CN118803734A - Data transmission method, system, electronic device and storage medium - Google Patents

Abstract

The present application relates to the field of communication technology, and provides a data transmission method, system, electronic device and storage medium, the method comprising: after determining that the network is abnormal, obtaining the data to be transmitted, performing a disruptive process on the data to be transmitted, and obtaining the target transmission data; performing a signature process on the target transmission data, and obtaining the first signature label information to be processed, and performing an encryption process and invisible feature technology process on the first signature label information to be processed, and obtaining the first target signature label information; transmitting the target transmission data to the receiving end via the first transmission network, and transmitting the first target signature label information to the receiving end via the second transmission network. The present application transmits the data and label information separately, and reduces the risk of the transmission being intercepted. Even if the data and label information are intercepted, since the data is disrupted and the label information is encrypted, the information cannot be obtained normally, thereby improving the security of the data transmission process and reducing the possibility of illegal acquisition.

Description

Data transmission method, system, electronic device and storage medium

Technical Field

The present application relates to the field of communication technology, and in particular to a data transmission method, system, electronic device and storage medium.

Background Art

Since the network architecture of 4G and 5G is different, 5G will also add some new threats in terms of network security compared to 4G, such as MITM attacks. Hackers will steal the international mobile user identity code of user devices through fake base stations to learn the user's location. Hackers may also use fake base stations to tamper with the signal content transmitted by user devices, guide users to malicious websites, conduct fraud and network attacks, and 5G has improved the application of the Internet of Things. Devices can have multiple ways to access the network, which greatly increases the attack surface. However, existing network security defense technologies usually do not guarantee the confidentiality and integrity of security data during transmission, and there is a risk of security data being intercepted and tampered with.

Summary of the invention

The embodiments of the present application provide a data transmission method, system, electronic device and storage medium, which are intended to improve the security of data transmission and reduce the possibility of illegal acquisition.

In a first aspect, an embodiment of the present application provides a data transmission method, applied to a sending end, comprising:

After determining that the network is abnormal, obtaining the data to be transmitted, and performing a disruptive process on the data to be transmitted to obtain the target transmission data;

Performing signature processing on the target transmission data to obtain first signature label information to be processed, and performing encryption processing and invisible feature technology processing on the first signature label information to be processed to obtain first target signature label information;

The target transmission data is transmitted to the receiving end via a first transmission network, and the first target signature label information is transmitted to the receiving end via a second transmission network; the first transmission network and the second transmission network are different transmission networks.

In one embodiment, the transmitting the first target signature tag information to the receiving end through the second transmission network includes:

Transmitting the first target signature tag information to the 5G core module through the 5G core network, so that the 5G core module transmits the first target signature tag information to the receiving end;

The 5G core module transmitting the first target signature tag information to the receiving end specifically includes:

The 5G core module verifies the integrity of the first target signature tag information; if it is determined that the integrity of the first target signature tag information passes the verification, the 5G core module transmits the first target signature tag information to the receiving end through the 5G core network.

In one embodiment, the scrambling the data to be transmitted to obtain target transmission data includes:

Obtaining the data type of the data to be transmitted;

If it is determined that the data type is a document text type, the data to be transmitted is scrambled to obtain multiple segments of first sub-transmission data, and the multiple segments of first sub-transmission data are scrambled according to a first preset scrambling rule to obtain the target transmission data; or,

If the data type is determined to be a picture or video type, the data to be transmitted is subjected to occlusion processing, blurring processing and segmentation processing to obtain multiple pieces of second sub-transmission data, and the multiple pieces of second sub-transmission data are subjected to garbled processing according to a second preset garbled rule to obtain the target transmission data.

In one embodiment, determining a network anomaly includes:

If it is determined that the number of unconnected TCP connections on the server host is greater than a first preset number, it is determined that the network is abnormal; or,

If it is determined that the number of unused data packets in the background server is greater than the second preset number, or the IP request of the background server is abnormal and the source address is false, then it is determined that the network is abnormal; or,

If it is determined that the security performance level value of the connection point is less than a preset threshold, or there is phishing behavior in the network of the connection point, the network is determined to be abnormal.

In a second aspect, an embodiment of the present application provides a data transmission method, applied to a receiving end, comprising:

receiving target transmission data and first target signature tag information transmitted by a sending end;

Obtaining a first Hash value encrypted from the first target signature label information, obtaining a second Hash value decrypted from the first target signature label information, and determining whether the first Hash value and the second Hash value are equal;

If it is determined that the first Hash value and the second Hash value are equal, the target transmission data is restored based on the decrypted first target signature tag information to obtain the data to be transmitted.

In one embodiment, after determining whether the first Hash value and the second Hash value are equal, the method further includes:

If it is determined that the first hash value and the second hash value are not equal, sending feedback information that the integrity of the first target signature label information has not been verified to the sending end, and receiving the second target signature label information retransmitted by the sending end according to the feedback information;

The sending end regenerating the second target signature tag information specifically includes:

The sending end re-signs the target transmission data according to the feedback information to obtain second signature label information to be processed, and re-encrypts the second signature label information to be processed to obtain the second target signature label information; the encryption method of the second target signature label information and the first target signature label information is different.

