CN114978711A - Data transmission method and system for symmetric encryption of dynamic secret key - Google Patents

Abstract

The present disclosure belongs to the technical field of data transmission security, and in particular relates to a data transmission method and system for symmetric encryption with dynamic secret keys, including: acquiring original data to be transmitted; Obtaining encrypted data; parsing the character string of the encrypted data to obtain a decryption key; decrypting the received encrypted data through the obtained decryption key to complete data transmission.

Description

A kind of data transmission method and system of dynamic secret key symmetric encryption

technical field

The present disclosure belongs to the technical field of data transmission security, and in particular relates to a data transmission method and system for dynamic secret key symmetric encryption.

Background technique

The statements in this section merely provide background information related to the present disclosure and do not necessarily constitute prior art.

Data security transmission is becoming more and more important. In order to ensure data security transmission, there are generally the following three forms:

First, Base64 encoded data transmission, the original data is transmitted after Base64 encoding, which can be understood as a simple encoding and encryption method; after the data transmission is intercepted, the data can be easily decoded to obtain the original data; and base64 is encoded in the encoding. The keyword combination that appears in the process will be intercepted by the security protection device, which directly affects the normal transmission of data;

Second, the fixed secret key encrypts the data for secure transmission. The fixed secret key is used to encrypt the data. After the data is intercepted, the original data is obtained based on the fixed decryption secret key; The secret key is obtained by calculation, and then the original data is obtained, which affects the security of data transmission.

Third, TLS-based data security transmission is a technology for secure transmission of original data at the network transmission layer, using the https protocol for secure data transmission; however, the data transmitted using TLS technology is directly decrypted by other means. The original data affects the security of data transmission.

At present, the common data security transmission technologies can easily obtain the original data, and thus can be easily used by attackers to launch attacks to steal key data.

SUMMARY OF THE INVENTION

In order to solve the above problems, the present disclosure proposes a data transmission method and system for symmetric encryption with dynamic secret keys, which effectively avoids the situation that data cannot be transmitted normally due to data interception and data tampering during data transmission, and improves the security of data transmission. sex.

According to some embodiments, the first solution of the present disclosure provides a data transmission method of dynamic secret key symmetric encryption, using the following technical solutions:

A data transmission method of dynamic secret key symmetric encryption, comprising:

Obtain the raw data to be transmitted;

The algorithm-based dynamic key encrypts the acquired original data to obtain encrypted data;

Parse the character string of the encrypted data to obtain a decryption key;

The received encrypted data is decrypted through the obtained decryption key to complete the data transmission.

As a further technical limitation, after obtaining the raw data to be transmitted, the obtained raw data is formatted according to a specific format, and a 32-bit GUID is added to the formatted raw data to obtain a first encrypted character string.

Further, base64 encoding is performed on the obtained first encrypted string to obtain an encoded second encrypted string; a sensitive hash operation is performed on the obtained second encrypted string to obtain a unique hexadecimal The signed third encrypted string; perform a sensitive hash operation on the obtained first encrypted string to obtain the original data of the unique hexadecimal signature, that is, the fourth encrypted string.

Further, in the process of the sensitive hash operation, based on the secret key of the algorithm, the sensitive hash operation is performed by using the algorithm, and the sensitive hash value obtained by each data transmission is different, and the sensitive hash value is used as the secret of the symmetric encryption. key to encrypt the original data symmetrically.

Further, based on the obtained third encrypted character string, the characters in the fixed position are collected to obtain the symmetric encryption key, that is, the fifth encrypted character string; for the obtained second encrypted character string, the fifth encrypted character string is used as the Perform symmetric encryption with the secret key to obtain the first encrypted binary array; perform base16 processing on the obtained first encrypted binary array to obtain the seventh encrypted string; The three encrypted strings perform data transmission according to the preset format, that is, the transmission of encrypted data is completed.

Further, parse the received encrypted data to obtain the seventh decrypted string, the fourth decrypted string and the third decrypted string; collect characters at fixed positions in the obtained third decrypted string to obtain the decryption key , that is, the fifth decrypted string; perform base16 decoding on the obtained seventh decrypted string to obtain the first decrypted binary array; based on the fifth decrypted string, decrypt the obtained first decrypted binary array to obtain the second decrypted String; perform base64 decoding on the obtained second decrypted string to obtain the first decrypted string.

Further, a sensitive hash operation is performed on the obtained second decrypted string, and the decrypted string obtained after the sensitive hash operation is compared with the third decrypted string. If the values of the two decrypted strings are equal, the data Not tampered; perform a sensitive hash operation on the obtained first decrypted string, and compare the decrypted string obtained after the sensitive hash operation with the fourth decrypted string. If the values of the two decrypted strings are equal, then The data has not been tampered with.

