WO2024001212A1

WO2024001212A1 - Information transmission method and apparatus, and storage medium and electronic apparatus

Info

Publication number: WO2024001212A1
Application number: PCT/CN2023/076264
Authority: WO
Inventors: 王丹; 邢文超
Original assignee: 中兴通讯股份有限公司
Priority date: 2022-06-29
Filing date: 2023-02-15
Publication date: 2024-01-04
Also published as: CN117375859A

Abstract

Provided in the embodiments of the present invention are an information transmission method and apparatus, and a storage medium and an electronic apparatus. The method comprises: acquiring message information to be encrypted, which is sent by means of a server; by means of a key chain application module, acquiring a key chain parameter, which matches a target communication link, wherein the key chain application module is configured in a communication module of a target linux system, and the target communication link is a communication link which is established between the server and a target router; in the key chain application module, encrypting the message information by using the key chain parameter, so as to obtain first encrypted information; and transmitting the first encrypted information to the target router by means of the target communication link.

Description

Information transmission method and device, storage medium and electronic device

Cross-references to related applications

This application is based on the Chinese patent application CN202210753855.6 with the invention title "Information transmission method and device, storage medium and electronic device" submitted on June 29, 2022, and claims the priority of this patent application, and the disclosure is disclosed by reference All contents are incorporated into this application.

Technical field

Embodiments of the present invention relate to the field of communications, and specifically, to an information transmission method and device, a storage medium and an electronic device.

Background technique

In the era of software-defined network (SDN) controllers, the controller needs to respond to network status changes, deliver paths to routers, and try its best to ensure that services are not interrupted. Network status changes are mainly controlled by the Border Gateway Protocol (BGP). ) provided by the server, the BGP server maintains communication with the router, and notifies the controller of changes in network status based on the information reported by the router; the path delivery function is mainly provided by the Path Computational Element Communication Protocol (PCEP) server, PCEP The server sends the path information calculated by the controller to the router, and the router forwards the service packets based on the latest path. The transmission security of BGP, PCEP servers and routers is crucial to business correctness.

In traditional deployment scenarios, BGP and PCEP servers are deployed directly to Linux servers. The Linux server itself does not support the keychain function. Therefore, although the router supports the keychain function, the BGP and PCEP servers still cannot use the keychain function to achieve security. transmission. In other words, the existing method of information transmission in the Linux system has the technical problem of low security of information transmission.

To address the above problems, no effective solutions have yet been proposed.

Contents of the invention

Embodiments of the present invention provide an information transmission method and device, a storage medium and an electronic device, so as to at least solve the problem of low information transmission security in Linux systems in related technologies.

According to an embodiment of the present invention, an information transmission method is provided, which method includes: obtaining the message information to be encrypted sent by the server; obtaining key chain parameters matching the target communication link through the key chain application module, Wherein, the key chain application module is configured in the communication module of the target Linux system, and the target communication link is the communication link established between the server and the target router; in the key chain application module, The key chain parameters encrypt the message information to obtain first encrypted information; the first encrypted information is transmitted to the target router through the target communication link.

According to another embodiment of the present invention, another information transmission method is provided. The method includes: sending key chain parameters determined from a preconfigured key chain parameter set through a server installed in the target Linux system. To the communication module in the target Linux system; transmit the message information to be encrypted to the communication module, so that the communication module will pass the first encrypted information obtained after encrypting the message information through the target communication link Sent to the target router, where the first encrypted information is obtained by encrypting the message information using the key chain parameters configured by the key chain application module configured in the communication module. The key chain parameters Matches the target communication link.

According to another embodiment of the present invention, an information transmission device is provided. The device includes: a first acquisition unit configured to acquire the message information to be encrypted sent by the server; a second acquisition unit configured to obtain the encrypted message through a key chain. The application module obtains the key chain parameters matching the target communication link, wherein the key chain application module is configured in the communication module of the target Linux system, and the target communication link is established between the server and the target router. communication link; an encryption unit, configured to use the key chain parameters to encrypt the message information in the key chain application module to obtain the first encrypted information; a transmission unit, configured to pass the target A communications link transmits the first encrypted information to the target router.