In a third aspect, an embodiment of the present application provides a data transmission system, including:

The disturbance processing module is used to obtain the data to be transmitted after determining that the network is abnormal, and perform disturbance processing on the data to be transmitted to obtain the target transmission data;

A signature encryption module, used to perform signature processing on the target transmission data to obtain first signature label information to be processed, and perform encryption processing and invisible feature technology processing on the first signature label information to be processed to obtain first target signature label information;

A data transmission module, used to transmit the target transmission data to a receiving end via a first transmission network, and to transmit the first target signature label information to the receiving end via a second transmission network; the first transmission network and the second transmission network are different transmission networks;

A signature receiving module, used for receiving target transmission data and first target signature tag information transmitted by a sending end;

a signature verification module, configured to obtain a first hash value encrypted from the first target signature label information, obtain a second hash value decrypted from the first target signature label information, and determine whether the first hash value and the second hash value are equal;

The data restoration module is used to restore the target transmission data based on the decrypted first target signature tag information to obtain the data to be transmitted if it is determined that the first Hash value and the second Hash value are equal.

In a fourth aspect, an embodiment of the present application provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the data transmission method described in the first and second aspects when executing the computer program.

In a fifth aspect, an embodiment of the present application provides a non-transitory computer-readable storage medium, the non-transitory computer-readable storage medium includes a computer program, and when the computer program is executed by a processor, it implements the data transmission method described in the first aspect and the second aspect.

The data transmission method, system, electronic device and storage medium provided in the embodiments of the present application, after determining that the network is abnormal, obtains the data to be transmitted, performs a scrambling process on the data to be transmitted, and obtains the target transmission data; performs a signature process on the target transmission data to obtain the first signature label information to be processed, performs encryption processing and invisible feature technology processing on the first signature label information to be processed, and obtains the first target signature label information; transmits the target transmission data to the receiving end via the first transmission network, and transmits the first target signature label information to the receiving end via the second transmission network. In the process of data transmission, the data and label information are transmitted separately to reduce the risk of the transmission being intercepted. Even if the data and label information are intercepted, since the data is scrambled and the label information is encrypted, the information cannot be obtained normally, thereby improving the security of the data transmission process and reducing the possibility of illegal acquisition.

BRIEF DESCRIPTION OF THE DRAWINGS

In order to more clearly illustrate the technical solutions in the present application or the prior art, a brief introduction will be given below to the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

FIG1 is a schematic diagram of a data transmission method according to an embodiment of the present invention;

FIG2 is a second flow chart of a data transmission method provided in an embodiment of the present application;

FIG3 is a schematic diagram of the structure of a data transmission system provided in an embodiment of the present application;

FIG. 4 is a schematic diagram of the structure of an electronic device provided in an embodiment of the present application.

DETAILED DESCRIPTION

In order to make the purpose, technical solutions and advantages of this application clearer, the technical solutions in this application will be clearly and completely described below in conjunction with the drawings in the embodiments of this application. Obviously, the described embodiments are part of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

The embodiment of the present invention provides an embodiment of the data transmission method. It should be noted that although the logical order is shown in the flow chart, under certain data, the steps shown or described can be completed in an order different from that here.

Referring to Figure 1, Figure 1 is a flow chart of a data transmission method provided in an embodiment of the present application. The present application provides a data transmission method, applied to a sending end, comprising:

Step 101, after determining that the network is abnormal, obtain the data to be transmitted, and perform a disturbance process on the data to be transmitted to obtain the target transmission data.

The embodiment of the present invention describes the data transmission method by taking the sending end as the execution subject as an example. The sending end includes but is not limited to a sending device, which is used to convert information into a signal suitable for transmission and send it to a device or system of a communication channel.

Specifically, during the data transmission process, the sender detects whether there is an abnormality in the network. Further, after the sender determines that the network is abnormal, it obtains the data to be transmitted, classifies the data type to be transmitted, and performs disturbance processing on the data to be transmitted to obtain the target transmission data. Among them, the data type includes but is not limited to the document text type and the image video type, and the network abnormality includes but is not limited to the Denial of Service (DOS) attack, the Distributed Denial of Service (DDOS) attack and the Man-in-the-Middle (MITM) attack.

It should be noted that a DOS attack aims to send a large number of requests or malicious data packets to the target server or network, making it unable to provide services normally or respond to requests from legitimate users. A DDOS attack controls multiple computers or devices and sends a large number of requests to the target server at the same time, exceeding the server's processing capacity, causing the server to be unable to respond to legitimate users' requests normally, thereby making the target server service unavailable or severely damaged. A MITM attack disguises itself as a legitimate communication terminal and establishes a connection with the communicating parties, enabling it to intercept, tamper with or steal the communication data between the communicating parties.

Step 102, performing signature processing on the target transmission data to obtain first signature label information to be processed, and performing encryption processing and invisible feature technology processing on the first signature label information to be processed to obtain first target signature label information;

Step 103: transmit the target transmission data to a receiving end via a first transmission network, and transmit the first target signature tag information to the receiving end via a second transmission network.

