A data transmission method, device and system based on an endogenous security architecture and a man-machine collaborative mechanism

Abstract

The application discloses a data transmission method, device and system based on an endogenous security architecture and a man-machine cooperation mechanism. In the method, when data is transmitted, the data is copied and distributed to each online heterogeneous execution body in a current heterogeneous execution body set for encryption operation; each heterogeneous execution body corresponds to an encryption mode, including an encryption algorithm and a key, and the current heterogeneous execution body set is formed based on a dynamic scheduling algorithm; the algorithm calculates a comprehensive coefficient according to a use coefficient of the encryption mode and a manually adjustable security coefficient, and substitutes the comprehensive coefficient into a normal distribution function to determine the probability of being selected into the set. After receiving the ciphertext, decryption and multi-mode arbitration are performed to generate feedback information to drive updating of the current heterogeneous execution body set. The application overcomes the defect of single encryption mode of a traditional encryption mode, and through the dynamic scheduling algorithm based on the normal distribution of the security coefficient and the use coefficient, man-machine cooperation scheduling can be realized, and better response accuracy and flexibility than pure automatic defense can be realized.

Description

Technical Field

[0001] This invention belongs to the field of data transmission security protection, and particularly relates to a data transmission method, device and system based on an intrinsic security architecture and human-machine collaboration mechanism. Background Technology

[0002] Currently, in the field of data transmission security protection, traditional symmetric or asymmetric encryption technologies are commonly used. The sender and receiver primarily rely on a pre-negotiated single key and a fixed algorithm for encryption and decryption. However, this traditional protection mechanism is inherently singular and static. Once an attacker obtains the key through methods such as enhanced computing power, cryptanalysis, or physical theft, or discovers inherent vulnerabilities in a specific encryption algorithm, the entire data transmission channel's security defenses will instantly collapse. This makes it extremely easy for sensitive data to be easily intercepted, stolen, tampered with, or lost, failing to meet the security requirements of today's highly confidential scenarios.

[0003] Most existing data transmission defense systems operate on a "passive defense" model, heavily relying on prior knowledge such as known attack signature databases and known vulnerability patches. When faced with covert attacks exploiting unknown vulnerabilities or system backdoors, traditional static encryption systems offer virtually no resistance. Due to the singularity and determinism of encryption methods, once attackers breach outer defenses, they can often pinpoint and persistently penetrate or brute-force the fixed encryption mechanism over a prolonged period. Current technologies lack effective mechanisms to increase the difficulty of detection, decryption costs, and system robustness for attackers.

[0004] Furthermore, with the increasing complexity of network architectures, network attack methods are becoming more multidimensional, dynamic, and highly intelligent. Traditional encrypted transmission systems, when faced with advanced persistent threats or complex attacks, typically rely solely on pre-defined, fixed rules for purely automated responses. This purely automated processing mechanism lacks the ability to recognize and analyze complex attack and defense contexts. Faced with rapidly changing real-world adversarial environments, its response mechanism often appears slow and rigid, making it difficult to make flexible and accurate dynamic adjustments based on the real-time advanced threat landscape. Summary of the Invention

[0005] The purpose of this invention is to provide a data transmission method, device and system based on an intrinsic security architecture and human-machine collaboration mechanism, so as to solve the problems of insufficient defense capabilities of traditional static encryption systems and the lack of awareness and flexible response capabilities of existing purely automated response mechanisms in response to complex threat situations.

[0006] To achieve the above-mentioned objectives, the present invention adopts the following technical solution:

[0007] In a first aspect, the present invention provides a data transmission method based on an intrinsic security architecture and a human-machine collaboration mechanism, applied at a data sending end, comprising:

[0008] In response to data transmission, data replication is performed, and the replicated data is distributed to each online heterogeneous execution entity in the current heterogeneous execution entity set for encryption operations, generating multiple ciphertext data. Each heterogeneous execution entity corresponds to an encryption method, which includes an encryption algorithm and a key. The current heterogeneous execution entity set is formed based on a dynamic scheduling algorithm. This algorithm determines a comprehensive coefficient based on the security and usage coefficients of the encryption method, substitutes the comprehensive coefficient into a normal distribution function to determine a probability coefficient, determines the probability value of the encryption method based on the probability coefficient, and determines whether the encryption method is selected for inclusion in the current heterogeneous execution entity set based on the probability value. The security coefficient can be adjusted according to manual adjustment commands.

[0009] The multiple encrypted data are sent to the data receiving end so that the data receiving end can decrypt, perform multi-mode adjudication, and generate feedback information based on the adjudication result.

[0010] In response to receiving feedback information from the data receiver, the current heterogeneous execution set is updated. The update includes: updating the key used by the attacked encryption method, or replacing the attacked encryption method with the dynamic scheduling algorithm, or replacing all encryption methods in the current heterogeneous execution set with the dynamic scheduling algorithm.

[0011] Furthermore, the security coefficient is negatively correlated with the security of the encryption method, and the security coefficient of the attacked encryption method is increased when the encryption method is attacked; the usage coefficient is positively correlated with the number of times the encryption method is used; the comprehensive coefficient is positively correlated with both the security coefficient and the usage coefficient.

[0012] Furthermore, the comprehensive coefficient is obtained by multiplying the safety coefficient by the square root of the usage coefficient.

[0013] Furthermore, the method also includes: based on a dynamic time period, using the dynamic scheduling algorithm to replace and schedule the encryption method with the highest security coefficient in the current heterogeneous execution set; the security coefficient is negatively correlated with the security of the encryption method.

[0014] Furthermore, updating the current heterogeneous execution entity set upon receiving feedback information from the data receiver includes:

[0015] When the feedback information indicates that the vote has passed but there is an abnormal result, if the number of consecutive attacks on the attacked encryption method does not exceed a preset threshold, the key used by the attacked encryption method is updated; if the number of consecutive attacks on the attacked encryption method exceeds the preset threshold, the dynamic scheduling algorithm is used to replace the attacked encryption method and update the key used by the attacked encryption method.

[0016] When the feedback information indicates that the vote has failed, the dynamic scheduling algorithm is used to replace and schedule all encryption methods in the current heterogeneous execution set, and the keys used by all encryption methods are updated.

