CN115208557A - Data encryption method and device, electronic equipment and computer storage medium - Google Patents

Abstract

The application provides a data encryption method and device, electronic equipment and a computer storage medium. The data encryption method comprises the following steps: acquiring plaintext data input by a user; after verifying that the user is legal, sending an encryption request to a key center; receiving key time, a public key and key center identification information sent by a key center; determining encryption cycle times and corresponding sub-keys respectively based on the key time, the public key, the key center identification information and a preset private key; and circularly encrypting the plaintext data by utilizing each sub-key until the encryption circulation times are reached to obtain ciphertext data corresponding to the plaintext data. According to the embodiment of the application, data encryption can be carried out more safely and conveniently.

Description

Data encryption method, device, electronic device and computer storage medium

technical field

The present application belongs to the technical field of data encryption and decryption, and in particular, relates to a data encryption method, device, electronic device and computer storage medium.

Background technique

With the vigorous development of informatization and intelligence, it has become a necessary requirement for various informatization systems to use password technology for identity authentication and data encryption storage and transmission applications, especially the development of mobile services and the enhancement of terminal intelligence. As the basic supporting technology of identity authentication and data encryption, cryptography plays an increasingly important role in data transmission, trusted authentication and data storage. The core content of cryptography is to reduce the protection of data to the protection of several core keys through encryption methods and effectively prevent the outside world from deciphering the keys through brute force calculation and guessing. Therefore, the key management problem has become the primary core problem. .

The key has a life cycle, which includes the validity time of the key and certificate, and the maintenance time of the revoked key and certificate. Since the key is required to be kept secret, it involves the management of the key, which mainly includes key generation, key backup, key recovery and key update.

The traditional 3DES algorithm uses triple DES on the basis of DES, that is, two 56-bit keys K1 and K2 are used. The encryption initiator uses K1 encryption, K2 decryption, and then K1 encryption. The decryption user uses K1 to decrypt, K2 to encrypt, and then K1 to decrypt. The effect is to double the key length. The specific process can be seen in Figure 1.

The prior art has the following disadvantages: 1. The security is weak. In today's increasingly powerful computer performance, the difficulty of brute force and dictionary guessing is getting lower and lower. Usually, the encryption algorithm can quickly complete the encryption of the relevant files that need to be encrypted, which means that the relevant encrypted documents will be cracked in an acceptable time, resulting in a decrease in the degree of confidentiality. 2. The key change operation requires our technicians to decrypt the encrypted data with the key before the change, and then encrypt the decrypted data with the changed key. This operation needs to manage the new and old keys at the same time. , Due to the inherent limitation of the algorithm, the encryption strength is not enough. When the amount of data involved in the encrypted data is large, it will bring tedious operations. Once the key is wrong, the element data can no longer be recovered.

Therefore, how to encrypt data more securely and conveniently is a technical problem that needs to be solved urgently by those skilled in the art.

SUMMARY OF THE INVENTION

Embodiments of the present application provide a data encryption method, device, electronic device, and computer storage medium, which can perform data encryption more securely and conveniently.

In a first aspect, an embodiment of the present application provides a data encryption method, including:

Get the plaintext data entered by the user;

After verifying that the user is legal, send an encryption request to the key center;

Receive the key time, public key and key center identification information sent by the key center;

Determine the number of encryption cycles and the corresponding sub-keys based on the key time, public key, key center identification information and preset private key;

The plaintext data is cyclically encrypted by using each subkey until the number of encryption cycles is reached, and the ciphertext data corresponding to the plaintext data is obtained.

Optionally, using each subkey to cyclically encrypt the plaintext data until the number of encryption cycles is reached, and after obtaining the ciphertext data corresponding to the plaintext data, the method further includes:

Send a decryption request to the key center;

Receive the key time, public key and key center identification information sent by the key center;

Determine the number of decryption cycles and the corresponding sub-keys based on the key time, public key, key center identification information and preset private key;

The ciphertext data is cyclically decrypted by using each subkey until the number of decryption cycles is reached, and the plaintext data is obtained.

Optionally, use each subkey to cyclically encrypt the plaintext data until the number of encryption cycles is reached, and obtain ciphertext data corresponding to the plaintext data, including:

Segment plaintext data to obtain plaintext data segments;

The plaintext data segment is cyclically encrypted by using each subkey until the number of encryption cycles is reached, and the ciphertext data is obtained.

