CN113923656A

CN113923656A - Anti-interception wireless encryption transmission method and device

Info

Publication number: CN113923656A
Application number: CN202111211957.7A
Authority: CN
Inventors: 杨华; 杨革文
Original assignee: Shenzhen No1 Building Technology Development Co ltd
Current assignee: Shenzhen No1 Building Technology Development Co ltd
Priority date: 2021-10-18
Filing date: 2021-10-18
Publication date: 2022-01-11
Anticipated expiration: 2041-10-18
Also published as: CN113923656B

Abstract

The application provides an anti-interception wireless encryption transmission method and device, comprising a receiving end receiving an initial data block through an initial transmission mode; the sending end is used for determining a transmission mode corresponding to the sub data block and sending the corresponding sub data block to the receiving end through the transmission mode; when the verification parameters are matched with the demonstration parameters of the sending end, the receiving end determines the transmission mode corresponding to the sub data block and receives the corresponding sub data block through the transmission mode; and when the sub-data blocks corresponding to the data packet are received, the receiving end combines the initial data block and all the sub-data blocks to generate the data packet. The data transmission safety is ensured by presetting an initial transmission mode and at least one non-initial transmission mode which are matched with each other at a sending end and a receiving end, and carrying out mutual authentication of the sending end and the receiving end in the initial transmission mode, and data packets are transmitted in the initial transmission mode and the non-initial transmission mode, so that the data transmission safety is further ensured.

Description

Anti-interception wireless encryption transmission method and device

Technical Field

The present application relates to the field of wireless transmission technologies, and in particular, to an anti-interception wireless encryption transmission method and apparatus.

Background

The modern world is a high-speed automation world, and various devices can be connected with computers and can also be connected with each other. Nowadays, compared with a wired technology, a wireless technology has the advantages of low cost, convenience in carrying, no need of wiring and the like, and is widely applied to various devices and systems, such as mobile communication devices, wireless remote control devices, data transmission devices and the like.

The existing wireless transmission technology has the defects that: 1. super-regeneration simple modulation, whole-process interception, direct demodulation of pulse full sequence, but the transmission mode can be cracked through direct fast replication; 2. the fixed transmission mode is adopted, all pulse sequences are directly recorded, then the copying aerial signal copying is realized by sending out the copying recording time sequence, and the automatic learning copying is very easy to realize by using the MCU in the process, so that an unauthorized person has a control right, the remote control significance is lost, and even great asset loss or fire safety hidden danger is brought; 3. the rolling code remote control mode is fixed in the same transmission way, enough data can be received and recorded in the whole process, signal cracking is achieved, repeated code distinguishing is limited due to limited storage of a rolling receiving end, and the problems that remote control is invalid and the like are caused by asynchronous rolling counting of the receiving end and a sending end easily.

Therefore, the existing wireless transmission technology has low security, and may bring huge loss once being attacked.

Disclosure of Invention

In view of the problems described above, the present application is directed to providing a method and apparatus for wireless encrypted transmission that overcomes or at least partially solves the problems described above, and includes:

an anti-interception wireless encryption transmission method relates to a sending end and a receiving end, wherein the receiving end comprises verification parameters; the sending end and the receiving end comprise an initial transmission mode and at least one non-initial transmission mode; the method comprises the following steps: the sending end is used for splitting the data packet into at least two sub data blocks, and generating an initial data block according to a first sub data block, the demonstration parameter of the sending end and a non-initial transmission mode distribution rule; the sending end is further configured to send the initial data block to the receiving end through the initial transmission mode;

when receiving a starting data block corresponding to the data packet sent by the sending end, the receiving end receives the starting data block through the initial transmission mode; the sending end is further configured to determine a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule, and send the corresponding sub data block to the receiving end through the transmission mode;

when the verification parameters are matched with the demonstration parameters of the sending end, the receiving end determines the transmission mode corresponding to the sub data block according to the non-initial transmission mode distribution rule, and receives the corresponding sub data block through the transmission mode;

and when the sub data blocks corresponding to the data packet are received completely, the receiving end combines the initial data block and all the sub data blocks to generate the data packet.

Optionally, the sending end and the receiving end are respectively provided with a transmission mode list containing the same non-initial transmission modes arranged according to a pseudo-random order; a pair of the non-initial transmission modes comprises two transmission modes matched with each other; the step that the receiving end determines the transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule and receives the corresponding sub data block through the transmission mode comprises the following steps: the non-initial transmission mode allocation rule comprises any pair of initial sequence number of the non-initial transmission mode, sequence number of the current sub data block and the transmission mode list; the number of the sequence numbers is less than the logarithm of the non-initial transmission modes in the transmission mode list;

the receiving end determines a transmission mode corresponding to the sub data block according to the initial sequence number of the non-initial transmission mode, the sequence number of the current sub data block and the transmission mode list;

and the receiving end receives the corresponding sub data block through the transmission mode.

Optionally, the step of determining, by the receiving end, the transmission mode corresponding to the sub data block according to the starting sequence number of the non-initial transmission mode, the sequence number of the current sub data block, and the transmission mode list includes:

the receiving end determines the number of the serial numbers of the transmission modes corresponding to the sub data blocks according to a formula A ═ r + n)% L; wherein r is the initial sequence number of the non-initial transmission mode, n is the sequence number of the current sub data block, L is the length of the transmission mode list,% is the operation of complementation, A is the sequence number of the next non-initial transmission mode;

and the receiving end determines the transmission mode corresponding to the sub data block according to the number of the transmission modes corresponding to the sub data block and the transmission mode list.