[0017] Secondly, this invention provides a data transmission method based on an intrinsic security architecture and a human-machine collaboration mechanism, applied at a data receiving end, comprising:

[0018] In response to receiving multiple encrypted data, the multiple encrypted data are generated by the data sender through encryption of the original data using various online heterogeneous execution entities in the current heterogeneous execution entity set; wherein each heterogeneous execution entity corresponds to an encryption method, the encryption method including an encryption algorithm and a key; the current heterogeneous execution entity set is formed based on a dynamic scheduling algorithm, the dynamic scheduling algorithm being used to determine a comprehensive coefficient based on the security coefficient and usage coefficient of the encryption method, substitute the comprehensive coefficient into a normal distribution function to determine a probability coefficient, determine a probability value of the encryption method based on the probability coefficient, and determine whether the encryption method is selected into the current heterogeneous execution entity set based on the probability value; the security coefficient can be adjusted according to manual adjustment instructions;

[0019] The encrypted data is decrypted, multi-modal adjudication is performed, and feedback information is generated based on the adjudication results.

[0020] The feedback information is sent to the data sending end so that the data sending end updates the current heterogeneous execution set. The update includes: updating the key used by the attacked encryption method, or using the dynamic scheduling algorithm to replace the attacked encryption method, or using the dynamic scheduling algorithm to replace all encryption methods in the current heterogeneous execution set.

[0021] Furthermore, the process of decrypting the encrypted data, performing multi-modal adjudication, and generating feedback information based on the adjudication results includes:

[0022] The received ciphertext data generated by each online heterogeneous executor is decrypted to obtain the decrypted data;

[0023] The decrypted data is normalized to obtain a queue of normalized results.

[0024] The normalized result queue is processed by voting according to the voting method currently in use;

[0025] If the voting results are consistent, the correct result is selected for output. In the event of an abnormal result, a first feedback message is generated. The first feedback message includes information about the attacked encryption method, which is used by the data sender to update the key used by the corresponding encryption method or to replace the attacked encryption method.

[0026] If the voting results are inconsistent, a second feedback message is generated. The second feedback message is used to instruct the data sending end to replace and schedule all encryption methods in the current heterogeneous execution set.

[0027] Furthermore, the first feedback information includes the identifier of the attacked encryption method and the number of consecutive attacks it has been attacked; the number of consecutive attacks is used to instruct the data sender to update the key of the attacked encryption method or replace the attacked encryption method. If the number of consecutive attacks does not exceed a preset threshold, the key is updated; otherwise, a replacement scheduling is performed.

[0028] Thirdly, the present invention provides a data transmission device based on an intrinsic security architecture and a human-machine collaboration mechanism, applied at a data sending end, comprising:

[0029] The heterogeneous encryption module is used to respond to data transmission, perform data copying, and distribute the copied data to each online heterogeneous execution entity in the current heterogeneous execution entity set for encryption operations, generating multiple ciphertext data;

[0030] The data sending module is used to send the multiple encrypted data to the data receiving end, so that the data receiving end can decrypt, perform multi-mode adjudication, and generate feedback information based on the adjudication result;

[0031] A strategy scheduling module is used to form the current heterogeneous execution entity set and update the current heterogeneous execution entity set in response to feedback information received from the data receiving end. Each heterogeneous execution entity corresponds to an encryption method, which includes an encryption algorithm and a key. The current heterogeneous execution entity set is formed based on a dynamic scheduling algorithm. The dynamic scheduling algorithm is used to determine a comprehensive coefficient based on the security coefficient and usage coefficient of the encryption method, substitute the comprehensive coefficient into a normal distribution function to determine a probability coefficient, determine the probability value of the encryption method based on the probability coefficient, and determine whether the encryption method is selected into the current heterogeneous execution entity set based on the probability value. The security coefficient can be adjusted according to manual adjustment instructions. The update includes: updating the key used by the attacked encryption method, or using the dynamic scheduling algorithm to replace the attacked encryption method, or using the dynamic scheduling algorithm to replace all encryption methods in the current heterogeneous execution entity set.

[0032] Fourthly, the present invention provides a data transmission device based on an intrinsic security architecture and a human-machine collaboration mechanism, applied at a data receiving end, comprising:

[0033] A data receiving module is used to receive multiple encrypted data. These encrypted data are generated by the data sending end through encryption of original data using various online heterogeneous execution entities in the current heterogeneous execution entity set. Each heterogeneous execution entity corresponds to an encryption method, which includes an encryption algorithm and a key. The current heterogeneous execution entity set is formed based on a dynamic scheduling algorithm. This algorithm determines a comprehensive coefficient based on the security coefficient and usage coefficient of the encryption method, substitutes the comprehensive coefficient into a normal distribution function to determine a probability coefficient, determines a probability value for the encryption method based on the probability coefficient, and determines whether the encryption method is selected for inclusion in the current heterogeneous execution entity set based on the probability value. The security coefficient can be adjusted according to manual adjustment commands.

[0034] The decryption and adjudication module is used to decrypt encrypted data, perform multi-modal adjudication, and generate feedback information based on the adjudication results.

[0035] The information feedback module is used to send the feedback information to the data sending end so that the data sending end updates the current heterogeneous execution set. The update includes: updating the key used by the attacked encryption method, or using the dynamic scheduling algorithm to replace the attacked encryption method, or using the dynamic scheduling algorithm to replace all encryption methods in the current heterogeneous execution set.

[0036] Fifthly, the present invention provides a data transmission system based on an intrinsic security architecture and a human-machine collaboration mechanism, including the data transmission device described in the third aspect and the data transmission device described in the fourth aspect.

[0037] Compared with the prior art, the present invention has the following beneficial effects:

[0038] 1. In the method provided by this invention, when data needs to be transmitted at the data sending end, data is copied and distributed to each online heterogeneous execution entity in the current heterogeneous execution entity set for encryption operation, generating multiple ciphertext data; each heterogeneous execution entity corresponds to an encryption method, the current heterogeneous execution entity set is formed based on a dynamic scheduling algorithm, the dynamic scheduling algorithm is used to determine a comprehensive coefficient based on the security coefficient and usage coefficient of the encryption method, substitute the comprehensive coefficient into a normal distribution function to determine a probability coefficient, determine the probability value of the encryption method based on the probability coefficient, and determine whether the encryption method is selected into the current heterogeneous execution entity set based on the probability value; when the ciphertext data is received at the data receiving end, decryption and multi-mode adjudication are performed, and feedback information is generated to drive the update of the current heterogeneous execution entity set. This scheme introduces dynamism through a dynamic scheduling algorithm, which uses a comprehensive coefficient to determine probability coefficients within a normal distribution function, thus introducing randomness. This makes it difficult for attackers to determine the specific encryption algorithm used at any given time, overcoming the static nature of traditional encryption technologies. Furthermore, it achieves heterogeneous redundancy, allowing multiple functionally equivalent systems to operate in parallel using different encryption methods. This further increases the difficulty for attackers to decrypt and tamper with the data, addressing the limitations of single-mode encryption in traditional technologies and comprehensively improving security. In addition, multi-mode adjudication ensures that even if a single encryption algorithm is cracked and the data is successfully tampered with, the normal output of the data is guaranteed, demonstrating robustness.