According to yet another embodiment of the present invention, another information transmission device is provided. The device includes: a sending unit configured to send the information determined from a preconfigured key chain parameter set through a server installed in the target Linux system. The key chain parameters are sent to the communication module in the target Linux system; the transmission unit is configured to transmit the message information to be encrypted to the communication module, so that the communication module will encrypt the message information to obtain The first encrypted information is sent to the target router through the target communication link, wherein the first encrypted information is the key chain application module configured in the communication module using the key chain parameters to perform the processing on the message information. Obtained through encryption, the key chain parameters match the target communication link.

According to yet another embodiment of the present invention, a computer-readable storage medium is also provided. A computer program is stored in the computer-readable storage medium, wherein the computer program is configured to execute any of the above methods when running. Steps in Examples.

According to yet another embodiment of the present invention, an electronic device is also provided, including a memory and a processor. A computer program is stored in the memory, and the processor is configured to run the computer program to perform any of the above. Steps in method embodiments.

Description of drawings

Figure 1 is a schematic structural diagram of a computer terminal according to an embodiment of the present invention;

Figure 2 is a flow chart of an information transmission method according to an embodiment of the present invention;

Figure 3 is an environmental schematic diagram of an information transmission method according to an embodiment of the present invention;

Figure 4 is a flow chart of an environment configuration method according to another embodiment of the present invention;

Figure 5 is a sequence diagram of an information transmission method according to an embodiment of the present invention;

Figure 6 is a schematic structural diagram of an information transmission device according to an embodiment of the present invention;

Figure 7 is a schematic structural diagram of an information transmission device according to another embodiment of the present invention.

Detailed ways

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings and embodiments.

It should be noted that the terms "first", "second", etc. in the description and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence.

First, an explanation of the terms involved in this application:

PCEP server: PCEP is a network transmission protocol. The PCEP server uses the PCEP protocol to communicate with the router and send instructions to the router, or the router reports network conditions to the PCEP server.

SDN: software define network, software defined network.

SDN controller: A controller used to implement SDN by obtaining network status and dynamically modifying the network.

Management and control system: The gateway and SDN controller are combined to jointly manage and control the network to implement SDN.

keychain: Keychain, including some keys and encryption algorithms.

docker container: a system running based on docker container technology.

kubernetes: an open source system for automating the deployment, scaling, and management of containerized applications. It combines the containers that make up an application into logical units for easier management and service discovery.

kubernetes IP address: The IP address displayed by the kubernetes system to the external network.

Linux operating system: Linux is a free and open source UNIX-like operating system.

TCP/IP module: A module in the Linux operating system specifically used to create and maintain TCP links.

socket: The handle or identification of the TCP connection.

The method embodiments provided in the embodiments of this application can be executed in a mobile terminal, a computer terminal, or a similar computing device. Taking running on a computer terminal as an example, FIG. 1 is a hardware structure block diagram of a computer terminal running an information transmission method according to an embodiment of the present invention. As shown in Figure 1, the computer terminal may include one or more (only one is shown in Figure 1) processors 102 (the processor 102 may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA) and a memory 104 for storing data, wherein the above-mentioned computer terminal may also include a transmission device 106 and an input and output device 108 for communication functions. Persons of ordinary skill in the art can understand that the structure shown in Figure 1 is only illustrative, and it does not limit the structure of the above-mentioned computer terminal. For example, the computer terminal may also include more or fewer components than shown in FIG. 1 , or have a different configuration than shown in FIG. 1 .

The memory 104 can be used to store computer programs, for example, software programs and modules of application software, such as computer programs corresponding to the information transmission method in the embodiment of the present invention. The processor 102 executes various tasks by running the computer programs stored in the memory 104. A functional application and data processing, that is, to implement the above method. Memory 104 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 104 may further include memory located remotely relative to the processor 102, and these remote memories may be linked to the mobile terminal through a network. Examples of the above-mentioned networks include but are not limited to the Internet, intranets, local area networks, mobile communication networks and combinations thereof.

