CN114363888A - Data transmission method, device, storage medium and electronic equipment - Google Patents

Abstract

The embodiments of the present application disclose a data transmission method, device, storage medium, and electronic device, wherein the method includes: obtaining environment information where it is located, transmitting the environment information to a second device, and obtaining a symmetric key for the second device and referring to the initial parameters, generating an initialization vector based on the environment information and the reference initial parameters, encrypting the first data based on the symmetric key and the initialization vector to obtain second data, and sending the second data to the second device. By adopting the embodiments of the present application, the security of data transmission can be improved.

Description

Data transmission method, device, storage medium and electronic device

technical field

The present application relates to the field of computer technology, and in particular, to a data transmission method, apparatus, storage medium, and electronic device.

Background technique

With the rapid development of communication technology, communication systems are no longer limited to traditional audio, video and other streaming media services, but are developing towards diversified data services. With the development of diversified data services, it is becoming more and more important to encrypt and transmit the data transmission process, realize the receiving and decryption of the data, and prevent the device from being tracked during the transmission process.

SUMMARY OF THE INVENTION

Embodiments of the present application provide a data transmission method, device, storage medium, and electronic device, and the technical solutions are as follows:

In a first aspect, an embodiment of the present application provides a data transmission method, the method comprising:

obtaining the environment information where it is located, and transmitting the environment information to the second device;

acquiring a symmetric key for the second device and a reference initial parameter, and generating an initialization vector based on the environment information and the reference initial parameter;

Encrypt the first data based on the symmetric key and the initialization vector to obtain second data, and send the second data to the second device, where the second data is used to instruct the second device based on the The second data is decrypted by referring to the initial parameter, the symmetric key and the environment information.

In a second aspect, an embodiment of the present application provides a data transmission method, the method comprising:

Obtain the environment information transmitted by the first device, and receive the second data sent by the first device; the second data is encrypted and generated based on the initialization vector and the symmetric key for the first data;

acquiring a symmetric key for the first device and a reference initial parameter, and generating an initialization vector based on the environment information and the reference initial parameter;

Decrypt the second data based on the reference initial parameter, the symmetric key and the environment information to obtain third data.

In a third aspect, an embodiment of the present application provides a data transmission device, the device comprising:

a transmission module, configured to acquire current environmental information and transmit the environmental information to the second device;

a vector generation module, configured to obtain a symmetric key for the second device and a reference initial parameter, and generate an initialization vector based on the environment information and the reference initial parameter;

A data encryption module, configured to encrypt the first data based on the symmetric key and the initialization vector to obtain second data, and send the second data to the second device, where the second data is used to indicate the The second device decrypts the second data based on the reference initial parameter, the symmetric key, and the environment information.

In a fourth aspect, an embodiment of the present application provides a data transmission device, the device comprising:

an information acquisition module, configured to acquire the environmental information transmitted by the first device, and receive the second data sent by the first device;

a vector generation module, configured to obtain a symmetric key for the first device and a reference initial parameter, and generate an initialization vector based on the environment information and the reference initial parameter;

A data decryption module, configured to decrypt the second data based on the reference initial parameter, the symmetric key and the environment information to obtain third data.

In a fifth aspect, an embodiment of the present application provides a computer storage medium, where the computer storage medium stores a plurality of instructions, and the instructions are suitable for being loaded by a processor and executing the above method steps.

In a sixth aspect, an embodiment of the present application provides an electronic device, which may include: a processor and a memory; wherein, the memory stores a computer program, and the computer program is adapted to be loaded by the processor and execute the above method steps .

The beneficial effects brought by the technical solutions provided by some embodiments of the present application include at least:

In one or more embodiments of the present application, the first device may obtain the environment information where it is located and transmit the environment information to the second device, and then obtain the symmetric key for the second device and refer to the initial parameters, based on the environment information and refer to the initial parameters to generate an initialization vector, so as to use the symmetric key and the initialization vector to encrypt the first data to obtain the second data, and finally send the second data to the second device; the entire data transmission process avoids using an incremental sequence and is based on the environment information to generate an initialization vector, and at the same time, the initialization vector is not directly transmitted to the data receiver, which reduces the device tracking probability during data transmission and improves the security of data transmission.

Description of drawings

In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the following briefly introduces the accompanying drawings required for the description of the embodiments or the prior art. Obviously, the drawings in the following description are only These are some embodiments of the present application. For those of ordinary skill in the art, other drawings can also be obtained based on these drawings without any creative effort.

1 is a schematic flowchart of a data transmission method provided by an embodiment of the present application;

2 is a schematic flowchart of a data transmission method provided by an embodiment of the present application;

3 is a schematic diagram of a data negotiation and transmission process provided by an embodiment of the present application;

4 is a schematic diagram of a scenario of a derivation process provided by an embodiment of the present application;

5 is a schematic diagram of a scenario of a derivation process provided by an embodiment of the present application;

6 is a schematic diagram of a data encryption scenario involved in an embodiment of the present application;

7 is a schematic flowchart of a data transmission method provided by an embodiment of the present application;

8 is a schematic flowchart of a data transmission method provided by an embodiment of the present application;

9 is a schematic diagram of a scenario of a data transmission system provided by an embodiment of the present application;

10 is a schematic structural diagram of a data transmission apparatus provided by an embodiment of the present application;

11 is a schematic structural diagram of a vector generation module provided by an embodiment of the present application;

12 is a schematic structural diagram of a data transmission apparatus provided by an embodiment of the present application;

13 is a schematic structural diagram of an electronic device provided by an embodiment of the present application;

14 is a schematic structural diagram of an operating system and a user space provided by an embodiment of the present application;

Figure 15 is an architecture diagram of the Android operating system in Figure 14;

Fig. 16 is the architecture diagram of the IOS operating system in Fig. 14;

FIG. 17 is a schematic structural diagram of an electronic device provided by an embodiment of the present application.

Detailed ways

The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, but not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present application.

In the description of the present application, it should be understood that the terms "first", "second" and the like are used for descriptive purposes only, and should not be construed as indicating or implying relative importance. In the description of the present application, it should be noted that, unless otherwise expressly specified and defined, "including" and "having" and any modifications thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product or device comprising a series of steps or units is not limited to the listed steps or units, but optionally also includes unlisted steps or units, or optionally also includes For other steps or units inherent to these processes, methods, products or devices. For those of ordinary skill in the art, the specific meanings of the above terms in this application can be understood in specific situations. Also, in the description of the present application, unless otherwise specified, "a plurality" means two or more. "And/or", which describes the association relationship of the associated objects, means that there can be three kinds of relationships, for example, A and/or B, which can mean that A exists alone, A and B exist at the same time, and B exists alone. The character "/" generally indicates that the associated objects are an "or" relationship.

The present application will be described in detail below with reference to specific embodiments.

In one embodiment, as shown in FIG. 1 , a data transmission method is proposed, which can be implemented by relying on a computer program and can be run on a data transmission device based on the von Neumann system. The computer program can be integrated into an application or run as a stand-alone utility application. The data transmission device may be an electronic device, including but not limited to: a personal computer, a tablet computer, a handheld device, an in-vehicle device, a wearable device, a computing device, or other processing device connected to a wireless modem. Terminal equipment may be called by different names in different networks, for example: user equipment, access terminal, subscriber unit, subscriber station, mobile station, mobile station, remote station, remote terminal, mobile device, user terminal, terminal, wireless communication Equipment, user agent or user equipment, cellular phone, cordless phone, electronic equipment in 5G network or future evolution network, etc.

Specifically, the data transmission method includes:

S101: Acquire the environmental information where it is located, and transmit the environmental information to a second device;

The information about the environment where it is located can be understood as the information about the first device in the current environment: the altitude parameter of the environment where it is located, the temperature parameter of the environment where it is located, the humidity parameter of the environment where it is located, the weather parameter of the environment where it is located, the environment where it is located time parameters, magnetic parameters of the environment, etc.

It is understandable that when at least two devices are in a near-end communication scenario, data transmission usually involves the encrypted transmission process of corresponding data (service data), and the encrypted transmission process involves the transmission of initialization vectors, initialization vectors and symmetric keys. It will be used to encrypt the corresponding data; further, the data receiver (such as the second device) also needs an initialization vector when decoding the data. In some near-end communication scenarios, a random incrementing sequence is often used as the initialization vector, and then Before sending encrypted data, the data sender will first transmit the plaintext of the initialization vector to the data receiver, so that the subsequent data receiver can decrypt the data.

It can be understood that in near-end communication scenarios other than mobile data networks, such as wireless Bluetooth communication, wireless near field communication (NFC), ZigBee communication, etc., usually at least two devices participating in near-end communication are in the same environment, It can be understood that the data receiving end and the data transmitting end participating in the data transmission are in the same environment. In order to avoid being tracked by at least one third device (such as a monitoring device) located in the same environment during data transmission encryption, the method involved in this application is adopted. Data transmission method At least two devices participating in data transmission do not transmit initialization vectors; in specific implementation, initialization vectors are usually sent from one end to the other end by means of display transmission, and initialization vectors are easily transmitted by at least one device located in the same environment during the transmission process. obtained by the third device, so that the third device can track the devices involved in data transmission based on the random data characteristics of the initialization vector, (such as commonly used: in the counter mode, the random increment sequence is often used as the initialization vector for plaintext transmission, usually every The initialization vector of the second plaintext transmission often exhibits the characteristic of data increment, and the initialization vector of each data sending device in the same environment is usually different. The data increment feature will make it very easy for the "a certain data sending device" to be traced by other devices in the same environment to related devices (such as the data sending end), and then the encrypted data involved in its data transmission can be cracked).

