CN115766902A - Method, device, equipment and medium for transmitting non-sensitive data through QUIC - Google Patents

Abstract

This application discloses a method, device, device, and medium for sending non-sensitive data through QUIC, which relates to the field of communication technology and is applied to the server, including: obtaining the connection request sent by the client, and detecting whether the connection request contains the target transmission parameter; if it is detected that there is a target transmission parameter in the connection request and the server also has the target transmission parameter, the default QUIC protocol is selected; based on the non-encrypted data transmission method in the default QUIC protocol, the non-sensitive data is transmitted to the client end. By detecting the two parties connected by the connection request, it is determined whether to start the preset QUIC protocol transmission by detecting whether the target transmission parameters are included, and the non-sensitive data is transmitted without encryption through the preset QUIC protocol to improve the transmission efficiency. Save resources and ensure security without affecting the transmission of original messages.

Description

A method, device, device, and medium for sending non-sensitive data through QUIC

technical field

The present invention relates to the field of communication technology, in particular to a method, device, equipment and medium for sending non-sensitive data through QUIC.

Background technique

QUIC (Quick UDP Internet Connection, Internet Transport Layer Protocol) is a transmission standard for secure channels. It is favored by http service providers due to its user-mode protocol implementation and 0-RTT reconnection advantages. In the current draft regulations, all QUIC messages and data must be encrypted, but in non-sensitive data transmission scenarios, data generally does not require transport layer encryption, for example: some video data, for videos that require copyright protection, generally Encryption and decryption are performed by service providers and applications according to the copyright protection strategy. If QUIC encrypts and decrypts again, a lot of CPU will be wasted. Although the server can offload it to hardware, it is still a waste. It is necessary to develop hardware or buy special hardware in the cloud. encryption service, and if the client is a mobile phone and a computer, there is no way to uninstall it, only a waste of CPU and power. For live broadcast videos that pursue real-time performance and do not care about copyright protection and transmission protection, encryption not only wastes resources, but also reduces real-time performance, which is not cost-effective anyway.

In the prior art, in the personal draft of IETF, draft-banks-quic-disable-encryption proposes the scenario and method of non-encryption, and adds the transmission parameter disable_1rtt_encryption for the client and server to negotiate whether encryption can be disabled. Agree to not encrypt, then use unencrypted transmission data. The handshake message still needs to be encrypted to prevent it from being maliciously tampered with by an intermediary. However, in addition to the handshake message, there are many control messages that will expose attack points, such as flow control messages. For messages, the stream ID can be modified to exhaust the available streams, causing normal communication parties to fail to open new streams; for example, address migration, a malicious intermediary can initiate address migration, pretending to be a normal communication party to send and receive messages. This is an unacceptable risk for data transmission. The draft draft-banks-quic-disable-encryption indicates that the applicable scenario is a fully trusted communication environment or the application has encrypted application data. However, as the cloud environment becomes more and more common, multi-tenancy makes there is no completely trusted communication environment in the cloud. Even the east-west traffic of the private cloud is not absolutely safe; and for the encrypted data of the user, the QUIC in the message The protocol part is still vulnerable.

To sum up, how to realize non-encrypted non-sensitive data transmission to reduce the CPU performance consumed by non-sensitive data transmission and ensure the security of non-sensitive data transmission is a technical problem to be solved in this field.

Contents of the invention

In view of this, the object of the present invention is to provide a method, device, device, and medium for sending non-sensitive data through QUIC, which can realize non-encrypted non-sensitive data transmission, reduce the CPU performance consumed by non-sensitive data transmission, and ensure non-sensitive data transmission. Security of data transmission. The specific plan is as follows:

In the first aspect, this application discloses a method for sending non-sensitive data through QUIC, which is applied to the server, including:

Obtain the connection request sent by the client, and detect whether the connection request contains target transmission parameters;

If it is detected that the connection request has the target transmission parameter and the server also has the target transmission parameter, then select the default QUIC protocol;

The non-sensitive data is transmitted to the client based on the non-encrypted data transmission mode in the preset QUIC protocol.

