CN112202768B - Data encryption method, device and system and readable storage medium - Google Patents
Data encryption method, device and system and readable storage medium Download PDFInfo
- Publication number
- CN112202768B CN112202768B CN202011047322.3A CN202011047322A CN112202768B CN 112202768 B CN112202768 B CN 112202768B CN 202011047322 A CN202011047322 A CN 202011047322A CN 112202768 B CN112202768 B CN 112202768B
- Authority
- CN
- China
- Prior art keywords
- data
- encryption
- intelligent terminal
- target
- encrypted data
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
- H04L63/0471—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
- H04L63/0464—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/14—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using a plurality of keys or algorithms
- H04L9/16—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using a plurality of keys or algorithms the keys or algorithms being changed during operation
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Mobile Radio Communication Systems (AREA)
- Telephonic Communication Services (AREA)
- Storage Device Security (AREA)
Abstract
The invention provides a data encryption method, a device, a system and a readable storage medium, wherein the method comprises the following steps: establishing communication connection with the intelligent terminal and the cloud server; receiving original data sent by the intelligent terminal; encrypting the original data according to a first encryption algorithm to obtain first encrypted data; the first encrypted data is sent to the cloud server, the cloud server decrypts the first encrypted data and encrypts the first encrypted data to obtain second encrypted data, the server sends the second encrypted data to the target encryption device, and the target encryption device decrypts the second encrypted data and sends the data information to the target intelligent terminal; the problem that safety control is not carried out during data transmission before the intelligent terminal in the prior art is solved, data are encrypted, sent, received and decrypted, information leakage or theft is avoided, and the safety of data transmission is effectively guaranteed.
Description
Technical Field
The present invention relates to the field of information encryption technologies, and in particular, to a data encryption method, device, system, and readable storage medium.
Background
With the development of network technology, the security of data in the network transmission process is also widely concerned, and the security of data in the network transmission process can be protected by an encryption mode; however, when one intelligent terminal sends data to another intelligent terminal in the prior art, management and control of data security are not performed in transmission, so that leakage risk of data information occurs, and the requirements of users cannot be met.
Disclosure of Invention
Aiming at the defects in the prior art, the data encryption method, device, system and readable storage medium provided by the invention solve the problem that the security is not controlled during the prior data transmission of the intelligent terminal in the prior art, so that the data is encrypted, transmitted, received and decrypted, the information leakage or theft is avoided, and the data transmission security is effectively ensured.
In a first aspect, the present invention provides a data encryption method, applied to an encryption device in a data encryption system, where the data encryption system includes an intelligent terminal, the encryption device, and a cloud server, the method includes: establishing communication connection with the intelligent terminal and the cloud server; receiving original data sent by the intelligent terminal, wherein the original data comprises data information, an ID (identity) of target encryption equipment and an MAC (media access control) address of the target intelligent terminal; encrypting the original data according to a first encryption algorithm to obtain first encrypted data; and sending the first encrypted data to the cloud server, decrypting the first encrypted data by the cloud server, encrypting the first encrypted data to obtain second encrypted data, and sending the second encrypted data to the target encryption equipment by the server, so that the second encrypted data is decrypted by the target encryption equipment, and then sending the data information to the target intelligent terminal.
Optionally, after the communication connection is established with the intelligent terminal and the cloud server, the method further includes: receiving third encrypted data sent by the cloud server; decrypting the third encrypted data according to a third decryption algorithm to obtain the original data; acquiring the MAC address of the target intelligent terminal according to the original data; and sending the data information in the original data to the target intelligent terminal.
Optionally, establishing a communication connection with the intelligent terminal and the cloud server, including: receiving a color light signal which is directionally transmitted by the intelligent terminal, wherein the color light signal is a combined color light generated by the intelligent terminal according to an SSID and a password of a wireless network and a coding rule; decoding the color optical signals according to the coding rule to obtain SSID and password of the wireless network; and establishing communication connection with the cloud server through the wireless network.
Optionally, establishing a communication connection with the intelligent terminal and the cloud server, and further including: receiving a binding request sent by the intelligent terminal, wherein the binding request comprises an MAC address of the intelligent terminal; and binding the intelligent terminal according to the MAC address of the intelligent terminal, and establishing communication connection with the intelligent terminal.
In a second aspect, the present invention provides a data encryption method, applied to a cloud server of a data encryption system, where the data encryption system includes an intelligent terminal, an encryption device, and the cloud server, the method includes: receiving first encrypted data sent by the encryption equipment, wherein the first encrypted data is encrypted data obtained by the encryption equipment after encrypting original data sent by the intelligent terminal according to a first encryption algorithm; acquiring a first decryption algorithm corresponding to the first encryption algorithm according to the ID identification of the encryption equipment; decrypting the first encrypted data according to the first decryption algorithm to obtain the original data, wherein the original data comprises data information, an ID (identity) of target encryption equipment and an MAC (media access control) address of a target intelligent terminal; encrypting the original data according to the ID identification of the target encryption equipment and a target encryption algorithm to obtain second encrypted data; and sending the second encrypted data to the target encryption equipment, so that the target encryption equipment decrypts the second encrypted data according to a pre-stored second decryption algorithm to obtain the original data, and further, the target encryption equipment sends the data information to the target intelligent terminal.
