Information technology-based secret-change integrated data encryption equipment
Technical Field
The invention belongs to the technical field of information security, and particularly relates to a data encryption device based on information technology.
Background
Information technology is considered a subset of information and communication technology, an information technology system is typically an information system, a communication system, or more specifically a computer system operated by a limited group of users.
With the development of the age, the phenomenon of information theft is more and more serious, and the enterprise confidentiality is directly mastered by opponent companies, so that the disadvantages occur in the commercial competition. Therefore, the information of the uploading system is encrypted, so that the information cannot be opened or is directly destroyed after being stolen, and the activity of stealing the information fails.
However, in such encryption, since the information package password is known to the information manager who can directly contact the inside of the company, if the inside manager is purchased by the competing company, the information package password and the information package are provided by the inside manager, and the information package can be opened; therefore, in this case, it is still difficult to avoid theft of information. For this reason, it is necessary to develop an integrated data encryption apparatus for securing information from an information packet acquisition point in combination with a secret change integration technique.
Disclosure of Invention
The invention aims to provide a data encryption device which is densely changed based on an information technology so as to solve the problems in the prior art.
In order to achieve the above purpose, the present invention provides the following technical solutions: the information technology-based secret-changing integrated data encryption equipment comprises a protection box, wherein a first development board is arranged in the protection box, a first transmission line and a second transmission line are respectively arranged at two ends of the protection box, and the first transmission line and the second transmission line are respectively connected to two sides of the first development board;
the top of the protection box is provided with a top cover, the top cover is provided with a protection cover, the protection cover is provided with a development board II, two sides of the top of the protection cover are respectively provided with a USB connector and a COM port, the USB connector and the COM port are respectively connected to the development board II, and the front part of the protection box is provided with a password keyboard;
The development board I is provided with an information receiving and transmitting encryption checking module which is used for packing and encrypting information input into the system and confirming identity and password in the process of calling out the information in the system.
For better packing encryption to every information group, preferably, the information receiving and dispatching encryption checking module comprises an information receiving module, wherein the information receiving module is used for receiving information conveyed by a first transmission line in real time, the information receiving module is connected with an information caching module in a transmission mode, the information caching module is used for temporarily storing the information, the information caching module is connected with an information approval module in a transmission mode, the information approval module is used for approval and separation from head to tail, the information approval module is connected with an allocation module in a transmission mode, the allocation module is connected with an arrangement packing module, the allocation module is used for conveying separated information to the arrangement packing module in batches, the arrangement packing module is used for packing the separated information input in batches in sequence, the arrangement packing module is connected with an encryption module, the encryption module is used for conducting encryption processing on the packed information, and the encryption module is connected with a bidirectional transmission module.
In order to realize the unique attribute of each information group after encryption, preferably, the information receiving and transmitting encryption checking module further comprises a password data storage module, the password data storage module is in transmission connection with an identity concurrent input module and an encryption module, the password data storage module is used for storing password data matched with each manager, and the identity concurrent input module guides the encryption module to import password matched with the corresponding manager from the password data storage module and encrypts the packing data.
In order to improve the protectiveness to the information in-process in the extraction system, preferably, the information receiving and dispatching encryption checking module further comprises a password receiving module, wherein the password receiving module is used for receiving passwords input by a password keyboard, the password receiving module is in transmission connection with a password matching module, the password matching module is in transmission connection with the encryption module, the password matching module is used for comparing the passwords stored in the encryption module with the actual input passwords, the password matching module is in transmission connection with an extraction module, the extraction module is in transmission connection with a bidirectional transmission module, the extraction module is used for extracting information packets matched with the passwords from the system through the bidirectional transmission module, the extraction module is in transmission connection with an identity checking module, the identity checking module is used for receiving authorized passwords input by the password keyboard and is in forefront of an authorized secret code bank stored by the password matching module, the identity checking module is in transmission connection with an alarm module, a lock control module and an import control module, the alarm module is used for sending alarm information to an external management platform, and the lock control module is used for locking the input secret codes to be successfully connected with a USB (universal serial bus) peripheral equipment through the USB (COM) interface after the password is not checked by the lock module.
Compared with the prior art, the invention has the beneficial effects that:
The invention relates to a data encryption device based on information technology encryption, which is characterized in that an information receiving and transmitting encryption checking module encrypts and packages input information and loads an authorization secret, the authorization secret is randomly changed and is not repeated, and each time the information package is extracted, opened and copied, the authorized secret code is changed, and the information can be opened only by the company responsible person, so that the non-company responsible person can be prevented from opening the information package for use, and the security is higher.
Drawings
FIG. 1 is a schematic diagram of the overall structure of the present invention;
FIG. 2 is a schematic top view in partial cutaway of the present invention;
FIG. 3 is a schematic view in partial cutaway of the front view of the present invention;
FIG. 4 is an enlarged schematic view of two connections of the development board of FIG. 3;
Fig. 5 is a schematic diagram of module connection in the encryption and check module for information transceiving according to the present invention.
In the figure: 1 protection box, 2 development board one, 3 transmission line one, 4 transmission line two, 5 top cap, 6 visor, 7 development board two, 8 USB joint, 9 COM mouth, 101 password keyboard.
Detailed Description
The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention.
Referring to fig. 1, fig. 2, fig. 3 and fig. 4, an information technology-based secret-changing integrated data encryption device comprises a protection box 1, wherein a development board I2 is fixed in the protection box 1 by screws, two ends of the protection box 1 are respectively connected with a transmission line I3 and a transmission line II 4 in an interference inserting manner, and the transmission line I3 and the transmission line II 4 are respectively connected with two sides of the development board I2;
Referring to fig. 1, 2 and 3, a top cover 5 is screwed on the top of the protection box 1, a protection cover 6 is screwed on the top cover 5, a development board two 7 is screwed in the protection cover 6, a USB transmission module and a COM port transmission module are arranged on the development board two 7, a USB connector 8 and a COM port 9 are respectively arranged on two sides of the top of the protection cover 6, the USB connector 8 and the COM port 9 are respectively connected with a signal transmission pin of the USB transmission module and a signal transmission pin of the COM port transmission module of the development board two 7, and a password keyboard 101 is screwed on the front part of the protection box 1;
the USB connector 8 is used for accessing external storage equipment and can be used for acquiring folders, video files and audio files from the system, and the COM port 9 is used for accessing external functional expansion equipment and can be used for acquiring program files from the system.
The development board I2 is provided with an information receiving and transmitting encryption checking module which is used for packing and encrypting information input into the system and confirming identity and password in the process of calling out the information in the system.
Referring to fig. 5, the information transceiving encryption checking module comprises an information receiving module, further, a transmission line one 3 is connected to a signal access pin of the information receiving module, the information receiving module is used for receiving information conveyed by the transmission line one 3 in real time, the information receiving module is connected with an information caching module in a transmission way, the information caching module is used for temporarily storing the information, the information caching module is connected with an information approval module in a transmission way, the information approval module is used for carrying out approval separation from head to tail, the information is effectively separated, a plurality of pieces of information are prevented from being packaged together, after the approval of the information approval module is finished, the information caching module deletes the approved information, the information approval module is connected with an allocation module in a transmission way, the allocation module is connected with an arrangement packaging module, the allocation module is used for conveying the separated information to the arrangement packaging module in batches, and the batch arrangement sequence is arranged according to the sequence entering the information caching module; the arrangement packaging module is used for sequentially packaging separated information input in batches, the encryption module is connected with the arrangement packaging module in a transmission mode, the encryption module is used for conducting encryption processing on the packaged information, the encryption module is connected with the two-way transmission module in a transmission mode, one signal output pin of the two-way transmission module is connected with the second transmission line 4, and the second transmission line 4 is connected with an information storage unit access pin of a system terminal.
With the arrangement, each piece of information is effectively packaged and encrypted, and is imported into the information storage unit of the system terminal after completion.
Referring to fig. 5, the information receiving and transmitting encryption checking module further includes a password data storage module, the password data storage module is in transmission connection with an identity concurrently-entering module and an encryption module, the identity concurrently-entering module can guide corresponding manager authorization secret security into the encryption module, the number of each manager authorization secret code is unlimited, each time the manager authorization secret code is opened or copied once, the authorization secret code changes with the manager authorization secret code, the password data storage module is used for storing password data matched by each manager, therefore each manager can be matched with a plurality of different passwords, each password can be encrypted to a single information packet, and the identity concurrently-entering module guides the encryption module to guide the password matched by the corresponding manager from the password data storage module, and encrypts the packet data.
In the data encryption equipment, each manager identity corresponds to a plurality of authorized secrets, the password corresponding to each information packet, the corresponding authorized secret code arrangement group and the corresponding manager identity are known by the company responsible person, in the information copying process, the company responsible person dispatches the manager, grants the password and authorized secret codes of the information packet, the manager inputs the password and authorized secret codes to acquire the information packet, at the moment, the information packet stored by the system terminal is replaced by one-time authorized secret codes, and when the information packet is opened, the authorized secret codes are replaced again, the company responsible person still provides the next authorized secret code for the manager to be opened, so that other internal personnel of the company and external personnel of the company can not be opened except the company responsible person provides the authorized secret codes.
Referring to fig. 5, the information receiving and transmitting encryption checking module further includes a password receiving module, the password receiving module is used for receiving a password input by the password keyboard 101, a transmission line of the password keyboard 101 is connected with a signal access pin of the password receiving module, the password receiving module is connected with a password matching module, the password matching module is connected with the encryption module in a transmission manner, the password matching module is used for comparing a password stored in the encryption module with an actual input password, the password matching module is connected with an extracting module in a transmission manner, the extracting module is connected with a bidirectional transmission module, the extracting module is used for extracting an information packet matched with the password from the system through the bidirectional transmission module, the extracting module is connected with an identity checking module, an authorization secret code library is stored in the identity checking module, each authorization secret code in the authorization secret code library corresponds to a secret stub matched with the authorization secret code library, and the identity checking module is used for receiving the authorization secret code input by the password keyboard 101 and checking the front-most-arranged authorization secret code, and the front-arranged authorization secret code is: the former one is the forefront one of the remaining authorized secret codes after completion and failure of the input of the data encryption device. The identity checking module is in transmission connection with an alarm module, a lock control module and an import module, when the verification of the authorized secret code fails, the alarm module is used for sending alarm information to an externally arranged management platform, the lock control module is used for locking the bidirectional transmission module to stop transmission after the verification of the authorized secret code fails, and the import module is used for importing information to peripheral storage equipment connected with the COM port 9 through the USB connector 8.
The working principle of this embodiment is as follows: the information receiving and transmitting encryption checking module is used for carrying out encryption packaging on the input information and loading an authorization secret key, the authorization secret key is randomly changed and is not repeated, the information package is extracted, opened and copied every time, and the authorization secret key is changed along with the change and can be opened only by being granted by a company responsible person, so that the information package can be prevented from being opened by a non-company responsible person for use, and the security is higher.
The foregoing description is only of the preferred embodiments of the present invention, and is not intended to limit the scope of the present invention.