TWI823223B - Method and device for a secure data transmission - Google Patents

Abstract

A method for a secure data transmission is provided. The method includes: generating, by a random number generating circuit, a random number; dividing the random number by the size of an encryption and decryption method table to obtain a remainder, and writing the remainder into a packet; obtaining an encryption and decryption method corresponding to the remainder in the encryption and decryption method table according to the remainder; encrypting data located in a data field in the packet by using the encryption and decryption method; and transmitting the packet.

Description

Methods and devices for secure data transmission

The present disclosure relates to a method and device for secure data transmission, and in particular, to a method and device for secure data transmission using multiple encryption and decryption methods.

Two communication devices communicate and transmit data through a protocol, and the data transmitted may include important confidential information.

There are many methods commonly used to encrypt data for transmission. However, when two communication devices use a protocol to transmit data, the transmitted data usually only uses the same encryption and decryption method from beginning to end. A single encryption and decryption method can easily be locked and broken by thieves.

Therefore, a secure data transmission method and device are needed to provide multiple ways of encrypting and decrypting data to make data transmission more secure.

The following disclosure is illustrative only and is not intended to be limiting in any way. In addition to the illustrated aspects, embodiments, and features, other aspects, embodiments, and features will become apparent by reference to the accompanying drawings and the following detailed description. That is, the following disclosure is provided to introduce the concepts, highlights, benefits, and advantages of the novel and non-obvious technologies described herein. Selected, but not all, embodiments are described in further detail below. Accordingly, the following disclosure is not intended to be essential features of the claimed subject matter, nor is it intended to be used in determining the scope of the claimed subject matter.

Therefore, the main purpose of the present disclosure is to provide a method and device for secure data transmission, so as to provide multiple ways of encrypting and decrypting data, making data transmission more secure.

The disclosure proposes a secure data transmission method for a transmission device, which includes: generating a random number through a random number generation circuit; dividing the random number by the size of an encryption and decryption method table to obtain a remainder, and The above-mentioned remainder is written into a packet; the above-mentioned encryption and decryption method table is used to obtain one of the encryption and decryption methods corresponding to the above-mentioned remainder according to the above-mentioned remainder; the above-mentioned encryption and decryption method is used to encrypt one of the data located in a data field in the above-mentioned packet; and the above-mentioned packet is transmitted.

In some embodiments, obtaining the encryption and decryption method corresponding to the remainder in the encryption and decryption method table based on the remainder further includes: treating the remainder as an encryption and decryption method index number to query the encryption and decryption method table corresponding to the encryption and decryption method. The decryption method index number is the above encryption and decryption method.

In some embodiments, the remainder is written into an encryption and decryption method index field in the packet.

In some embodiments, the size of the above-mentioned encryption and decryption method table corresponds to one of the above-mentioned encryption and decryption method index numbers.

The disclosure proposes a secure data transmission method for a receiving device, including: receiving a packet; obtaining a value in an encryption and decryption method index number field in the packet; and treating the above value as an encryption and decryption method index number. , to query an encryption and decryption method corresponding to the index number of the above-mentioned encryption and decryption method in an encryption and decryption method table; and use the above-mentioned encryption and decryption method to decrypt one of the data fields in the above-mentioned packet to obtain one of the data located in the above-mentioned data fields.

The disclosure proposes a secure data transmission method for a device, including: generating a random number through a random number generation circuit; dividing the random number by the size of an encryption and decryption method table to obtain a remainder, and dividing the above random number The remainder is written into a first packet; one of the first encryption and decryption methods corresponding to the above remainder in the above-mentioned encryption and decryption method table is obtained based on the above-mentioned remainder; and the above-mentioned first encryption and decryption method is used to encrypt a first data field located in the above-mentioned first packet. a first data; and transmit the above-mentioned first packet.

In some embodiments, obtaining the first encryption and decryption method corresponding to the remainder in the encryption and decryption method table based on the remainder further includes: treating the remainder as an encryption and decryption method index number to query the corresponding encryption and decryption method table. The index number of the above-mentioned encryption and decryption method is the above-mentioned first encryption and decryption method.

