CN111552940A - A security module-based data transmission system and method - Google Patents

Abstract

The invention discloses a data transmission system and method based on a security module, which belongs to the technical field of data security transmission, and comprises an identity verification terminal, a data transmission terminal and a data verification terminal, wherein the computer terminal verifies the identity information of a computer user through a digital verification unit, a fingerprint verification unit and a face identification unit in the identity verification terminal, after the identity information is authenticated and authorized, the data to be transmitted is encrypted through a data encryption unit in the data transmission terminal to generate a ciphertext, a first processor in the data transmission terminal transmits the encrypted ciphertext to the data verification terminal, and a data decryption unit in the data verification terminal decrypts the received encrypted data And verification of fingerprints and facial features prevent outsiders from using the computer.

Description

A security module-based data transmission system and method

technical field

The invention relates to the technical field of data security transmission, in particular to a data transmission system and method based on a security module.

Background technique

With the continuous development of science and technology, especially with the rapid development of Internet technology, people's lives are increasingly networked and informatized. The client often needs the server to provide a large amount of data information, and also needs to provide the server with relevant data, and sometimes even needs The user's personal information is provided to the server. Therefore, the security of information transmission has become more and more the focus of attention, and there are more and more encryption schemes for data transmission. The encryption and decryption method of the key has a low level of security. Once the key is cracked, it will cause great harm.

And most of the existing data transmission is transmitted through computer terminals, but the computer lacks verification of the user's identity information, so there is a security risk of data leakage. In view of the above problems, we need to develop a security-based The modular data transmission system and method solve the above problems.

SUMMARY OF THE INVENTION

The purpose of this section is to outline some aspects of embodiments of the invention and to briefly introduce some preferred embodiments. Some simplifications or omissions may be made in this section and the abstract and title of the application to avoid obscuring the purpose of this section, abstract and title, and such simplifications or omissions may not be used to limit the scope of the invention.

In view of the problems existing in the existing security module-based data transmission systems and methods, the present invention is proposed.

Therefore, the purpose of the present invention is to provide a data transmission system and method based on a security module, which can realize that in the process of using a computer to transmit data, firstly, the identity of the computer user is verified and audited to prevent outsiders from operating, and secondly, it can pass the first A processor, a data encryption unit and an anti-cracking unit encrypt and transmit data to prevent the data from being cracked and stolen.

In order to solve the above-mentioned technical problems, according to one aspect of the present invention, the present invention provides the following technical solutions:

A data transmission system based on a security module, which includes an identity verification terminal, a data transmission terminal and a data verification terminal, the identity verification terminal includes a digital verification unit, a fingerprint verification unit and a face recognition unit, and the data transmission terminal includes data An encryption unit, a first processor and an anti-cracking unit, the data verification terminal includes a data decryption unit, a second processor and an abnormal alarm unit.

As a preferred solution of the security module-based data transmission system according to the present invention, wherein: the digital verification unit is a digital password validator, the fingerprint verification unit is a fingerprint reader, and the facial recognition unit is a high-definition camera, and The digital verification module, the fingerprint verification unit and the face recognition unit are all connected with the computer terminal.

As a preferred solution of the security module-based data transmission method of the present invention, wherein: the method is as follows;

Step 1: the computer terminal verifies the identity information of the computer user through the digital verification unit, the fingerprint verification unit and the facial recognition unit in the identity verification terminal;

Step 2: after the identity information authentication and authorization, the data to be transmitted is encrypted by the data encryption unit in the data transmission terminal and a ciphertext is generated;

Step 3: the first processor in the data transmission terminal transmits the encrypted ciphertext to the data verification terminal;

Step 4: the data decryption unit in the data verification terminal decrypts the received encrypted data, and after obtaining the decrypted data, the second processor displays the plaintext;

Step 5: The abnormal alarm unit detects whether the data is abnormal, and issues an alarm when the data is abnormal in plaintext.

As a preferred solution of the security module-based data transmission method of the present invention, the data encryption module and the data decryption module use an EDS encryption algorithm.

As a preferred solution of the security module-based data transmission method of the present invention, wherein: the data transmission terminal includes an anti-cracking unit, and the anti-cracking unit includes an anti-network cracking module, an anti-endpoint cracking module, and an anti-cracking module. Storage cracking module.

