constants to obtain the corresponding target curve. The invariant derivation unit 802 is used to derive invariants from the target curve to obtain curve invariants, and to perform encryption delay processing based on the curve invariants to obtain encryption delay processing results.

[0084] Furthermore, such as Figure 15 As shown, based on the above-mentioned device communication data encryption method and system for the Industrial Internet of Things, the present invention also provides a terminal, which includes a processor 10, a memory 20 and a display 30. Figure 15 Only some of the terminal components are shown; however, it should be understood that it is not required to implement all of the components shown, and more or fewer components may be implemented instead.

[0085] In some embodiments, the memory 20 may be an internal storage unit of the terminal, such as a hard disk or memory. In other embodiments, the memory 20 may be an external storage device of the terminal, such as a plug-in hard disk, smart media card (SMC), secure digital card (SD), flash card, etc. Further, the memory 20 may include both internal and external storage devices. The memory 20 is used to store application software and various types of data installed on the terminal, such as the program code installed on the terminal. The memory 20 can also be used to temporarily store data that has been output or will be output. In one embodiment, the memory 20 stores a device communication data encryption program 40 for the Industrial Internet of Things (IIoT), which can be executed by the processor 10 to implement the device communication data encryption method for the IIoT described in this application.

[0086] In some embodiments, the processor 10 may be a central processing unit (CPU), a microprocessor, or other data processing chip, used to run program code stored in the memory 20 or process data, such as executing the device communication data encryption method for the Industrial Internet of Things.

[0087] In some embodiments, the display 30 may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, or an OLED (Organic Light-Emitting Diode) touchscreen. The display 30 is used to display information on the terminal and to display a visual user interface. The terminal's processor 10, memory 20, and display 30 communicate with each other via a system bus.

[0088] In one embodiment, when the processor 10 executes the device communication data encryption program 40 for the Industrial Internet of Things stored in the memory 20, the following steps are performed: The data security transmission requirements of industrial IoT devices are obtained, the data security transmission requirements are analyzed and processed to obtain the requirements analysis results, and the corresponding industrial device communication data is obtained based on the requirements analysis results. The communication data of the industrial equipment is preprocessed to obtain target communication data, the target communication data is encapsulated to obtain communication encapsulated data, and the communication encapsulated data is compressed to obtain target compressed data. The target compressed data is encrypted to obtain communication encrypted data. The communication encrypted data is then adapted to multiple platforms to obtain target communication encrypted data. Finally, the target communication encrypted data is transmitted to the device to obtain the device communication result.

[0089] The process of acquiring the data security transmission requirements of industrial IoT devices, analyzing and processing these requirements to obtain a requirements analysis result, and acquiring the corresponding industrial device communication data based on the requirements analysis result, specifically includes: Set time constraint parameters, and perform demand detection on industrial IoT devices based on the time constraint parameters, wherein the time constraint parameters include device communication cycle, control command response time limit and data acquisition frequency; When a data security transmission requirement is detected in an industrial IoT device, the data security transmission requirement is obtained, and a multi-dimensional analysis is performed on the data security transmission requirement to obtain the requirement analysis results. The multi-dimensional analysis includes device information analysis and data encryption analysis. If the requirement analysis result indicates that the data security transmission requirement meets the communication encryption conditions, then the corresponding industrial equipment communication data is obtained based on the requirement analysis result.

[0090] Specifically, the preprocessing of the industrial equipment communication data to obtain target communication data, and the encapsulation of the target communication data to obtain communication encapsulation data, includes: The industrial equipment communication data is filtered for abnormal data to obtain industrial equipment communication filtered data, and the industrial equipment communication filtered data is time-aligned to obtain target industrial equipment communication filtered data. The target industrial equipment communication filtering data is normalized to obtain target communication data, and the target communication data is encapsulated to obtain communication encapsulated data. The encapsulation process includes quantum-safe encapsulation, industrial protocol adaptive encapsulation, and industrial environment adaptive encapsulation.

[0091] Specifically, the compression process of the communication encapsulation data to obtain the target compressed data includes: The communication encapsulation data is subjected to compression protocol matching to obtain the target compression protocol, and the curve parameters of the target compression protocol are obtained. The curve parameters are iteratively processed to obtain an Engel integer sequence, and the communication encapsulation data is compressed according to the Engel integer sequence to obtain the target compressed data.