Optionally, the method for sending non-sensitive data through QUIC also includes:

A new type field for non-encrypted data transmission is added to the original QUIC protocol to generate the default QUIC protocol.

Optionally, adding a type field for non-encrypted data transmission in the original QUIC protocol to generate a preset QUIC protocol includes:

The type field used in the non-encrypted data transmission mode, the Stream ID and the Offset Length in the Stream frame are respectively encrypted to generate a preset QUIC protocol.

Optionally, the transmitting non-sensitive data to the client based on the non-encrypted data transmission mode in the preset QUIC protocol includes:

Encrypt the Stream ID and Offset Length based on a preset encryption algorithm; store the non-sensitive data in the Stream frame in a non-encrypted manner, so that the non-sensitive data can be transmitted to the client by transmitting the Stream frame.

Optionally, after transmitting the non-sensitive data to the client based on the non-encrypted data transmission mode in the preset QUIC protocol, it further includes:

Calculate the mask through the client, use the mask to decrypt the Stream ID and the Offset Length, and save the non-sensitive data in the Stream frame if the decryption is successful.

In the second aspect, this application discloses a method for sending non-sensitive data through the QUIC protocol, which is applied to the client, including:

Sending a connection request to the server, so that the server detects whether the connection request contains the target transmission parameter, and the server is used to detect that the connection request has the target transmission parameter and the server also has the target transmission parameter For the target transmission parameter, select the corresponding preset QUIC protocol;

receiving the non-sensitive data sent by the server through the non-encrypted data transmission mode in the preset QUIC protocol.

In the third aspect, this application discloses a device for sending non-sensitive data through QUIC, which is applied to the server, including:

A parameter detection module, configured to obtain a connection request sent by the client, and detect whether the connection request contains target transmission parameters;

A transmission enabling module, configured to select a preset QUIC protocol if it is detected that the connection request has the target transmission parameter and the server also has the target transmission parameter;

A data transmission module, configured to transmit non-sensitive data to the client based on the non-encrypted data transmission mode in the preset QUIC protocol.

In a fourth aspect, the present application discloses an electronic device, comprising:

memory for storing computer programs;

A processor, configured to execute the computer program, so as to implement the steps of the method for sending non-sensitive data through QUIC disclosed above.

In a fifth aspect, the present application discloses a computer-readable storage medium for storing a computer program; wherein, when the computer program is executed by a processor, the steps of the aforementioned disclosed method for sending non-sensitive data through QUIC are implemented.

It can be seen that this application discloses a method for sending non-sensitive data through QUIC, which is applied to the server, including: obtaining the connection request sent by the client, and detecting whether the connection request contains target transmission parameters; if detected The connection request has the target transmission parameter and the server also has the target transmission parameter, then select the default QUIC protocol; based on the non-encrypted data transmission method in the preset QUIC protocol, the non-sensitive data is transmitted to the client. It can be seen that this application determines whether to start the preset QUIC protocol transmission by detecting both parties connected to the connection request to detect whether the target transmission parameters are included, and the non-sensitive data is transmitted through the preset QUIC protocol without encryption. Improve transmission efficiency, save resources, and ensure security without affecting original message transmission.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only It is an embodiment of the present invention, and those skilled in the art can also obtain other drawings according to the provided drawings without creative work.

FIG. 1 is a flowchart of a method for sending non-sensitive data through QUIC disclosed in the present application;

FIG. 2 is a flow chart of a specific method for sending non-sensitive data through QUIC disclosed in the present application;

FIG. 3 is a flow chart of another specific method for sending non-sensitive data through QUIC disclosed in the present application;

FIG. 4 is a schematic structural diagram of a device for sending non-sensitive data through QUIC disclosed in the present application;

FIG. 5 is a structural diagram of an electronic device disclosed in the present application.

