WO2016184183A1

WO2016184183A1 - Wireless communication base station, data transmission and reception method, terminal and storage medium

Info

Publication number: WO2016184183A1
Application number: PCT/CN2016/073851
Authority: WO
Inventors: 管连才
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-10-10
Filing date: 2016-02-16
Publication date: 2016-11-24
Also published as: CN106572061A

Abstract

Disclosed in the present invention are a wireless communication base station and a data transmission method thereof, a terminal and a data reception method thereof, caching serial data satisfying a preset transmission condition, the serial data being transmitted by central processing unit (CPU) and output through a serial port; encrypting the cached serial data, and outputting the encrypted serial data through the serial port. An embodiment of the present invention also provides a computer storage medium.

Description

Wireless communication base station, data transmission and reception method, terminal, and storage medium

Technical field

The present invention relates to the field of communications, and in particular, to a wireless communication base station, a data transmitting method thereof, a terminal, a data receiving method thereof, and a computer storage medium.

Background technique

With the rapid development of wireless communication technology and the emergence of a large number of smart phone terminals, the demand for mobile high-speed Internet, Long Term Evolution (LTE) as the fourth generation of mobile communication technology because of its faster movement Broadband connection speeds are increasingly popular and popular with operators and mobile customers worldwide. Mobile broadband connections are ubiquitous, and the security of base stations is threatened more, in the field of wireless communication base stations, especially for home-grade base station products such as femtocells. Unlike traditional carrier equipment, Femtocell is a client device that will eventually be placed in the user's home. Operators cannot control the user's disassembly or modification operations, which increases the risk of attack on the Femtocell device itself. .

The Femtocell base station has a reserved transmission serial port. The serial port exists as a lower-layer port of the single-board hardware. At the same time, the data transmitted by the serial port is directly transmitted in plaintext without being encrypted. The data transmitted from the serial port of the base station is related to the internal information of the base station. It can even log in to the kernel Linux system of the base station through the serial port. If it is illegally collected and utilized, there will be a huge security hole. For example, after using a display terminal such as a personal computer (PC) to connect to the serial port, the serial port can directly obtain the data, and input some common commands, that is, the internal information of the base station can be obtained and modified, and the security risk is great.

Summary of the invention

The embodiment of the present invention is to provide a wireless communication base station, a data transmission method thereof, a terminal, and a data receiving method thereof, which at least partially solve the security problem in the transmission process of the serial port data between the wireless communication base station and the terminal existing in the prior art. defect.

Embodiments of the present invention provide a method for transmitting data of a wireless communication base station, including: buffering serial port data that meets a preset transmission condition, and serial port data is data that is sent by a central processing unit and is to be transmitted through a serial port; The serial port data is encrypted; the encrypted serial port data is transmitted through the serial port.

In an embodiment of the present invention, buffering the serial port data includes dividing the serial port data into blocks and buffering the blocks.

In an embodiment of the present invention, the method for dividing the serial port data includes any one of the following methods: dividing the serial port data at regular intervals; and dividing the serial port data at a certain data length. .

In an embodiment of the present invention, encrypting the serial port data includes: obtaining an encryption key, and encrypting the serial port data block of the block cache by using the encryption key.

In one embodiment of the invention, the encryption key is a public key of an asymmetric encryption algorithm.

In an embodiment of the present invention, the buffering of the serial port that meets the preset transmission condition includes: determining whether the serial port data meets a preset transmission condition, and buffering the serial port data block that satisfies the preset transmission condition. The default transmission condition is as follows: the central processing unit has serial port data transmission, and the serial line is connected and both ends are powered.

The invention provides a method for receiving data of a terminal, comprising: receiving encrypted serial port data, wherein the serial port data is data sent by a central processing unit and transmitted through a serial port; and decrypting the encrypted serial port data.

In an embodiment of the present invention, decrypting the encrypted serial port data includes: obtaining a decryption key, and when receiving the block-encrypted serial port data, decrypting the key pair serial port data The block is decrypted; after the serial data block is decrypted, the serial port data decrypted by the block is also merged.