Optionally, the method involves a transmitting end and a receiving end, the transmitting end and the receiving end including an initial transmission mode and at least one non-initial transmission mode; the method comprises the following steps:

the sending end splits the data packet into at least two sub data blocks, and generates an initial data block according to a first sub data block, the demonstration parameter of the sending end and a non-initial transmission mode distribution rule;

the sending end sends the initial data block to the receiving end through the initial transmission mode; the receiving end is used for receiving the initial data block through the initial transmission mode when receiving the initial data block which is sent by the sending end and corresponds to the data packet;

the sending end determines a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule, and sends the corresponding sub data block to the receiving end through the transmission mode; the receiving end is further configured to determine, when the verification parameter matches the attestation parameter of the sending end, a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule, and receive the corresponding sub data block through the transmission mode; and when the sub data blocks corresponding to the data packet are received completely, the receiving end combines the initial data block and all the sub data blocks to generate the data packet.

Optionally, the sending end and the receiving end are respectively provided with a transmission mode list containing the same non-initial transmission modes arranged according to a pseudo-random order; a pair of the non-initial transmission modes comprises two transmission modes matched with each other; the step that the sending end determines the transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule, and sends the corresponding sub data block to the receiving end through the transmission mode comprises the following steps: the non-initial transmission mode distribution rule comprises any pair of initial sequence number of the non-initial transmission mode, sequence number of the current sub data block and the transmission mode list; the number of the sequence numbers is less than the logarithm of the non-initial transmission modes in the transmission mode list;

the sending end determines a transmission mode corresponding to the sub data block according to the initial sequence number of the non-initial transmission mode, the sequence number of the current sub data block and the transmission mode list;

and the sending end sends the corresponding sub data block through the transmission mode.

Optionally, the step of determining, by the sending end, the transmission mode corresponding to the sub data block according to the starting sequence number of the non-initial transmission mode, the sequence number of the current sub data block, and the transmission mode list includes:

the sending end determines the number of the serial numbers of the transmission modes corresponding to the sub data blocks according to a formula A ═ r + n)% L; wherein r is the initial sequence number of the non-initial transmission mode, n is the sequence number of the current sub data block, L is the length of the transmission mode list,% is the operation of complementation, A is the sequence number of the next non-initial transmission mode;

and the sending end determines the transmission mode corresponding to the sub data block according to the number of the transmission modes corresponding to the sub data block and the transmission mode list.

Optionally, the apparatus involves a sending end and a receiving end, the receiving end including verification parameters; the sending end and the receiving end comprise an initial transmission mode and at least one non-initial transmission mode; the device comprises: the sending end is used for splitting the data packet into at least two sub data blocks, and generating an initial data block according to a first sub data block, the demonstration parameter of the sending end and a non-initial transmission mode distribution rule; the sending end is further configured to send the initial data block to the receiving end through the initial transmission mode;

a receiving module, configured to receive, by the receiving end, a start data block corresponding to the data packet in the initial transmission mode when receiving the start data block sent by the sending end; wherein the initial data block comprises an attestation parameter of the sending end and a non-initial transmission mode allocation rule; the sending end is used for determining a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule and sending the corresponding sub data block to the receiving end through the transmission mode;

a determining module, configured to, when the verification parameter matches the attestation parameter of the sending end, the receiving end determines a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule, and receives the corresponding sub data block through the transmission mode;

and the combination module is used for combining the initial data block and all the sub data blocks to generate the data packet by the receiving end when the sub data blocks corresponding to the data packet are received completely.

Optionally, the apparatus involves a sending end and a receiving end, the sending end and the receiving end including an initial transmission mode and at least one non-initial transmission mode; the device comprises:

the splitting module is used for splitting the data packet into at least two sub data blocks by the sending end and generating an initial data block according to a first sub data block, the evidence parameter of the sending end and a non-initial transmission mode distribution rule;

a sending module, configured to send, by the sending end, a start data block to the receiving end through the initial transmission mode; the receiving end is used for receiving the initial data block through the initial transmission mode when receiving the initial data block which is sent by the sending end and corresponds to the data packet;

a determining module, configured to determine, by the sending end, a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule, and send the corresponding sub data block to the receiving end through the transmission mode; the receiving end is further configured to determine a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule when the verification parameter matches the attestation parameter of the sending end, and receive the corresponding sub data block through the transmission mode; and the receiving end is further used for combining the initial data block and all the sub data blocks to generate the data packet when the sub data blocks corresponding to the data packet are received completely.

Optionally, the system involves a sending end and a receiving end, the sending end and the receiving end including an initial transmission mode and at least one non-initial transmission mode; the system comprises:

the sending end is used for splitting the data packet into at least two sub data blocks, and generating an initial data block according to a first sub data block, the demonstration parameter of the sending end and a non-initial transmission mode distribution rule; the sending end is further configured to send the initial data block to the receiving end through the initial transmission mode; the sending end is further configured to determine a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule, and send the corresponding sub data block to the receiving end through the transmission mode;

the receiving end is used for receiving the initial data block through the initial transmission mode when receiving the initial data block which is sent by the sending end and corresponds to the data packet; and when the verification parameter is matched with the demonstration parameter of the sending end, the receiving end determines a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule, and receives the corresponding sub data block through the transmission mode; and when the sub data blocks corresponding to the data packet are received completely, the receiving end combines the initial data block and all the sub data blocks to generate the data packet.

An apparatus comprising a processor, a memory and a computer program stored on the memory and capable of running on the processor, the computer program, when executed by the processor, implementing the steps of the method as described above.

A computer-readable storage medium, on which a computer program is stored which, when being executed by a processor, carries out the steps of the method as set forth above.