In this application, the third device in the same environment as the first device can easily obtain the initialization vector directly transmitted by the display transmission method. In order to avoid device tracking, the first device in the data transmission scenario may not use the above-mentioned transmission method. Initialization vector; in the data transmission method involved in this application, the first device transmits the environmental information to the second device by acquiring the environmental information of the current environment, so that the second device obtains the environmental information in subsequent encrypted data transmission scenarios The corresponding encrypted data can be decrypted; in addition, since the environmental information usually obtained by each device (such as the first device, the second device, and the third device) in the same environment is highly similar, for example, “the altitude of the At least one of parameters, temperature parameters of the environment, humidity parameters of the environment, weather parameters of the environment, time parameters of the environment, magnetic parameters of the environment, etc. As far as the device is concerned, the environmental information is the same (for example, the time parameters are the same, the temperature and humidity parameters are the same, etc.). Based on this, even if any data sending device (such as the first device) sends the data to the data receiving device (the second device) before data transmission The environment information sent by ) is acquired by other devices (such as a third device) in the same environment, and the third device cannot track the first device or the second device. It can be understood that since the environmental information obtained by the devices in the same environment is the same as each other, the environmental information is transmitted by display transmission methods such as plaintext transmission. The device has a tracking and confusing effect, so that other devices cannot track the current data transmission device (eg, the first device and the second device) when the environmental information of all devices is the same. In addition, in the related art, especially in the counter mode, the initial value of the counter is usually predetermined as an initialization vector (the value generated by subsequent incrementing based on the increment sequence is used as the initialization vector). Usually in the scenario of partitioning and synchronizing password functionality, since the initialization vector is usually explicitly transmitted to the data receiving end, in order to avoid leakage situations such as data attacks, it is avoided to transmit the same initialization vector multiple times or select the initialization vector. The initialization vector will be different each time when the initialization vector is transmitted in the same way, and the initialization vector is often generated in the form of the aforementioned incremental sequence. In this application, the initialization vector is not directly transmitted to the second device, but the environment information is transmitted. In the actual application stage, it is not necessary to ensure that each time The environmental information is different. Even if the initialization vector generated based on the environmental information is the same each time, the reference initial parameters are not visible to the outside world. The convenience and robustness of data transmission are improved, and the data transmission process is optimized.

It can be understood that in this application: the environment information may not be used as the initialization vector directly, but the initialization vector may be generated based on the environment information and reference initial parameters, the reference initial parameters are not visible to the outside world, and the second device may use plaintext transmission and other display transmission. The way to transmit environmental information and negotiate before data transmission to improve the security of data transmission and reduce the probability of device tracking.

S102: Acquire a symmetric key for the second device and a reference initial parameter, and generate an initialization vector based on the environment information and the reference initial parameter.

The symmetric key can be understood as the derived symmetric key (K) generated by at least two devices (such as the first device and the second device) participating in the data transmission based on the key derivation algorithm (KDF), and the key derivation algorithm (KDF) ) can be SHA-256 algorithm, SM3 algorithm, Advanced Encryption Standard (AES), SM4 algorithm, Triple Data Encryption Standard (TDES), HKDF algorithm and so on.

It can be understood that before data transmission, the first device can perform key negotiation with the second device: a symmetric key is derived by using a key derivation algorithm (KDF), and the symmetric key can be regarded as a session key for encrypted communication. Session data (such as business data) between each end. In some embodiments, the symmetric key K may be derived from at least one shared key string and shared information of each end participating in the communication based on a key derivation function corresponding to the key derivation algorithm.

The reference initial parameter is used to generate an initialization vector with environmental information, and the reference initial parameter is not transmitted externally; in some embodiments, the first device and the second device may calculate the reference based on the negotiation data in the aforementioned symmetric key negotiation process. Initial parameter (abcant). For example, the reference initial parameter can be calculated based on the shared information and the shared key string of the communication terminals.

In one or more embodiments, it can also be derived by the server. The first device and the second device can send their respective shared information to the server. Derive the symmetric key K.

In one or more embodiments, after acquiring the reference initial parameters, the first device may use an objective function to perform functional processing on the environment information and the reference initial parameters to obtain a functionally processed initialization vector.

Optionally, the objective function method can be a self-defined function processing rule, or a function processing rule and an encryption processing rule involved in the related art. For example, the objective function method can be an XOR function, an XOR function. The function processing methods corresponding to the , hash function, etc., can be specifically determined based on the actual application, and are not specifically limited here.

In one or more embodiments, the first device may perform XOR processing on the environment information and the reference initial parameter by using an XOR function, that is, the environment information (such as a time parameter) and the reference initial parameter (abcant ) as the input of XOR processing to obtain the initialization vector (abc) after XOR processing;

In one or more embodiments, the first device may use a hash function to perform hash processing on the environment information and the reference initial parameter, that is, the environment information (such as a time parameter) and the reference initial parameter (abcant ) as the input of hashing, and get the initialization vector (abc) after hashing.

S103: Encrypt the first data based on the symmetric key and the initialization vector to obtain second data, and send the second data to the second device, where the second data is used to instruct the second device The second data is decrypted based on the reference initial parameter, the symmetric key, and the context information.

The first data may be understood as target data to be encrypted and sent by the first device to the second device, for example, the target data may be service data (such as service data atext).

It can be understood that the first device encrypts the first data based on the derived symmetric key and the initialization vector to obtain the second data; the second data can be understood as the data to be transmitted generated after the symmetric encryption; then the first device will The encrypted second data is sent to the second device through the communication connection with the second device.

For example, a Bluetooth communication connection may be established between the first device and the second device through a Bluetooth network, and the first device may send the second data to the second device based on the Bluetooth communication connection.

It can be understood that the first device can directly use the symmetric encryption method to perform symmetric encryption on the source data (such as the first data) based on the symmetric key and the initialization vector to generate the second data; further, the symmetric encryption method refers to the transmission of encrypted information. The receiver and the receiver use the same symmetric key to encrypt/decrypt with the initialization vector generated based on the environment information.

Optionally, the algorithm based on the symmetric encryption method may be the DES encryption algorithm, the TripleDES encryption algorithm, the RC2/RC4/RC5 encryption algorithm, the Blowfish encryption algorithm, and so on.

In one or more embodiments, the first device and the second device implement secure transmission of service data based on symmetric encryption; after the second device receives the second data, the second device may The second data is decrypted using the symmetric key and the environment information transmitted by the first device to obtain decrypted third data, wherein the third data obtained by decrypting the second device data is usually the same as the first data.

It can be understood that, for those of ordinary skill in the art, "embodiments related to the data transmission method applied to the first device" and "embodiments related to the data transmission method applied to the second device" are usually independent of each other. Embodiments; terms such as environment information, symmetric key, reference initial parameter, initialization vector, key context information, vector context information, etc. Terms such as environment information, symmetric key, reference initial parameter, initialization vector, key context information, vector context information, etc. shown in "Embodiment Relevant to Data Transmission Method Applied to Second Device" have independent meanings The concept of , usually in the process of data transmission, such as environment information, symmetric key, reference initial parameter, initialization vector, key context information shown in "Embodiments involved in the data transmission method applied to the first device" , vector context information and other terms related to "embodiments related to the data transmission method applied to the first device" such as environment information, symmetric key, reference initial parameters, initialization vector, key context information, vector context information Identical (same-named) terms have the same term data value. For example, when the first device transmits the environmental information "aaaa..." to the second device, the second device will also receive the environmental information "aaaa...". The same environment information is stored, and the values of the two environment information are the same, but they are two pieces of data independently stored in the first device and the second device.

In this embodiment of the present application, the first device may obtain the environment information where it is located and transmit the environment information to the second device, and then obtain the symmetric key for the second device and the reference initial parameter, based on the environment information and the reference initial parameter to generate an initialization vector, so as to encrypt the first data with the symmetric key and the initialization vector to obtain the second data, and finally send the second data to the second device; the entire data transmission process avoids using an incremental sequence and generates initialization based on environmental information At the same time, the initialization vector is not directly transmitted to the data receiver, which reduces the device tracking probability during data transmission and improves the security of data transmission.

Please refer to FIG. 2 , which is a schematic flowchart of another embodiment of a data transmission method proposed in the present application. specific:

S201: Determine an environmental information type from at least one reference information type, acquire environmental information indicated by the environmental information type, and transmit the environmental information to a second device.

The reference information type may be an altitude parameter type, a temperature parameter type, a humidity parameter type, a weather parameter type, a magnetic parameter type, a time parameter type, and the like.

In one or more embodiments, since the first device and the second device in the same environment usually obtain the same environment information, and the types of reference information can be various, in order to improve the security of data transmission, in the During at least one round of data transmission, the first device may select an environmental information type from at least one reference information type to obtain the environmental information indicated by the environmental information type; it is understandable that when the data transmission involves multiple rounds of conversation scenarios, The first device may use different reference information types in the data transmission process corresponding to at least one round of session scenarios, so as to use at least some different types of environment information in each round of session scenarios to generate initialization vectors, so as to improve the security of data transmission . It can be understood that in at least one round of conversation scenarios, the first device determines the environmental information type of the current session from at least one reference information type, and then the first device invokes a specific function or specific component to obtain environmental information corresponding to the environmental information type. For example, the first device invokes the time acquisition function to acquire the current time parameter, and the first device invokes the magnetic sensor to acquire the magnetic parameter of the current environment.

It can be understood that, after acquiring the environmental information indicated by the environmental information type, the first device can transmit the environmental information to the second device based on the communication connection with the second device. Further, for the second device, the second device does not need to acquire the reference environment information in the current environment.

In one or more embodiments, since the first device and the second device in the same environment usually obtain the same environment information, based on this, the first device can transmit the environment information type to the second device to indicate the second device. The device obtains the environmental information indicated by the environmental information type; by sending the environmental information type corresponding to the current round of data transmission, the intelligence of the data transmission can be improved compared to directly sending the environmental information, and the first device can selectively select the corresponding data type At the same time, the data negotiation overhead before the first data (such as service data) is transmitted can be saved.

It can be understood that the first device can first obtain the current environment information, and transmit the environment information type corresponding to the environment information to the second device, and the environment information type is used to instruct the second device to obtain the reference environment corresponding to the information type. information, the reference environment information is usually the same as the environment information.

In some implementations, usually the direct communication time between the first device and the second device is fast, the first device and the second device are in the same environment (as if they belong to a near-end communication scenario), the environment information obtained by the first device and the second device The information difference between the obtained reference environmental information is usually small, and the environmental information indicated by the corresponding information parameter precision can be obtained by setting the information parameter precision to offset the information difference, so that the reference environmental information is the same as the environmental information; Taking the time of the environment as an example, considering that the direct communication time between the two ends is short, the precision of the information parameter is preferably the precision second, and the obtained time parameter is in seconds.

