CN116032577A - System, method, medium and terminal for realizing end-to-end data security transmission of terminal equipment - Google Patents

Abstract

The invention belongs to the technical field of data security transmission in the Internet of things and industrial control industries, and discloses a system, a method, a medium and a terminal for realizing end-to-end data security transmission of terminal equipment. According to the invention, the local terminal equipment is realized through key initialization, certificate management, encryption and decryption, equipment monitoring and authority control, so that the cloud computing pressure is effectively reduced, the authorized analysis efficiency is improved, meanwhile, the on-line transmission of the security key is reduced, the hijacking risk of the key is reduced, and the security of the transmitted data is increased.

Description

Realize end-to-end data security transmission system, transmission method, medium and terminal of terminal equipment

technical field

The invention belongs to the technical field of secure data transmission in the Internet of Things and industrial control industries, and in particular relates to a system, a transmission method, a medium and a terminal for realizing end-to-end secure data transmission of terminal equipment.

Background technique

At present, with the rise of the Internet of Things and a new generation of communication technology, end-to-end information communication is increasing. Due to the increasing amount of data, centralized computing is facing more and more pressure on data and computing. At the same time, various Such Trojan horses, viruses, malicious attacks and other behaviors continue to increase, seriously threatening the security of data transmission.

In the existing technology, simple transmission protocol data is easily hijacked and cracked, causing hidden dangers in communication or production, such as information data leakage, wrong sending and execution of industrial control production instructions; The analysis efficiency and pressure are gradually increasing, and the identity of the edge device is difficult to identify. At the same time, the data transmission in the existing technology adopts the central scheme, and the cloud server is used as the center of the data transmission and encryption and decryption of each device. Most of the encryption and decryption operations are completed in the cloud. , resulting in high computing pressure on the cloud, reduced authorization resolution efficiency, and all security keys need to be transmitted online, reducing data security.

Through the above analysis, the existing problems and defects of the existing technology are: the existing technology adopts end-to-end edge environment authentication, the efficiency and pressure of authorization analysis gradually increase, and the identity of the edge device is difficult to identify. At the same time, most of the encryption and decryption operations Centralized in the cloud, resulting in greater computing pressure on the cloud, reduced efficiency of authorization analysis, and all security keys need to be transmitted online, reducing data security.

The significance of solving the above problems and defects is: the present invention adopts end-to-end application program control and data security transmission method to solve the pressure of cloud computing, which can effectively improve the efficiency of authorization analysis, reduce the online transmission of security keys, and ensure the security of data. safety.

Contents of the invention

Aiming at the problems existing in the prior art, the present invention provides an end-to-end secure data transmission system, transmission method, medium and terminal for terminal equipment.

The present invention is achieved in this way, a system for realizing end-to-end data security transmission of terminal equipment, including:

A terminal service layer, which includes a plurality of terminal devices, the terminal devices including:

Key initialization module, used to generate asymmetric public-private key pair and device fingerprint data;

The registration center module is used to store the public-private key pair and device fingerprint data, and synchronize the public key and device fingerprint data to the designated terminal device registration center module through the cloud;

The encryption and decryption module is used to encrypt and decrypt the transmitted data by preset instruction operation;

Authority control module: used for transmissible device configuration through whitelist, device fingerprint and other data;

The cloud service layer, including the cloud, is used to obtain the public key and device fingerprint data stored in the registration center module, and synchronize the obtained public key and device fingerprint data to other terminal device registration center modules;

The network transport layer is used to implement data transmission between terminal devices and between terminal devices and the cloud.

Further, the terminal device also includes a device status monitoring module, which is used to monitor and report the usage status of the terminal device;

Further, the terminal device also includes a data interface for connecting to the network transport layer.

Further, the cloud is a public cloud or a private cloud, and the network transport layer is a wireless network or Ethernet.

Another object of the present invention is to provide a transmission method for realizing the end-to-end data security transmission system of the terminal equipment by applying the terminal equipment end-to-end data security transmission system, and the transmission method of the terminal equipment end-to-end data security transmission system The method includes the following steps:

Step 1, the terminal device is initialized to generate an asymmetric key pair and device fingerprint data through the key initialization module, and synchronize the public key and fingerprint data to the registration center module;

Step 2, the authority control module performs transferable device configuration according to the whitelist and device fingerprint data;

Step 3, the registration center module stores the obtained asymmetric key pair and device fingerprint data, and distributes the public key and device fingerprint data to the registration center module of other terminal devices configured by the authority control module through the cloud;

Step 4, the sending device encrypts the plaintext through the encryption and decryption module to generate a communication protocol, and sends the communication protocol to the receiving device;

Step 5, the receiver device receives the transmission protocol, and decrypts and verifies the communication protocol through the encryption and decryption module.