[0092] Specifically, the iterative processing of the curve parameters involves: ; in, For the first A sequence of integer steps For curve data, This represents the current iteration step. For the first A sequence of integers, and All are index variables. This is for rounding down.

[0093] The process includes preprocessing the industrial equipment communication data to obtain target communication data, encapsulating the target communication data to obtain encapsulated communication data, and compressing the encapsulated communication data to obtain target compressed data. The process further includes: The curve parameters are optimized for homogeneity to obtain homogeneous constants, and the homogeneous constants are iteratively mapped to homogeneity to obtain the corresponding target curve. The target curve is derived by performing invariant derivation to obtain curve invariants, and then encryption and delay processing is performed based on the curve invariants to obtain the encryption and delay processing result.

[0094] Specifically, the iterative mapping of the homologous constants involves: ; in, For the process The coordinates of the point after the second homology mapping Let x be the x-coordinate of a point on the original elliptic curve. The ordinate of a point on the original elliptic curve. The x-coordinate of the second-order twist point. These are homologous constants.

[0095] Specifically, the invariant derivation of the curve equation involves: ; in, For the first Curve invariants after homologous mapping For the target curve, and All are the first The coefficients of the target curve obtained after homologous mapping.

[0096] Specifically, the encryption process performed on the target compressed data to obtain encrypted communication data includes: A key is generated based on the Engel integer sequence of the target compressed data and the curve invariant to obtain public key information and private key information. Encryption key information is then obtained based on the public key information and the private key information. A hash calculation is performed on the curve invariant to obtain a first hash value. A shared key is obtained based on the first hash value. The shared key and the curve invariant are encapsulated to obtain key encapsulation information. The target compressed data is encrypted based on the encryption key information and the key encapsulation information to obtain encrypted communication data.

[0097] The curve invariant is hashed to obtain a shared key; the shared key and the curve invariant are then encapsulated to obtain key encapsulation information; the process further includes: The target curve is hashed to obtain a second hash value, and the key encapsulation information is decapsulated based on the second hash value to obtain a shared key.

[0098] Specifically, the step of adapting the encrypted communication data to multiple platforms to obtain the target encrypted communication data includes: Obtain the hardware information of the industrial IoT device, and generate a target random number based on the hardware information; The target random number is used to perform adaptation protocol matching to obtain an industrial adaptation protocol, and the communication encryption data is adapted to multiple platforms according to the industrial adaptation protocol to obtain the target communication encryption data.

[0099] Specifically, the random number generation based on the hardware information includes: ; in, For the target random number, It is a true random number generator. For the ADC noise of the ESP32 chip, For XOR operation, It is a pseudo-random number generator. This is the seed used to generate pseudo-random numbers.

[0100] Specifically, transmitting the encrypted target communication data to the device to obtain the device communication result includes: The target encrypted communication data is analyzed for communication protocols to obtain communication protocol analysis results. Based on the communication protocol analysis results, the protocol is retrieved to obtain the quantum-safe communication protocol. The target communication encrypted data is transmitted to the device according to the quantum-safe communication protocol to obtain the device communication result.

[0101] The present invention also provides a computer-readable storage medium, wherein the computer-readable storage medium stores a device communication data encryption program for the Industrial Internet of Things (IIoT), and the device communication data encryption program for the IIoT, when executed by a processor, implements the steps of the device communication data encryption method for the IIoT as described above.

[0102] In summary, this invention provides a method, system, terminal, and computer-readable storage medium for encrypting device communication data for the Industrial Internet of Things (IIoT). The method includes: acquiring the data security transmission requirements of IIoT devices; analyzing and processing the data security transmission requirements to obtain a requirement analysis result; and acquiring corresponding industrial device communication data based on the requirement analysis result. The method further includes: preprocessing the industrial device communication data to obtain target communication data; encapsulating the target communication data to obtain encapsulated communication data; compressing the encapsulated communication data to obtain target compressed data; encrypting the target compressed data to obtain encrypted communication data; performing multi-platform adaptation on the encrypted communication data to obtain target encrypted communication data; and transmitting the target encrypted communication data to the device to obtain the device communication result. This invention's device communication data encryption method not only reduces resource consumption but also significantly reduces encryption latency while improving security.