Optionally, after determining the number of encryption cycles and the corresponding sub-keys based on the key time, public key, key center identification information and preset private key, the method further includes:

Based on the matrix transformation, the subkey is updated.

Optionally, receive the key time, public key, and key center identification information sent by the key center, including:

Receive the encrypted key time, public key and key center identification information sent by the key center.

Optionally, the public key includes the current key version number, separator, update time, key center identification information and key string.

Optionally, the ciphertext data includes the current key version number, separator, update time, key center identification information, and encrypted data.

In a second aspect, an embodiment of the present application provides a data encryption device, including:

The acquisition module is used to acquire the plaintext data input by the user;

The sending module is used to send an encryption request to the key center after verifying that the user is legal;

The receiving module is used to receive the key time, public key and key center identification information sent by the key center;

a determination module, configured to determine the number of encryption cycles and the corresponding sub-keys based on the key time, the public key, the key center identification information and the preset private key;

The encryption module is used to cyclically encrypt the plaintext data by using each subkey until the number of encryption cycles is reached, and obtain the ciphertext data corresponding to the plaintext data.

Optionally, the sending module is also used to send a decryption request to the key center; the receiving module is also used to receive the key time, public key and key center identification information sent by the key center; the determining module is also used to The key time, public key, key center identification information and preset private key determine the number of decryption cycles and the corresponding subkeys; the decryption module is used to cyclically decrypt the ciphertext data by using each subkey until the Decryption cycle times to get plaintext data.

Optionally, the encryption module is used for segmenting plaintext data to obtain plaintext data segments; using each subkey to cyclically encrypt the plaintext data segments until the number of encryption cycles is reached, to obtain ciphertext data.

Optionally, the apparatus further includes: an update module, configured to update the subkey based on the matrix transformation.

Optionally, the receiving module is configured to receive the encrypted key time, public key and key center identification information sent by the key center.

Optionally, the public key includes the current key version number, separator, update time, key center identification information and key string.

Optionally, the ciphertext data includes the current key version number, separator, update time, key center identification information, and encrypted data.

In a third aspect, an embodiment of the present application provides an electronic device, and the electronic device includes:

a processor and a memory storing computer program instructions;

The data encryption method shown in the first aspect is implemented when the processor executes the computer program instructions.

In a fourth aspect, embodiments of the present application provide a computer storage medium, where computer program instructions are stored thereon, and when the computer program instructions are executed by a processor, the data encryption method shown in the first aspect is implemented.

The data encryption method, device, electronic device, and computer storage medium of the embodiments of the present application can perform data encryption more securely and conveniently. The data encryption method includes: acquiring plaintext data input by a user; after verifying that the user is legal, sending an encryption request to a key center; receiving key time, public key and key center identification information sent by the key center; Time, public key, key center identification information and preset private key, determine the number of encryption cycles and the corresponding sub-keys; use each sub-key to cyclically encrypt plaintext data until the number of encryption cycles is reached, and obtain the corresponding plaintext data ciphertext data. It can be seen that this method utilizes each sub-key to cyclically encrypt plaintext data, and does not need to manage new and old keys, so data encryption can be performed more safely and conveniently.

Description of drawings

In order to illustrate the technical solutions of the embodiments of the present application more clearly, the following briefly introduces the accompanying drawings that need to be used in the embodiments of the present application. For those of ordinary skill in the art, without creative work, the Additional drawings can be obtained from these drawings.

1 is a schematic flowchart of a data encryption and decryption method in the prior art;

2 is a schematic flowchart of a data encryption method provided by an embodiment of the present application;

3 is a schematic flowchart of a data encryption method provided by an embodiment of the present application;

4 is a schematic flowchart of a data decryption method provided by an embodiment of the present application;

5 is a schematic structural diagram of a data encryption device provided by an embodiment of the present application;

FIG. 6 is a schematic structural diagram of an electronic device provided by an embodiment of the present application.

Detailed ways

The features and exemplary embodiments of various aspects of the present application will be described in detail below. In order to make the purpose, technical solutions and advantages of the present application more clear, the present application will be further described in detail below with reference to the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are only intended to explain the present application, but not to limit the present application. It will be apparent to those skilled in the art that the present application may be practiced without some of these specific details. The following description of the embodiments is merely to provide a better understanding of the present application by illustrating examples of the present application.