The application has the following advantages:

in an embodiment of the present application, when receiving a start data block corresponding to the data packet sent by the sending end, the receiving end receives the start data block through the initial transmission mode; wherein the initial data block comprises an attestation parameter of the sending end and a non-initial transmission mode allocation rule; the sending end is used for determining a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule and sending the corresponding sub data block to the receiving end through the transmission mode; when the verification parameters are matched with the demonstration parameters of the sending end, the receiving end determines the transmission mode corresponding to the sub data block according to the non-initial transmission mode distribution rule, and receives the corresponding sub data block through the transmission mode; and when the sub data blocks corresponding to the data packet are received completely, the receiving end combines the initial data block and all the sub data blocks to generate the data packet. The data transmission safety is ensured by presetting an initial transmission mode and at least one non-initial transmission mode which are matched with each other at the sending end and the receiving end, and carrying out mutual authentication of the sending end and the receiving end in the initial transmission mode, and the data packets are transmitted in the initial transmission mode and the non-initial transmission mode, so that the data transmission safety is further ensured.

Drawings

In order to more clearly illustrate the technical solutions of the present application, the drawings needed to be used in the description of the present application will be briefly introduced below, and it is apparent that the drawings in the following description are only some embodiments of the present application, and it is obvious for those skilled in the art that other drawings can be obtained according to the drawings without inventive labor.

Fig. 1 is a flowchart illustrating steps of a wireless encryption transmission method for preventing interception according to an embodiment of the present application;

fig. 2 is a flowchart illustrating steps of a wireless encryption transmission method for preventing interception according to an embodiment of the present application;

fig. 3 is a block diagram of a wireless encryption transmission apparatus for preventing interception according to an embodiment of the present application;

fig. 4 is a block diagram of a wireless encryption transmission apparatus for preventing interception according to an embodiment of the present application;

fig. 5 is a schematic structural diagram of a computer device according to an embodiment of the present application.

Detailed Description

In order to make the aforementioned objects, features and advantages of the present application more comprehensible, the present application is described in further detail with reference to the accompanying drawings and the detailed description. It is to be understood that the embodiments described are only a few embodiments of the present application and not all embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.

It should be noted that, in any embodiment of the present application, the interception-prevention wireless encryption transmission method may be applied to other remote control devices such as an anti-theft automobile wireless remote controller, a garage gate remote controller, and the like, and may also be applied to other wireless transmission scenarios.

Referring to fig. 1, a wireless encryption transmission method for preventing interception according to an embodiment of the present application is shown; the method involves a sending end and a receiving end, the receiving end including verification parameters; the sending end and the receiving end comprise an initial transmission mode and at least one non-initial transmission mode; the method comprises the following steps: the sending end is used for splitting the data packet into at least two sub data blocks, and generating an initial data block according to a first sub data block, the demonstration parameter of the sending end and a non-initial transmission mode distribution rule; the sending end is further configured to send the initial data block to the receiving end through the initial transmission mode;

the method comprises the following steps:

s110, when receiving the initial data block corresponding to the data packet sent by the sending end, the receiving end receives the initial data block through the initial transmission mode; wherein the initial data block comprises an attestation parameter of the sending end and a non-initial transmission mode allocation rule; the sending end is further configured to determine a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule, and send the corresponding sub data block to the receiving end through the transmission mode;

s120, when the verification parameters are matched with the demonstration parameters of the sending end, the receiving end determines the transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule, and receives the corresponding sub data block through the transmission mode;

s130, when the sub data blocks corresponding to the data packet are received, the receiving end combines the initial data block and all the sub data blocks to generate the data packet.

It should be noted that the transmission mode is a transmission status of a set of communication parameter combinations that can be matched by a transceiving end (including a transmitting end or a receiving end), and the communication parameters include, but are not limited to, the following parameters: channel communication center frequency, channel bandwidth, modulation and demodulation modes, modulation rate and digital spread spectrum factor; the modulation and demodulation methods include, but are not limited to, modulation and demodulation methods of continuous wave modulation (AM, FM, PM, ASK, FSK, PSK, DPSK, QAM, MSK) and pulse modulation (PAM, PDM, PFM, PCM, Δ M, DPCM, ADPCM), and combinations thereof. Various communication parameters can be combined into a great number of transmission modes and mode sequences with more modes by reasonably selecting the range and arranging and combining the communication parameters.

Next, a wireless encryption transmission method of the interception prevention in the present exemplary embodiment will be further described.

As stated in step S110, when receiving the start data block corresponding to the data packet sent by the sender, the receiver receives the start data block through the initial transmission mode.

In an embodiment of the present application, a specific process of "the receiving end receives the start data block through the initial transmission mode" in step S110 may be further described with reference to the following description.

It should be noted that the non-initial transmission mode allocation rule includes an encryption parameter.

It should be noted that, in order to improve the security of data transmission, an initial transmission mode is agreed between the sending end and the receiving end each time the data packet is transmitted, so that the sending end and the receiving end realize the transmission of the data packet in the mutually matched transmission modes, and an illegal receiving device is prevented from receiving the initial data block sent by the sending end in other receiving modes; after receiving the initial data block, the receiving end determines a transmission mode corresponding to a subsequent sub data block in the non-initial transmission mode according to the non-initial transmission mode allocation rule so as to transmit the subsequent sub data block.

In order to wake up the receiving end quickly, a fixed initial transmission mode may be agreed between the transmitting end and the receiving end in each data packet transmission process; certainly, when the security of data transmission needs to be further improved, an unfixed initial transmission mode may also be agreed between the sending end and the receiving end, but time synchronization needs to be periodically maintained between the receiving end and the sending end.

It should be noted that, in order to further improve the security of data transmission, a verification process is set between the sending end and the receiving end, that is, the proof parameters of the sending end are added into the initial data block and sent to the receiving end together, so that the receiving end performs verification conveniently; the verification parameter of the receiving end can be the set characteristic parameter or the identity information of the receiving end; the start data block further includes information such as the number and length of the sub data blocks.

As described in the following steps, the receiving end decrypts the initial data block to obtain the demonstration parameter of the sending end;

judging whether the demonstration parameter of the sending end is matched with the verification parameter of the receiving end or not; if yes, performing subsequent data transmission; if not, the current data transmission is stopped.

In step S120, when the verification parameter matches the attestation parameter of the sending end, the receiving end determines a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule, and receives the corresponding sub data block through the transmission mode.

It should be noted that the sending end and the receiving end are respectively provided with a transmission mode list containing the same non-initial transmission modes arranged according to a pseudo-random order, and the transmission mode list comprises at least one pair of the non-initial transmission modes and at least one pair of sequence combination tables of the non-initial transmission modes; wherein a pair of the non-initial transmission modes comprises two transmission modes matched with each other; wherein the transmission mode list may further include at least one pair of the initial transmission modes.

It should be noted that, the transmission modes of the sending end and the receiving end are dynamically combined in real time, the sending end selects a current transmission mode, and the receiving end aligns according to the same mode parameters to synchronously receive the sub data blocks; the transmission mode combinations are dynamically changing and unpredictable. Each sub-block data transmission can only correctly receive data in a mode that a sending end and a receiving end are matched.

It should be noted that the data packet is divided into a plurality of sub-data blocks, each sub-data block only has one part of data, different sub-data blocks are transmitted in different ways, and the plurality of data blocks are combined and integrally restored to the original data packet.

In an embodiment of the present application, a specific process of the step S120 that the receiving end determines the transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule and receives the corresponding sub data block through the transmission mode may be further described with reference to the following description.

It should be noted that the non-initial transmission mode allocation rule includes any pair of the starting sequence number of the non-initial transmission mode, the sequence number of the current sub data block, and the transmission mode list; the number of sequence numbers is less than the logarithm of non-initial transmission modes in the transmission mode list.

It should be noted that the characteristic parameter components of the transmission mode at the transmitting end include frequency, modulation mode, chip coding mode, modulation code rate, coding rate, spreading factor, and the like.

as described in the following steps, the receiving end receives the corresponding sub data block through the transmission mode.

As an example, the receiving end determines the number of sequence numbers of the transmission mode corresponding to the sub data block according to a formula (a + b-2)% L; wherein, a is the initial sequence number of the non-initial transmission mode, b is the sequence number of the current sub data block, L is the length (most item number) of the transmission mode table, the percent is the operation of complementation, and A is the sequence number of the next non-initial transmission mode; (progressive algorithm), A is always the data less than the maximum length of the list, namely the effective data can be obtained from the transmission mode list according to the serial number of A;

As another example, the receiving end determines the number of sequence numbers of the transmission mode corresponding to the sub data block according to a formula (a) = (r + n)% L; wherein r is the initial sequence number of the non-initial transmission mode, n is the sequence number of the current sub data block, L is the length of the transmission mode list,% is the operation of complementation, A is the sequence number of the next non-initial transmission mode;

It should be noted that r is a positive integer randomly generated by the sending end before the sending, and is much longer than the length of the transmission mode list, and is filled in the initial data block in an encryption manner and transmitted to the receiving end along with the initial data block.

It should be noted that the transmission characteristic parameters of the transmission modes with adjacent sequence numbers in the transmission mode list have no correlation, and the parameter of the next transmission mode cannot be obtained through inference of a certain communication parameter or a certain communication parameter. That is, the parameters of the transmission mode table are considered from the communication parameters and are distributed pseudo-randomly.

In a specific implementation, the length of the transmission mode list is set to be 100, and the number of start sequence numbers randomly generated by a certain transmission at a sending end is 31598; the transmission mode sequence number corresponding to the first block data in the non-initial mode is: a is (31598+ 1)% 100 is 99, and the transmission mode sequence number of the second data block is 0; and so on. The receiving end receives the first data block transmitted by the initial transmission mode, obtains the initial sequence number of 31598, then calculates and obtains the transmission mode sequence number of each sub-block according to the same rule, synchronously changes the transmission mode, and realizes the complete communication process. In practical implementations, the length of the transmission mode list is a prime number that is typically of reasonable length.

As another example, when the receiving number of the sub data blocks is equal to 1, the receiving end determines the transmission mode corresponding to the initial data block according to the sequence number, the non-initial transmission mode and the sequence combination table, and receives the initial data block through the receiving mode;

and when the receiving number of the sub data blocks is more than 1, the receiving end determines the transmission mode corresponding to the sub data blocks according to the current receiving mode, the non-initial transmission mode and the sequence combination table, and receives the corresponding sub data blocks through the receiving mode.

In a specific implementation, the transmission mode list includes a sequence combination table of the initial transmission mode, one hundred pairs of the non-initial transmission modes, and one hundred pairs of the non-initial transmission modes, one pair of the non-initial transmission modes includes a sending mode and a receiving mode matched with the sending mode, and the number of the sequence numbers of the sending mode and the receiving mode is the same. Assuming that the starting sequence number of the non-initial transmission mode in the starting data block is 66, the receiving end determines the transmission mode corresponding to the next sub-data block according to the sequence number 66 in the sequence combination table according to the number of the interval preset sequence numbers; for example, when the number of sequence numbers is 0, the number of sequence numbers of the transmission mode corresponding to the next sub data block is 67, and when the number of sequence numbers is 1, the number of sequence numbers of the transmission mode corresponding to the next sub data block is 68;

the transmission mode list includes a sequence combination table of the initial transmission mode, one hundred pairs of the non-initial transmission modes and one hundred pairs of the non-initial transmission modes, one pair of the non-initial transmission modes includes a transmission mode and a reception mode matched with the transmission mode, and the serial numbers of the transmission mode and the reception mode are the same. Assuming that the number of sequence numbers of the current transmission mode of the receiving end is 67, the receiving end determines the transmission mode corresponding to the subsequent sub-data block according to the number of sequence numbers preset at intervals in the sequence combination table according to the number of sequence numbers 67; for example, the transmission mode sequence numbers corresponding to the subsequent sub-data blocks are sequentially 68, 69, 70, 71, etc. when the interval is 0, and the transmission mode sequence numbers corresponding to the subsequent sub-data blocks are sequentially 69, 71, 73, 75, etc. when the interval is 1.

Referring to fig. 2, a method for wireless encrypted transmission to prevent interception according to an embodiment of the present application is shown, where the method involves a sending end and a receiving end, and the sending end and the receiving end include an initial transmission mode and at least one non-initial transmission mode;

the method comprises the following steps:

s210, the sending end splits the data packet into at least two sub data blocks, and generates an initial data block according to a first sub data block, an evidence parameter of the sending end and a non-initial transmission mode distribution rule;

s220, the sending end sends the initial data block to the receiving end through the initial transmission mode; the receiving end is used for receiving the initial data block through the initial transmission mode when receiving the initial data block which is sent by the sending end and corresponds to the data packet;

s230, the sending end determines a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule, and sends the corresponding sub data block to the receiving end through the transmission mode; the receiving end is used for determining a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule and receiving the corresponding sub data block through the transmission mode when the verification parameter is matched with the demonstration parameter of the sending end; and when the sub data blocks corresponding to the data packet are received completely, the receiving end combines the initial data block and all the sub data blocks to generate the data packet.

In an embodiment of the application, the data packet is split into at least two sub data blocks by the sending end, and an initial data block is generated according to a first sub data block, an attestation parameter of the sending end and a non-initial transmission mode allocation rule; the sending end sends the initial data block to the receiving end through the initial transmission mode; the receiving end is used for receiving the initial data block through the initial transmission mode when receiving the initial data block which is sent by the sending end and corresponds to the data packet; the sending end determines a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule, and sends the corresponding sub data block to the receiving end through the transmission mode; the receiving end is further configured to determine, when the verification parameter matches the attestation parameter of the sending end, a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule, and receive the corresponding sub data block through the transmission mode; and when the sub data blocks corresponding to the data packet are received completely, the receiving end combines the initial data block and all the sub data blocks to generate the data packet. The data transmission safety is ensured by presetting an initial transmission mode and at least one non-initial transmission mode which are matched with each other at the sending end and the receiving end, and carrying out mutual authentication of the sending end and the receiving end in the initial transmission mode, and the data packets are transmitted in the initial transmission mode and the non-initial transmission mode, so that the data transmission safety is further ensured.

In step S210, the sending end splits the data packet into at least two sub data blocks, and generates an initial data block according to a first sub data block, an attestation parameter of the sending end, and a non-initial transmission mode allocation rule.

In an embodiment of the present application, a specific process of the step S210, that is, "the sending end splits the data packet into at least two sub data blocks, and generates an initial data block according to a first sub data block, an attestation parameter of the sending end, and a non-initial transmission mode allocation rule," may be further described with reference to the following description.

It should be noted that, in order to improve the security of data transmission, an initial transmission mode is agreed between the sending end and the receiving end each time the data packet is transmitted, so that the sending end and the receiving end realize the transmission of the data packet in the mutually matched transmission modes, and an illegal receiving device is prevented from receiving the initial data block sent by the sending end in other receiving modes; after the initial data block is sent, the sending end determines a transmission mode corresponding to a subsequent sub data block in the non-initial transmission mode according to the non-initial transmission mode allocation rule so as to transmit the subsequent sub data block.

In order to wake up the receiving end quickly, a fixed initial transmission mode may be agreed between the transmitting end and the receiving end in each data packet transmission process; of course, when the security of data transmission needs to be further improved, an unfixed initial transmission mode may also be agreed between the sending end and the receiving end.

It should be noted that, in order to further improve the security of data transmission, a verification process is set between the sending end and the receiving end, that is, the proof parameters of the sending end are added into the initial data block and sent to the receiving end together, so that the receiving end performs verification conveniently; of course, the witness parameter of the sending end may also be added to the subsequent sub data block, so as to perform verification in each transmission mode. The certificate showing parameter of the sending end can be the set characteristic parameter or the identity information of the sending end; the start data block further includes information such as the number and length of the sub data blocks.

In an embodiment of the present application, a specific process after the sending end splits the data packet into at least two sub data blocks in step S210 may be further described with reference to the following description.

And as described in the following steps, the sending end encrypts the sub data block.

It should be noted that the sending end encrypts the sub data block by using a rolling code encryption manner; i.e. the same data, are in different transmission packets, the observed data are different, and the receiving end can obtain the real data only through decryption and restoration with the authorization key.

It should be noted that, in data transmission, the data of the sub-data block is error code controlled by using forward error correction coding and backward interleaving coding, so as to reduce the error rate and improve the communication reliability and transmission distance.

In step S230, the sending end determines the transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule, and sends the corresponding sub data block to the receiving end through the transmission mode.

It should be noted that, the transmitting end and the receiving end respectively preset a transmission mode list, where the transmission mode list includes the initial transmission mode, at least one pair of the non-initial transmission modes, and at least one pair of the sequence combination tables of the non-initial transmission modes; wherein a pair of the non-initial transmission patterns includes two transmission patterns matched with each other.

In an embodiment of the present application, a specific process of "the sending end determines a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule, and sends the corresponding sub data block to the receiving end through the transmission mode" in step S230 may be further described with reference to the following description.

It should be noted that the characteristic parameter components of the transmission mode at the transmitting end include frequency, modulation mode, chip coding mode, modulation code rate, coding rate, and spreading factor.

According to the initial sequence number of the non-initial transmission mode, the sequence number of the current sub data block and the transmission mode list, the transmitting end determines the transmission mode corresponding to the sub data block;

and as described in the following steps, the sending end sends the corresponding sub data block through the transmission mode.

As an example, the sending end determines the number of sequence numbers of the transmission mode corresponding to the sub data block according to a formula (a) = (r + n)% L; wherein r is the number of the initial sequence number of the non-initial transmission mode, n is the number of the sequence number of the current sub data block, L is the length (most item number) of the transmission mode table, the percent is the operation of complementation, and A is the number of the sequence number of the next non-initial transmission mode; (progressive algorithm), A is always the data less than the maximum length of the list, namely the effective data can be obtained from the transmission mode list according to the serial number of A;

As another example, the sending end determines the number of sequence numbers of the transmission modes corresponding to the sub data blocks according to a formula a + b-2; wherein, a is the initial sequence number of the non-initial transmission mode, b is the sequence number of the current sub data block, and A is the sequence number of the next non-initial transmission mode;

As another example, when the sending number of the sub data blocks is equal to 1, the sending end determines a transmission mode corresponding to the initial data block according to the sequence number, the non-initial transmission mode and the sequence combination table, and sends the initial data block through the receiving mode;

and when the sending number of the sub data blocks is more than 1, the sending end determines the transmission mode corresponding to the sub data blocks according to the current transmission mode, the non-initial transmission mode and the sequence combination table, and sends the corresponding sub data blocks through the receiving mode.

In a specific implementation, the transmission mode list includes a sequence combination table of the initial transmission mode, one hundred pairs of the non-initial transmission modes, and one hundred pairs of the non-initial transmission modes, one pair of the non-initial transmission modes includes a sending mode and a receiving mode matched with the sending mode, and the number of the sequence numbers of the sending mode and the receiving mode is the same. Assuming that the starting sequence number of the non-initial transmission mode in the starting data block is 66, the sending end determines the transmission mode corresponding to the next sub-data block according to the sequence number 66 in the sequence combination table according to the number of the sequence numbers preset at intervals; for example, the number of transmission modes corresponding to the next sub-data block is 67 in order for the interval of 0 number of sequence numbers, and 68 in order for the interval of 1 number of sequence numbers.

The transmission mode list includes a sequence combination table of the initial transmission mode, one hundred pairs of the non-initial transmission modes and one hundred pairs of the non-initial transmission modes, one pair of the non-initial transmission modes includes a transmission mode and a reception mode matched with the transmission mode, and the serial numbers of the transmission mode and the reception mode are the same. Assuming that the number of sequence numbers of the current transmission mode of the sending end is 67, the sending end determines the transmission mode corresponding to the subsequent sub data block according to the number of sequence numbers preset at intervals in the sequence combination table according to the number of sequence numbers 67; for example, the transmission mode sequence numbers corresponding to the subsequent sub-data blocks are sequentially 68, 69, 70, 71, etc. when the interval is 0, and the transmission mode sequence numbers corresponding to the subsequent sub-data blocks are sequentially 69, 71, 73, 75, etc. when the interval is 1.

For the device embodiment, since it is basically similar to the method embodiment, the description is simple, and for the relevant points, refer to the partial description of the method embodiment.

Referring to fig. 3, a wireless encryption transmission apparatus for preventing interception according to an embodiment of the present application is shown; the device relates to a sending end and a receiving end, wherein the receiving end comprises verification parameters; the sending end and the receiving end comprise an initial transmission mode and at least one non-initial transmission mode; the device comprises: the sending end is used for splitting the data packet into at least two sub data blocks, and generating an initial data block according to a first sub data block, the demonstration parameter of the sending end and a non-initial transmission mode distribution rule; the sending end is further configured to send the initial data block to the receiving end through the initial transmission mode;

the method specifically comprises the following steps:

a receiving module 310, configured to, when receiving a start data block corresponding to the data packet sent by the sending end, receive the start data block by the receiving end in the initial transmission mode; wherein the initial data block comprises an attestation parameter of the sending end and a non-initial transmission mode allocation rule; the sending end is used for determining a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule and sending the corresponding sub data block to the receiving end through the transmission mode;

a determining module 320, configured to, when the verification parameter matches the attestation parameter of the sending end, the receiving end determines a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule, and receives the corresponding sub data block through the transmission mode;

and the combining module 330 is configured to, when the sub data blocks corresponding to the data packet are received completely, combine the initial data block and all the sub data blocks by the receiving end to generate the data packet.

Referring to fig. 4, a wireless encryption transmission apparatus for preventing interception according to an embodiment of the present application is shown; the apparatus involves a transmitting end and a receiving end, the transmitting end and the receiving end including an initial transmission mode and at least one non-initial transmission mode;

the method specifically comprises the following steps:

a splitting module 410, configured to split the data packet into at least two sub data blocks by the sending end, and generate an initial data block according to a first sub data block, an attestation parameter of the sending end, and a non-initial transmission mode allocation rule;

a sending module 420, configured to send, by the sending end, a start data block to the receiving end through the initial transmission mode; the receiving end is used for receiving the initial data block through the initial transmission mode when receiving the initial data block which is sent by the sending end and corresponds to the data packet;

a determining module 430, configured to determine, by the sending end, a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule, and send the corresponding sub data block to the receiving end through the transmission mode; the receiving end is used for determining a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule when the verification parameter is matched with the demonstration parameter of the sending end, and receiving the corresponding sub data block through the transmission mode; and the receiving end is further used for combining the initial data block and all the sub data blocks to generate the data packet when the sub data blocks corresponding to the data packet are received completely.