Optionally, before receiving the first encrypted data sent by the encryption device, the method includes: receiving an authentication request sent by each encryption device, wherein the authentication request comprises an ID (identity) of the encryption device; and establishing communication connection with the encryption equipment according to the ID identification of the authentication request.
In a third aspect, the present invention provides a data encryption apparatus applied to an encryption device in a data encryption system, where the data encryption system includes an intelligent terminal, the encryption device, and a cloud server, the apparatus includes: the communication connection establishment module is used for establishing communication connection with the intelligent terminal and the cloud server; the original data receiving module is used for receiving original data sent by the intelligent terminal, wherein the original data comprises data information, an ID (identity) of target encryption equipment and an MAC (media access control) address of the target intelligent terminal; the first encryption module is used for encrypting the original data according to a first encryption algorithm to obtain first encrypted data; the first encrypted data sending module is used for sending the first encrypted data to the cloud server, enabling the cloud server to decrypt the first encrypted data and then encrypt the first encrypted data to obtain second encrypted data, enabling the server to send the second encrypted data to the target encryption device, enabling the target encryption device to decrypt the second encrypted data and then send the data information to the target intelligent terminal.
In a fourth aspect, the present invention provides a data encryption apparatus, applied to a cloud server of a data encryption system, where the data encryption system includes an intelligent terminal, an encryption device, and the cloud server, the apparatus includes: the first encrypted data receiving module is used for receiving first encrypted data sent by the encryption equipment, wherein the first encrypted data is encrypted data obtained by the encryption equipment after encrypting original data sent by the intelligent terminal according to a first encryption algorithm; the first decryption algorithm acquisition module is used for acquiring a first decryption algorithm corresponding to the first encryption algorithm according to the ID identification of the encryption equipment; the original data acquisition module is used for decrypting the first encrypted data according to the first decryption algorithm to acquire the original data, wherein the original data comprises data information, an ID (identity) of target encryption equipment and an MAC (media access control) address of a target intelligent terminal; the second encryption module is used for encrypting the original data according to the ID identification of the target encryption equipment and a target encryption algorithm to obtain second encrypted data; and the second encrypted data sending module is used for sending the second encrypted data to the target encryption equipment, so that the target encryption equipment decrypts the second encrypted data according to a pre-stored second decryption algorithm to obtain the original data, and the target encryption equipment also sends the data information to the target intelligent terminal.
In a fifth aspect, the present invention provides a data encryption system, the data encryption system including a plurality of intelligent terminals, a plurality of encryption devices, and a cloud server; the intelligent terminal is in wireless connection with the encryption equipment, and the encryption equipment is in wireless connection with the cloud server; the encryption equipment is used for receiving original data sent by the intelligent terminal, wherein the original data comprises data information, an ID (identity) of the target encryption equipment and an MAC (media access control) address of the target intelligent terminal; the encryption equipment is also used for encrypting the original data according to a first encryption algorithm to obtain first encrypted data, and sending the first encrypted data to the cloud server; the server is used for acquiring a first decryption algorithm corresponding to the first encryption algorithm according to the ID identification of the encryption equipment; the server is further configured to decrypt the first encrypted data according to the first decryption algorithm, so as to obtain the original data; the server is further used for encrypting the original data according to the ID identification of the target encryption equipment and the target encryption algorithm to obtain second encrypted data; the server is further configured to send the second encrypted data to the target encryption device, so that the target encryption device decrypts the second encrypted data according to a pre-stored second decryption algorithm to obtain the original data, and further sends the data information to the target intelligent terminal.
In a sixth aspect, the present invention provides a readable storage medium having stored thereon a computer program which when executed by a processor performs the steps of: establishing communication connection with the intelligent terminal and the cloud server; receiving original data sent by the intelligent terminal, wherein the original data comprises data information, an ID (identity) of target encryption equipment and an MAC (media access control) address of the target intelligent terminal; encrypting the original data according to a first encryption algorithm to obtain first encrypted data; and sending the first encrypted data to the cloud server, decrypting the first encrypted data by the cloud server, encrypting the first encrypted data to obtain second encrypted data, and sending the second encrypted data to the target encryption equipment by the server, so that the second encrypted data is decrypted by the target encryption equipment, and then sending the data information to the target intelligent terminal.