In some embodiments, the above method further includes: receiving a second packet; obtaining a value in an encryption and decryption method index number field in the second packet; treating the above value as an encryption and decryption method index number for query One of the second encryption and decryption methods corresponding to the index number of the above-mentioned encryption and decryption methods in the above-mentioned encryption and decryption method table; and using the above-mentioned second encryption and decryption method to decrypt one of the second data fields in the above-mentioned second packet to obtain the above-mentioned second data One of the secondary data in the field.

The present disclosure proposes a device for secure data transmission, including: one or more processors; and one or more computer storage media that stores computer-readable instructions, wherein the above-mentioned processor uses the above-mentioned computer storage media to execute: through a The random number generation circuit generates a random number; divides the above random number by the size of an encryption and decryption method table to obtain a remainder, and writes the above remainder into a packet; and obtains the corresponding above remainder in the above encryption and decryption method table based on the above remainder An encryption and decryption method; using the above encryption and decryption method to encrypt data located in a data field in the above packet; and transmitting the above packet.

The disclosure proposes a device for secure data transmission, including: one or more processors; and one or more computer storage media that stores computer-readable instructions, wherein the processor uses the computer storage media to execute: receive a packet ; Obtain a value in the encryption and decryption method index number field in the above packet; treat the above value as an encryption and decryption method index number to query an encryption and decryption method corresponding to the above encryption and decryption method index number in an encryption and decryption method table ; and use the above-mentioned encryption and decryption method to decrypt one of the data fields in the above-mentioned packet to obtain one of the data located in the above-mentioned data fields.

The present disclosure proposes a device for secure data transmission, including: one or more processors; and one or more computer storage media that stores computer-readable instructions, wherein the above-mentioned processor uses the above-mentioned computer storage media to execute: through a The random number generation circuit generates a random number; divides the above random number by the size of an encryption and decryption method table to obtain a remainder, and writes the above remainder into a first packet; and obtains the corresponding value in the above encryption and decryption method table based on the above remainder. One of the first encryption and decryption methods of the above-mentioned remainder; using the above-mentioned first encryption and decryption method to encrypt the first data located in a first data field in the above-mentioned first packet; and transmit the above-mentioned first packet.

Aspects of the present disclosure will be described more fully below with reference to the accompanying drawings. This disclosure may, however, be embodied in many different forms and should not be construed as limited to any specific structure or functionality presented throughout this disclosure. Rather, these aspects are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the disclosure to those skilled in the art. Based on the teachings herein, those skilled in the art will appreciate that the scope of the disclosure is intended to encompass any aspect disclosed herein, whether implemented alone or in combination with any other aspect of the disclosure. For example, it can be implemented using any number of devices or execution methods proposed herein. In addition, in addition to the various aspects of the present disclosure set forth herein, the scope of the present disclosure is intended to include devices or methods implemented using other structures, functions, or structures and functions. It is understood that any aspect disclosed herein may be embodied by one or more elements of the claimed scope.

The word "exemplary" is used herein to mean "serving as an example, instance, or illustration." Any aspect of the disclosure or design described herein as "exemplary" is not necessarily to be construed as preferred or superior to other aspects of the disclosure or design. Furthermore, like numbers refer to like elements throughout the several figures, and the articles "a", "an" and "the above" include plural references unless otherwise specified in the description.

It will be understood that when an element is referred to as being "connected" or "coupled" to another element, it can be directly connected or coupled to the other element or intervening elements may be present. In contrast, when an element is referred to as being "directly connected" or "directly coupled" to another element, there are no intervening elements present. Other words used to describe the relationship between elements should be interpreted in a similar fashion (e.g., "between" versus "directly between," "adjacent" versus "directly adjacent," etc.).

Embodiments of the present disclosure provide a method and device for secure data transmission, and provide multiple methods of encrypting and decrypting data to further improve the security of data transmission.

Figure 1 is a schematic diagram showing a system 100 for secure data transmission according to an embodiment of the present disclosure. As shown in FIG. 1 , the system 100 includes at least a transmitting device 110 and a receiving device 120 .