The transmission device 106 is used to receive or send data via a network. Specific examples of the above-mentioned network may include a wireless network provided by a communication provider of the computer terminal. In one example, the transmission device 106 includes a network adapter (Network Interface Controller, NIC for short), which can be linked to other network devices through a base station to communicate with the Internet. In one example, the transmission device 106 may be a radio frequency (Radio Frequency, RF for short) module, which is used to communicate with the Internet wirelessly.

This embodiment provides an information transmission method, which can be implemented through the communication module in the Linux system. Figure 2 is a flow chart of the information transmission method according to the embodiment of the present invention. As shown in Figure 2, the process includes Follow these steps:

Step S202: Obtain the message information to be encrypted sent by the server;

As an optional method, the above server can be one of the BGP or PCEP servers running in the Linux system. It should be noted that in the era of SDN controllers, the controller needs to respond to network status changes, deliver paths to routers, and try its best to ensure that services are not interrupted. Network status changes are mainly provided by the BGP server. The BGP server maintains communication with the router. According to the router The reported information notifies the controller of changes in network status; the path delivery function is mainly provided by the PCEP server. The PCEP server sends the path information calculated by the controller to the router, and the router forwards service packets based on the latest path.

In the above-mentioned embodiment of the present application, the communication module in the Linux system may be used as the execution subject to obtain the message information to be encrypted by the BGP or PCEP server.

Step S204: Obtain key chain parameters matching the target communication link through the key chain application module, where the key chain application module is configured in the communication module of the target Linux system, and the target communication link is between the server and the target router. Established communication links;

Step S206, use the key chain parameters to encrypt the message information in the key chain application module to obtain the first encrypted information;

Step S208: Transmit the first encrypted information to the target router through the target communication link.

In an exemplary embodiment, a kubernetes environment is running in the target Linux system, and a key chain configuration module is configured in the server deployed in the kubernetes environment, where the key chain configuration module is configured to obtain a key chain parameter set, The server includes a first server for detecting changes in network status and a second server for calculating information transmission paths.

As shown in Figure 3, an environmental schematic diagram of an optional information transmission method in this implementation is illustrated. As an optional method, the above keychain application module can be a keychain application module configured in the TCP/IP module in the Linux system to save the keychain parameters bound to a certain TCP link and kubernetes Virtual IP address, and perform special processing on links bound to keychain parameters. For example, when sending a message, add an encryption field based on the keychain parameter and kubernetes IP address, and perform authentication based on the keychain parameter and kubernetes IP address when receiving a message. The encryption algorithm is an encryption algorithm already supported by the Linux operating system.

As shown in Figure 3, the above-mentioned first server and second server (ie, the PCEP server and the BGP server in the figure) may be configured with a keychain configuration module, where the keychain configuration module may be a keychain configuration module, Its function is: users need to configure keychain parameters and kubernetes IP address in the browser, and the keychain configuration module provides Configuration interface, storage configuration. When the BGP and PCEP servers establish a link with the router, the keychain configuration module sets the keychain parameters and the IP address of kubernetes to the keychain application module in the TCP/IP module of the Linux operating system.

The environment in which the above method can be executed will be further described below in conjunction with Figure 3. As shown in Figure 3, the Linux system processes the packets to be sent through the TCP/IP module and communicates with the router outside the system through the NAT gateway. In a specific implementation, the Linux system shown in Figure 3 can run a kubernetes environment, and the Linux system running the kubernetes environment is also pre-configured with a PCEP server and a BGP server. Users can further configure the above PCEP server and BGP server through the browser, such as configuring the keychain parameters in the PCEP server and BGP server. The PCEP server and the BGP server need to communicate with the router through the TCP/IP module in the Linux system. The TCP/IP module configured with the keychain application module is used to encrypt the messages sent by the PCEP server and the BGP server using the keychain parameters. , and assembles the encrypted message and sends it to the router.

In an exemplary embodiment, before obtaining the message information sent by the server, the above step also includes receiving the link identifier of the target communication link sent by the server and the key chain parameters configured in advance for the target route; changing the key chain parameters Bind to the link identifier.