Compared with the prior art, the invention has the beneficial effects that:
according to the method, the device and the system, the original data to be sent are sent to the encryption device through the intelligent terminal, the encryption device encrypts the original data for the first time and then sends the encrypted data to the cloud server, the cloud server decrypts the received first encrypted data and then obtains a target encryption device address to be received in the original data, the cloud server encrypts the original data for the second time to obtain second encrypted data, then the second encrypted data are sent to the target encryption device, the target encryption device decrypts the second encrypted data and then obtains a target intelligent terminal address, and the target encryption device sends data information in the original data to the target intelligent terminal. Therefore, the data are encrypted twice through the encryption equipment and the cloud server, so that the data are encrypted, sent, received and decrypted, information leakage or theft is avoided, and the safety of data transmission is effectively ensured.
Drawings
Fig. 1 is a schematic flow chart of a data encryption method according to an embodiment of the present invention;
fig. 2 is a flow chart of another data encryption method according to an embodiment of the present invention;
fig. 3 is a block diagram of a data encryption device according to an embodiment of the present invention;
fig. 4 is a block diagram of another data encryption device according to an embodiment of the present invention;
fig. 5 is a schematic structural diagram of a data encryption system according to an embodiment of the present invention.
Detailed Description
For the purposes of making the objects, technical solutions and advantages of the embodiments of the present application more clear, the technical solutions of the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application, and it is apparent that the described embodiments are some embodiments of the present application, but not all embodiments. All other embodiments, which can be made by one of ordinary skill in the art without undue burden from the present disclosure, are within the scope of the present application based on the embodiments herein.
Fig. 1 is a schematic flow chart of a data encryption method according to an embodiment of the present invention; as shown in fig. 1, the data encryption method is applied to an encryption device in a data encryption system, wherein the data encryption system comprises an intelligent terminal, the encryption device and a cloud server, and the data encryption method specifically comprises the following steps:
and step S101, establishing communication connection with the intelligent terminal and the cloud server.
Specifically, establishing communication connection with the intelligent terminal and the cloud server, including: receiving a color light signal which is directionally transmitted by the intelligent terminal, wherein the color light signal is a combined color light generated by the intelligent terminal according to an SSID and a password of a wireless network and a coding rule; decoding the color optical signals according to the coding rule to obtain SSID and password of the wireless network; and establishing communication connection with the cloud server through the wireless network.
It should be noted that, in the embodiment of the present invention, the smart terminal includes, but is not limited to, a smart phone, a handheld PDA, and a tablet computer, and in this embodiment, taking the smart phone as an example, after a user inputs an SSID and a password of a wireless wifi network on the smart phone, the smart phone generates corresponding combined color light according to a preset encoding rule from the SSID and the password, and the smart phone directionally sends the color light signal to a receiver of the encryption device, so that the encryption device decodes according to the received color light signal to obtain the SSID and the password of the wireless network, so that the wireless network can be connected through the SSID and the password, and the encryption device establishes communication connection with the cloud server through the wireless network.
Further, establishing communication connection with the intelligent terminal and the cloud server, further includes: receiving a binding request sent by the intelligent terminal, wherein the binding request comprises an MAC address of the intelligent terminal; and binding the intelligent terminal according to the MAC address of the intelligent terminal, and establishing communication connection with the intelligent terminal.
It should be noted that, the data encryption system in this embodiment includes a plurality of encryption devices, each encryption device may bind a plurality of intelligent terminals, and each intelligent terminal has a MAC address that uniquely represents identity information, and after the MAC address of the intelligent terminal is bound in the corresponding encryption device, communication between the encryption device and the intelligent terminal may be implemented.
Step S102, receiving original data sent by the intelligent terminal, wherein the original data comprises data information, an ID (identity) of target encryption equipment and an MAC (media access control) address of the target intelligent terminal.
It should be noted that, the intelligent terminal packages the data information to be sent, the ID identifier of the target encryption device and the MAC address of the target intelligent terminal into the original data information, and sends the original data information to the encryption device, where the ID identifier of the target encryption device and the MAC address of the target intelligent terminal may be obtained by scanning a two-dimensional code or inputting by a user, or may be identified by other modes in the prior art, which is not described herein.
Step S103, encrypting the original data according to a first encryption algorithm to obtain first encrypted data.
It should be noted that, each encryption device stores a corresponding encryption mode, and the encryption modes stored by different encryption devices may be the same or different; the cloud server stores an encryption algorithm and a corresponding decryption algorithm in each encryption device; the encryption device encrypts the received original data according to a preset first encryption algorithm to obtain first encrypted data.
Step S104, the first encrypted data is sent to the cloud server, the cloud server decrypts the first encrypted data and encrypts the first encrypted data to obtain second encrypted data, the server sends the second encrypted data to the target encryption device, and the target encryption device decrypts the second encrypted data and sends the data information to the target intelligent terminal.