Specifically, the sending end performs signature processing on the target transmission data to obtain the first signature tag information to be processed, and performs encryption processing and invisible feature technology processing on the first signature tag information to be processed to obtain the first target signature tag information. The first signature tag information to be processed includes but is not limited to the restoration rule corresponding to the garbled rule, and the encryption processing of the first signature tag information to be processed adopts the Advanced Encryption Standard (AES) algorithm.

It should be noted that the restoration rule is a rule used to restore the target transmission data obtained after the data to be transmitted is disturbed to its original usable form. The AES algorithm uses a block cipher to divide the plaintext into fixed-length data blocks through four steps: byte substitution, row shift, column confusion, and round key, and encrypt each data block. Invisible feature technology is a technology used to hide or obscure specific characters or words in text by inserting special Unicode characters or spaces in sensitive characters or words to make them invisible or difficult to detect when displayed.

Furthermore, the sending end transmits the target transmission data to the receiving end through the first transmission network, and at the same time, the sending end transmits the first target signature tag information and the first hash value encrypted by the first target signature tag information to the receiving end through the second transmission network. Among them, the receiving end includes but is not limited to a receiving device, which is used to receive the transmitted signal from the communication channel and restore the original information content; the first hash value encrypted by the first target signature tag information is obtained by the sending end by performing a hash function calculation on the original plaintext data of the first signature tag information to be processed; the first transmission network and the second transmission network are different transmission networks, and the transmission network refers to the network infrastructure used to transmit information, including wired networks, wireless networks and the Internet. The transmission network is responsible for transmitting the information encapsulated by the sending end and delivering it to the receiving end. In an embodiment of the present invention, the second transmission network includes but is not limited to a 5G core network.

Furthermore, the receiving end receives the target transmission data transmitted by the sending end through the first transmission network, and at the same time, the receiving end receives the first target signature tag information and the first hash value encrypted by the first target signature tag information transmitted by the sending end through the second transmission network.

Further, the receiving end decrypts the first target signature tag information by decrypting the software development kit (SDK), the symmetric key and the ciphertext code to obtain the decrypted plaintext data of the first target signature tag information. Further, the receiving end performs a hash function calculation on the decrypted plaintext data of the first target signature tag information to obtain a second hash value of the decrypted first target signature tag information.

Furthermore, the receiving end compares the first Hash value encrypted by the first target signature tag information with the second Hash value decrypted by the first target signature tag information to determine whether the first Hash value and the second Hash value are equal.

Further, if it is determined that the first hash value and the second hash value are equal, the receiving end determines that the decrypted first target signature tag information passes the integrity verification. Further, the receiving end determines the data type of the target transmission data, and according to the data type, based on the restoration rule corresponding to the garbled rule in the decrypted first target signature tag information, restores the target transmission data to obtain the data to be transmitted.

Furthermore, if it is determined that the first hash value and the second hash value are not equal, the receiving end determines that the decrypted first target signature tag information fails integrity verification, and sends feedback information that the integrity of the first target signature tag information fails to pass the verification to the sending end.

Furthermore, after receiving the feedback information sent by the receiving end, the sending end re-signs the target transmission data according to the feedback information to obtain the second signature tag information to be processed, and re-encrypts the second signature tag information to be processed to obtain the second target signature tag information. The encryption method of the second target signature tag information is different from that of the first target signature tag information, and the re-encryption of the second signature tag information to be processed adopts an asymmetric encryption algorithm (Rivest-Shamir-Adleman, RSA).

Furthermore, the sending end sends the encrypted second target signature label information to the receiving end through the 5G core network. Furthermore, the receiving end receives the second target signature label information retransmitted by the sending end according to the feedback information through the 5G core network, decrypts the second target signature label information through the RSA algorithm, and obtains the decrypted second target signature label information.

The data transmission method provided in the embodiment of the present application determines that the network is abnormal, obtains the data to be transmitted, performs a scrambling process on the data to be transmitted, and obtains the target transmission data; performs a signature process on the target transmission data to obtain the first signature label information to be processed, performs encryption processing and invisible feature technology processing on the first signature label information to be processed, and obtains the first target signature label information; transmits the target transmission data to the receiving end via the first transmission network, and transmits the first target signature label information to the receiving end via the second transmission network. In the process of data transmission, the data and label information are transmitted separately to reduce the risk of transmission being intercepted. Even if the data and label information are intercepted, since the data is scrambled and the label information is encrypted, the information cannot be obtained normally, thereby improving the security of the data transmission process and reducing the possibility of illegal acquisition.

Furthermore, the first target signature tag information includes a restoration rule corresponding to the garbled code rule, an Internet Protocol (IP) address of the terminal, login account information, an application identification number (Identity Document, ID) and an application key ID.