According to some embodiments, the second solution of the present disclosure provides a data transmission system with dynamic secret key symmetric encryption, and adopts the following technical solutions:

A data transmission system with dynamic key symmetric encryption, comprising:

an acquisition module configured to acquire the raw data to be transmitted;

an encryption module, which is configured to perform encryption processing on the acquired original data based on the dynamic key of the algorithm to obtain encrypted data;

A decryption module, which is configured to parse the character string of the encrypted data to obtain a decryption key; decrypt the received encrypted data through the obtained decryption key to complete data transmission.

According to some embodiments, a third solution of the present disclosure provides a computer-readable storage medium, using the following technical solutions:

A computer-readable storage medium having a program stored thereon, when the program is executed by a processor, implements the steps in the data transmission method of the dynamic key symmetric encryption according to the first aspect of the present disclosure.

According to some embodiments, a fourth solution of the present disclosure provides an electronic device, using the following technical solutions:

An electronic device includes a memory, a processor, and a program stored in the memory and running on the processor, when the processor executes the program, the dynamic key symmetric encryption according to the first aspect of the present disclosure is implemented. Steps in a data transfer method.

Compared with the prior art, the beneficial effects of the present disclosure are:

The present disclosure adopts the base16 encoding method for data transmission, which can easily penetrate the security protection equipment, and effectively avoids the situation that the data cannot be transmitted normally due to interception by the security protection equipment when the base64 encoding method is used for data transmission; the algorithm-based dynamic key encryption, Compared with the traditional fixed key encryption method, there is no decryption rule, which enhances data security and increases the difficulty of cracking; it does not need to purchase special equipment and security certificates, which greatly saves costs and expenses, thereby avoiding certificate expiration. Inaccessible problems caused by other problems; the encryption and decryption keys are hidden in the parameters, and the fixed position of the key is mutually agreed between the client and the server, which can be changed at any time.

Description of drawings

The accompanying drawings that constitute a part of the present disclosure are used to provide further understanding of the present disclosure, and the exemplary embodiments of the present disclosure and their descriptions are used to explain the present disclosure and do not constitute an improper limitation of the present disclosure.

1 is a flowchart of a data transmission method for symmetric encryption with dynamic keys in Embodiment 1 of the present disclosure;

FIG. 2 is a structural block diagram of a data transmission system for symmetric encryption with dynamic keys in Embodiment 2 of the present disclosure.

Detailed ways

The present disclosure will be further described below with reference to the accompanying drawings and embodiments.

It should be noted that the following detailed description is exemplary and intended to provide further explanation of the present disclosure. Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this disclosure belongs.

It should be noted that the terminology used herein is for the purpose of describing specific embodiments only, and is not intended to limit the exemplary embodiments according to the present disclosure. As used herein, unless the context clearly dictates otherwise, the singular is intended to include the plural as well, furthermore, it is to be understood that when the terms "comprising" and/or "including" are used in this specification, it indicates that There are features, steps, operations, devices, components and/or combinations thereof.

The embodiments of this disclosure and features of the embodiments may be combined with each other without conflict.

Terminology Explanation:

Original data: Original data, also called plaintext data, refers to data that can be easily read without any encoding.

Secret key: The secret key refers to the digital key used to encrypt and decrypt data.

Symmetric encryption: Symmetric encryption is to encrypt the original data and decrypt the original data through the secret key.

Sensitive hash: Sensitive hash means that even if the original data is different by one byte, the calculated hash value will have a very large change. MD5 is a sensitive hash, and a sensitive hash is a non-sensitive hash. Symmetric encryption.

GUID: Globally Unique Identifier, which is a binary-length digital identifier generated by an algorithm and is globally unique.

Example 1

Embodiment 1 of the present disclosure introduces a data transmission method for symmetric encryption with dynamic secret keys.

As shown in Figure 1, a data transmission method of dynamic secret key symmetric encryption includes:

Obtain the raw data to be transmitted;

The algorithm-based dynamic key encrypts the acquired original data to obtain encrypted data;

Parse the character string of the encrypted data to obtain a decryption key;

The received encrypted data is decrypted through the obtained decryption key to complete the data transmission.

