CN115001813A - Information security method, system, equipment and medium - Google Patents

Abstract

The invention discloses an information security method, equipment, a system and a medium, wherein the method comprises the following steps: acquiring data to be encrypted sent by a target user and an encryption level corresponding to the data to be encrypted; determining an encryption strategy according to the encryption level; wherein the encryption policy comprises an encryption key and a storage key; and encrypting and storing the data to be encrypted according to the encryption strategy. The information security confidentiality method provided by the embodiment of the invention provides different levels of keys for users in different levels, provides different encryption keys and storage keys for the users in the same level by setting different levels of key parameters, realizes the encryption of confidential information through the encryption keys, and realizes the encryption of confidential information addresses through the storage keys, thereby ensuring the security of data.

Description

An information security and confidentiality method, system, device and medium

technical field

The invention relates to the technical field of information security, in particular to an information security and confidentiality method, system, device and medium.

Background technique

At present, the existing data has relatively low security because its encryption method is relatively simple, and the key used for decryption is generally set by the user himself. The storage path can be used to find the location where the confidential information is stored, so that illegal elements can still decrypt the confidential information through illegal decryption processing after finding the corresponding confidential information in the cloud to obtain the content of the confidential information, which makes the confidential information easy to be stolen.

SUMMARY OF THE INVENTION

In view of the defects in the prior art, the present invention provides an information security and confidentiality method, system, device and medium.

In a first aspect, a method for information security and confidentiality, the method includes the following:

Obtain the data to be encrypted sent by the target user and the encryption level corresponding to the data to be encrypted;

Determine an encryption strategy according to the encryption level; wherein, the encryption strategy includes an encryption key and a storage key;

The data to be encrypted is encrypted and stored according to the encryption policy.

Preferably, before obtaining the data to be encrypted sent by the target user and the encryption level corresponding to the data to be encrypted, the method further includes:

Authenticate the target user;

After the target user's identity authentication is successful, perform level authentication on the target user;

After the target user level authentication is successful, the level key and level key sequence corresponding to the target user are determined from the user database according to the user level, wherein the level key sequence is used to indicate the lowest user level to The set of level keys corresponding to the user level of the target user.

Preferably, the authentication of the user identity includes:

Obtain the identity information of the target user, and extract the user identity from the identity information;

The corresponding identity information is searched in the user database according to the user identifier, and if the query is successful, the user identity authentication is successful.

Preferably, the performing level authentication on the target user includes:

According to the user identification, determine the user level of the target user from the user database;

Send a level authentication request to at least one other user whose level is higher than the target user;

If other users return confirmation information according to the level authentication request, the user level authentication is successful.

Preferably, the determining an encryption policy according to the encryption level includes:

Determine the level key parameters according to the encryption level;

Based on the level key parameters, level key and level key sequence, an encryption key and a storage key are calculated.

Preferably, the formula for calculating the encryption key and the storage key according to the grade key parameter, grade key and grade key sequence is:

E _s =E _m E _m+1 …(E _K ) ²

E _f = E ₁ E ₂ ...E _m-1 E _K

Among them, _Es represents the encryption key, E _f represents the storage key, E _K represents the level key corresponding to the target user level, and m represents the level key parameter.

Preferably, the encrypting and storing the data to be encrypted according to the encryption policy includes:

Encrypt the data to be encrypted by using the encryption key to obtain confidential data, and store the confidential data;

The storage address of the confidential data is obtained, the storage address is encrypted with a storage key to obtain a target access code, and the access to the confidential information is realized through the target access code.

A second aspect provides an information security and confidentiality system, comprising:

an acquisition module, configured to acquire the data to be encrypted sent by the target user and the encryption level corresponding to the data to be encrypted;

a determining module, configured to determine an encryption strategy according to the encryption level; wherein, the encryption strategy includes an encryption key and a storage key;

An execution module, configured to encrypt and store the data to be encrypted according to the encryption policy.