It should be noted that, in this document, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any relationship between these entities or operations. any such actual relationship or sequence exists. Moreover, the terms "comprising", "comprising" or any other variation thereof are intended to encompass a non-exclusive inclusion such that a process, method, article or device that includes a list of elements includes not only those elements, but also includes not explicitly listed or other elements inherent to such a process, method, article or apparatus. Without further limitation, an element defined by the phrase "comprises" does not preclude the presence of additional identical elements in a process, method, article, or device that includes the element.

In order to solve the problems of the prior art, the embodiments of the present application provide a data encryption method, an apparatus, an electronic device, and a computer storage medium. The data encryption method provided by the embodiments of the present application is first introduced below.

FIG. 2 shows a schematic flowchart of a data encryption method provided by an embodiment of the present application. As shown in Figure 2, the data encryption method includes:

S201. Acquire plaintext data input by a user.

S202, after verifying that the user is legal, send an encryption request to the key center.

S203. Receive the key time, public key, and key center identification information sent by the key center.

In one embodiment, the public key includes the current key version number, separator, update time, key center identification information and key string.

In one embodiment, receiving the key time, public key, and key center identification information sent by the key center includes: receiving the encrypted key time, public key, and key center identification information sent by the key center.

S204. Determine the number of encryption cycles and the corresponding sub-keys based on the key time, the public key, the key center identification information, and the preset private key.

In one embodiment, after determining the number of encryption cycles and the corresponding sub-keys based on the key time, the public key, the key center identification information, and the preset private key, the method further includes: updating the sub-key based on matrix transformation. key.

S205 , cyclically encrypt the plaintext data by using each subkey until the number of encryption cycles is reached, and obtain ciphertext data corresponding to the plaintext data.

In one embodiment, the ciphertext data includes the current key version number, separator, update time, key center identification information, and encrypted data.

In one embodiment, using each subkey to cyclically encrypt plaintext data until the number of encryption cycles is reached, and obtaining ciphertext data corresponding to the plaintext data, includes: segmenting the plaintext data to obtain plaintext data segments; using each subkey to obtain ciphertext data The key is used to cyclically encrypt the plaintext data segment until the number of encryption cycles is reached, and the ciphertext data is obtained.

In one embodiment, the plaintext data is cyclically encrypted by using each subkey until the number of encryption cycles is reached, and after obtaining the ciphertext data corresponding to the plaintext data, the method further includes:

Send a decryption request to the key center;

Receive the key time, public key and key center identification information sent by the key center;

Determine the number of decryption cycles and the corresponding sub-keys based on the key time, public key, key center identification information and preset private key;

The ciphertext data is cyclically decrypted by using each subkey until the number of decryption cycles is reached, and the plaintext data is obtained.

The data encryption method includes: acquiring plaintext data input by a user; after verifying that the user is legal, sending an encryption request to a key center; receiving key time, public key and key center identification information sent by the key center; Time, public key, key center identification information and preset private key, determine the number of encryption cycles and the corresponding sub-keys; use each sub-key to cyclically encrypt plaintext data until the number of encryption cycles is reached, and obtain the corresponding plaintext data ciphertext data. It can be seen that this method utilizes each sub-key to cyclically encrypt plaintext data, and does not need to manage new and old keys, so data encryption can be performed more safely and conveniently.

The above technical solution will be described below with a specific embodiment.

This embodiment can solve the above technical problems and provide safe, reliable, convenient, and seamless data encryption and decryption service capabilities: 1. Through ingenious algorithm design, internal encryption and decryption subkeys can be quickly generated, which greatly enhances encryption Strength also did not significantly increase encryption time. 2. In the new algorithm, the original encryption key K ₂ is disclosed to the outside, so this algorithm is also an asymmetric encryption and decryption algorithm. In actual operation, the public key can be changed regularly through the key center, which effectively ensures the validity of encryption and the traceability of the decryption process, which is of great significance to the use of national security, finance and other fields.