In an exemplary embodiment, before obtaining the message information sent by the server, the method further includes: configuring the key chain application module in the communication module of the initial Linux system to obtain the target Linux system; and installing the kubernetes environment in the target Linux system; Deploy a first server for detecting network status changes and a second server for calculating information transmission paths in the kubernetes environment, where both the first server and the second server are configured with a key chain parameter set, and the server includes the first server and a second server.

An environment configuration method of this application will be described below with reference to Figure 4:

S402, install a Linux operating system that supports the keychain function;

S404, install kubernetes;

S406, install BGP and PCEP servers;

It is understandable that this step can be performed when installing the controlled version, or BGP and PCEP can be installed separately. BGP and PCEP servers integrate the keychain configuration module to provide a configuration interface for users to configure all parameters.

S408, configure the keychain parameters and kubernetes IP address on the BGP and PCEP servers;

It should be noted that since BGP and PCEP servers will connect to one or more routers, the keychain parameters bound to these routers may be the same or different. Therefore, the keychain configuration module on the BGP and PCEP servers supports setting default keychain parameters and setting certain keychain parameters. The keychain parameters of a router. The kubernetes IP address is the external IP address of the kubernetes environment.

S410, configure the keychain parameters on the router;

You can configure the keychain parameters of one or more routers on the network management system, or you can configure the keychain parameters on the routers, and then trigger the network management system to synchronize the configuration from the routers.

S412, configure router parameters on the BGP and PCEP servers;

Configure the set of routers that the BGP and PCEP servers can connect to. When configuring the router, you can set this path Whether the router uses the keychain function.

S414, BGP, PCEP servers and routers perform encrypted transmission based on keychain parameters.

It is understandable that before information transmission starts, it is first determined whether to use the keychain function. If the keychain function is used, and the user also configures the keychain parameters bound to the router in S408, the bound keychain parameters will be used for encrypted transmission; If the user does not configure keychain parameters for the router in S408, the default keychain parameters will be used for encrypted transmission. If it is determined not to use the keychain function before the transmission is started, normal TCP/IP communication is performed.

As an optional method, the above method can also provide a user interface. The user needs to configure the keychain parameters, kubernetes IP address, whether the router enables the keychain function, and the keychain parameters bound to the router on the gateway interface or similar network management tools. . Users can also set default keychain parameters and select certain routers to bind default keychain parameters in batches to reduce user operations.

In an exemplary embodiment, the above-mentioned encrypting the message information using the key chain parameters in the key chain application module to obtain the first encrypted information includes: encrypting the message information based on the key chain parameters to obtain the encrypted field ; Obtain the message header and message content of the message information, and package the message header, message content and encrypted fields into the first encrypted information.

In an exemplary embodiment, after the above-mentioned sending the first encrypted information to the target router through the target communication link, the method further includes: obtaining the second encrypted information sent by the target router through the target communication link, wherein the second encrypted information is the target router. The router uses the key chain parameters to encrypt the message information to be transmitted to the server. It performs security verification on the second encrypted information based on the key chain parameters. If the verification passes, the router sends the second encrypted information to Server; in case of verification failure, discard the second encrypted information.

In an exemplary embodiment, encrypting the message information using key chain parameters in the key chain application module to obtain the first encrypted information also includes: obtaining the first communication address configured for the target Linux system, where , the first communication address is a virtual address corresponding to the kubernetes environment pre-configured in the target Linux system; use the first communication address to replace the second communication address in the message information to obtain the reference message information, where the second communication address is the server The communication address; encrypt the reference message content in the reference message information based on the key chain parameters to obtain the reference encryption field; combine the reference message header, reference message content and reference encryption field in the reference message information to form the first An encrypted message.

In an exemplary embodiment, after the above-mentioned sending the first encrypted information to the target router through the target communication link, the method further includes: obtaining the third encrypted information sent by the target router through the target communication link, wherein the third encrypted information is the target router. The router uses the key chain parameters to encrypt the message information to be transmitted to the server. The communication address carried in the third encrypted information is the first communication address; security verification is performed based on the key chain parameters and the three encrypted information. ; If the verification passes, replace the first communication address in the third encrypted information with the second communication address, and send the third encrypted information to the server; if the verification fails, discard the third encrypted information.