In a third aspect, an information security security device includes: at least one memory and at least one processor;

the at least one memory for storing a machine-readable program;

The at least one processor is configured to invoke the machine-readable program to execute the method of any one of claims 1-7.

In a fourth aspect, a computer-readable medium is provided with computer instructions stored thereon, and when executed by a processor, the computer instructions cause the processor to perform the above method.

The beneficial effects of the present invention are embodied in: the information security and confidentiality method adopted in the embodiment of the present invention provides different levels of keys for users of different levels, and provides different level keys for users of the same level by setting different level key parameters. The encryption key and storage key are realized through the encryption key to realize the encryption of confidential information and the encryption of the address of confidential information, thus ensuring the security of data. Other features and advantages of the present invention will be set forth in the description which follows, and in part will be apparent from the description, or may be learned by practice of the invention. The objectives and other advantages of the invention may be realized and attained by the structure particularly pointed out in the description, claims and drawings.

Description of drawings

In order to illustrate the specific embodiments of the present invention or the technical solutions in the prior art more clearly, the following briefly introduces the accompanying drawings that are required to be used in the description of the specific embodiments or the prior art. Similar elements or parts are generally identified by similar reference numerals throughout the drawings. In the drawings, each element or section is not necessarily drawn to actual scale.

1 is a schematic flowchart of a method for information security and confidentiality provided in Embodiment 1 of the present invention;

2 is a schematic structural diagram of an information security and confidentiality system provided in Embodiment 2 of the present invention;

FIG. 3 is a schematic structural diagram of an information security device according to Embodiment 3 of the present invention.

Detailed ways

Embodiments of the technical solutions of the present invention will be described in detail below with reference to the accompanying drawings. The following examples are only used to more clearly illustrate the technical solutions of the present invention, and are therefore only used as examples, and cannot be used to limit the protection scope of the present invention.

It should be noted that, unless otherwise specified, the technical or scientific terms used in this application should have the usual meanings understood by those skilled in the art to which the present invention belongs.

Example 1

Referring to FIG. 1, FIG. 1 is an information security and confidentiality method provided by an embodiment of the present invention, and the method includes the following steps:

Step 1: obtaining the data to be encrypted sent by the target user and the encryption level corresponding to the data to be encrypted;

It should be noted that before acquiring the data to be encrypted sent by the target user and the encryption level corresponding to the data to be encrypted, the method further includes: performing identity authentication on the target user; after the identity authentication of the target user is successful, performing level authentication on the target user After the target user level authentication is successful, according to the user level, determine the level key and level key sequence corresponding to the target user from the user database, wherein the level key sequence is used to represent the lowest user level The set of level keys corresponding to the user level of the target user.

It should be noted that the authentication of the user identity includes: acquiring the identity information of the target user, and extracting the user identifier from the identity information; searching for the corresponding identity information in the user database according to the user identifier, if the query is successful , the user authentication is successful.

It should be noted that the performing level authentication on the target user includes: determining the user level of the target user from the user database according to the user identifier; sending a level authentication request to at least one other user whose level is higher than the target user ; Other users return confirmation information according to the level authentication request, and the user level authentication is successful.

Through the above method, the user's level key is bound with the user level and user identity, thereby ensuring the uniqueness and security of the level key.

Step 2: Determine an encryption strategy according to the encryption level; wherein, the encryption strategy includes an encryption key and a storage key;

It should be noted that the determining the encryption policy according to the encryption level includes: determining the level key parameter according to the encryption level; calculating the encryption key and the storage key according to the level key parameter, level key and level key sequence .

It should be noted that the formula for calculating the encryption key and the storage key according to the grade key parameter, grade key and grade key sequence is:

E _s =E _m E _m+1 …(E _K ) ²

E _f = E ₁ E ₂ ...E _m-1 E _K

Among them, _Es represents the encryption key, E _f represents the storage key, E _K represents the level key corresponding to the target user level, and m represents the level key parameter.