An embodiment of the application provides an interception-prevention wireless encryption transmission system, which relates to a sending end and a receiving end, wherein the sending end and the receiving end comprise an initial transmission mode and at least one non-initial transmission mode; the system comprises:

Referring to fig. 5, a computer device of an anti-interception wireless encryption transmission method according to the present application is shown, which may specifically include the following:

the computer device 12 described above is embodied in the form of a general purpose computing device, and the components of the computer device 12 may include, but are not limited to: one or more processors or processing units 16, a memory 28, and a bus 18 that couples various system components including the memory 28 and the processing unit 16.

Bus 18 represents one or more of any of several types of bus 18 structures, including a memory bus 18 or memory controller, a peripheral bus 18, an accelerated graphics port, and a processor or local bus 18 using any of a variety of bus 18 architectures. By way of example, such architectures include, but are not limited to, Industry Standard Architecture (ISA) bus 18, micro-channel architecture (MAC) bus 18, enhanced ISA bus 18, audio Video Electronics Standards Association (VESA) local bus 18, and Peripheral Component Interconnect (PCI) bus 18.

Computer device 12 typically includes a variety of computer system readable media. Such media may be any available media that is accessible by computer device 12 and includes both volatile and nonvolatile media, removable and non-removable media.

The memory 28 may include computer system readable media in the form of volatile memory, such as random access memory 30 and/or cache memory 32. Computer device 12 may further include other removable/non-removable, volatile/nonvolatile computer system storage media. By way of example only, storage system 34 may be used to read from and write to non-removable, nonvolatile magnetic media (commonly referred to as "hard drives"). Although not shown in FIG. 5, a magnetic disk drive for reading from and writing to a removable, nonvolatile magnetic disk (e.g., a "floppy disk") and an optical disk drive for reading from or writing to a removable, nonvolatile optical disk (e.g., a CD-ROM, DVD-ROM, or other optical media) may be provided. In these cases, each drive may be connected to bus 18 by one or more data media interfaces. The memory may include at least one program product having a set (e.g., at least one) of program modules 42, with the program modules 42 configured to carry out the functions of embodiments of the application.

A program/utility 40 having a set (at least one) of program modules 42 may be stored, for example, in memory, such program modules 42 including, but not limited to, an operating system, one or more application programs, other program modules 42, and program data, each of which examples or some combination thereof may comprise an implementation of a network environment. Program modules 42 generally perform the functions and/or methodologies of the embodiments described herein.

Computer device 12 may also communicate with one or more external devices 14 (e.g., keyboard, pointing device, display 24, camera, etc.), with one or more devices that enable an operator to interact with computer device 12, and/or with any devices (e.g., network card, modem, etc.) that enable computer device 12 to communicate with one or more other computing devices. Such communication may be through the I/O interface 22. Also, computer device 12 may communicate with one or more networks (e.g., a Local Area Network (LAN)), a Wide Area Network (WAN), and/or a public network (e.g., the Internet) via network adapter 20. As shown in FIG. 5, the network adapter 20 communicates with the other modules of the computer device 12 via the bus 18. It should be appreciated that although not shown in FIG. 5, other hardware and/or software modules may be used in conjunction with computer device 12, including but not limited to: microcode, device drivers, redundant processing units 16, external disk drive arrays, RAID systems, tape drives, and data backup storage systems 34, etc.

The processing unit 16 executes various functional applications and data processing by running programs stored in the memory 28, for example, implementing a wireless encryption transmission method for preventing interception provided by the embodiment of the present application.

That is, the processing unit 16 implements, when executing the program,: when receiving a starting data block corresponding to the data packet sent by the sending end, the receiving end receives the starting data block through the initial transmission mode; wherein the initial data block comprises an attestation parameter of the sending end and a non-initial transmission mode allocation rule; the sending end is used for determining a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule and sending the corresponding sub data block to the receiving end through the transmission mode; when the verification parameters are matched with the demonstration parameters of the sending end, the receiving end determines the transmission mode corresponding to the sub data block according to the non-initial transmission mode distribution rule, and receives the corresponding sub data block through the transmission mode; and when the sub data blocks corresponding to the data packet are received completely, the receiving end combines the initial data block and all the sub data blocks to generate the data packet.

In an embodiment of the present application, there is also provided a computer-readable storage medium, on which a computer program is stored, which when executed by a processor, implements a wireless encryption transmission method for preventing interception as provided in all embodiments of the present application.

That is, the program when executed by the processor implements: when receiving a starting data block corresponding to the data packet sent by the sending end, the receiving end receives the starting data block through the initial transmission mode; wherein the initial data block comprises an attestation parameter of the sending end and a non-initial transmission mode allocation rule; the sending end is used for determining a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule and sending the corresponding sub data block to the receiving end through the transmission mode; when the verification parameters are matched with the demonstration parameters of the sending end, the receiving end determines the transmission mode corresponding to the sub data block according to the non-initial transmission mode distribution rule, and receives the corresponding sub data block through the transmission mode; and when the sub data blocks corresponding to the data packet are received completely, the receiving end combines the initial data block and all the sub data blocks to generate the data packet.

Any combination of one or more computer-readable media may be employed. The computer readable medium may be a computer readable signal medium or a computer readable storage medium. A computer readable storage medium may be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the foregoing. More specific examples (a non-exhaustive list) of the computer readable storage medium would include the following: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the context of this document, a computer readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device.

A computer readable signal medium may include a propagated data signal with computer readable program code embodied therein, for example, in baseband or as part of a carrier wave. Such a propagated data signal may take any of a variety of forms, including, but not limited to, electro-magnetic, optical, or any suitable combination thereof. A computer readable signal medium may also be any computer readable medium that is not a computer readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device.

