Encryption method and encryption system for electronic documents

Abstract

The invention provides an encryption system for electronic documents. The encryption system comprises a random secret key generating module, an encryption secret key generating module, a ciphertext generating module, a packeting module and a plain text decryption module, wherein the random secret key generating module generates a 32-bit random secret key by using a random algorithm; the encryption secret key generating module encrypts the random secret key by using an asymmetrical encryption algorithm of a digital certificate public key of a document reader so as to form the encryption secret key; the ciphertext generating module encrypts a confidential document by using a symmetrical encryption algorithm and the encryption secret key so as to generate a ciphertext; the packeting module packets the ciphertext and the encryption secret key into a packet and stores the packet in an encryption document; and after obtaining the ciphertext, a reader of the document uses the plain text decryption module to decrypt the ciphertext by the encryption secret key so as to obtain a plain text.

Description

technical field [0001] The invention relates to the encryption and decryption methods of all electronic documents in the computer field, mainly an encryption method for computer electronic documents. Background technique [0002] At present, data transmission includes two ways: one is the plaintext transmission based on the user password, and the other is the encrypted connection based on Https. The first method uses plaintext transmission in terms of transmission, and the content can be intercepted and read through simple data packets, which has serious security risks; while the currently used Https encrypted communication only solves the requirements for encrypted data transmission, because only access passwords are used, It is impossible to ensure the correspondence between the password and the user, and to resist the attack of password guessing; it is also impossible to realize the identification and uniqueness of the user name and password. [0003] The security commun...

AI Technical Summary

Problems solved by technology

The first method uses plaintext transmission in terms of transmission, and the content can be intercepted and read through simple data packets, which has serious security risks; while the currently used Https encrypted communication only solves the requirements for encrypted data transmission, because only access passwords are used, It is impossible to ensure the correspondence between passwords and users, and to resist password guessing attacks; it is also impossible to identify and uniquely guarantee identity through usernames and passwords

[0003] The security communication widely used in banking, securities and other financial industries is generally an encryption machine. As an encryption communication device, the encryption machine can effectively ensure the security of data transmission and the validity of user identity. However, the purchase cost of such equipment is high, and the encryption machine is currently only available Supports TCP / IP Socket data packet communication mode, the secondary development is difficult, requires more professional knowledge, only supports a few programming languages, and cannot adapt to the diversified enterprise software system in the e-commerce environment, so it cannot be used by small and medium customers Promote the use of encryption machines

Images