In one embodiment of the invention, the decryption key is a private key of an asymmetric encryption algorithm.

The invention provides a wireless communication base station, comprising: a cache module configured to cache serial port data that meets a preset transmission condition, wherein the serial port data is data sent by the central processing unit through the serial port; the encryption module is configured to The cached serial port data is encrypted; the sending module is configured to transmit the encrypted serial port data through the serial port.

In an embodiment of the present invention, the encryption module includes a first key acquisition submodule and an encryption submodule, the first key acquisition submodule is configured to acquire an encryption key, and the encryption submodule is configured to be cached by the cache module. When serial data is used, the serial data block is encrypted by the encryption key.

In an embodiment of the present invention, the cache module includes a determining submodule and a buffer submodule, and the determining submodule is configured to determine whether the serial port data meets a preset transmission condition, and the buffer submodule is configured to satisfy a preset transmission condition. The serial port data is buffered. The default transmission condition is as follows: the central processing unit has serial port data transmission, and the serial line is connected and both ends are powered.

The present invention provides a terminal, comprising: a receiving module configured to receive encrypted serial port data; and a decryption module configured to decrypt the encrypted serial port data.

In an embodiment of the present invention, the decryption module includes a second key acquisition submodule and a decryption submodule, the second key acquisition submodule is configured to acquire a decryption key, and the decryption submodule is configured to receive the score when the receiving module receives When the serial port data is encrypted, the serial port data is decrypted by the decryption key; the terminal further includes a processing module, and the processing module is configured to merge the serialized data after the block decryption.

The embodiment of the present invention further provides a computer storage medium, where the computer storage medium stores computer executable instructions, and the computer executable instructions are used to execute at least one of the wireless communication base station data transmission methods.

Wireless communication base station and data transmission method thereof, terminal and data thereof provided by embodiments of the present invention The receiving method and the computer storage medium encrypt the serial port data of the communication base station before the transmission, and the terminal decrypts the encrypted serial port data, thereby achieving the safer and more stable effect of the serial port data transmission of the communication base station, and improving the serial port. The security of data transmission avoids the risk of loopholes caused by the exposure of the base station serial port.

DRAWINGS

1 is a schematic flowchart of a method for transmitting data of a wireless communication base station according to Embodiment 1 of the present invention;

2 is a schematic flowchart of a data receiving method of a wireless communication base station according to Embodiment 2 of the present invention;

3 is a schematic structural diagram of a wireless communication base station according to Embodiment 3 of the present invention;

4 is a schematic structural diagram of a cache module according to Embodiment 3 of the present invention;

FIG. 5 is a schematic structural diagram of an encryption module according to Embodiment 3 of the present invention;

FIG. 6 is a schematic structural diagram of a terminal according to Embodiment 4 of the present invention; FIG.

FIG. 7 is a schematic structural diagram of another terminal according to Embodiment 4 of the present invention.

detailed description

The present invention will be further described in detail with reference to the accompanying drawings, in which: FIG.

Embodiment 1:

This embodiment provides a method for transmitting data of a wireless communication base station. Referring to FIG. 1, the following steps are specifically included:

Step S101: Cache serial port data that meets a preset transmission condition, where the serial port data is data that is sent by the central processing unit and is to be transmitted through the serial port;

Before encrypting the serial port data, the serial port data that meets the preset transmission condition needs to be cached. The serial port data is the data sent by the central processing unit and transmitted through the serial port; the preset transmission condition is: the central processing unit has a serial port. The data is transmitted, and the serial cable is connected and both ends are powered on. Specifically, the real-time monitoring of the central processing unit (CPU) of the base station sends out serial port data. If the CPU of the base station is sent out, the serial port data is sent out, and the serial port data line of the base station is connected and two When the terminal is powered on, it is considered that the serial port data sent by the CPU of the base station is transmitted through the serial port. At this time, the serial port data is buffered.

