KR102011193B1 - Method and system for securing data based on multi-path tcp - Google Patents

Abstract

The present invention relates to a data security method and system based on MPTCP,
The method includes dividing and shuffling original data into n (n is two or more natural numbers) of transmission data; Inserting garbage data into at least one of the n pieces of transmission data; Generating a security key having information about the data partitioning rule, the data shuffling rule, and the garbage data insertion rule; And transmitting the n pieces of transmission data and the security key using the MPTCP scheme.

Description

Data security method and system based on MPTCP {METHOD AND SYSTEM FOR SECURING DATA BASED ON MULTI-PATH TCP}

The present invention relates to a data security method and system based on MPTCP, and more particularly, to a new method and system based on data security based on MPTCP that can have more robust characteristics for eavesdropping by illegal users.

According to the prior art, the data has a data format consisting of a protocol header and a payload, and after encrypting the transmission data in a manner suggested by Korean Patent Application Publication No. 10-2008-0078555, it is transmitted to the receiving side through a single transmission path. .

But recently, Snowdden, in the Snowden file, says agencies like the US NSA can intercept data sent and received on all transmission paths. That is, you can tap all the data transmitted through a single transmission path and track its data transmission path in real time, and supervise all the encrypted data transmitted through the internet communication network through the super password that can decrypt all encryption algorithms. It has been announced that you can ask.

Therefore, the necessity and interest in a new method of data security are rapidly increasing.

On the other hand, wireless devices such as smartphones and tablet PCs are evolving to provide a plurality of network interfaces. As a result, users can choose from a range of cellular (eg 3G, 4G Long Term Evolution (LTE)) and wireless local area network (WLAN) (or wireless fidelity (Wi-Fi)). Networks can optionally be used for convenience.

In this heterogeneous wireless network environment, the multi-path transport control protocol (MPTCP) proposed to improve data transmission speed and reliability by using multipath is a powerful transport layer. It is attracting attention as a protocol and is being standardized through the Internet Engineering Task Force (IETF).

MPTCP operates on the TCP layer, which is the most widely used transport layer protocol, and can open and control several TCP sessions simultaneously to provide high transmission speed and reliability in a dynamically changing heterogeneous wireless network environment. However, this MPTCP has a disadvantage that does not provide a separate security technology.

Korean Patent Publication No. 10-2008-0078555 (2008.08.27.published)

In order to solve the above problems, the present invention is based on the MPTCP technology, to provide a data security method and system based on MPTCP of a new way to have a more robust characteristics to the Metropolitan Government.

The object of the present invention is not limited to the above-mentioned object, and other objects which are not mentioned will be clearly understood by those skilled in the art from the following description.

As a means for solving the above problems, according to the first embodiment of the present invention, dividing and shuffling the original data into n (n is a natural number of two or more) transmission data; Inserting garbage data into at least one of the n pieces of transmission data; Generating a security key having information about the data partitioning rule, the data shuffling rule, and the garbage data insertion rule; And transmitting the n pieces of transmission data and the security key by the MPTCP method.

According to a second embodiment of the present invention, there is provided a means for solving the above problems, comprising the steps of: inserting garbage data into original data; Dividing and shuffling the original data into which the garbage data is inserted into n (n is two or more natural numbers) transmission data; Generating a security key having information about the data partitioning rule, the data shuffling rule, and the garbage data insertion rule; And transmitting the n pieces of transmission data and the security key by the MPTCP method.

Each of the data partitioning rule, the data shuffling rule, and the garbage data insertion rule may be changed from time to time at a preset time or period.

The data partitioning rule may include at least one of a file name and password generation rule of the transmission data, a data partitioning direction, and a data partitioning size.

The waste data insertion rule may include at least one of a waste data generation rule, a waste data insertion position, and a waste data length.

In the inserting of the garbage data, after inserting the waste data into the transmission data, the waste data may be packetized.

In the inserting of the garbage data, after the packetizing of the transmission data, the garbage data may be inserted in front of or behind a data area of a packet payload.

The transmitting in the MPTCP method may be performed by distributing and storing the n pieces of transmission data and the security key through a plurality of transmission paths using different communication methods, but differently setting the transmission paths of the n pieces of transmission data and the security key. Can be.