As a preferred solution of the security module-based data transmission method of the present invention, wherein: the data transmission terminal is a computer terminal, and the data verification terminal is a cloud server terminal.

Compared with the prior art, the beneficial effects of the present invention are: through the setting of the security module-based data transmission system and method, the structure design is reasonable, and the identity verification terminal, the digital verification terminal, the fingerprint verification unit and the face recognition module are provided. , realizes the verification and audit of the password, fingerprint and facial features of the computer user, prevents outsiders from using the computer, and realizes the encryption and anti-cracking transmission of the data to be transmitted through the cooperation of the first processor and the data encryption unit. The decryption unit, the second processor and the abnormal alarm module realize the reception and cracking of the encrypted file, and the detection and detection of whether the file has been read, so as to ensure the security of data transmission.

Description of drawings

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the present invention will be described in detail below with reference to the accompanying drawings and detailed embodiments. As far as technical personnel are concerned, other drawings can also be obtained based on these drawings without paying creative labor. in:

Fig. 1 is the structural representation of the present invention;

Fig. 2 is a flow chart of the method of the present invention.

Detailed ways

In order to make the above objects, features and advantages of the present invention more clearly understood, the specific embodiments of the present invention will be described in detail below with reference to the accompanying drawings.

Many specific details are set forth in the following description to facilitate a full understanding of the present invention, but the present invention can also be implemented in other ways different from those described herein, and those skilled in the art can do so without departing from the connotation of the present invention. Similar promotion, therefore, the present invention is not limited by the specific embodiments disclosed below.

Next, the present invention is described in detail with reference to the schematic diagrams. When describing the embodiments of the present invention in detail, for the convenience of explanation, the cross-sectional views showing the device structure will not be partially enlarged according to the general scale, and the schematic diagrams are only examples, which should not be limited here. The scope of protection of the present invention. In addition, the three-dimensional spatial dimensions of length, width and depth should be included in the actual production.

In order to make the objectives, technical solutions and advantages of the present invention clearer, the embodiments of the present invention will be further described in detail below with reference to the accompanying drawings.

The present invention provides the following technical solutions: a data transmission system and method based on a security module, in the process of using a computer to transmit data, firstly, the identity of the computer user is verified and audited to prevent outsiders from operating, and secondly, the first processor can , the data encryption unit and the anti-cracking unit encrypt and transmit the data to prevent the data from being cracked and stolen, please refer to Figure 1 to Figure 2, including the identity verification terminal, the data transmission terminal and the data verification terminal;

Please refer to Figure 1 to Figure 2 again;

Step 1: The computer terminal verifies the identity information of the computer user through the digital verification unit, the fingerprint verification unit and the facial recognition unit in the identity verification terminal. The facial recognition unit is a high-definition camera. The user enters a digital password command through digital password verification, or collects fingerprints through a fingerprint reader, passes fingerprint verification, or collects facial feature information through a high-definition camera, and passes face verification to realize the identity of the user. Audit to prevent outsiders from operating and data leakage;

Step 2: After the identity information is authenticated and authorized, the data to be transmitted is encrypted by the data encryption unit in the data transmission terminal and a ciphertext is generated. Specifically, after the identity information is verified and confirmed, the data to be transmitted is encrypted by the data encryption unit. The data encryption unit adopts the EDS encryption algorithm. The encryption process is: after an initial IP replacement, the data plaintext is divided into a right half and a left half, each of which is 32 bits, represented by L ₀ R ₀ , and then performs 16 rounds of iterative product transformation. , called the function f, which combines the data and the key. After 16 rounds, the left and right parts are connected. After an initial inverse permutation, the algorithm ends to generate the ciphertext;

Step 3: The first processor in the data transmission terminal transmits the encrypted ciphertext to the data verification terminal. Specifically, the first processor in the data transmission terminal transmits the encrypted ciphertext to the data verification terminal through the data transmission unit. A data decryption unit in the terminal;