Optionally, the first device determines the environmental information type from the at least one reference information type by using a random acquisition method or a self-defined selection rule, which is specifically determined based on the actual application environment and is not limited here.

S202: Obtain a shared key string for the second device and second shared information, where the second shared information is shared information transmitted by the second device to the first device;

It can be understood that before data transmission, the first device and the second device are involved in an encryption negotiation process; as shown in FIG. 3 , FIG. 3 is a schematic diagram of a data negotiation transmission process involved in the present application. The device and the second device negotiate a shared key string (eg, key string Z) based on a key agreement algorithm. The key agreement algorithm can be set based on the actual environment, such as Diffie-Hellman algorithm, RSA algorithm, and SM2 algorithm. Taking the key agreement algorithm as the Diffie-Hellman algorithm as an example, the first device and the second device can use the Diffie-Hellman algorithm to create a key through an insecure channel without any prior information between the two communicating parties, that is, a shared key. keychain,

It can be understood that during the encryption negotiation process between the first device and the second device, the first device will send the first shared information (xif-A) to the second device; similarly, the second device will also send the first device to the first device. Two Shared Information (xif-B).

The first shared information (xif-A) may be a random number generated by the first device, or may be service association information corresponding to the first device, or the like.

The second shared information (xif-B) may be a random number generated by the second device, or may be service association information corresponding to the second device, or the like.

It should be noted that the first shared information and the second shared information may be sent to the opposite end by the sending end using a display transmission method such as plaintext transmission, usually during the encryption negotiation process. The specific information contents of the first shared information and the second shared information are determined based on the actual environment, and are not limited here.

S203: Perform a first derivation process based on the key context information, the shared key string, the first shared information, and the second shared information to generate a symmetric key, where the first shared information is the first device to the second shared information transmitted by the device;

The key context information can be understood as the identification information for the symmetric key, which can be customized based on the actual application scenario, and can be used to identify the symmetric key. For example, it can be used to identify the name, meaning, One or more of the types of identifying parameters such as usage, specification, length, etc., which are not specifically limited.

It can be understood that, in some implementation scenarios, the key context information has been determined before data transmission, and in some implementations: it is usually determined by negotiation between the two parties in advance. In some embodiments, based on the context information for identifying the symmetric key determined when the target function service of the first device and the second device is initialized, for example, the first device is in the service initialization process before using the target function service set. In some embodiments, the first device and the second device may also use the key context information negotiated by the negotiation algorithm in the related art, and so on.

It can be understood that the first device performs a first derivation process based on the key context information, the shared key string, the first shared information and the second shared information to generate a symmetric key; schematically, as shown in FIG. 4 , FIG. 4 is a schematic diagram of a scenario of a derivation process involved in the present application. The first device can use the key derivation algorithm based on the key context information, the shared key string, the first shared information and the second shared information as an algorithm input , to derive the symmetric key, the generation process of the symmetric key can be expressed as:

K=KDF1(Z, xif_A, xif_B, "wy")

Among them, K is the symmetric key, Z is the shared key string, KDF1( ) is the first derivation process, xif_A is the first shared information, xif_B is the second shared information, and "wy" is the key context information.

S204: Perform a second derivation process based on the vector context information, the shared key string, the first shared information, and the second shared information to generate a reference initial parameter.

The vector context information ("abc") can be understood as identification information for the reference initial parameter (abcant), which can be customized based on the actual application scenario and used to identify the reference initial parameter (abcant). It is used to identify one or more types of identifying parameters such as the name, meaning, purpose, specification, length, etc. of the reference initial parameter (abcant), which is not specifically limited.

The key context information is different from the vector context information, that is, the key context information and the vector context information are different.

It can be understood that, in some implementation scenarios, the vector context information has been determined before data transmission. In some implementations, it is usually determined by negotiation between the two parties in the communication in advance. In some embodiments, based on the context information for identifying the reference initial parameter (abcant) determined when the target function service of the first device and the second device is initialized, for example, the first device is in the service before using the target function service. set during initialization. In some embodiments, the first device and the second device may also use vector context information negotiated by a negotiation algorithm in the related art, and so on.

It can be understood that the first device performs a first derivation process based on the vector context information, the shared key string, the first shared information and the second shared information to generate the reference initial parameter; schematically, as shown in FIG. 5 . 5 is a schematic diagram of a scenario of a derivation process involved in this application. The first device can use a key derivation algorithm based on vector context information, the shared key string, the first shared information, and the second shared information as The algorithm input is used to derive the reference initial parameters. The generation process of the reference initial parameters can be expressed as:

abcant=KDF2(Z, xif_A, xif_B, "abc")

Among them, abcant is the reference initial parameter, Z is the shared key string, KDF2() is the second derivation process, xif_A is the first shared information, xif_B is the second shared information, and "abc" is the vector context information.

In one or more embodiments, the first device and the second device may perform information negotiation processing to generate key context information and vector context information; for example, the first device and the second device jointly set a key for identifying a symmetric key The context information, for another example: the first device and the second device jointly set the vector context information for the identification reference initial parameter.

It can be understood that after the information negotiation process is completed, the first device and the second device save key context information and vector context information respectively; the key context information is different from the vector context information.

S205: Determine the target function corresponding to the environmental information type based on the function mapping relationship between the at least one reference information type and the reference function;

The function mapping relationship is used to represent the mapping of each reference information type and its corresponding reference function. In some embodiments, the function mapping relationship may be represented in the form of a function mapping set, a function mapping table, a function mapping array, etc. .

The reference function may be a function processing manner corresponding to an exclusive-OR function, an exclusive-OR function, a hash function, etc., which may be specifically determined based on an actual application situation, which is not specifically limited here.

It can be understood that, in this application, considering that environmental information can correspond to a variety of reference information types, in order to improve the security of data transmission, the reference information type can be associated with the reference function used for subsequent generation of the initialization vector, which can be understood as: To obtain environmental information of different reference information types, different reference functions can be used when generating initialization vectors to improve the security of data transmission, reduce the possibility of device tracking, and ensure the security of data transmission.

It can be understood that by presetting the function mapping relationship between at least one reference information type and the reference function, after obtaining the environmental information corresponding to the environmental information type, the target corresponding to the environmental information type can be determined in the function mapping relationship based on the environmental information type. function, so that the initialization vector can be determined based on the objective function.

In one or more embodiments, the first device may perform functional processing on the environment information and the reference initial parameters based on a default objective function (Func function) to generate an initialization vector. For example, the objective function may be an XOR function, then the XOR calculation is performed on the environmental information and the reference initial parameters to obtain the initialization vector.

S206: Use the objective function to perform functional processing on the environmental information and the reference initial parameter to obtain an initialization vector after the functional processing.

In one or more embodiments, after acquiring the reference initial parameters, the first device may use an objective function to perform functional processing on the environment information and the reference initial parameters to obtain a functionally processed initialization vector.

Optionally, the objective function method can be a self-defined function processing rule, or a function processing rule and an encryption processing rule involved in the related art. For example, the objective function method can be an XOR function, an XOR function. The function processing methods corresponding to the , hash function, etc., can be specifically determined based on the actual application, and are not specifically limited here.

In one or more embodiments, the first device may perform XOR processing on the environment information and the reference initial parameter by using an XOR function, that is, the environment information (such as a time parameter) and the reference initial parameter (abcant ) as the input of XOR processing to obtain the initialization vector (abc) after XOR processing;

In one or more embodiments, the first device may use a hash function to perform hash processing on the environment information and the reference initial parameter, that is, the environment information (such as a time parameter) and the reference initial parameter (abcant ) as the input of hashing, and get the initialization vector (abc) after hashing.

In a specific implementation scenario, take the environment information as an example of a time series parameter of a time parameter type. During at least one round of data transmission, the first device and the second device are in the target mode (such as CTR, GCM and other calculator modes), and the first device uses the reference initial parameters in combination with the time series t obtained in each round to target Function calculation to obtain initialization vector abc. Combine the initialization vector abc with the symmetric key K to symmetrically encrypt (Encrypt) the first data (such as business data atext) to obtain the second data (such as the ciphertext ctext), as follows:

1st round of data transfer:

abc_1=Func(abcant,t_1)

Among them, abc_1 is the initialization vector calculated by the first round of data transmission, abcant is the reference initial parameter, t_1 is the time parameter obtained during the first round of data transmission; Func() is the objective function.

ctext_1=Encrypt(K,abc_1,atext_1)

Wherein, ctext_1 is the second data encrypted in the first round of data transmission, atext_1 is the first data (can be understood as source data) in the first round of data transmission, and K is the symmetric key;

2nd round of data transfer:

abc_2=Func(abcant,t_2)

Among them, abc_2 is the initialization vector calculated by the second round of data transmission, abcant is the reference initial parameter, t_2 is the time parameter obtained during the second round of data transmission; Func() is the objective function;

ctext_2=Encrypt(K,abc_2,atext_2)

Wherein, ctext_2 is the second data encrypted in the second round of data transmission, atext_2 is the first data (can be understood as source data) in the second round of data transmission, and K is the symmetric key;

......

The i-th round of data transmission:

abc_i=Func(abcant,t_i)

Among them, abc_i is the initialization vector calculated by the i-th round of data transmission, abcant is the reference initial parameter, t_i is the time parameter obtained during the i-th round of data transmission; Func() is the objective function

ctext_i=Encrypt(K,abc_i,atext_i)

Wherein, ctext_i is the second data encrypted in the i-th round of data transmission process, atext_i is the first data (can be understood as source data) in the i-th round of data transmission process, and K is the symmetric key;

S207: Encrypt the first data based on the symmetric key and the initialization vector to obtain second data, and send the second data to the second device.

It can be understood that, as shown in FIG. 6, FIG. 6 is a schematic diagram of a data encryption scenario involved in an embodiment of the present application. After the initialization vector is generated, the first data can be encrypted based on the symmetric key k and the initialization vector abc, to generate the encrypted second data.