According to a third aspect of the present invention, there is provided a means for solving the above problems, comprising the steps of: distributing and storing n transmission data and a security key which are multi-transmitted by MPTCP in a storage; Extracting a data partitioning rule, a data shuffling rule, and a garbage data insertion rule from the security key; Collecting n pieces of transmission data distributed and stored in the storage based on the data partitioning rule, and then deshuffling the collected n pieces of transmission data based on the data shuffling rule; And removing original waste data inserted into at least one of the deshuffled n transmission data based on the garbage data insertion rule to obtain original data.

The data partitioning rule may include at least one of a file name and password generation rule of the transmission data, a data partitioning direction, and a data partitioning size.

The waste data insertion rule may include at least one of a waste data generation rule, a waste data insertion position, and a waste data length.

As a means for solving the above problems, according to the fourth embodiment of the present invention, n pieces of transmission data are generated by dividing and shuffling original data into n (n is a natural number of two or more) data and inserting garbage data. And a data transmitting device for multi-transmitting in a MPTCP manner with a security key having information on a data partitioning rule, a data shuffling rule, and a garbage data insertion rule; And receiving and distributing the n transmission data and the security key by MPTCP method, and collecting and rearranging the n transmission data according to the security key, and then removing the garbage data to restore the original data. It provides a data security system based on MPTCP including a receiving device.

Each of the data partitioning rule, the data shuffling rule, and the garbage data insertion rule may be changed from time to time at a preset time or period.

The data partitioning rule may include at least one of a file name and password generation rule of the transmission data, a data partitioning direction, and a data partitioning size.

The waste data insertion rule may include at least one of a waste data generation rule, a waste data insertion position, and a waste data length.

The data transmission apparatus may store and store the n pieces of transmission data and the security key through a plurality of transmission paths using different communication schemes, and differently set transmission paths of the n pieces of transmission data and the security key.

According to the data security method and system based on the MPTCP of the present invention, by dividing and shuffling one data into a plurality of transmission data and then multi-transmitting by the MPTCP method, a third party such as an eavesdropper discovers all the plurality of transmission data And tap, making it difficult to track all of its transmission paths. If the data shuffling rules are not known even when all the plurality of transmission data are found, the plurality of transmission data cannot be rearranged in the original order, so that the restoration of the original data becomes impossible.

In addition, in the present invention, by randomly injecting garbage data having information irrespective of the transmission data, a third party who does not have information on the garbage insertion position cannot remove the garbage data and thus cannot restore the original data. .

That is, the data security method and system based on the MPTCP of the present invention not only makes it difficult for a third party such as an eavesdropper to discover and track transmission data, but also makes it difficult to recover original data from the transmission data, thereby providing higher security. To secure it.

1 is a view for explaining the MPTCP applied to the present invention.
2 is a diagram illustrating a protocol stack for a conventional TCP and MPTCP applied to the present invention.
3 is a diagram illustrating an MPTCP proxy applied to the present invention.
4 is a diagram illustrating a data security method based on MPTCP according to an embodiment of the present invention.
5 is a view for explaining a data transmission method according to an embodiment of the present invention.
6 is a diagram for describing a data partitioning rule according to an embodiment of the present invention.
7 is a view for explaining a data transmission method according to another embodiment of the present invention.
8 is a view for explaining a data receiving method according to an embodiment of the present invention.
9 is a diagram illustrating a packet structure of transmission data according to an embodiment of the present invention.
10 illustrates a data security system based on MPTCP according to an embodiment of the present invention.

Technical terms used in the present invention are merely used to describe specific embodiments, it should be noted that it is not intended to limit the present invention. In addition, the technical terms used in the present invention should be interpreted as meanings generally understood by those skilled in the art unless the present invention has a special meaning defined in the present invention, and is excessively comprehensive. It should not be interpreted in the sense of or in the sense of being excessively reduced. In addition, when a technical term used in the present invention is an incorrect technical term that does not accurately express the spirit of the present invention, it should be replaced with a technical term that can be properly understood by those skilled in the art. In addition, the general terms used in the present invention should be interpreted as defined in the dictionary or according to the context before and after, and should not be interpreted in an excessively reduced sense.

Also, the singular forms used in the present invention include plural forms unless the context clearly indicates otherwise. In the present invention, terms such as “consisting of” or “comprising” should not be construed as necessarily including all of the various components or steps described in the invention, and some of the components or some of the steps are included. It should be construed that it may not be, or may further include additional components or steps.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings, and the same or similar components will be given the same reference numerals regardless of the reference numerals, and redundant description thereof will be omitted.