In this embodiment of the present invention, the level key parameter is less than or equal to the user level. For example, if the user is a level five user, the level key parameter that he can select is 1-5. By changing the level key parameter, the level key parameter can be changed. The key sequence is changed, and the combination of the storage key and the encryption key is changed. Even users of the same level are difficult to decipher the user's encryption key and storage key, thereby improving the security of confidential information.

Step 3: Encrypt and store the data to be encrypted according to the encryption policy.

It should be noted that the encrypting and storing the to-be-encrypted data according to the encryption policy includes: encrypting the to-be-encrypted data by using the encryption key, obtaining confidential data, and storing the confidential data; obtaining confidential data The storage address of the data is encrypted by using the storage key to obtain the target access code, and the access to the confidential information is realized through the target access code.

In some embodiments, the user's identity code can also be encrypted by the encryption key and the storage key, and the data to be encrypted can be encrypted by the identity code encrypted by the encryption key to obtain confidential information, and encrypted by the storage key. The identity code after encrypting the storage address of the confidential information to obtain the target access code, and realizing the access to the confidential information through the target access code. In this way, the user's identification code is bound with the encryption key and the storage key, which further improves the security of the confidential information.

It should be understood that when accessing confidential information through the target access code, the user's authorization needs to be obtained, and the target access code is decoded after authorization, so that the confidential information can be accessed.

Example 2

Referring to FIG. 2, FIG. 2 is an information security and confidentiality system provided by an embodiment of the present invention. The system includes: an acquisition module for acquiring data to be encrypted sent by a target user and an encryption level corresponding to the data to be encrypted. a determining module for determining an encryption strategy according to the encryption level; wherein, the encryption strategy includes an encryption key and a storage key; an execution module is used for encrypting and storing the data to be encrypted according to the encryption strategy .

The system provided by the embodiment of the present invention and the method provided by the foregoing embodiment are based on the same inventive concept. Therefore, for more specific working principles of each module in this embodiment, refer to the foregoing embodiment, which will not be repeated here.

Example 3

Referring to FIG. 3, FIG. 3 is an information security and security device according to an embodiment of the present invention, the electronic device includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein, the memory Stored are instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to perform the above-described method. Also, the electronics may be implemented in any one or combination of hardware, software, firmware or solid state logic circuits, and may be implemented in conjunction with signal processing, control and/or special purpose circuits.

The specific embodiments provided by the embodiments of the present invention may be implemented by any one or combination of hardware, software, firmware or solid-state logic circuits, and may be implemented in combination with signal processing, control and/or dedicated circuits. The apparatus or apparatus provided by the specific embodiments of the present invention may include one or more processors (eg, microprocessor, controller, digital signal processor (DSP), application specific integrated circuit (ASIC), field programmable gate array (FPGA) ), etc.), these processors process various computer-executable instructions to control the operation of a device or apparatus. The device or apparatus provided by the specific embodiments of the present application may include a system bus or a data transmission system that couples various components together. A system bus may include any one or a combination of different bus structures, such as a memory bus or memory controller, a peripheral bus, a universal serial bus, and/or processing utilizing any of a variety of bus architectures device or local bus. The equipment or apparatus provided by the specific embodiments of the present application may be provided independently, may be a part of a system, or may be a part of other equipment or apparatus.