The technical solution of this embodiment mainly includes five parts: encryption and decryption algorithm, key file format, encrypted data format, encryption and decryption API, and transparent key change method. The following are respectively explained:

1. Encryption and decryption algorithm.

Using two 256-bit original keys K ₁ , K ₂ (which can be the public key that can be refreshed regularly) and key time T, the encryption party will use the sub-key K ₁ ^r-1 key to encrypt the file to be encrypted. Encryption, then use the sub-key K ₂ ^r-1 key to encrypt, then use the sub-key K ₁ ^r to decrypt, and then use the sub-key K ₂ ^r key to decrypt, loop N times; the decryptor will use the sub-key K 1 r to decrypt The encrypted file is encrypted with the key K ₂ ^r key, encrypted with the sub-key K ₁ ^r key, decrypted with the sub-key K ₂ ^r-1 key, and then encrypted with the sub-key K ₁ ^r key ^-1 key to decrypt, loop N times, and finally get the plaintext before encryption. where the number _of times N is itself calculated from the original keys K1 and _K2 . After each round of encryption and decryption, the sub-keys K ₁ ^N and K ₂ ^N will be deformed.

Wherein K ₁ ^r-1 , K ₂ ^r-1 → K ₁ ^r , K ₂ ^r , the update method of the intermediate subkey is as follows:

Each time a random prime number R corresponding to the relevant sub-key and the original key K ₂ (because K ₂ is the public key updated remotely, it can be stored at the same time and corresponds to a sufficiently large random prime number) to perform the following operations:

1. Transpose K ₁ and K ₂ into corresponding matrices J ₁ and J ₂ .

2. When the sub-key is updated, perform exclusive OR (⊕) operations on K ₁ ^r-1 and K ₂ ^r-1 with matrices J ₂ ^r-1 and J ₁ ^r-1 respectively, so as to obtain K ₁ ^r and K ₂ ^r .

3. Rotate J ₂ ^r-1 and J ₁ ^r-1 to the left according to the following rules:

The last line remains unchanged, and the displacement offsets of the second-to-last line, the third-to-last line, and the fourth-to-last line are respectively 1 bit, 2 bits, and 4 bits, which are incremented in turn to obtain J ₂ ^r and J ₁ ^r ;

Or use the following methods to further enhance the encryption strength:

The last row remains the same, the last column remains the same, the second-to-last row has a left circular shift offset of 1 bit, the second-to-last column has an upward circular shift offset of 1 bit, and the third-to-last row has a left rotation offset of 1 bit. The circular displacement offset is 2 bits, the upward circular displacement offset of the third to last column is 2 bits, the left circular displacement offset of the fourth to last row is 4 bits, and the upward circular displacement offset of the third to last column is The quantity is 4 bits, which are incremented in turn to obtain J ₂ ^r and J ₁ ^r ;

After the above operations are completed, it is ready for the next subkey update.

Among them, the first 8 bits and the last 8 bits of the original keys K ₁ and K ₂ can be taken for N times and the value, and the number less than 16 times or 8 times can be obtained after the remainder (more than 3 is recommended). (N=K ₁ ⊙K ₂ )

The only exogenous input keys in the algorithm are the original keys K ₁ and K ₂ . Subsequent subkeys are generated after the operation of the original key, which greatly reduces the difficulty of password preservation and memory, and does not reduce the degree of encryption.

Second, the key file format.

The key file format is shown in the following table:

The key file consists of four parts: current key version number, separator, update time, key center ID and key string. Every change to the public key generates a version number in the key file and records it. The key file stores the latest version of the key string currently used, and the key center keeps all key string records. The length of the key string is more than 128 bits to ensure that any current decryption algorithm and equipment cannot be cracked within a limited time. To ensure the security of the transmission process, the key file itself will also be encrypted, so that the key file distribution process is also secure.

3. Encrypted data format.

The encrypted data format is shown in the following table:

The encrypted data also consists of four parts: current key version number, separator, update time, key center ID and encrypted data. The key version number indicates the key version (or the agreed public key) used by the encrypted data.

Fourth, encryption and decryption API.

This embodiment provides a unified encryption and decryption API, provides high encryption and low cracking capability for plaintext files, and verification record capability for decrypting encrypted files.

For the encryption API, the flow of its data encryption method is shown in Figure 3:

(1) The encryption API obtains the input data that needs to be encrypted.

(2) Apply to the encryption center for an encryption request, and determine whether it is a legitimate user according to the feedback information, and if so, start encryption.

(3) The encryption center records the request record, and transmits information such as time, public key, and encryption center ID to the encryption party. The transmission content is also encrypted by means of encryption.