The transmitting device 110 and the receiving device 120 are devices that can support various wireless access technologies, such as a mobile phone, notebook computer, smart phone, or tablet computer. The wireless communication between the transmitting device 110, the receiving device 120 and the network 130 can be carried out according to various wireless technologies, such as: Global System for Mobile communications (GSM) technology, General Packet Wireless Service (General Packet Wireless Service) Radio Service (GPRS) technology, Enhanced Data rates for Global Evolution (EDGE) technology, Wideband Code Division Multiple Access (WCDMA) technology, Code Division Multiple Access-2000 (Code Division Multiple Access 2000) technology, Time Division-Synchronous Code Division Multiple Access (TD-SCDMA) technology, Worldwide Interoperability for Microwave Access (WiMAX) technology, Long Term Evolution (LTE) technology, improved Long Term Evolution Advanced (LTE-A) technology, Global Navigation Satellite System (GNSS) technology, etc.

The transmitting device 110 can be connected to the network 130 in a wireless manner and transmit packets including data to the receiving device 120 .

Next, refer to Figure 2 , which is another simplified functional block diagram of a device 200 corresponding to the transmitting device 110 or the receiving device 120 according to an embodiment of the present disclosure. In Figure 2, the device 200 may include a processor 210, a random number generation circuit 220, a plurality of encryption and decryption peripheral circuits 0˜n 230, a secure storage circuit 240, a storage circuit 250 and a communication module 260.

The secure storage circuit 240 may be a secure static random access memory (Static Random Access Memory, SRAM) or a secure flash memory (FLASH Memory), and is used to place the encryption and decryption method table 2401. This encryption and decryption method table 2401 can be created in advance by the user, describing the various encryption and decryption methods to be used and their index numbers, and stored in the security storage circuit 240 of the transmitting device 110 and the receiving device 120 in advance.

The encryption and decryption method table 2401 includes at least the encryption and decryption method index number, encryption and decryption periphery, and encryption and decryption mode. In another embodiment, in addition to the encryption/decryption method index number, encryption/decryption periphery, and encryption/decryption mode, the encryption/decryption method table 2401 may further include an encryption/decryption key and an initial vector. It should be noted that the information included in the encryption and decryption method table does not limit this disclosure, and those with ordinary skill in the art can make appropriate replacements or adjustments based on this embodiment.

The storage circuit 250 is used to place the packet 2501 to be transmitted or received, wherein the packet 2501 at least includes a command identification field (CMD ID), an encryption and decryption method index number, a data (Data) field and a cyclic redundancy Check field (Cyclic redundancy check, CRC).

When the transmitting device 110 and the receiving device 120 start to communicate, the transmitting device 110 first uses the random number generating circuit 220 to generate a random number, and then divides the random number by the size of the encryption and decryption method table and takes the remainder, where encryption and decryption The size of the method table is the number corresponding to one of the encryption and decryption method index numbers. The transmitting device 110 writes the random remainder into the field of the encryption/decryption method index number of the packet to be transmitted. In other words, this remainder is regarded as an encryption and decryption method index number. Then, the transmitting device 110 queries the encryption and decryption method table 2401 to find out the encryption and decryption method represented by the encryption and decryption method index number. After encrypting the data to be sent by the encryption and decryption peripheral circuit, it can be sent to the receiving device 120 .

After receiving the packet sent by the transmitting device 110, the receiving device 120 obtains the value in the field of the encryption and decryption method index number, regards the above value as an encryption and decryption method index number, and queries the encryption and decryption method table to find the corresponding The encryption and decryption method of the index number is used to decrypt and restore the encrypted data in the packet to obtain the original data.

Figures 3 and 4 are flowcharts 300 showing a secure data transmission method according to an embodiment of the present disclosure. The method flow in Figure 3 can be executed in the transmitting device 110 shown in Figure 1 and the device 200 in Figure 2, and the method flow in Figure 4 can be executed in the receiving device 120 shown in Figure 1 and the device 200 in Figure 2. 2 in the device 200.

