CN111737745A - Data encryption method, device, computer equipment and storage medium - Google Patents

Abstract

The application provides a data encryption method and device, computer equipment and a storage medium, which are applied to the technical field of computers and used for solving the problem that a leakage source cannot be accurately positioned when table type data is leaked. The data encryption method provided by the invention comprises the following steps: acquiring an identity of a user receiving encrypted data, and converting the identity of the user to obtain an index carrying encrypted position information; selecting one column of original data from original data to be encrypted; classifying the selected original data in the row to ensure that the classified original data has the same category as the total digit of the index; according to the index carrying the encryption position information, determining the classified original data of the encryption position positioned with the index in the original data as data to be encrypted; and carrying out encryption processing in a preset form on the data to be encrypted.

Description

Data encryption method, device, computer equipment and storage medium

technical field

The present invention relates to the field of computer technology, and in particular, to a data encryption method, device, computer equipment and storage medium.

Background technique

Data leakage refers to the unauthorized use of data without the authorization of the owner. Every year, trillions of losses are caused by data breaches worldwide.

In order to find the person who leaked the data as soon as possible after the data leakage and reduce losses, a relatively mature solution in the industry is to add watermarks to data such as videos and pictures to locate the source of data leakage, and inject additional similar watermarks to locate the source of the data leakage. To "user mark" such data by means of information, on the one hand, the mark is too obvious, on the other hand, it will increase the display content of the original data, and it is difficult for the watermark to locate the specific source of leaking a certain encrypted data. Positioning capabilities are very limited.

And this method is not applicable to structured data such as database and table type data. It is urgent to propose a method that can locate the leak source in time when structured data and table type data such as database leak.

SUMMARY OF THE INVENTION

Embodiments of the present invention provide a data encryption method, device, computer equipment, and storage medium, so as to solve the technical problem that the leakage source cannot be accurately located when table-type data is leaked.

A data encryption method, the method includes:

Obtain the identity of the user who receives the encrypted data, convert the identity of the user, and obtain an index carrying the encrypted location information;

Select one column of raw data from the raw data to be encrypted;

classifying the selected one of the original data, so that the type of the classified original data is the same as the total number of digits of the index;

According to the index carrying the encrypted location information, determine the original data of the encrypted location located with the index in the classified original data as the data to be encrypted;

Perform encryption processing in a preset form on the data to be encrypted.

A data encryption device, the device includes:

an index conversion module, configured to obtain the identity of the user who receives the encrypted data, convert the identity of the user, and obtain an index that carries the encrypted location information;

The data selection module is used to select one column of original data from the original data to be encrypted;

A classification module, used to classify the selected one of the original data, so that the type of the classified original data is the same as the total number of digits of the index;

a position determination module, configured to determine, according to the index carrying the encrypted position information, the original data of the encrypted position positioned with the index in the classified original data as the data to be encrypted;

The encryption module is used to perform encryption processing in a preset form on the data to be encrypted.

A computer device includes a memory, a processor, and a computer program stored in the memory and executable on the processor, the processor implementing the steps of the data encryption method when the processor executes the computer program.

A computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, implements the steps of the above-mentioned data encryption method.

The data encryption method, device, computer equipment and storage medium proposed in this application firstly obtain the identity of the user who receives the encrypted data, convert the user's identity, and obtain an index carrying encrypted location information. Select one column of original data from the original data; classify the selected one of the original data, so that the type of the classified original data is the same as the total number of digits of the index, so as to apply to the original data with a large amount of data, and then according to the An index carrying encrypted location information, determining the original data at the encrypted location located with the index in the classified original data as the data to be encrypted, and performing encryption processing in a preset form on the data to be encrypted, so that the encrypted data is processed. The location of the data can reflect the identity of the leak source. When the encrypted data is leaked, the identity of the leak source can be deduced according to the encrypted location of the encrypted data, so as to find the leak source in the first time.