(4) The encryption API uses the obtained public key and the private key added by the user to calculate, obtains the number of cycles N and the generated subkey Kn, and automatically uses the generated subkey to cyclically encrypt the plaintext (the entire plaintext can be cyclically encrypted). Encrypt multiple times, or segment the plaintext, and use subkeys to encrypt different segments).

(5) When the number of cycles N decreases to 0, the encryption ends, and the ciphertext is obtained.

For the decryption API, the flow of its data decryption method is shown in Figure 4:

(1) According to the input ciphertext data, parse the key version number information and other information in the header.

(2) Apply to the encryption center for a decryption request, and determine whether it is a legitimate user according to the feedback information, and if so, start decrypting.

(3) The encryption center records the request record, and transmits information such as time, public key, and encryption center ID to the encryption party. The transmission content is also encrypted by means of encryption.

(4) The decryption API uses the obtained public key and the private key added by the user to calculate, obtains the number of cycles N and the generated sub-key Kn, and automatically uses the generated sub-key to decrypt the ciphertext cyclically (the entire encrypted segment can be decrypted cyclically). The ciphertext is decrypted multiple times, or the ciphertext is decrypted according to the corresponding sub-keys).

(5) When the number of cycles N decreases to 0, the decryption ends and the plaintext is obtained.

5. Transparent and reliable key change method.

Based on the above key file format, encrypted data format, and encryption and decryption API design, a transparent and reliable key change mechanism can be realized. After the key is changed, there is no need to refresh the original encrypted data, and the new and old version keys can be seamlessly articulate.

Based on the above key file format, encrypted data format, and encryption/decryption API design, the history of encrypted files can be traced. All encryption and decryption operations will make operation requests to the key center (if there is no network, the operation will be performed in the method of the latest time + public key + key center ID). Therefore, each operation will be recorded in the key center (except when the network cannot be connected), which effectively improves the security of data encryption and provides a guarantee for reliable data flow.

Through ingenious key file and encrypted data format design, it provides transparency of encryption and decryption operations, and at the same time provides traceability of data flow, which reduces the difficulty of tracing data leakage. At the same time, there is no need to perform a batch refresh operation on the data encrypted by the key before the change, which realizes the seamless connection between the new and old version keys.

This embodiment solves the problem that the encryption strength of the existing algorithm cannot face the cracking problem caused by the increasingly powerful computer performance, and greatly improves the cracking difficulty of the confidential data. At the same time, due to the heavy workload and error-prone key update for a large amount of encrypted data, the tedious operation of key management of new and old versions improves data security, and at the same time solves the problem of complex operation steps in the prior art and avoids the need for keys Errors can easily lead to difficult problems where element data can never be recovered. At the same time, for confidential data, the data flow can be tracked, and once the ciphertext is leaked, its use and circulation can be blocked immediately.

FIG. 5 is a schematic structural diagram of a data encryption device provided by an embodiment of the present application. As shown in FIG. 5 , the data encryption device includes:

an acquisition module 501, configured to acquire plaintext data input by a user;

The sending module 502 is configured to send an encryption request to the key center after verifying that the user is legal;

The receiving module 503 is used to receive the key time, public key and key center identification information sent by the key center;

A determination module 504, configured to determine the number of encryption cycles and the corresponding sub-keys based on the key time, the public key, the key center identification information and the preset private key;

The encryption module 505 is configured to cyclically encrypt the plaintext data by using each subkey until the number of encryption cycles is reached, and obtain ciphertext data corresponding to the plaintext data.

In one embodiment, the sending module 502 is further configured to send a decryption request to the key center; the receiving module 503 is further configured to receive the key time, public key and key center identification information sent by the key center; the determining module 504 , and is also used to determine the number of decryption cycles and the corresponding sub-keys based on the key time, public key, key center identification information and preset private key; the decryption module is used to use each sub-key to pair the ciphertext data Perform cyclic decryption until the number of decryption cycles is reached to obtain plaintext data.

In one embodiment, the encryption module 505 is used for segmenting plaintext data to obtain plaintext data segments; using each subkey to cyclically encrypt the plaintext data segments until the number of encryption cycles is reached to obtain ciphertext data.

In one embodiment, the apparatus further includes: an update module, configured to update the subkey based on the matrix transformation.

In one embodiment, the receiving module 503 is configured to receive the encrypted key time, public key and key center identification information sent by the key center.

In one embodiment, the public key includes the current key version number, separator, update time, key center identification information and key string.

