WO2021036952A1

WO2021036952A1 - Method for encrypted transmission of data

Info

Publication number: WO2021036952A1
Application number: PCT/CN2020/110620
Authority: WO
Inventors: 朱小军; 肖列
Original assignee: 杭州来布科技有限公司
Priority date: 2019-08-23
Filing date: 2020-08-21
Publication date: 2021-03-04
Also published as: CN110572261A

Abstract

The present invention relates to a method for encrypted transmission of data. The method comprises: S1, a data sending end generating a first part of a data key, and sending the first part of the data key to a data receiving end; S2, the data receiving end generating a second part of the data key, and sending the second part of the data key to the data sending end; S3, the first part of the data key and the second part of the data key generating an encryption key and a decryption key; S4, the data sending end using the encryption key to encrypt data to be transmitted, and sending generated encrypted data to the data receiving end; and S5, the data receiving end using the decryption key to decrypt the received encrypted data, so as to obtain the data to be transmitted. The encryption key in the present invention is jointly generated by the data sending end and the data receiving end, and only part of the key is transmitted each time, thereby effectively preventing data interception and data hacking, and improving the data transmission security.

Description

A data encryption transmission method

Technical field

The invention relates to the field of data transmission security, and more specifically, to a data encryption transmission method.

Background technique

The secure transmission of data is an eternal topic in the information age, and the secure transmission of data is related to the privacy of users. The existing data transmission method encrypts the transmitted data, but the encryption key used is only generated by the sender. The encryption key can be cracked by cracking the sender end, and the data can also be intercepted to imitate and deceive, and the security is low. .

technical problem

The technical problem to be solved by the present invention is to provide a data encryption transmission method in view of the above-mentioned defects of the prior art.

Technical solutions

The technical solution adopted by the present invention to solve its technical problems is: constructing a data encryption transmission method, including:

S1. The data sending end generates a first partial data key, and sends the first partial data key to the data receiving end;

S2. The data receiving end generates a second partial data key, and sends the second partial data key to the data sending end;

S3. Generate an encryption key and a decryption key from the first part data key and the second part data key;

S4. The data sending end uses the encryption key to encrypt the data to be transmitted, and sends the generated encrypted data to the data receiving end;

S5. The data receiving end uses the decryption key to decrypt the received encrypted data to obtain the data to be transmitted.

Further, in the data encryption transmission method of the present invention, the step S1 sending the first partial data key to the data receiving end includes:

S11. Use a preset encryption algorithm to encrypt the first part of the data key, and send the generated first encryption key to the data receiving end;

S12. The data receiving end uses a preset decryption algorithm corresponding to the preset encryption algorithm to decrypt the first encryption key to obtain the first partial data key.

Further, in the data encryption transmission method of the present invention, the step S2 sending the second partial data key to the data sending end includes:

S21. Use the first partial data key to encrypt the second partial data key, and send the generated second encryption key to the data sending end;

S22. The data sending end uses the first partial data key to decrypt the second encryption key to obtain the second partial data key;

or

The step S2 sending the second partial data key to the data sending end includes:

S23. Use a preset encryption algorithm to encrypt the second part of the data key, and send the generated second encryption key to the data sending end;

S24. The data sending end uses a preset decryption algorithm corresponding to the preset encryption algorithm to decrypt the second encryption key to obtain the second partial data key.

Further, in the data encryption transmission method of the present invention, the preset encryption algorithm is a private key of an asymmetric encryption algorithm, and the preset decryption algorithm is a public key of the asymmetric encryption algorithm.

Further, in the data encryption transmission method of the present invention, the private key of the asymmetric encryption algorithm is stored in the key storage area of the encryption chip in the data sending end, and the key storage area is an external device Unreadable area.

Further, in the data encryption transmission method of the present invention, the encryption key in the step S3 is a symmetric algorithm encryption key, and the decryption key is a symmetric algorithm decryption key.

Further, in the data encryption transmission method of the present invention, in the step S1, the data sending end generating the first partial data key includes: the random number generator of the data sending end generates the first partial data key, and each The key of the first part of the data generated this time is different;

In the step S2, the data receiving end generating the second partial data key includes: the random number generator of the data receiving end generates the second partial data key, and the second partial data key generated each time is different .