Further, the communication protocol includes calculation identification, ciphertext data, time stamp, device SN and digest M.

Further, the encryption and decryption module in the step 4 encrypts the plaintext and generates a communication protocol including:

S1, call the public key of the receiver device to encrypt the plaintext to generate ciphertext;

S2, call the fingerprint data of this device and the fingerprint data of the receiving end device to do XOR operation, use the national secret SM3 algorithm to perform hash operation, and intercept 128bit data from the operation result as the encryption factor P;

S3, encrypting the ciphertext and the encryption factor through the national secret SM4 algorithm to generate ciphertext data;

S4, obtain the summary data M from the plaintext data through the SM3 algorithm;

S5, sort out the calculation identifier, ciphertext data, time stamp, device SN and digest M to generate a communication protocol.

Further, the decryption and verification of the communication protocol by the encryption and decryption module in the step five includes:

S6, intercepting the ciphertext data according to the communication protocol, and obtaining the ciphertext through the SM2 algorithm according to the private key of the device;

S7, obtain the device fingerprint data of the sending device through the registration center and perform XOR processing with the device fingerprint data of the device, and perform SM3 operation on the processing result to intercept 128bit as the encryption factor P;

S8, performing SM4 decryption operation on the ciphertext and encryption factor P to obtain plaintext data;

S9, hash the plaintext data through the SM3 algorithm to obtain the summary data M1, intercept the summary data M according to the communication protocol, compare whether the summary data M1 and the summary data M are the same, if they are the same, it means that the data is complete, and if they are different, it proves that the received data Incomplete or falsified data.

Another object of the present invention is to provide a computer-readable storage medium, which stores a computer program, and when the computer program is executed by a processor, the processor performs the following steps:

The terminal device initialization generates an asymmetric key pair and device fingerprint data through the key initialization module, and synchronizes the public key and fingerprint data to the registration center module; the authority control module performs transmittable device configuration through the white list and device fingerprint data; the registration center The module stores the obtained asymmetric key pair and device fingerprint data, and distributes the public key and device fingerprint data to the registration center module of other terminal devices configured by the authority control module through the cloud; The plaintext is encrypted and a communication protocol is generated, which is sent to the receiving terminal device through the cloud; the receiving terminal device receives the transmission protocol, and decrypts and verifies the communication protocol through the encryption and decryption module.

Another object of the present invention is to provide an information data processing terminal, which is used to implement an end-to-end data security transmission system for terminal equipment.

The end-to-end data security transmission system and transmission method provided by the present invention have the following effects:

(1) Realize functions such as key initialization, public key terminal synchronization, data terminal verification, and access control, and integrate national secret algorithms, device fingerprints, and data tamper-proof verification to achieve end-to-end direct connection transmission data security;

(2) The key is initialized on the terminal device, and the certificate management is also on the terminal device. After the key is initialized, the key is synchronized to the local registration center module, and the device fingerprint information is also stored in the local registration center module. After receiving the key change , the key will be dynamically registered to each terminal device through the cloud, so as to reduce the risk of key hijacking, change the key pair regularly, and increase the security of instruction data.

(3) Encryption and decryption of local terminal equipment, the local application integrates national secret algorithms, device fingerprints and data tamper-proof instructions, and calls the encryption and decryption module locally to realize data security verification, sending and receiving, greatly reducing It reduces the computing pressure on the cloud and improves the efficiency of authorization resolution.

(4) Terminal equipment monitoring and authority control Local terminal equipment, real-time monitoring of equipment operating status on the terminal, and setting access permissions can achieve rapid situational awareness and isolation of equipment status.

(5) Customization of the data message, according to the needs of the actual work, the encryption scheme of the key can be customized.

The commercial value after the conversion of the technical solution of the present invention is:

After the technical transformation of this solution, it can be applied to industrial control, Internet of Things and other fields. Through the decentralized design, the bus bandwidth of the system is reduced and the equipment of the central server is reduced, which has the effect of increasing the efficiency; at the same time, the flat transmission of message data can be realized, which can improve the security of end-to-end direct communication , Efficiency; end-to-end device self-detection capability and notification and monitoring of device status.

With the continuous enhancement of informatization construction and the continuous update and expansion of end-to-end equipment, the cost reduction and efficiency enhancement capabilities of this solution will be further enlarged and highlighted.

Description of drawings

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following will briefly introduce the drawings that need to be used in the embodiments of the present invention. Obviously, the drawings described below are only some embodiments of the present invention. For Those of ordinary skill in the art can also obtain other drawings based on these drawings without making creative efforts.

FIG. 1 is a schematic diagram of an architecture of a system for realizing end-to-end secure data transmission of a terminal device provided by an embodiment of the present invention.

Fig. 2 is a component diagram of a system for realizing end-to-end secure data transmission of a terminal device provided by an embodiment of the present invention.

FIG. 3 is a flow chart of a transmission method for implementing an end-to-end data security transmission system for a terminal device provided by an embodiment of the present invention.

Fig. 4 is a flow chart of encrypting plaintext and generating a communication protocol by the encryption and decryption module provided by the embodiment of the present invention.

Fig. 5 is a flow chart of decrypting and verifying the communication protocol by the encryption and decryption module provided by the embodiment of the present invention.

FIG. 6 is a flowchart of an encryption and decryption algorithm of a transmission method for implementing an end-to-end data security transmission system for a terminal device provided by an embodiment of the present invention.

Fig. 7 is a flowchart of a data encryption algorithm provided by an embodiment of the present invention.

Fig. 8 is a flowchart of a data decryption algorithm provided by an embodiment of the present invention.

FIG. 9 is a flowchart of an algorithm for verifying data integrity provided by an embodiment of the present invention.

In the figure: 100, terminal service layer; 200, cloud service layer; 300, network transmission layer; 101, terminal device; 201, cloud; 1, key initialization module; 2, registration center module; 3, encryption and decryption module; 4 , Authority control module; 5, Equipment status monitoring module; 6, Data interface.

Detailed ways

In order to make the object, technical solution and advantages of the present invention more clear, the present invention will be further described in detail below in conjunction with the examples. It should be understood that the specific embodiments described here are only used to explain the present invention, not to limit the present invention.

Aiming at the problems existing in the prior art, the present invention provides an end-to-end secure data transmission system and transmission method for terminal devices. The present invention will be described in detail below with reference to the accompanying drawings.

As shown in Figure 1-2, an end-to-end secure data transmission system for terminal devices 101 includes a terminal service layer 100, a cloud service layer 200, and a network transport layer 300. The terminal service layer 100 includes multiple terminal devices 101, terminal The device 101 includes a key initialization module 1, a registration center module 2, an encryption and decryption module 3, an authority control module 4, and a device status monitoring module 5. The key initialization module 1 is used to generate an asymmetric public-private key pair and device fingerprint data, and register The central module 2 is used to store the public-private key pair and device fingerprint data, and synchronize the public key and device fingerprint data to the designated terminal devices 101 through the cloud 201 to register the central module 2, and the encryption and decryption module 3 is used for preset instruction operation pairs The transmission data is encrypted and decrypted. The authority control module 4 is used to configure the transmittable device through whitelist, device fingerprint and other data. The device status monitoring module 5 is used to monitor the usage status of the terminal device 101 in real time. The intrusion reports device abnormality information to the cloud 201, and the cloud service layer 200 includes the cloud 201, which is used to obtain the public key and device fingerprint data stored in the registration center module 2, and synchronize the obtained public key and device fingerprint data to other terminal devices 101 registration center module 2, the cloud 201 can be a public cloud or a private cloud, the network transport layer 300 is used to realize the data transmission between each terminal device 101 and between each terminal device 101 and the cloud 201, the network transport layer 300 can be a wireless network or Ethernet, wireless network and public cloud are used together, and Ethernet is used together with private cloud. The terminal equipment 101 is also provided with a data interface 6, and the network transport layer 300 is connected to the data interface 6 of each terminal equipment 101, so that between each terminal equipment 101 Data transmission can be performed directly, and at the same time, the network transport layer 300 is also connected to the cloud 201 , so that data transmission can be performed between each terminal device 101 and the cloud 201 .

As shown in FIG. 3, the transmission method for realizing the end-to-end data security transmission system of the terminal device provided by the embodiment of the present invention includes the following steps:

Step 1, the terminal device is initialized to generate an asymmetric key pair and device fingerprint data through the key initialization module, and synchronize the public key and fingerprint data to the registration center module;

Step 2, the authority control module performs transferable device configuration according to the whitelist and device fingerprint data;

Step 3, the registration center module stores the obtained asymmetric key pair and device fingerprint data, and distributes the public key and device fingerprint data to the registration center module of other terminal devices configured by the authority control module through the cloud;

Step 4, the sending device encrypts the plaintext through the encryption and decryption module to generate a communication protocol, and directly sends the communication protocol to the receiving device;

Step 5, the receiver device receives the transmission protocol, and decrypts and verifies the communication protocol through the encryption and decryption module.

As shown in Figure 4, in the embodiment of the present invention, the communication protocol consists of calculation identification, ciphertext data, time stamp, device SN and digest M;

The encryption and decryption module in step 4 encrypts the plaintext and generates a communication protocol including the following steps:

S1, call the public key of the receiver device to encrypt the plaintext to generate ciphertext;

S2, call the fingerprint data of this device and the fingerprint data of the receiving end device to do XOR operation, use the national secret SM3 algorithm to perform hash operation, and intercept 128bit data from the operation result as the encryption factor P;

S3, encrypting the ciphertext and the encryption factor through the national secret SM4 algorithm to generate ciphertext data;

S4, obtain the summary data M from the plaintext data through the SM3 algorithm;

S5, sort out the calculation identifier, ciphertext data, time stamp, device SN and digest M to generate a communication protocol.

As shown in Figure 5, the encryption and decryption module in step 5 decrypts and verifies the communication protocol including the following steps:

S6, intercepting the ciphertext data according to the communication protocol, and obtaining the ciphertext through the SM2 algorithm according to the private key of the device.

S7. Obtain the device fingerprint data of the sending device through the registration center and perform XOR processing with the device fingerprint data of the device, and perform SM3 operation on the processing result to intercept 128 bits as the encryption factor P.

S8, performing SM4 decryption operation on the ciphertext and encryption factor P to obtain plaintext data;

S9, hash the plaintext data through the SM3 algorithm to obtain the summary data M1, intercept the summary data M according to the communication protocol, compare whether the summary data M1 and the summary data M are the same, if they are the same, it means that the data is complete, and if they are different, it proves that the received data Incomplete or falsified data.

The technical effect of the present invention will be further described below in conjunction with specific embodiment:

To illustrate this solution, we take two terminal devices as an example to describe the end-to-end data security transmission system and transmission method for terminal devices provided by the present invention:

As shown in Figure 6, the key initialization module 1, registration center module 2, encryption and decryption module 3, device status monitoring and authority control module 4 are all set in the terminal equipment. First, the terminal equipment initialization stage: the authority control module 4 Perform correlation filtering with the device SN code to realize the configuration of the transmittable terminal device 101, generate an asymmetric key pair and device fingerprint data through the key initialization module 1 when the device is initialized, and generate the key pair and device fingerprint data after generating the key pair Synchronized to the registration center module 2 of the device, the device registration center module 2 stores the key pair and the device fingerprint data and uploads them to the cloud 201 through the network output layer, and the cloud 201 transfers the public key of the device and the device fingerprint data Distributed to the registration center module 2 of other configured transmission terminal devices 101 and stored, the device monitoring module monitors the device status information in real time, and reports the device abnormal information to the cloud 201 when the device is running abnormally or the device is invaded;

As shown in Figure 7, the next step is to encrypt and send data: the encryption and decryption module 3 of the sending device reads the fingerprint data of the local device, and obtains the fingerprint data and public key of the receiving device through the registration center module 2, and sends the local The fingerprint data of the device and the fingerprint data of the receiving end device are XORed to generate a processing factor, and the processing factor is hashed through the Inter Milan SM3 algorithm to obtain 256bit data, and 128bit of the data is intercepted as the encryption factor P; through its own device registration center module 2 Obtain the public key of the receiver device, use the national secret SM2 algorithm to encrypt the plaintext data through the public key to obtain the ciphertext, use the encryption factor P as the key, and use the national secret SM4 algorithm to symmetrically encrypt the ciphertext to obtain the ciphertext data , the plaintext data is calculated by SM3 to obtain a 256-bit summary M; the calculation identification direction, ciphertext data, time stamp, device and summary information M are organized into a communication protocol, and then directly sent to the receiving end device;

The specific structure of the communication protocol is defined as follows:

As shown in Figure 8, data reception and decryption are performed next: the receiver device receives the communication protocol, and the encryption and decryption module 3 intercepts the summary data M and ciphertext data according to the agreed communication protocol format, and obtains and sends them through the device registration center module 2. The fingerprint data of the terminal device, the fingerprint data of the sending terminal device and the fingerprint data of the device are XORed to obtain the processing factor, and the processing factor is hashed through the SM3 algorithm to obtain the 256bit operation value and 128bit is intercepted as the encryption factor P; Factor P is used as a key to decrypt the ciphertext data through the national secret SM4 algorithm to obtain asymmetrically encrypted ciphertext; call the national secret SM2 algorithm to decrypt the ciphertext through the private key of the device to obtain plaintext data.