[0039] 2. In the method provided by this invention, the security factor can be adjusted according to manual adjustment instructions, introducing the experience and cognitive abilities of human security experts into automated defense. Security managers can manually adjust the security factor of a specified encryption method based on real-time situational information, directly affecting the probability distribution of each encryption method being selected in the dynamic scheduling algorithm. This human-machine collaborative mechanism compensates for the decision-making blind spots that may exist in purely automated systems when facing unknown advanced threats. Security experts can directly intervene in scheduling decisions, achieving better response accuracy and flexibility than purely automated defense by adjusting the security factor of the threatened encryption method.

[0040] 3. The apparatus, system and method provided by this invention have the same technical effects. Attached Figure Description

[0041] Figure 1 This is a flowchart illustrating a data transmission method based on an intrinsic security architecture and a human-machine collaboration mechanism applied to a data sending end, as provided in an embodiment of the present invention.

[0042] Figure 2 This is a flowchart illustrating a data transmission method based on an intrinsic security architecture and a human-machine collaboration mechanism applied to a data receiving end, as provided in an embodiment of the present invention.

[0043] Figure 3 This is a schematic diagram of a data transmission device based on an intrinsic security architecture and a human-machine collaboration mechanism, applied to a data sending end, as provided in an embodiment of the present invention.

[0044] Figure 4 This is a schematic diagram of a data transmission device based on an intrinsic security architecture and a human-machine collaboration mechanism, applied to a data receiving end, as provided in an embodiment of the present invention.

[0045] Figure 5 This is a schematic diagram of the data transmission system based on an intrinsic security architecture and a human-machine collaboration mechanism, provided in an embodiment of the present invention.

[0046] Figure 6 This is a schematic diagram illustrating the negotiation of keys and corresponding parameters in an embodiment of the present invention.

[0047] Figure 7 This is a schematic diagram of a dynamic heterogeneous redundancy architecture for mimicry data security, as exemplified in an embodiment of the present invention.

[0048] Figure 8 This is a schematic diagram illustrating the composition of an arbitrator as exemplified in an embodiment of the present invention.

[0049] Figure 9 This is an example of a steady-state workflow diagram with 4-modular redundancy in an embodiment of the present invention;

[0050] Figure 10 This is an example of a 4-modal redundancy pause steady-state workflow diagram in an embodiment of the present invention.

[0051] Figure 11 A comparison diagram of the defense effects provided in the embodiments of the present invention. Detailed Implementation

[0052] To make the above-mentioned objects, features and advantages of the present invention more apparent and understandable, the present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0053] To facilitate understanding and explanation of the technical solutions of the embodiments of the present invention, the relevant prior art will be described first.

[0054] Mimic Defense (MD) is a proactive defense theory in the field of cyberspace security. Its core is Dynamic Heterogeneous Redundancy (DHR), based on intrinsic security mechanisms. It addresses uncertain threats such as unknown vulnerabilities and backdoors through heterogeneity, dynamism, and redundancy mechanisms. It disrupts the attack chain construction process by dynamically changing the system architecture, operating mechanisms, and camouflage strategies, and employs a multi-mode adjudication mechanism to shield against unknown flaws. The infrastructure includes an input agent, a heterogeneous set of executors, a multi-mode adjudicator, and a negative feedback controller, using a closed-loop control mechanism to replace or clean up abnormal executors for recovery.

[0055] To address the shortcomings of traditional data transmission security protection methods, this invention, based on the theory of intrinsic security mimicry defense and heterogeneous redundancy architecture, provides a data transmission method, device, and system based on intrinsic security architecture and human-machine collaboration mechanism. It extends the dynamic redundancy algorithm in the mimicry defense model, proposes a dynamic scheduling algorithm based on normal distribution, and introduces a human-machine collaborative dynamic control system. Cognitive information is introduced into the policy scheduling calculation loop through a model variable factor (i.e., the security coefficient below), thereby improving the dynamism and flexibility of the defense architecture and realizing the transformation from passive defense to active defense, thus establishing a secure and reliable data transmission structure system.

[0056] The following describes the data transmission method based on an intrinsic security architecture and a human-machine collaboration mechanism applied to the data sending end, which is involved in the embodiments of the present invention.

[0057] like Figure 1 As shown in the figure, the data transmission method based on an intrinsic security architecture and human-machine collaboration mechanism disclosed in this embodiment of the invention is applied to the data sending end and may include the following steps S11 to S13.

[0058] S11. In response to data transmission, data is copied, and the copied data is distributed to each online heterogeneous execution entity in the current heterogeneous execution entity set for encryption operations, generating multiple ciphertext data; wherein, each heterogeneous execution entity corresponds to an encryption method, the encryption method including an encryption algorithm and a key; the current heterogeneous execution entity set is formed based on a dynamic scheduling algorithm, the dynamic scheduling algorithm is used to determine a comprehensive coefficient based on the security coefficient and usage coefficient of the encryption method, substitute the comprehensive coefficient into a normal distribution function to determine a probability coefficient, determine the probability value of the encryption method based on the probability coefficient, and determine whether the encryption method is selected into the current heterogeneous execution entity set based on the probability value; the security coefficient can be adjusted according to manual adjustment instructions;

[0059] S12. Send the multiple encrypted data to the data receiving end so that the data receiving end can decrypt, perform multi-mode adjudication, and generate feedback information based on the adjudication result;

[0060] S13. In response to receiving feedback information from the data receiver, update the current heterogeneous execution set. The update includes: updating the key used by the attacked encryption method, or using the dynamic scheduling algorithm to replace the attacked encryption method, or using the dynamic scheduling algorithm to replace all encryption methods in the current heterogeneous execution set.

[0061] This embodiment introduces dynamism through a dynamic scheduling algorithm. By substituting a comprehensive coefficient into a normal distribution function to determine probability coefficients, randomness is introduced, making it difficult for attackers to determine the specific encryption algorithm used at any given time, thus overcoming the static nature of traditional encryption technologies. Furthermore, heterogeneous redundancy is achieved, with multiple functionally equivalent encryption methods operating in parallel, further increasing the difficulty for attackers to decrypt and tamper with the data, overcoming the single-method limitation of traditional encryption technologies and comprehensively improving security. In addition, multi-mode adjudication ensures that even if a single encryption algorithm is cracked and the data is successfully tampered with, the normal output of the data is guaranteed, demonstrating robustness. This embodiment incorporates the experience and cognitive abilities of human security experts into automated defense. Security managers can manually adjust the security coefficients of specified encryption methods based on real-time situational information, directly affecting the probability distribution of each encryption method selected in the dynamic scheduling algorithm. This human-machine collaborative mechanism compensates for potential decision-making blind spots in purely automated systems facing unknown advanced threats. Security experts can directly intervene in scheduling decisions, adjusting the security coefficients of threatened encryption methods to achieve better response accuracy and flexibility than purely automated defense.

