CN114338217B - Data encryption transmission method - Google Patents

Abstract

The invention discloses a data encryption and transmission method, which relates to the technical field of data encryption and solves the technical problem that the existing technology uses a fixed key to encrypt and decrypt data, resulting in low data encryption and transmission security; the invention sets Divide the plaintext data into several sub-data by unit amount, number the several sub-data, reorder the numbers and corresponding sub-data according to the natural order, obtain the number sequence and data sequence, and pair the number sequence and data through different keys The sequences are respectively encrypted to achieve the purpose of data encryption, and double encryption improves the security of data; before reordering the numbers and corresponding sub-data, the present invention obtains the location feature tags of the corresponding numbers, and the reference nodes are randomly selected, and at the same time, according to The numbering sequence can quickly determine the reference node; the invention improves the difficulty of data cracking and further ensures the security of the data.

Description

A data encryption transmission method

Technical field

The invention belongs to the field of data encryption technology, specifically a data encryption transmission method.

Background technique

With the increasing type and quantity of data, data storage encryption technology has been increasingly used and has become an effective method to protect data security. Data storage encryption technology usually refers to using specific technology to encrypt data before writing it to the device to ensure the security of the data on the storage device.

In the prior art, an encryption and decryption unit is usually used to encrypt data. The encryption and decryption unit uses a fixed key to encrypt the data and a fixed key to decrypt the stored data. The encryption and decryption unit usually uses a fixed and single key. There is the possibility of being cracked by brute force, and directly encrypting the entire data without processing will also increase the possibility of data leakage; therefore, a data encryption transmission method is urgently needed.

Contents of the invention

The present invention aims to solve at least one of the technical problems existing in the prior art; to this end, the present invention proposes a data encryption transmission method to solve the problem that the prior art uses a fixed key to encrypt and decrypt data, resulting in data encryption. and low transmission security. Before encrypting the data, the present invention divides and numbers the data according to the dividing rules, and then encrypts the data and the processed numbers respectively, and then transmits the encrypted data through a secure transmission channel. transmitted to the target terminal.

In order to achieve the above object, a data encryption transmission method is proposed according to an embodiment of the first aspect of the present invention, including:

After receiving the plaintext data, divide the plaintext data into several sub-data; randomly select numbers from the number pool to number the several sub-data, and the several sub-data are related to the corresponding numbers;

Obtain the location feature label of the number, and associate the number with the location feature label; where the location feature label represents the positional relationship between the number and the reference node;

Rearrange the numbers and corresponding sub-data according to the natural order of the numbers, generate a number sequence based on several numbers after the arrangement and the corresponding position feature labels, and at the same time concatenate the arranged sub-data and label it as a data sequence;

The data sequence and number sequence are encrypted using different keys, and the encrypted data and key tags are transmitted to the target terminal through a secure transmission channel; where the secure transmission channel is established through the blockchain node.

Preferably, dividing the plaintext data includes:

Divide the plaintext data according to the set unit amount; where the unit amount includes the unit data amount or the unit number of characters;

Those that do not satisfy a unit data volume or unit number of characters are classified as sub-data.

Preferably, the number pool is established based on the number of sub-data, including:

Get the number of sub-data and mark it as N; where N is an integer not less than 2;

Randomly select N natural numbers and establish a numbering pool based on the N natural numbers.

Preferably, obtaining the numbered location feature label includes:

Before the numbers are reordered, any number is selected as a reference node;

Obtain the positional relationship between the number and the reference node, and convert it into a positional feature label; where the positional feature label is an integer.

Preferably, the numbering sequence includes several numbering arrays, each numbering array includes a number and a corresponding position feature label, and the numbering arrays in the numbering sequence are arranged in a natural order.

Preferably, the natural order includes from large to small or from small to large.

Preferably, encrypting the data sequence and the numbering sequence includes:

Two different keys are selected from the key pool according to the data type or randomly, and the data sequence and number sequence are encrypted respectively with two different keys.

Preferably, the data types include text, pictures and videos, and there are no less than two keys corresponding to each data type in the key pool.

Preferably, the secure transmission channel is established through a blockchain node, and before the secure transmission channel is established, the data sender and the data requester are verified through the blockchain node.