Detailed ways

The following will clearly and completely describe the technical solutions in the embodiments of the present application with reference to the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are only some of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

In the prior art, in the personal draft of IETF, draft-banks-quic-disable-encryption proposes the scenario and method of non-encryption, and adds the transmission parameter disable_1rtt_encryption for the client and server to negotiate whether encryption can be disabled. Agree to not encrypt, then use unencrypted transmission data. The handshake message still needs to be encrypted to prevent it from being maliciously tampered with by an intermediary. However, in addition to the handshake message, there are many control messages that will expose attack points, such as flow control messages. For messages, the stream ID can be modified to exhaust the available streams, causing normal communication parties to fail to open new streams; for example, address migration, a malicious intermediary can initiate address migration, pretending to be a normal communication party to send and receive messages. This is an unacceptable risk for data transmission. The draft draft-banks-quic-disable-encryption indicates that the applicable scenario is a fully trusted communication environment or the application has encrypted application data. However, as the cloud environment becomes more and more common, multi-tenancy makes there is no completely trusted communication environment in the cloud. Even the east-west traffic of the private cloud is not absolutely safe; and for the encrypted data of the user, the QUIC in the message The protocol part is still vulnerable.

For this reason, this application proposes a scheme for sending non-sensitive data through QUIC, which can realize non-encrypted non-sensitive data transmission, reduce the CPU performance consumed by non-sensitive data transmission, and ensure the security of non-sensitive data transmission.

Referring to Figure 1, the embodiment of the present invention discloses a method for sending non-sensitive data through QUIC, which is applied to the server, including:

Step S11: Obtain the connection request sent by the client, and detect whether the connection request contains target transmission parameters.

In this embodiment, the parameter configuration of the QUIC protocol is performed in advance. When the client establishes a connection request, in addition to configuring the normal transmission parameters of the QUIC protocol in the connection request, it is also necessary to increase the target transmission parameter, that is, the transmission parameter big_data. Therefore, After receiving the connection request sent by the client, the server detects the connection request, and detects whether there is a transmission parameter big_data other than normal transmission parameters in the connection request. After acquiring the connection request sent by the client, the method further includes: establishing a connection with the client based on the connection request through unique identification information. It is understandable that the QUIC connection can be connected through the unique identification information. In this way, it can avoid the same client and server in the process of transmission. If the connection is interrupted in the middle, you can use the preset A random number is used as unique identification information to connect between the two.

Step S12: If it is detected that the connection request has the target transmission parameter and the server also has the target transmission parameter, select a preset QUIC protocol for transmission.

In this embodiment, if it is detected that there is a target transmission parameter in the connection request sent by the client, and the server also has the target transmission parameter, it proves that the function of unencrypted video transmission can be used, that is, the preset QUIC protocol is immediately enabled Transmission: if it is detected that the connection request does not have the target transmission parameter and/or the server does not have the target transmission parameter, select the original QUIC protocol. It is understandable that due to the limitation of the preset target transmission parameters, if it is detected that the connection request does not have target transmission parameters, but the client has target transmission parameters, the default QUIC protocol transmission will not be enabled, and the original QUIC protocol will still be used for transmission. That is, encrypted transmission; if it is detected that there are target transmission parameters in the connection request, but the client does not have the target transmission parameters, the default QUIC protocol transmission will not be enabled, and the original QUIC protocol will still be used for transmission. Apply the same logic as above. That is, the default QUIC protocol can be enabled to transmit non-sensitive data without encryption only if the transmission parameter big_data exists on both the client and server. Sensitive data is private data, while non-sensitive data is non-private data, such as: video on demand data, social News, Internet public content, blockchain public chain transaction data, etc.