It should be noted that the IP address of the terminal refers to the unique identification of the terminal device in the network, and communication between devices can be achieved through the IP address; the login account information refers to the identity authentication information of the account and password used by the user when using the application; the application ID refers to the unique identifier assigned to distinguish different applications when developing and using applications. The application key ID refers to the key identifier used to verify identity and authorize access when using the application interface. Therefore, the first target signature label information can provide identity authentication and traceability of data sources, increase the security and credibility of data transmission, and by encrypting the first target signature label information, it can prevent tampering and forgery of the first target signature label information, and ensure the authenticity and integrity of the transmitted first target signature label information.

Further, step 101, based on the determination of network abnormality, includes:

If it is determined that the number of unconnected TCP connections on the server host is greater than a first preset number, it is determined that the network is abnormal; or,

If it is determined that the number of unused data packets in the background server is greater than the second preset number, or the IP request of the background server is abnormal and the source address is false, then it is determined that the network is abnormal; or,

If it is determined that the security performance level value of the connection point is less than a preset threshold, or there is phishing behavior in the network of the connection point, the network is determined to be abnormal.

Specifically, during the process of detecting whether there is an abnormality in the network, if the sending end determines that the number of unconnected Transmission Control Protocol (TCP) connections on the server host is greater than a first preset number, the sending end determines that the network is abnormal, that is, determines that a DOS attack or a DDOS attack exists in the network, wherein the first preset number is set according to actual conditions. If it is determined that the number of unconnected TCP connections on the server host is less than or equal to the first preset number, the sending end determines that there is no DOS attack or a DDOS attack in the network.

Further, if it is determined that the number of unused data packets in the background server is greater than a second preset number, the sending end determines that the network is abnormal, that is, it is determined that there is a DOS attack or a DDOS attack in the network, wherein the second preset number is set according to actual conditions. If it is determined that the number of unused data packets in the background server is less than or equal to the second preset number, the sending end determines that there is no DOS attack or a DDOS attack in the network.

Furthermore, if it is determined that the IP request of the backend server is abnormal and the source address is false, the sender determines that the network is abnormal, that is, it determines that there is a DOS attack or DDOS attack in the network. If it is determined that the IP request of the backend server is normal or the source address is real, the sender determines that there is no DOS attack or DDOS attack in the network.

Further, if it is determined that the security performance level value of the connection point is less than a preset threshold, the sending end determines that the network is abnormal, that is, it determines that there is a MITM attack in the network, wherein the preset threshold is set according to actual conditions. If it is determined that the security performance level value of the connection point is greater than or equal to the preset threshold, the sending end determines that there is no MITM attack in the network.

Furthermore, if it is determined that there is phishing behavior in the network of the connection point, the sending end determines that the network is abnormal, that is, it determines that there is a MITM attack in the network. If it is determined that there is no phishing behavior in the network of the connection point, the sending end determines that there is no MITM attack in the network. It should be noted that phishing behavior obtains users' personal information by disguising as a legitimate communication terminal.

The embodiment of the present invention determines whether there is a DOS attack or a DDOS attack in the network through the number of unconnected TCP connections, the number of unused data packets in the background server, and the abnormal IP request of the background server with a false source address. It determines whether there is a MITM attack in the network through the security performance level value of the connection point and the phishing behavior in the network of the connection point. By effectively determining the abnormal situation of the network, the security performance of the network is improved, and the security of the network and the personal information of the user is protected.

Further, step 101 obtains target transmission data based on the scrambling of the data to be transmitted, including:

Obtaining the data type of the data to be transmitted;

If it is determined that the data type is a document text type, the data to be transmitted is scrambled to obtain multiple segments of first sub-transmission data, and the multiple segments of first sub-transmission data are scrambled according to a first preset scrambling rule to obtain the target transmission data; or,

If the data type is determined to be a picture or video type, the data to be transmitted is subjected to occlusion processing, blurring processing and segmentation processing to obtain multiple pieces of second sub-transmission data, and the multiple pieces of second sub-transmission data are subjected to garbled processing according to a second preset garbled rule to obtain the target transmission data.

Specifically, the sending end obtains the data type of the data to be transmitted, wherein the data type of the data to be transmitted includes but is not limited to a document text type and a picture or video type.

Furthermore, if the data type is determined to be a document text type, the sending end scrambles the data to be transmitted to obtain multiple segments of first sub-transmission data. Therefore, it can be understood that the sending end scrambles the document text type data to be transmitted and forms multiple segments of document text data through scrambling. Further, the sending end performs scrambling on the multiple segments of first sub-transmission data according to a first preset scrambling rule, converts the multiple segments of first sub-transmission data into scrambled form through scrambling to obtain target transmission data, wherein the first preset scrambling rule is set according to actual conditions.

Furthermore, if the data type is determined to be a picture or video type, the transmitting end performs occlusion processing, blur processing, and segmentation processing on the data to be transmitted to obtain multiple pieces of second sub-transmission data. Therefore, it can be understood that the transmitting end performs scrambling processing on the picture or video type data to be transmitted, and forms multiple pieces of picture or video data through scrambling processing. Furthermore, the transmitting end performs scrambling processing on the multiple pieces of second sub-transmission data according to the second preset scrambling rule, converts the multiple pieces of second sub-transmission data into scrambled form through scrambling processing, and obtains the target transmission data, wherein the second preset scrambling rule is set according to the actual situation.