When the serial port data is cached, the serial port data can be divided into blocks and then cached. The specific segmentation method can divide the serial port data according to the time interval at a certain time interval. Preferably, the cache space is occupied. The encryption processing of large or a large number of serial port data affects the efficiency, and the serial port data can be segmented once every second, or the serial port data can be segmented according to the data length every certain data length. When the serial port data is cached, the corresponding serial port data block is cached. Preferably, the serial port data is divided into blocks per second, and the cache is temporarily cached. It should be understood that the manner of segmentation is not limited to the above two methods of segmentation.

Step S102: encrypt the cached serial port data;

After buffering the serial port data to be transmitted, the serial port data is encrypted, corresponding to the buffer mode of the serial port data, and the serial port data block of the block cache is encrypted when the serial port data is encrypted, and may be at regular intervals. The serial port data of the block buffer is encrypted, and the serial port data that can be cached at intervals of a certain data length is encrypted. Encrypting the serial port data includes obtaining an encryption key, and encrypting the serial data block of the block cache by using the encryption key. The encryption method may be performed by using an asymmetric encryption algorithm, and the obtained encryption key is the public key of the asymmetric encryption algorithm; this embodiment combines the characteristics of the serial port data rate to be small, and the maximum transmission rate is about 100 KBps, and the preferred use is A more secure asymmetric encryption algorithm, RSA algorithm, through public key encryption, private key decryption, is more secure and more difficult to crack than symmetric encryption algorithm; in addition, due to the small amount of data in serial port data, asymmetric encryption algorithm and adoption are adopted. Compared with the symmetric encryption algorithm, the efficiency of encryption and decryption is almost the same. Specifically, the public key of the asymmetric algorithm RSA is obtained and stored, and the serial data is encrypted by using the public key. When encrypting, the cached data can be encrypted every second. After the encryption is completed, the encrypted serial port data is transmitted through the serial port. Should be reasonable The solution is that the encryption method is not limited to the above encryption method.

It should be noted that the public key in this embodiment is generated by the RSA algorithm public-private key generation gadget, which is responsible for randomly generating a pair of public-private key pairs according to the RSA algorithm, the public key is used to encrypt the serial port data, and the private key is used for decrypting and encrypting. After the serial port data.

In addition, in order to avoid the case where the encryption key is invalid or lost, it is preferable to periodically update the encryption key, and the encryption key may be manually replaced periodically, or a timer may be set to automatically update the time.

Step S103: transmitting the encrypted serial port data through the serial port;

The encrypted serial port data is transmitted through the serial port, and is specifically transmitted out through the serial port line.

The data transmission method of the wireless communication base station in this embodiment is used to fundamentally ensure the security of the serial port data of the base station during transmission. The serial port data is encrypted by the public key value before being transmitted out, even if the hacker can obtain the serial port of the base station. Data, but because there is no private key value that can be decrypted, it is not possible to obtain any relevant information inside the base station.

Embodiment 2:

This embodiment provides a terminal data receiving method. Referring to FIG. 2, the following steps are specifically included:

Step S201: Receive encrypted serial port data, where the serial port data is data sent by the central processing unit and transmitted through the serial port;

The serial port data received by the encryption is specifically the serial port data encrypted by the block that is transmitted through the serial port.

Step S202: Decrypt the encrypted serial port data;

Decrypting the encrypted serial port data includes obtaining a decryption key required for decryption, decrypting the serial port data by decrypting the key block, and the decryption key corresponds to the encryption key; corresponding to the first embodiment, the implementation The preferred method uses the asymmetric encryption algorithm RSA algorithm for decryption, specifically obtaining the private key of the asymmetric algorithm RSA and storing it, and then encrypting the encrypted serial port through the private key pair. The data is chunked for decryption. After the serial port data is decrypted, the serial port data after the block decryption is merged, and the combined serial port data is displayed on the terminal.