In this embodiment, a type field for non-encrypted data transmission mode is added to the original QUIC protocol to generate a preset QUIC protocol. It can be understood that the default QUIC protocol is obtained by modifying the original QUIC protocol, specifically Yes, the original QUIC protocol encrypts the entire Stream frame when transmitting application data. The Stream frame contains the Stream ID (data stream identifier), Offset Length (offset length), and data. If the entire Stream frame is encrypted for transmission , the data data in it is also encrypted and transmitted, and in the specific scenario of this embodiment, the data data in it does not need to be encrypted and transmitted, so the non-sensitive data transmission of the default QUIC protocol is through encrypted QUIC messages, But non-sensitive data is not encrypted, that is, when the default QUIC protocol is enabled, correspondingly, when non-sensitive data is transmitted, the data frame header is encrypted, and data data is not encrypted, that is, Stream ID, Offset Strings such as Length are encrypted, and the non-sensitive data data to be transmitted is skipped, and because the difference between 0-RTT and 1-RTT is not large for transmitting a large amount of data, the non-sensitive data in this embodiment Only transmit in the 1-RTT packet, that is, transmit in the short packet header. By adding a type field in the short packet header, the type field is used to indicate whether it is a specified large number of data transmission messages that do not need to be encrypted. For example: Modify the type field in the short header, as follows:

The first 8 digits of the short Baotou in the draft are:

|0|1|S|R|R|K|P|P|

0 (plain text): a fixed value, indicating a short header.

1 (plain text): fixed value, used for verification, must be 1, and discarded if it is 0.

S (plaintext): spin bit, used for delay measurement.

RR (ciphertext): fixed value, must be 0, other values are regarded as connection errors.

K (ciphertext): Indicates whether the key is updated.

PP (ciphertext): Packet number length.

This plan is amended to:

|0|1|S|T|T|K|P|P|

0 (plain text): no change, a fixed value, indicating a short header.

1 (plain text): unchanged, fixed value, used for verification, must be 1, and discarded if 0.

S (plaintext): constant, spin bit, used for delay measurement.

TT (cipher text): modified from the RR bit, corresponding to the type bit of the long header, 00 is the original way to encrypt the message, 01 is the non-sensitive data, that is, the new data transmission method in this application, the specific content is specified by the user , this embodiment takes video-on-demand data as an example, and other values are regarded as connection errors.

K (ciphertext): Indicates whether the key is updated. For non-sensitive data packets, this bit is 0. If a data packet with a value of 1 is received, it is regarded as a connection error.

PP (ciphertext): unchanged, the length of the packet number.

Among them, after the short header is modified, the content of the message encrypted in the original method remains unchanged. After RR is modified to TT, when the TT character is still 00, the use of K for the encrypted data packet remains unchanged and does not affect the original message format. It will not affect its transmission and packet processing. It is understandable that when the value of TT in the protocol is detected to be 01, the unencrypted transmission mode for non-sensitive data is enabled; when the value of TT in the protocol is detected to be 00, the original encrypted transmission mode is still used for non-sensitive data , when it is detected that the type bit in the short packet header is 01, it means that the type bit is a non-sensitive data transmission method, and then the video-on-demand data is packaged and transmitted to the client; it should be noted that when the TT bit in the short packet header is 01 When the internal message is a large number of unencrypted data messages specified in this embodiment, that is, QUIC does not encrypt the video-on-demand data, but the application itself may encrypt the video-on-demand data.

Step S13: Transmit non-sensitive data to the client based on the non-encrypted data transmission mode in the preset QUIC protocol.

In this embodiment, when it is determined that the non-sensitive data is transmitted through the preset QUIC protocol, the non-sensitive data is transmitted to the client through the selected preset QUIC protocol; it should be noted that due to the default QUIC The protocol is used for transmission, and the process of transmitting the Stream frame is orderly and complete, which realizes the reliable transmission of non-sensitive data.

It can be seen that this application discloses a method for sending non-sensitive data through QUIC, which is applied to the server, including: obtaining the connection request sent by the client, and detecting whether the connection request contains target transmission parameters; if detected The connection request has the target transmission parameter and the server also has the target transmission parameter, then select the default QUIC protocol; based on the non-encrypted data transmission method in the preset QUIC protocol, the non-sensitive data is transmitted to the client. It can be seen that this application determines whether to start the preset QUIC protocol transmission by detecting both parties connected to the connection request to detect whether the target transmission parameters are included, and the non-sensitive data is transmitted through the preset QUIC protocol without encryption. Improve transmission efficiency, save resources, and ensure security without affecting original message transmission.