The embodiment of the present invention obtains the data type of the data to be transmitted, scrambles the data to be transmitted to obtain sub-transmission data, and scrambles the sub-transmission data according to preset scrambling rules corresponding to different data types to obtain target transmission data. The scrambling and scrambling processes effectively hide the real content of the transmission data, making it difficult to interpret and crack the transmission data during the transmission process, and it is difficult to restore the original data when the transmission data is intercepted or stolen, thereby improving the security of the transmission data and the ability to resist attacks.

Furthermore, step 103 transmits the first target signature label information to the receiving end based on the second transmission network, including:

Transmitting the first target signature tag information to the 5G core module through the 5G core network, so that the 5G core module transmits the first target signature tag information to the receiving end;

The 5G core module transmitting the first target signature tag information to the receiving end specifically includes:

The 5G core module verifies the integrity of the first target signature tag information; if it is determined that the integrity of the first target signature tag information passes the verification, the 5G core module transmits the first target signature tag information to the receiving end through the 5G core network.

It should be noted that before the first signature tag information to be processed is encrypted and processed by invisible feature technology, the sending end performs a hash function calculation on the original plaintext data of the first signature tag information to be processed to obtain the first hash value encrypted for the first target signature tag information. Furthermore, the sending end packages the first hash value and the first target signature tag information, and sends the packaged first hash value and first target signature tag information to the receiving end through the 5G network.

Specifically, the sending end transmits the first hash value and the first target signature tag information encrypted by the first target signature tag information to the 5G core module through the 5G core network. After receiving the first hash value and the first target signature tag information encrypted by the sending end, the 5G core module transmits the first hash value and the first target signature tag information to the receiving end, wherein the 5G core module includes but is not limited to a 5G base station, performs data transmission through the 5G core network, realizes communication with the terminal device, and provides data transmission and network connection management functions.

It should be noted that the hash value is a string of fixed length that is used to uniquely identify data, and the calculation of the hash value is an irreversible process. The hash value is unique and irreversible. Therefore, in the process of verifying the integrity of the first target signature label information, the second hash value decrypted from the first target signature label information can be compared with the first hash value encrypted from the first target signature label information to verify whether the first target signature label information has been tampered with or forged.

Further, the 5G core module transmits the first hash value and the first target signature tag information to the receiving end, specifically including: after the 5G core module receives the first target signature information transmitted by the sending end, the first target signature tag information is decrypted by decrypting the software development kit, the symmetric key and the ciphertext code to obtain the decrypted plaintext data of the first target signature tag information. Further, the 5G core module performs a hash function calculation on the decrypted plaintext data of the first target signature tag information to obtain the decrypted hash value of the first target signature tag information.

Furthermore, the 5G core module compares the first hash value encrypted for the first target signature tag information with the hash value decrypted for the first target signature tag information to determine whether the first hash value encrypted for the first target signature tag information and the hash value decrypted for the first target signature tag information are equal.

Further, if it is determined that the first hash value encrypted for the first target signature tag information and the hash value decrypted for the first target signature tag information are equal, that is, it is determined that the integrity of the first target signature tag information is verified, the 5G core module transmits the first hash value encrypted for the first target signature tag information and the first target signature tag information to the receiving end through the 5G core network.

The embodiment of the present invention realizes the transmission of the first target signature tag information between the sending end and the receiving end through the 5G core network, and verifies the integrity of the first target signature tag information during the transmission of the first target signature tag information. The method of securely strengthening the transmission of the first target signature tag information through the 5G core network is used, and before the attack occurs, the network abnormality is detected, and the program library related to the device is verified through the 5G core module to ensure the integrity and confidentiality of the transmitted first target signature tag information, and at the same time, the user's personal information is blurred and virtualized to reduce potential network security risks.

Further, referring to Figure 2, Figure 2 is one of the flow charts of the data transmission method provided in the embodiment of the present application. The embodiment of the present application provides a data transmission method, applied to a receiving end, comprising:

Step 201, receiving target transmission data and first target signature tag information transmitted by a sending end;

Step 202, obtaining a first Hash value encrypted from the first target signature label information, obtaining a second Hash value decrypted from the first target signature label information, and determining whether the first Hash value and the second Hash value are equal;

Step 203: If it is determined that the first Hash value and the second Hash value are equal, the target transmission data is restored based on the decrypted first target signature tag information to obtain the data to be transmitted.

Specifically, the receiving end receives the target transmission data, the first target signature tag information and the first hash value transmitted by the sending end. That is, the receiving end receives the first target signature tag information and the first hash value transmitted by the sending end through the 5G core network. At the same time, the receiving end receives the target transmission data transmitted by the sending end through the first transmission network.

Further, the receiving end decrypts the first target signature tag information by decrypting the software development kit, the symmetric key and the ciphertext code, and obtains the plaintext data of the first target signature tag information after decryption. Further, the receiving end performs a hash function calculation on the plaintext data of the first target signature tag information after decryption, obtains the second hash value of the first target signature tag information decrypted, and obtains the first hash value of the first target signature tag information encrypted.