It can be understood that, for those of ordinary skill in the art, "embodiments related to the data transmission method applied to the first device" and "embodiments related to the data transmission method applied to the second device" are usually independent of each other. Embodiments; terms such as environment information, symmetric key, reference initial parameter, initialization vector, key context information, vector context information, etc. Terms such as environment information, symmetric key, reference initial parameter, initialization vector, key context information, vector context information, etc. shown in "Embodiment Relevant to Data Transmission Method Applied to Second Device" have independent meanings The concept of , usually in the process of data transmission, such as environment information, symmetric key, reference initial parameter, initialization vector, key context information shown in "Embodiments involved in the data transmission method applied to the first device" , vector context information and other terms related to "embodiments related to the data transmission method applied to the first device" such as environment information, symmetric key, reference initial parameters, initialization vector, key context information, vector context information Identical (same-named) terms have the same term data value.

In this embodiment of the present application, the first device may obtain the environment information where it is located and transmit the environment information to the second device, and then obtain the symmetric key for the second device and the reference initial parameter, based on the environment information and the reference initial parameter to generate an initialization vector, so as to encrypt the first data with the symmetric key and the initialization vector to obtain the second data, and finally send the second data to the second device; the entire data transmission process avoids using an incremental sequence and generates initialization based on environmental information At the same time, the initialization vector is not directly transmitted to the data receiver, which reduces the probability of device tracking during data transmission and improves the security of data transmission; and, different types of reference information can be selected in at least one round of session scenarios. The environmental information type can be used to obtain environmental information, which can improve the security of data transmission; and only the environmental information type can be sent to the second device to instruct the second device to obtain the corresponding environmental information, which improves the convenience of data transmission and saves data transmission. of sales.

In one embodiment, as shown in FIG. 7 , a data transmission method is proposed, which can be implemented by relying on a computer program, and can be run on a data transmission device based on the von Neumann system. The computer program can be integrated into an application or run as a stand-alone utility application. The data transmission device may be an electronic device, including but not limited to: a personal computer, a tablet computer, a handheld device, an in-vehicle device, a wearable device, a computing device, or other processing device connected to a wireless modem. Terminal equipment may be called by different names in different networks, for example: user equipment, access terminal, subscriber unit, subscriber station, mobile station, mobile station, remote station, remote terminal, mobile device, user terminal, terminal, wireless communication Equipment, user agent or user equipment, cellular phone, cordless phone, electronic equipment in 5G network or future evolution network, etc.

Specifically, the data transmission method includes:

S301: Acquire environmental information transmitted by a first device, and receive second data sent by the first device; the second data is generated by encrypting the first data based on an initialization vector and a symmetric key;

In one or more embodiments, the environment information is the environment information obtained by the first device, and the environment information can be understood as: in the current environment: the altitude parameter of the environment, the temperature parameter of the environment, Humidity parameters of the environment, weather parameters of the environment, time parameters of the environment, magnetic parameters of the environment, and so on.

In one or more embodiments, the first device sends the environment information to the second device by acquiring the environment information where it is located; the second device may receive the information sent by the first device based on the communication connection with the first device environmental information. It can be understood that the environment information is used by the second device to decrypt the second data.

In one or more embodiments, the first device generates an initialization vector based on the environment information and the reference initial parameters by acquiring the symmetric key for the second device and the reference initial parameters, and then the first device generates an initialization vector based on the environment information and the reference initial parameters. The device encrypts the first data based on the symmetric key and the initialization vector to obtain second data, and sends the second data to the second device; at this time, the second device may The communication connection receives the second data sent by the first device.

S302: Obtain a symmetric key for the first device and a reference initial parameter, and generate an initialization vector based on the environment information and the reference initial parameter;

It can be understood that, before data transmission, the second device can perform key negotiation with the first device: a symmetric key is derived by using a key derivation algorithm (KDF), and the symmetric key can be regarded as a session key for encrypted communication. Session data (such as business data) between each end. In some embodiments, the symmetric key K may be derived from at least one shared key string and shared information of each end participating in the communication based on a key derivation function corresponding to the key derivation algorithm. The key derivation algorithm (KDF) can be SHA-256 algorithm, SM3 algorithm, Advanced Encryption Standard (AES), SM4 algorithm, Triple Data Encryption Standard (TDES), HKDF algorithm and so on.

The reference initial parameter is used to generate an initialization vector with the environment information, so that the second device can perform subsequent data decryption based on the initialization vector. Perform calculation to obtain the reference initial parameter; in some embodiments, the first device and the second device may calculate the reference initial parameter (abcant) based on the negotiation data in the foregoing symmetric key negotiation process. For example, the reference initial parameter can be calculated based on the shared information and the shared key string of the communication terminals.

In one or more embodiments, after acquiring the reference initial parameters, the second device may use an objective function to perform functional processing on the environment information and the reference initial parameters to obtain a functionally processed initialization vector.

Optionally, the objective function method can be a self-defined function processing rule, or a function processing rule and an encryption processing rule involved in the related art. For example, the objective function method can be an XOR function, an XOR function. The function processing methods corresponding to the , hash function, etc., can be specifically determined based on the actual application, and are not specifically limited here.

In one or more embodiments, the second device may use a hash function to perform hash processing on the environment information and the reference initial parameter, that is, the environment information (such as a time parameter) and the reference initial parameter (abcant ) as the input of hashing, and get the initialization vector (abc) after hashing.

S303: Decrypt the second data based on the reference initial parameter, the symmetric key and the environment information to obtain third data.

It can be understood that decrypting the second data can be understood as a reverse process of "encrypting the first data".

It can be understood that the first device encrypts the first data based on the derived symmetric key and the initialization vector to obtain the second data; the second data can be understood as the data to be transmitted generated after the symmetric encryption; then the first device will The encrypted second data is sent to the second device through the communication connection with the second device. The decryption process is as follows: the second device decrypts the second data based on the derived symmetric key and the initialization vector to obtain third data; the third data can be understood as data generated after data decryption. The third data obtained by the second device is generally the same as the data of the first data.

For example, a Bluetooth communication connection may be established between the first device and the second device through a Bluetooth network, and the second device may receive the second data based on the Bluetooth communication connection.

It can be understood that the second device directly uses the inverse process "symmetric decryption method" corresponding to the symmetric encryption method to symmetric decrypt the second data based on the symmetric key and the initialization vector to generate the third data; further, the symmetric decryption method is: The inverse process of the symmetric encryption method: since the sender and receiver of encrypted information use the same symmetric key to decrypt with the initialization vector generated based on the environmental information.

Optionally, the algorithm based on the symmetric decryption method may be a decryption method corresponding to the DES encryption algorithm, a decryption method corresponding to the TripleDES encryption algorithm, a decryption method corresponding to the RC2/RC4/RC5 encryption algorithm, a decryption method corresponding to the Blowfish encryption algorithm, and the like.

It can be understood that, for those of ordinary skill in the art, "embodiments related to the data transmission method applied to the first device" and "embodiments related to the data transmission method applied to the second device" are usually independent of each other. Embodiments; terms such as environment information, symmetric key, reference initial parameter, initialization vector, key context information, vector context information, etc. Terms such as environment information, symmetric key, reference initial parameter, initialization vector, key context information, vector context information, etc. shown in "Embodiment Relevant to Data Transmission Method Applied to Second Device" have independent meanings The concept of , usually in the process of data transmission, such as environment information, symmetric key, reference initial parameter, initialization vector, key context information shown in "Embodiments involved in the data transmission method applied to the first device" , vector context information and other terms related to "embodiments related to the data transmission method applied to the first device" such as environment information, symmetric key, reference initial parameters, initialization vector, key context information, vector context information Identical (same-named) terms have the same term data value. For example, when the first device transmits the environmental information "aaaa..." to the second device, the second device will also receive the environmental information "aaaa...". The same environment information is stored, and the values of the two environment information are the same, but they are two pieces of data independently stored in the first device and the second device.

In this embodiment of the present application, the second device may obtain the environment information transmitted by the first device, and after receiving the second data sent by the first device, obtain the symmetric key for the first device and refer to the initial parameters by obtaining the symmetric key for the first device. , an initialization vector can be generated based on the environment information and the reference initial parameter, so that the second data can be decrypted based on the reference initial parameter, the symmetric key and the environment information to obtain the third data; The data transmission process and data decryption process avoid the use of incremental sequences but generate initialization vectors based on environmental information, and do not directly transmit initialization vectors to the data receiver, which reduces the probability of device tracking during data transmission and improves the security of data transmission; And, different environmental information types can be selected from a variety of reference information types in at least one session of the scene to obtain environmental information, which can improve the security of data transmission; and can only send the environmental information type to the second device to indicate the second device. The device can obtain the corresponding environmental information, which improves the convenience of data transmission and saves the cost of data transmission.

Please refer to FIG. 8 , which is a schematic flowchart of another embodiment of a data transmission method proposed by the present application. specific:

S401: Receive an environment information type transmitted by a first device, where the environment information type is a type corresponding to the environment information acquired by the first device.

According to some embodiments, the first device can determine the environmental information type from at least one reference information type; or, the first device can be set with a default environmental information type; then send the environmental information type to the second device; the second device The device may receive the context information type based on the communication connection with the first device.

It can be understood that the environmental information type may be a fitting of one or more types of altitude parameter types, temperature parameter types, humidity parameter types, weather parameter types, magnetic parameter types, and time parameter types.

S402: Acquire reference environment information corresponding to the environment information type, and use the reference environment information as the environment information;

In one or more embodiments, since the first device and the second device in the same environment usually obtain the same environment information, and the types of reference information can be various, in order to improve the security of data transmission, in the During at least one round of data transmission, the first device may select an environmental information type from at least one reference information type to obtain the environmental information indicated by the environmental information type; it is understandable that when the data transmission involves multiple rounds of conversation scenarios, The first device may use different reference information types in the data transmission process corresponding to at least one round of session scenarios, so as to use at least some different types of environment information in each round of session scenarios to generate initialization vectors, so as to improve the security of data transmission . It can be understood that in at least one round of conversation scenarios, after the second device receives the environmental information type sent by the first device, it can call a specific function or specific component to obtain the reference environmental information corresponding to the environmental information type, so as to use the reference environmental information. As the environmental information acquired by the first device, it is convenient for subsequent decryption of the second data. For example, the second device invokes the time acquisition function to acquire the current time parameter, and the second device invokes the magnetic sensor to acquire the magnetic parameter of the current environment.