It should be noted that the private key in this embodiment is generated by the RSA algorithm public-private key generation gadget, which is responsible for randomly generating a pair of public-private key pairs according to the RSA algorithm, the public key is used to encrypt the serial port data, and the private key is used for decrypting and encrypting. After the serial port data.

In addition, in order to avoid invalid or lost encryption keys, the encryption key needs to be updated periodically as the encryption key is periodically updated. The decryption key can be manually replaced periodically, or a timer can be set. Automatic timing update.

In particular, it is necessary to pay special attention to the storage of private keys during use to prevent leakage accidents.

The terminal data receiving method in this embodiment fundamentally ensures the security of the serial port data of the base station in the process of transmitting to the terminal, and the serial port data is encrypted by the public key value before the transmission, even if the hacker can obtain the serial port of the base station. Data, but because there is no private key value that can be decrypted, it is not possible to obtain any relevant information inside the base station.

Embodiment 3:

The embodiment provides a wireless communication base station. Referring to FIG. 3, the following specifically includes the following modules: a cache module 301, an encryption module 302, and a sending module 303.

The cache module 301 is configured to cache the serial port data that meets the preset transmission condition. The serial port data is sent by the central processing unit and transmitted through the serial port. The preset transmission condition is: the central processing unit has serial port data outgoing. The serial port is connected and the two ends are powered on. Referring to FIG. 4, the cache module 301 further includes a determining submodule 3011 and a buffer submodule 3012. The determining submodule 3011 is configured to determine whether the serial port data meets the preset transmission. Conditionally, the cache sub-module 3012 is configured to buffer serial port data that satisfies the preset transmission condition. For example, the determining sub-module 3011 monitors in real time whether the central processing unit of the base station sends out serial port data. If the CPU of the base station is sent out, the serial port data is sent out, and the serial port data line of the base station is connected and both ends are connected. If the power is generated, the serial port data sent by the CPU of the base station board is transmitted through the serial port. The association judgment sub-module 3011 and the buffer sub-module 3012 notify the buffer sub-module 3012 to buffer the serial port data when the judgment sub-module 3011 detects that the serial port data sent by the CPU of the base station is to be transmitted through the serial port.

When the serial port data is cached, the serial port data can be divided into blocks and then cached. The specific segmentation method can divide the serial port data according to the time interval at a certain time interval. Preferably, the cache space is occupied. The encryption processing of large or a large number of serial port data affects the efficiency, and the serial port data can be segmented once every second, or the serial port data can be segmented according to the data length every certain data length. When the serial port data is cached, the cache sub-module 3012 caches the split serial data block. Preferably, the serial data block is divided into blocks per second, and the cache is a temporary cache. It should be understood that the manner of segmentation is not limited to the above two methods of segmentation.

The encryption module 302 is configured to encrypt the buffered serial port data block, corresponding to the buffer mode of the serial port data, and encrypt the serial port data block of the block cache when encrypting the serial port data, and may be divided at regular intervals. The serial port data of the block buffer is encrypted, and the serial port data that can be cached at intervals of a certain data length is encrypted. Referring to FIG. 5, the encryption module 302 includes a first key acquisition submodule 3021 and an encryption submodule 3022. The first key acquisition submodule 3021 is configured to acquire an encryption key, and the encryption submodule 3022 is configured to obtain by using the first key. The encryption key obtained by the sub-module 3021 encrypts the serial port data block; the cached serial port data block is encrypted. Specifically, the cache sub-module 3012 blocks the serial port data to be transmitted, and then notifies the encryption sub-module 3022. The serial port data is encrypted in blocks. For example, the encryption sub-module 3022 is configured to encrypt the serial port data by using an asymmetric encryption algorithm, and encrypting the serial port data by using an encryption key, which is the public key of the asymmetric encryption algorithm; In combination with the characteristics of small serial port data rate, the maximum transmission rate is about 100 KBps. It is better to use a more secure asymmetric encryption algorithm. The RSA algorithm is more secure and harder than the symmetric encryption algorithm by public key encryption and private key decryption. Crack; in addition, due to serial port data itself The small amount of features, the use of asymmetric encryption algorithm and the use of symmetric encryption algorithm, the efficiency of encryption and decryption is almost the same. Specifically, the first key acquisition sub-module 3021 acquires and stores the public key used for encryption in the asymmetric encryption algorithm RSA, and the encryption sub-module 3022 uses the public key to encrypt the serial port data, and the preferred pair is cached per second when encrypting. The serial port data is encrypted in blocks, and after the encryption is completed, the encrypted serial port data is transmitted through the serial port. It should be understood that the encryption method is not limited to the above encryption method.