As one or more embodiments, the first step of the data transmission method of dynamic key symmetric encryption is encrypted transmission of data, specifically:

(1) Format the original data according to a specific format, and append a 32-bit GUID to the formatted data to form a globally unique formatted string, that is, the first encrypted string;

(2) Encode the first encrypted string formed by base64 to obtain the encoded second encrypted string. The purpose of this operation is to standardize and encode some special data or characters in the original data to avoid some special characters. Characters are confused in the calculation process, resulting in inaccurate data operations;

(3) sensitive hash operation is carried out to the obtained second encrypted string to obtain unique hexadecimal signature data, that is, the third encrypted string;

(4) sensitive hash operation is carried out to the obtained first encrypted character string to obtain the unique hexadecimal signature data of the original data, that is, the fourth encrypted character string;

(5) collect 8 characters of fixed position to the obtained third encrypted character string as symmetric encryption secret key, obtain the fifth encrypted character string; For example: collect the following 8 index position characters to the third encrypted character string: 0, 3, 18, 24, 19, 30, 12, 15, so an 8-digit hexadecimal encryption key is obtained;

(6) to the obtained second encrypted character string, use the fifth encrypted character string to carry out symmetric encryption as the secret key to obtain the first encrypted binary array;

(7) base16 encryption processing is carried out to the obtained first encrypted binary array, and the seventh encrypted character string is obtained;

(8) Data transmission is performed on the obtained seventh encrypted character string, fourth encrypted character string and third encrypted character string according to a specific format, namely, encrypted data is obtained.

It can be understood that the transmitted data contains the signature of the uniqueness of the data. When decrypting the data, the validity of the data can be verified by the uniqueness of the data signature. In addition, since the encryption key is hidden in the third encrypted string, according to the signature It is obtained by fixed collection; therefore, the secret key has strong randomness, which increases the difficulty of cracking.

As one or more implementations, the second step of the data transmission method of the dynamic key symmetric encryption is receiving and decrypting the data, specifically:

(1) analyze the received encrypted data according to the transmitted data format, obtain the seventh decryption string, the fourth decryption string and the third decryption string respectively;

(2) based on the obtained third decrypted character string, the characters of 8 fixed positions are collected as decryption secret key, and the fifth decrypted character string is obtained;

(3) base16 decoding is carried out to the obtained seventh decrypted string to obtain the first decrypted binary array;

(4) based on the obtained first decrypted binary array, use the fifth decrypted string to decrypt to obtain the second decrypted string;

(5) base64 decoding is carried out to the obtained second decrypted string to obtain the first decrypted string;

(6) Perform a sensitive hash operation on the obtained second decrypted string, and compare the decrypted string obtained after the sensitive hash operation with the obtained third decrypted string, if the values of the two strings are completely equal , it means that the data has not been tampered with;

(7) Perform a sensitive hash operation on the obtained first decrypted string, and compare the decrypted string obtained after the sensitive hash operation with the obtained fourth decrypted string, if the values of the two strings are completely equal , it means that the data has not been tampered with;

Step (8) Repeat steps (6) and (7) until all the data pass the verification, which means that the first encrypted string of the decrypted original data is available, that is, the secure transmission of the data is realized.

In the data encryption transmission in this embodiment, the original data is encrypted during the secure transmission of network data; based on the secret key of the algorithm, the algorithm is used to perform a sensitive hash operation on the original data. The sensitive hash values obtained from data transmission are different, and then the sensitive hash value is used as the secret key of symmetric encryption, and the original data is symmetrically encrypted and then transmitted; the dynamic change of the original data is due to the sensitive hash operation on the original data. , the sensitive hash values of different original data are definitely different, but if the original data does not change, the ciphertext of the transmitted symmetric encryption is still the same, which will produce certain rules, thereby increasing the number of cracked Danger. Therefore, the original data needs to be dynamically changed; the base16 encoding method can effectively penetrate the security protection equipment without affecting the normal transmission of data; the encryption key should be hidden, and the encryption key should be hidden in the transmitted parameters during the transmission process. Difficulty of acquisition.

Embodiment 2

The second embodiment of the present disclosure introduces a data transmission system for symmetric encryption with dynamic keys.

A data transmission system of dynamic key symmetric encryption as shown in Figure 2, including:

an acquisition module configured to acquire the raw data to be transmitted;

an encryption module, which is configured to perform encryption processing on the acquired original data based on the dynamic key of the algorithm to obtain encrypted data;

A decryption module, which is configured to parse the character string of the encrypted data to obtain a decryption key; decrypt the received encrypted data through the obtained decryption key to complete data transmission.

The detailed steps are the same as the data transmission method of the dynamic key symmetric encryption provided in the first embodiment, and are not repeated here.

Embodiment 3

The third embodiment of the present disclosure provides a computer-readable storage medium.

A computer-readable storage medium stores a program thereon, and when the program is executed by a processor, implements the steps in the data transmission method of the dynamic key symmetric encryption according to the first embodiment of the present disclosure.

The detailed steps are the same as the data transmission method of the dynamic key symmetric encryption provided in the first embodiment, and are not repeated here.