Furthermore, the receiving end compares the first Hash value encrypted by the first target signature tag information with the second Hash value decrypted by the first target signature tag information to determine whether the first Hash value and the second Hash value are equal.

Further, if it is determined that the first hash value and the second hash value are equal, the receiving end determines that the decrypted first target signature tag information passes the integrity verification. Further, the receiving end determines the data type of the target transmission data, and according to the data type, based on the restoration rule corresponding to the garbled rule in the decrypted first target signature tag information, restores the target transmission data to obtain the data to be transmitted.

Therefore, it can be understood that if the data type of the target transmission data is determined to be a document text type, the receiving end will restore the target transmission data based on the restoration rule corresponding to the garbled rule in the decrypted first target signature label information, and reversely combine and arrange it in the scrambled order to obtain the data to be transmitted. If the data type of the target transmission data is determined to be a picture or video type, the receiving end will restore the target transmission data based on the restoration rule corresponding to the garbled rule in the decrypted first target signature label information, and restore, combine, deblur and de-occlude the cut pictures and videos to obtain the data to be transmitted.

The embodiment of the present invention obtains a first hash value encrypted by the first target signature label information and a second hash value decrypted by the first target signature label information, performs hash value comparison on the first hash value and the second hash value, determines that the first hash value and the second hash value are equal, and restores the target transmission data based on a restoration rule corresponding to the garbled rule in the decrypted first target signature label information to obtain the data to be transmitted. Through hash value comparison, the integrity and security of the first target signature label information are ensured to prevent the first target signature label information from being tampered with or forged, and then based on the restoration rule, the signature label information is restored to its original readable form, thereby improving the readability and comprehensibility of the information.

Further, after determining whether the first Hash value and the second Hash value are equal, the method further includes:

If it is determined that the first hash value and the second hash value are not equal, sending feedback information that the integrity of the first target signature label information has not been verified to the sending end, and receiving the second target signature label information retransmitted by the sending end according to the feedback information;

The sending end regenerating the second target signature tag information specifically includes:

The sending end re-signs the target transmission data according to the feedback information to obtain second signature label information to be processed, and re-encrypts the second signature label information to be processed to obtain the second target signature label information; the encryption method of the second target signature label information and the first target signature label information is different.

Specifically, if it is determined that the first hash value and the second hash value are not equal, the receiving end determines that the decrypted first target signature tag information fails the integrity verification, and sends feedback information that the integrity of the first target signature tag information fails the verification to the sending end.

Furthermore, after receiving the feedback information sent by the receiving end, the sending end re-signs the target transmission data according to the feedback information to obtain the second signature label information to be processed, and re-encrypts the second signature label information to be processed to obtain the second target signature label information, wherein the encryption method of the second target signature label information is different from that of the first target signature label information, and the RSA algorithm is used to re-encrypt the second signature label information to be processed. It should be noted that when decrypting the second target signature label information, since the RSA algorithm is an asymmetric encryption algorithm, the RSA algorithm needs to be used for decryption.

Furthermore, the sending end sends the encrypted second target signature label information to the receiving end through the 5G core network. Furthermore, the receiving end receives the second target signature label information retransmitted by the sending end according to the feedback information through the 5G core network, decrypts the second target signature label information through the RSA algorithm, and obtains the decrypted second target signature label information.

In the embodiment of the present invention, the receiving end informs the sending end through feedback information that the integrity of the first target signature label information has not passed the verification, so that the sending end regenerates the second target signature label information, thereby ensuring the security and confidentiality of the second target signature label information. Since the second target signature label information is encrypted, the information cannot be obtained normally, thereby improving the security of the data transmission process and reducing the possibility of illegal acquisition.

The data transmission system provided in an embodiment of the present application is described below. The data transmission system described below and the data transmission method described above can be referenced to each other.

Refer to Figure 3, which is a structural diagram of the data transmission system provided in an embodiment of the present application. The data transmission system provided in an embodiment of the present application includes a disturbance processing module 301, a signature encryption module 302, a data transmission module 303, a signature receiving module 304, a signature verification module 305 and a data restoration module 306.

The disturbance processing module 301 is used to obtain the data to be transmitted after determining that the network is abnormal, and perform disturbance processing on the data to be transmitted to obtain the target transmission data;

The signature encryption module 302 is used to perform signature processing on the target transmission data to obtain first signature label information to be processed, and perform encryption processing and invisible feature technology processing on the first signature label information to be processed to obtain first target signature label information;

The data transmission module 303 is used to transmit the target transmission data to the receiving end through a first transmission network, and to transmit the first target signature label information to the receiving end through a second transmission network; the first transmission network and the second transmission network are different transmission networks;

The signature receiving module 304 is used to receive the target transmission data and the first target signature tag information transmitted by the sending end;

The signature verification module 305 is used to obtain a first hash value encrypted from the first target signature label information, obtain a second hash value decrypted from the first target signature label information, and determine whether the first hash value and the second hash value are equal;

The data restoration module 306 is configured to restore the target transmission data based on the decrypted first target signature tag information to obtain the data to be transmitted if it is determined that the first hash value is equal to the second hash value.