Step 4: The data decryption unit in the data verification terminal decrypts the received encrypted data, and after obtaining the decrypted data, the second processor displays the plaintext. Specifically, the data decryption unit in the data verification terminal decrypts the received encrypted data. , the ciphertext is parsed by the data decryption unit. The process of the decryption algorithm is to divide the ciphertext into a right half and a left half, each with 32 bits, represented by L ₀ R ₀ , and then perform 16 rounds of iterative product transformation, which is called a function f. Combine the data and the key. After 16 rounds, the left and right parts are connected. After an initial inverse permutation, the algorithm ends to generate the plaintext, and after the decrypted data plaintext is obtained, the plaintext is displayed by the second processor;

Step 5: The abnormality alarm unit detects whether the data is abnormal. When the data plaintext is abnormal, an alarm is issued. Specifically, after the data decryption unit parses the data ciphertext to obtain the data plaintext, the second processor detects the number of times the data plaintext is read. When the number of times the data plaintext is consulted is abnormal, the second processor will issue an alarm to remind the staff that the data is abnormal.

Working principle: In the process of using the data transmission system and method based on the security module, when there is data to be transmitted, the password of the computer user is realized through the identity verification terminal, the digital verification terminal, the fingerprint verification unit and the face recognition module. , verification and auditing of fingerprints and facial features, to prevent outsiders from using the computer, through the cooperation of the first processor and the data encryption unit, the data to be transmitted is encrypted and crack-proof transmission is realized, through the data decryption unit, the second processor and the abnormal The alarm module realizes the reception and cracking of encrypted files, and detects whether the files have been read, so as to ensure the security of data transmission.

Although the present invention has been described above with reference to the embodiments, various modifications may be made and equivalents may be substituted for parts thereof without departing from the scope of the invention. In particular, as long as there is no structural conflict, the various features in the disclosed embodiments of the present invention can be combined with each other in any way, and the description of these combinations is not exhaustive in this specification. For the sake of omitting space and saving resources. Therefore, the present invention is not limited to the specific embodiments disclosed herein, but includes all technical solutions falling within the scope of the claims.

Claims (6)

1. a data transmission system based on a security module, is characterized in that: comprise identity verification terminal, data transmission terminal and data verification terminal, described identity verification terminal comprises digital verification unit, fingerprint verification unit and face recognition unit, described data The transmission terminal includes a data encryption unit, a first processor and an anti-cracking unit, the data verification terminal includes a data decryption unit, a second processor and an abnormal alarm unit, and the identity verification terminal is used for verifying and auditing the identity of the computer user, To prevent operation by outsiders, the data transmission terminal is used to encrypt and transmit the data through the first processor, the data encryption unit and the anti-cracking unit to prevent the data from being cracked and stolen, and the data verification terminal is used to decode the plaintext and detect the plaintext of the data being read. When the number of times the data plaintext is consulted is abnormal, the second processor will issue an alarm to remind the staff that the data is abnormal. 2. a kind of data transmission system based on security module according to claim 1, is characterized in that: described digital verification unit is digital password authenticator, fingerprint verification unit is fingerprint reader, face recognition unit is high-definition camera, and The digital verification module, the fingerprint verification unit and the face recognition unit are all connected with the computer terminal. 3. The data transmission method based on a security module according to any one of claims 1-2, characterized in that: the method is as follows; Step 1: the computer terminal verifies the identity information of the computer user through the digital verification unit, the fingerprint verification unit and the facial recognition unit in the identity verification terminal; Step 2: after the identity information authentication and authorization, the data to be transmitted is encrypted by the data encryption unit in the data transmission terminal and a ciphertext is generated; Step 3: the first processor in the data transmission terminal transmits the encrypted ciphertext to the data verification terminal; Step 4: the data decryption unit in the data verification terminal decrypts the received encrypted data, and after obtaining the decrypted data, the second processor displays the plaintext; Step 5: The abnormal alarm unit detects whether the data is abnormal, and issues an alarm when the data is abnormal in plaintext. 4. A kind of data transmission method based on security module according to claim 1, is characterized in that: described data encryption module and data decryption module adopt EDS encryption algorithm. 5. A security module-based data transmission method according to claim 1, wherein the data transmission terminal comprises an anti-cracking unit, and the anti-cracking unit comprises an anti-network cracking module, an anti-endpoint cracking module and an anti-cracking module. Storage cracking module. 6 . The data transmission method based on a security module according to claim 1 , wherein the data transmission terminal is a computer terminal, and the data verification terminal is a cloud server terminal. 7 .

Images