Further, in the data encryption transmission method of the present invention, the data to be transmitted in the step S4 is stored in the FLASH memory of the data sending end using a circular queue, and the data between the latest data pointer and the current data pointer is Is the data to be transmitted.

Further, in the data encryption transmission method of the present invention, after the step S5, the method further includes:

S6. Determine whether the session connection duration between the data sending end and the data receiving end reaches a preset duration;

S7. If yes, re-establish a session connection between the data sending end and the data receiving end.

Further, in the data encryption transmission method of the present invention, the data sending end is a data collection terminal, and the data receiving end is a server.

In addition, the present invention also provides a data encryption transmission method, which is applied to the data sending end, and includes:

F1. The data sending end generates a first partial data key, and sends the first partial data key;

F2. The data sending end receives the second part of the data key sent by the data receiving end;

F3. Generate an encryption key from the first part data key and the second part data key;

F4. The data sending end uses the encryption key to encrypt the data to be transmitted, and sends the generated encrypted data.

Further, in the data encryption transmission method of the present invention, the step F1 sending the first part of the data key includes: F11, encrypting the first part of the data key using a preset encryption algorithm, and sending the generated first part of the data key. Encryption key.

Further, in the data encryption transmission method of the present invention, the step F2 includes:

F21. The data sending end receives a second encryption key sent by the data receiving end, where the second encryption key is generated by encrypting the second part of the data key by the first part of the data key;

F22. The data sending end uses the first partial data key to decrypt the second encryption key to obtain the second partial data key;

or

The step F2 includes:

F23. The data sending end receives a second encryption key sent by the data receiving end, where the second encryption key is generated by encrypting the second part of the data key by a preset encryption algorithm;

F24. The data sending end uses a preset decryption algorithm corresponding to the preset encryption algorithm to decrypt the second encryption key to obtain the second partial data key.

Further, in the data encryption transmission method of the present invention, the preset encryption algorithm is a private key of an asymmetric encryption algorithm, and the private key of the asymmetric encryption algorithm is stored in the encryption chip of the data sending end. A key storage area, and the key storage area is an area that is not readable by an external device.

Further, in the data encryption transmission method of the present invention, in the step F1, the data sending end generating the first partial data key includes: the random number generator of the data sending end generates the first partial data key, and each The keys of the first part of the data generated this time are different.

Further, in the data encryption transmission method of the present invention, the data to be transmitted in the step F4 is stored in the FLASH memory of the data sending end using a circular queue, and the data between the latest data pointer and the current data pointer is Is the data to be transmitted.

Further, in the data encryption transmission method of the present invention, the encryption key in step F3 is a symmetric algorithm encryption key;

The data sending end is a data collection terminal, and the data receiving end is a server.

In addition, the present invention also provides a data encryption transmission method, which is applied to the data receiving end, and includes:

J1. The data receiving end receives the first part of the data key sent by the data sending end;

J2, the data receiving end generates a second partial data key, and sends the second partial data key;

J3. Generate a decryption key from the first partial data key and the second partial data key;

J4. The data receiving end receives encrypted data sent by the data sending end, where the encrypted data includes data to be transmitted;

J5. The data receiving end uses the decryption key to decrypt the received encrypted data to obtain the data to be transmitted.

Further, in the data encryption transmission method of the present invention, the step J1 includes:

J11. The data receiving end receives the first encryption key sent by the data sending end, where the first encryption key is obtained by encrypting the first part of the data key through a preset encryption algorithm;

J12. The data receiving end uses a preset decryption algorithm corresponding to the preset encryption algorithm to decrypt the first encryption key to obtain the first partial data key.

Further, in the data encryption transmission method of the present invention, the sending of the second partial data key in step J2 includes: J21, using the first partial data key to encrypt the second partial data key, Send the generated second encryption key; or

J22. Use a preset encryption algorithm to encrypt the second part of the data key, and send the generated second encryption key.

Further, in the data encryption transmission method of the present invention, in the step J2, the data receiving end generating the second partial data key includes: the random number generator of the data receiving end generates the second partial data key, And the second part of the data key generated each time is different.