The encryption device sends the encrypted original data to a cloud server through a wireless network, the cloud server decrypts the received first encrypted data to obtain the original data, the original data is encrypted for the second time according to an ID (identity) identifier of a target encryption device in the original data to obtain second encrypted data, the second encrypted data is sent to the target encryption device to be decrypted for the second time, the target encryption device sends data information in the original data to a target intelligent terminal, the data is encrypted, sent, received and decrypted, and the safety of the data information is guaranteed.
Compared with the prior art, the invention has the beneficial effects that:
according to the method, the device and the system, the original data to be sent are sent to the encryption device through the intelligent terminal, the encryption device encrypts the original data for the first time and then sends the encrypted data to the cloud server, the cloud server decrypts the received first encrypted data and then obtains a target encryption device address to be received in the original data, the cloud server encrypts the original data for the second time to obtain second encrypted data, then the second encrypted data are sent to the target encryption device, the target encryption device decrypts the second encrypted data and then obtains a target intelligent terminal address, and the target encryption device sends data information in the original data to the target intelligent terminal. Therefore, the data are encrypted twice through the encryption equipment and the cloud server, so that the data are encrypted, sent, received and decrypted, information leakage or theft is avoided, and the safety of data transmission is effectively ensured.
In an embodiment of the present invention, after the communication connection is established with the intelligent terminal and the cloud server, the method further includes: receiving third encrypted data sent by the cloud server; decrypting the third encrypted data according to a third decryption algorithm to obtain the original data; acquiring the MAC address of the target intelligent terminal according to the original data; and sending the data information in the original data to the target intelligent terminal.
It should be noted that, the encryption device in this embodiment needs to encrypt and send the received original data to the cloud server, and also needs to decrypt and send the encrypted data forwarded by the cloud server, obtain the MAC address of the target intelligent terminal in the original data, and send the data information in the original data to the target intelligent terminal.
Fig. 2 is a flow chart of another data encryption method according to an embodiment of the present invention; as shown in fig. 2, the data encryption method is applied to a cloud server in a data encryption system, wherein the data encryption system comprises an intelligent terminal, encryption equipment and the cloud server, and the data encryption method specifically comprises the following steps:
step S201, receiving first encrypted data sent by the encryption equipment, wherein the first encrypted data is encrypted data obtained by the encryption equipment after encrypting original data sent by the intelligent terminal according to a first encryption algorithm;
step S202, a first decryption algorithm corresponding to the first encryption algorithm is obtained according to the ID identification of the encryption equipment;
step 203, decrypting the first encrypted data according to the first decryption algorithm to obtain the original data, where the original data includes data information, an ID identifier of a target encryption device, and an MAC address of a target intelligent terminal;
step S204, encrypting the original data according to the ID identification of the target encryption equipment and a target encryption algorithm to obtain second encrypted data;
step S205, sending the second encrypted data to the target encryption device, so that the target encryption device decrypts the second encrypted data according to a pre-stored second decryption algorithm to obtain the original data, and further, sending the data information to the target intelligent terminal by the target encryption device.
It should be noted that, according to the received first encrypted data, the cloud server in this embodiment obtains an ID identifier of an encryption device that sends the first encrypted data, obtains a first decryption algorithm that corresponds to the first encryption algorithm according to the ID identifier, and decrypts the first encrypted data by using the first decryption algorithm to obtain original data; and the cloud server further acquires a target encryption algorithm matched with the target encryption device according to the target encryption device in the original data, performs second encryption on the original data through the target encryption algorithm to obtain second encrypted data, and sends the second encrypted data to the target encryption device for decryption, so that the target encryption device sends data information in the original data to a target intelligent terminal.
Fig. 3 is a block diagram of a data encryption device according to an embodiment of the present invention; as shown in fig. 3, the data encryption apparatus is applied to an encryption device in a data encryption system, the data encryption system including an intelligent terminal, the encryption device, and a cloud server, the apparatus including:
a communication connection establishment module 310, configured to establish a communication connection with the intelligent terminal and the cloud server;
the original data receiving module 320 is configured to receive original data sent by the intelligent terminal, where the original data includes data information, an ID identifier of a target encryption device, and a MAC address of the target intelligent terminal;
the first encryption module 330 is configured to encrypt the original data according to a first encryption algorithm to obtain first encrypted data;
the first encrypted data sending module 340 is configured to send the first encrypted data to the cloud server, decrypt the first encrypted data by the cloud server, and then encrypt the first encrypted data to obtain second encrypted data, and further send the second encrypted data to the target encryption device by the server, so that the target encryption device decrypts the second encrypted data and then sends the data information to the target intelligent terminal.