Before starting the process, the user must plan and create an encryption and decryption method table in advance and store it in the secure storage circuit of the transmitting device and the receiving device, such as the secure storage circuit 240 in Figure 2, etc., and when various encryption and decryption methods will be used The corresponding private key and public key required are written into the secure storage circuit. If a symmetric encryption and decryption method is used, the key can also be randomly generated during the communication transmission process. The transmitting device and the receiving device can then perform the steps of transmitting and receiving packet data.

The step-by-step process of transmitting packets is shown in Figure 3. In step S305, the transmitting device generates a random number through a random number generating circuit. Next, in step S310, the transmitting device uses a processor to divide the random number by the size of an encryption and decryption method table to obtain a remainder, and writes the remainder into a packet, where the remainder is written into The encryption and decryption method index number field in the above packet.

Next, in step S315, the transmitting device uses the processor to obtain one of the encryption and decryption methods corresponding to the remainder in the encryption and decryption method table according to the remainder. To explain in more detail, the transmitting device regards the remainder as an encryption and decryption method index number to query the encryption and decryption method corresponding to the encryption and decryption method index number in the encryption and decryption method table.

In step S320, the transmitting device uses the encryption and decryption method to encrypt data located in a data field in the packet by using the encryption and decryption peripheral circuit corresponding to the encryption and decryption method. In step S325, the transmitting device transmits the packet to the receiving device through the communication module.

In this embodiment, the size of the encryption and decryption method table corresponds to a number of encryption and decryption method index numbers.

The step flow of receiving packets is shown in Figure 4. In step S405, the receiving device receives a packet from the transmitting device through a communication module.

Next, in step S410, the receiving device uses a processor to obtain a value in an encryption and decryption method index field in the packet.

Next, in step S415, the receiving device uses the processor to regard the above value as an encryption and decryption method index number to query an encryption and decryption method table for an encryption and decryption method corresponding to the above encryption and decryption method index number.

To explain in more detail, the receiving device first writes the packet into the storage circuit, and obtains the value of the encryption and decryption method index number field in the packet. This value is used as the index number to query the corresponding encryption method in the encryption and decryption method table. Decryption method.

Finally, in step S420, the receiving device uses the encryption and decryption method to decrypt one of the data fields in the packet by using the encryption and decryption peripheral circuit corresponding to the encryption and decryption method to obtain one of the data in the data field.

Figure 5A shows an encryption and decryption method table 510 according to an embodiment of the present disclosure. This encryption and decryption method table 510 is a user-predefined encryption and decryption method table used by the transmission device. Figure 5B shows an encryption and decryption method table 520 according to an embodiment of the present disclosure. This encryption and decryption method table 520 is a user-predefined encryption and decryption method table used by the receiving device. It can be understood that the transmitting device can also be used as a receiving device, and the receiving device can also be used as a transmitting device.

As shown in Figures 5A and 5B, the sizes of the encryption and decryption methods and the encryption and decryption method tables corresponding to the encryption and decryption method index numbers defined by the transmitting device and the receiving device must be the same. The encryption and decryption method corresponding to the encryption and decryption method index number 0 is AES ECB mode, and the transmitting device and the receiving device use the same private key "Key _AES 0" for encryption and decryption. The encryption and decryption method corresponding to the encryption and decryption method index number 1 is RSA. In the asymmetric encryption and decryption method, since the encryption and decryption keys used by the transmitting device and the receiving device are different, a pair of private key and public key are used for encryption and decryption. The private key is used for encryption and the public key is used for decryption. key, so when the transmitting device uses RSA with encryption and decryption method index number 1 to encrypt, it uses the private key "Key _Pri 0A", and when the receiving device receives the packet, it uses the public key "Key _Pub 0A" to decrypt. On the contrary, when the receiving device serves as the transmitting device and the transmitting device serves as the receiving device, the receiving device can use the private key "Key _Pri 1B" in RSA with encryption and decryption method index number 1 for encryption. When the transmitting device receives the packet, it uses the public key "Key _Pub 1B" to decrypt it. The encryption and decryption method corresponding to the encryption and decryption method index number 2 is AES CFB mode. The transmitting device and the receiving device use the same private key "Key _AES 1" and an initial vector (Initial Vector, IV) 0 to encrypt and decrypt data.

In another embodiment, the private keys and public keys used by the encryption and decryption methods in the encryption and decryption method table can also be placed separately from the encryption and decryption method table. For example, private and public keys are placed in other secure storage circuits, such as dedicated key stores.

In another embodiment, if the device has only one encryption and decryption peripheral circuit, the encryption and decryption method table may include the same encryption and decryption methods but using different encryption and decryption modes, or the same encryption and decryption methods but using different private keys. and public key.

FIG. 6 is a schematic diagram showing an implementation example of a secure data transmission method according to an embodiment of the present disclosure. Device A and device B in the figure may be the transmitting device 110 or the receiving device 120 shown in Figure 1, or the device 200 shown in Figure 2. In addition, the packet format transmitted by device A and device B is as defined by packet 2501 in Figure 2, and device A uses the encryption and decryption method table 510 in Figure 5A, while device B uses the encryption method table 510 in Figure 5B. Decryption method form 520.

Packet 1 in Figure 6(a) is device A sending a request packet with CMD ID=1 to device B. First, the random number generation circuit of device A generates a random number 7, divides it by the size 3 of the encryption and decryption method table 510 (ie, the number of encryption and decryption method index numbers), and obtains the remainder 1 (ie, the encryption and decryption method index number is 1 ), and write the remainder into the encryption and decryption method index number field in packet 1. Device A finds out based on the encryption and decryption method index number 1 that the encryption and decryption method corresponding to the encryption and decryption method index number 1 in the encryption and decryption method table 510 is the RSA encryption and decryption method. Device A then uses the private key "Key _Pri 0A" to encrypt "Data 0" located in the data field in packet 1 to become the encrypted data "Cipher 0", and sends packet 1 to device B. After receiving packet 1, device B first obtains the value 1 in the encryption and decryption method index number field in packet 1, and regards the value 1 as the encryption and decryption method index number 1. Device B then finds out that the encryption and decryption method corresponding to the encryption and decryption method index number 1 in the encryption and decryption method table 520 is the RSA encryption and decryption method, and uses the public key "Key _Pub 0A" to decrypt the encrypted data "Cipher 0" to obtain Original data "Data 0".

In packet 2 in Figure 6(b), device B sends a response packet with CMD ID=1 to device A. First, the random number generation circuit of device B generates a random number 12, divides it by the size 3 of the encryption and decryption method table 520 (that is, the number of encryption and decryption method index numbers), and obtains the remainder 0 (that is, the encryption and decryption method index number is 0 ), and write the remainder into the encryption and decryption method index number field in packet 2. Device B finds out based on the encryption and decryption method index number 0 that the encryption and decryption method corresponding to the encryption and decryption method index number 0 in the encryption and decryption method table 500 is the AES ECB encryption and decryption method. Device B then uses the private key "Key _AES 0" to encrypt "Data 1" located in the data field in packet 2 to become the encrypted data "Cipher 1", and sends packet 2 to device A. After receiving packet 2, device A first obtains the value 0 in the encryption and decryption method index number field in packet 2, and regards the value 0 as the encryption and decryption method index number 0. Device A then finds out that the encryption and decryption method corresponding to encryption and decryption method index number 0 in the encryption and decryption method table 510 is the AES ECB encryption and decryption method, and uses the same private key "Key _AES 0" to encrypt the data "Cipher 1". Decrypt and obtain the original data "Data 1".

Packet 3 in Figure 6(c) is device A sending a request packet with CMD ID=2 to device B. First, the random number generation circuit of device A generates a random number 32, divides it by the size 3 of the encryption and decryption method table 510 (that is, the number of encryption and decryption method index numbers), and obtains the remainder 2 (that is, the encryption and decryption method index number is 2 ), and write the remainder into the encryption and decryption method index number field in packet 3. Device A finds out based on the encryption and decryption method index number 2 that the encryption and decryption method corresponding to the encryption and decryption method index number 2 in the encryption and decryption method table 510 is the AES CFB encryption and decryption method. Device A then uses the private key "Key _AES 1" and "IV0" to encrypt "Data 2" located in the data field in sealed packet 3 to become the encrypted data "Cipher 2", and sends packet 3 to device B. After receiving packet 3, device B first obtains the value 2 in the encryption and decryption method index number field in packet 3, and regards the value 2 as the encryption and decryption method index number 2. Device B then finds out that the encryption and decryption method corresponding to encryption and decryption method index number 2 in the encryption and decryption method table 520 is the AES CFB encryption and decryption method, and uses the same private keys "Key _AES 1" and "IV0" to encrypt the data. Cipher 2" is decrypted to obtain the original data "Data 2".

Packet 4 in Figure 6(d) is device B sending a response packet with CMD ID=2 to device A. First, the random number generation circuit of device B generates a random number 67, divides it by the size 3 of the encryption and decryption method table 520 (that is, the number of encryption and decryption method index numbers), and obtains the remainder 1 (that is, the encryption and decryption method index number is 1 ), and write the remainder into the encryption and decryption method index number field in packet 4. Device B finds out based on the encryption and decryption method index number 1 that the encryption and decryption method corresponding to the encryption and decryption method index number 1 in the encryption and decryption method table 520 is the RSA encryption and decryption method. Device B then uses the private key "Key _Pri 1B" to encrypt "Data 3" located in the data field in packet 4 to become encrypted data "Cipher 3", and sends packet 4 to device A. After receiving packet 4, device A first obtains the value 1 in the encryption and decryption method index number field in packet 4, and regards the value 1 as the encryption and decryption method index number 1. Device A then finds out that the encryption and decryption method corresponding to the encryption and decryption method index number 1 in the encryption and decryption method table 510 is the RSA encryption and decryption method, and uses the public key "Key _Pub 1B" to decrypt the encrypted data "Cipher 3" to obtain Original data "Data 3".

It should be understood that the length definition of the "Data" field in the packet of this disclosure must take into account the data length limit that the encryption and decryption method used can support, and must be applicable to all the encryption and decryption method tables. Encryption and decryption methods.

In addition, the processor 210 in the device 200 can also execute the program code (not shown) in the storage circuit 250 to perform the actions and steps described in the above embodiments, or other descriptions in the specification.

Therefore, through the disclosed method and device for secure data transmission, during the complete communication process between two devices, a variety of encryption and decryption methods set by the two devices can be randomly used to protect the transmission of data, thereby increasing the difficulty of attacks by thieves. , get better confidentiality and privacy protection.

The above embodiments are described using various perspectives. Obviously the teachings here may be presented in a variety of ways, and any specific architecture or functionality disclosed in the examples is only a representative situation. Based on the teachings of this article, anyone familiar with this art should understand that the content presented in this article can be presented independently in some other form or in a combination of multiple forms. For example, it can be implemented by using a certain device or a certain method in any of the ways mentioned above. An implementation of a device or a manner of performance may be implemented in any other architecture, functionality, or architecture and functionality in one or more of the manner discussed above.

Those familiar with this art will understand that messages and signals can be presented using a variety of different technologies and techniques. For example, all data, instructions, commands, messages, signals, bits, symbols, and chips that may be referenced in the above description may be volts, currents, electromagnetic waves, magnetic fields or magnetic particles, light fields or light particles, or Any combination of the above is presented.

Those familiar with the art will further understand that the various illustrative logic blocks, modules, processors, devices, circuits, and computational steps described herein are related to the electronic hardware (e.g., using source encoding or Digital implementations, analog implementations, or combinations of other technical designs), various forms of programs or design codes linked to instructions (referred to as "software" or "software modules" for convenience in this text), or A combination of the two. To clearly illustrate the interchangeability between hardware and software, various descriptive components, blocks, modules, circuits, and steps are described above generally in terms of their functionality. Whether this functionality is presented in hardware or software form will depend on the specific application and design constraints imposed on the overall system. Persons skilled in the art may implement the described functionality in various ways for each particular application, but such implementation decisions should not be interpreted as departing from the scope of this disclosure.