In the above embodiment of the present invention, the message information to be encrypted sent by the server is obtained; the key chain parameters matching the target communication link are obtained through the key chain application module, wherein the key chain application module is configured in the target Linux In the communication module of the system, the target communication link is the communication link established between the server and the target router; in the key chain application module, the key chain parameters are used to encrypt the message information to obtain the first encrypted information; through the target The communication link transmits the first encrypted information to the destination router. This solves the technical problem of low security of information transmission in Linux systems.

This embodiment provides another information transmission method, which can be through the PCEP server or BGP server in Figure 3 Execution implementation includes: sending the key chain parameters determined from the pre-configured key chain parameter set to the communication module in the target Linux system through the server installed in the target Linux system; transmitting the report to be encrypted to the communication module message information, so that the communication module sends the first encrypted information obtained after encrypting the message information to the target router through the target communication link, where the first encrypted information is the key used by the key chain application module configured in the communication module The key chain parameters are obtained by encrypting the message information, and the key chain parameters match the target communication link.

In an exemplary embodiment, before sending the key chain parameters determined from the pre-configured key chain parameter set to the communication module in the target Linux system, the method further includes: searching in the key chain parameter set. Key chain parameters that match the target router, where the key chain parameter set stores multiple router identities and multiple preconfigured key chain parameters.

In an exemplary embodiment, the method further includes: sending a link establishment request to the communication module to establish a target communication link between the server and the target router through the communication module; when the target communication link is successfully established, obtaining and The link ID matched by the target communication link.

In an exemplary embodiment, the method further includes: a kubernetes environment is running in the target Linux system, and a key chain configuration module is configured in the server deployed in the kubernetes environment, wherein the key chain configuration module is configured to obtain the key chain The parameter set server includes a first server for detecting changes in network status and a second server for calculating information transmission paths.

In an exemplary embodiment, after the above-mentioned sending the message information to be encrypted to the communication module to send the first encrypted information to the target router through the target communication link, the method further includes: obtaining the second encrypted information sent by the communication module, wherein , the second encrypted information is the encrypted information obtained by the target router using the key chain parameters to encrypt the message information to be transmitted to the server, and the second encrypted information has passed the security verification of the communication module.

In an exemplary embodiment, the above-mentioned transmission of message information to be encrypted to the communication module further includes: sending the first communication address currently configured for the target Linux system to the communication module, so that the communication module sends encrypted messages based on the first communication address. Information, wherein the first communication address is a virtual address corresponding to the kubernetes environment pre-configured in the target Linux system.

In an exemplary embodiment, after sending the message information to be encrypted to the communication module, the method further includes: obtaining the third encrypted information sent by the communication module, where the third encrypted information is encrypted information that has passed security verification, and the third The communication address carried in the encrypted information is the second communication address, where the second communication address is the communication address of the server.

In order to facilitate understanding of the technical solutions provided by the embodiments of the present invention, a detailed description will be given below in conjunction with embodiments of specific scenarios.

The information transmission method sequence diagram shown in Figure 5 explains the specific work coordination process of each module of this application:

For example, from step S502 to step S506, the user configures the default keychain parameters and kubernetes IP address on the BGP or PCEP server, adds the configuration of router A (including keychain parameters), and triggers the BGP or PCEP server to actively establish a link to router A;

Then, as in steps S508 to S512, the BGP or PCEP server attempts to establish a TCP link with router A. The TCP/IP module of the Linux operating system requests router A through the kubernetes gateway based on the IP address of router A. Establish a TCP link. After the link is successfully established, the TCP/IP module returns the linked socket to the BGP or PCEP server;

As shown in step S514 and step S516, the keychain configuration module in the server finds that router A has bound the keychain parameters, and configures the keychain parameters and kubernetes IP address bound to router A to the keychain application module through the socket. The keychain application module adds the keychain parameters. Bind the kubernetes IP address to the socket;

In step S518, the BGP or PCEP server calls the TCP/IP module according to the protocol and sends messages to router A based on the socket. When the TCP/IP module uses the socket to send a message to Router A, the keychain application module adds an encryption field to the message based on the keychain parameters bound to the socket and the kubernetes IP address.