As shown in Figure 9, the last is the data integrity check: hash the decrypted plaintext data through the SM3 algorithm to obtain the summary data M1, intercept the summary data M in the communication protocol for comparison, and intercept the message according to the format of the data message The summary data M is compared with the summary data M1. If they are the same, it proves that the data is complete. If the data is different, the data is incomplete or the data has been tampered with.

Main beneficial effects of the present invention are:

The present invention realizes functions such as key initialization, public key terminal synchronization, data terminal verification, and access authority control, and integrates national secret algorithms, device fingerprints, and data tamper-proof verification to realize end-to-end direct connection transmission data security, and Key initialization, encryption, decryption and verification, certificate management, terminal device monitoring, and authority control all realize local terminal equipment. Through the decentralized design, it not only reduces the bus bandwidth of the system, reduces the equipment of the central server, but also reduces costs. The effect of increasing efficiency and reducing the online transmission of security keys ensures data security; at the same time, it realizes flat transmission of message data, which can improve the security and efficiency of end-to-end direct communication; endows end-to-end Notification and monitoring of terminal equipment self-test capability and equipment status;

Compared with the centralized solution, this solution transfers the encryption and decryption processing logic to the terminal, which can reduce the server investment by more than 50%; the end-to-end information transmission and analysis adopts the device-side service, and the re-analysis efficiency increases by more than 30%.

In the description of the present invention, unless otherwise stated, the meaning of "plurality" is two or more; the terms "upper", "lower", "left", "right", "inner", "outer" , "front end", "rear end", "head", "tail", etc. indicate the orientation or positional relationship based on the orientation or positional relationship shown in the drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than Nothing indicating or implying that a referenced device or element must have a particular orientation, be constructed, and operate in a particular orientation should therefore not be construed as limiting the invention. In addition, the terms "first", "second", "third", etc. are used for descriptive purposes only and should not be construed as indicating or implying relative importance.

In the above embodiments, all or part of them may be implemented by software, hardware, firmware or any combination thereof. When implemented wholly or partly in the form of a computer program product, the computer program product includes one or more computer instructions. When the computer program instructions are loaded or executed on the computer, the processes or functions according to the embodiments of the present invention will be generated in whole or in part. Computer instructions may be stored in or transmitted from one computer-readable storage medium to another computer-readable storage medium, e.g. Coaxial cable, optical fiber, digital subscriber line (DSL) or wireless (such as infrared, wireless, microwave, etc.) to another website site, computer, server or data center). The computer-readable storage medium may be any available medium that can be accessed by a computer, or a data storage device such as a server, a data center, etc. integrated with one or more available media. Available media may be magnetic media (such as floppy disks, hard disks, magnetic tapes), optical media (such as DVDs), or semiconductor media (such as Solid State Disks (SSDs)).

The above is only a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Anyone familiar with the technical field within the technical scope disclosed in the present invention, whoever is within the spirit and principles of the present invention Any modifications, equivalent replacements and improvements made within shall fall within the protection scope of the present invention.

Claims (10)

1. A system for implementing end-to-end data security transmission for a terminal device, comprising:

a terminal service layer comprising a plurality of terminal devices, the terminal devices comprising:

the key initialization module is used for generating an asymmetric public and private key pair and equipment fingerprint data;

the register center module is used for storing the public and private key pair and the device fingerprint data and synchronizing the public key and the device fingerprint data to the designated register center module of each terminal device through the cloud;

the encryption and decryption module is used for encrypting and decrypting the transmission data by preset instruction operation;

the permission control module: the device is used for configuring the transmissible device through data such as a white list, device fingerprints and the like;

the cloud service layer comprises a cloud end and is used for acquiring the public key and the device fingerprint data stored by the registry module and synchronizing the acquired public key and device fingerprint data to other terminal device registry modules;

and the network transmission layer is used for realizing data transmission among the terminal devices and between the terminal devices and the cloud.