Further, in the data encryption transmission method of the present invention, the decryption key is a symmetric algorithm decryption key;

Beneficial effect

A data encryption transmission method implementing the present invention has the following beneficial effects: the encryption key of the present invention is jointly generated by the data sending end and the data receiving end, and only a part of the key is transmitted each time, effectively preventing data interception and data transmission. Crack, improve data transmission security.

Description of the drawings

The present invention will be further described below in conjunction with the accompanying drawings and embodiments. In the accompanying drawings:

FIG. 1 is a flowchart of a method for data encryption transmission provided by an embodiment;

FIG. 2 is a flowchart of a data encryption transmission method provided by an embodiment;

FIG. 3 is a flowchart of a data encryption transmission method provided by an embodiment;

FIG. 4 is a flowchart of a data encryption transmission method provided by an embodiment;

Fig. 5 is a sequence diagram of a data encryption transmission method provided by an embodiment.

Embodiments of the present invention

In order to have a clearer understanding of the technical features, objectives and effects of the present invention, specific embodiments of the present invention will now be described in detail with reference to the accompanying drawings.

Example

1, the data encryption transmission method of this embodiment is applied to data transmission between a data sending end and a data receiving end. In this embodiment, a process of transmitting data at a time between the data sending end and the data receiving end is described in this embodiment. It can be understood that the data receiving end can also be used as a data sending end at the same time, and the data sending end can also be used as a data receiving end at the same time, thereby realizing two-way data transmission. The method includes the following steps:

S1. The data sending end generates a first part of the data key, and sends the first part of the data key to the data receiving end.

Specifically, the random number generator at the data sending end generates the first part of the data key, and the random number generated each time is different, so that the first part of the data key generated each time is different. Because the key of the first part of the data generated each time is different, it is guaranteed that the key of the first part of the data transmitted to the data receiving end is different each time.

In order to further improve the security of the first part of the data key, this embodiment encrypts the first part of the data key, and sends the encrypted first part of the data key. The specific encryption process is as follows:

S11. Use a preset encryption algorithm to encrypt the first part of the data key, and send the generated first encryption key to the data receiving end.

S12. The data receiving end uses a preset decryption algorithm corresponding to the preset encryption algorithm to decrypt the first encryption key to obtain the first partial data key. The preset encryption algorithm and the preset decryption algorithm correspond to each other, and are stored in the data sending end and the data receiving end in advance.

Alternatively, in the foregoing encryption process, the preset encryption algorithm is the private key of the asymmetric encryption algorithm, and the corresponding preset decryption algorithm in the decryption process is the public key of the asymmetric encryption algorithm. The private key of the asymmetric encryption algorithm is stored in the key storage area of the encryption chip in the data sending end, and the key storage area is an unreadable area for external devices. Because the private key of the asymmetric encryption algorithm cannot be read, it can only be used internally by the encryption chip, thereby achieving absolute security at the source.

S2. The data receiving end generates the second part of the data key, and sends the second part of the data key to the data sending end.

Specifically, the random number generator at the data receiving end generates the second part of the data key, and the second part of the data key generated each time is different. Since the key of the second part of the data generated each time is different, it is guaranteed that the key of the second part of the data transmitted to the data sender is different each time.

In order to further improve the security of the second part of the data key, this embodiment performs encryption processing on the second part of the data key, and sends the encrypted second part of the data key. This embodiment provides two key encryption methods for the second part of the data:

The first encryption method of the second part of the data key:

S21. Use the first partial data key to encrypt the second partial data key, and send the generated second encryption key to the data sending end. If the first part of data is encrypted using a preset encryption algorithm, the data receiving end first needs to decrypt it by using a preset decryption algorithm corresponding to the preset encryption algorithm to obtain the first part of the data key.

S22. The data sending end uses the first partial data key to decrypt the second encryption key to obtain the second partial data key. Since the first part of the data key is generated by the data sender, the data sender has already stored the first part of the data key.

The second encryption method of the second part of the data key:

S23. Use a preset encryption algorithm to encrypt the second part of the data key, and send the generated second encryption key to the data sending end.

S24. The data sending end uses a preset decryption algorithm corresponding to the preset encryption algorithm to decrypt the second encryption key to obtain the second partial data key. The preset encryption algorithm and the preset decryption algorithm correspond to each other, and are stored in the data sending end and the data receiving end in advance.