[0062] In this embodiment, each heterogeneous execution entity encrypts the data to be transmitted using its corresponding encryption method, and different heterogeneous execution entities use different encryption methods. In practical applications, before data transmission, the data sender and data receiver negotiate a key in advance. Specifically, the data receiver generates an RSA key pair and sends the public key to the data sender. The data sender generates multiple symmetric keys for data encryption, which are used for different encryption algorithms. These symmetric keys are then encrypted with the RSA public key and sent to the data receiver. The data receiver decrypts the symmetric keys to obtain the symmetric key set. The data sender and / or data receiver maintain a resource pool of encryption algorithms and keys. The combination of encryption algorithms and keys constitutes an encryption method. When sending data, the data sender sends a ciphertext data packet containing an encryption method identifier and the corresponding ciphertext to the data receiver. After receiving the ciphertext data packet, the data receiver can decrypt it using the corresponding encryption algorithm and key based on the encryption method identifier.

[0063] In step S11, data can be copied and distributed by the input agent, and policy scheduling can be performed by the policy scheduler. In step S12, the multi-mode arbiter can obtain the arbitration result. In step S13, the negative feedback controller can feed back control information, and the policy scheduler can update the current heterogeneous execution set.

[0064] In some possible implementations, in step S11, the security factor is negatively correlated with the security of the encryption method; when the encryption method is attacked, the security factor of the attacked encryption method is increased. The usage factor is positively correlated with the number of times the encryption method is used. The comprehensive factor is positively correlated with both the security factor and the usage factor. Preferably, the comprehensive factor is obtained by multiplying the square root of the security factor and the usage factor.

[0065] In this embodiment, the dynamic scheduling algorithm used to form the current heterogeneous execution set or to replace the encryption method in the current heterogeneous execution set can be a dynamic scheduling algorithm based on normal distribution. For example, a dynamic scheduling algorithm based on normal distribution can be implemented as follows:

[0066] Let 's' represent the security coefficient, reflecting the security of the encryption method. In practical applications, it can be set to a real number greater than 0, such as within the range [1.0, 2.0]. This can be manually set. The security coefficient is inversely proportional to the security level of the encryption method and can be adjusted by feedback from attacks. Let 't' represent the usage coefficient, indicating the number of times each encryption method is used. Let 'c' represent the comprehensive coefficient, using a normal distribution function as the carrier function. Using the security coefficient and usage coefficient as parameters, the comprehensive coefficient of the heterogeneity is obtained for further probability calculations. Let 'p' represent the probability coefficient, related to the specific probability value of the selected encryption method. The comprehensive coefficient 'c' is calculated from the security coefficient 's' and the usage coefficient 't', and the specific formula is as follows: , where j>1, can be manually set to reduce the influence of the coefficient t.

[0067] Substituting the comprehensive coefficient c as the independent variable into the carrier function yields the probability coefficient. When the mean... and standard deviation The time carrier function is the standard normal function ; Utilizing the probability coefficients of each encryption method Calculate the specific probability value of each encryption method being selected. ;in and Let and represent the probability coefficients of the nth and ith encryption methods, respectively, and m be the number of encryption methods. This represents the probability that the nth encryption method will be selected.

[0068] A concrete implementation of determining whether an encryption method is selected for the current heterogeneous execution set based on probability values ​​could be: [conducting analysis of the probability values ​​of all available encryption methods]. Accumulate the results for each encryption method. The interval is assigned non-overlapping ranges of numbers. For example, if the probability of the first encryption method is 0.1 and the probability of the second encryption method is 0.2, the corresponding ranges of numbers could be respectively... , Next, a random value between... A random number is generated between the given and the given values. Then, it is determined which encryption method's range the random number falls into, and that encryption method is selected as the target encryption method. Finally, the selected target encryption method is used to replace the encryption methods in the current heterogeneous execution set that need to be eliminated (e.g., due to an attack).

[0069] In this embodiment, the security coefficient is defined to be negatively correlated with the security of the encryption method, thus increasing the security coefficient when attacked. The comprehensive coefficient is positively correlated with both the security coefficient and the usage coefficient, and can be calculated by multiplying the square root of the security coefficient and the usage coefficient. This design ensures that the more frequently an encryption method is attacked and the more times it is used, the larger its comprehensive coefficient becomes, and the lower the probability of it being selected for scheduling. This effectively reduces the attack surface exposure time and improves the overall anti-attack capability of the system.

[0070] In some possible implementations, the method further includes: S14, based on a dynamic time period, using the dynamic scheduling algorithm to replace the encryption method with the highest security coefficient in the current heterogeneous execution set; the security coefficient is negatively correlated with the security of the encryption method.

[0071] In this embodiment, active rotation and feedback-driven passive replacement complement each other, so that even if no obvious attack is detected, the combination of online heterogeneous execution entities can be periodically and forcibly replaced, thereby improving the security of the system in a non-attack state.

[0072] In some possible implementations, step S13, which involves updating the current heterogeneous execution set upon receiving feedback information from the data receiver, includes:

[0073] When the feedback information indicates that the vote has passed but there is an abnormal result, if the number of consecutive attacks on the attacked encryption method does not exceed a preset threshold, the key used by the attacked encryption method is updated; if the number of consecutive attacks on the attacked encryption method exceeds the preset threshold, the dynamic scheduling algorithm is used to replace the attacked encryption method and update the key used by the attacked encryption method.

[0074] When the feedback information indicates that the vote has failed, the dynamic scheduling algorithm is used to replace and schedule all encryption methods in the current heterogeneous execution set, and the keys used by all encryption methods are updated.

[0075] In this embodiment, abnormal situations are categorized into two types: votes passed but with abnormal results, and votes failed. The update strategy is determined based on the number of consecutive attacks on the encryption method. For occasional single interference or non-persistent attacks, only the key of the affected encryption method is updated, avoiding the system overhead and performance degradation caused by frequent replacements. For persistent attacks, the attacked encryption method is replaced. In the case of votes failing, the current heterogeneous execution set is regenerated. This progressive defense strategy balances system security and operational efficiency, avoiding excessive resource consumption.