In one or more embodiments, since the first device and the second device in the same environment usually obtain the same environment information, based on this, the first device can transmit the environment information type to the second device to indicate the second device. The device obtains the reference environment information indicated by the environment information type as the environment information obtained by the first device; by receiving the environment information type corresponding to the current round of data transmission by the first device, compared with the environment information directly sent by the first device, it can improve the The intelligence of data transmission can also save the data negotiation overhead before the first data (such as service data) is transmitted.

S403: Receive second data sent by the first device; the second data is generated by encrypting the first data based on an initialization vector and a symmetric key.

For details, reference may be made to the method steps involved in other embodiments of the present application, which will not be repeated here.

S404: Obtain a shared key string and first shared information for the first device, where the first shared information is shared information transmitted by the first device to the second device;

It can be understood that before data transmission, the first device and the second device are involved in an encryption negotiation process; as shown in FIG. 3 , FIG. 3 is a schematic diagram of a data negotiation transmission process involved in the present application. The device and the second device negotiate a shared key string (eg, key string Z) based on a key agreement algorithm. The key agreement algorithm can be set based on the actual environment, such as Diffie-Hellman algorithm, RSA algorithm, and SM2 algorithm. Taking the key agreement algorithm as the Diffie-Hellman algorithm as an example, the first device and the second device can use the Diffie-Hellman algorithm to create a key through an insecure channel without any prior information between the two communicating parties, that is, a shared key. keychain,

It can be understood that during the encryption negotiation process between the first device and the second device, the first device will send the first shared information (xif-A) to the second device; similarly, the second device will also send the first device to the first device. Two Shared Information (xif-B).

The first shared information (xif-A) may be a random number generated by the first device, or may be service association information corresponding to the first device, or the like.

The second shared information (xif-B) may be a random number generated by the second device, or may be service association information corresponding to the second device, or the like.

It should be noted that the first shared information and the second shared information may be sent to the opposite end by the sending end using a display transmission method such as plaintext transmission, usually during the encryption negotiation process. The specific information contents of the first shared information and the second shared information are determined based on the actual environment, and are not limited here.

The key context information can be understood as the identification information for the symmetric key, which can be customized based on the actual application scenario, and can be used to identify the symmetric key. For example, it can be used to identify the name, meaning, One or more of the types of identifying parameters such as usage, specification, length, etc., which are not specifically limited.

It can be understood that, in some implementation scenarios, the key context information has been determined before data transmission, and in some implementations: it is usually determined by negotiation between the two parties in advance. In some embodiments, based on the context information for identifying the symmetric key determined when the target function service of the first device and the second device is initialized, for example, the first device is in the service initialization process before using the target function service set. In some embodiments, the first device and the second device may also use the key context information negotiated by the negotiation algorithm in the related art, and so on.

It can be understood that the first device performs a first derivation process based on the key context information, the shared key string, the first shared information and the second shared information to generate a symmetric key; schematically, as shown in FIG. 4 , FIG. 4 is a schematic diagram of a scenario of a derivation process involved in the present application. The first device can use the key derivation algorithm based on the key context information, the shared key string, the first shared information and the second shared information as an algorithm input , to derive the symmetric key, the generation process of the symmetric key can be expressed as:

K=KDF1(Z, xif_A, xif_B, "wy")

Among them, K is the symmetric key, Z is the shared key string, KDF1( ) is the first derivation process, xif_A is the first shared information, xif_B is the second shared information, and "wy" is the key context information.

S405: Perform a second derivation process based on the key context information, the shared key string, the second shared information, and the first shared information to generate a symmetric key, where the second shared information is the information sent by the second device to the Shared information transmitted by the first device;

The key context information can be understood as the identification information for the symmetric key, which can be customized based on the actual application scenario, and can be used to identify the symmetric key. For example, it can be used to identify the name, meaning, One or more of the types of identifying parameters such as usage, specification, length, etc., which are not specifically limited.

It can be understood that, in some implementation scenarios, the key context information has been determined before data transmission, and in some implementations: it is usually determined by negotiation between the two parties in advance. In some embodiments, based on the context information for identifying the symmetric key determined when the target function service of the first device and the second device is initialized, for example, the first device is in the service initialization process before using the target function service set. In some embodiments, the first device and the second device may also use the key context information negotiated by the negotiation algorithm in the related art, and so on.

It can be understood that the first device performs a first derivation process based on the key context information, the shared key string, the first shared information and the second shared information to generate a symmetric key; schematically, as shown in FIG. 4 , FIG. 4 is a schematic diagram of a scenario of a derivation process involved in the present application. The first device can use the key derivation algorithm based on the key context information, the shared key string, the first shared information and the second shared information as an algorithm input , to derive the symmetric key, the generation process of the symmetric key can be expressed as:

K=KDF1(Z, xif_A, xif_B, "wy")

Among them, K is the symmetric key, Z is the shared key string, KDF1( ) is the first derivation process, xif_A is the first shared information, xif_B is the second shared information, and "wy" is the key context information.

S406: Perform a first derivation process based on the vector context information, the shared key string, the second shared information, and the first shared information to generate a reference initial parameter.

The vector context information ("abc") can be understood as identification information for the reference initial parameter (abcant), which can be customized based on the actual application scenario and used to identify the reference initial parameter (abcant). It is used to identify one or more types of identifying parameters such as the name, meaning, purpose, specification, length, etc. of the reference initial parameter (abcant), which is not specifically limited.

The key context information is different from the vector context information, that is, the key context information and the vector context information are different.

It can be understood that, in some implementation scenarios, the vector context information has been determined before data transmission, and in some implementations: it is usually determined by negotiation between the two parties in advance. In some embodiments, based on the context information for identifying the reference initial parameter (abcant) determined when the target function service of the first device and the second device is initialized, for example, the second device is in the service before using the target function service. set during initialization. In some embodiments, the first device and the second device may also use the vector context information negotiated by the negotiation algorithm in the related art, and so on.

It can be understood that the second device performs a first derivation process based on the vector context information, the shared key string, the first shared information and the second shared information to generate the reference initial parameter; schematically, as shown in FIG. 5 . Figure 5 is a schematic diagram of a derivation process involved in the present application. The second device can use a key derivation algorithm based on the vector context information, the shared key string, the first shared information, and the second shared information as The algorithm input is used to derive the reference initial parameters. The generation process of the reference initial parameters can be expressed as:

abcant=KDF2(Z, xif_A, xif_B, "abc")

Among them, abcant is the reference initial parameter, Z is the shared key string, KDF2() is the second derivation process, xif_A is the first shared information, xif_B is the second shared information, and "abc" is the vector context information.

In one or more embodiments, the second device may perform an information negotiation process with the first device to generate key context information and vector context information; for example, the first device and the second device jointly set a key for identifying a symmetric key The context information, for another example: the first device and the second device jointly set the vector context information for the identification reference initial parameter.

It can be understood that after the information negotiation process is completed, the second device and the first device save key context information and vector context information respectively; the key context information is different from the vector context information.

S407: Generate an initialization vector based on the environment information and the reference initial parameter.

In one or more embodiments, first, an objective function corresponding to the environmental information type may be determined based on the function mapping relationship between the at least one reference information type and the reference function, so as to obtain an initialization vector by using the objective function; based on this, The second device can store at least one function mapping relationship between the reference information type and the reference function, so as to determine the target function corresponding to the environmental information type, and use the target function to obtain the initialization vector involved in the data encryption by the first device.

In one or more embodiments, the objective function may also be directly set by the first device and the second device by default, and the second device may use the objective function to perform functional processing on the environment information and the reference initial parameters to obtain the function The processed initialization vector

S408: Decrypt the second data based on the reference initial parameter, the symmetric key and the environment information to obtain third data.

For details, reference may be made to the method steps of other embodiments involved in this application, which will not be repeated here.

It can be understood that, for those of ordinary skill in the art, "embodiments related to the data transmission method applied to the first device" and "embodiments related to the data transmission method applied to the second device" are usually independent of each other. Embodiments; terms such as environment information, symmetric key, reference initial parameter, initialization vector, key context information, vector context information, etc. Terms such as environment information, symmetric key, reference initial parameter, initialization vector, key context information, vector context information, etc. shown in "Embodiment Relevant to Data Transmission Method Applied to Second Device" have independent meanings The concept of , usually in the process of data transmission, such as environment information, symmetric key, reference initial parameter, initialization vector, key context information shown in "Embodiments involved in the data transmission method applied to the first device" , vector context information and other terms related to "embodiments related to the data transmission method applied to the first device" such as environment information, symmetric key, reference initial parameters, initialization vector, key context information, vector context information Identical (same-named) terms have the same term data value. For example, when the first device transmits the environmental information "aaaa..." to the second device, the second device will also receive the environmental information "aaaa...". The same environment information is stored, and the values of the two environment information are the same, but they are two pieces of data independently stored in the first device and the second device.

In this embodiment of the present application, the second device may obtain the environment information transmitted by the first device, and after receiving the second data sent by the first device, obtain the symmetric key for the first device and refer to the initial parameters by obtaining the symmetric key for the first device. , an initialization vector can be generated based on the environment information and the reference initial parameter, so that the second data can be decrypted based on the reference initial parameter, the symmetric key and the environment information to obtain the third data; The data transmission process and data decryption process avoid the use of incremental sequences but generate initialization vectors based on environmental information, and do not directly transmit initialization vectors to the data receiver, which reduces the probability of device tracking during data transmission and improves the security of data transmission; And, different environmental information types can be selected from a variety of reference information types in at least one session of the scene to obtain environmental information, which can improve the security of data transmission; and can only send the environmental information type to the second device to indicate the second device. The device can obtain the corresponding environmental information, which improves the convenience of data transmission and saves the cost of data transmission.

Please refer to FIG. 9 , which is a schematic diagram of a scenario of a data transmission system provided by an embodiment of the present application. As shown in FIG. 9 , the data transmission system may include a first device 100 and a second device 110 .

The first device 100 and the second device 110 may be an electronic device including, but not limited to, a wearable device, a handheld device, a personal computer, a tablet computer, an in-vehicle device, a computing device, or a wireless modem connected to a wireless modem. other processing equipment, etc. User terminals may be called by different names in different networks, for example: user equipment, access terminal, subscriber unit, subscriber station, mobile station, mobile station, remote station, remote terminal, mobile device, user terminal, terminal, wireless communication Equipment, user agent or user equipment, cellular phone, cordless phone, personal digital assistant (PDA), equipment in 5G network or future evolution network, etc.

The first device 100 may interact with the second device 110 through a communication network, and the communication network may be a near-end communication network other than a mobile data network, such as a wireless Bluetooth communication network, a wireless near field communication (NFC) network, a ZigBee communication network, etc. .

The first device 100 and the second device 110 are usually in the same environment. In order to avoid being tracked by at least one third device (such as a monitoring device) located in the same environment during data transmission, the data transmission method involved in this application is used to participate. The first device 100 and the second device 110 for data transmission are not involved in the transmission of the initialization vector. It is understandable that the initialization vector does not use a random incrementing sequence corresponding to random numbers, so as to prevent the third device from tracking the random characteristics of the data based on the initialization vector. To the device participating in data transmission, (for example, the commonly used random increment sequence is used as the initialization vector for plaintext transmission, usually the initialization vector of each plaintext transmission often exhibits the characteristic of data increment, and the initialization vector of each data sending device in the same environment The difference is that for a certain data sending device, it continues to transmit plaintext in the way of data increment, which will make the “a certain data sending device” very easy to be traced to related devices by other devices in the same environment based on the data increment feature, and then Cracking the data involved in its data transfer).

It can be understood that the data transmission system and the data transmission method embodiments provided by the above embodiments belong to the same concept, and the embodiment and implementation process thereof are detailed in the method embodiments, which will not be repeated here.

The data transmission apparatus provided by the embodiment of the present application will be described in detail below with reference to FIG. 10 . It should be noted that the data transmission device shown in FIG. 10 is used to execute the method of one or more embodiments involved in the present application. For the convenience of description, only the parts related to the embodiments of the present application are shown, and the specific technical details are If not disclosed, please refer to one or more method embodiments involved in this application.

Please refer to FIG. 10 , which shows a schematic structural diagram of a data transmission apparatus according to an embodiment of the present application. The data transmission device 1 can be implemented as all or a part of the user terminal through software, hardware or a combination of the two. According to some embodiments, the data transmission device 1 includes a data transmission module 11, a data transmission module 12 and a data transmission module 13, which are specifically used for:

an information transmission module 11, configured to acquire current environmental information and transmit the environmental information to the second device;

a vector generation module 12, configured to obtain a symmetric key for the second device and a reference initial parameter, and generate an initialization vector based on the environment information and the reference initial parameter;

The data encryption module 13 is configured to encrypt the first data based on the symmetric key and the initialization vector to obtain second data, and send the second data to the second device, where the second data is used to indicate The second device decrypts the second data based on the reference initial parameter, the symmetric key, and the context information

Optionally, as shown in FIG. 11 , the vector generation module 12 includes:

an information acquisition unit 121, configured to acquire a shared key string for the second device and second shared information, where the second shared information is shared information transmitted by the second device to the first device;

The key generation unit 122 is configured to perform a first derivation process based on the key context information, the shared key string, the first shared information and the second shared information to generate a symmetric key, where the first shared information is the shared information transmitted by the first device to the second device;

The parameter generating unit 123 is configured to perform a second derivation process based on the vector context information, the shared key string, the first shared information, and the second shared information to generate reference initial parameters.

Optionally, the device 1 is specifically used for:

Perform information negotiation processing with the second device to generate key context information and vector context information;

The key context information and the vector context information are saved; the key context information is different from the vector context information.

Optionally, the vector generation module 12 is specifically used for:

The environmental information and the reference initial parameters are processed by the objective function method, and the initialization vector after the function processing is obtained.

Optionally, the vector generation module 12 is specifically used for:

XOR processing is performed on the environmental information and the reference initial parameter by means of an XOR function to obtain an initialization vector after the XOR processing; or,

Hash processing is performed on the environmental information and the reference initial parameters by means of a hash function to obtain a hashed initialization vector.

Optionally, the transmission module 11 is specifically used for:

Acquire the current environment information, and transmit the environment information type corresponding to the environment information to the second device, where the environment information type is used to instruct the second device to obtain the reference environment information corresponding to the information type, the reference environment The information is the same as the environment information.

Optionally, the transmission module 11 is specifically used for:

The environmental information type is determined from at least one reference information type, and the environmental information indicated by the environmental information type is acquired.

Optionally, the transmission module 11 is specifically used for:

Based on the function mapping relationship between the at least one reference information type and the reference function mode, determine the target function mode corresponding to the environmental information type;

The environment information and the reference initial parameters are processed by the objective function method, and the initialization vector after the function processing is obtained.

It should be noted that, when the data transmission apparatus provided in the above-mentioned embodiments executes the data transmission method, only the division of the above-mentioned functional modules is used for illustration. , that is, dividing the internal structure of the device into different functional modules to complete all or part of the functions described above. In addition, the data transmission apparatus and the data transmission method embodiments provided by the above embodiments belong to the same concept, and the implementation process of the data transmission apparatus is described in the method embodiments, which will not be repeated here.

The above-mentioned serial numbers of the embodiments of the present application are only for description, and do not represent the advantages or disadvantages of the embodiments.

Please refer to FIG. 12 , which shows a schematic structural diagram of a data transmission apparatus according to an embodiment of the present application. The data transmission device 2 can be implemented as all or a part of the user terminal through software, hardware or a combination of the two. According to some embodiments, the data transmission device 2 includes an information acquisition module 21, a vector generation module 22 and a data decryption module 23, which are specifically used for:

an information acquisition module 21, configured to acquire the environmental information transmitted by the first device, and receive the second data sent by the first device;

a vector generation module 22, configured to obtain a symmetric key for the first device and a reference initial parameter, and generate an initialization vector based on the environment information and the reference initial parameter;

The data decryption module 23 is configured to decrypt the second data based on the reference initial parameter, the symmetric key and the environment information to obtain third data.

Optionally, the vector generation module 22 is specifically used for:

acquiring a shared key string and first shared information for the first device, where the first shared information is shared information transmitted by the first device to the second device;

A symmetric key is generated by performing a second derivation process based on the key context information, the shared key string, the second shared information, and the first shared information, where the second shared information is the request from the second device to the first shared information. shared information transmitted by the device;

A first derivation process is performed based on the vector context information, the shared key string, the second shared information, and the first shared information to generate reference initial parameters.

Optionally, the vector generation module 22 is specifically used for:

Perform information negotiation processing with the first device to generate key context information and vector context information;

The key context information and the vector context information are saved; the key context information is different from the vector context information.

Optionally, the vector generation module 22 is specifically used for:

The environmental information and the reference initial parameters are processed by the objective function to obtain the initialization vector after the function processing.

Optionally, the information acquisition module 21 is specifically used for:

receiving the environmental information type transmitted by the first device, where the environmental information type is the type corresponding to the environmental information acquired by the first device;

Obtain reference environment information corresponding to the environment information type, and use the reference environment information as the environment information.

Optionally, the vector generation module 22 is specifically used for:

Based on the function mapping relationship between the at least one reference information type and the reference function, determine the target function corresponding to the environmental information type;

The environmental information and the reference initial parameters are processed by using the objective function to obtain the initialization vector after the function processing.

It should be noted that, when the data transmission apparatus provided in the above-mentioned embodiments executes the data transmission method, only the division of the above-mentioned functional modules is used for illustration. , that is, dividing the internal structure of the device into different functional modules to complete all or part of the functions described above. In addition, the data transmission apparatus and the data transmission method embodiments provided by the above embodiments belong to the same concept, and the implementation process of the data transmission apparatus is described in the method embodiments, which will not be repeated here.

The above-mentioned serial numbers of the embodiments of the present application are only for description, and do not represent the advantages or disadvantages of the embodiments.

An embodiment of the present application further provides a computer storage medium, where the computer storage medium can store a plurality of instructions, and the instructions are suitable for being loaded and executed by a processor as described in the above-mentioned embodiments shown in FIG. 1 to FIG. 9 . For the data transmission method and the specific execution process, reference may be made to the specific descriptions of the embodiments shown in FIG. 1 to FIG. 9 , which will not be repeated here.

The present application also provides a computer program product, where the computer program product stores at least one instruction, and the at least one instruction is loaded by the processor and executes the data transmission in the embodiments shown in FIG. 1 to FIG. 9 above. For the specific implementation process of the method, reference may be made to the specific descriptions of the embodiments shown in FIG. 1 to FIG. 9 , which will not be repeated here.

Please refer to FIG. 13 , which shows a structural block diagram of an electronic device provided by an exemplary embodiment of the present application. An electronic device in this application may include one or more of the following components: a processor 110 , a memory 120 , an input device 130 , an output device 140 and a bus 150 . The processor 110 , the memory 120 , the input device 130 and the output device 140 may be connected through a bus 150 .

The processor 110 may include one or more processing cores. The processor 110 uses various interfaces and lines to connect various parts in the entire electronic device, and executes the electronic device by running or executing the instructions, programs, code sets or instruction sets stored in the memory 120, and calling the data stored in the memory 120. Various functions of the device 100 and processing data. Optionally, the processor 110 may employ at least one of digital signal processing (digital signal processing, DSP), field-programmable gate array (field-programmable gate array, FPGA), and programmable logic array (programmable logic array, PLA). implemented in hardware. The processor 110 may integrate one or a combination of a central processing unit (CPU), a graphics processing unit (GPU), a modem, and the like. Among them, the CPU mainly handles the operating system, user interface and application programs, etc.; the GPU is used for rendering and drawing of the display content; the modem is used to handle wireless communication. It can be understood that, the above-mentioned modem may also not be integrated into the processor 110, and is implemented by a communication chip alone.

The memory 120 may include random access memory (RAM), or may include read-only memory (ROM). Optionally, the memory 120 includes a non-transitory computer-readable storage medium. Memory 120 may be used to store instructions, programs, codes, sets of codes, or sets of instructions. The memory 120 may include a stored program area and a stored data area, wherein the stored program area may store instructions for implementing an operating system, instructions for implementing at least one function (such as a touch function, a sound playback function, an image playback function, etc.) , instructions for implementing the following method embodiments, etc., the operating system can be an Android (Android) system, including a system based on the deep development of the Android system, an IOS system developed by Apple, including a system based on the deep development of the IOS system or other systems. The storage data area can also store data created by the electronic device in use, such as a phone book, audio and video data, chat record data, and the like.

Referring to FIG. 14 , the memory 120 can be divided into an operating system space and a user space, the operating system runs in the operating system space, and the native and third-party applications run in the user space. In order to ensure that different third-party applications can achieve better running effects, the operating system allocates corresponding system resources to different third-party applications. However, different application scenarios in the same third-party application also have different requirements for system resources. For example, in the local resource loading scenario, the third-party application has higher requirements on the disk read speed; in the animation rendering scenario, the first Third-party applications have higher requirements on GPU performance. The operating system and the third-party application are independent of each other, and the operating system often cannot perceive the current application scenario of the third-party application in time, so that the operating system cannot perform targeted system resource adaptation according to the specific application scenario of the third-party application.

In order to enable the operating system to distinguish the specific application scenarios of third-party applications, it is necessary to open up the data communication between the third-party application and the operating system, so that the operating system can obtain the current scene information of the third-party application at any time, and then perform the operation based on the current scene. Targeted system resource adaptation.

Taking the Android system as the operating system as an example, the programs and data stored in the memory 120 are shown in FIG. 15 . The memory 120 may store the Linux kernel layer 320, the system runtime library layer 340, the application framework layer 360 and the application layer 380, Among them, the Linux kernel layer 320, the system runtime layer 340 and the application framework layer 360 belong to the operating system space, and the application layer 380 belongs to the user space. The Linux kernel layer 320 provides underlying drivers for various hardwares of electronic devices, such as display drivers, audio drivers, camera drivers, Bluetooth drivers, Wi-Fi drivers, power management and the like. The system runtime layer 340 provides main feature support for the Android system through some C/C++ libraries. For example, the SQLite library provides database support, the OpenGL/ES library provides 3D drawing support, and the Webkit library provides browser kernel support. An Android runtime library (Android runtime) is also provided in the system runtime library layer 340, which mainly provides some core libraries, which can allow developers to use Java language to write Android applications. The application framework layer 360 provides various APIs that may be used when building applications. Developers can also build their own applications by using these APIs, such as activity management, window management, view management, notification management, content provider, Package management, call management, resource management, location management. There is at least one application running in the application layer 380, and these applications may be native applications that come with the operating system, such as contact programs, SMS programs, clock programs, camera applications, etc.; they may also be developed by third-party developers Third-party applications, such as game applications, instant messaging programs, photo enhancement programs, etc.

Taking the operating system as the IOS system as an example, the programs and data stored in the memory 120 are shown in FIG. 16 . The IOS system includes: a core operating system layer 420 (Core OS layer), a core service layer 440 (Core Services layer), a media layer 460 (Media layer), touchable layer 480 (Cocoa Touch Layer). The core operating system layer 420 includes the operating system kernel, drivers, and low-level program frameworks, which provide functions closer to hardware for use by the program frameworks located in the core service layer 440 . The core service layer 440 provides system services and/or program frameworks required by application programs, such as a foundation framework, an account framework, an advertisement framework, a data storage framework, a network connection framework, a geographic location framework, a motion framework, and the like. The media layer 460 provides audiovisual interfaces for applications, such as graphics and image related interfaces, audio technology related interfaces, video technology related interfaces, and audio and video transmission technology wireless playback (AirPlay) interfaces. The touchable layer 480 provides various common interface-related frameworks for application development, and the touchable layer 480 is responsible for the user's touch interaction operation on the electronic device. Such as local notification service, remote push service, advertising framework, game tool framework, message user interface interface (User Interface, UI) framework, user interface UIKit framework, map framework and so on.

Among the frameworks shown in FIG. 16 , the frameworks related to most applications include but are not limited to: the basic framework in the core service layer 440 and the UIKit framework in the touchable layer 480 . The basic framework provides many basic object classes and data types, and provides the most basic system services for all applications, regardless of UI. The classes provided by the UIKit framework are the basic UI class libraries for creating touch-based user interfaces. iOS applications can provide UI based on the UIKit framework, so it provides the application's infrastructure for building user interfaces, drawing , handling and user interaction events, responding to gestures, and more.

The method and principle of implementing data communication between a third-party application and an operating system in the IOS system may refer to the Android system, which will not be repeated in this application.

The input device 130 is used for receiving input instructions or data, and the input device 130 includes but is not limited to a keyboard, a mouse, a camera, a microphone or a touch device. The output device 140 is used for outputting instructions or data, and the output device 140 includes, but is not limited to, a display device, a speaker, and the like. In one example, the input device 130 and the output device 140 may be co-located, and the input device 130 and the output device 140 are a touch display screen, the touch display screen is used to receive any suitable objects such as a user's finger, a touch pen, etc. Nearby touch actions, as well as displaying the user interface of each application. The touch display is usually provided on the front panel of the electronic device. The touch screen can be designed as a full screen, a curved screen or a special-shaped screen. The touch display screen can also be designed to be a combination of a full screen and a curved screen, or a combination of a special-shaped screen and a curved screen, which is not limited in the embodiments of the present application.

In addition, those skilled in the art can understand that the structure of the electronic device shown in the above drawings does not constitute a limitation to the electronic device, and the electronic device may include more or less components than those shown in the drawings, or a combination of certain components may be included. some components, or a different arrangement of components. For example, the electronic device further includes components such as a radio frequency circuit, an input unit, a sensor, an audio circuit, a wireless fidelity (WiFi) module, a power supply, and a Bluetooth module, which will not be repeated here.

In this embodiment of the present application, the execution body of each step may be the electronic device described above. Optionally, the execution subject of each step is an operating system of the electronic device. The operating system may be an Android system, an IOS system, or other operating systems, which are not limited in this embodiment of the present application.

The electronic device according to the embodiment of the present application may also have a display device installed thereon, and the display device may be various devices that can realize a display function, such as a cathode ray tube display (CR for short), a light emitting diode display (light emitting diode display). -emitting diode display, referred to as LED), electronic ink screen, liquid crystal display (liquid crystal display, referred to as LCD), plasma display panel (plasma display panel, referred to as PDP) and so on. The user can use the display device on the electronic device 101 to view the displayed text, image, video and other information. The electronic device may be a smart phone, a tablet computer, a gaming device, an AR (Augmented Reality) device, a car, a data storage device, an audio playback device, a video playback device, a notebook, a desktop computing device, a wearable device such as an electronic device. Watches, electronic glasses, electronic helmets, electronic bracelets, electronic necklaces, electronic clothing and other equipment.

In the electronic device shown in FIG. 13 , the electronic device may be a terminal, and the processor 110 may be used to invoke the application program stored in the memory 120, and specifically perform the following operations:

obtaining the environment information where it is located, and transmitting the environment information to the second device;

acquiring a symmetric key for the second device and a reference initial parameter, and generating an initialization vector based on the environment information and the reference initial parameter;

Encrypt the first data based on the symmetric key and the initialization vector to obtain second data, and send the second data to the second device, where the second data is used to instruct the second device based on the The second data is decrypted by referring to the initial parameter, the symmetric key and the environment information.

In one embodiment, when the processor 1001 executes the obtaining of the symmetric key for the second device and the reference to the initial parameter, the processor 1001 specifically executes the following operations:

acquiring a shared key string for the second device and second shared information, where the second shared information is shared information transmitted by the second device to the first device;

A first derivation process is performed based on the key context information, the shared key string, the first shared information, and the second shared information, and a symmetric key is generated, and the first shared information is the information from the first device to the second shared information. shared information transmitted by the device;

A second derivation process is performed based on the vector context information, the shared key string, the first shared information and the second shared information to generate reference initial parameters.

In one embodiment, before the processor 110 executes the obtaining of the current environment information, the processor 110 further includes:

Perform information negotiation processing with the second device to generate key context information and vector context information;

The key context information and the vector context information are saved; the key context information is different from the vector context information.

In one embodiment, when the processor 110 performs the generating of the initialization vector based on the environment information and the reference initial parameter, the processor 110 specifically performs the following operations:

The environmental information and the reference initial parameters are processed by the objective function method, and the initialization vector after the function processing is obtained.

In one embodiment, the processor 110 specifically performs the following operations when performing the function processing on the environment information and the reference initial parameters in an objective function manner to obtain a function-processed initialization vector:

XOR processing is performed on the environmental information and the reference initial parameter by means of an XOR function to obtain an initialization vector after the XOR processing; or,

Hash processing is performed on the environmental information and the reference initial parameters by means of a hash function to obtain a hashed initialization vector.

In one embodiment, when the processor 110 executes the obtaining of the current environment information and transmits the environment information to the second device, the processor 110 specifically performs the following operations:

Acquire the current environment information, and transmit the environment information type corresponding to the environment information to the second device, where the environment information type is used to instruct the second device to obtain the reference environment information corresponding to the information type, the reference environment The information is the same as the environment information.

In one embodiment, the processor 110 specifically performs the following operations when executing the obtaining of the current environment information: determining the environment information type from at least one reference information type, and obtaining the environment information indicated by the environment information type.

In one embodiment, when the processor 110 performs the generating of the initialization vector based on the environment information and the reference initial parameter, the processor 110 specifically performs the following operations:

Based on the function mapping relationship between the at least one reference information type and the reference function mode, determine the target function mode corresponding to the environmental information type;

The environment information and the reference initial parameters are processed by the objective function method, and the initialization vector after the function processing is obtained.

Referring to FIG. 17 , a schematic structural diagram of an electronic device is provided in an embodiment of the present application. As shown in FIG. 17 , the electronic device 1000 may include: at least one processor 1001 , at least one network interface 1004 , user interface 1003 , memory 1005 , and at least one communication bus 1002 .

Among them, the communication bus 1002 is used to realize the connection and communication between these components.

The user interface 1003 may include a display screen (Display) and a camera (Camera), and the optional user interface 1003 may also include a standard wired interface and a wireless interface.

Wherein, the network interface 1004 may optionally include a standard wired interface and a wireless interface (eg, a WI-FI interface).