In addition, in describing the present invention, when it is determined that the detailed description of the related known technology may obscure the gist of the present invention, the detailed description thereof will be omitted. In addition, it should be noted that the accompanying drawings are only for easily understanding the spirit of the present invention and should not be construed as limiting the spirit of the present invention by the accompanying drawings.

1 is a view for explaining the MPTCP applied to the present invention.

Standardization work related to MPTCP is ITU and IETF. The ITU introduces the need for MPTCP and the extent of industry trends. For the IETF, standards for MPTCP have been developed. However, the main purpose of MPTCP is for Carrier Aggregation (CA) to improve the speed of 4G, which allows network operators to offload 4G bandwidth shortage to wired or WiFi, as well as load balancing and high speed between data centers. It is standardized for communication.

As shown in Figure 1, MPTCP is a protocol that allows to recognize and utilize all of the WiFi, 3G, 4G communication network. MPTCP is a technology to configure a multipath TCP session by simultaneously configuring multiple subflows using multiple network addresses between terminals. Heterogeneous networks using a TCP connection are called subflows, and MPTCP adds or removes subflows depending on the situation, and can respond more quickly to congestion.

2 is a diagram illustrating a protocol stack for a conventional TCP and MPTCP applied to the present invention.

As shown in Figure 2, Figure 2 (a) shows a protocol stack for TCP, Figure 2 (b) shows a protocol stack for MPTCP.

MPTCP is applied on top of the Transport layer, which is a conventional TCP layer. Since MPTCP is implemented at the application layer or the presentation / session layer, MPTCP does not know the existence of MPTCP in the case of network equipment that is implemented only at the network layer or below.

The basic structure of MPTCP is configured as shown in FIG. MPTCP basically consists of two layers, the MPTCP layer and several subflow layers beneath it. The MPTCP layer is responsible for managing connections and reordering packets sent to the application, and each subflow layer is responsible for reliable packet transmission and network congestion control.

3 is a diagram illustrating an MPTCP proxy applied to the present invention.

As shown in Fig. 3, the proxy server acts as an intermediary between the server and the client (a user connecting to the server), even though the server does not support MPTCP, so that only the client can support it. Do it. In other words, if the server sends data, the proxy server can split the data in two and send it to the client in two separate paths. Even if the target server does not support MPTCP, the client can communicate in multiple paths through the MPTCP proxy server if the smartphone supports MPTCP.

The MPTCP Proxy Server enables clients to support MPTCP because multiple paths are always available, whether or not the server is supported. In other words, if your smartphone supports MPTCP, you can always use LTE and WiFi at the same time through the proxy. In addition, MPTCP is a standard of the IETF and is not related to 3GPP, and does not require major updates to the existing LTE network itself. As such, the network equipment is inevitably implemented and managed through an MPTCP proxy.

4 is a diagram illustrating a data security method based on MPTCP according to an embodiment of the present invention.

As shown in Fig. 4, the data security method of the present invention includes a data transmission step S100 and a data reception step S200. In the data transmission step S100, one original data is divided into a plurality of transmission data. And shuffling, injecting the garbage data and multi-transmitting by the MPTCP method, and in the data receiving step (S200) to store and store a plurality of transmission data multi-transmitted by the MPTCP method, distributed data stored in the request to restore the original data After collecting and rearranging, remove the garbage data, restore the original data.

As described above, the present invention transmits and receives data using the MPTCP scheme, but divides and shuffles the data into a plurality of transmission data, whereby a third party such as an eavesdropper discovers and taps all of the plurality of transmission data, and a transmission path thereof. It makes it hard to keep track of everyone. In addition, even if all of the plurality of transmission data are found, if the data shuffling rule is not known, the plurality of transmission data cannot be rearranged in the original order, making restoration of the original data impossible.

In addition, in the present invention, by randomly injecting garbage data having information irrespective of the transmission data, a third party who does not have information on the garbage insertion position can never restore the original data because the garbage data cannot be removed. To make sure that

Hereinafter, the data transmission step S100 according to an embodiment of the present invention will be described in more detail with reference to FIGS. 4 to 6.

The data transmission step S100 of the present invention may include a data partitioning and shuffling step S110, a garbage data insertion step S120, a security key generation step S130, and a multiplex transmission step S130.