[0076] The following describes the data transmission method based on an intrinsic security architecture and a human-machine collaboration mechanism applied to the data receiving end, which is involved in the embodiments of the present invention.

[0077] like Figure 2 As shown in the figure, an embodiment of the present invention discloses a data transmission method based on an intrinsic security architecture and a human-machine collaboration mechanism, which is applied to a data receiving end and includes the following steps S21 to S23.

[0078] S21. In response to receiving multiple encrypted data; the multiple encrypted data are generated by the data sending end through encryption of the original data using each online heterogeneous execution entity in the current heterogeneous execution entity set; wherein, each heterogeneous execution entity corresponds to an encryption method, the encryption method including an encryption algorithm and a key; the current heterogeneous execution entity set is formed based on a dynamic scheduling algorithm, the dynamic scheduling algorithm being used to determine a comprehensive coefficient based on the security coefficient and usage coefficient of the encryption method, substitute the comprehensive coefficient into a normal distribution function to determine a probability coefficient, determine a probability value of the encryption method based on the probability coefficient, and determine whether the encryption method is selected into the current heterogeneous execution entity set based on the probability value; the security coefficient can be adjusted according to a manual adjustment command;

[0079] S22. Decrypt the encrypted data, perform multi-mode adjudication, and generate feedback information based on the adjudication results;

[0080] S23. Send the feedback information to the data sending end so that the data sending end updates the current heterogeneous execution set. The update includes: updating the key used by the attacked encryption method, or using the dynamic scheduling algorithm to replace the attacked encryption method, or using the dynamic scheduling algorithm to replace all encryption methods in the current heterogeneous execution set.

[0081] The solution in this embodiment works in conjunction with the solution applied to the data sending end, and its beneficial effects are the same as those of the solution applied to the data sending end, so they will not be described again.

[0082] In some possible implementations, step S22, which involves decrypting the encrypted data, performing multi-mode adjudication, and generating feedback information based on the adjudication result, includes the following steps S221 to S224.

[0083] S221. Decrypt the ciphertext data generated by each of the received online heterogeneous executors to obtain the decrypted data;

[0084] S222. Normalize the decrypted data to obtain a normalized result queue. In this step, feature values ​​for voting comparison are extracted through normalization. The normalization method can be hash processing or other methods for encoding and unifying the format of the decrypted data. The normalization result corresponding to the ciphertext data generated by each online heterogeneous executor is stored as a queue element in the normalized result queue to facilitate subsequent fast and standardized consistency comparison.

[0085] S223. Based on the voting method currently in use, such as majority voting, perform voting processing on the normalized result queue;

[0086] S224. If the voting results are consistent, the correct result is selected for output. In the case of abnormal results, a first feedback message is generated. The first feedback message includes information on the attacked encryption method, which is used by the data sender to update the key used by the corresponding encryption method or to replace and schedule the attacked encryption method. If the voting results are inconsistent, a second feedback message is generated. The second feedback message is used to instruct the data sender to replace and schedule all encryption methods in the current heterogeneous execution set.

[0087] In this embodiment, by decrypting the encrypted data and making multi-modal decisions, and by feeding back different information based on the voting results, a decision-making basis is provided for the data sender to execute a hierarchical response.

[0088] In some possible implementations, in step S224, the first feedback information includes the identifier of the attacked encryption method and the number of consecutive attacks it has suffered. The number of consecutive attacks is used to instruct the data sender to update the key of the attacked encryption method or replace the attacked encryption method. If the number of consecutive attacks does not exceed a preset threshold, the key is updated; otherwise, a replacement scheduling is performed. In this embodiment, the data sender can know the attacked encryption method and the duration of the attack, thereby accurately implementing key update or replacement scheduling operations.

[0089] The following describes a data transmission device based on an intrinsic security architecture and a human-machine collaboration mechanism applied to a data sending end, according to embodiments of the present invention. The data transmission device described below corresponds to the data transmission method described above.

[0090] like Figure 3 As shown in the figure, an embodiment of the present invention discloses a data transmission device based on an intrinsic security architecture and a human-machine collaboration mechanism, applied at a data sending end, comprising:

[0091] The heterogeneous encryption module 11 is used to perform data copying in response to data transmission, and distribute the copied data to each online heterogeneous execution entity in the current heterogeneous execution entity set for encryption operation to generate multiple ciphertext data.

[0092] The data sending module 12 is used to send the multiple encrypted data to the data receiving end, so that the data receiving end can decrypt, perform multi-mode adjudication, and generate feedback information based on the adjudication result;

[0093] The strategy scheduling module 13 is used to form the current heterogeneous execution entity set and update the current heterogeneous execution entity set in response to feedback information received from the data receiving end. Each heterogeneous execution entity corresponds to an encryption method, which includes an encryption algorithm and a key. The current heterogeneous execution entity set is formed based on a dynamic scheduling algorithm. The dynamic scheduling algorithm is used to determine a comprehensive coefficient based on the security coefficient and usage coefficient of the encryption method, substitute the comprehensive coefficient into a normal distribution function to determine a probability coefficient, determine a probability value of the encryption method based on the probability coefficient, and determine whether the encryption method is selected into the current heterogeneous execution entity set based on the probability value. The security coefficient can be adjusted according to manual adjustment instructions. The update includes: updating the key used by the attacked encryption method, or using the dynamic scheduling algorithm to replace the attacked encryption method, or using the dynamic scheduling algorithm to replace all encryption methods in the current heterogeneous execution entity set.

[0094] The following describes a data transmission device based on an intrinsic security architecture and a human-machine collaboration mechanism applied to a data receiving end, according to embodiments of the present invention. The data transmission device described below corresponds to the data transmission method described above.

[0095] like Figure 4 As shown in the figure, an embodiment of the present invention discloses a data transmission device based on an intrinsic security architecture and a human-machine collaboration mechanism, applied at a data receiving end, comprising:

[0096] The data receiving module 21 is used to receive multiple encrypted data. These encrypted data are generated by the data sending end through encryption of the original data using various online heterogeneous execution entities in the current heterogeneous execution entity set. Each heterogeneous execution entity corresponds to an encryption method, which includes an encryption algorithm and a key. The current heterogeneous execution entity set is formed based on a dynamic scheduling algorithm. This algorithm determines a comprehensive coefficient based on the security coefficient and usage coefficient of the encryption method, substitutes the comprehensive coefficient into a normal distribution function to determine a probability coefficient, determines a probability value for the encryption method based on the probability coefficient, and determines whether the encryption method is selected for the current heterogeneous execution entity set based on the probability value. The security coefficient can be adjusted according to manual adjustment commands.

[0097] The decryption and adjudication module 22 is used to decrypt encrypted data, perform multi-mode adjudication, and generate feedback information based on the adjudication results.

[0098] The information feedback module 23 is used to send the feedback information to the data sending end so that the data sending end updates the current heterogeneous execution set. The update includes: updating the key used by the attacked encryption method, or using the dynamic scheduling algorithm to replace the attacked encryption method, or using the dynamic scheduling algorithm to replace all encryption methods in the current heterogeneous execution set.

[0099] The following describes the data transmission system based on an intrinsic security architecture and a human-machine collaboration mechanism involved in the embodiments of the present invention.

[0100] like Figure 5 As shown in the figure, the present invention discloses a data transmission system based on an intrinsic security architecture and a human-machine collaboration mechanism, including a data transmission device applied to the data sending end and a data transmission device applied to the data receiving end as described in the previous embodiment.

[0101] The data transmission device and system provided in this embodiment have the same beneficial effects as the data transmission method described above, and will not be repeated here.

[0102] The data transmission method based on intrinsic security architecture and human-machine collaboration mechanism proposed in this invention will be illustrated below with a specific simulation embodiment. In this example, the data sender is the client and the data receiver is the server. The specific simulation experiment process includes the following steps S31 to S36.

[0103] S31. Use the Unity simulation engine to build a data transmission channel, including negotiation and synchronization of key parameters such as keys, and sending and receiving data.

[0104] S32. Combining the DHR architecture of mimicry defense with encryption technology, the theory of mimicry defense in cyberspace is applied to data security, and an endogenous security mimicry defense model for data security protection is designed.

[0105] S33. Using the normal distribution function as the carrier function, it is applied to the dynamic scheduling algorithm to schedule and replace online heterogeneous executors.

[0106] S34. Collect and summarize attack and defense information on transmitted data, and visualize it.

[0107] S35. Add a manual adjustment module to achieve manual collaborative control;

[0108] S36. Use the Unity engine to perform attack simulation and obtain visual results;

[0109] In step S31, first, the Unity data transmission interface is set up, and then the data transmission channel between the client and the server is configured to realize parameter synchronization between the client and the server.

[0110] like Figure 6 As shown, the specific synchronization process includes the following steps:

[0111] S311. Use asymmetric keys for key negotiation and synchronization; the server generates an RSA key pair.

[0112] S312. The server distributes the public key to the client for subsequent communication key transmission.

[0113] S313. Communication is performed using a symmetric key. The client generates a symmetric key and corresponding parameters, such as encryption mode configuration. For Cipher Block Chaining (CBC) mode, an Initialization Vector (IV) is also generated.

[0114] S314. The client sends a symmetric key encrypted with the RSA public key and corresponding parameters to the server.

[0115] S315. The server uses its private key to decrypt the data sent by the client, obtaining the symmetric key and corresponding parameters for communication.

[0116] like Figure 7 As shown, the intrinsic security mimicry defense model designed in step S32 for data security protection mainly includes a heterogeneous redundant execution layer and a mimicry control layer, wherein the mimicry control layer includes input agent, policy scheduling, multi-mode adjudication and negative feedback control.

[0117] In the heterogeneous redundant execution layer, different encryption algorithms and different keys constitute encryption and decryption resource pools, and different combinations of encryption algorithms and keys constitute encryption and decryption method sets; the encryption and decryption method sets form the current heterogeneous execution set through policy scheduling.

[0118] The processing flow of the mimicry control layer is as follows: When data is input from the client, the input agent copies and distributes the data, encrypts it using online heterogeneous executors in the current heterogeneous executor set, and sends it to the server through the data transmission channel; after receiving the encrypted data, the server decrypts it according to the corresponding encryption algorithm and sends it to the multi-mode arbitrator for multi-mode adjudication; the multi-mode arbitrator processes and votes on the result, outputting correct information and feedback information; the negative feedback controller triggers key updates based on the feedback information; the policy scheduler performs policy scheduling based on the exception information, notifying the input agent to update the current heterogeneous executor set;

[0119] For a specific data transmission test process, the current heterogeneous execution set is first initialized, that is, the encryption method used in the actual process is determined, including the specific encryption algorithm and key combination; when data needs to be transmitted, the input agent is responsible for receiving the input; the initial data is distributed to each online heterogeneous execution for encryption operation.

[0120] Figure 8 This paper illustrates a component structure of a multi-mode arbiter, primarily comprising a normalization processing module, a switcher, a result queue, and a voting system. The normalization processing module handles the standardization of heterogeneous data and the extraction and transmission of switching commands. The switcher dynamically assigns the current voting method and can be controlled by a negative feedback controller. The result queue stores the normalized output results. The voting system includes different voting methods, such as majority voting and consensus voting. In majority voting, a majority vote is considered correct if more than half of the votes are in agreement, while consensus voting requires all votes to be in agreement. The default is majority voting. The negative feedback controller, based on statistically obtained attack frequencies, instructs the switcher to assign a more efficient voting method, such as majority voting, if the attack frequency is below a preset threshold; otherwise, it instructs the switcher to assign a more secure voting method, such as consensus voting, if the attack frequency is above the preset threshold.

[0121] For a specific data reception test process, the server receives the execution results from each online heterogeneous entity, decrypts them to obtain the decrypted data, performs normalized hash processing on the processing results (i.e., extracts the hash feature value of the decrypted data and standardizes its format) to facilitate fast and standardized consistency comparison by the arbiter, determines the current voting method by the switcher, processes the normalized result queue through voting, selects the correct result for output after voting, and feeds back any abnormal information, if the voting results are consistent, selects the correct result for output and passes the encryption method identifier of the abnormal result to the negative feedback controller, if the voting results are inconsistent, sends the abnormal information to the negative feedback controller, triggering the scheduling process.

[0122] In this embodiment, the rules for cleaning and restoring the current heterogeneous execution set based on feedback information are as follows:

[0123] If the vote passes and the number of consecutive attacks on a certain encryption method does not exceed the threshold, then the key and corresponding parameters of the attacked encryption method are updated.

[0124] If the vote passes and the number of consecutive attacks on a certain encryption method exceeds the threshold, dynamic scheduling will be performed and the key and corresponding parameters of the attacked encryption method will be updated.

[0125] If the vote fails, an online heterogeneous execution entity will be used for replacement scheduling, and all keys and corresponding parameters will be updated.