[0103] It should be noted that, in this document, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or terminal that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or terminal. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or terminal that includes that element.

[0104] Of course, those skilled in the art will understand that all or part of the processes in the above embodiments can be implemented by a computer program instructing related hardware (such as a processor, controller, etc.). The program can be stored in a computer-readable storage medium, and when executed, it can include the processes described in the above method embodiments. The computer-readable storage medium can be a memory, magnetic disk, optical disk, etc.

[0105] It should be understood that the application of the present invention is not limited to the examples above. Those skilled in the art can make improvements or modifications based on the above description, and all such improvements and modifications should fall within the protection scope of the appended claims.

Claims

1. A method for encrypting device communication data for the Industrial Internet of Things, characterized in that, The device communication data encryption method for the Industrial Internet of Things includes: The data security transmission requirements of industrial IoT devices are obtained, the data security transmission requirements are analyzed and processed to obtain the requirements analysis results, and the corresponding industrial device communication data is obtained based on the requirements analysis results. The communication data of the industrial equipment is preprocessed to obtain target communication data, the target communication data is encapsulated to obtain communication encapsulated data, and the communication encapsulated data is compressed to obtain target compressed data. The target compressed data is encrypted to obtain communication encrypted data. The communication encrypted data is then adapted to multiple platforms to obtain target communication encrypted data. Finally, the target communication encrypted data is transmitted to the device to obtain the device communication result.

2. The device communication data encryption method for the Industrial Internet of Things according to claim 1, characterized in that, The process of acquiring the data security transmission requirements of industrial IoT devices involves analyzing and processing these requirements to obtain a requirements analysis result, and then acquiring the corresponding industrial device communication data based on the result. Specifically, this includes: Set time constraint parameters, and perform demand detection on industrial IoT devices based on the time constraint parameters, wherein the time constraint parameters include device communication cycle, control command response time limit and data acquisition frequency; When a data security transmission requirement is detected in an industrial IoT device, the data security transmission requirement is obtained, and a multi-dimensional analysis is performed on the data security transmission requirement to obtain the requirement analysis results. The multi-dimensional analysis includes device information analysis and data encryption analysis. If the requirement analysis result indicates that the data security transmission requirement meets the communication encryption conditions, then the corresponding industrial equipment communication data is obtained based on the requirement analysis result.

3. The device communication data encryption method for the Industrial Internet of Things according to claim 1, characterized in that, The process of preprocessing the industrial equipment communication data to obtain target communication data, and then encapsulating the target communication data to obtain encapsulated communication data, specifically includes: The industrial equipment communication data is filtered for abnormal data to obtain industrial equipment communication filtered data, and the industrial equipment communication filtered data is time-aligned to obtain target industrial equipment communication filtered data. The target industrial equipment communication filtering data is normalized to obtain target communication data, and the target communication data is encapsulated to obtain communication encapsulated data. The encapsulation process includes quantum-safe encapsulation, industrial protocol adaptive encapsulation, and industrial environment adaptive encapsulation.

4. The device communication data encryption method for the Industrial Internet of Things according to claim 1, characterized in that, The step of compressing the communication encapsulation data to obtain the target compressed data specifically includes: The communication encapsulation data is subjected to compression protocol matching to obtain the target compression protocol, and the curve parameters of the target compression protocol are obtained. The curve parameters are iteratively processed to obtain an Engel integer sequence, and the communication encapsulation data is compressed according to the Engel integer sequence to obtain the target compressed data.

5. The device communication data encryption method for the Industrial Internet of Things according to claim 4, characterized in that, The iterative processing of the curve parameters specifically involves: ； in, For the first A sequence of integer steps For curve data, This represents the current iteration step. For the first A sequence of integers, and All are index variables. This is for rounding down.