In addition, various illustrative logic blocks, modules, and circuits and the various situations disclosed herein may be implemented on integrated circuits (ICs), access terminals, access points; or by integrated circuits , access terminal, access point execution. Integrated circuits can be composed of general-purpose processors, digital signal processors (DSPs), application specific integrated circuits (ASICs), field programmable gate arrays (FPGAs) or other Programmable logic devices, discrete gate or transistor logic, discrete hardware components, electronic components, optical components, mechanical components, or any combination thereof designed to accomplish what is described herein Function; and may execute execution code or instructions that exist within the integrated circuit, outside the integrated circuit, or both. A general purpose processor may be a microprocessor, but may also be any conventional processor, controller, microcontroller, or state machine. The processor may be composed of a combination of computer devices, such as a combination of a digital signal processor (DSP) and a microcomputer, multiple sets of microcomputers, one or more sets of microcomputers and a digital signal processor core, or any other similar configuration.

Any specific sequence or layering of steps in the process disclosed herein is provided by way of example only. Based on design preferences, it is understood that any specific order or hierarchy of steps in the process may be rearranged within the scope disclosed in this document. The accompanying method claims present elements of the various steps in an exemplary order and therefore should not be limited to the specific order or hierarchy presented in the description of the invention.

The methods and algorithm steps disclosed in the specification of the present invention can be directly applied to hardware and software modules or a combination of both by executing a processor. A software module (including execution instructions and related data) and other data can be stored in data memory, such as random access memory (Random Access Memory, RAM), flash memory (Flash Memory), read-only memory (Read-Only Memory, ROM), Erasable Programmable Read-Only Memory (EPROM), Electronically Erasable Programmable Read-Only Memory (EEPROM), Temporary Register , hard drive, portable hard drive, Compact Disc Read-Only Memory (CD-ROM), Digital Video Disc (DVD) or any other computer in the technology practiced in this field. The storage media format to be read. A storage medium can be coupled to a machine device, such as a computer/processor (for convenience of explanation, referred to as a processor in this specification), through which the processor can read information (such as a program code), and write information to the storage medium. A storage medium can integrate a processor. An application specific integrated circuit (ASIC) includes a processor and storage media. A user equipment includes an application special integrated circuit. In other words, the processor and the storage medium are included in the user equipment in a manner that is not directly connected to the user equipment. Additionally, in some embodiments, any product suitable for a computer program includes a readable storage medium, where the readable storage medium includes one or more program codes related to the disclosed embodiments. In some embodiments, the computer program product may include packaging materials.

Any specific sequence or layering of steps in the process disclosed herein is provided by way of example only. Based on design preferences, it is understood that any specific order or hierarchy of steps in the process may be rearranged within the scope disclosed in this document. The accompanying method claims present elements of the various steps in a sample order and therefore should not be limited to the specific order or hierarchy presented.

Although the present invention has been disclosed above in terms of preferred embodiments, they are not intended to limit the present invention. Anyone skilled in the art may make some modifications and modifications without departing from the spirit and scope of the present invention. Therefore, the present invention The scope of protection shall be subject to the scope of the patent application attached.

100:System 110:Transmission device 120: Receiving device 130: Electronic devices 200:Device 210: Processor 220: Random number generation circuit 230: Encryption and decryption peripheral circuit 0~n 240:Safe storage circuit 2401: Encryption and decryption method table 250:Storage circuit 2501: Packet 300:Method flow chart S305, S310, S315, S320, S325: steps 400:Method flow chart S405, S410, S415, S420: steps 510: Encryption and decryption method table 520: Encryption and decryption method table

Figure 1 is a schematic diagram showing a system for secure data transmission according to an embodiment of the present disclosure. Figure 2 is another way of showing a simplified functional block diagram of a device corresponding to a transmitting device or a receiving device according to an embodiment of the present disclosure. Figure 3 is a flow chart showing a secure data transmission method according to an embodiment of the present disclosure. FIG. 4 is a flow chart showing a secure data transmission method according to an embodiment of the present disclosure. Figure 5A shows a table of encryption and decryption methods according to an embodiment of the present disclosure. Figure 5B shows a table of encryption and decryption methods according to an embodiment of the present disclosure. FIG. 6 is a schematic diagram showing an implementation example of a secure data transmission method according to an embodiment of the present disclosure.