The specific embodiments provided by the embodiments of the present invention may include or be combined with a computer-readable storage medium, such as one or more storage devices capable of providing non-transitory data storage. The computer-readable storage medium/storage device may be configured to hold data, programmers and/or instructions that, when executed by the processors of the apparatuses or apparatuses provided by the specific embodiments of the present application, cause these apparatuses Or the device realizes the relevant operation. Computer-readable storage media/storage devices may include one or more of the following characteristics: volatile, non-volatile, dynamic, static, read/write, read-only, random access, sequential access, location addressability, File addressability and content addressability. In one or more exemplary embodiments, the computer-readable storage medium/storage device may be integrated into the device or apparatus provided by the specific embodiments of the present application or belong to a public system. Computer readable storage media/storage devices may include optical storage devices, semiconductor storage devices and/or magnetic storage devices, etc., and may also include random access memory (RAM), flash memory, read only memory (ROM), erasable and programmable Read Only Memory (EPROM), Electrically Erasable Programmable Read Only Memory (EEPROM), Registers, Hard Disk, Removable Disk, Recordable and/or Rewritable Compact Disc (CD), Digital Versatile Disc (DVD), Mass storage media device or any other form of suitable storage media.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, but not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: The technical solutions described in the foregoing embodiments can still be modified, or some or all of the technical features thereof can be equivalently replaced; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the technical solutions of the embodiments of the present invention. The scope of the invention should be included in the scope of the claims and description of the present invention.

Claims (10)

1. An information security method, characterized in that the method comprises the following steps:

acquiring data to be encrypted sent by a target user and an encryption level corresponding to the data to be encrypted;

determining an encryption strategy according to the encryption level; wherein the encryption policy comprises an encryption key and a storage key;

and encrypting and storing the data to be encrypted according to the encryption strategy.

2. The method according to claim 1, wherein the obtaining of the data to be encrypted sent by the target user and the encryption level corresponding to the data to be encrypted further comprises:

performing identity authentication on a target user;

after the identity authentication of the target user is successful, performing level authentication on the target user;

after the target user level is successfully authenticated, determining a level key and a level key sequence corresponding to the target user from a user database according to the user level of the target user, wherein the level key sequence is used for representing a set from the lowest user level to the level key corresponding to the user level of the target user.

3. The method of claim 2, wherein authenticating the identity of the user comprises:

acquiring identity information of a target user, and extracting a user identifier from the identity information;

and searching corresponding identity information in a user database according to the user identification, and if the query is successful, the user identity authentication is successful.

4. The method of claim 2, wherein the performing a hierarchical authentication of the target user comprises:

determining the user grade of the target user from a user database according to the user identification;

sending a level authentication request to at least one other user with a user level higher than the target user;

and other users return confirmation information according to the grade authentication request, and the grade authentication of the target user is successful.

5. The method of claim 2, wherein determining an encryption policy based on the encryption level comprises:

determining a grade key parameter according to the encryption grade;

and calculating an encryption key and a storage key according to the grade key parameter, the grade key and the grade key sequence.

6. The method of claim 5, wherein the formula for calculating the encryption key and the storage key according to the rank key parameter, the rank key, and the rank key sequence is:

E _s ＝E _m E _m+1 …(E _K ) ²

E _f ＝E ₁ E ₂ …E _m-1 E _K

wherein E is _s Denotes an encryption key, E _f Representing a storage key, E _K And m represents a grade key parameter corresponding to the grade of the target user.

7. The method according to claim 6, wherein the encrypting and storing the data to be encrypted according to the encryption policy comprises:

encrypting data to be encrypted by using the encryption key to obtain secret data, and storing the secret data;

and acquiring a storage address of the confidential data, encrypting the storage address by using a storage key to obtain a target access code, and realizing the access of the confidential information through the target access code.

8. An information security system, comprising:

the device comprises an acquisition module, a storage module and a processing module, wherein the acquisition module is used for acquiring data to be encrypted sent by a target user and an encryption level corresponding to the data to be encrypted;

a determining module, configured to determine an encryption policy according to the encryption level; wherein the encryption policy comprises an encryption key and a storage key;

and the execution module is used for encrypting and storing the data to be encrypted according to the encryption strategy.

9. An information security device, comprising: at least one memory and at least one processor;

the at least one memory to store a machine readable program;

the at least one processor, configured to invoke the machine readable program to perform the method of any of claims 1-7.

10. A computer readable medium having stored thereon computer instructions which, when executed by a processor, cause the processor to perform the method of any of claims 1-7.

Images