6. The device communication data encryption method for the Industrial Internet of Things according to claim 4, characterized in that, The process of preprocessing the industrial equipment communication data to obtain target communication data, encapsulating the target communication data to obtain encapsulated communication data, and compressing the encapsulated communication data to obtain target compressed data further includes: The curve parameters are optimized for homogeneity to obtain homogeneous constants, and the homogeneous constants are iteratively mapped to homogeneity to obtain the corresponding target curve. The target curve is derived by performing invariant derivation to obtain curve invariants, and then encryption and delay processing is performed based on the curve invariants to obtain the encryption and delay processing result.

7. The device communication data encryption method for the Industrial Internet of Things according to claim 6, characterized in that, The iterative mapping of the homologous constants specifically involves: ； in, For the process The coordinates of the point after the second homology mapping Let x be the x-coordinate of a point on the original elliptic curve. The ordinate of a point on the original elliptic curve. The x-coordinate of the second-order twist point. These are homologous constants.

8. The device communication data encryption method for the Industrial Internet of Things according to claim 6, characterized in that, The invariant derivation of the curve equation specifically involves: ； in, For the first Curve invariants after homologous mapping For the target curve, and All are the first The coefficients of the target curve obtained after homologous mapping.

9. The device communication data encryption method for the Industrial Internet of Things according to claim 6, characterized in that, The step of encrypting the target compressed data to obtain encrypted communication data specifically includes: A key is generated based on the Engel integer sequence of the target compressed data and the curve invariant to obtain public key information and private key information. Encryption key information is then obtained based on the public key information and the private key information. A hash calculation is performed on the curve invariant to obtain a first hash value. A shared key is obtained based on the first hash value. The shared key and the curve invariant are encapsulated to obtain key encapsulation information. The target compressed data is encrypted based on the encryption key information and the key encapsulation information to obtain encrypted communication data.

10. The device communication data encryption method for the Industrial Internet of Things according to claim 6, characterized in that, The curve invariant is hashed to obtain a shared key. The shared key and the curve invariant are then encapsulated to obtain key encapsulation information. The process further includes: The target curve is hashed to obtain a second hash value, and the key encapsulation information is decapsulated based on the second hash value to obtain a shared key.

11. The device communication data encryption method for the Industrial Internet of Things according to claim 1, characterized in that, The step of adapting the encrypted communication data to multiple platforms to obtain the target encrypted communication data specifically includes: Obtain the hardware information of the industrial IoT device, and generate a target random number based on the hardware information; The target random number is used to perform adaptation protocol matching to obtain an industrial adaptation protocol, and the communication encryption data is adapted to multiple platforms according to the industrial adaptation protocol to obtain the target communication encryption data.

12. The device communication data encryption method for the Industrial Internet of Things according to claim 11, characterized in that, The random number generation based on the hardware information specifically involves: ； in, For the target random number, It is a true random number generator. For the ADC noise of the ESP32 chip, For XOR operation, It is a pseudo-random number generator. This is the seed used to generate pseudo-random numbers.

13. The device communication data encryption method for the Industrial Internet of Things according to claim 1, characterized in that, The step of transmitting the target encrypted communication data to the device to obtain the device communication result specifically includes: The target encrypted communication data is analyzed for communication protocols to obtain communication protocol analysis results. Based on the communication protocol analysis results, the protocol is retrieved to obtain the quantum-safe communication protocol. The target communication encrypted data is transmitted to the device according to the quantum-safe communication protocol to obtain the device communication result.

14. A device communication data encryption system for the Industrial Internet of Things, characterized in that, The device communication data encryption system for the Industrial Internet of Things includes: The transmission requirement analysis module is used to obtain the data security transmission requirements of industrial IoT devices, analyze and process the data security transmission requirements to obtain the requirement analysis results, and obtain the corresponding industrial device communication data based on the requirement analysis results. The communication data processing module is used to preprocess the communication data of the industrial equipment to obtain target communication data, encapsulate the target communication data to obtain encapsulated communication data, and compress the encapsulated communication data to obtain target compressed data. The communication data encryption module is used to encrypt the target compressed data to obtain communication encrypted data, perform multi-platform adaptation on the communication encrypted data to obtain target communication encrypted data, and transmit the target communication encrypted data to the device to obtain the device communication result.

