CN102404120A - Encryption method and encryption system for electronic documents - Google Patents

Encryption method and encryption system for electronic documents Download PDF

Info

Publication number
CN102404120A
CN102404120A CN201110334639XA CN201110334639A CN102404120A CN 102404120 A CN102404120 A CN 102404120A CN 201110334639X A CN201110334639X A CN 201110334639XA CN 201110334639 A CN201110334639 A CN 201110334639A CN 102404120 A CN102404120 A CN 102404120A
Authority
CN
China
Prior art keywords
encryption
document
ciphertext
reader
random
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201110334639XA
Other languages
Chinese (zh)
Inventor
陈晓兵
陈小平
张松岩
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
HARBIN LONGWAY ELECTRONIC TECHNOLOGY DEVELOPMENT CO LTD
Original Assignee
HARBIN LONGWAY ELECTRONIC TECHNOLOGY DEVELOPMENT CO LTD
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by HARBIN LONGWAY ELECTRONIC TECHNOLOGY DEVELOPMENT CO LTD filed Critical HARBIN LONGWAY ELECTRONIC TECHNOLOGY DEVELOPMENT CO LTD
Priority to CN201110334639XA priority Critical patent/CN102404120A/en
Publication of CN102404120A publication Critical patent/CN102404120A/en
Pending legal-status Critical Current

Links

Images

Landscapes

  • Storage Device Security (AREA)

Abstract

The invention provides an encryption system for electronic documents. The encryption system comprises a random secret key generating module, an encryption secret key generating module, a ciphertext generating module, a packeting module and a plain text decryption module, wherein the random secret key generating module generates a 32-bit random secret key by using a random algorithm; the encryption secret key generating module encrypts the random secret key by using an asymmetrical encryption algorithm of a digital certificate public key of a document reader so as to form the encryption secret key; the ciphertext generating module encrypts a confidential document by using a symmetrical encryption algorithm and the encryption secret key so as to generate a ciphertext; the packeting module packets the ciphertext and the encryption secret key into a packet and stores the packet in an encryption document; and after obtaining the ciphertext, a reader of the document uses the plain text decryption module to decrypt the ciphertext by the encryption secret key so as to obtain a plain text.