Alternatively, the preset encryption algorithm is the private key of the asymmetric encryption algorithm, and the preset decryption algorithm is the public key of the asymmetric encryption algorithm. The private key of the asymmetric encryption algorithm is stored in the key storage area of the encryption chip in the data receiving end, and the key storage area is an unreadable area for external devices. Because the private key of the asymmetric encryption algorithm cannot be read, it can only be used internally by the encryption chip, thereby achieving absolute security at the source.

S3. Generate an encryption key and a decryption key from the first part of the data key and the second part of the data key.

Specifically, after the above steps, the first part of the data key and the second part of the data key are stored on the data sending end and the data receiving end, and the data sending end is encrypted by the first part of the data key and the second part of the data key. The encryption key and the decryption key are generated by the data receiving end from the first part of the data key and the second part of the data key. In this embodiment, only one one-way data transmission is described. The data sending end only needs to generate an encryption key from the first part of the data key and the second part of the data key, and the data receiving end is composed of the first part of the data key and the second part of the data. The key only needs to generate the decryption key.

Alternatively, the encryption key is a symmetric algorithm encryption key, and the decryption key is a symmetric algorithm decryption key. For example, the symmetric algorithm encryption key is the RC4 encryption key, and the symmetric algorithm decryption key is the RC4 decryption key.

S4. The data sending end uses the encryption key to encrypt the data to be transmitted, and sends the generated encrypted data to the data receiving end. First, read the data to be transmitted at the data sender. For example, the data to be transmitted in the data sender is stored in the FLASH memory of the data sender using a circular queue, and the data between the latest data pointer and the current data pointer is the data to be transmitted. After reading the data to be transmitted, use the encryption key generated from the first part of the data key and the second part of the data key to encrypt the data to be transmitted, generate encrypted data after encryption, and send the generated encrypted data to the data receiving end.

S5. The data receiving end uses the decryption key to decrypt the received encrypted data to obtain the data to be transmitted. The data receiving end generates an encryption key and a decryption key from the first part of the data key and the second part of the data key, because the encrypted data is generated by the first part of the data key and the second part of the data key to generate the encryption key to encrypt the data to be transmitted , The corresponding data receiving end uses the decryption key generated by the first part data key and the second part data key to decrypt the encrypted data to obtain the data to be transmitted, so as to realize the safe transmission of the data.

Alternatively, the network between the data sending end and the data receiving end is a wired communication network or a wireless communication network, which is not limited in this embodiment, and any network capable of data transmission can use the data encryption transmission method of this embodiment to transmit The data all belong to the protection scope of this embodiment.

Alternatively, the data sending end is a data collection terminal, and the data receiving end is a server. The encryption key in this embodiment is jointly generated by the data sending end and the data receiving end, and only a part of the key is transmitted each time, which effectively prevents data interception and data cracking, and improves data transmission security.

Example

Referring to FIG. 2, on the basis of the foregoing embodiment, the data encryption transmission method of this embodiment further includes after step S5:

S6. Determine whether the session connection duration between the data sending end and the data receiving end reaches a preset duration. The timing starts when the data sending end and the data receiving end establish a session connection, and the preset duration can be set as needed.

S7. If the preset duration is reached, the session connection between the data sending end and the data receiving end is re-established. When reconnecting, the random number generator at the data sending end regenerates the first part data key, and the regenerated first part data key is different from all the first part data keys previously generated. At the same time, the random number generator at the data receiving end regenerates the second partial data key, and the regenerated second partial data key is different from all the second partial data keys previously generated. Furthermore, the encryption key and the decryption key are generated from the first part of the data key and the second part of the data key again to realize the dynamization of the encryption key and the decryption key.

In this embodiment, the connection between the data sending end and the data receiving end is re-established after the preset session time interval, and the first part of the encryption key and the second part of the encryption key are regenerated at the same time, so that the encryption key and the decryption key are dynamic and improve security. Sex.

Example

Referring to FIG. 3, a data encryption transmission method of this embodiment is applied to a data sending end, and the method includes the following steps:

F1. The data sending end generates the first part of the data key, and sends the first part of the data key.

Specifically, the random number generator at the data sending end generates the first part of the data key, and the first part of the data key generated each time is different. Because the key of the first part of the data generated each time is different, it is guaranteed that the key of the first part of the data transmitted to the data receiving end is different each time.