Referring to FIG. 2 , the embodiment of the present invention discloses a specific method for sending non-sensitive data through QUIC. Compared with the previous embodiment, this embodiment further explains and optimizes the technical solution. specific:

Step S21: Encrypt the Stream ID and Offset Length based on a preset encryption algorithm.

In this embodiment, the type field used for non-encrypted data transmission mode is newly added in the original QUIC protocol, and the type field used for non-encrypted data transmission mode, Stream ID and Offset Length in the Stream frame are encrypted respectively Handle to generate preset QUIC protocols. It can be understood that the encryption process first obtains a random number, wherein the method of obtaining the random number is to determine by sampling data with a fixed number of bits, specifically, the sampling operation is performed from the preset bit after the end of the Offset Length, and 136 bits are sampled, where , when the sampled Stream ID and Offset are less than 128 bits, skip a part of non-sensitive data data, and sample from a fixed position. In this way, the sampled random number is a fixed random number, which is used for key encryption during encryption and decryption For calculation, the sampled random number is bit data including Fin Bit (end bit), Stream ID length (data stream identification length), and Offset length. When the sampling length caused by skipping non-sensitive data for sampling on the server side is less than the preset sampling length, it needs to make up for it. When the client receives a frame with less than the sample length, it needs to discard it.

In this embodiment, after the random number is obtained, a preset encryption algorithm is used to generate a mask. Specifically, a preset encryption algorithm can be used to calculate the short header key or packet key, and random numbers to generate a mask corresponding to the Stream frame ( mask), that is, the encryption key of the Stream frame, to complete the encryption of the header of the Stream frame. Wherein, the preset encryption algorithm may specifically include but not limited to: AES (Advanced Encryption Standard, Advanced Encryption Standard) algorithm, Chacha2.0 algorithm (streaming symmetric encryption). The process of calculating the mask of the Stream frame is to first take a sample of a certain length, that is, a random number, and then use a preset encryption algorithm to generate a mask to obtain the mask.

Step S22: After the default QUIC protocol is selected for transmission, store the non-sensitive data in the Stream frame in an unencrypted manner, so that the non-sensitive data can be transmitted to the client by transmitting the Stream frame.

In this embodiment, when the preset QUIC protocol is selected for transmission, the non-sensitive data is packaged and stored in the Stream frame, and the transmission of the non-sensitive data is completed by transmitting the Stream frame to the client; where it should be noted that the data packet can There are multiple frames. It can be understood that since the message described in this embodiment is generally used to transmit a large amount of data, it does not involve packet merging and frame merging. There is only one QUIC packet in a UDP packet, and a QUIC packet contains only one Stream frame, so the frame length field is not needed, and the length continues until the end of the UDP packet. Because it is only used to transmit application data, the frame type field may not be used, so the OFF bit in the frame type is not applicable, and the Stream ID and Offset Length is required, and only the FIN bit is reserved to indicate the end of data in the stream. Generally speaking, the Stream ID Length occupies 3 bits and indicates the length of the Stream ID after adding one; the Offset Length occupies 4 bits and indicates the length of the Offset. When the Length is 0, the Offset field does not exist.

Step S23: Calculate the mask through the client, use the mask to decrypt the Stream ID and the Offset Length, and save the non-sensitive data in the Stream frame if the decryption is successful.