Description

The encryption method of electronic document and system
Technical field
The present invention relates to the encipher-decipher method of all electronic documents of computer realm, mainly is a kind of encryption method that is used for computer electronic documents.
Background technology
The transmission of data at present comprises dual mode: a kind of plaintext transmission that is based on user password, another kind of is the encryption connection on basis with Https.First kind of mode, the transmission aspect is used expressly and is transmitted, and can hold back reading of content through simple packet, has serious potential safety hazard; And the Https encryption communication that uses at present only solves the requirement of data encryption transmission, owing to only use access password, can't guarantee the corresponding of password and user, and the attack of formula guessed in the opposing password; Also can't realize the identification and the uniqueness guarantee of identity through username-password.
The present widely used safety communication of financial industry such as bank, security is generally encryption equipment; Encryption equipment can effectively be guaranteed data transmission security and user identity validity as encryption communication equipment, and still, this kind equipment purchase cost is high; And encryption equipment can only be supported TCP/IP Socket packet communication modes at present; The secondary development difficulty is big, needs more professional knowledge, only supports a few program development language; Can't adapt to diversified enterprise software system in the e-commerce environment, therefore can't in medium and small client, promote the use of encryption equipment.
Summary of the invention
The problem that the present invention is directed to the prior art existence is made improvement, the purpose of this invention is to provide a kind of encryption method of electronic document, comprising:
Step 1: use random algorithm to produce 32 long random keys;
Step 2: use the asymmetrical encryption algorithm of document reader digital certificate PKI to encrypt described random key, form encryption key;
Step 3: use AES symmetric encipherment algorithm and described encryption key that confidential document is encrypted, produce ciphertext;
Step 4: described ciphertext, described encryption key are formed a packet deposit in the encrypt file;
Step 5: after the document reader obtains described ciphertext,, obtain expressly with said encryption key decrypting ciphertext.
During enforcement, step 3 also comprises Data Format Transform, carries out format conversion when described confidential document is encrypted, and offers the document reader afterwards again and deciphers.
During enforcement, to described confidential document, changing the mechanism data transaction according to one is unified format, and the document reader will be with the reader opening document corresponding to this form after obtaining ciphertext.
The present invention also provides a kind of encryption system of electronic document, comprising:
The random key generation module uses random algorithm to produce 32 long random keys;
The encryption key generation module uses the asymmetrical encryption algorithm of document reader digital certificate PKI to encrypt described random key, forms encryption key;
The ciphertext generation module uses symmetric encipherment algorithm and described encryption keys confidential document, produces ciphertext;
Group bag module is formed a packet with ciphertext, encryption key and is deposited in the encrypt file;
Expressly deciphering module after the document reader obtains described ciphertext, is used the encryption key decrypting ciphertext, obtains expressly.
During enforcement, also comprise format converting module, carry out format conversion when described confidential document is encrypted, offer the document reader afterwards again and decipher.
During enforcement, to described confidential document, changing the mechanism data transaction according to one is unified format, and the document reader will be with the reader opening document corresponding to this form after obtaining ciphertext.
Compared with prior art; The encryption method of electronic document provided by the present invention has realized electronic document is carried out safety and access control, owing to adopted rivest, shamir, adelman that key is encrypted; Adopt symmetry algorithm that electronic document is encrypted; When solving the document encryption/decryption speed, guaranteed the fail safe of document, safer guarantee is provided.
Description of drawings
Fig. 1 is the schematic flow sheet of the encryption method of electronic document of the present invention;
Fig. 2 is the structural representation of the encryption system of electronic document of the present invention.
Embodiment
For shape of the present invention, structure and characteristics can be understood better, below will enumerate preferred embodiment and combine accompanying drawing to be elaborated.
Consult the present invention shown in Figure 1 a kind of encryption method of electronic document is provided, its step comprises:
Step 1: use random algorithm to produce 32 long random keys 11;
Step 2: use the asymmetrical encryption algorithm of document reader digital certificate PKI to encrypt described random key, form encryption key 12;
Step 3: use AES symmetric encipherment algorithm and described encryption key that confidential document is encrypted, produce ciphertext 13;
Step 4: described ciphertext, described encryption key are formed a packet deposit in the encrypt file 14 in;
Step 5: after the document reader obtains described ciphertext,, obtain plaintext 15 with said encryption key decrypting ciphertext.
Step 3 also comprises Data Format Transform, carries out format conversion when described confidential document is encrypted, and offers the document reader afterwards again and deciphers.To described confidential document, changing the mechanism data transaction according to one is unified format, and the document reader will be with the reader opening document corresponding to this form after obtaining ciphertext.
Consult shown in Figure 2ly, the present invention provides a kind of encryption system of electronic document, comprising:
Random key generation module 21 uses random algorithm to produce 32 long random keys;
Encryption key generation module 22 uses the asymmetrical encryption algorithm of document reader digital certificate PKI to encrypt described random key, forms encryption key;
Ciphertext generation module 23 uses symmetric encipherment algorithm and described encryption keys confidential document, produces ciphertext;
Group bag module 24 is formed a packet with ciphertext, encryption key and is deposited in the encrypt file;
Expressly deciphering module 25 after the document reader obtains described ciphertext, is used the encryption key decrypting ciphertext, obtains expressly.
Also comprise format converting module 26 (not drawing among the figure), carry out format conversion when described confidential document is encrypted, offer the document reader afterwards again and decipher.To described confidential document, changing the mechanism data transaction according to one is unified format, and the document reader will be with the reader opening document corresponding to this form after obtaining ciphertext.
The above description of this invention is illustrative, and nonrestrictive, and those skilled in the art is understood, and within spirit that claim limits and scope, can carry out many modifications, variation or equivalence to it, but they will fall in protection scope of the present invention all.

Claims (6)

1. the encryption method of an electronic document is characterized in that, comprising:
Step 1: use random algorithm to produce 32 long random keys;
Step 2: use the asymmetrical encryption algorithm of document reader digital certificate PKI to encrypt described random key, form encryption key;
Step 3: use AES symmetric encipherment algorithm and described encryption key that confidential document is encrypted, produce ciphertext;
Step 4: described ciphertext, described encryption key are formed a packet deposit in the encrypt file;
Step 5: after the document reader obtains described ciphertext,, obtain expressly with said encryption key decrypting ciphertext.
2. the encryption method of electronic document as claimed in claim 1 is characterized in that, step 3 also comprises Data Format Transform, carries out format conversion when described confidential document is encrypted, and offers the document reader afterwards again and deciphers.
3. the encryption method of electronic document as claimed in claim 2 is characterized in that, to described confidential document, changing the mechanism data transaction according to one is unified format, and the document reader will be with the reader opening document corresponding to this form after obtaining ciphertext.
4. the encryption system of an electronic document is characterized in that, comprising:
The random key generation module uses random algorithm to produce 32 long random keys;
The encryption key generation module uses the asymmetrical encryption algorithm of document reader digital certificate PKI to encrypt described random key, forms encryption key;
The ciphertext generation module uses symmetric encipherment algorithm and described encryption keys confidential document, produces ciphertext;
Group bag module is formed a packet with ciphertext, encryption key and is deposited in the encrypt file;
Expressly deciphering module after the document reader obtains described ciphertext, is used the encryption key decrypting ciphertext, obtains expressly.
5. the encryption system of electronic document as claimed in claim 4 is characterized in that, also comprises format converting module, carries out format conversion when described confidential document is encrypted, and offers the document reader afterwards again and deciphers.
6. the encryption system of electronic document as claimed in claim 5 is characterized in that, to described confidential document, changing the mechanism data transaction according to one is unified format, and the document reader will be with the reader opening document corresponding to this form after obtaining ciphertext.
CN201110334639XA 2011-10-28 2011-10-28 Encryption method and encryption system for electronic documents Pending CN102404120A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201110334639XA CN102404120A (en) 2011-10-28 2011-10-28 Encryption method and encryption system for electronic documents

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201110334639XA CN102404120A (en) 2011-10-28 2011-10-28 Encryption method and encryption system for electronic documents

Publications (1)

Publication Number Publication Date
CN102404120A true CN102404120A (en) 2012-04-04

Family

ID=45885941

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201110334639XA Pending CN102404120A (en) 2011-10-28 2011-10-28 Encryption method and encryption system for electronic documents

Country Status (1)

Country Link
CN (1) CN102404120A (en)

Cited By (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102831360A (en) * 2012-08-06 2012-12-19 江苏敏捷科技股份有限公司 Personal electronic document safety management system and management method thereof
CN103560892A (en) * 2013-11-21 2014-02-05 深圳中兴网信科技有限公司 Secret key generation method and secret key generation device
CN108319863A (en) * 2017-01-18 2018-07-24 珠海金山办公软件有限公司 A kind of enterprise-level key decrypting method and device
CN109934008A (en) * 2018-10-12 2019-06-25 王龙 A kind of multitask document file management system based on Permission Levels
CN110363016A (en) * 2019-07-15 2019-10-22 宜春宜联打印设备有限公司 A kind of printing encryption method and device, Method of printing and printing device
CN110381046A (en) * 2019-07-10 2019-10-25 广东星舆科技有限公司 A kind of encrypted transmission method of GNSS data
CN114499955A (en) * 2021-12-24 2022-05-13 长威信息科技发展股份有限公司 Dynamic decoding method and system

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101123495A (en) * 2007-09-07 2008-02-13 农革 A data encryption, decryption system and method
CN101442409A (en) * 2007-11-23 2009-05-27 东方钢铁电子商务有限公司 Encipher method and system for B2B data exchange

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101123495A (en) * 2007-09-07 2008-02-13 农革 A data encryption, decryption system and method
CN101442409A (en) * 2007-11-23 2009-05-27 东方钢铁电子商务有限公司 Encipher method and system for B2B data exchange

Cited By (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102831360A (en) * 2012-08-06 2012-12-19 江苏敏捷科技股份有限公司 Personal electronic document safety management system and management method thereof
CN102831360B (en) * 2012-08-06 2015-01-28 江苏敏捷科技股份有限公司 Personal electronic document safety management system and management method thereof
CN103560892A (en) * 2013-11-21 2014-02-05 深圳中兴网信科技有限公司 Secret key generation method and secret key generation device
CN108319863A (en) * 2017-01-18 2018-07-24 珠海金山办公软件有限公司 A kind of enterprise-level key decrypting method and device
CN109934008A (en) * 2018-10-12 2019-06-25 王龙 A kind of multitask document file management system based on Permission Levels
CN109934008B (en) * 2018-10-12 2021-01-15 深圳市中欧瑞安科技有限公司 Multi-task document management system based on permission level
CN110381046A (en) * 2019-07-10 2019-10-25 广东星舆科技有限公司 A kind of encrypted transmission method of GNSS data
CN110381046B (en) * 2019-07-10 2021-12-07 广东星舆科技有限公司 GNSS data encryption transmission method
CN110363016A (en) * 2019-07-15 2019-10-22 宜春宜联打印设备有限公司 A kind of printing encryption method and device, Method of printing and printing device
CN110363016B (en) * 2019-07-15 2021-05-07 宜春宜联打印设备有限公司 Printing encryption method and device, printing method and printing equipment
CN114499955A (en) * 2021-12-24 2022-05-13 长威信息科技发展股份有限公司 Dynamic decoding method and system

Similar Documents

Publication Publication Date Title
CN106789042B (en) Authentication key negotiation method for user in IBC domain to access resources in PKI domain
CN102082790B (en) Method and device for encryption/decryption of digital signature
CN102404120A (en) Encryption method and encryption system for electronic documents
CN106131207B (en) A kind of method and system of bypass audit HTTPS data packet
CN103618610A (en) Information safety algorithm based on energy information gateway in smart power grid
CN102624522A (en) Key encryption method based on file attribution
CN102025505A (en) Advanced encryption standard (AES) algorithm-based encryption/decryption method and device
CN103684794A (en) Communication data encryption and decryption method based on DES (Data Encryption Standard), RSA and SHA-1 (Secure Hash Algorithm) encryption algorithms
CN102664898A (en) Fingerprint identification-based encrypted transmission method, fingerprint identification-based encrypted transmission device and fingerprint identification-based encrypted transmission system
CN110889696A (en) Storage method, device, equipment and medium for alliance block chain secret key based on SGX technology
CN104253694A (en) Encrypting method for network data transmission
CN103152362B (en) Based on the large data files encrypted transmission method of cloud computing
CN101720071A (en) Short message two-stage encryption transmission and secure storage method based on safety SIM card
CN104901935A (en) Bilateral authentication and data interaction security protection method based on CPK (Combined Public Key Cryptosystem)
CN104901803A (en) Data interaction safety protection method based on CPK identity authentication technology
CN105554031A (en) Encryption method, encryption apparatus, decryption method, decryption apparatus and terminal
Idrizi et al. Analyzing the speed of combined cryptographic algorithms with secret and public key
CN108900301A (en) The certification of restful interface security and message mixed encryption method based on .NET MVC
CN101706854A (en) USB information security equipment and method for communication between USB information security equipment and mainframe
CN104486756B (en) A kind of encryption and decryption method and system of close writing paper short message
JP5324813B2 (en) Key generation apparatus, certificate generation apparatus, service provision system, key generation method, certificate generation method, service provision method, and program
CN104993924A (en) Method for encryption and decryption of digital copyright
Kaur et al. Data Encryption Using Different Techniques: A Review.
CN113468582A (en) Anti-quantum computing encryption communication method
CN101447873A (en) Safe authentication and encrypted communication method

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C12 Rejection of a patent application after its publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20120404