In order to further improve the security of the first part of the data key, this embodiment encrypts the first part of the data key. The specific encryption process is: F11. Use a preset encryption algorithm to encrypt the first part of the data key, and send the generated first encryption Key; the preset encryption algorithm is stored in the data sending end in advance.

F2. The data sending end receives the second part of the data key sent by the data receiving end.

Specifically, in order to further improve the security of the second part data key, this embodiment performs encryption processing on the second part data key, and this embodiment provides two encryption methods for the second part data key:

The first encryption method of the second part of the data key:

F21. The data sending end receives the second encryption key sent by the data receiving end, and the second encryption key is generated by encrypting the second part of the data key by the first part of the data key, and the first part of the data key is sent by the data sending end to At the data receiving end.

F22. The data sender uses the first part of the data key to decrypt the second encryption key to obtain the second part of the data key. Since the first part of the data key is generated by the data sender, the data sender has already stored the first part of the data key.

The second encryption method of the second part of the data key:

F23. The data sending end receives the second encryption key sent by the data receiving end, and the second encryption key is generated by encrypting the second part of the data key with a preset encryption algorithm.

F24. The data sending end uses the preset decryption algorithm corresponding to the preset encryption algorithm to decrypt the second encryption key to obtain the second part of the data key.

Alternatively, the preset encryption algorithm is the private key of the asymmetric encryption algorithm, the private key of the asymmetric encryption algorithm is stored in the key storage area of the encryption chip in the data receiving end, and the key storage area is an unreadable area for external devices . Because the private key of the asymmetric encryption algorithm cannot be read, it can only be used internally by the encryption chip, thereby achieving absolute security at the source.

F3. Generate an encryption key from the first part of the data key and the second part of the data key.

Specifically, after the above steps, the first part of the data key and the second part of the data key are stored on the data sending end, and the data sending end generates the encryption key and the decryption key from the first part of the data key and the second part of the data key. key. Alternatively, the encryption key is a symmetric algorithm encryption key. For example, the symmetric algorithm encryption key is an RC4 encryption key.

F4. The data sender uses the encryption key to encrypt the data to be transmitted, and sends the generated encrypted data. First, read the data to be transmitted at the data sender. For example, the data to be transmitted in the data sender is stored in the FLASH memory of the data sender using a circular queue, and the data between the latest data pointer and the current data pointer is the data to be transmitted. After reading the data to be transmitted, use the encryption key generated from the first part of the data key and the second part of the data key to encrypt the data to be transmitted, generate encrypted data after encryption, and send the generated encrypted data to realize safe data transmission.

Alternatively, the data sending end is a data collection terminal, and the data receiving end is a server.

The encryption key in this embodiment is jointly generated by the data sending end and the data receiving end, and only a part of the key is transmitted each time, which effectively prevents data interception and data cracking, and improves data transmission security.

Example

Referring to FIG. 4, a data encryption transmission method of this embodiment is applied to a data receiving end, and the method includes the following steps:

J1. The data receiving end receives the first part of the data key sent by the data sending end. The first part of the data key is generated by the random number generator of the data sending end, and the first part of the data key generated each time is different, that is, the first part of the data key received by the data receiving end is different each time.

In order to further improve the security of the first part of the data key, the data sender encrypts the first part of the data key, that is, the data sender encrypts the first part of the data key using a preset encryption algorithm, and sends the generated first encryption key To the data receiving end.

J11. The data receiving end receives the first encryption key sent by the data sending end, and the first encryption key is obtained by encrypting the first part of the data key through a preset encryption algorithm.

J12. The data receiving end uses the preset decryption algorithm corresponding to the preset encryption algorithm to decrypt the first encryption key to obtain the first part of the data key. The preset encryption algorithm is the private key of the asymmetric encryption algorithm, and the preset decryption algorithm is the public key of the asymmetric encryption algorithm. The preset encryption algorithm and the preset decryption algorithm correspond to each other, and the preset encryption algorithm is stored in the data sending end in advance, and the preset decryption algorithm is stored in the data receiving end in advance. Alternatively, in the foregoing encryption process, the preset encryption algorithm is the private key of the asymmetric encryption algorithm, and the preset decryption algorithm is the public key of the asymmetric encryption algorithm.