In the data segmentation and shuffling step (S110), as shown in FIG. 5, one original data is divided into a plurality of transmission data (S111), and then a plurality of transmission data are shuffled randomly (S112).

In this case, the data partitioning rule and the shuffling rule of steps S111 and S112 may have randomness that is changed from time to time at a predetermined time or period. In particular, the data partitioning rule is composed of a file name and password generation rule of the transmission data, a data partitioning direction (for example, vertical, horizontal, diagonal direction, etc.), a data partitioning size, and the like, and at least one of them is as shown in FIG. Likewise, it may be changed from time to time at a predetermined time or at regular intervals.

That is, the present invention further increases data randomness by changing the data partitioning rule and the data shuffling rule from time to time, in addition to simply dividing and shuffling original data into a plurality of transmission data. As a result, the eavesdropping prevention effect of the original data may be further increased.

In the garbage data inserting step (S120), at least one of the plurality of transmission data is randomly selected, and then garbage data is inserted into each of the randomly selected transmission data.

At this time, the garbage data insertion rule is composed of a garbage data generation rule, a garbage data insertion position and a garbage data length, and the like. Can be.

That is, the garbage data insertion rule also has variable randomness at any time, thereby maximizing data randomness, thereby maximizing the eavesdropping effect of the original data.

In the security key generation step (S130), a security key for sharing the data partitioning rule, data shuffling rule, and garbage data insertion rule used previously with the data receiver is generated.

Such data partitioning rules, data shuffling rules, and garbage data insertion rules may be information generated and managed separately by a data transmission device, but in some cases, an external server such as a data security server generates them in a centrally controlled manner. And management. Accordingly, the security key may be generated and shared by an external server such as a data security server instead of a data transmission device according to a system implementation environment.

In the multi-transmission step (S140), a plurality of transmission data and the security key is inserted into the garbage data is multi-transmitted in the MPTCP method. In particular, a plurality of transmission data and security keys are distributed using WiFi, 3G, 4G communication networks, etc., but the transmission path of the security key is distinguished from the transmission path of the transmission data, which makes the tracking of the security key more difficult. For sake.

In some cases, the data partitioning rule, the data shuffling rule, and the garbage data insertion rule constituting the security key may be transmitted to each file instead of one file. In other words, by distributing the security keys in multiple files, it is more difficult for third parties to find and intercept these pieces of information at once.

As described above, the present invention divides and shuffles one data into a plurality of transmission data and inserts garbage data to provide the data transmission side, thereby making it possible to establish a communication environment that is difficult to intercept by a third party. have.

In addition, the present invention may arbitrarily change the order of data division and shuffling and garbage data insertion if necessary.

For example, as shown in FIG. 7, garbage data is first inserted into the original data, and then a plurality of transmission data may be generated by splitting and shuffling the original data into which the garbage data is inserted.

4 and 8 will be described in more detail with respect to the data transmission step (S100) according to an embodiment of the present invention.

Data receiving step (S200) of the present invention may include a multi-receive and distributed storage step (S210), data collection and rearrangement step (S220), garbage data removal step (S230) and the original data acquisition step 240.

In the multiple receiving and distributed storage step (S210), after receiving a plurality of transmission data and security keys distributed by using all of the WiFi, 3G, 4G communication network, etc., they are distributed and stored in the internal storage of the data receiving device.

In this case, the data receiving apparatus may be implemented as a personal communication terminal such as a computer, a smart phone, a tablet PC, or the like, but may also be implemented as an internet server or an internet server group capable of providing various Internet services such as a cloud service.

In the data collection and rearranging step (S220), first, a security key is obtained and analyzed to identify a data partitioning rule, a shuffling rule, and a garbage data insertion rule. After retrieving and collecting all of the plurality of transmission data distributed and stored in the data receiving apparatus based on the data partitioning rule in the security key, deshuffle the collected transmission data based on the data shuffling rule to arrange the transmission data. Ensure that is reordered.

In the garbage data removal step (S230), the garbage data inserted into the transmission data are identified and removed based on the garbage data insertion rule in the security key.

In the original data acquisition step 240, the transmission data from which the garbage data is removed are restored and provided as one data, that is, the original data.

As such, the present invention needs to know all of the data partitioning rules, data shuffling rules, and garbage data insertion rules, but it is possible to convert a large number of transmitted data into original data, so that if a third party does not know these rules, Even if all data is found and acquired, the original data can never be restored.