In one embodiment, the ciphertext data includes the current key version number, separator, update time, key center identification information, and encrypted data.

Each module/unit in the device shown in FIG. 5 has the function of implementing each step in FIG. 2 and can achieve its corresponding technical effect, and is not repeated here for the sake of brevity.

FIG. 6 shows a schematic structural diagram of an electronic device provided by an embodiment of the present application.

The electronic device may include a processor 601 and a memory 602 storing computer program instructions.

Specifically, the above-mentioned processor 601 may include a central processing unit (CPU), or a specific integrated circuit (Application Specific Integrated Circuit, ASIC), or may be configured as one or more integrated circuits implementing the embodiments of the present application.

Memory 602 may include mass storage for data or instructions. By way of example and not limitation, memory 602 may include a Hard Disk Drive (HDD), a floppy disk drive, flash memory, optical disk, magneto-optical disk, magnetic tape, or Universal Serial Bus (USB) drive or two or more A combination of more than one of the above. Memory 602 may include removable or non-removable (or fixed) media, where appropriate. Memory 602 may be internal or external to the electronic device, where appropriate. In certain embodiments, memory 602 may be non-volatile solid state memory.

In one example, the memory 602 may be a read only memory (ROM). In one example, the ROM may be a mask programmed ROM, programmable ROM (PROM), erasable PROM (EPROM), electrically erasable PROM (EEPROM), electrically rewritable ROM (EAROM), or flash memory or both A combination of one or more of the above.

The processor 601 implements any one of the data encryption methods in the foregoing embodiments by reading and executing the computer program instructions stored in the memory 602 .

In one example, the electronic device may also include a communication interface 603 and a bus 610 . Among them, as shown in FIG. 6 , the processor 601 , the memory 602 , and the communication interface 603 are connected through the bus 610 and complete the mutual communication.

The communication interface 603 is mainly used to implement communication between modules, apparatuses, units and/or devices in the embodiments of the present application.

The bus 610 includes hardware, software, or both, coupling the components of the electronic device to each other. By way of example and not limitation, the bus may include Accelerated Graphics Port (AGP) or other graphics bus, Enhanced Industry Standard Architecture (EISA) bus, Front Side Bus (FSB), HyperTransport (HT) Interconnect, Industry Standard Architecture (ISA) Bus, Infiniband Interconnect, Low Pin Count (LPC) Bus, Memory Bus, Microchannel Architecture (MCA) Bus, Peripheral Component Interconnect (PCI) Bus, PCI-Express (PCI-X) Bus, Serial Advanced Technology Attachment (SATA) bus, Video Electronics Standards Association Local (VLB) bus or other suitable bus or a combination of two or more of the above. Bus 610 may include one or more buses, where appropriate. Although embodiments of this application describe and illustrate a particular bus, this application contemplates any suitable bus or interconnect.

In addition, the embodiments of the present application may be implemented by providing a computer storage medium. Computer program instructions are stored on the computer storage medium; when the computer program instructions are executed by the processor, any one of the data encryption methods in the foregoing embodiments is implemented.

To be clear, the present application is not limited to the specific configurations and processes described above and illustrated in the figures. For the sake of brevity, detailed descriptions of known methods are omitted here. In the above-described embodiments, several specific steps are described and shown as examples. However, the method process of the present application is not limited to the specific steps described and shown, and those skilled in the art can make various changes, modifications and additions, or change the sequence of steps after comprehending the spirit of the present application.

The functional modules shown in the above-mentioned structural block diagrams can be implemented as hardware, software, firmware, or a combination thereof. When implemented in hardware, it may be, for example, an electronic circuit, an application specific integrated circuit (ASIC), suitable firmware, a plug-in, a function card, or the like. When implemented in software, elements of the present application are programs or code segments used to perform the required tasks. The program or code segments may be stored in a machine-readable medium or transmitted over a transmission medium or communication link by a data signal carried in a carrier wave. A "machine-readable medium" may include any medium that can store or transmit information. Examples of machine-readable media include electronic circuits, semiconductor memory devices, ROM, flash memory, erasable ROM (EROM), floppy disks, CD-ROMs, optical disks, hard disks, fiber optic media, radio frequency (RF) links, and the like. The code segments may be downloaded via a computer network such as the Internet, an intranet, or the like.