J2. The data receiving end generates the second part of the data key and sends the second part of the data key.

In order to further improve the security of the second part of the data key, this embodiment performs encryption processing on the second part of the data key, and this embodiment provides two encryption methods for the second part of the data key:

The first encryption method of the second part of the data key: J21, use the first part of the data key to encrypt the second part of the data key, and send the generated second encryption key; the first part of the data key is sent by the data sender to At the data receiving end.

The second encryption method of the second part of the data key: J22. Use the preset encryption algorithm to encrypt the second part of the data key, and send the generated second encryption key. Alternatively, the preset encryption algorithm is the private key of the asymmetric encryption algorithm, the private key of the asymmetric encryption algorithm is stored in the key storage area of the encryption chip in the data receiving end, and the key storage area is an unreadable area for external devices . Because the private key of the asymmetric encryption algorithm cannot be read, it can only be used internally by the encryption chip, thereby achieving absolute security at the source.

J3. Generate a decryption key from the first part of the data key and the second part of the data key. After the above steps, the first part data key and the second part data key are stored at the data receiving end, and the data receiving end generates an encryption key and a decryption key from the first part data key and the second part data key. Since this embodiment only describes one-way transmission, only the data receiving end needs to generate a decryption key from the first part of the data key and the second part of the data key. Alternatively, the decryption key is a symmetric algorithm decryption key, and the symmetric algorithm decryption key is an RC4 decryption key.

J4. The data receiving end receives the encrypted data sent by the data sending end, and the encrypted data includes the data to be transmitted. The data sending end uses the encryption key generated from the first part data key and the second part data key to encrypt the data to be transmitted, generates encrypted data after encryption, and sends the generated encrypted data to the data receiving end.

J5. The data receiving end uses the decryption key to decrypt the received encrypted data to obtain the data to be transmitted. The data receiving end generates a decryption key from the first part of the data key and the second part of the data key, because the encrypted data is obtained by encrypting the data to be transmitted by the encryption key of the first part of the data key and the second part of the data key, and the corresponding data The receiving end uses the decryption key generated by the first part data key and the second part data key to decrypt the encrypted data to obtain the data to be transmitted, so as to realize the safe transmission of the data.

Example

Referring to FIG. 5, in this embodiment, the data sending end is a data terminal, the data terminal includes a sensor and an encryption chip, the data receiving end is a server, and a 5G network connection is used between the data terminal and the server. The first part of the data key is denoted as M1, the second part of the data key is denoted as M2, the first part of the data key and the second part of the data key are combined into an encryption key and a decryption key M3, and the first part of the data key and the second part are combined into an encryption key and a decryption key M3. Part of the data key is RC4 key. The data encryption transmission method includes the following steps:

Step 1. Data collection: The sensor collects the signal and obtains the data through the analog-to-digital conversion circuit.

Step 2. Data storage: Store the data in FLASH memory.

Step 3. Setting: Set the current data pointer to the latest value.

Step 4. Generate the RC4 key: Generate the RC4 key through the true random number generator of the encryption chip, and the key length can be specified.

Step 5. Encrypt the terminal ID: use the RC4 key to encrypt the terminal ID.

Step 6. Encrypt the RC4 key: encrypt the RC4 key with the RSA private key through the encryption chip.

Step 7. Establish a connection: establish a TCP connection with the server through the 5G module.

Step 8. Transmit ID and RC4 key: Transmit the encrypted terminal ID and RC4 key to the server.

Step 9. Decrypt the ID and RC4 key: The server decrypts the ID and RC4 key.

Step 10. Identity authentication: The server decrypts the RC4 key, decrypts the ID with the RC4 key, and authenticates the identity through ID comparison.

Step 11. Generate M2 randomly: The server generates the second half of the RC4 key M2.

Step 12. Encrypt M2: Use M1 as the key to encrypt M2.

Step 13. Return result: return the encrypted M2 and data serial number.

Step 14. Decrypt M2: The sensor uses M1 to decrypt M2.

Step 15. Obtain M3: M3=M1+M2.

Step 16. Setting: reset the current data serial number to the current data pointer register.

Step 17. Read the data pointer: read the current data serial number.

Step 18. Read data: read data.