Fig. 4 is a block diagram of a data encryption device according to an embodiment of the present invention; as shown in fig. 4, the data encryption apparatus is applied to a cloud server of a data encryption system, the data encryption system including an intelligent terminal, an encryption device, and the cloud server, the apparatus includes:
a first encrypted data receiving module 410, configured to receive first encrypted data sent by the encryption device, where the first encrypted data is encrypted data obtained by encrypting, by the encryption device, original data sent by the intelligent terminal according to a first encryption algorithm;
a first decryption algorithm obtaining module 420, configured to obtain a first decryption algorithm corresponding to the first encryption algorithm according to the ID identifier of the encryption device;
the original data obtaining module 430 is configured to decrypt the first encrypted data according to the first decryption algorithm, and obtain the original data, where the original data includes data information, an ID identifier of a target encryption device, and a MAC address of a target intelligent terminal;
a second encryption module 440, configured to encrypt the original data according to a target encryption algorithm according to the ID of the target encryption device, to obtain second encrypted data;
and a second encrypted data sending module 450, configured to send the second encrypted data to the target encryption device, enable the target encryption device to decrypt the second encrypted data according to a pre-stored second decryption algorithm to obtain the original data, and enable the target encryption device to send the data information to the target intelligent terminal.
Fig. 5 is a schematic structural diagram of a data encryption system according to an embodiment of the present invention, where the data encryption system according to an embodiment of the present invention includes a plurality of intelligent terminals, a plurality of encryption devices, and a cloud server, the intelligent terminals are wirelessly connected with the encryption devices, and the encryption devices are wirelessly connected with the cloud server;
the encryption equipment is used for receiving original data sent by the intelligent terminal, wherein the original data comprises data information, an ID (identity) of the target encryption equipment and an MAC (media access control) address of the target intelligent terminal;
the encryption equipment is also used for encrypting the original data according to a first encryption algorithm to obtain first encrypted data, and sending the first encrypted data to the cloud server;
the server is used for acquiring a first decryption algorithm corresponding to the first encryption algorithm according to the ID identification of the encryption equipment;
the server is further configured to decrypt the first encrypted data according to the first decryption algorithm, so as to obtain the original data;
the server is further used for encrypting the original data according to the ID identification of the target encryption equipment and the target encryption algorithm to obtain second encrypted data;
the server is further configured to send the second encrypted data to the target encryption device, so that the target encryption device decrypts the second encrypted data according to a pre-stored second decryption algorithm to obtain the original data, and further sends the data information to the target intelligent terminal.
In one embodiment of the invention, the encryption device consists of four main parts, (1) a power supply part (2) a WF-M620 module part (3) a color sensor part (4) a LED tri-color light part; (1) the power supply part is powered by 110-250V alternating current, and an HLK power supply module is adopted to convert and stably output 3.3V on-board current; (2) a color sensor part connected with the WIFI through the color sensor; (3) WF-M620 module, personal information receiving, authentication and encryption transmission; (4) and the LED tri-color lamp part intuitively reflects the working state of the current module.
The working process of the encryption equipment provided by the embodiment of the invention is as follows: after the plug of the encryption equipment is electrified, WIFI is connected and identity authentication information is bound, the equipment automatically enters a working state, equipment state information is represented through an LED three-color lamp, after entering the working state, interaction information of binding equipment used by a user such as a mobile phone, a tablet and the like can pass through identity authentication and encryption of security equipment, and information security of the user is protected.
In another embodiment of the invention, a computer device is provided comprising a memory, a processor and a computer program stored on the memory and executable on the processor, the processor implementing the steps of: establishing communication connection with the intelligent terminal and the cloud server; receiving original data sent by the intelligent terminal, wherein the original data comprises data information, an ID (identity) of target encryption equipment and an MAC (media access control) address of the target intelligent terminal; encrypting the original data according to a first encryption algorithm to obtain first encrypted data; and sending the first encrypted data to the cloud server, decrypting the first encrypted data by the cloud server, encrypting the first encrypted data to obtain second encrypted data, and sending the second encrypted data to the target encryption equipment by the server, so that the second encrypted data is decrypted by the target encryption equipment, and then sending the data information to the target intelligent terminal.
In yet another embodiment of the present invention, there is provided a readable storage medium having stored thereon a computer program which when executed by a processor performs the steps of: establishing communication connection with the intelligent terminal and the cloud server; receiving original data sent by the intelligent terminal, wherein the original data comprises data information, an ID (identity) of target encryption equipment and an MAC (media access control) address of the target intelligent terminal; encrypting the original data according to a first encryption algorithm to obtain first encrypted data; and sending the first encrypted data to the cloud server, decrypting the first encrypted data by the cloud server, encrypting the first encrypted data to obtain second encrypted data, and sending the second encrypted data to the target encryption equipment by the server, so that the second encrypted data is decrypted by the target encryption equipment, and then sending the data information to the target intelligent terminal.
Those skilled in the art will appreciate that all or part of the processes in the methods of the above embodiments may be implemented by a computer program for instructing relevant hardware, where the program may be stored in a non-volatile computer readable storage medium, and where the program, when executed, may include processes in the embodiments of the methods described above. Any reference to memory, storage, database, or other medium used in the various embodiments provided herein may include non-volatile and/or volatile memory. The nonvolatile memory can include Read Only Memory (ROM), programmable ROM (PROM), electrically Programmable ROM (EPROM), electrically Erasable Programmable ROM (EEPROM), or flash memory. Volatile memory can include Random Access Memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in a variety of forms such as Static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double Data Rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous Link DRAM (SLDRAM), memory bus direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), among others.