It should be noted that the public key in this embodiment is generated by the RSA algorithm public-private key generation gadget, which is responsible for randomly generating a pair of public-private key pairs according to the RSA algorithm, importing the public key into the encryption module, and importing the private key into the decryption module. The key is used to encrypt the serial port data, and the private key is used to decrypt the encrypted serial port data. Before encrypting the serial port data, the public key in the encryption module and the private key in the decryption module are initialized.

The sending module 303 is configured to transmit the encrypted serial port data through the serial port, and specifically, the sending module 303 transmits the encrypted serial port data to the outside through the serial port line.

The wireless communication base station in this embodiment fundamentally ensures the security of the serial port data of the base station in the transmission process, and the serial port data is encrypted by the public key value before the transmission, even if the hacker can obtain the serial port data of the base station, because There is no private key value that can be decrypted, nor can it obtain any information related to the internal base station.

The cache module of the embodiment of the present invention may correspond to a storage medium in the base station, where the storage medium may be various storage media such as a RAM or a flash.

The encryption module may correspond to a central processing unit, a microprocessor or a programmable array or a digital signal processor or the like within the base station. The encryption module may also correspond to a processing circuit, which may include an application specific integrated circuit.

The sending module may be fixed to a communication interface in the base station, for example, an air interface in the base station.

Embodiment 4:

This embodiment provides a terminal. Referring to FIG. 6, specifically, the receiving module 601 and the decrypting module 602 are included.

The receiving module 601 is configured to receive the encrypted serial port data, where the serial port data is data sent by the central processing unit and transmitted through the serial port; specifically, the encrypted serial port data transmitted through the serial port is received.

The decryption module 602 is configured to decrypt the encrypted serial port data. Referring to FIG. 7, the decryption module 602 includes a second key acquisition submodule 6021 and a decryption submodule 6022. The second key acquisition submodule 6021 is configured to be encrypted. The decryption key required for decryption is obtained before the decryption of the serial port data, and the decryption key corresponds to the encryption key. Corresponding to the first embodiment, the present embodiment preferably uses the asymmetric encryption algorithm RSA for decryption, specifically The second key acquisition sub-module 6021 obtains the private key of the asymmetric encryption algorithm RSA and stores it, and then the decryption sub-module 6022 decrypts the block-encrypted serial data block by the private key. The terminal provided in this embodiment further includes a processing module 603, where the processing module 603 is configured to merge the serialized data after the block decryption, and then merge the serial port data to be displayed on the terminal.

The terminal in this embodiment is used to fundamentally ensure that the serial port data of the base station is transmitted to the terminal. Security, the serial port data has been encrypted by the public key value before transmission, even if the hacker can obtain the serial port data of the base station, but because there is no private key value that can be decrypted, it can not acquire any relevant information inside the base station.

The receiving module here may correspond to a communication interface of the terminal, for example, a receiving antenna corresponding to the terminal.

The decryption module can correspond to a processor or processing circuitry within the terminal. The processing circuitry herein can include an application specific integrated circuit; the processor can be a variety of processors, such as a central processing unit or a microprocessor within the terminal.

An embodiment of the present invention provides a computer storage medium, where the computer storage medium stores computer executable instructions, and the computer executable instructions are used in at least one of the foregoing wireless communication base station data transmission methods, for example, the figure may be executed. 1 and / or the method shown in Figure 2.