In one embodiment, the disturbance processing module 301 is further configured to:

If it is determined that the number of unconnected TCP connections on the server host is greater than a first preset number, it is determined that the network is abnormal; or,

If it is determined that the number of unused data packets in the background server is greater than the second preset number, or the IP request of the background server is abnormal and the source address is false, then it is determined that the network is abnormal; or,

If it is determined that the security performance level value of the connection point is less than a preset threshold, or there is phishing behavior in the network of the connection point, the network is determined to be abnormal.

In one embodiment, the disturbance processing module 301 is further configured to:

Obtaining the data type of the data to be transmitted;

If it is determined that the data type is a document text type, the data to be transmitted is scrambled to obtain multiple segments of first sub-transmission data, and the multiple segments of first sub-transmission data are scrambled according to a first preset scrambling rule to obtain the target transmission data; or,

If the data type is determined to be a picture or video type, the data to be transmitted is subjected to occlusion processing, blurring processing and segmentation processing to obtain multiple pieces of second sub-transmission data, and the multiple pieces of second sub-transmission data are subjected to garbled processing according to a second preset garbled rule to obtain the target transmission data.

In one embodiment, the data transmission module 303 is further used to:

Transmitting the first target signature tag information to the 5G core module through the 5G core network, so that the 5G core module transmits the first target signature tag information to the receiving end;

The 5G core module transmitting the first target signature tag information to the receiving end specifically includes:

The 5G core module verifies the integrity of the first target signature tag information; if it is determined that the integrity of the first target signature tag information passes the verification, the 5G core module transmits the first target signature tag information to the receiving end through the 5G core network.

In one embodiment, the signature verification module 305 is further used to:

If it is determined that the first hash value and the second hash value are not equal, sending feedback information that the integrity of the first target signature label information has not been verified to the sending end, and receiving the second target signature label information retransmitted by the sending end according to the feedback information;

The sending end regenerating the second target signature tag information specifically includes:

The sending end re-signs the target transmission data according to the feedback information to obtain second signature label information to be processed, and re-encrypts the second signature label information to be processed to obtain the second target signature label information; the encryption method of the second target signature label information and the first target signature label information is different.

The data transmission system provided by the embodiment of the present application determines that the network is abnormal, obtains the data to be transmitted, performs a scrambling process on the data to be transmitted, and obtains the target transmission data; performs a signature process on the target transmission data to obtain the first signature label information to be processed, performs encryption processing and invisible feature technology processing on the first signature label information to be processed, and obtains the first target signature label information; transmits the target transmission data to the receiving end via the first transmission network, and transmits the first target signature label information to the receiving end via the second transmission network. In the process of data transmission, the data and label information are transmitted separately to reduce the risk of transmission being intercepted. Even if the data and label information are intercepted, since the data is scrambled and the label information is encrypted, the information cannot be obtained normally, thereby improving the security of the data transmission process and reducing the possibility of illegal acquisition.

FIG4 illustrates a schematic diagram of the physical structure of an electronic device. As shown in FIG4 , the electronic device may include: a processor 410, a communication interface 420, a memory 430, and a communication bus 440, wherein the processor 410, the communication interface 420, and the memory 430 communicate with each other through the communication bus 440. The processor 410 may call a computer program in the memory 430 to execute the steps of the data transmission method, for example, including:

After determining that the network is abnormal, obtaining the data to be transmitted, and performing a disruptive process on the data to be transmitted to obtain the target transmission data;

Performing signature processing on the target transmission data to obtain first signature label information to be processed, and performing encryption processing and invisible feature technology processing on the first signature label information to be processed to obtain first target signature label information;

The target transmission data is transmitted to the receiving end via a first transmission network, and the first target signature label information is transmitted to the receiving end via a second transmission network; the first transmission network and the second transmission network are different transmission networks.

In addition, the logic instructions in the above-mentioned memory 430 can be implemented in the form of a software functional unit and can be stored in a computer-readable storage medium when it is sold or used as an independent product. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art, and the computer software product is stored in a storage medium, including several instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a disk or an optical disk.

On the other hand, an embodiment of the present application further provides a non-transitory computer-readable storage medium, wherein the non-transitory computer-readable storage medium includes a computer program, and the computer program can be stored on the non-transitory computer-readable storage medium. When the computer program is executed by a processor, the computer can perform the steps of the data transmission method provided in the above embodiments, for example, including:

After determining that the network is abnormal, obtaining the data to be transmitted, and performing a disruptive process on the data to be transmitted to obtain the target transmission data;

Performing signature processing on the target transmission data to obtain first signature label information to be processed, and performing encryption processing and invisible feature technology processing on the first signature label information to be processed to obtain first target signature label information;

The target transmission data is transmitted to the receiving end via a first transmission network, and the first target signature label information is transmitted to the receiving end via a second transmission network; the first transmission network and the second transmission network are different transmission networks.

The device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative labor.