It should be noted that in this document, relational terms such as "first" and "second" and the like are used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Moreover, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising one … …" does not exclude the presence of other like elements in a process, method, article, or apparatus that comprises the element.
Claims (8)
1. A data encryption method, characterized by being applied to an encryption device in a data encryption system, wherein the data encryption system comprises an intelligent terminal, the encryption device and a cloud server, the method comprising:
establishing communication connection with the intelligent terminal and the cloud server;
receiving original data sent by the intelligent terminal, wherein the original data comprises data information, an ID (identity) of target encryption equipment and an MAC (media access control) address of the target intelligent terminal;
encrypting the original data according to a first encryption algorithm to obtain first encrypted data;
the first encrypted data is sent to the cloud server, the cloud server decrypts the first encrypted data and encrypts the first encrypted data to obtain second encrypted data, the server sends the second encrypted data to the target encryption device, and the target encryption device decrypts the second encrypted data and sends the data information to the target intelligent terminal;
communication connection is established with the intelligent terminal and the cloud server, and the communication connection comprises the following steps: receiving a color light signal which is directionally transmitted by the intelligent terminal, wherein the color light signal is a combined color light generated by the intelligent terminal according to an SSID and a password of a wireless network and a coding rule; decoding the color optical signals according to the coding rule to obtain SSID and password of the wireless network; establishing communication connection with the cloud server through the wireless network;
after the communication connection is established with the intelligent terminal and the cloud server, the method further comprises the following steps: receiving third encrypted data sent by the cloud server; decrypting the third encrypted data according to a third decryption algorithm to obtain the original data; acquiring the MAC address of the target intelligent terminal according to the original data; and sending the data information in the original data to the target intelligent terminal.
2. The data encryption method of claim 1, wherein establishing a communication connection with the intelligent terminal and the cloud server further comprises:
receiving a binding request sent by the intelligent terminal, wherein the binding request comprises an MAC address of the intelligent terminal;
and binding the intelligent terminal according to the MAC address of the intelligent terminal, and establishing communication connection with the intelligent terminal.
3. A data encryption method, characterized by being applied to a cloud server of a data encryption system, wherein the data encryption system comprises an intelligent terminal, an encryption device and the cloud server, the method comprising:
receiving first encrypted data sent by the encryption equipment, wherein the first encrypted data is encrypted data obtained by the encryption equipment after encrypting original data sent by the intelligent terminal according to a first encryption algorithm;
acquiring a first decryption algorithm corresponding to the first encryption algorithm according to the ID identification of the encryption equipment;
decrypting the first encrypted data according to the first decryption algorithm to obtain the original data, wherein the original data comprises data information, an ID (identity) of target encryption equipment and an MAC (media access control) address of a target intelligent terminal;
encrypting the original data according to the ID identification of the target encryption equipment and a target encryption algorithm to obtain second encrypted data;
the second encrypted data is sent to the target encryption equipment, so that the target encryption equipment decrypts the second encrypted data according to a pre-stored second decryption algorithm to obtain the original data, and the target encryption equipment sends the data information to the target intelligent terminal;
the method for establishing communication connection with the intelligent terminal and the encryption equipment comprises the following steps: the encryption equipment receives a color light signal which is directionally transmitted by the intelligent terminal, wherein the color light signal is a combined color light generated by the intelligent terminal according to an SSID and a password of a wireless network and a coding rule; the encryption equipment decodes the color optical signals according to the coding rule to acquire the SSID and the password of the wireless network, so that communication connection is established between the wireless network and the encryption equipment;
after establishing a communication connection with the intelligent terminal and the encrypted device, the method further comprises: transmitting third encrypted data to the encryption equipment, so that the encryption equipment decrypts the third encrypted data according to a third decryption algorithm to obtain the original data; the encryption equipment is further enabled to acquire the MAC address of the target intelligent terminal according to the original data; and the encryption equipment transmits the data information in the original data to the target intelligent terminal.
4. A data encryption method according to claim 3, wherein prior to receiving the first encrypted data transmitted by the encryption device, the method comprises:
receiving an authentication request sent by each encryption device, wherein the authentication request comprises an ID (identity) of the encryption device;
and establishing communication connection with the encryption equipment according to the ID identification of the authentication request.