It should also be noted that the exemplary embodiments mentioned in this application describe some methods or systems based on a series of steps or devices. However, the present application is not limited to the order of the above steps, that is, the steps may be performed in the order mentioned in the embodiment, or may be different from the order in the embodiment, or several steps may be performed simultaneously.

Aspects of the present application are described above with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the present application. It will be understood that each block of the flowchart illustrations and/or block diagrams, and combinations of blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus to produce a machine such that execution of the instructions via the processor of the computer or other programmable data processing apparatus enables the Implementation of the functions/acts specified in one or more blocks of the flowchart and/or block diagrams. Such processors may be, but are not limited to, general purpose processors, special purpose processors, application specific processors, or field programmable logic circuits. It will also be understood that each block of the block diagrams and/or flowchart illustrations, and combinations of blocks in the block diagrams and/or flowchart illustrations, can also be implemented by special purpose hardware that performs the specified functions or actions, or that special purpose hardware and/or A combination of computer instructions is implemented.

The above are only specific implementations of the present application. Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the above-described systems, modules and units may refer to the foregoing method embodiments. The corresponding process in , will not be repeated here. It should be understood that the protection scope of the present application is not limited to this. Any person skilled in the art can easily think of various equivalent modifications or replacements within the technical scope disclosed in the present application, and these modifications or replacements should all cover within the scope of protection of this application.

Claims (10)

1. A method for data encryption, comprising:

acquiring plaintext data input by a user;

after verifying that the user is legal, sending an encryption request to a key center;

receiving the key time, the public key and the key center identification information sent by the key center;

determining encryption cycle times and corresponding sub-keys respectively based on the key time, the public key, the key center identification information and a preset private key;

and circularly encrypting the plaintext data by using each sub-key until the encryption cycle number is reached to obtain ciphertext data corresponding to the plaintext data.

2. The data encryption method according to claim 1, wherein after the plaintext data is circularly encrypted by using each of the subkeys until the number of encryption cycles is reached to obtain ciphertext data corresponding to the plaintext data, the method further comprises:

sending a decryption request to the key center;

receiving the key time, the public key and the key center identification information sent by the key center;

determining the decryption cycle times and corresponding sub-keys respectively based on the key time, the public key, the key center identification information and a preset private key;

and circularly decrypting the ciphertext data by utilizing each sub-key until the decryption circulation times are reached to obtain the plaintext data.

3. The data encryption method according to claim 1, wherein the circularly encrypting the plaintext data by using each of the subkeys until the number of encryption cycles is reached to obtain ciphertext data corresponding to the plaintext data comprises:

segmenting the plaintext data to obtain plaintext data segments;

and circularly encrypting the plaintext data segments by using each sub-key until the encryption cycle number is reached to obtain the ciphertext data.

4. The data encryption method according to claim 1, wherein after determining the number of encryption cycles and the corresponding sub-keys based on the key time, the public key, the key center identification information, and a preset private key, the method further comprises:

updating the subkey based on the matrixing conversion.

5. The data encryption method according to claim 1, wherein the receiving the key time, the public key and the key center identification information sent by the key center comprises:

and receiving the encrypted key time, the public key and the key center identification information sent by the key center.

6. The data encryption method according to claim 1, wherein the public key includes a current key version number, a delimiter, an update time, key center identification information, and a key string.

7. The data encryption method according to claim 1, wherein the ciphertext data comprises a current key version number, a delimiter, an update time, key center identification information, and encrypted data.

8. A data encryption apparatus, comprising:

the acquisition module is used for acquiring plaintext data input by a user;

the sending module is used for sending an encryption request to the key center after verifying that the user is legal;

the receiving module is used for receiving the key time, the public key and the key center identification information sent by the key center;

the determining module is used for determining encryption cycle times and sub-keys corresponding to the encryption cycle times respectively based on the key time, the public key, the key center identification information and a preset private key;

and the encryption module is used for circularly encrypting the plaintext data by utilizing each sub-key until the encryption circulation times are reached to obtain ciphertext data corresponding to the plaintext data.

9. An electronic device, characterized in that the electronic device comprises: a processor and a memory storing computer program instructions;

the processor, when executing the computer program instructions, implements a data encryption method as claimed in any one of claims 1 to 7.

10. A computer storage medium having computer program instructions stored thereon which, when executed by a processor, implement a data encryption method as claimed in any one of claims 1 to 7.

Images