9 is a diagram illustrating a packet structure of transmission data according to an embodiment of the present invention.

As shown in Figs. 9A and 9B, the present invention can packetize the transmission data first, and then insert garbage data before or after the data area of the packet payload. However, this can be applied only when generating a plurality of transmission data that inserts garbage data after data partitioning and shuffling. In this case, a FCS (Frame Check Sequence) generates and stores values correlated only with the transmission data. .

On the other hand, as shown in (c) of FIG. 9, the present invention may insert garbage data into the transmission data and then packetize it. This is applicable to both when inserting garbage data after data partitioning and shuffling, and when performing data partitioning and shuffling after garbage data insertion, in which FCS generates values that correlate to both transmission data and garbage data. And stored.

10 illustrates a data security system based on MPTCP according to an embodiment of the present invention.

As shown in FIG. 10, the system of the present invention may include a data transmitting apparatus 100 and a data receiving apparatus 200 that transmit and receive data according to the data security method based on MPTCP described above. In addition, the data transmission apparatus 100 may further include a data division and shuffling unit 110, a garbage data insertion unit 120, a transmission control unit 130, a communication unit 140, and the like, and the data reception apparatus 200 may include a communication unit. 210, a data storage unit 220, a reception controller 230, a data collection and deshuffling unit 240, and a garbage data removal unit 250 may be included.

First, the data dividing and shuffling unit 110 of the data transmission apparatus 100 divides and shuffles original data into n pieces (n is a natural number of two or more).

The garbage data insertion unit 120 inserts garbage data into at least one of the n pieces of transmission data.

The transmission control unit 130 generates a security key having information about the data partitioning rule, the data shuffling rule, and the garbage data insertion rule of the data partitioning and shuffling unit 110 and the garbage data insertion unit 120, and n Data is transmitted to the data receiving apparatus 200 along with two pieces of transmission data.

The communication unit 140 transmits n pieces of transmission data and security keys under the control of the transmission control unit 130 by the MPTCP method. As described above, the communication unit 140 may be implemented as an MPTCP host device supporting MPTCP, or may be implemented as a TCP host device supporting TCP and an MPTCP proxy supporting interworking between MPTCP and TCP. In some cases, the MPTCP function may be implemented through the MPTCP function of a network device existing in an external communication network.

Subsequently, the communication unit 210 of the data receiving apparatus 200 includes a WiFi communication unit 211, a 3G communication unit 212, a 4G communication unit 213, and the like, and transmits n transmission data and security keys distributed through them. Receive.

The data storage unit 220 stores n transmission data and security keys in a distributed manner.

When the data restoration event occurs, the reception control unit 230 searches for and analyzes encoding information to identify data division rules, shuffling rules, and garbage data insertion rules necessary for restoring the original data, and then collect and deshuffle the data. And each of the garbage data removal units 250. In addition, the present invention additionally provides a function of notifying the user of the restored original data visually or transmitting the data to an external device.

The data collection and deshuffling unit 240 collects n pieces of transmission data according to the data partitioning rule and the shuffling rule provided from the reception control unit 230 and performs deshuffling to rearrange their arrangement order. .

The garbage data removal unit 250 restores original data by removing all garbage data inserted into at least one of the n pieces of transmission data based on the garbage data insertion rule provided from the reception controller 230.

As described above, the data receiving apparatus 200 according to the present invention may be implemented as a personal communication terminal such as a computer, a smart phone, a tablet PC, etc., but may provide various Internet services such as cloud services. It may be implemented as an Internet server or a group of Internet servers.

That is, not only the one-to-one communication environment can be established through the data security system of the present invention, but also a cloud service environment that allows a plurality of users to share a single storage.

Features, structures, effects, and the like described in the above embodiments are included in at least one embodiment of the present invention, and are not necessarily limited to only one embodiment. In addition, the features, structures, effects, and the like illustrated in the embodiments may be combined or modified with respect to other embodiments by those skilled in the art to which the embodiments belong.

Therefore, contents related to such combinations and modifications should be construed as being included in the scope of the present invention. In addition, the above description has been made with reference to the embodiments, which are merely examples and are not intended to limit the invention. It will be appreciated that various modifications and applications are possible. For example, each component specifically shown in the embodiments may be modified. And differences relating to such modifications and applications will have to be construed as being included in the scope of the invention defined in the appended claims.