As shown in steps S520 to S524, when router A receives the message, it will use the encrypted field for security authentication. If the authentication passes, it will reply the message to the BGP or PCEP server. If the authentication does not pass, it will discard the message. Similarly, Router A will also add an encryption field when sending a message to the BGP or PCEP server. When the TCP/IP module of the BGP or PCEP server receives the encrypted message on the socket, the keychain application module performs security authentication on the message based on the keychain parameters bound to the socket and the kubernetes IP address. If the authentication passes, the TCP/IP module will hand the message to the BGP or PCEP server for processing. If the authentication does not pass, the message will be discarded.

Through the above implementation of the present application, the message information to be encrypted sent by the server is obtained; the key chain parameters matching the target communication link are obtained through the key chain application module, wherein the key chain application module is configured in the target Linux system In the communication module, the target communication link is the communication link established between the server and the target router; in the key chain application module, the key chain parameters are used to encrypt the message information to obtain the first encrypted information; through the target communication The link transmits the first encrypted information to the destination router. Implementing keychain secure transmission based on Kubernetes can improve communication security, avoid security issues, and avoid business attacks and interruptions, thus solving the technical problem of low security of information transmission in Linux systems.

Through the description of the above embodiments, those skilled in the art can clearly understand that the method according to the above embodiments can be implemented by means of software plus the necessary general hardware platform. Of course, it can also be implemented by hardware, but in many cases the former is Better implementation. Based on this understanding, the technical solutions of the embodiments of the present invention can be embodied in the form of software products in essence or in part that contribute to the existing technology. The computer software products are stored in a storage medium (such as ROM/RAM, magnetic disc, optical disk), including several instructions to cause a terminal device (which can be a mobile phone, computer, server, or network device, etc.) to execute the methods described in various embodiments of the present invention.

This embodiment also provides an information transmission device, which is used to implement the above embodiments and preferred implementations. What has been described will not be described again. As used below, the term "module" may be a combination of software and/or hardware that implements a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, implementation in hardware, or a combination of software and hardware, is also possible and contemplated.

Figure 6 is a schematic structural diagram of an information transmission device according to an embodiment of the present invention. As shown in Figure 6, the information transmission device includes a first acquisition unit 602, a second acquisition unit 604, an encryption unit 606 and a transmission unit 608.

The first obtaining unit 602 is configured to obtain the message information to be encrypted sent by the server;

The second acquisition unit 604 is configured to obtain key chain parameters matching the target communication link through the key chain application module, where the key chain application module is configured in the communication module of the target Linux system, and the target communication link is a server. and goals Communication links established between routers;

The encryption unit 606 is configured to encrypt the message information using the key chain parameters in the key chain application module to obtain the first encrypted information;

The transmission unit 608 is configured to transmit the first encrypted information to the target router through the target communication link.

Figure 7 is a schematic structural diagram of an information transmission device according to another embodiment of the present invention. As shown in Figure 7, the information transmission device includes a sending unit 702 and a transmission unit 704.

The sending unit 702 is configured to send the key chain parameters determined from the preconfigured key chain parameter set to the communication module in the target Linux system through the server installed in the target Linux system;

The transmission unit 704 is configured to transmit the message information to be encrypted to the communication module, so that the communication module sends the first encrypted information obtained by encrypting the message information to the target router through the target communication link, where the first encrypted information It is obtained by the key chain application module configured in the communication module using the key chain parameters to encrypt the message information. The key chain parameters match the target communication link.

It should be noted that each of the above modules can be implemented through software or hardware. For the latter, it can be implemented in the following ways, but is not limited to this: the above modules are all located in the same processor; or the above modules can be implemented in any combination. The forms are located in different processors.

Embodiments of the present invention also provide a computer-readable storage medium that stores a computer program, wherein the computer program is configured to execute the steps in any of the above method embodiments when running.

In an exemplary embodiment, the computer-readable storage medium may include but is not limited to: U disk, read-only memory (Read-Only Memory, referred to as ROM), random access memory (Random Access Memory, referred to as RAM) , mobile hard disk, magnetic disk or optical disk and other media that can store computer programs.

An embodiment of the present invention also provides an electronic device, including a memory and a processor. A computer program is stored in the memory, and the processor is configured to run the computer program to perform the steps in any of the above method embodiments.

In an exemplary embodiment, the above-mentioned electronic device may further include a transmission device and an input-output device, wherein the transmission device is linked to the above-mentioned processor, and the input-output device is linked to the above-mentioned processor.

For specific examples in this embodiment, reference may be made to the examples described in the above-mentioned embodiments and exemplary implementations, and details will not be described again in this embodiment.

Obviously, those skilled in the art should understand that each module or each step of the above-mentioned embodiments of the present invention can be implemented by a general-purpose computing device. They can be concentrated on a single computing device, or distributed among multiple computing devices. over a network, they may be implemented with program code executable by a computing device, such that they may be stored in a storage device for execution by the computing device, and in some cases, may be executed in a sequence different from that described here. The steps shown or described may be implemented by fabricating them separately into individual integrated circuit modules, or by fabricating multiple modules or steps among them into a single integrated circuit module. As such, the invention is not limited to any specific combination of hardware and software.

The above descriptions are only preferred embodiments of the present invention and are not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and changes. Any modifications, equivalent substitutions, Improvements, etc., should be included in the protection scope of the present invention.

Claims

An information transmission method including:

Obtain the message information to be encrypted sent by the server;

The key chain parameters matching the target communication link are obtained through the key chain application module, wherein the key chain application module is configured in the communication module of the target Linux system, and the target communication link is the server and the target Communication links established between routers;

Use the key chain parameters to encrypt the message information in the key chain application module to obtain first encrypted information;

The first encrypted information is transmitted to the target router over the target communication link.
The method according to claim 1, wherein before obtaining the message information sent by the server, it further includes:

Receive the link identifier of the target communication link sent by the server and the key chain parameters configured in advance for the target route;

Bind the key chain parameter and the link identifier.
The method according to claim 2, wherein a kubernetes environment is running in the target Linux system, and a key chain configuration module is configured in a server deployed in the kubernetes environment, wherein the key chain configuration module Set to obtain the key chain parameter set, the server includes a first server for detecting changes in network status and a second server for calculating an information transmission path.
The method according to claim 1, wherein said using the key chain parameters in the key chain application module to encrypt the message information to obtain the first encrypted information includes:

Encrypt the message information based on the key chain parameters to obtain encrypted fields;

Obtain the message header and message content of the message information, and package the message header, the message content and the encrypted field into the first encrypted information.
The method according to claim 1, wherein after sending the first encrypted information to the target router through the target communication link, it further includes:

Obtain the second encrypted information sent by the target router through the target communication link, where the second encrypted information is the message information to be transmitted to the server by the target router using the key chain parameters. Encrypted information obtained by encryption;

Perform security verification on the second encrypted information based on the key chain parameters;

If the verification passes, send the second encrypted information to the server;

In the event of verification failure, the second encrypted information is discarded.
The method according to claim 1, using the key chain parameters to encrypt the message information in the key chain application module to obtain the first encrypted information, further comprising:

Obtain the first communication address configured for the target Linux system, wherein the first communication address is a virtual address corresponding to the kubernetes environment pre-configured in the target Linux system;

Use the first communication address to replace the second communication address in the message information to obtain reference message information, where the second communication address is the communication address of the server;

Encrypt the reference message content in the reference message information based on the key chain parameters to obtain a reference encryption field;

The first encrypted information is composed of the reference message header, the reference message content and the reference encryption field in the reference message information.
The method according to claim 6, after sending the first encrypted information to the target router through the target communication link, further comprising:

Obtain the third encrypted information sent by the target router through the target communication link, where the third encrypted information is the message information to be transmitted to the server by the target router using the key chain parameters. The encrypted information obtained by encrypting, the communication address carried in the third encrypted information is the first communication address;

Perform security verification based on the key chain parameters and the three encrypted information;

If the verification passes, replace the first communication address in the third encrypted information with the second communication address, and send the third encrypted information to the server;

In the event of verification failure, the third encrypted information is discarded.
An information transmission method including:

Through the server installed in the target Linux system, the key chain parameters determined from the preconfigured key chain parameter set are sent to the communication module in the target Linux system;

Transmit the message information to be encrypted to the communication module, so that the communication module will send the first encrypted information obtained after encrypting the message information to the target router through the target communication link, wherein the first The encrypted information is obtained by using the key chain parameters to encrypt the message information by the key chain application module configured in the communication module, and the key chain parameters match the target communication link.
The method according to claim 8, wherein before sending the key chain parameters determined from the pre-configured key chain parameter set to the communication module in the target Linux system, it further includes:

Search the key chain parameter set for the key chain parameter that matches the target router, wherein the key chain parameter set stores multiple router identifiers and multiple preconfigured key chains. parameter.
The method of claim 9, further comprising:

Send a link establishment request to the communication module to establish the target communication link between the server and the target router through the communication module;

If the target communication link is successfully established, a link identifier matching the target communication link is obtained.
The method according to claim 9, wherein a kubernetes environment is running in the target linux system. environment, and the server deployed in the kubernetes environment is configured with a key chain configuration module, wherein the key chain configuration module is configured to obtain the key chain parameter set, and the server includes a key chain configuration module for detecting network status changes a first server and a second server for calculating the information transmission path.
The method according to claim 8, wherein after sending the message information to be encrypted to the communication module to send the first encrypted information to the target router through the target communication link, it further includes:

Obtain the second encrypted information sent by the communication module, wherein the second encrypted information is the encrypted information obtained by the target router using the key chain parameters to encrypt the message information to be transmitted to the server, The second encrypted information has passed the security verification of the communication module.
The method according to claim 8, wherein said transmitting the message information to be encrypted to the communication module further includes:

Send the first communication address currently configured for the target Linux system to the communication module to send the encrypted information based on the first communication address through the communication module, wherein the first communication address is preconfigured The virtual address corresponding to the kubernetes environment of the target Linux system.
The method according to claim 13, wherein after sending the message information to be encrypted to the communication module, it further includes:

Obtain the third encrypted information sent by the communication module, wherein the third encrypted information is encrypted information that has passed security verification, and the communication address carried in the third encrypted information is a second communication address, wherein the third encrypted information is the second communication address. The second communication address is the communication address of the server.
An information transmission device including:

The first acquisition unit is configured to acquire the message information to be encrypted sent by the server;

The second acquisition unit is configured to acquire the key chain parameters matching the target communication link through the key chain application module, wherein the key chain application module is configured in the communication module of the target Linux system, and the target communication link The path is the communication link established between the server and the target router;

An encryption unit configured to encrypt the message information using the key chain parameters in the key chain application module to obtain the first encrypted information;

A transmission unit configured to transmit the first encrypted information to the target router through the target communication link.
An information transmission device including:

The sending unit is configured to send the key chain parameters determined from the preconfigured key chain parameter set to the communication module in the target Linux system through the server installed in the target Linux system;

The transmission unit is configured to transmit the message information to be encrypted to the communication module, so that the communication module will send the first encrypted information obtained after encrypting the message information to the target router through the target communication link, wherein , the first encrypted information is obtained by using the key chain parameters to encrypt the message information by the key chain application module configured in the communication module. The key chain parameters are consistent with the target communication chain. Road matching.
A computer-readable storage medium having a computer program stored in the computer-readable storage medium, wherein the The computer program, when executed by a processor, implements the steps of the method described in any one of claims 1 to 7 or 8 to 14.
An electronic device, including a memory, a processor, and a computer program stored on the memory and executable on the processor, which implements claims 1 to 7 or 8 when the processor executes the computer program. to the steps of the method described in any one of 14.