[0126] The policy scheduler performs policy scheduling based on the instructions of the negative feedback controller. This mainly includes calculating the scheduling probability of each encryption method in the encryption and decryption method set; receiving feedback information and replacing the encryption method that is currently under continuous attack; and forcibly replacing the encryption method with the highest security coefficient based on a dynamic time period.

[0127] Figure 9 The diagram illustrates the steady-state workflow of a 4-modal redundancy architecture. Upon receiving a data transmission request, the input agent performs request distribution, copying the data to be transmitted into multiple copies and distributing them to the current set of heterogeneous executors. Each heterogeneous executor corresponds to a combination of encryption algorithm and key; for example, encryption algorithms 1 to 4 combined with keys K1 to K4 result in encryption methods A1 to A4. After decryption and multi-modal adjudication, if the adjudication conditions are met, the correct response data is output. The adjudication result information is transmitted to feedback control. If no anomalies are detected, no scheduling request is requested, and the policy scheduling remains in a dormant state.

[0128] Figure 10The diagram illustrates the paused steady-state workflow of the 4-modal redundancy algorithm. If a differential mode problem is detected during multi-modal decision-making, an error correction output is generated, and the abnormal encryption method, such as A4, is passed to the feedback control. The feedback control then issues a replacement scheduling request to replace A4. Policy scheduling is activated, and a dynamic scheduling algorithm is used to select a new encryption method, such as Ei, from the set of encryption and decryption methods to replace A4.

[0129] In step S34, the specific operations of data visualization include: acquiring various data information during the data transmission process; displaying the number of data transmissions, the number of times each encryption method was used, the total number of attacks, and the number of successful defenses in numerical form; statistically analyzing the proportion of each encryption application and the proportion of those attacked using bar charts; displaying the success and failure ratios of each encryption method in bar charts; and displaying the dynamic scheduling cycle and security prompts in text. A successful defense occurs when, during a data transmission, an encryption method is attacked, but the vote passes, and correct data is received; a failed defense occurs when, during a data transmission, an encryption method is attacked, but the vote fails, and correct data is not received.

[0130] In step S35, the specific operations of human-machine collaborative management include: disabling a certain encryption method according to security prompts; the disabled encryption method does not participate in policy scheduling; security experts can adjust the security coefficient of each encryption method based on experience, thereby affecting the scheduling process of the current executor; and adjusting the scheduling cycle according to the attack frequency.

[0131] In step S36, the specific operations of the attack simulation include: observing whether there are any abnormalities in the use of each encryption and decryption method in the absence of attack; setting up a single attack against a single encryption method and observing whether there are any abnormalities in the data visualization interface; setting up a continuous attack against a single encryption method and observing whether there are any abnormalities in the dynamic scheduling function; setting up single attacks and continuous attacks against multiple encryption methods and observing whether there are any abnormalities in the dynamic scheduling function; setting up a random attack and improving security through manual adjustment.

[0132] In this embodiment, an attack simulation is performed on the data transmission process. During the simulation, different human-machine collaborative management methods are set up. By changing the selection of the dynamic scheduling algorithm through human-machine collaborative management, the use of the current executor is made more adaptable to the current attack situation, and ultimately, the following is obtained: Figure 11 The effects are shown below. In the no-manual-adjustment mode, the initial security coefficients of each encryption method are the same. In the manual-controlled disabling mode, the initial security coefficients of each encryption method are the same, and the encryption method is disabled after being subjected to continuous attacks. In the manual-adjustment cognitive security coefficient mode, the initial security coefficients of each encryption method are set based on experience and manually adjusted according to the attack situation. Figure 11The demonstration showcased the comprehensive defense effect of a random attack involving 100 data transmissions, encompassing no manual adjustment, manual control disabling, and manual adjustment of the cognitive security coefficient.

[0133] Depend on Figure 11 It can be seen that the human-machine collaborative approach is more effective than no human intervention, and the security is further enhanced after more experienced security managers make more detailed adjustments to the security coefficients. The reason for the inconsistent data results initially observed with the manual control disabling method is that when the number of transmissions is small, the impact of a single defense failure is significant, leading to a large defense failure index and errors.

[0134] It should be noted that the various embodiments in this specification are described in a progressive manner, with each embodiment focusing on the differences from other embodiments. Similar or identical parts between embodiments can be referred to interchangeably. For the systems or apparatus disclosed in the embodiments, since they correspond to the methods disclosed in the embodiments, the descriptions are relatively simple, and relevant parts can be referred to the method section.

[0135] It should also be noted that relational terms such as "first" and "second" in this specification are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. The term "and / or" includes any and all combinations of one or more of the associated listed items. The terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, article, or apparatus.

[0136] The above description is only a preferred embodiment of the present invention. It should be noted that for those skilled in the art, several improvements and modifications can be made without departing from the principle of the present invention, and these improvements and modifications should also be considered within the scope of protection of the present invention.

Claims

1. A data transmission method based on an intrinsic security architecture and a human-machine collaboration mechanism, applied at the data sending end, characterized in that, include: In response to data transmission, data replication is performed, and the replicated data is distributed to each online heterogeneous execution entity in the current heterogeneous execution entity set for encryption operations, generating multiple ciphertext data. Each heterogeneous execution entity corresponds to an encryption method, which includes an encryption algorithm and a key. The current heterogeneous execution entity set is formed based on a dynamic scheduling algorithm. This algorithm determines a comprehensive coefficient based on the security and usage coefficients of the encryption method, substitutes the comprehensive coefficient into a normal distribution function to determine a probability coefficient, determines the probability value of the encryption method based on the probability coefficient, and determines whether the encryption method is selected for inclusion in the current heterogeneous execution entity set based on the probability value. The security coefficient can be adjusted according to manual adjustment commands. The multiple encrypted data are sent to the data receiving end so that the data receiving end can decrypt, perform multi-mode adjudication, and generate feedback information based on the adjudication result. In response to receiving feedback information from the data receiver, the current heterogeneous execution set is updated. The update includes: updating the key used by the attacked encryption method, or replacing the attacked encryption method with the dynamic scheduling algorithm, or replacing all encryption methods in the current heterogeneous execution set with the dynamic scheduling algorithm.

2. The data transmission method based on intrinsic security architecture and human-machine collaboration mechanism according to claim 1, characterized in that, The security factor is negatively correlated with the security of the encryption method. When the encryption method is attacked, the security factor of the attacked encryption method is increased. The usage coefficient is positively correlated with the number of times the encryption method is used; the comprehensive coefficient is positively correlated with both the security coefficient and the usage coefficient.

3. The data transmission method based on intrinsic security architecture and human-machine collaboration mechanism according to claim 1, characterized in that, The comprehensive coefficient is obtained by multiplying the safety coefficient by the square root of the usage coefficient.