The computer storage medium in this embodiment may be any type of storage such as an optical disk, a hard disk or a magnetic disk, and may be a non-transitory storage medium.

The above is a further detailed description of the present invention in combination with the specific embodiments, and the modifications made in accordance with the principles of the present invention should be understood as falling within the scope of the present invention.

Claims

A method for transmitting data of a wireless communication base station, comprising:

Cache the serial port data that meets the preset transmission condition, and the serial port data is data that is sent by the central processing unit and is to be transmitted through the serial port;

Encrypting the cached serial port data;

The encrypted serial port data is transmitted through the serial port.
The method for transmitting data of a wireless communication base station according to claim 1, wherein the buffering the serial port data comprises dividing the serial port data into blocks and buffering the blocks.
The method for transmitting data of a wireless communication base station according to claim 2, wherein the method of dividing the serial port data comprises any one of the following methods:

Separating the serial port data at regular intervals;

The serial port data is segmented every certain data length.
The method for transmitting data of a wireless communication base station according to claim 2 or 3, wherein encrypting the serial port data comprises:

Obtaining an encryption key, and encrypting the serial port data block of the block cache by using the encryption key.
The wireless communication base station data transmitting method according to claim 4, wherein the encryption key is a public key of an asymmetric encryption algorithm.
The method for transmitting data of a wireless communication base station according to any one of claims 1 to 3, wherein the buffering of the serial port data that satisfies the preset transmission condition comprises:

Determining whether the serial port data meets the preset transmission condition, and buffering, by using the serial port data block that meets the preset transmission condition;

The preset transmission condition is: the central processing unit has the serial port data transmitted, and the serial line is connected and both ends are powered.
A terminal data receiving method, comprising:

Receiving the encrypted serial port data, where the serial port data is data sent by the central processing unit and transmitted through the serial port;

The encrypted serial port data is decrypted.
The terminal data receiving method according to claim 7, wherein the decrypting the encrypted serial port data comprises:

Acquiring a decryption key, and when receiving the serial port data encrypted by the block, decrypting the serial data block by using the decryption key;

After the serial port data is decrypted by the block, the serial port data after the block decryption is further combined.
The terminal data receiving method according to claim 8, wherein said decryption key is a private key of an asymmetric encryption algorithm.
A wireless communication base station, comprising:

a cache module configured to cache serial port data that meets a preset transmission condition, where the serial port data is sent by the central processing unit to be transmitted through the serial port;

The encryption module is configured to encrypt the cached serial port data;

The sending module is configured to transmit the encrypted serial port data through the serial port.
The wireless communication base station according to claim 10, wherein said encryption module comprises a first key acquisition submodule and an encryption submodule,

The first key acquisition submodule is configured to acquire an encryption key,

The encryption submodule is configured to encrypt the serial port data block by using the encryption key when the cache module caches the serial port data in blocks.
The wireless communication base station according to claim 10 or 11, wherein the cache module comprises a judgment submodule and a cache submodule,

The determining submodule is configured to determine whether the serial port data meets the preset transmission condition,

The buffer sub-module is configured to cache the serial port data block that meets the preset transmission condition; the preset transmission condition is: the central processor has the serial port data transmitted, and the serial line has been Connected and powered on both ends.
A terminal, including:

The receiving module is configured to receive the encrypted serial port data, where the serial port data is data sent by the central processing unit and transmitted through the serial port;

The decryption module is configured to decrypt the encrypted serial port data.
The terminal of claim 13 wherein

The decryption module includes a second key acquisition submodule and a decryption submodule,

The second key acquisition submodule is configured to acquire a decryption key,

The decryption sub-module is configured to decrypt the serial port data block by using the decryption key when the receiving module receives the block-encrypted serial port data;

The terminal further includes a processing module,

The processing module is configured to merge the serial port data decrypted by the block.
A computer storage medium having stored therein computer executable instructions for performing at least one of the wireless communication base station data transmission methods of claims 1 to 7.