2. The system for implementing end-to-end data security transmission of terminal equipment according to claim 1, wherein said terminal equipment further comprises an equipment status monitoring module for monitoring and reporting a usage status of the terminal equipment;

3. the system for implementing end-to-end data security transmission of a terminal device of claim 1, wherein said terminal device further comprises a data interface for interfacing with a network transport layer.

4. The system for implementing end-to-end data security transmission of terminal equipment according to claim 1, wherein the cloud is public cloud or private cloud, and the network transmission layer is a wireless network or ethernet.

5. A transmission method for implementing a terminal equipment end-to-end data security transmission system using the implementing terminal equipment end-to-end data security transmission system according to claim 1, wherein the transmission method for implementing the terminal equipment end-to-end data security transmission system comprises the steps of:

step one, initializing terminal equipment, namely generating an asymmetric key pair and equipment fingerprint data through a key initializing module, and synchronizing a public key and the fingerprint data to a registry module;

step two, configuring transmissible equipment by the permission control module according to the white list and the equipment fingerprint data;

step three, the registry module stores the obtained asymmetric key pair and the device fingerprint data, and distributes the public key and the device fingerprint data to the registry module of other terminal devices configured by the permission control module through the cloud;

step four, the transmitting terminal equipment encrypts the plaintext through an encryption and decryption module, generates a communication protocol and transmits the communication protocol to the receiving terminal equipment;

and fifthly, the receiving end equipment receives the transmission protocol, and decrypts and verifies the communication protocol through the encryption and decryption module.

6. The transmission method for implementing an end-to-end data security transmission system of a terminal device according to claim 5, wherein the communication protocol includes a computation identifier, ciphertext data, a time stamp, a device SN, and a digest M.

7. The transmission method for implementing the end-to-end data security transmission system of the terminal device according to claim 5, wherein the encrypting and decrypting module in the fourth step encrypts the plaintext and generates the communication protocol comprises:

s1, calling a public key of receiving end equipment to encrypt a plaintext to generate a ciphertext;

s2, invoking the fingerprint data of the equipment and the fingerprint data of the receiving end to carry out exclusive OR operation, carrying out hash operation by using a SM3 cryptographic algorithm, and intercepting 128-bit data from an operation result as an encryption factor P;

s3, encrypting the ciphertext and the encryption factor through a national encryption SM4 algorithm to generate ciphertext data;

s4, acquiring summary data M from the plaintext data through an SM3 algorithm;

s5, the calculation identification, the ciphertext data, the time stamp, the equipment SN and the abstract M are arranged to generate a communication protocol.

8. The transmission method for implementing the end-to-end data security transmission system of the terminal device according to claim 5, wherein the decrypting module in the fifth step decrypts and verifies the communication protocol comprises:

s6, intercepting ciphertext data according to a communication protocol, and acquiring ciphertext through an SM2 algorithm according to the private key of the equipment.

S7, acquiring the device fingerprint data of the transmitting end device through the registry, performing exclusive OR processing on the device fingerprint data of the transmitting end device and the device fingerprint data of the transmitting end device, and intercepting 128 bits of a result obtained after SM3 operation of a processing result as an encryption factor P.

S8, performing SM4 decryption operation on the ciphertext and the encryption factor P to obtain plaintext data;

s9, carrying out hash operation on the plaintext data through an SM3 algorithm to obtain summary data M1, intercepting the summary data M according to a communication protocol, comparing whether the summary data M1 and the summary data M are identical, if so, indicating that the data are complete, and if not, proving that the received data are incomplete or the data are tampered.

9. A computer readable storage medium storing a computer program, wherein the computer program, when executed by a processor, causes the processor to perform the steps of:

the terminal equipment is initialized, an asymmetric key pair and equipment fingerprint data are generated through a key initialization module, and a public key and the fingerprint data are synchronized to a registry module; the permission control module performs transmissible equipment configuration through the white list and the equipment fingerprint data; the registration center module stores the obtained asymmetric key pair and the device fingerprint data, and distributes the public key and the device fingerprint data to the registration center module of other terminal devices configured by the permission control module through the cloud; the transmitting terminal equipment encrypts the plaintext through an encryption and decryption module, generates a communication protocol and transmits the communication protocol to the receiving terminal equipment through a cloud; the receiving terminal equipment receives the transmission protocol, and decrypts and verifies the communication protocol through the encryption and decryption module.

10. An information data processing terminal, characterized in that the information data processing terminal is used for realizing the terminal equipment end-to-end data security transmission system according to claim 1.

Images