In this embodiment, after receiving the Stream frame, calculate the mask again, use the calculated mask to decrypt the Stream ID and the Offset Length in the Stream frame header, and if the decryption is successful, the non-sensitive ID in the Stream frame can be obtained. Data, the decryption failed, and the non-sensitive data in the Stream frame could not be obtained. Therefore, if the client does not receive some Stream frames due to some factors, the server can judge that a current Stream frame has not been successfully received by the client through the packet number and confirmation response information fed back by the client. number, and the order of the packet number is monotonically increasing according to the order of the data in the sending process. Therefore, after the client receives multiple Stream frames, it sorts the asynchronously arriving Stream frames by decrypting the successfully obtained Offset again. , combined to form complete non-sensitive data. Wherein, the Offset is a data offset, indicating an offset of the Stream frame in the entire data.

It can be seen that in this embodiment, since Stream ID and Offset need to be used when transmitting non-sensitive data, StreamID and Offset are protected using header protection or other algorithms to improve the possibility of avoiding this part of the QUIC protocol from being broken. As well as increasing the possibility that the non-sensitive data transmission process will be exposed due to the breach of the QUIC protocol, resulting in various risks.

Referring to Figure 3, the embodiment of the present invention also discloses a method for sending non-sensitive data through QUIC, which is applied to the client, including:

Step S31: Send a connection request to the server, so that the server can detect whether the connection request contains the target transmission parameter, and the server is used to detect that the connection request has the target transmission parameter and the service If the target transmission parameter also exists at the end, select the corresponding preset QUIC protocol;

Step S32: Receive the non-sensitive data sent by the server through the non-encrypted data transmission mode in the preset QUIC protocol.

Wherein, for more detailed processing procedures in steps S31 and S32, please refer to the content of the aforementioned disclosed embodiments, and details are not repeated here.

It can be seen that this application discloses a method for sending non-sensitive data through QUIC, which is applied to the server, including: obtaining the connection request sent by the client, and detecting whether the connection request contains target transmission parameters; if detected The connection request has the target transmission parameter and the server also has the target transmission parameter, then select the default QUIC protocol; based on the non-encrypted data transmission method in the preset QUIC protocol, the non-sensitive data is transmitted to the client. It can be seen that this application determines whether to start the preset QUIC protocol transmission by detecting both parties connected to the connection request to detect whether the target transmission parameters are included, and the non-sensitive data is transmitted through the preset QUIC protocol without encryption. Improve transmission efficiency, save resources, and ensure security without affecting original message transmission.

Referring to Figure 4, the embodiment of the present invention discloses a device for sending non-sensitive data through QUIC, which is applied to the server, including:

The parameter detection module 11 is used to obtain the connection request sent by the client, and detect whether the connection request contains target transmission parameters;

The transmission enabling module 12 is configured to select a preset QUIC protocol transmission if it is detected that the connection request has the target transmission parameter and the server also has the target transmission parameter;

The data transmission module 13 is configured to transmit non-sensitive data to the client based on the non-encrypted data transmission mode in the preset QUIC protocol.

For the more specific working process of each of the above modules, reference may be made to the corresponding content disclosed in the foregoing embodiments, which will not be repeated here.

It can be seen that the present application also discloses a device. The specific method used in the device is the method of sending non-sensitive data through QUIC in the above embodiment, including: obtaining the connection request sent by the client, and detecting the connection request sent by the client. Whether to include the target transmission parameter; if it is detected that the connection request has the target transmission parameter and the server also has the target transmission parameter, then select the default QUIC protocol; based on the non-encryption in the preset QUIC protocol The data transfer method transfers non-sensitive data to the client. It can be seen that the device determines whether to start the preset QUIC protocol transmission by detecting both parties connected to the connection request to detect whether the target transmission parameters are included, and transmits non-sensitive data without encryption through the preset QUIC protocol , improve transmission efficiency, save resources, and ensure security without affecting original message transmission.

Further, the embodiment of the present application also discloses an electronic device. FIG. 5 is a structural diagram of an electronic device 20 according to an exemplary embodiment. The content in the figure should not be regarded as any limitation on the application scope of the present application.

