Data sending method and apparatus and data receiving method and apparatus for resisting network communication monitoring
View Patent ↗A data sending method and apparatus and a data receiving method and apparatus for resisting network communication monitoring, wherein the data sending method including: acquiring a target packet; adding an encapsulation header into the target packet and encrypting application data in the target packet to obtain a to-be-sent packet; constructing a confusing packet, the header of the confusing packet being different from the header of the to-be-sent packet at a preset position; and sending a mixed packet of the to-be-sent packet and the confusing packet. In the present disclosure, a communication source hides a data packet to confuses probes, adds an encapsulation header on the basis of the data packet, hides the data packet in a large number of similar packets in a network, and makes an encryption in combination with a mature encryption technology, thereby effectively resisting malicious network communication monitoring and preventing eavesdropping of network communications.
1. A data sending method for resisting network communication monitoring, comprising:
acquiring a target packet;
adding an encapsulation header for hiding the type of the target packet into the target packet and encrypting application data in the target packet to obtain a to-be-sent packet; the target packet comprising an Ethernet header, an IP header, a TCP header, an application data and an Ethernet tail; and adding an encapsulation header into the target packet comprising: inserting the encapsulation header between the TCP header and the application data;
constructing a confusing packet, the header of the confusing packet different from the header of the to-be-sent packet at a preset position; and
sending a mixed packet of the to-be-sent packet and the confusing packet, so that the destination receiver of the mixed packet recognizes the to-be-sent packet in the mixed packet based on the difference in the preset position between the header of the confusing packet and the header of the to-be-sent packet.
2. The data sending method for resisting network communication monitoring according to claim 1 , wherein the sending address of the confusing packet is a target address and/or a randomly constructed virtual address.
3. The data sending method for resisting network communication monitoring according to claim 1 , further comprising supervising a header of packets with a largest traffic in a network;
adding an encapsulation header into the target packet comprises:
adding the header of packets with the largest traffic into the encapsulation header; and
adding the encapsulation header into the target packet.
4. The data sending method for resisting network communication monitoring according to claim 1 , wherein the encapsulation header is a hierarchically encapsulated multi-layer header.
5. A data receiving method for resisting network communication monitoring, comprising:
acquiring a to-be-sent target packet from the received mixed packet based on a difference between a header of a confusing packet and a header of the to-be-sent packet at a preset position;
removing an encapsulation header of the to-be-sent packet for hiding the type of the target packet and decrypting encrypted application data of the to-be-sent packet to obtain the target packet; the target packet comprising an Ethernet header, an IP header, a TCP header, the application data and an Ethernet tail; and adding an encapsulation header into the target packet comprising: inserting the encapsulation header between the TCP header and the application data; and
wherein the removing an encapsulation header of the to-be-sent packet comprises hierarchically removing a plurality of layers of the encapsulation header in the case that the encapsulation header is a hierarchically encapsulated multi-layer header.
6. The data receiving method for resisting network communication monitoring according to claim 5 , wherein,
the acquiring a to-be-sent packet containing a target packet from the mixed packet based on a difference between a header of a confusing packet and a header of the to-be-sent packet at the preset position comprises:
inquiring codes at the preset position of a packet in the mixed packet, and determining that the inquired packet in the mixed packet is the to-be-sent packet when the codes are the same as preset codes.
7. A data sending apparatus for resisting network communication monitoring, comprising circuitry of the data sending apparatus:
to acquire a target packet;
to add an encapsulation header for hiding the type of the target packet into the target packet and encrypt application data in the target packet to obtain a to-be-sent packet; the target packet comprising an Ethernet header, an IP header, a TCP header, the application data and an Ethernet tail; and adding an encapsulation header into the target packet comprising: inserting the encapsulation header between the TCP header and the application data;
to construct a confusion packet, the header of the confusing packet different from the header of the to-be-sent packet at a preset position; and
to send a mixed packet of the to-be-sent packet and the confusing packet, so that the destination receiver of the mixed packet recognizes the to-be-sent packet in the mixed packet based on the difference in the preset position between the header of the confusing packet and the header of the to-be-sent packet.
8. The data sending apparatus for resisting network communication monitoring according to claim 7 , further comprising circuitry of the data sending apparatus:
to supervise the header of packets with a largest traffic in a network and send the header to the circuitry.