Description of drawings

In order to illustrate the technical solutions of the embodiments of the present invention more clearly, the following briefly introduces the drawings that are used in the description of the embodiments of the present invention. Obviously, the drawings in the following description are only some embodiments of the present invention. , for those of ordinary skill in the art, other drawings can also be obtained from these drawings without creative labor.

1 is a schematic diagram of an application environment of a data encryption method in an embodiment of the present invention;

2 is a flowchart of a method for encrypting data in an embodiment of the present invention;

3 is a flowchart of a method for encrypting data in another embodiment of the present invention;

4 is a flowchart of a method for encrypting data in another embodiment of the present invention;

5 is a schematic structural diagram of an apparatus for encrypting data in an embodiment of the present invention;

FIG. 6 is a schematic diagram of a computer device in an embodiment of the present invention.

Detailed ways

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

The data encryption method provided by the present application can be applied in the application environment as shown in FIG. 1 , in which the computer device communicates with the external device through the network. Among them, the computer equipment includes but is not limited to various personal computers, notebook computers, smart phones, tablet computers and portable wearable devices. The server can be implemented as an independent server or a server cluster composed of multiple servers.

In one embodiment, as shown in FIG. 2, a data encryption method is provided, in order to realize the "user mark" in the encrypted position of the encrypted data without destroying the complete expression of the original data information, Due to the uniqueness of the user identifier, when the encrypted data is leaked, the leaker can be uniquely located according to the encrypted location of the encrypted data, and the encryption method will not destroy the original data. This method is applied to the computer in FIG. 1 . The device is described as an example, including the following steps S101 to S105.

S101. Acquire an identity of a user who receives encrypted data, convert the identity of the user, and obtain an index carrying encrypted location information.

In one of the embodiments, the identity of the user who receives the encrypted data can be considered to be set, which can be a pure number or a free combination of numbers and other forms of characters. The user who receives the encrypted data is known in advance and can be The user who receives the encrypted data is uniquely identified by this identification.

In the application, when the data receiver is determined, it will assign an identity to the data receiver. For example, the id is defined as a 5-digit number, and each number is randomly selected from 0 to 9. In the process of id, it is necessary to ensure that no duplicate id is generated, and that the id assigned to the data receiver is unique.

Among them, multiple transmissions of the same data to the same user do not require repeated encryption, and multiple transmissions of different data to the same user are assigned different ids.

S102. Select one column of original data from the original data to be encrypted.

Wherein, the original data includes several columns, for example, a column including "field worker number", then the field worker number column can be selected as the column in this step, and the selected column represents the row to be determined to be encrypted and the data to be encrypted.

In other embodiments, other columns such as "employee mobile phone number" or "employee birthday" can also be selected as the encrypted row to be determined and the data to be encrypted.

S103 , classifying the one of the selected original data, so that the type of the classified original data is the same as the total number of digits of the index.

The purpose of converting the original data in this step is to classify the original data, because the number of rows in the original data may be very large, but the number of digits of the index is limited, and generally it cannot include the data of all rows in a certain column. The raw data is classified, and the raw data rows classified into the same category can be marked as encrypted or not encrypted.

The category of the classified raw data is the same as the number of digits of the index, so that the index can cover the raw data of all rows.

S104. According to the index carrying the encrypted location information, determine the original data of the encrypted location located with the index in the classified original data as the data to be encrypted.

The identity identifier includes but is not limited to the user's job number, computer number, etc., and the location of the data to be encrypted in the original data can be determined by converting the user's identity identifier.

S105. Perform encryption processing in a preset form on the data to be encrypted.

In one embodiment, the step S105 further includes:

Obtain the original data whose data type is character in the data to be encrypted;

Mark the acquired raw data of the character type for display.

In one embodiment, the display mark includes, but is not limited to, bolding, discoloring, slanting, underlining, and the like for the original data of the character type.

In other embodiments, the step S105 further includes:

Obtain the original data whose data type is the data type in the data to be encrypted;

The value of the preset position is increased for the acquired raw data of this data type.

In one of the embodiments, in this example, the encrypted data conversion is preferably carried out in the following manner, selecting the column of the birthday of the field staff for marking processing, and the specific processing method is to replace the last digit of the original data with a value between 0 and 9. Random number, for example: 1990-02-12 00:00:00.0 The updated data after the value is increased is 1990-02-12 00:00:00.8.