Claims (16)

Dividing and shuffling original data into n pieces (n is a natural number of two or more);
Randomly selecting at least one of the n transmission data and inserting garbage data into each of the randomly selected transmission data;
Generating a security key having information about the data partitioning rule, the data shuffling rule, and the garbage data insertion rule; And
Transmitting the n pieces of transmission data and the security key in a multi-path transport control protocol (MPTCP) scheme;
The data partitioning rule means a file name and password generation rule of the transmission data, a data partitioning direction, and a data partitioning size. The garbage data insertion rule means a garbage data generation rule, a garbage data insertion position, and a garbage data length. The data shuffling rule is a method of data security based on MPTCP, characterized in that randomly shuffle a plurality of transmission data. Inserting garbage data into the original data;
Dividing and shuffling the original data into which the garbage data is inserted into n (n is two or more natural numbers) transmission data;
Generating a security key having information about the data partitioning rule, the data shuffling rule, and the garbage data insertion rule; And
Transmitting the n pieces of transmission data and the security key in a multi-path transport control protocol (MPTCP) scheme;
The data partitioning rule means a file name and password generation rule of the transmission data, a data partitioning direction, and a data partitioning size. The garbage data insertion rule means a garbage data generation rule, a garbage data insertion position, and a garbage data length. The data shuffling rule is a method of data security based on MPTCP, characterized in that randomly shuffle a plurality of transmission data. The data partitioning rule, the data shuffling rule, and the garbage data insertion rule, respectively,
Data security method based on MPTCP, characterized in that is changed from time to time at a predetermined time or period. delete delete The method of claim 1 or 2, wherein inserting the garbage data comprises
And inserting the garbage data into the transmission data and packetizing the transmission data into which the garbage data is inserted. The method of claim 1, wherein inserting the garbage data comprises
And packetizing the transmission data and inserting the garbage data in front of or behind a data area of a packet payload. The method of claim 1 or 2, wherein the transmitting by the MPTCP method
Based on MPTCP, the n transmission data and the security key are distributed and stored through a plurality of transmission paths using different communication methods, and the transmission paths of the n transmission data and the security key are differently set. Data security method. Distributing and storing n transmission data and security keys multi-transmitted in a multi-path transport control protocol (MPTCP) scheme in a storage;
Extracting a data partitioning rule, a data shuffling rule, and a garbage data insertion rule from the security key;
Collecting n pieces of transmission data distributed and stored in the storage based on the data partitioning rule, and then deshuffling the collected n pieces of transmission data based on the data shuffling rule;
Removing original waste data inserted into at least one of the deshuffled n transmission data based on the waste data insertion rule, and obtaining original data;
The data partitioning rule means a file name and password generation rule of the transmission data, a data partitioning direction, and a data partitioning size. The garbage data insertion rule means a garbage data generation rule, a garbage data insertion position, and a garbage data length. The data shuffling rule is a method of data security based on MPTCP, characterized in that randomly shuffle a plurality of transmission data. delete delete Dividing and shuffling the original data into n data (n is a natural number of two or more), randomly selecting at least one of the n data, and inserting garbage data into each of the randomly selected transmission data to generate n transmission data; A data transmission apparatus for multi-transmitting in a multi-path transport control protocol (MPTCP) scheme with a security key having information on a data partitioning rule, a data shuffling rule, and a garbage data insertion rule; And
Receiving and distributing the n transmission data and the security key by MPTCP method, and collecting and rearranging the n transmission data according to the security key, and then removing the garbage data to restore the original data. Including a device,
The data partitioning rule means a file name and password generation rule of the transmission data, a data partitioning direction, and a data partitioning size. The garbage data insertion rule means a garbage data generation rule, a garbage data insertion position, and a garbage data length. The data shuffling rule is a data security system based on MPTCP, characterized in that randomly shuffle a plurality of transmission data. The method of claim 12, wherein each of the data partitioning rule, the data shuffling rule, and the garbage data insertion rule
Data security system based on MPTCP, which is changed from time to time at a preset time or period. delete delete The apparatus of claim 12, wherein the data transmission device is
Based on MPTCP, the n transmission data and the security key are distributed and stored through a plurality of transmission paths using different communication methods, and the transmission paths of the n transmission data and the security key are differently set. Data security system.

Images