The processor 1001 may include one or more processing cores. The processor 1001 uses various excuses and lines to connect various parts of the entire server 1000, and executes the server by running or executing the instructions, programs, code sets or instruction sets stored in the memory 1005, and calling the data stored in the memory 1005. 1000s of various functions and processing data. Optionally, the processor 1001 may employ at least one of a digital signal processing (Digital Signal Processing, DSP), a Field-Programmable Gate Array (Field-Programmable Gate Array, FPGA), and a Programmable Logic Array (Programmable Logic Array, PLA). A hardware form is implemented. The processor 1001 may integrate one or a combination of a central processing unit (Central Processing Unit, CPU), a graphics processing unit (Graphics Processing Unit, GPU), a modem, and the like. Among them, the CPU mainly handles the operating system, user interface, and application programs; the GPU is used to render and draw the content that needs to be displayed on the display screen; the modem is used to handle wireless communication. It can be understood that, the above-mentioned modem may not be integrated into the processor 1001, but is implemented by a single chip.

The memory 1005 may include random access memory (Random Access Memory, RAM), or may include read-only memory (Read-Only Memory). Optionally, the memory 1005 includes a non-transitory computer-readable storage medium. Memory 1005 may be used to store instructions, programs, codes, sets of codes, or sets of instructions. The memory 1005 may include a stored program area and a stored data area, wherein the stored program area may store instructions for implementing an operating system, instructions for at least one function (such as a touch function, a sound playback function, an image playback function, etc.), Instructions and the like used to implement the above method embodiments; the storage data area may store the data and the like involved in the above method embodiments. Optionally, the memory 1005 may also be at least one storage device located away from the aforementioned processor 1001 . As shown in FIG. 17 , the memory 1005 as a computer storage medium may include an operating system, a network communication module, a user interface module and an application program.

In the electronic device 1000 shown in FIG. 17 , the user interface 1003 is mainly used to provide an input interface for the user and obtain the data input by the user; and the processor 1001 can be used to call the data transmission application program stored in the memory 1005, and specifically Do the following:

Obtain the environment information transmitted by the first device, and receive the second data sent by the first device; the second data is encrypted and generated based on the initialization vector and the symmetric key for the first data;

acquiring a symmetric key for the first device and a reference initial parameter, and generating an initialization vector based on the environment information and the reference initial parameter;

Decrypt the second data based on the reference initial parameter, the symmetric key and the environment information to obtain third data.

In one embodiment, when the processor 1001 executes the obtaining of the symmetric key for the first device and the reference initial parameter, the processor 1001 specifically executes the following steps:

acquiring a shared key string and first shared information for the first device, where the first shared information is shared information transmitted by the first device to the second device;

A symmetric key is generated by performing a second derivation process based on the key context information, the shared key string, the second shared information, and the first shared information, where the second shared information is the request from the second device to the first shared information. shared information transmitted by the device;

A first derivation process is performed based on the vector context information, the shared key string, the second shared information, and the first shared information to generate reference initial parameters.

In one embodiment, before the processor 1001 executes the obtaining of the environment information transmitted by the first device, the method further includes:

Perform information negotiation processing with the first device to generate key context information and vector context information;

The key context information and the vector context information are saved; the key context information is different from the vector context information.

In one embodiment, when the processor 1001 performs the generating an initialization vector based on the environment information and the reference initial parameter, the processor 1001 specifically performs the following steps:

The environmental information and the reference initial parameters are processed by the objective function to obtain the initialization vector after the function processing.

In one embodiment, when the processor 1001 executes the obtaining of the environment information transmitted by the first device, the processor 1001 specifically executes the following steps:

receiving the environmental information type transmitted by the first device, where the environmental information type is the type corresponding to the environmental information acquired by the first device;

Obtain reference environment information corresponding to the environment information type, and use the reference environment information as the environment information.

In one embodiment, when the processor 1001 performs the generating an initialization vector based on the environment information and the reference initial parameter, the processor 1001 specifically performs the following steps:

Based on the function mapping relationship between the at least one reference information type and the reference function, determine the target function corresponding to the environmental information type;

The environmental information and the reference initial parameters are processed by using the objective function to obtain the initialization vector after the function processing.

Those of ordinary skill in the art can understand that all or part of the processes in the methods of the above embodiments can be implemented by instructing relevant hardware through a computer program, and the program can be stored in a computer-readable storage medium. During execution, the processes of the embodiments of the above-mentioned methods may be included. Wherein, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, or a random storage memory, and the like.

The above disclosures are only the preferred embodiments of the present application, and of course, the scope of the rights of the present application cannot be limited by this. Therefore, equivalent changes made according to the claims of the present application are still within the scope of the present application.

Claims (18)

1. A data transmission method, applied to a first device, the method comprising:

acquiring the environment information and transmitting the environment information to second equipment;

acquiring a symmetric key and a reference initial parameter for the second device, and generating an initialization vector based on the environment information and the reference initial parameter;

and encrypting the first data based on the symmetric key and the initialization vector to obtain second data, and sending the second data to the second equipment, wherein the second data is used for instructing the second equipment to decrypt the second data based on the reference initial parameter, the symmetric key and the environment information.

2. The method of claim 1, wherein the obtaining a symmetric key for the second device and reference initial parameters comprises:

acquiring a shared key string and second shared information aiming at the second device, wherein the second shared information is the shared information transmitted from the second device to the first device;

performing first derivation processing based on key context information, the shared key string, first shared information and second shared information to generate a symmetric key, wherein the first shared information is shared information transmitted from the first device to the second device;

and performing second derivation processing based on the vector context information, the shared key string, the first shared information and the second shared information to generate a reference initial parameter.

3. The method of claim 2, wherein prior to obtaining the current environmental information, further comprising:

performing information negotiation with a second device to generate key context information and vector context information;

saving the key context information and the vector context information; the key context information is different from the vector context information.

4. The method of claim 1, wherein generating an initialization vector based on the environmental information and the reference initial parameters comprises:

and performing function processing on the environment information and the reference initial parameter by adopting a target function mode to obtain an initialization vector after the function processing.

5. The method according to claim 4, wherein the performing a function process on the environment information and the reference initial parameter in an objective function manner to obtain a function-processed initialization vector comprises:

performing XOR processing on the environment information and the reference initial parameter by adopting an XOR function mode to obtain an initialized vector after XOR processing; or the like, or, alternatively,

and carrying out hash processing on the environment information and the reference initial parameter by adopting a hash function mode to obtain an initialization vector after the hash processing.

6. The method of claim 1, wherein obtaining the current environment information and transmitting the environment information to the second device comprises:

acquiring current environment information, and transmitting an environment information type corresponding to the environment information to the second device, wherein the environment information type is used for indicating the second device to acquire reference environment information corresponding to the information type, and the reference environment information is the same as the environment information.

7. The method according to claim 1 or 6, wherein the obtaining current environment information comprises:

determining an environment information type from at least one reference information type, and acquiring the environment information indicated by the environment information type.

8. The method of claim 7, wherein generating an initialization vector based on the environmental information and the reference initial parameters comprises:

determining a target function mode corresponding to the environment information type based on a function mapping relation between the at least one reference information type and a reference function mode;

and performing function processing on the environment information and the reference initial parameter by adopting the target function mode to obtain an initialization vector after the function processing.

9. A data transmission method, applied to a second device, the method comprising:

acquiring environmental information transmitted by first equipment, and receiving second data sent by the first equipment; the second data is generated by encrypting the first data based on the initialization vector and the symmetric key;

acquiring a symmetric key and a reference initial parameter for the first device, and generating an initialization vector based on the environment information and the reference initial parameter;

and decrypting the second data based on the reference initial parameter, the symmetric key and the environment information to obtain third data.

10. The method of claim 9, wherein obtaining the symmetric key for the first device and the reference initial parameters comprises:

acquiring a shared key string and first shared information aiming at the first device, wherein the first shared information is shared information transmitted from the first device to the second device;

performing second derivation processing based on key context information, the shared key string, second shared information and first shared information to generate a symmetric key, where the second shared information is shared information transmitted from the second device to the first device;

and performing first derivation processing based on the vector context information, the shared key string, the second shared information and the first shared information to generate a reference initial parameter.

11. The method of claim 10, wherein before obtaining the environment information transmitted by the first device, further comprising:

performing information negotiation with a first device to generate key context information and vector context information;

saving the key context information and the vector context information; the key context information is different from the vector context information.

12. The method of claim 9, wherein generating an initialization vector based on the environmental information and the reference initial parameters comprises:

and performing function processing on the environment information and the reference initial parameter by adopting a target function to obtain an initialization vector after the function processing.

13. The method of claim 9, wherein obtaining the environment information transmitted by the first device comprises:

receiving an environment information type transmitted by first equipment, wherein the environment information type is a type corresponding to environment information acquired by the first equipment;

and acquiring reference environment information corresponding to the environment information type, and taking the reference environment information as the environment information.

14. The method of claim 13, wherein generating an initialization vector based on the environmental information and the reference initial parameters comprises:

determining a target function corresponding to the environment information type based on a function mapping relation between the at least one reference information type and a reference function;

and performing function processing on the environment information and the reference initial parameter by adopting the target function to obtain an initialization vector after the function processing.

15. A data transmission apparatus, characterized in that the apparatus comprises:

the transmission module is used for acquiring current environment information and transmitting the environment information to the second equipment;

a vector generation module, configured to obtain a symmetric key and a reference initial parameter for the second device, and generate an initialization vector based on the environment information and the reference initial parameter;

and the data encryption module is used for encrypting the first data based on the symmetric key and the initialization vector to obtain second data and sending the second data to the second equipment, wherein the second data is used for indicating the second equipment to decrypt the second data based on the reference initial parameter, the symmetric key and the environment information.

16. A data transmission apparatus, characterized in that the apparatus comprises:

the information acquisition module is used for acquiring environmental information transmitted by first equipment and receiving second data sent by the first equipment;

a vector generation module, configured to obtain a symmetric key and a reference initial parameter for the first device, and generate an initialization vector based on the environment information and the reference initial parameter;

and the data decryption module is used for decrypting the second data based on the reference initial parameter, the symmetric key and the environment information to obtain third data.

17. A computer storage medium, characterized in that it stores a plurality of instructions adapted to be loaded by a processor and to perform the method steps according to any of claims 1 to 8 or 9 to 14.

18. An electronic device, comprising: a processor and a memory; wherein the memory stores a computer program adapted to be loaded by the processor and to perform the method steps of any of claims 1-8 or 9-14.

Images