5. A data encryption apparatus based on the data encryption method of claim 1, characterized by being applied to an encryption device in a data encryption system including an intelligent terminal, the encryption device, and a cloud server, the apparatus comprising:
the communication connection establishment module is used for establishing communication connection with the intelligent terminal and the cloud server;
the original data receiving module is used for receiving original data sent by the intelligent terminal, wherein the original data comprises data information, an ID (identity) of target encryption equipment and an MAC (media access control) address of the target intelligent terminal;
the first encryption module is used for encrypting the original data according to a first encryption algorithm to obtain first encrypted data;
the first encrypted data sending module is used for sending the first encrypted data to the cloud server, enabling the cloud server to decrypt the first encrypted data and then encrypt the first encrypted data to obtain second encrypted data, enabling the server to send the second encrypted data to the target encryption device, enabling the target encryption device to decrypt the second encrypted data and then send the data information to the target intelligent terminal.
6. A data encryption apparatus based on the data encryption method of claim 3, characterized by being applied to a cloud server of a data encryption system including an intelligent terminal, an encryption device, and the cloud server, the apparatus comprising:
the first encrypted data receiving module is used for receiving first encrypted data sent by the encryption equipment, wherein the first encrypted data is encrypted data obtained by the encryption equipment after encrypting original data sent by the intelligent terminal according to a first encryption algorithm;
the first decryption algorithm acquisition module is used for acquiring a first decryption algorithm corresponding to the first encryption algorithm according to the ID identification of the encryption equipment;
the original data acquisition module is used for decrypting the first encrypted data according to the first decryption algorithm to acquire the original data, wherein the original data comprises data information, an ID (identity) of target encryption equipment and an MAC (media access control) address of a target intelligent terminal;
the second encryption module is used for encrypting the original data according to the ID identification of the target encryption equipment and a target encryption algorithm to obtain second encrypted data;
and the second encrypted data sending module is used for sending the second encrypted data to the target encryption equipment, so that the target encryption equipment decrypts the second encrypted data according to a pre-stored second decryption algorithm to obtain the original data, and the target encryption equipment also sends the data information to the target intelligent terminal.
7. The data encryption system is characterized by comprising a plurality of intelligent terminals, a plurality of encryption devices and a cloud server;
the intelligent terminal is in wireless connection with the encryption equipment, and the encryption equipment is in wireless connection with the cloud server;
the encryption equipment is used for receiving original data sent by the intelligent terminal, wherein the original data comprises data information, an ID (identity) of the target encryption equipment and an MAC (media access control) address of the target intelligent terminal;
the encryption equipment is also used for encrypting the original data according to a first encryption algorithm to obtain first encrypted data, and sending the first encrypted data to the cloud server;
the server is used for acquiring a first decryption algorithm corresponding to the first encryption algorithm according to the ID identification of the encryption equipment;
the server is further configured to decrypt the first encrypted data according to the first decryption algorithm, so as to obtain the original data;
the server is further used for encrypting the original data according to the ID identification of the target encryption equipment and the target encryption algorithm to obtain second encrypted data;
the server is further configured to send the second encrypted data to the target encryption device, so that the target encryption device decrypts the second encrypted data according to a pre-stored second decryption algorithm to obtain the original data, and further sends the data information to the target intelligent terminal;
communication connection is established with the intelligent terminal and the cloud server, and the communication connection comprises the following steps: receiving a color light signal which is directionally transmitted by the intelligent terminal, wherein the color light signal is a combined color light generated by the intelligent terminal according to an SSID and a password of a wireless network and a coding rule; decoding the color optical signals according to the coding rule to obtain SSID and password of the wireless network; establishing communication connection with the cloud server through the wireless network;
the encryption equipment is further used for receiving third encryption data sent by the cloud server after communication connection is established between the intelligent terminal and the cloud server; decrypting the third encrypted data according to a third decryption algorithm to obtain the original data; acquiring the MAC address of the target intelligent terminal according to the original data; and sending the data information in the original data to the target intelligent terminal.