Step 19. RC4 encrypts data: Use RC4 to encrypt data with M3 as the key.

Step 20: Transmit encrypted data: transmit encrypted data.

Step 21. Setting: Set the current data serial number to get the current data pointer register.

Step 22: Decrypt the data: The server uses RC4 to decrypt the current data with M3 as the key.

The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments, and the same or similar parts between the various embodiments can be referred to each other. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the description of the method part.

Professionals may further realize that the units and algorithm steps of the examples described in the embodiments disclosed in this article can be implemented by electronic hardware, computer software, or a combination of the two, in order to clearly illustrate the possibilities of hardware and software. Interchangeability, in the above description, the composition and steps of each example have been generally described in accordance with the function. Whether these functions are performed by hardware or software depends on the specific application and design constraint conditions of the technical solution. Professionals and technicians can use different methods for each specific application to implement the described functions, but such implementation should not be considered as going beyond the scope of the present invention.

The steps of the method or algorithm described in combination with the embodiments disclosed in this document can be directly implemented by hardware, a software module executed by a processor, or a combination of the two. The software module can be placed in random access memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disks, removable disks, CD-ROMs, or all areas in the technical field. Any other known storage media.

The above embodiments are only to illustrate the technical concept and features of the present invention, and their purpose is to enable those familiar with the technology to understand the content of the present invention and implement them accordingly, and do not limit the protection scope of the present invention. All equivalent changes and modifications made to the scope of the claims of the present invention shall fall within the scope of the claims of the present invention.

Claims

A data encryption transmission method, characterized in that it comprises:

S1. The data sending end generates a first partial data key, and sends the first partial data key to the data receiving end;

S2. The data receiving end generates a second partial data key, and sends the second partial data key to the data sending end;

S3. Generate an encryption key and a decryption key from the first part data key and the second part data key;

S4. The data sending end uses the encryption key to encrypt the data to be transmitted, and sends the generated encrypted data to the data receiving end;

S5. The data receiving end uses the decryption key to decrypt the received encrypted data to obtain the data to be transmitted.
The data encryption transmission method according to claim 1, wherein in the step S1, sending the first part of the data key to the data receiving end comprises:

S11. Use a preset encryption algorithm to encrypt the first part of the data key, and send the generated first encryption key to the data receiving end;

S12. The data receiving end uses a preset decryption algorithm corresponding to the preset encryption algorithm to decrypt the first encryption key to obtain the first partial data key.
The data encryption transmission method according to claim 1 or 2, wherein the step S2 sending the second part of the data key to the data sending end comprises:

S21. Use the first partial data key to encrypt the second partial data key, and send the generated second encryption key to the data sending end;

S22. The data sending end uses the first partial data key to decrypt the second encryption key to obtain the second partial data key;

or

The step S2 sending the second partial data key to the data sending end includes:

S23. Use a preset encryption algorithm to encrypt the second part of the data key, and send the generated second encryption key to the data sending end;

S24. The data sending end uses a preset decryption algorithm corresponding to the preset encryption algorithm to decrypt the second encryption key to obtain the second partial data key.
The data encryption transmission method according to claim 3, wherein the preset encryption algorithm is a private key of an asymmetric encryption algorithm, and the preset decryption algorithm is a public key of the asymmetric encryption algorithm.
The data encryption transmission method according to claim 4, wherein the private key of the asymmetric encryption algorithm is stored in the key storage area of the encryption chip in the data sending end, and the key storage area is The area not readable by external devices.
The data encryption transmission method according to claim 1, wherein in the step S3, the encryption key is a symmetric algorithm encryption key, and the decryption key is a symmetric algorithm decryption key.
The data encryption transmission method according to claim 1, wherein the generating of the first partial data key by the data sending end in step S1 comprises: generating the first partial data key by a random number generator of the data sending end, And the first part of the data key generated each time is different;

In the step S2, the data receiving end generating the second partial data key includes: the random number generator of the data receiving end generates the second partial data key, and the second partial data key generated each time is different .
The data encryption transmission method according to claim 1, wherein the data to be transmitted in the step S4 is stored in the FLASH memory of the data sending end using a circular queue, between the latest data pointer and the current data pointer The data is the data to be transmitted.
The data encryption transmission method according to claim 1, characterized in that, after the step S5, it further comprises:

S6. Determine whether the session connection duration between the data sending end and the data receiving end reaches a preset duration;

S7. If yes, re-establish a session connection between the data sending end and the data receiving end.
The data encryption transmission method according to claim 1, wherein the data sending end is a data collection terminal, and the data receiving end is a server.
A data encryption transmission method, applied to a data sending end, and is characterized in that it includes:

F1. The data sending end generates a first partial data key, and sends the first partial data key;

F2. The data sending end receives the second part of the data key sent by the data receiving end;

F3. Generate an encryption key from the first part data key and the second part data key;

F4. The data sending end uses the encryption key to encrypt the data to be transmitted, and sends the generated encrypted data.
The data encryption transmission method according to claim 11, wherein the sending of the first part of the data key in the step F1 comprises: F11, encrypting the first part of the data key using a preset encryption algorithm, and sending the generated The first encryption key.
The data encryption transmission method according to claim 12, wherein the step F2 comprises:

F21. The data sending end receives a second encryption key sent by the data receiving end, where the second encryption key is generated by encrypting the second part of the data key by the first part of the data key;

F22. The data sending end uses the first partial data key to decrypt the second encryption key to obtain the second partial data key;

or

The step F2 includes:

F23. The data sending end receives a second encryption key sent by the data receiving end, where the second encryption key is generated by encrypting the second part of the data key by a preset encryption algorithm;

F24. The data sending end uses a preset decryption algorithm corresponding to the preset encryption algorithm to decrypt the second encryption key to obtain the second partial data key.
The data encryption transmission method according to claim 13, wherein the preset encryption algorithm is a private key of an asymmetric encryption algorithm, and the private key of the asymmetric encryption algorithm is stored in an encryption chip in the data sending end The key storage area of, and the key storage area is an area that is not readable by an external device.
The data encryption transmission method according to claim 11, wherein the generating of the first partial data key by the data sending end in step F1 comprises: generating the first partial data key by a random number generator of the data sending end, And the first part of the data key generated each time is different.
The data encryption transmission method according to claim 11, wherein the data to be transmitted in the step F4 is stored in the FLASH memory of the data sending end using a circular queue, between the latest data pointer and the current data pointer The data is the data to be transmitted.
The data encryption transmission method according to claim 11, wherein the encryption key in the step F3 is a symmetric algorithm encryption key;

The data sending end is a data collection terminal, and the data receiving end is a server.
A data encryption transmission method, which is applied to a data receiving end, and is characterized in that it includes:

J1. The data receiving end receives the first part of the data key sent by the data sending end;

J2, the data receiving end generates a second partial data key, and sends the second partial data key;

J3. Generate a decryption key from the first partial data key and the second partial data key;

J4. The data receiving end receives encrypted data sent by the data sending end, where the encrypted data includes data to be transmitted;

J5. The data receiving end uses the decryption key to decrypt the received encrypted data to obtain the data to be transmitted.
The data encryption transmission method according to claim 18, wherein the step J1 comprises:

J11. The data receiving end receives the first encryption key sent by the data sending end, where the first encryption key is obtained by encrypting the first part of the data key through a preset encryption algorithm;

J12. The data receiving end uses a preset decryption algorithm corresponding to the preset encryption algorithm to decrypt the first encryption key to obtain the first partial data key.
The data encryption transmission method according to claim 19, wherein the sending of the second part of the data key in the step J2 comprises: J21, using the first part of the data key to encrypt the second part of the data key Key, send the generated second encryption key; or

J22. Use a preset encryption algorithm to encrypt the second part of the data key, and send the generated second encryption key.
The data encryption transmission method according to claim 20, wherein the preset encryption algorithm is a private key of an asymmetric encryption algorithm, and the preset decryption algorithm is a public key of the asymmetric encryption algorithm.
The data encryption transmission method according to claim 18, wherein the generating of the second part of the data key by the data receiving end in the step J2 comprises: the random number generator of the data receiving end generates the second part of the data encryption key. Key, and the second part of the data key generated each time is different.
The data encryption transmission method according to claim 18, wherein the decryption key is a symmetric algorithm decryption key;

The data sending end is a data collection terminal, and the data receiving end is a server.