Through the description of the above implementation methods, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a necessary general hardware platform, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solution is essentially or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as ROM/RAM, a disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or some parts of the embodiments.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit it. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims (10)

1. The data transmission method is characterized by being applied to a transmitting end and comprising the following steps:

after determining network abnormality, acquiring data to be transmitted, and performing scrambling processing on the data to be transmitted to obtain target transmission data;

performing signature processing on the target transmission data to obtain first signature label information to be processed, and performing encryption processing and invisible feature technical processing on the first signature label information to be processed to obtain first target signature label information;

transmitting the target transmission data to a receiving end through a first transmission network, and transmitting the first target signature label information to the receiving end through a second transmission network; the first transport network and the second transport network are different transport networks.

2. The data transmission method according to claim 1, wherein the transmitting the first target signature tag information to the receiving end via the second transmission network includes:

Transmitting the first target signature tag information to a 5G core module through a 5G core network so that the 5G core module can transmit the first target signature tag information to the receiving end;

the transmitting, by the 5G core module, the first target signature tag information to the receiving end specifically includes:

The 5G core module verifies the integrity of the first target signature tag information; and if the integrity of the first target signature label information is confirmed to pass verification, the 5G core module transmits the first target signature label information to the receiving end through the 5G core network.

3. The data transmission method according to claim 1, wherein the scrambling the data to be transmitted to obtain target transmission data includes:

acquiring the data type of the data to be transmitted;

if the data type is determined to be the document text type, scrambling the data to be transmitted to obtain multiple sections of first sub-transmission data, and scrambling the multiple sections of first sub-transmission data according to a first preset scrambling rule to obtain the target transmission data; or alternatively, the first and second heat exchangers may be,

If the data type picture video type is determined, carrying out shielding processing, blurring processing and slitting processing on the data to be transmitted to obtain a plurality of pieces of second sub-transmission data, and carrying out scrambling processing on the plurality of pieces of second sub-transmission data according to a second preset scrambling rule to obtain the target transmission data.

4. The data transmission method according to claim 1, wherein the determining of the network anomaly comprises:

if the number of the unconnected TCP connections on the server host is determined to be larger than the first preset number, determining that the network is abnormal; or alternatively, the first and second heat exchangers may be,

If the number of unused data packets in the background server is determined to be larger than the second preset number, or if the IP request of the background server is abnormal and the source address is false, determining that the network is abnormal; or alternatively, the first and second heat exchangers may be,

If the security performance degree value of the connection point is smaller than the preset threshold value, or the network of the connection point has fishing behavior, determining that the network is abnormal.

5. The data transmission method according to any one of claims 1 to 4, wherein the first target signature tag information includes a restore rule corresponding to a scrambling code rule, an IP address of a terminal, login account information, an application ID, and an application key ID.

6. A data transmission method, applied to a receiving end, comprising:

receiving target transmission data and first target signature label information transmitted by a transmitting end;

Acquiring a first hash value for encrypting the first target signature tag information, acquiring a second hash value for decrypting the first target signature tag information, and determining whether the first hash value and the second hash value are equal;

And if the first hash value is equal to the second hash value, restoring the target transmission data based on the decrypted first target signature label information to obtain the data to be transmitted.

7. The method of data transmission according to claim 6, wherein after determining whether the first hash value and the second hash value are equal, further comprising:

if the first hash value and the second hash value are determined to be unequal, sending feedback information that the integrity of the first target signature label information is not verified to the sending end, and receiving second target signature label information retransmitted by the sending end according to the feedback information;

The step of the sender regenerating the second target signature label information specifically includes:

The sending end performs re-signing processing on the target transmission data according to the feedback information to obtain second to-be-processed signature tag information, and performs re-encryption processing on the second to-be-processed signature tag information to obtain second target signature tag information; the second target signature tag information and the first target signature tag information are encrypted in different manners.

8. A data transmission system, comprising:

the disturbing processing module is used for acquiring data to be transmitted after network abnormality is determined, and disturbing the data to be transmitted to obtain target transmission data;

the signature encryption module is used for performing signature processing on the target transmission data to obtain first signature label information to be processed, and performing encryption processing and invisible feature technology processing on the first signature label information to be processed to obtain first target signature label information;

The data transmission module is used for transmitting the target transmission data to a receiving end through a first transmission network and transmitting the first target signature label information to the receiving end through a second transmission network; the first transmission network and the second transmission network are different transmission networks;

the signature receiving module is used for receiving the target transmission data and the first target signature label information transmitted by the transmitting end;

The signature verification module is used for obtaining a first hash value for encrypting the first target signature label information, obtaining a second hash value for decrypting the first target signature label information and determining whether the first hash value and the second hash value are equal;

And the data restoration module is used for restoring the target transmission data based on the decrypted first target signature label information if the first hash value is equal to the second hash value, so as to obtain the data to be transmitted.

9. An electronic device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, characterized in that the processor implements the data transmission method of any of claims 1 to 5, or 6 to 7 when executing the computer program.

10. A non-transitory computer readable storage medium comprising a computer program, characterized in that the computer program, when executed by a processor, implements the data transmission method of any one of claims 1 to 5, or 6 to 7.