Embodiment 4

The fourth embodiment of the present disclosure provides an electronic device.

An electronic device includes a memory, a processor, and a program stored in the memory and running on the processor, when the processor executes the program, the dynamic key symmetric encryption according to the first embodiment of the present disclosure is implemented. Steps in a data transfer method.

The detailed steps are the same as the data transmission method of the dynamic key symmetric encryption provided in the first embodiment, and are not repeated here.

The above descriptions are only preferred embodiments of the present disclosure, and are not intended to limit the present disclosure. For those skilled in the art, the present disclosure may have various modifications and changes. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present disclosure should be included within the protection scope of the present disclosure.

Claims (10)

1. a data transmission method of dynamic secret key symmetric encryption, is characterized in that, comprises: Get the raw data to be transmitted; The algorithm-based dynamic key encrypts the acquired original data to obtain encrypted data; Parse the character string of the encrypted data to obtain a decryption key; The received encrypted data is decrypted through the obtained decryption key to complete the data transmission. 2. the data transmission method of a kind of dynamic secret key symmetric encryption as claimed in claim 1 is characterized in that, after obtaining the original data to be transmitted, the obtained original data is formatted according to a specific format, A 32-bit GUID is appended to the formatted raw data to obtain the first encrypted string. 3. the data transmission method of a kind of dynamic secret key symmetric encryption as claimed in claim 2, is characterized in that, base64 encoding is carried out to the first encrypted character string obtained, obtains the second encrypted character string after encoding; Sensitive hash operation is performed on the obtained second encrypted string to obtain a third encrypted string with a unique hexadecimal signature; sensitive hash operation is performed on the obtained first encrypted string to obtain a unique hexadecimal signature. The original data of the hexadecimal signature, i.e. the fourth encrypted string. 4. the data transmission method of a kind of dynamic secret key symmetric encryption as described in claim 3, is characterized in that, in the process of described sensitive hash operation, based on the secret key of algorithm, utilize algorithm to carry out sensitive hash operation , the sensitive hash value obtained for each data transmission is different, and the sensitive hash value is used as the key of symmetric encryption to encrypt the original data symmetrically. 5. the data transmission method of a kind of dynamic secret key symmetric encryption as claimed in claim 3, is characterized in that, based on the obtained 3rd encrypted character string gathering the character of fixed position, obtains symmetric encryption secret key, namely the fifth Encrypting the character string; performing symmetric encryption on the obtained second encrypted character string using the fifth encrypted character string as a secret key to obtain a first encrypted binary array; performing base16 processing on the obtained first encrypted binary array to obtain Seventh encrypted character string; data transmission is performed on the obtained seventh encrypted character string, fourth encrypted character string and third encrypted character string according to the preset format, that is, the encrypted data transmission is completed. 6. the data transmission method of a kind of dynamic secret key symmetric encryption as claimed in claim 5, is characterized in that, parses the received encrypted data, obtains the seventh decryption string, the fourth decryption string and the third decryption character string; collect characters at fixed positions in the obtained third decrypted string to obtain the decryption key, that is, the fifth decrypted string; perform base16 decoding on the obtained seventh decrypted string to obtain the first decrypted binary array ; Decrypt the obtained first decrypted binary array based on the fifth decrypted string to obtain a second decrypted string; perform base64 decoding on the obtained second decrypted string to obtain the first decrypted string. 7. the data transmission method of a kind of dynamic secret key symmetric encryption as claimed in claim 6, is characterized in that, sensitive hash operation is carried out to the obtained second decryption string, the decryption obtained after the sensitive hash operation is performed Compare the string with the third decrypted string. If the values of the two decrypted strings are equal, the data has not been tampered with; The decrypted string is compared with the fourth decrypted string, and if the values of the two decrypted strings are equal, the data has not been tampered with. 8. a data transmission system of dynamic secret key symmetric encryption, is characterized in that, comprises: an acquisition module configured to acquire the raw data to be transmitted; an encryption module, which is configured to perform encryption processing on the acquired original data based on the dynamic key of the algorithm to obtain encrypted data; A decryption module, which is configured to parse the character string of the encrypted data to obtain a decryption key; decrypt the received encrypted data through the obtained decryption key to complete data transmission. 9. A computer-readable storage medium on which a program is stored, characterized in that, when the program is executed by a processor, the data transmission method of the dynamic key symmetric encryption according to any one of claims 1-7 is realized steps in . 10. An electronic device comprising a memory, a processor and a program stored in the memory and running on the processor, wherein the processor implements any one of claims 1-7 when executing the program The steps in the data transmission method of dynamic key symmetric encryption described in item.

Images