Computer program code for carrying out operations for aspects of the present application may be written in any combination of one or more programming languages, including an object oriented programming language such as Java, Smalltalk, C + + or the like and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code may execute entirely on the operator's computer, partly on the operator's computer, as a stand-alone software package, partly on the operator's computer and partly on a remote computer or entirely on the remote computer or server. In the case of a remote computer, the remote computer may be connected to the operator's computer through any type of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or the connection may be made to an external computer (for example, through the Internet using an Internet service provider). The embodiments in the present specification are described in a progressive manner, each embodiment focuses on differences from other embodiments, and the same and similar parts among the embodiments are referred to each other.

While preferred embodiments of the present application have been described, additional variations and modifications of these embodiments may occur to those skilled in the art once they learn of the basic inventive concepts. Therefore, it is intended that the appended claims be interpreted as including the preferred embodiment and all such alterations and modifications as fall within the true scope of the embodiments of the application.

Finally, it should also be noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or terminal that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or terminal. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other like elements in a process, method, article, or terminal that comprises the element.

The interception-prevention wireless encryption transmission method and device provided by the application are introduced in detail, specific examples are applied in the description to explain the principle and the implementation of the application, and the description of the above embodiments is only used to help understand the method and the core idea of the application; meanwhile, for a person skilled in the art, according to the idea of the present application, there may be variations in the specific embodiments and the application scope, and in summary, the content of the present specification should not be construed as a limitation to the present application.

Claims

1. An anti-interception wireless encryption transmission method is characterized in that the method relates to a sending end and a receiving end, wherein the receiving end comprises verification parameters; the sending end and the receiving end comprise an initial transmission mode and at least one non-initial transmission mode; the method comprises the following steps: the sending end is used for splitting the data packet into at least two sub data blocks, and generating an initial data block according to a first sub data block, the demonstration parameter of the sending end and a non-initial transmission mode distribution rule; the sending end is further configured to send the initial data block to the receiving end through the initial transmission mode;

2. The method according to claim 1, wherein the transmitting end and the receiving end are respectively provided with a transmission mode list comprising the same non-initial transmission modes arranged in a pseudo-random order; a pair of the non-initial transmission modes comprises two transmission modes matched with each other; the step that the receiving end determines the transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule and receives the corresponding sub data block through the transmission mode comprises the following steps: the non-initial transmission mode allocation rule comprises any pair of initial sequence number of the non-initial transmission mode, sequence number of the current sub data block and the transmission mode list; the number of the sequence numbers is less than the logarithm of the non-initial transmission modes in the transmission mode list;

3. The method of claim 1, wherein the step of the receiving end determining the transmission mode corresponding to the sub data block according to the starting sequence number of the non-initial transmission mode, the sequence number of the current sub data block, and the transmission mode list comprises:

4. An interception-resistant wireless encryption transmission method is characterized in that the method relates to a sending end and a receiving end, wherein the sending end and the receiving end comprise an initial transmission mode and at least one non-initial transmission mode; the method comprises the following steps:

5. The method according to claim 4, wherein the transmitting end and the receiving end are respectively provided with a transmission mode list comprising the same non-initial transmission modes arranged in a pseudo-random order; a pair of the non-initial transmission modes comprises two transmission modes matched with each other; the step that the sending end determines the transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule, and sends the corresponding sub data block to the receiving end through the transmission mode comprises the following steps: the non-initial transmission mode allocation rule comprises any pair of initial sequence number of the non-initial transmission mode, sequence number of the current sub data block and the transmission mode list; the number of the sequence numbers is less than the logarithm of the non-initial transmission modes in the transmission mode list;

6. The method of claim 4, wherein the step of the sending end determining the transmission mode corresponding to the sub data block according to the starting sequence number of the non-initial transmission mode, the sequence number of the current sub data block, and the transmission mode list comprises:

7. An interception-proof wireless encryption transmission device is characterized in that the device relates to a sending end and a receiving end, and the receiving end comprises verification parameters; the sending end and the receiving end comprise an initial transmission mode and at least one non-initial transmission mode; the device comprises: the sending end is used for splitting the data packet into at least two sub data blocks, and generating an initial data block according to a first sub data block, the demonstration parameter of the sending end and a non-initial transmission mode distribution rule; the sending end is further configured to send the initial data block to the receiving end through the initial transmission mode;

8. An interception-proof wireless encryption transmitting device is characterized in that the device relates to a transmitting end and a receiving end, and the transmitting end and the receiving end comprise an initial transmission mode and at least one non-initial transmission mode; the device comprises:

the splitting module is used for splitting the data packet into at least two sub data blocks by the sending end and generating an initial data block according to a first sub data block, the demonstration parameter of the sending end and a non-initial transmission mode distribution rule;

a determining module, configured to determine, by the sending end, a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule, and send the corresponding sub data block to the receiving end through the transmission mode; the receiving end is further configured to determine a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule when a verification parameter matches the attestation parameter of the sending end, and receive the corresponding sub data block through the transmission mode; and the receiving end is further used for combining the initial data block and all the sub data blocks to generate the data packet when the sub data blocks corresponding to the data packet are received completely.

9. An anti-interception wireless encryption transmission system is characterized in that the system relates to a sending end and a receiving end, and the receiving end comprises verification parameters; the sending end and the receiving end comprise an initial transmission mode and at least one non-initial transmission mode; the system comprises:

the receiving end is used for receiving the initial data block through the initial transmission mode when receiving the initial data block which is sent by the sending end and corresponds to the data packet; the receiving end is further configured to determine a transmission mode corresponding to the sub data block according to the non-initial transmission mode allocation rule when the verification parameter matches the attestation parameter of the sending end, and receive the corresponding sub data block through the transmission mode; and the receiving end is further used for combining the initial data block and all the sub data blocks to generate the data packet when the sub data blocks corresponding to the data packet are received completely.

10. An apparatus comprising a processor, a memory, and a computer program stored on the memory and capable of running on the processor, the computer program when executed by the processor implementing the method of any one of claims 1 to 6.