FIG. 5 is a schematic structural diagram of an electronic device 20 provided in an embodiment of the present application. The electronic device 20 may specifically include: at least one processor 21 , at least one memory 22 , a power supply 23 , a communication interface 24 , an input/output interface 25 and a communication bus 26 . Wherein, the memory 22 is used to store a computer program, and the computer program is loaded and executed by the processor 21 to implement relevant steps in the method for sending non-sensitive data through QUIC disclosed in any of the above-mentioned embodiments. In addition, the electronic device 20 in this embodiment may specifically be an electronic computer.

In this embodiment, the power supply 23 is used to provide working voltage for each hardware device on the electronic device 20; the communication interface 24 can create a data transmission channel between the electronic device 20 and external devices, and the communication protocol it follows is applicable Any communication protocol in the technical solution of the present application is not specifically limited here; the input and output interface 25 is used to obtain external input data or output data to the external, and its specific interface type can be selected according to specific application needs, here Not specifically limited.

Wherein, the processor 21 may include one or more processing cores, such as a 4-core processor, an 8-core processor, and the like. Processor 21 can adopt at least one hardware form in DSP (Digital Signal Processing, digital signal processing), FPGA (Field-Programmable Gate Array, field programmable gate array), PLA (Programmable Logic Array, programmable logic array) accomplish. Processor 21 may also include a main processor and a coprocessor, and the main processor is a processor for processing data in a wake-up state, also known as a CPU (Central Processing Unit, central processing unit); Low-power processor for processing data in standby state. In some embodiments, the processor 21 may be integrated with a GPU (Graphics Processing Unit, image processor), and the GPU is used for rendering and drawing the content to be displayed on the display screen. In some embodiments, the processor 21 may further include an AI (Artificial Intelligence, artificial intelligence) processor, where the AI processor is used to process computing operations related to machine learning.

In addition, the memory 22, as a resource storage carrier, can be a read-only memory, random access memory, magnetic disk or optical disk, etc., and the resources stored thereon can include operating system 221, computer program 222, etc., and the storage method can be temporary storage or permanent storage. .

Wherein, the operating system 221 is used to manage and control each hardware device and computer program 222 on the electronic device 20, so as to realize the calculation and processing of the massive data 223 in the memory 22 by the processor 21, which can be Windows Server, Netware, Unix, Linux, etc. In addition to the computer program 222 including the computer program that can be used to complete the method for sending non-sensitive data through QUIC performed by the electronic device 20 disclosed in any of the foregoing embodiments, it can further include a computer program that can be used to complete other specific tasks . The data 223 may not only include data received by the electronic device and transmitted from an external device, but may also include data collected by its own input and output interface 25 and the like.

Furthermore, the present application also discloses a computer-readable storage medium for storing a computer program; wherein, when the computer program is executed by a processor, the aforementioned method for sending non-sensitive data through QUIC is implemented. Regarding the specific steps of the method, reference may be made to the corresponding content disclosed in the foregoing embodiments, and details are not repeated here.

Each embodiment in this specification is described in a progressive manner, each embodiment focuses on the difference from other embodiments, and the same or similar parts of each embodiment can be referred to each other. As for the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and for the related information, please refer to the description of the method part.

Professionals can further realize that the units and algorithm steps of the examples described in conjunction with the embodiments disclosed herein can be implemented by electronic hardware, computer software or a combination of the two. In order to clearly illustrate the possible For interchangeability, in the above description, the composition and steps of each example have been generally described according to their functions. Whether these functions are executed by hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art may use different methods to implement the described functions for each specific application, but such implementation should not be regarded as exceeding the scope of the present application. The steps of the methods or algorithms described in connection with the embodiments disclosed herein may be directly implemented by hardware, software modules executed by a processor, or a combination of both. Software modules can be placed in random access memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or any other Any other known storage medium.

Finally, it should also be noted that in this text, relational terms such as first and second etc. are only used to distinguish one entity or operation from another, and do not necessarily require or imply that these entities or operations, any such actual relationship or order exists. Furthermore, the term "comprises", "comprises" or any other variation thereof is intended to cover a non-exclusive inclusion such that a process, method, article, or apparatus comprising a set of elements includes not only those elements, but also includes elements not expressly listed. other elements of or also include elements inherent in such a process, method, article, or device. Without further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article or apparatus comprising said element.