8. A readable storage medium having stored thereon a computer program, which when executed by a processor realizes the steps of the method according to any of claims 1 to 4.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011047322.3A CN112202768B (en) | 2020-09-29 | 2020-09-29 | Data encryption method, device and system and readable storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011047322.3A CN112202768B (en) | 2020-09-29 | 2020-09-29 | Data encryption method, device and system and readable storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN112202768A CN112202768A (en) | 2021-01-08 |
| CN112202768B true CN112202768B (en) | 2023-05-12 |
Family
ID=74007864
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202011047322.3A Active CN112202768B (en) | 2020-09-29 | 2020-09-29 | Data encryption method, device and system and readable storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN112202768B (en) |
Families Citing this family (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113283265A (en) * | 2021-05-14 | 2021-08-20 | 苏州惟信易量智能科技有限公司 | Data reading device, method and system |
| CN113343281A (en) * | 2021-07-09 | 2021-09-03 | 广东电网有限责任公司 | OTP encryption as a service cloud computing method and system oriented to data transaction |
| CN116566714A (en) * | 2023-05-29 | 2023-08-08 | 深圳感臻智能股份有限公司 | Intelligent house data transmission method and system |
Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101197674A (en) * | 2007-12-10 | 2008-06-11 | 华为技术有限公司 | Encrypted communication method, server and encrypted communication system |
| CN103987033A (en) * | 2014-04-23 | 2014-08-13 | 微梦创科网络科技（中国）有限公司 | Method, device and system for equipment to be connected with Wi-Fi network |
| CN104580167A (en) * | 2014-12-22 | 2015-04-29 | 腾讯科技（深圳）有限公司 | Data transmission method, device and system |
| CN104980397A (en) * | 2014-04-03 | 2015-10-14 | 腾讯科技（深圳）有限公司 | Instant messaging method, system and terminal |
| CN105337969A (en) * | 2015-10-19 | 2016-02-17 | 朱建龙 | Safety communication method between two mobile terminals |
| CN106792991A (en) * | 2016-12-05 | 2017-05-31 | 美的智慧家居科技有限公司 | Wi Fi devices, networked devices and networking method |
| CN109087415A (en) * | 2018-07-17 | 2018-12-25 | 珠海格力电器股份有限公司 | Cloud-based data transmission method and device |
| US10516527B1 (en) * | 2015-04-17 | 2019-12-24 | EMC IP Holding Company LLC | Split-key based cryptography system for data protection and synchronization across multiple computing devices |
-
2020
- 2020-09-29 CN CN202011047322.3A patent/CN112202768B/en active Active
Patent Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101197674A (en) * | 2007-12-10 | 2008-06-11 | 华为技术有限公司 | Encrypted communication method, server and encrypted communication system |
| CN104980397A (en) * | 2014-04-03 | 2015-10-14 | 腾讯科技（深圳）有限公司 | Instant messaging method, system and terminal |
| CN103987033A (en) * | 2014-04-23 | 2014-08-13 | 微梦创科网络科技（中国）有限公司 | Method, device and system for equipment to be connected with Wi-Fi network |
| CN104580167A (en) * | 2014-12-22 | 2015-04-29 | 腾讯科技（深圳）有限公司 | Data transmission method, device and system |
| US10516527B1 (en) * | 2015-04-17 | 2019-12-24 | EMC IP Holding Company LLC | Split-key based cryptography system for data protection and synchronization across multiple computing devices |
| CN105337969A (en) * | 2015-10-19 | 2016-02-17 | 朱建龙 | Safety communication method between two mobile terminals |
| CN106792991A (en) * | 2016-12-05 | 2017-05-31 | 美的智慧家居科技有限公司 | Wi Fi devices, networked devices and networking method |
| CN109087415A (en) * | 2018-07-17 | 2018-12-25 | 珠海格力电器股份有限公司 | Cloud-based data transmission method and device |
Also Published As
| Publication number | Publication date |
|---|---|
| CN112202768A (en) | 2021-01-08 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN112202768B (en) | Data encryption method, device and system and readable storage medium | |
| CN110177354B (en) | Wireless control method and system for vehicle | |
| CN113055867B (en) | Terminal auxiliary network distribution method and device and electronic equipment | |
| US11863541B2 (en) | System and method for end-to-end secure communication in device-to-device communication networks | |
| US7721325B2 (en) | Method and apparatus for managing communication security in wireless network | |
| US7930556B2 (en) | Fingerprint system and method for access control | |
| US20050054369A1 (en) | System and method for wireless LAN connection, wireless terminal and computer program thereof | |
| CN105308995A (en) | Wireless configuration using passive near field communication | |
| CN102739642A (en) | Permitting access to a network | |
| CN105227516A (en) | The access method of Smart Home, control centre's equipment and dress terminal | |
| CN104952128A (en) | Intelligent handheld terminal based electronic unlocking system and unlocking method thereof | |
| US20140073292A1 (en) | Method and system for transfering profiles of authentication module | |
| US20150264052A1 (en) | System and method for managing mobile device using device-to-device communication | |
| JP4917116B2 (en) | Data encryption system, communication device, and data encryption method | |
| US20160328714A1 (en) | Method and apparatus for authenticating payment related information in mobile communication system | |
| CN104660567A (en) | D2D terminal access authentication method as well as D2D terminal and server | |
| CN109194701B (en) | Data processing method and device | |
| CN103415010A (en) | D2D network authentication method and system | |
| US20220311625A1 (en) | Certificate Application Method And Device | |
| CN106452999B (en) | Intelligent household appliance and method and device for safely accessing intelligent household appliance | |
| CN108881256B (en) | Secret key exchange method and device, hydroelectric pile and network equipment | |
| CN110166410B (en) | Method and terminal for safely transmitting data and multimode communication terminal | |
| CN110866999A (en) | Control method and device for intelligent door lock and storage medium | |
| KR101745482B1 (en) | Communication method and apparatus in smart-home system | |
| JP7099461B2 (en) | Wireless communication equipment, wireless communication methods and wireless communication systems |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |