WO2019024230A1

WO2019024230A1 - Information encryption and decryption method and device, computer equipment and storage medium

Info

Publication number: WO2019024230A1
Application number: PCT/CN2017/104670
Authority: WO
Inventors: 张玉强
Original assignee: 上海壹账通金融科技有限公司
Priority date: 2017-08-02
Filing date: 2017-09-29
Publication date: 2019-02-07
Also published as: CN107666479A

Abstract

An information encryption method, comprising: when it is detected that an application program in a mobile terminal is switched to an ON state, randomly generating a secret key character string and storing the generated secret key character string; when the application program sends a communication request to a server for the first time, asymmetrically encrypting the generated secret key character string by using a server public key published by the server in advance and sending the encrypted secret key character string to the server; obtaining a document uploading request triggered by a user in an interface of the application program; parsing a document carried by the document uploading request, locating a privacy field in the document, and symmetrically encrypting the privacy filed by using the randomly generated secret key character string to generate a document ciphertext; and uploading the generated document ciphertext to the server, so that the server decrypts the uploaded document ciphertext on the basis of the received encrypted secret key character string and a server private key.

Description

Information encryption and decryption method, device, computer device and storage medium

This application claims the priority of the Chinese Patent Application filed on August 2, 2017, the Chinese Patent Application No. 2017106533376, entitled "Information Encryption and Decryption Method, Apparatus, Computer Equipment, and Storage Media", the entire contents of which are incorporated by reference. Combined in this application.

Technical field

The present application relates to the field of computer technologies, and in particular, to an information encryption and decryption method, apparatus, computer device, and storage medium.

Background technique

With the development of the Internet and the application of cloud computing, more and more people tend to store data in the cloud. However, these data often contain sensitive information. In order to protect the privacy of the data, sensitive private information needs to be encrypted.

Traditional data encryption methods include symmetric encryption and asymmetric encryption. Asymmetric encryption is more secure, but when a large amount of private information is involved in the transmitted document, the encryption and decryption time takes a long time and is slow. Therefore, asymmetric encryption is only suitable for encrypting a small amount of data. Symmetric encryption requires a fixed key locally in the terminal. There is a certain security risk, and security cannot be guaranteed.

Summary of the invention

Based on this, it is necessary to provide an encryption and decryption method, apparatus, computer device, and storage medium.

An information encryption method, the method comprising:

When it is detected that the application in the mobile terminal switches to the on state, the key string is randomly generated, and the generated key string is stored;

When the application sends a communication request to the server for the first time, the generated key string is asymmetrically encrypted using a server public key pre-published by the server, and the encrypted key string is sent to the server;

Obtaining a document upload request triggered by the user in the application interface;

Parsing a document carried in the document upload request, locating a privacy field in the document, and symmetrically encrypting the privacy field to generate a document ciphertext by using the randomly generated key string; and

And uploading the generated document ciphertext to the server, so that the server decrypts the uploaded document ciphertext according to the received encrypted key string and the server private key.

An information decryption method, the method comprising:

Receiving a communication request sent by the application in the mobile terminal, and acquiring a key string carried in the communication request, where the key string is randomly generated by the mobile terminal when the application is started, and is pre-announced Server public key asymmetric encryption processing;

Receiving a document upload request sent by the mobile terminal, and acquiring a document ciphertext carried in the document upload request; and

The key string is decrypted using the server private key and the decrypted document string is used to decrypt the document ciphertext such that the document displays a privacy field.

An information encryption device, the device comprising:

a key string generating module, configured to randomly generate a key string when the application is switched to the open state in the mobile terminal, and store the generated key string;

An asymmetric cryptographic module, configured to: when the application sends a communication request to the server for the first time, asymmetrically encrypt the generated key string by using a server public key pre-published by the server, and encrypt the key character Sending a string to the server;

The request obtaining module is configured to obtain a document uploading request triggered by the user in the application interface;

a symmetric cryptographic module, configured to parse a document carried in the document uploading request, locate a privacy field in the document, and symmetrically encrypt the private field to generate a document ciphertext by using the randomly generated key string; and

And a document uploading module, configured to upload the generated document ciphertext to the server, so that the server decrypts the uploaded document ciphertext according to the received encrypted key string and the server private key.

An information decryption device, the device comprising:

a communication request receiving module, configured to receive a communication request sent by an application in the mobile terminal, and obtain a key string carried in the communication request, the key string is randomly generated by the mobile terminal when the application is started, and is asymmetrically encrypted by a pre-published server public key;

a document ciphertext receiving module, configured to receive a document uploading request sent by the mobile terminal, and obtain a document ciphertext carried in the document uploading request;

A document decryption module for decrypting a key string using a server private key and decrypting the document ciphertext using the decrypted key string to cause the document to display a privacy field.

A computer device comprising a memory and a processor, the memory storing computer readable instructions, the computer readable instructions being executed by the processor, causing the processor to perform the step of: detecting a mobile terminal When the application is switched to the on state, the key string is randomly generated, and the generated key string is stored;

A computer device comprising a memory and a processor, wherein the memory stores computationally readable instructions, the computer readable instructions being executed by the processor such that the processor performs the following steps:

One or more computer readable non-volatile storage media storing computer readable instructions, computing When the machine readable instructions are executed by one or more processors, cause one or more processors to perform the following steps:

One or more computer readable non-volatile storage media storing computing readable instructions that, when executed by one or more processors, cause one or more processors to perform the steps of:

Details of one or more embodiments of the present application are set forth in the accompanying drawings and description below. Other features and advantages of the present invention will be apparent from the description, drawings and claims.

DRAWINGS

In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings to be used in the embodiments will be briefly described below. Obviously, the drawings in the following description are only some embodiments of the present application, Those skilled in the art can also obtain other drawings based on these drawings without any creative work.

1 is an application environment diagram of an information encryption method in an embodiment;

2 is a schematic diagram showing the internal structure of a mobile terminal in an embodiment;

3 is a flow chart of an information encryption method in an embodiment;

4 is a flow chart involved in encrypting a document in an embodiment;

5 is a flow chart of an information encryption method in another embodiment;

6 is a schematic diagram showing the internal structure of a server in an embodiment;

7 is a flow chart of a method for decrypting information in an embodiment;

8 is a flow chart of a method for decrypting information in another embodiment;

9 is a structural block diagram of an information encryption apparatus in an embodiment;

10 is a structural block diagram of a symmetric cryptographic module in one embodiment; and

Figure 11 is a block diagram showing the structure of an information decrypting apparatus in an embodiment.

Detailed ways

In order to make the technical solutions and advantages of the present application more clear, the present application will be further described in detail below with reference to the accompanying drawings and embodiments. It is understood that the specific embodiments described herein are merely illustrative of the application and are not intended to be limiting.

As shown in FIG. 1, in one embodiment, an application environment diagram of an information encryption method is provided, the application environment diagram including a mobile terminal 110 and a server 120. The mobile terminal 110 can communicate with the server 120 over a network. The mobile terminal 110 may be at least one of a smart phone, a tablet computer, a notebook computer, a POS machine, and an in-vehicle computer, but is not limited thereto. The server 120 may be an independent physical server or a server cluster composed of a plurality of physical servers. The mobile terminal 110 monitors whether the set application is switched to the on state, and if so, randomly generates a key string. The mobile terminal 110 stores in advance a public key issued by the server, and the mobile terminal performs asymmetric encryption processing on the generated key string using the public key, and uploads the encrypted key string to the server for storage. When the mobile terminal application sends a document to the server, the document is symmetrically encrypted using the key string, and the encrypted document is sent to the server, and the server can use the pre-stored private key and the key string received from the mobile terminal. The document uploaded by the mobile terminal is decrypted to perform corresponding document processing operations.

As shown in FIG. 2, in one embodiment, a mobile terminal is provided on which an application can be installed. The mobile terminal includes a processor coupled through a system bus, an internal memory, a non-volatile storage medium, a network interface, a display screen, and an input device. The processor is used to provide computing and control capabilities to support the operation of the entire mobile terminal. The non-volatile storage medium of the mobile terminal stores an operating system and computer readable instructions executable by the processor to implement an information encryption method provided by the following embodiments. The internal memory in the mobile terminal provides an environment for the operation of the operating system and computer readable instructions in the non-volatile storage medium. The network interface is used to connect to the network for communication. The display is used to display various interfaces, for example, to display the application interface. The input device is a touch layer covered on the display screen for the user to input various control commands. For example, in this embodiment, the user can input an application open command and a document upload command.

A person skilled in the art can understand that the structure of the mobile terminal shown in FIG. 2 is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation of the mobile terminal to which the solution of the present application is applied. The mobile terminal may include more or fewer components than shown in the figures, or some components may be combined, or have different component arrangements.

3 is a schematic flow chart of a method according to an embodiment of the present application. It should be understood that although the various steps in the flowchart of FIG. 3 are sequentially displayed as indicated by the arrows, these steps are not necessarily performed in the order indicated by the arrows. Except as explicitly stated herein, the execution of these steps is not strictly limited, and may be performed in other sequences. Moreover, at least some of the steps in FIG. 3 may include a plurality of sub-steps or stages, which are not necessarily performed at the same time, but may be executed at different times, and the order of execution thereof is not necessarily This may be performed in sequence, but may be performed alternately or alternately with other steps or at least a portion of the sub-steps or stages of the other steps.

As shown in FIG. 3, in an embodiment, an information encryption method is provided. The method is applied to the mobile terminal shown in FIG. 2 as an example, and specifically includes the following steps:

Step S202: When it is detected that the application in the mobile terminal switches to the on state, the key string is randomly generated, and the generated key string is stored.

The mobile terminal monitors status information of the specified one or more applications, and when monitoring the application to switch from Not running to the open state (such as Active foreground active state or Background background) In the running state, the mobile terminal generates a key string according to the set random algorithm, and stores the generated key string in the memory.

In one embodiment, whether the application is switched to the on state can be determined by monitoring the user's triggering operation on the application. It is also possible to determine whether the program has been switched on by monitoring the log information of the application. Further, when the terminal is detected to be in a networked state, the state of the terminal application is monitored.

In one embodiment, when the key string is stored in memory, the generation time of the key string and the corresponding application identifier are also associated. For example, the format of the stored content may be: application A+ generation time + key string.

Step S204: When the application first sends a communication request to the server, the generated key string is asymmetrically encrypted using the server public key, and the encrypted key string is sent to the server.

Starting with the time to switch to the on state, the monitoring application requests communication with the server. When the application first requests communication with the server (eg, the application requests the login server), the mobile terminal uses a pre-stored server public key for asymmetric encryption. A randomly generated key string and the encrypted key string is sent to the server along with the established first communication channel. Send the encrypted key string to the server as requested by the login server.

In an embodiment, after the key string is generated, the key string is stored in the memory, that is, the server public key is asymmetrically encrypted, and the encrypted key string is encrypted. storage. When the application communicates with the server for the first time, the stored encrypted key string is sent directly to the server along with the established communication channel to avoid slowing down the request.

Step S206: Acquire a document upload request triggered by the user in the application interface.

Step S208: Parsing the document carried in the document uploading request, locating the privacy field in the document, and symmetrically encrypting the privacy field using the randomly generated key string to generate the document ciphertext.

The documentation here can be software documentation written by developers, such as software requirements documents, test documents, and so on. The information encryption method for the above documents is applied to the cloud backup of the development stage document. It can also be an interactive document between the application and the server, which can be a local document. If the user sends a local document to a friend, the upload server needs to be forwarded by the server to the specified friend.

When the user needs to upload the data in the application to the server, the application boundary can be triggered. The button in the face sends a document upload request to the server, and the document upload request carries the document identifier to be uploaded. In this embodiment, the document corresponding to the document identifier includes private information, and the private information may be phone number information, identity number information, and consumption information.

The mobile terminal can obtain the document to be uploaded according to the document identifier, and parse the document content in the document, and find the privacy information included in the document according to the set privacy information search rule to locate the privacy field corresponding to the privacy information, and use the randomly generated The key string (a key string that is not asymmetrically encrypted by the server public key) encrypts the located privacy field to generate a document ciphertext. In the generated document ciphertext, only the privacy field is secretly displayed by the encrypted string, and other contents are displayed in the original plaintext.

In one embodiment, the privacy information in the uploaded document may also be marked in advance, such as bold text or highlighting private information in a different color. When locating the privacy field in a document, just look up the tag location. After the privacy field is encrypted, the mark of the privacy field can be removed or removed, and the configuration can be configured as needed.

Step S210: Upload the generated document ciphertext to the server, so that the server decrypts the uploaded document ciphertext according to the received encrypted key string and the server private key.

Upload the generated document ciphertext to the server for the server to perform a storage backup. When the server needs to perform corresponding data processing on the uploaded document, the document ciphertext can be decrypted by using the encrypted key string obtained from the mobile terminal to obtain the original plaintext document.

Specifically, the step of decrypting the document ciphertext by the server is: first, decrypting the encrypted key string by using the server private key to obtain a key string; and then using the key string to decrypt the privacy field in the ciphertext of the document.

Since the key string is asymmetrically encrypted, the security of the key string is effectively ensured, and the asymmetric encryption and decryption is performed only for the key string with a small amount of data, which does not affect the encryption and decryption efficiency. Symmetric encryption and decryption is used for the privacy field, and even if the number of privacy fields is large, it can be quickly encrypted and decrypted. That is to say, the information decryption method of the embodiment ensures the encryption and decryption efficiency and effectively protects the information security.

This embodiment implements an organic combination of symmetric encryption and asymmetric encryption, which not only enables fast encryption of a large number of privacy fields, but also a random dynamic key generation method combined with the security advantages of asymmetric encryption. Make the cloud transmission and storage of information more secure and reliable.

In an embodiment, as shown in FIG. 4, step S208: parsing the document carried in the document uploading request, locating the privacy field in the document, and symmetrically encrypting the private field using the randomly generated key string to generate the document ciphertext includes:

Step S302: Acquire a document to be uploaded according to the document uploading request, and parse the document using a tool that supports the document format to obtain the document content.

The mobile terminal acquires a document specified by the user and opens or recognizes the content of the document using a tool (such as Office software) that supports the format of the uploaded document.

If the document is in txt format, the document content is parsed using the Notepad program. If the document is in xlsx format, the content of the document is parsed using the excel table program.

Step S304: Search for the privacy field to be encrypted in the document content, obtain the location information of the privacy field, and collect the obtained location information to generate an extension field.

In one embodiment, the attribute information of the privacy field is preset, and the privacy field included in the document content is searched according to the preset attribute information. The attribute information of the privacy field may be a numeric string of a set number of bits, such as an 11-digit numeric string (mobile communication number), a 13-digit numeric string (ID number), or a set of sensitive text before/after setting. The corresponding information at the byte, such as the sensitive text is "user name", "password", the string that appears after the user name is the privacy field; it can also be a string including the set symbol, such as the symbol containing "$" Consumption information, account information, etc.

In another embodiment, after the step of acquiring a document uploading request triggered by the user in the application interface, the method further includes: calling a tool supporting the document format to display the document to be uploaded, and acquiring a specified operation of the user, the specified operation specifying The privacy field to be encrypted in the document.

Whether the privacy field is determined by the set attribute or the privacy field is determined according to the user's designation, after the privacy field is determined, the location information of the determined privacy field in the document content is obtained, and each privacy field corresponds to one location information. The location information of the obtained privacy field is further collected in an extension field. That is, an extension field is generated, which includes location information of all privacy fields to be encrypted.

Step S306: symmetrically encrypt the privacy field and the extension in the document by using the randomly generated key string Field, generating document ciphertext and encrypted extension fields.

The determined privacy field is symmetrically encrypted using the key string generated in step S202 to generate a document ciphertext, and the generated extension field is also encrypted using a key string.

In one embodiment, when the document to be uploaded is a configuration file, that is, the content in the document is a format in which the field name corresponds to the field value. For example, the content in the document is: name=zhangsan, phoneNumber=12345678910, where name and phoneNumber are field names, and zhangsan and 12345678910 are field values. The privacy field to be encrypted is a field value, that is, the field values zhangsan and 12345678910 after the equal sign are required to be encrypted.

When the document to be uploaded is the above-mentioned configuration file, step S304: searching for the privacy field to be encrypted in the document content, obtaining the location information of the privacy field, and collecting the obtained location information to generate an extension field, which is in this embodiment: Get the field name in the document, and all the field names obtained by the collection generate the extension field.

In this embodiment, as shown in FIG. 5, the information encryption method includes the following steps:

Step S402: When it is detected that the application in the mobile terminal switches to the on state, the key string is randomly generated, and the generated key string is stored.

Step S404: When the application first sends a communication request to the server, the generated key string is asymmetrically encrypted using the server public key, and the encrypted key string is sent to the server.

Step S406: Acquire a document uploading request triggered by the user in the application interface, where the document uploading request carries the document to be uploaded, wherein the document to be uploaded is in the format of the field value corresponding to the field name, and the privacy field to be encrypted is a field value;

Step S408: Parse the document with a tool that supports the document format to obtain the document content, obtain all the field names in the document, and generate an extension field for all the field names obtained by the collection.

Step S410: symmetrically encrypt the privacy field and the extension field by using the randomly generated key string to generate a document ciphertext and an encrypted extension field.

Step S412: Send the generated document ciphertext and the encrypted extension field to the server, so that the server decrypts the extension field to obtain a set of all field names, locate each privacy field in the document ciphertext by the field name, and locate the location. The privacy field is decrypted to get the document clear text.

For example, the fields in the document are named name and phoneNumber, the corresponding field values are zhangsan and 12345678910, and the document ciphertext encrypted by the key string is: name=xxxx1, phoneNumber=xxxx2, and the generated extension field is { namephoneNumber}, the encrypted extension field is {xxx1xxx2}. After receiving the encrypted document ciphertext and the encrypted extension field {xxx1xxx2}, the server first decrypts the extended field by using the key string to generate the decrypted extended field {namephoneNumber}, and then performs the string in the extended field. Word segmentation, get two strings of name and phoneNumber, then find the document ciphertext, quickly locate the location in the document where name and phoneNumber are located, and then quickly locate the privacy fields xxxx1 and xxxx2 that will be encrypted in the document, and then the privacy of the location. The field is decrypted to get zhangsan and 12345678910, and the obtained field value is inserted into the specified position in the document to generate the document plaintext.

In this embodiment, by transmitting the extended field, the encrypted field in the document can be quickly located, thereby achieving fast and accurate decryption to obtain the original document. The terminal does not need to perform privacy field name convention with the server, and the encryption and decryption of the privacy field is more flexible and efficient.

In an embodiment, the information encryption method further includes the following steps: when detecting that the terminal application is switched from the open state to the logout state, the mobile terminal clears the stored key string of the application.

In one embodiment, as shown in FIG. 6, a server is provided that includes a processor coupled through a system bus, a non-volatile storage medium, an internal memory, and a network interface. The non-volatile storage medium of the server stores an operating system and computer readable instructions for implementing an information decryption method suitable for a server. This processor is used to provide computing and control capabilities to support the operation of the entire server. The internal memory in the server provides an environment for the operation of an operating system and computer readable instructions in a non-volatile storage medium for network communication with the mobile terminal. It will be understood by those skilled in the art that the structure shown in FIG. 6 is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the server to which the solution of the present application is applied. The specific server may include a ratio. More or fewer components are shown in the figures, or some components are combined, or have different component arrangements.

In an embodiment, as shown in FIG. 7, an information decryption method is provided, which is described by taking the above-mentioned server as an example, and specifically includes the following steps:

Step S502: Receive a communication request sent by the application in the mobile terminal, and obtain a key string carried in the communication request, where the key string is randomly generated by the mobile terminal when the application is started, and the pre-published server public key is not Symmetric encryption processing.

The server pre-generates a pair of key pairs, the server public key and the server private key. The server pre-posts the server public key to the mobile terminal, and the mobile terminal stores the server public key.

The server receives a key string asymmetrically encrypted by the server public key sent by the mobile terminal, and the key string is randomly generated when the mobile terminal detects that the application is started.

Step S504: Receive a document upload request sent by the mobile terminal, and obtain a document ciphertext carried in the document upload request.

Step S506: Decrypt the key string using the private key pre-stored in the server, and decrypt the document ciphertext using the decrypted key string to cause the document to display the privacy field.

The server decrypts the key string using the server private key and decrypts the document ciphertext using the decrypted key string.

In this embodiment, an organic combination of symmetric encryption and decryption and asymmetric encryption and decryption is realized, which not only can quickly encrypt and decrypt a large number of privacy fields, but also a random dynamic key generation method combined with the security advantage of asymmetric encryption and decryption to enable cloud transmission of information. And storage is more secure and reliable.

In an embodiment, as shown in FIG. 8, an information decryption method is provided, which specifically includes the following steps:

Step S602: Receive a communication request sent by the application in the mobile terminal, and obtain a key string carried in the communication request, where the key string is randomly generated by the mobile terminal when the application is started, and the pre-published server public key is not Symmetric encryption processing.

Step S604: Receive a document uploading request sent by the mobile terminal, obtain a document ciphertext carried in the document uploading request and an extended field encrypted by the key string, and expand the location information of the encrypted privacy field in the field document.

Step S606: Decrypt the key string using the server private key, and decrypt the extended field by using the decrypted key string to obtain the location information of the encrypted privacy field.

Step S608: Locating the privacy field in the ciphertext according to the location information, and using the decrypted key The string decrypts the located privacy field and gets the document plaintext showing the privacy field.

In one embodiment, as shown in FIG. 9, an information encryption apparatus is provided, the apparatus comprising:

The key string generating module 702 is configured to randomly generate a key string and store the generated key string when the application in the mobile terminal is detected to switch to the on state.

The asymmetric encryption module 704 is configured to asymmetrically encrypt the generated key string using the server public key pre-published by the server when the application sends the communication request to the server for the first time, and send the encrypted key string to the server.

The request obtaining module 706 is configured to obtain a document upload request triggered by the user in the application interface.

The symmetric encryption module 708 is configured to parse the document carried in the document upload request, locate the privacy field in the document, and use the randomly generated key string to symmetrically encrypt the privacy field to generate the document ciphertext.

The document uploading module 710 is configured to upload the generated document ciphertext to the server, so that the server decrypts the uploaded document ciphertext according to the received encrypted key string and the server private key.

In one embodiment, as shown in FIG. 10, the symmetric encryption module 708 includes:

The document parsing module 802 is configured to obtain a document to be uploaded according to a document uploading request, and parse the document to obtain the document content by using a tool that supports the document format.

The extended field generating module 804 is configured to search for a privacy field to be encrypted in the document content, obtain location information of the privacy field, and collect the obtained location information to generate an extension field.

The encryption module 806 is configured to symmetrically encrypt the privacy field and the extension field in the document by using the randomly generated key string to generate the document ciphertext and the encrypted extension field.

In one embodiment, the document content is a format in which the field name corresponds to a field value; the privacy field to be encrypted is a field value.

The extended field generating module 804 is further configured to obtain all the field names in the document content, and generate all the field names in the set to generate the extended field.

The document uploading module 710 is further configured to send the generated document ciphertext and the encrypted extension field to the server, so that the server decrypts the extended field to obtain a set of all the field names, and the field name is determined. Each private field in the ciphertext of the document is decrypted and the private field of the location is decrypted to obtain the clear text of the document.

In one embodiment, as shown in FIG. 11, an information decryption apparatus is provided, the apparatus comprising:

The communication request receiving module 902 is configured to receive a communication request sent by the application in the mobile terminal, and obtain a key string carried in the communication request, where the key string is randomly generated by the mobile terminal when the application is started, and is pre-advertised. The server public key is asymmetrically encrypted.

The document ciphertext receiving module 904 is configured to receive a document uploading request sent by the mobile terminal, and obtain a document ciphertext carried in the document uploading request.

The document decryption module 906 is configured to decrypt the key string using the server private key and decrypt the document ciphertext using the decrypted key string to cause the document to display a privacy field.

In an embodiment, the document upload request further carries an encrypted field that is encrypted;

The document decryption module 906 is further configured to decrypt the key string by using the server private key, and decrypt the extended field by using the decrypted key string to obtain location information corresponding to the encrypted privacy field in the ciphertext of the document; and locate the document dense according to the location information. The privacy field in the text decrypts the located privacy field using the decrypted key string to obtain a clear text of the document showing the privacy field.

In one embodiment, a computer device is provided, which can be a mobile terminal, including a memory and a processor, the memory storing computer readable instructions, when executed by the processor, causing the processor to execute The following steps: when the application in the mobile terminal is detected to switch to the on state, the key string is randomly generated, and the generated key string is stored; when the application first sends a communication request to the server, the server is pre-published by the server. The key string generated by asymmetrically encrypting the public key, and sending the encrypted key string to the server; obtaining a document upload request triggered by the user in the application interface; parsing the document carried in the document upload request, and locating the document a privacy field, and using the randomly generated key string symmetrically encrypting the privacy field to generate a document ciphertext; and uploading the generated document ciphertext to the server so that the server receives the encrypted key string and the server private key according to the received Decrypt the uploaded document ciphertext.

In one embodiment, the step of parsing the document carried in the document upload request by the computer device processor, locating the privacy field in the document, and symmetrically encrypting the privacy field using the randomly generated key string to generate the document ciphertext comprises: Get the documents to be uploaded according to the document upload request, use support The document format tool parses the document to obtain the document content; finds the privacy field to be encrypted in the document content, obtains the location information of the privacy field, and aggregates the acquired location information to generate an extension field; and symmetrically encrypts the document by using the randomly generated key string In the privacy field and extension field, the document ciphertext and the encrypted extension field are generated.

In one embodiment, the document content is a format in which the field name corresponds to the field value; the privacy field to be encrypted is a field value;

The step of the computer device processor searching for the privacy field to be encrypted in the document content, obtaining the location information of the privacy field, and collecting the acquired location information to generate the extension field is: obtaining all the field names in the document content, and collecting the acquired All field names generate extension fields;

The step of uploading the generated document ciphertext by the computer device processor to the server, so that the server decrypts the uploaded document ciphertext according to the received encrypted key string and the server private key is: generating the generated document ciphertext And the encrypted extension field is sent to the server, so that the server decrypts the extended field to obtain a set of all the field names, locates each privacy field in the document ciphertext by the field name, and decrypts the located privacy field to obtain the document plaintext.

In one embodiment, a computer device is provided, the computer device being a server, comprising a memory and a processor, the memory storing computer readable instructions, the computer readable instructions being executed by the processor, causing the processor to perform the following Step: receiving a communication request sent by the application in the mobile terminal, and acquiring a key string carried in the communication request, where the key string is randomly generated by the mobile terminal when the application is started, and the pre-published server public key is asymmetric Encrypting processing; receiving a document uploading request sent by the mobile terminal, acquiring a document ciphertext carried in the document uploading request; and decrypting the key string by using the server private key, and decrypting the document ciphertext by using the decrypted key string, so that The document shows the privacy field.

The computer device processor performs decryption of the key string using the server private key and decrypts the document ciphertext using the decrypted key string, so that the document displays the privacy field by decrypting the key character using the server private key String, and decrypting the extended field by using the decrypted key string to obtain location information corresponding to the encrypted privacy field in the ciphertext of the document; locating the privacy field in the ciphertext of the document according to the location information, and decrypting the location using the decrypted key string Privacy field, get the privacy field The document is clear.

In one embodiment, there is provided one or more computer readable non-volatile storage media having computer readable instructions, when executed by one or more processors, causing one or more processors Performing the following steps: when the application in the mobile terminal is detected to switch to the on state, the key string is randomly generated, and the generated key string is stored; when the application first sends a communication request to the server, the server pre-advertises The server public key asymmetrically encrypts the generated key string, and sends the encrypted key string to the server; obtains a document upload request triggered by the user in the application interface; parses the document carried in the document upload request, and locates the document In the privacy field, and using the randomly generated key string symmetrically encrypting the privacy field to generate the document ciphertext; and uploading the generated document ciphertext to the server, so that the server is based on the received encrypted key string and the server private The key decrypts the uploaded document ciphertext.

In an embodiment, the step of parsing the document carried in the document upload request by the processor, locating the privacy field in the document, and symmetrically encrypting the privacy field using the randomly generated key string to generate the document ciphertext comprises: according to the document Uploading a request to obtain a document to be uploaded, parsing the document using a tool that supports the document format to obtain the document content; finding a privacy field to be encrypted in the document content, obtaining location information of the privacy field, and collecting the obtained location information to generate an extension field; and using The randomly generated key string symmetrically encrypts the privacy field and the extension field in the document, and generates a document ciphertext and an encrypted extension field.

The step of the processor performing the search for the privacy field to be encrypted in the document content, obtaining the location information of the privacy field, and collecting the acquired location information to generate the extension field is: obtaining all the field names in the document content, and collecting all the fields in the collection. Name generation extension field;

The step of uploading the generated document ciphertext to the server by the processor, so that the server decrypts the uploaded document ciphertext according to the received encrypted key string and the server private key is: the generated document ciphertext and encryption The extended field is sent to the server, so that the server decrypts the extended field to obtain a set of all field names, and locates each privacy field in the document ciphertext by the field name, and determines The privacy field of the bit is decrypted to get the document plaintext.

In one embodiment, there is provided one or more computer readable non-volatile storage media having stored readable instructions that, when executed by one or more processors, cause one or more processors The following steps are performed: receiving a communication request sent by an application in the mobile terminal, and acquiring a key string carried in the communication request, where the key string is randomly generated by the mobile terminal when the application is started, and the pre-published server public key Asymmetric encryption processing; receiving a document upload request sent by the mobile terminal, acquiring a document ciphertext carried in the document upload request; and decrypting the key string by using the server private key, and decrypting the document ciphertext by using the decrypted key string, To make the document display a privacy field.

The step of decrypting the key string by the processor using the server private key and decrypting the document ciphertext using the decrypted key string, so that the document displays the privacy field is: decrypting the key string using the server private key, And decrypting the extended field by using the decrypted key string to obtain location information corresponding to the encrypted privacy field in the ciphertext of the document; and locating the privacy field in the ciphertext according to the location information, and decrypting the located privacy by using the decrypted key string Field, get the document plaintext showing the privacy field.

A person skilled in the art can understand that all or part of the process of implementing the above embodiment method can be completed by computing readable instructions to instruct related hardware, and the program can be stored in a computer readable storage medium. When executed, the flow of an embodiment of the methods as described above may be included. The storage medium may be a non-volatile storage medium such as a magnetic disk, an optical disk, or a read-only memory (ROM). .

The technical features of the above embodiments may be arbitrarily combined. For the sake of brevity of description, all possible combinations of the technical features in the above embodiments are not described. However, as long as there is no contradiction in the combination of these technical features, It is considered to be the range described in this specification.

The above embodiments are merely illustrative of several embodiments of the present application, and the description thereof is more specific and detailed, but is not to be construed as limiting the scope of the invention. It should be noted that a number of variations and modifications may be made by those skilled in the art without departing from the spirit and scope of the present application. Therefore, the scope of the invention should be determined by the appended claims.

Claims

An information encryption method, including:

When it is detected that the application in the mobile terminal switches to the on state, the key string is randomly generated, and the generated key string is stored;

When the application sends a communication request to the server for the first time, the generated key string is asymmetrically encrypted using a server public key pre-published by the server, and the encrypted key string is sent to the server;

Obtaining a document upload request triggered by the user in the application interface;

Parsing a document carried in the document upload request, locating a privacy field in the document, and symmetrically encrypting the privacy field to generate a document ciphertext by using the randomly generated key string; and

And uploading the generated document ciphertext to the server, so that the server decrypts the uploaded document ciphertext according to the received encrypted key string and the server private key.
The method according to claim 1, wherein the parsing the document carried in the document upload request, locating a privacy field in the document, and symmetrically encrypting the password using the randomly generated key string The privacy field generates a document ciphertext including:

Obtaining a document to be uploaded according to the document uploading request, parsing the document by using a tool supporting the document format to obtain a document content;

Searching for a privacy field to be encrypted in the document content, acquiring location information of the privacy field, and collecting the obtained location information to generate an extension field; and

The privacy field and the extension field in the document are symmetrically encrypted using the randomly generated key string to generate a document ciphertext and an encrypted extension field.
The method according to claim 2, wherein the document content is a format in which a field name corresponds to a field value; and the privacy field to be encrypted is the field value;

And searching for the privacy field to be encrypted in the document content, acquiring location information of the privacy field, and collecting the obtained location information to generate an extension field: acquiring all field names in the document content, and collecting all the acquired Field name generation extension field;

Uploading the generated document ciphertext to the server, so that the server is connected according to the server Decrypting the encrypted key string and the server private key to decrypt the uploaded document ciphertext: sending the generated document ciphertext and the encrypted extension field to the server, so as to The server decrypts the extended field to obtain a set of all the field names, locates each of the privacy fields in the document ciphertext by using the field name, and decrypts the located privacy field to obtain a clear text of the document. .
A method of information decryption, comprising:

Receiving a communication request sent by the application in the mobile terminal, and acquiring a key string carried in the communication request, where the key string is randomly generated by the mobile terminal when the application is started, and is pre-announced Server public key asymmetric encryption processing;

Receiving a document upload request sent by the mobile terminal, and acquiring a document ciphertext carried in the document upload request; and

The key string is decrypted using the server private key and the decrypted document string is used to decrypt the document ciphertext such that the document displays a privacy field.
The method according to claim 4, wherein the document upload request further carries an extended field that is encrypted;

Decrypting the key string using a server private key and decrypting the document ciphertext using the decrypted key string such that the document displays a privacy field as: decrypting the key using a server private key a string, and decrypting the extended field by using the decrypted key string to obtain location information corresponding to the encrypted privacy field in the ciphertext of the document; and

And locating the privacy field in the document ciphertext according to the location information, and decrypting the located privacy field by using the decrypted key string to obtain a document plaintext displaying the privacy field.
An information encryption device includes:

a key string generating module, configured to randomly generate a key string when the application is switched to the open state in the mobile terminal, and store the generated key string;

An asymmetric cryptographic module, when the application first sends a communication request to a server, The generated key string is asymmetrically encrypted using a server public key pre-published by the server, and the encrypted key string is sent to the server;

The request obtaining module is configured to obtain a document uploading request triggered by the user in the application interface;

a symmetric cryptographic module, configured to parse a document carried in the document uploading request, locate a privacy field in the document, and symmetrically encrypt the private field to generate a document ciphertext by using the randomly generated key string; and

And a document uploading module, configured to upload the generated document ciphertext to the server, so that the server decrypts the uploaded document ciphertext according to the received encrypted key string and the server private key.
The apparatus according to claim 6, wherein the symmetric encryption module comprises:

a document parsing module, configured to obtain a document to be uploaded according to the document uploading request, and parse the document to obtain a document content by using a tool that supports the document format;

An extended field generating module, configured to search for a privacy field to be encrypted in the document content, obtain location information of the privacy field, and collect the obtained location information to generate an extension field; and

And an encryption module, configured to symmetrically encrypt the privacy field and the extension field in the document by using the randomly generated key string, and generate a document ciphertext and an encrypted extension field.
The device according to claim 7, wherein the document content is a format in which a field name corresponds to a field value; and the privacy field to be encrypted is the field value;

The extended field generating module is further configured to acquire all field names in the content of the document, and generate an extended field for all field names obtained by the set; and

The document uploading module is further configured to send the generated document ciphertext and the encrypted extension field to the server, so that the server decrypts the extended field to obtain all the field names. And collecting, by using the field name, each of the privacy fields in the document ciphertext, and decrypting the located privacy field to obtain a document plaintext.
An information decryption device comprising:

a communication request receiving module, configured to receive a communication request sent by an application in the mobile terminal, and obtain Obtaining a key string carried in the communication request, the key string is randomly generated by the mobile terminal when the application is started, and is asymmetrically encrypted by a pre-published server public key;

a document ciphertext receiving module, configured to receive a document uploading request sent by the mobile terminal, and obtain a document ciphertext carried in the document uploading request;

A document decryption module for decrypting a key string using a server private key and decrypting the document ciphertext using the decrypted key string to cause the document to display a privacy field.
The apparatus according to claim 9, wherein the document uploading request further carries an encrypted processing extension field; the document decryption module is further configured to decrypt the key string by using a server private key, and use the decrypted The key string decryption extension field obtains the location information corresponding to the encrypted privacy field in the document ciphertext; locates the privacy field in the document ciphertext according to the location information, and decrypts the located privacy field by using the decrypted key string to obtain the displayed The document for the privacy field is clear.
A computer device comprising a memory and a processor, wherein the memory stores computationally readable instructions, the computer readable instructions being executed by the processor such that the processor performs the following steps:

When it is detected that the application in the mobile terminal switches to the on state, the key string is randomly generated, and the generated key string is stored;

When the application sends a communication request to the server for the first time, the generated key string is asymmetrically encrypted using a server public key pre-published by the server, and the encrypted key string is sent to the server;

Obtaining a document upload request triggered by the user in the application interface;

Parsing a document carried in the document upload request, locating a privacy field in the document, and symmetrically encrypting the privacy field to generate a document ciphertext by using the randomly generated key string; and

And uploading the generated document ciphertext to the server, so that the server decrypts the uploaded document ciphertext according to the received encrypted key string and the server private key.
The computer device of claim 11 wherein said processor executes The computer readable instructions also perform the following steps:

Obtaining a document to be uploaded according to the document uploading request, parsing the document by using a tool supporting the document format to obtain a document content;

Searching for a privacy field to be encrypted in the document content, acquiring location information of the privacy field, and collecting the obtained location information to generate an extension field; and

The privacy field and the extension field in the document are symmetrically encrypted using the randomly generated key string to generate a document ciphertext and an encrypted extension field.
The computer device according to claim 12, wherein the document content is a format in which a field name corresponds to a field value; and the privacy field to be encrypted is the field value;

When the processor executes the computer readable instructions, the method further includes: acquiring all field names in the document content, and generating, by the set, all field names to generate an extension field;

The processor, when executing the computer readable instructions, further performing the steps of: transmitting the generated document ciphertext and the encrypted extension field to the server, so that the server performs the extended field Decrypting obtains a set of all the field names, locates each of the privacy fields in the document ciphertext by using the field name, and decrypts the located privacy field to obtain a document plaintext.
A computer device comprising a memory and a processor, wherein the memory stores computationally readable instructions, the computer readable instructions being executed by the processor such that the processor performs the following steps:

Receiving a communication request sent by the application in the mobile terminal, and acquiring a key string carried in the communication request, where the key string is randomly generated by the mobile terminal when the application is started, and is pre-announced Server public key asymmetric encryption processing;

Receiving a document upload request sent by the mobile terminal, and acquiring a document ciphertext carried in the document upload request; and

The key string is decrypted using the server private key and the decrypted document string is used to decrypt the document ciphertext such that the document displays a privacy field.
Computer device according to claim 14, wherein said document upload The request further carries an extended field of encryption processing; when the processor executes the computer readable instructions, the method further performs the steps of: decrypting the key string using a server private key, and using the decrypted key character Decrypting the extended field to obtain location information corresponding to the encrypted privacy field in the ciphertext of the document; and

And locating the privacy field in the document ciphertext according to the location information, and decrypting the located privacy field by using the decrypted key string to obtain a document plaintext displaying the privacy field.
One or more computer readable non-volatile storage media storing computer readable instructions, when executed by one or more processors, cause one or more processors to perform the steps of:

When it is detected that the application in the mobile terminal switches to the on state, the key string is randomly generated, and the generated key string is stored;

When the application sends a communication request to the server for the first time, the generated key string is asymmetrically encrypted using a server public key pre-published by the server, and the encrypted key string is sent to the server;

Obtaining a document upload request triggered by the user in the application interface;

Parsing a document carried in the document upload request, locating a privacy field in the document, and symmetrically encrypting the privacy field to generate a document ciphertext by using the randomly generated key string; and

And uploading the generated document ciphertext to the server, so that the server decrypts the uploaded document ciphertext according to the received encrypted key string and the server private key.
The storage medium of claim 16 wherein said computer readable instructions are further executed by said processor to perform the following steps:

Obtaining a document to be uploaded according to the document uploading request, parsing the document by using a tool supporting the document format to obtain a document content;

Searching for a privacy field to be encrypted in the document content, acquiring location information of the privacy field, and collecting the obtained location information to generate an extension field; and

The privacy field and the extension field in the document are symmetrically encrypted using the randomly generated key string to generate a document ciphertext and an encrypted extension field.
The storage medium according to claim 17, wherein the document content is a format in which a field name corresponds to a field value; and the privacy field to be encrypted is the field value;

The computer readable instructions, when executed by the processor, further perform the steps of: acquiring all field names in the document content, and generating, by the set, all field names to generate an extension field;

The computer readable instructions, when executed by the processor, further perform the steps of: transmitting the generated document ciphertext and the encrypted extension field to the server to cause the server to pair the extension field Performing decryption to obtain a set of all the field names, and locating each of the privacy fields in the document ciphertext by using the field name, and decrypting the located privacy field to obtain a document plaintext.
One or more computer readable non-volatile storage media storing computer readable instructions, when executed by one or more processors, cause one or more processors to perform the steps of:

Receiving a communication request sent by the application in the mobile terminal, and acquiring a key string carried in the communication request, where the key string is randomly generated by the mobile terminal when the application is started, and is pre-announced Server public key asymmetric encryption processing;

Receiving a document upload request sent by the mobile terminal, and acquiring a document ciphertext carried in the document upload request; and

The key string is decrypted using the server private key and the decrypted document string is used to decrypt the document ciphertext such that the document displays a privacy field.
The storage medium according to claim 19, wherein the document upload request further carries an extended field that is encrypted;

The computer readable instructions, when executed by the processor, further perform the steps of: decrypting the key string using a server private key, and decrypting the extended field using the decrypted key string to obtain the Location information corresponding to the encrypted privacy field in the document ciphertext; and

Locating the privacy field in the document ciphertext according to the location information, using the decrypted The key string decrypts the located privacy field to obtain a document plaintext displaying the privacy field.