Stream-Specific Key Encryption for Secure Data Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data transmission methods use the same secret key for encryption across different links, compromising the security of data transmission.
Innovation Solution
Implement a shared master secret key negotiation between sender and receiver, generating content secret keys based on stream identification information, and encrypting these keys to obtain encryption secret keys for differential protection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If the same secret key is used for encryption across different links, then the encryption process is simple, but the security of data transmission deteriorates
Solution Approach 1:
The patent segments the single secret key into multiple content-specific secret keys (first content secret key, second content secret key, etc.) corresponding to different data streams. Each content secret key is independently generated and used for encrypting specific content, thereby achieving differential protection while maintaining manageable complexity through systematic key organization
Solution Approach 2:
The patent applies local quality by assigning different encryption characteristics to different data streams. Each content secret key is tailored to its specific content type and transmission link, providing localized security optimization rather than uniform encryption, thus enhancing overall security without proportionally increasing system complexity
2Reliability
If different secret keys are used for different data streams, then the security of data transmission is improved, but the complexity of key management increases
Solution Approach 1:
The patent introduces a master secret key as an intermediary that mediates between the authentication process and multiple content secret keys. The master secret key is negotiated during authentication and then used to derive all content-specific secret keys, simplifying key management by providing a single root key that controls all content encryption keys
Solution Approach 2:
The patent performs preliminary action by negotiating and establishing the master secret key during the authentication phase before any data transmission occurs. This pre-established master key is then used to generate all necessary content secret keys in advance, avoiding the need for complex real-time key negotiation and management during data transmission
Data Source
AI summary
The embodiments of the present application belong to the technical field of artificial intelligence. Provided are a data transmission method and apparatus, and a device and a storage medium. The method comprises: a sending end and a receiving end performing a shared-key check, so as to obtain key check information; if the key check information indicates that no key is shared, the sending end and the receiving end performing key negotiation processing, so as to obtain a shared main key; the sending end generating a content key according to preset stream identification information; the sending end performing encryption processing on the content key according to the shared main key, so as to obtain an encrypted key, and sending the encrypted key to the receiving end; the sending end performing, according to the content key and the stream identification information, encryption processing on original data to be sent, so as to obtain target data, and sending the target data to the receiving end; and the receiving end performing decryption processing on the target data according to the stream identification information, the shared main key and the encrypted key, so as to obtain the original data. By means of the embodiments of the present application, data of different links can be protected in a differentiated manner, and the security of data transmission can be improved.