A method, device, equipment, and medium for sending non-sensitive data through QUIC provided by the present invention have been introduced in detail above. In this paper, specific examples are used to illustrate the principle and implementation of the present invention. The description of the above embodiments It is only used to help understand the method of the present invention and its core idea; at the same time, for those of ordinary skill in the art, according to the idea of the present invention, there will be changes in the specific implementation and scope of application. In summary, The contents of this description should not be construed as limiting the present invention.

Claims (10)

1. A method for sending non-sensitive data through QUIC is characterized in that the method is applied to a server and comprises the following steps:

acquiring a connection request sent by a client, and detecting whether the connection request contains a target transmission parameter;

if the target transmission parameters exist in the connection request and the target transmission parameters also exist in the server, selecting a preset QUIC protocol;

and transmitting non-sensitive data to the client based on a non-encrypted data transmission mode in the preset QUIC protocol.

2. The method of claim 1, wherein after detecting whether the connection request includes the target transmission parameter, the method further comprises:

and if the connection request does not have the target transmission parameter and/or the server does not have the target transmission parameter, selecting an original QUIC protocol.

3. The method of transmitting non-sensitive data via QUIC according to claim 1, further comprising:

and adding a type field for an unencrypted data transmission mode in the original QUIC protocol to generate a preset QUIC protocol.

4. The method for sending non-sensitive data through QUIC according to claim 3, wherein said adding a type field for non-encrypted data transmission in original QUIC protocol to generate a preset QUIC protocol further comprises:

and respectively carrying out encryption processing on the type field used for the non-encrypted data transmission mode, the Stream ID and the Offset Length in the Stream frame to generate a preset QUIC protocol.

5. The method for transmitting non-sensitive data through QUIC according to claim 4, wherein said transmitting non-sensitive data to said client based on non-encrypted data transmission in said preset QUIC protocol includes:

encrypting the Stream ID and the Offset Length based on a preset encryption algorithm; and respectively storing the non-sensitive data in a Stream frame in a non-encryption mode so as to transmit the non-sensitive data to the client by transmitting the Stream frame.

6. The method of sending non-sensitive data through QUIC according to claim 5, after said transmitting non-sensitive data to said client based on non-encrypted data transmission in said preset QUIC protocol, further comprising:

calculating a mask through the client, decrypting the StreamID and the Offset Length by using the mask, and if the decryption is successful, saving the non-sensitive data in the Stream frame.

7. A method for sending non-sensitive data through QUIC is characterized by being applied to a client and comprising the following steps:

sending a connection request to a server so that the server can detect whether the connection request contains target transmission parameters or not, wherein the server is used for selecting a corresponding preset QUIC protocol when detecting that the connection request contains the target transmission parameters and the server also contains the target transmission parameters;

and receiving non-sensitive data sent by the server side through a non-encrypted data transmission mode in the preset QUIC protocol.

8. An apparatus for transmitting non-sensitive data through QUIC, applied to a server, comprising:

the parameter detection module is used for acquiring a connection request sent by a client and detecting whether the connection request contains a target transmission parameter;

the transmission starting module is used for selecting a preset QUIC protocol if the target transmission parameters exist in the connection request and the target transmission parameters also exist in the server side;

and the data transmission module is used for transmitting non-sensitive data to the client based on a non-encrypted data transmission mode in the preset QUIC protocol.

9. An electronic device, comprising:

a memory for storing a computer program;

processor for executing said computer program for implementing the steps of the method for transmitting non-sensitive data through a QUIC according to any of claims 1 to 6.

10. A computer-readable storage medium for storing a computer program; wherein said computer program, when being executed by a processor, carries out the steps of the method of transmitting non-sensitive data through a QUIC according to any of claims 1 to 6.

Images