300:Method flow chart

S305, S310, S315, S320, S325: steps

Claims (8)

A secure data transmission method for a transmission device, including: generating a random number through a random number generation circuit; dividing the random number by the size of an encryption and decryption method table to obtain a remainder, and writing the remainder Enter a packet, in which the size of the above-mentioned encryption and decryption method table corresponds to the number of encryption and decryption methods; obtain one of the encryption and decryption methods corresponding to the above-mentioned remainder in the above-mentioned encryption and decryption method table based on the above-mentioned remainder; use the above-mentioned encryption and decryption method to encrypt the information in the above-mentioned packet one data field; and transmit the above packet. A secure data transmission method for a receiving device, including: receiving a packet; obtaining a value in an encryption and decryption method index number field in the packet; treating the above value as an encryption and decryption method index number for query An encryption and decryption method corresponding to the index number of the above-mentioned encryption and decryption method in the encryption and decryption method table; and using the above-mentioned encryption and decryption method to decrypt one of the data fields in the above-mentioned packet to obtain one of the data located in the above-mentioned data fields. A method for secure data transmission, including: generating a random number through a random number generating circuit; Divide the above random number by the size of an encryption and decryption method table to obtain a remainder, and write the above remainder into a first packet, where the size of the above encryption and decryption method table corresponds to the number of encryption and decryption methods; obtained according to the above remainder One of the first encryption and decryption methods corresponding to the above remainder in the above-mentioned encryption and decryption method table; using the above-mentioned first encryption and decryption method to encrypt the first data located in a first data field in the above-mentioned first packet; and transmitting the above-mentioned first packet. For example, the secure data transmission method of claim 3, wherein obtaining the first encryption and decryption method corresponding to the above remainder in the above encryption and decryption method table based on the above remainder further includes: treating the above remainder as an encryption and decryption method index number to query the above The above-mentioned first encryption and decryption method corresponding to the above-mentioned encryption and decryption method index number in the encryption and decryption method table. A device for secure data transmission, including: one or more processors; and one or more computer storage media, which store computer-readable instructions, wherein the above-mentioned processor uses the above-mentioned computer storage media to execute: receive a packet; obtain the above-mentioned A value in an encryption and decryption method index number field in the packet; treat the above value as an encryption and decryption method index number to query an encryption and decryption method corresponding to the above encryption and decryption method index number in an encryption and decryption method table; and use The above encryption and decryption method decrypts one of the data fields in the above packet to obtain one of the data located in the above data field. A device for secure data transmission, including: One or more processors; and one or more computer storage media storing computer-readable instructions, wherein the above-mentioned processor uses the above-mentioned computer storage media to execute: generate a random number through a random number generation circuit; convert the above random number Divide the number by the size of an encryption and decryption method table to obtain a remainder, and write the above remainder to a first packet, where the size of the above encryption and decryption method table corresponds to the number of encryption and decryption methods; obtain the above encryption and decryption based on the above remainder One of the first encryption and decryption methods corresponding to the above-mentioned remainder in the method table; using the above-mentioned first encryption and decryption method to encrypt one of the first data located in a first data field in the above-mentioned first packet; and transmitting the above-mentioned first packet. For example, in the secure data transmission device of claim 6, the remainder is written into an encryption and decryption method index number field in the first packet. For example, the secure data transmission device of claim 6, wherein the processor uses the computer storage medium to further execute: receive a second packet; obtain a value in an encryption and decryption method index number field in the second packet; convert the above The numerical value is regarded as an encryption and decryption method index number to query one of the second encryption and decryption methods corresponding to the above-mentioned encryption and decryption method index numbers in the above-mentioned encryption and decryption method table; and use the above-mentioned second encryption and decryption method to decrypt one of the above-mentioned second packets. two data fields to obtain the second data located in one of the above-mentioned second data fields.

Images