Compared with the prior art, the beneficial effects of the present invention are:

1. The present invention divides the plaintext data into several sub-data by setting the unit amount, numbers the several sub-data, reorders the numbers and corresponding sub-data according to the natural order, obtains the number sequence and data sequence, and obtains the number sequence and data sequence through different The key encrypts the number sequence and the data sequence separately to achieve the purpose of data encryption. Double encryption improves the security of the data.

2. Before reordering the numbers and corresponding sub-data, the present invention obtains the location feature tags corresponding to the numbers, and randomly selects the reference nodes. At the same time, the reference nodes can be quickly determined based on the number sequence; the present invention improves the difficulty of data cracking. , further ensuring data security.

Description of the drawings

Figure 1 is a schematic diagram of the working steps of the present invention.

Detailed ways

The technical solution of the present invention will be clearly and completely described below with reference to the embodiments. Obviously, the described embodiments are only some of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts fall within the scope of protection of the present invention.

With the increasing type and quantity of data, in order to avoid losses caused by leakage of sensitive data such as company data and customer data, data storage encryption technology has been widely used and has become an effective method to protect data security; data storage encryption technology It usually refers to using specific technology to encrypt data before writing it to the storage device to ensure the security of the data stored on the storage device. Correspondingly, when reading the stored data, corresponding technology is used to decrypt the data.

According to the implementation method, data storage encryption technology can be divided into methods such as host software encryption, encrypted storage security switches, embedded special encryption devices, and encryption mechanisms based on the storage device itself. The logical architecture of various methods usually includes encryption and decryption units and encryption. Key management center; among them, the encryption and decryption unit usually refers to the functional unit that uses a fixed key to encrypt the data to be stored and decrypts the read stored data using a fixed key; the key management center usually refers to the functional unit responsible for storing the key. keys, and functional units that perform management operations such as key replacement.

In the prior art, an encryption and decryption unit is usually used to encrypt data. The encryption and decryption unit uses a fixed key to encrypt the data and a fixed key to decrypt the stored data. The encryption and decryption unit usually uses a fixed and single key. There is the possibility of being cracked by brute force, and directly encrypting the entire data without processing will also increase the possibility of data leakage; before encrypting the data, the present invention divides and numbers the data according to the dividing rules, and then sums up the data. The processed numbers are encrypted separately, and then the encrypted data is transmitted to the target terminal through a secure transmission channel.

Please refer to Figure 1. This application provides a data encryption transmission method, including:

After receiving the plaintext data, divide the plaintext data into several sub-data; randomly select numbers from the number pool to number the several sub-data, and the several sub-data are related to the corresponding numbers;

Obtain the location feature label of the number, associate the number with the location feature label; rearrange the number and the corresponding sub-data according to the natural order of the number, generate a number sequence based on the number and the corresponding location feature label after the arrangement, and at the same time, arrange the The subsequent sub-data concatenation is marked as a data sequence;

The data sequence and number sequence are encrypted using different keys, and the encrypted data and key tags are transmitted to the target terminal through a secure transmission channel.

This application proposes a new data encryption method. After data is encrypted through this data encryption method, the encrypted data is then sent to the target terminal through a secure transmission channel; the target terminal in this application can represent the data recipient, specifically including intelligent Mobile phones, computers and servers.

In this application, plaintext data is divided, including:

Divide the plaintext data according to the set unit data amount or unit character number;

Those that do not satisfy a unit data volume or unit number of characters are classified as sub-data.

In one embodiment, the plaintext data is divided by a set unit data amount; for example: the plaintext data is 1.15Mb, and when the set unit data amount is 0.5Mb, the plaintext data is divided into three sub-sections. Data, when the set unit data amount is 0.1Mb, the plaintext data is divided into twelve sub-data; it can be understood that when the plaintext data is divided, it is usually from one end to the other end.

In another embodiment, the plaintext data is divided by the set number of unit characters; for example: the plaintext data is a string containing 110 characters. When the set number of unit characters is 20, then the plaintext data It is divided into six sub-data. When the set number of unit characters is 30, the plaintext data is divided into four sub-data.

In some other preferred embodiments, the set unit amount also includes the number of unit frames, which is used to divide video and other data.

In this application, the number pool is established based on the number of sub-data, including:

Get the number of sub-data and mark it as N;

Randomly select N natural numbers and establish a numbering pool based on the N natural numbers.

In this application, N is an integer not less than 2, and it also means that the number of sub-data is not less than two. A numbering pool is constructed based on the selected natural numbers. Data can be selected one by one from the numbering pool, or the numbering pool can be selected at once. All natural numbers in .

It is worth noting that this application arbitrarily selects N natural numbers. These N natural numbers do not need to be consecutive, but they are required to be N different natural numbers. For example: assuming there are 5 sub-data, the natural numbers that can be selected are such as 1, 2, 3, 4, 5, such as 2, 3, 4, 5, 6, such as 5, 6, 7, 8, 3; but it cannot be 1, 1, 2, 3, 4.

In this application, the numbered location feature labels are obtained, including:

Before the numbers are reordered, any number is selected as a reference node;

Obtain the positional relationship between the number and the reference node and convert it into a positional feature label.

The location feature labels in this application are integers, including positive integers, 0 and negative integers.

For example: Assume that before reordering, the numbers of the five sub-data divided into are 3, 2, 5, 6, and 1 respectively;

Explanation Example 1: Use the number 3 corresponding to the first sub-data as the reference node. The position difference between the first number 3 and the reference node is 0, then its corresponding position feature label is 0; the second number 2 and the reference node If the position difference between nodes is 1, then its corresponding position feature label is 1, and so on, then the position feature labels of the third number 5, the fourth number 6, and the fifth number 1 are 2, 3 and 1 respectively. 4.

Explanation Example 2: Use the number 1 corresponding to the last sub-data as the reference node. The position difference between the first number 3 and the reference node is 4, then its corresponding position feature label is -4; the second number 2 and the reference node If the position difference between nodes is 3, then its corresponding position feature label is -3, and so on, then the position feature labels of the third number 5, the fourth number 6, and the fifth number 1 are -2, -1 and 0.

Explanation Example 3: Use the number 5 corresponding to the intermediate sub-data as the reference node. The position difference between the first number 3 and the reference node is 2, then its corresponding position feature label is -2; the second number 2 and the reference node If the position difference between them is 1, then the corresponding position feature label is -1, and so on, then the position feature labels of the third number 5, the fourth number 6, and the fifth number 1 are 0, 1 and 1 respectively. 2.

The numbering sequence in this application includes several numbering arrays, each numbering array includes a number and a corresponding position feature label, and the numbering arrays in the numbering sequence are arranged in a natural order; according to the above explanation example one and explanation example two and Example 3 to obtain the corresponding number sequence respectively.

For the first explanation example, the corresponding number sequence is [(1,0), (2,1), (3,2), (5,3), (6,4)]; for the second explanation example, the corresponding The numbering sequence is [(1,-4),(2,-3),(3,-2),(5,-1),(6,0)]; for example three, the corresponding numbering sequence is [(1,-2),(2,-1),(3,0),(5,1),(6,2)].

It is worth noting that the natural order in this application includes from small to large or from large to small; taking Explanation Example 1, Example 2 and Example 3 as examples, the numbering sequence obtained by rearranging it from small to large has been mentioned above. To, rearrange and obtain the number sequence in order from small to large as follows: For example 1, the corresponding number sequence is [(6,0),(5,1),(3,2),(2,3) ,(1,4)]; for the second example, the corresponding number sequence is [(6,-4),(5,-3),(3,-2),(2,-1),(1 ,0)]; for the third example, the corresponding number sequence is [(6,-2), (5,-1), (3,0), (2,1), (1,2)].

It can be understood that users who know the steps to obtain the number sequence can obtain the original sequence of the corresponding sub-data based on any unencrypted number sequence, and decrypt the sub-data to obtain the correct sequence of plain text data.

In this application, the data sequence and numbering sequence are encrypted, including:

Two different keys are selected from the key pool according to the data type or randomly, and the data sequence and number sequence are encrypted respectively with two different keys.

In this application, two different keys are used to encrypt the number sequence and the data sequence. If the number sequence and the data sequence are both text data, text type data requires at least two different keys, so the key pool There are no less than two keys corresponding to each data type, and the data types include text, pictures, videos, etc.

It is worth noting that the data sequence in this application is generated from the out-of-order sub-data obtained after the numbers are rearranged in natural order. That is, the data sequence is decrypted and the sub-data is concatenated. The data obtained is not equal to the plain text. Data, in fact, the sub-data in the data sequence has been disrupted due to number rearrangement, so as to achieve the purpose of double encryption.

The secure transmission channel in this application is established through a blockchain node, and before the secure transmission channel is established, the data sender and the data requester are verified through the blockchain node; the verification in this application refers to the data reception After the rationality and compliance of both parties are verified, a data transmission channel between the two will be established based on the blockchain node.

One of the core points of this application: this invention divides the plaintext data into several sub-data by setting the unit amount, numbers the several sub-data, reorders the numbers and corresponding sub-data according to the natural order, and obtains the number sequence and The data sequence is encrypted separately through different keys to achieve the purpose of data encryption. Double encryption improves the security of the data.

The second core point of this application: before reordering the numbers and corresponding sub-data, the present invention obtains the location feature tags corresponding to the numbers, and randomly selects the reference nodes. At the same time, the reference nodes can be quickly determined according to the number sequence; the present invention It increases the difficulty of data cracking and further ensures the security of data.

Some of the data in the above formula are calculated by removing the dimensions and taking their numerical values. The formula is a formula closest to the real situation obtained through software simulation of a large amount of collected data; the preset parameters and preset thresholds in the formula are determined by those skilled in the art. It is set according to the actual situation or obtained through a large amount of data simulation.

Working principle of the invention:

After receiving the plaintext data, divide the plaintext data into several sub-data; randomly select numbers from the number pool to number several sub-data, and several sub-data are associated with the corresponding numbers; obtain the location feature label of the number, and combine the number and location features. tags to associate.

The numbers and corresponding sub-data are rearranged according to the natural order of the numbers, and a number sequence is generated based on the number and corresponding position feature labels after the arrangement. At the same time, the arranged sub-data are concatenated and marked as a data sequence.

The data sequence and number sequence are encrypted using different keys, and the encrypted data and key tags are transmitted to the target terminal through a secure transmission channel.

The above embodiments are only used to illustrate the technical methods of the present invention and are not limiting. Although the present invention has been described in detail with reference to the preferred embodiments, those of ordinary skill in the art should understand that the technical methods of the present invention can be modified or equivalently substituted. without departing from the spirit and scope of the technical method of the present invention.

Claims (8)

1. A data encryption transmission method, comprising:

after receiving the plaintext data, dividing the plaintext data into a plurality of sub-data; randomly selecting numbers from the numbering pool to number a plurality of sub-data, wherein the sub-data are associated with the corresponding numbers;

acquiring a numbered position feature tag, and associating the number with the position feature tag; wherein the position feature tag represents a positional relationship between the number and the reference node;

rearranging the numbers and the corresponding sub-data according to the natural sequence of the numbers, generating a number sequence according to a plurality of numbers and the corresponding position feature labels after the arrangement, and simultaneously connecting the sub-data after the arrangement in series and marking the sub-data as a data sequence;

encrypting the data sequence and the number sequence by adopting different keys, and transmitting the encrypted data and the key label to a target terminal through a secure transmission channel; wherein, the safe transmission channel is established by the block chain link point.

2. The data encryption transmission method according to claim 1, wherein dividing the plaintext data comprises:

dividing plaintext data according to the set unit quantity;

a division of one unit data amount or one unit character number is not satisfied as one sub data.

3. The method for encrypted transmission of data according to claim 1, wherein the number of the sub-data numbered Chi Jiyu is established, comprising:

acquiring the number of sub-data, and marking as N; wherein N is an integer not less than 2;

n natural numbers are arbitrarily selected, and a numbering pool is built according to the N natural numbers.

4. The method for encrypted data transmission according to claim 1, wherein obtaining the numbered location feature tag comprises:

before the number reordering, arbitrarily selecting a number as a reference node;

acquiring the position relation between the number and the reference node, and converting the position relation into a position characteristic label; wherein the location feature tag is an integer.

5. A data encryption transmission method according to claim 1 or 4, wherein the natural sequence comprises from large to small or from small to large.

6. A data encryption transmission method according to claim 1, wherein encrypting the data sequence and the number sequence comprises:

two different keys are selected from the key pool according to the data type or randomly, and the data sequence and the number sequence are encrypted respectively through the two different keys.

7. The method according to claim 6, wherein the data types include text, picture and video, and the key corresponding to each data type in the key pool is not less than two.

8. The data encryption transmission method according to claim 1, wherein the secure transmission channel is established by a blockchain node, and the data sender and the data requester are checked by a blockchain node before the secure transmission channel is established.