In one embodiment, the column of employee mobile phone numbers is selected for marking processing. Specifically, "86" may be added in front of the employee mobile phone number, for example, the mobile phone number 18588996329 in the original data column is modified to 8618588996329.

Further, the involved data transformation methods that do not change the expression of data information include but are not limited to:

(1) Conversion of numerical data precision, for example: 1.00=1.0;

(2) Character type abbreviation conversion, for example: Road=Rd;

(3) Character data punctuation replacement such as: Jr.=Jr;

(4) Character font format replacement For example: The Load of King=The Road of King.

The data encryption method proposed in this embodiment first obtains the identity of the user who receives the encrypted data, converts the identity of the user to obtain an index carrying the encrypted location information, and selects one column of the original data from the original data to be encrypted ; Classify the selected one of the original data, so that the type of the classified original data is the same as the total number of digits of the index, so as to apply the original data with a large amount of data, and then according to the index that carries the encrypted position information, Determine the original data of the encrypted position located with the index in the classified raw data as the data to be encrypted, and perform encryption processing in a preset form on the data to be encrypted, so that the position of the encrypted data can reflect the leakage source. Identity identifier, when the encrypted data is leaked, the identity identifier of the leakage source can be deduced according to the encrypted location of the encrypted data, so as to find the leakage source in the first time.

In one of the embodiments, the data encryption method further includes the following steps:

Get the information of users who are authorized to receive the encrypted data. After the data recipient is determined, the information of the data recipient needs to be obtained. For example, if the data recipient is Wang, then the name, gender, ID number, etc. of the data recipient need to be obtained; the above data recipient information is to be able to uniquely determine Data recipient. Therefore, the data recipient information must include information that can uniquely determine the identity of the data recipient. The data recipient information is not necessarily the name, gender, ID number and other information in the above example. If the recipient has a job number uniquely corresponding to its identity, the data recipient information can only include the data recipient job number;

The identity identifier is allocated to the user corresponding to the user information. The id assigned to the pre-set location to be encrypted by the data receiver is the unique id. After the data is encrypted accordingly, after the subsequent discovery of data leakage, the id corresponding to the leaked data can be reversely deciphered through the corresponding information in the data, and then Because the id is unique, the relevant responsible person of the data leakage can be uniquely determined, so that the data owner can accurately locate the corresponding responsible party when facing the economic loss caused by the core data leakage.

Further, after the step of allocating the identity to the user corresponding to the user information, it also includes:

associating the identity with the information of the user receiving encrypted data;

The information associated with the identity identifier and the data recipient information is stored in a database.

After the id is associated with the data receiver information and stored in the corresponding database, when the id in the leaked file is restored from the leaked file, the data receiver information associated with the id is retrieved from the database according to the id, thereby Locate the person who leaked the encrypted data.

FIG. 3 is a flowchart of a data encryption method according to another embodiment of the present invention. As shown in FIG. 3 , the step of classifying one of the selected rows of raw data in step S103 further includes the following steps S301 to S303 .

S301. Obtain the total number of digits of the index converted according to the identity identifier.

In one embodiment, when the identification is converted into binary, the total number of digits of the index is the total number of digits of the converted binary number.

S302. Calculate the remainder obtained by dividing the row number of each row in the one column of original data by the total number of digits.

Among them, the data in the index column is numeric data, you can select the first or last digits of the data in the index column to obtain the remainder of the selected number and the characteristic data.

The total number of remainders calculated by the above method must be the same as the number of digits of the index, so as to realize the classification of the original data. If the preset value is 14, the remainder calculated by the above method must be 0. to a certain value in 13, so that there are 14 remainders, it means that the original data is divided into 14 categories.

S303: Determine the original data corresponding to the number of rows with the same remainder as the same type.

In one embodiment, the step of converting the identity of the user in step S101 includes:

Convert the user's identity to a binary number, and determine the number of bits of the binary number as the number of bits of the index.

After the id is converted into a binary value, the converted binary value is closely related to the id, and the identity id can be obtained from the binary value, and the binary data value only includes 1 and 0, and 1 and 0 can be used to represent two types of data. The status, for example, may be 1 to indicate that the original data needs to be encrypted, and 0 to indicate that the original data does not need to be encrypted. For example, set the data authorizer id to 10361, and convert the authorizer id to binary format as 10100001111001.

FIG. 4 is a flow chart of a method for encrypting data in another embodiment of the present invention. As shown in FIG. 4 , in step S104 , in the classified original data, the original data of the encrypted position located with the index is determined as to be The step of encrypting the data further includes:

S401. Obtain the number of digits of the same value in the binary number. Further, the obtained binary number with the same value represents a preset number corresponding to "encryption". For example, if "1" is preset Indicates the line that needs to be encrypted, then obtains the digit of all "1" in the binary number, and the minimum value of the digit is 0;

S402, obtaining the row number where the original data whose remainder is the number of digits is located;

S403. Determine the raw data in the obtained row number as the data to be encrypted.

According to a usage scenario of this embodiment, for example: the binary number converted from the identity identifier is "10100001111001", and the remainders obtained by dividing one column of original data by 14 are 0 to 13, respectively. According to a usage scenario of this embodiment See the following table (1) for the scenarios:

1 0 1 0 0 0 0 1 1 1 1 0 0 1 0 1 2 3 4 5 6 7 8 9 10 11 12 13 Yes no Yes no no no no Yes Yes Yes Yes no no Yes

Table 1)

Referring to the above table 1, if the preset corresponding relationship between encryption and the same value in the binary number is 1 means encryption, 0 means no encryption, it should be understood that one of the selected raw data gets along with 14 and the remainder is 0, 2 The data in the rows of , 7, 8, 9, 10 and 13 are the marked data to be encrypted.

A usage scenario according to this embodiment is as follows:

The field worker number column is selected as one of the original data columns selected from the raw data to be encrypted. The worker number is a decimal value. Suppose there are worker number a: 12345, worker number b: 45678, and worker number c: 56789.

Therefore, the remainder when the last four digits of job number a are divided by 14 is 7, the remainder when the last four digits of job number b are divided by 14 is 8, and the remainder when the last four digits of job number c are divided by 14 is 13. Since the numbers in the identification data corresponding to 7 and 13 are 1, the data at the corresponding positions of the data lines where the job number a and the job number c are located will be converted into encrypted data.

In one of the embodiments, when the encrypted data is leaked, the step of deriving the identity of the leak source according to the encrypted location of the encrypted data includes:

Obtain the data in one cycle after encryption processing, the data includes the data of encrypted rows and the data of non-encrypted rows in one cycle, wherein, the total number of rows of data in one cycle is the class for classifying the original data. number;

The data in the one cycle is decoded according to the preset corresponding relationship between whether to encrypt or not and the same value in the binary number to obtain a decoding result. For example, if the preset value "1" means encryption and the value "0" means no encryption, then a string of binary values can be decoded according to whether the data in a cycle is encrypted or not;

The decoding result is compiled into a decimal number to obtain the identity of the user.

In one embodiment, it is judged from top to bottom whether the data in the row corresponding to the index column data needs to be encrypted, and the data in the row corresponding to the row where the index column data is located is encrypted row by row from top to bottom.

The present application provides a data encryption method. First, it is necessary to obtain the salted keyword index of the document to be encrypted, determine the index column, and then obtain the unique id assigned to the data recipient, and then perform data processing on the data in the relevant position according to a preset algorithm. Encryption, wherein the data encryption is a data transformation method that does not affect the integrity of the data to be encrypted. The encrypted file can be reversely traced through the encrypted location to obtain a unique id, so that after the leaked data is obtained, it can be unique. Determine the relevant responsible person for data leakage. While ensuring the integrity and accuracy of the original data information, this solution embeds the information of the authorized user of the data through a series of data transformation methods, and in the subsequent traceability, can Quickly locate the source of data breaches.

It should be understood that the size of the sequence numbers of the steps in the above embodiments does not mean the sequence of execution, and the execution sequence of each process should be determined by its functions and internal logic, and should not constitute any limitation to the implementation process of the embodiments of the present invention.

In an embodiment, a data encryption device is provided, and the data encryption device corresponds to the data encryption method in the above-mentioned embodiment one-to-one. As shown in FIG. 5 , the data encryption device 100 includes an index conversion module 11 , a data selection module 12 , a classification module 13 , a position determination module 14 and an encryption module 15 . The detailed description of each functional module is as follows:

The index conversion module 11 is used to obtain the identity of the user who receives the encrypted data, convert the identity of the user, and obtain an index that carries the encrypted location information;

The data selection module 12 is used to select one row of original data from the original data to be encrypted;

The classification module 13 is used to classify the selected one of the original data, so that the type of the classified original data is the same as the total number of digits of the index;

The location determination module 14 is used to determine the original data of the encrypted location located with the index in the classified original data as the data to be encrypted according to the index carrying the encrypted location information;

The encryption module 15 is configured to perform encryption processing in a preset form on the data to be encrypted.

In one of the embodiments, the data encryption apparatus 100 further includes:

a user information acquisition unit, configured to acquire authorized user information for receiving the encrypted data;

The identity identifier allocation unit is used for allocating the identity identifier to the user corresponding to the user information.

In one embodiment, the classification module 13 further includes:

a unit for obtaining the total number of digits, which is used to obtain the total number of digits of the index converted according to the identity identifier;

a calculation unit, used to calculate the remainder obtained by dividing the number of rows in each row of the original data in one of the columns by the total number of digits;

The same type determination unit is used to determine the original data corresponding to the number of rows with the same remainder as the same type.

In one embodiment, the index conversion module 11 is specifically configured to convert the identity of the user into a binary number, and determine the number of digits of the binary number as the number of digits of the index.

In one embodiment, the location determination module 14 further includes:

A digit obtaining unit is used to obtain the digit of the number of the same value in the binary number. Further, the obtained number of the same value in the binary number represents a preset number corresponding to "encryption". If "1" is set to indicate the line that needs to be encrypted, then the digits of all "1" in the binary number are obtained, and the minimum number of digits is 0;

The row number obtaining unit is used to obtain the row number of the original data whose remainder is the number of digits;

An encryption determination unit, configured to determine the obtained raw data in the row number as the data to be encrypted.

In one embodiment, the encryption module 15 specifically includes:

a type acquisition unit, used to acquire the original data whose data type is character type in the data to be encrypted;

The marking unit is used to display and mark the acquired raw data of the character type.

In one embodiment, the type acquiring unit is further configured to acquire the original data whose data type is a numerical type in the data to be encrypted;

Wherein, the data encryption method further includes a numerical value increasing unit, which is used for increasing the numerical value at a preset position for the obtained raw data of the numerical value type.

In one of the embodiments, when the encrypted data is leaked, this embodiment provides a decoding device for a user, which is used to reversely deduce the identity of the leakage source according to the encrypted location of the encrypted data, and the decoding device for the user includes:

The data acquisition module is used to acquire the data in one cycle after encryption processing, the data includes the data of encrypted rows and the data of non-encrypted rows in one cycle, wherein, the total number of rows of data in one cycle is equal to the The number of classes to classify the original data;

The decoding module is used for decoding the data in the one cycle according to the preset corresponding relationship between encryption and the same value in the binary number to obtain a decoding result. For example, if the preset value "1" means encryption and the value "0" means no encryption, then a string of binary values can be decoded according to whether the data in a cycle is encrypted or not;

The compiling module is used for compiling the decoding result into a decimal number to obtain the identity of the user.

In one embodiment, it is judged from top to bottom whether the data in the row corresponding to the index column data needs to be encrypted, and the data in the row corresponding to the row where the index column data is located is encrypted row by row from top to bottom.

The device for encrypting data proposed in this embodiment first obtains the identity of the user who receives the encrypted data, converts the identity of the user to obtain an index carrying the encrypted location information, and selects one column of the original data from the original data to be encrypted ; Classify the selected one of the original data, so that the type of the classified original data is the same as the total number of digits of the index, so as to apply the original data with a large amount of data, and then according to the index that carries the encrypted position information, Determine the original data of the encrypted position located with the index in the classified raw data as the data to be encrypted, and perform encryption processing in a preset form on the data to be encrypted, so that the position of the encrypted data can reflect the leakage source. Identity identifier, when the encrypted data is leaked, the identity identifier of the leakage source can be deduced according to the encrypted location of the encrypted data, so as to find the leakage source in the first time.

Wherein, the terms "comprising" and "having" and any variations thereof, are intended to cover non-exclusive inclusion, for example, a process, method, system, product or device comprising a series of steps or modules is not necessarily limited to those expressly listed Those steps or modules, but may include other steps or modules not explicitly listed or inherent to these processes, methods, products or devices, the division of modules appearing in this application is only a logical division , and there may be other division methods when implementing in practical applications.

For the specific limitation of the data encryption apparatus, reference may be made to the limitation of the data encryption method above, which will not be repeated here. Each module in the above-mentioned data encryption device may be implemented in whole or in part by software, hardware and combinations thereof. The above modules can be embedded in or independent of the processor in the computer device in the form of hardware, or stored in the memory in the computer device in the form of software, so that the processor can call and execute the operations corresponding to the above modules.

In one embodiment, a computer device is provided, and the computer device may be a terminal, and its internal structure diagram may be as shown in FIG. 6 . The computer equipment includes a processor, memory, a network interface, a display screen, and an input device connected by a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium, an internal memory. The nonvolatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the execution of the operating system and computer programs in the non-volatile storage medium. The network interface of the computer device is used to communicate with an external server over a network connection. The computer program when executed by a processor implements a method of encrypting data.

In one embodiment, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and running on the processor, and the processor implements the encryption method of the data in the above embodiment when the computer program is executed. steps, such as steps 101 to 105 shown in FIG. 2 and other extensions of the method and extensions of related steps. Alternatively, when the processor executes the computer program, the functions of each module/unit of the data encryption apparatus in the above-mentioned embodiment are implemented, for example, the functions of modules 11 to 15 shown in FIG. 5 . In order to avoid repetition, details are not repeated here.

The processor may be a central processing unit (Central Processing Unit, CPU), other general-purpose processors, a digital signal processor (Digital Signal Processor, DSP), an application specific integrated circuit (Application Specific Integrated Circuit, ASIC), an off-the-shelf processor Programmable Gate Array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc. The processor is the control center of the computer device, and uses various interfaces and lines to connect various parts of the entire computer device.

The memory can be used to store the computer program and/or module, and the processor implements the computer by running or executing the computer program and/or module stored in the memory and calling the data stored in the memory various functions of the device. The memory may mainly include a stored program area and a stored data area, wherein the stored program area may store an operating system, an application program required for at least one function (such as a sound playback function, an image playback function, etc.), etc.; the storage data area may store Data (such as audio data, video data, etc.) created according to the usage of the mobile phone, etc.

The memory may be integrated in the processor, or may be provided separately from the processor.

In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps of the data encryption method in the foregoing embodiment are implemented, for example, step 101 shown in FIG. 2 . To step 105 and other extensions of the method and extensions of related steps. Alternatively, when the computer program is executed by the processor, the functions of each module/unit of the data encryption apparatus in the above-mentioned embodiment are realized, for example, the functions of modules 11 to 15 shown in FIG. 5 . In order to avoid repetition, details are not repeated here.

The data encryption method, device, computer equipment and storage medium proposed in this embodiment first obtain the identity of the user who receives the encrypted data, convert the user's identity, and obtain an index that carries encrypted location information. Select one column of original data from the original data of For the index carrying the encrypted location information, the original data of the classified original data at the encrypted location located with the index is determined as the data to be encrypted, and the data to be encrypted is encrypted in a preset form, so that the encrypted data is encrypted. The location of the data can reflect the identity of the leak source. When the encrypted data is leaked, the identity of the leak source can be deduced according to the encrypted location of the encrypted data, so as to find the leak source in the first time.