4. The data transmission method based on intrinsic security architecture and human-machine collaboration mechanism according to claim 1, characterized in that, The method further includes: based on a dynamic time period, using the dynamic scheduling algorithm to replace the encryption method with the highest security coefficient in the current heterogeneous execution set; the security coefficient is negatively correlated with the security of the encryption method.

5. The data transmission method based on intrinsic security architecture and human-machine collaboration mechanism according to claim 1, characterized in that, The step of updating the current heterogeneous execution entity set upon receiving feedback information from the data receiver includes: When the feedback information indicates that the vote has passed but there is an abnormal result, if the number of consecutive attacks on the attacked encryption method does not exceed a preset threshold, the key used by the attacked encryption method is updated; if the number of consecutive attacks on the attacked encryption method exceeds the preset threshold, the dynamic scheduling algorithm is used to replace the attacked encryption method and update the key used by the attacked encryption method. When the feedback information indicates that the vote has failed, the dynamic scheduling algorithm is used to replace and schedule all encryption methods in the current heterogeneous execution set, and the keys used by all encryption methods are updated.

6. A data transmission method based on an intrinsic security architecture and a human-machine collaboration mechanism, applied at a data receiving end, characterized in that, include: In response to receiving multiple encrypted data; The multiple encrypted data are generated by the data sending end through encryption of the original data using various online heterogeneous executors in the current heterogeneous executor set; each heterogeneous executor corresponds to an encryption method, which includes an encryption algorithm and a key; the current heterogeneous executor set is formed based on a dynamic scheduling algorithm, which determines a comprehensive coefficient based on the security coefficient and usage coefficient of the encryption method, substitutes the comprehensive coefficient into a normal distribution function to determine a probability coefficient, determines a probability value of the encryption method based on the probability coefficient, and determines whether the encryption method is selected into the current heterogeneous executor set based on the probability value; the security coefficient can be adjusted according to manual adjustment instructions; The encrypted data is decrypted, multi-modal adjudication is performed, and feedback information is generated based on the adjudication results. The feedback information is sent to the data sending end so that the data sending end updates the current heterogeneous execution set. The update includes: updating the key used by the attacked encryption method, or using the dynamic scheduling algorithm to replace the attacked encryption method, or using the dynamic scheduling algorithm to replace all encryption methods in the current heterogeneous execution set.

7. A data transmission method based on an intrinsic security architecture and human-machine collaboration mechanism according to claim 6, characterized in that, The process of decrypting the encrypted data, performing multi-modal adjudication, and generating feedback information based on the adjudication results includes: The received ciphertext data generated by each online heterogeneous executor is decrypted to obtain the decrypted data; The decrypted data is normalized to obtain a queue of normalized results. The normalized result queue is processed by voting according to the voting method currently in use; If the voting results are consistent, the correct result is selected for output. In the event of an abnormal result, a first feedback message is generated. The first feedback message includes information about the attacked encryption method, which is used by the data sender to update the key used by the corresponding encryption method or to replace the attacked encryption method. If the voting results are inconsistent, a second feedback message is generated. The second feedback message is used to instruct the data sending end to replace and schedule all encryption methods in the current heterogeneous execution set.

8. A data transmission method based on an intrinsic security architecture and a human-machine collaboration mechanism according to claim 7, characterized in that, The first feedback information includes the identifier of the attacked encryption method and the number of consecutive attacks it has been attacked. The number of consecutive attacks is used to instruct the data sender to update the key of the attacked encryption method or replace the attacked encryption method. If the number of consecutive attacks does not exceed a preset threshold, the key is updated; otherwise, a replacement scheduling is performed.

9. A data transmission device based on an intrinsic security architecture and a human-machine collaboration mechanism, applied at a data sending end, characterized in that, include: The heterogeneous encryption module is used to respond to data transmission, perform data copying, and distribute the copied data to each online heterogeneous execution entity in the current heterogeneous execution entity set for encryption operations, generating multiple ciphertext data; The data sending module is used to send the multiple encrypted data to the data receiving end, so that the data receiving end can decrypt, perform multi-mode adjudication, and generate feedback information based on the adjudication result; The strategy scheduling module is used to form the current set of heterogeneous execution entities and update the current set of heterogeneous execution entities in response to feedback information received from the data receiver. Each heterogeneous execution entity corresponds to an encryption method, which includes an encryption algorithm and a key. The current set of heterogeneous execution entities is formed based on a dynamic scheduling algorithm. The dynamic scheduling algorithm is used to determine a comprehensive coefficient based on the security coefficient and usage coefficient of the encryption method, substitute the comprehensive coefficient into a normal distribution function to determine a probability coefficient, determine a probability value of the encryption method based on the probability coefficient, and determine whether the encryption method is selected into the current set of heterogeneous execution entities based on the probability value. The security factor can be adjusted according to manual adjustment instructions; the update includes: updating the key used by the attacked encryption method, or using the dynamic scheduling algorithm to replace the attacked encryption method, or using the dynamic scheduling algorithm to replace all encryption methods in the current heterogeneous execution set.

10. A data transmission device based on an intrinsic security architecture and a human-machine collaboration mechanism, applied at a data receiving end, characterized in that, include: The data receiving module is used to receive multiple encrypted data. The multiple encrypted data are generated by the data sending end through encryption of the original data using various online heterogeneous executors in the current heterogeneous executor set; each heterogeneous executor corresponds to an encryption method, which includes an encryption algorithm and a key; the current heterogeneous executor set is formed based on a dynamic scheduling algorithm, which determines a comprehensive coefficient based on the security coefficient and usage coefficient of the encryption method, substitutes the comprehensive coefficient into a normal distribution function to determine a probability coefficient, determines a probability value of the encryption method based on the probability coefficient, and determines whether the encryption method is selected into the current heterogeneous executor set based on the probability value; the security coefficient can be adjusted according to manual adjustment instructions; The decryption and adjudication module is used to decrypt encrypted data, perform multi-modal adjudication, and generate feedback information based on the adjudication results. The information feedback module is used to send the feedback information to the data sending end so that the data sending end updates the current heterogeneous execution set. The update includes: updating the key used by the attacked encryption method, or using the dynamic scheduling algorithm to replace the attacked encryption method, or using the dynamic scheduling algorithm to replace all encryption methods in the current heterogeneous execution set.

11. A data transmission system based on an intrinsic security architecture and a human-machine collaboration mechanism, characterized in that, It includes the data transmission apparatus according to claim 9 and the data transmission apparatus according to claim 10.

Images