15. The device communication data encryption system for the Industrial Internet of Things according to claim 14, characterized in that, The requirements analysis module includes: A demand detection unit is used to set time constraint parameters and perform demand detection on industrial IoT devices based on the time constraint parameters, wherein the time constraint parameters include device communication cycle, control command response time limit and data acquisition frequency; The multi-dimensional demand analysis unit is used to obtain the data security transmission requirement when a data security transmission requirement is detected in an industrial IoT device, perform multi-dimensional analysis on the data security transmission requirement, and obtain the demand analysis results. The multi-dimensional analysis includes device information analysis and data encryption analysis. The condition confirmation unit is used to obtain the corresponding industrial equipment communication data based on the requirement analysis result if the data security transmission requirement meets the communication encryption condition.

16. The device communication data encryption system for the Industrial Internet of Things according to claim 14, characterized in that, The communication data processing module includes: The data preprocessing unit is used to perform abnormal data filtering on the industrial equipment communication data to obtain industrial equipment communication filtered data, and to perform time-series alignment processing on the industrial equipment communication filtered data to obtain target industrial equipment communication filtered data. The data encapsulation unit is used to normalize the target industrial equipment communication filtering data to obtain target communication data, and to encapsulate the target communication data to obtain communication encapsulation data. The encapsulation process includes quantum-safe encapsulation, industrial protocol adaptive encapsulation, and industrial environment adaptive encapsulation. The protocol matching unit is used to perform compression protocol matching on the communication encapsulation data to obtain the target compression protocol and acquire the curve parameters of the target compression protocol. The data compression unit is used to iteratively process the curve parameters to obtain an Engel integer sequence, and to compress the communication encapsulation data according to the Engel integer sequence to obtain the target compressed data.

17. The device communication data encryption system for the Industrial Internet of Things according to claim 14, characterized in that, The communication data encryption module includes: The key generation unit is used to generate a key based on the Engel integer sequence of the target compressed data and the curve invariant, to obtain public key information, and to obtain private key information, and to obtain encryption key information based on the public key information and the private key information; A key encapsulation unit is used to perform hash calculation on the curve invariant to obtain a first hash value, obtain a shared key based on the first hash value, encapsulate the shared key and the curve invariant to obtain key encapsulation information, and encrypt the target compressed data based on the encryption key information and the key encapsulation information to obtain encrypted communication data. A random number generation unit is used to acquire the hardware information of the industrial IoT device, generate random numbers based on the hardware information, and obtain a target random number. A multi-platform adaptation unit is used to perform adaptation protocol matching based on the target random number to obtain an industrial adaptation protocol, and to perform multi-platform adaptation on the communication encryption data based on the industrial adaptation protocol to obtain target communication encryption data. The protocol analysis unit is used to perform communication protocol analysis on the target communication encrypted data, obtain the communication protocol analysis result, and retrieve the protocol based on the communication protocol analysis result to obtain the quantum-safe communication protocol. The data transmission unit is used to transmit the target communication encrypted data to the device according to the quantum-safe communication protocol, so as to obtain the device communication result.

18. The device communication data encryption system for the Industrial Internet of Things according to claim 14, characterized in that, The device communication data encryption system for the Industrial Internet of Things also includes a parameter homogeneity optimization module, which includes: The homogeneous iteration unit is used to perform homogeneous optimization on the curve parameters to obtain homogeneous constants, and to perform iterative homogeneous mapping on the homogeneous constants to obtain the corresponding target curve; The invariant derivation unit is used to derive invariants from the target curve to obtain curve invariants, and to perform encryption delay processing based on the curve invariants to obtain the encryption delay processing result.

19. A terminal, characterized in that, The terminal includes: a memory, a processor, and a device communication data encryption program for the Industrial Internet of Things (IIoT) stored in the memory and executable on the processor. When the device communication data encryption program for the Industrial Internet of Things is executed by the processor, it implements the steps of the device communication data encryption method for the Industrial Internet of Things as described in any one of claims 1-14.

20. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a device communication data encryption program for the Industrial Internet of Things (IIoT), which, when executed by a processor, implements the steps of the device communication data encryption method for the Industrial Internet of Things as described in any one of claims 1-14.

Images