Those of ordinary skill in the art can understand that all or part of the processes in the methods of the above embodiments can be implemented by instructing relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage In the medium, when the computer program is executed, it may include the processes of the above-mentioned method embodiments. Wherein, any reference to memory, storage, database or other medium used in the various embodiments provided in this application may include non-volatile and/or volatile memory. Nonvolatile memory may include read only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in various forms such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous chain Road (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.

Those skilled in the art can clearly understand that, for the convenience and simplicity of description, only the division of the above-mentioned functional units and modules is used as an example. Module completion, that is, dividing the internal structure of the device into different functional units or modules to complete all or part of the functions described above.

The above-mentioned embodiments are only used to illustrate the technical solutions of the present invention, but not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: it is still possible to implement the foregoing implementations. The technical solutions described in the examples are modified, or some technical features thereof are equivalently replaced; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present invention, and should be included in the within the protection scope of the present invention.

Claims (10)

1. a data encryption method, is characterized in that, described method comprises: Obtaining the identity of the user who receives the encrypted data, and converting the identity of the user to obtain an index carrying the encrypted location information; Select one column of raw data from the raw data to be encrypted; Classify one of the selected original data, so that the type of the classified original data is the same as the total number of digits of the index; According to the index carrying the encrypted location information, the original data of the encrypted location located with the index in the classified original data is determined as the data to be encrypted; Encryption processing in a preset form is performed on the data to be encrypted. 2. The data encryption method according to claim 1, wherein the method further comprises: Obtain the information of users who have been authorized to receive the encrypted data; The identity identifier is allocated to the user corresponding to the user information. 3. The data encryption method according to claim 1, wherein the step of classifying the selected one column of raw data further comprises: Obtain the total number of digits of the index converted according to the identity identifier; calculating the remainder obtained by dividing the row number of each row in the one column of original data by the total number of digits; The original data corresponding to the number of rows with the same remainder are determined as the same class. 4. the encryption method of data according to claim 3, is characterized in that, the described step of converting the identity of described user comprises: Converting the identity of the user into a binary number, and determining the number of digits of the binary number as the number of digits of the index. 5. The encryption method of data according to claim 4, wherein the step of determining the original data of the encrypted position positioned with the index in the classified original data as the data to be encrypted further comprises: Obtain the digit of the number of the same value in the binary number; obtaining the number of rows where the original data whose remainder is the number of digits is located; The raw data in the acquired number of rows is determined as the data to be encrypted. 6. The data encryption method according to any one of claims 1 to 5, wherein the step of performing a preset form of encryption processing on the to-be-encrypted data comprises: Obtain the original data whose data type is character type in the data to be encrypted; The acquired raw data of the character type is marked for display. 7. The data encryption method according to any one of claims 1 to 5, wherein the step of performing a preset form of encryption processing on the to-be-encrypted data comprises: Obtain the original data whose data type is numeric type in the data to be encrypted; A numerical value increase at a preset position is performed on the acquired raw data of the numerical value type. 8. A data encryption device, wherein the device comprises: an index conversion module, configured to obtain the identity of the user who receives the encrypted data, convert the identity of the user, and obtain an index that carries the encrypted location information; The data selection module is used to select one column of original data from the original data to be encrypted; A classification module, configured to classify one of the selected original data, so that the type of the classified original data is the same as the total number of digits of the index; a position determination module, configured to determine, according to the index carrying the encrypted position information, the original data of the encrypted position located with the index in the classified original data as the data to be encrypted; An encryption module, configured to perform encryption processing in a preset form on the data to be encrypted. 9. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the computer program as claimed in the claims Steps of the data encryption method described in any one of 1 to 7. 10. A computer-readable storage medium storing a computer program, characterized in that, when the computer program is executed by a processor, the data as claimed in any one of claims 1 to 7 is implemented. The steps of the encryption method.

Images