Computer software data encryption method based on Internet of Things

Abstract

The invention discloses a computer software data encryption method based on the Internet of Things, and relates to the technical field of data security encryption. An identity comparison unit is used for comparing information input by a user through an identity input unit with identity information, stored in an identity storage unit, of controllable personnel, when the input identity information is consistent with preset identity information, recording is conducted, and if the input identity information is not consistent with the preset identity information, illegal login is recorded; the identity storage unit is used for storing the information compared by the identity comparison unit, and the identity information of the operator and the information of the illegal operator can be recorded and stored by using the identity storage unit; the authority control unit is used for realizing authority control of workers with different identities, authority management can be carried out on operators with different identities under the action of the authority control unit, and the encryption effect can be effectively improved.

Description

Technical Field

[0001] The present invention relates to the technical field of data security encryption, and in particular to a computer software data encryption method based on the Internet of Things. Background Art

[0002] Computer software in the field of the Internet of Things has high social value and plays an important role in achieving information coexistence and improving work efficiency. Since computer software is subject to the risk of being modified and copied during development, especially during the data transmission and data storage of computer software, there is still the risk of being attacked and stolen. Therefore, developers need to take protective measures for computer software data after completing their work, making the protection of computer software data security a key task. Therefore, in order to ensure the security of computer software data, it is necessary to encrypt computer software data.

[0003] The invention patent with publication number CN106453398A discloses a data encryption system, including: a generation unit, used to generate a security area, the security area is used to accommodate applications that need security protection; a monitoring unit, used to monitor operations related to content changes of data items; a control unit, used to determine the storage location of the data item, and when the storage location of the data item is located in the security area, the operation is identified as an encryption operation; and an encryption unit, which encrypts the data items involved in the encryption operation. It can ensure that in the case that the security area is breached, the sensitive data stored in the security area will not be obtained by malicious parties, but the system and its encryption method have the problems of simple encryption algorithm, easy cracking of encrypted data, poor security, and no block storage of encrypted data, which cannot fully utilize the storage space. For this reason, we propose a computer software data encryption method based on the Internet of Things. Summary of the invention

[0004] The purpose of the present invention is to solve the problems mentioned in the above background technology. The present invention provides a computer software data encryption method based on the Internet of Things.

[0005] In order to achieve the above-mentioned purpose, the present invention specifically adopts the following technical solutions:

[0006] A computer software data encryption method based on the Internet of Things, comprising:

[0007] Data collection module, used for data entry and upload;

[0008] Information management module, used to compare, store and upload the user's identity information;

[0009] A data encryption module, used for encrypting the data collected by the data collection module;

[0010] The data storage module is used to store the data encrypted by the data encryption module.

[0011] Furthermore, the data collection module is connected to the information management module and the data encryption module through a communication interface, and the data storage module is connected to the data encryption module and the information management module through a communication interface.

[0012] Furthermore, the data collection module has a built-in data entry unit and a data transmission unit, wherein the data entry unit collects data, and the data transmission unit is used to transmit the data collected by the data entry unit.

[0013] Furthermore, the information management module is built-in with a user identity entry unit, an identity storage unit, an identity comparison unit, an identity storage unit and a data upload unit, wherein the user identity entry unit is used to record the identity of the logged-in person, the identity storage unit is built-in with identity information storage of controllable persons, the identity comparison unit is used to compare the information entered by the user identity entry unit with the identity information of the controllable persons built-in in the identity storage unit, the identity storage unit is used to store the information compared by the identity comparison unit, and the data upload unit is used to upload the identity information stored in the identity storage unit.

[0014] Furthermore, the data encryption module is built-in with a data receiving unit, an authority control unit, a data encryption unit, a data storage unit and a data output unit, wherein the data receiving unit is used to receive data collected via the data collection module, the authority control unit is used to implement authority control of staff with different identities, the data encryption unit is used to encrypt data received via the data receiving unit, the data storage unit is used to store data encrypted by the data encryption unit, and the data output unit is used to upload data stored by the data storage unit.

[0015] Furthermore, the data encryption unit adopts a DES encryption method for encryption, and the DES encryption process consists of encryption processing, encryption transformation and sub-key generation.

[0016] Furthermore, the encryption process is as follows: the 64-bit output of the initial transposition is used as the next input, and the 64 bits are divided into left and right 32 bits, which are recorded as L0 and R0 respectively. From L0, R0 to L16, R16, a total of 16 rounds of encryption transformation are performed, wherein the left and right 32 bits after n rounds of processing are Ln and Rn respectively, which can be defined as follows:

[0017] Ln=Rn-1

[0018] Rn=Ln-1

[0019] Among them, kn is the 48-bit subkey input to the nth round, Ln-1 and Rn-1 are the outputs of the n-1th round respectively, and f is the Mangl er function.

[0020] Furthermore, the working process of the encryption transformation is as follows: the right half of the 32-bit extended transposition table is expanded to 48 bits by repeating certain bits, and the 56-bit key is shifted and then reduced to 48 bits by selecting certain bits therein, the right half of the 48 bits is combined with the 48-bit key through an XOR operation and divided into 8 groups of 6 bits, and the 48 bits are replaced by new 32-bit data through 8 S boxes, which are then replaced once more.

[0021] Furthermore, the sub-key generation includes: the key is usually expressed as a 64-bit natural number, first the 8th bit of each byte is removed by compression and transposition PC-1 for parity check, therefore, the key is reduced to 56 bits by removing the 8th, 16th, 24th and 64th bits, so the actual key length is 56 bits, and a 48-bit sub-key is generated in each round, the input 64-bit key is first compressed and transposed to obtain a 56-bit key, each layer is divided into two parts, the upper 28 bits are C0, and the lower part is D0, C0 and D0 are sequentially cyclically shifted to the left to generate C1 and D1, C1 and D1 are synthesized into 56 bits, and then a 48-bit sub-key K1 is output by compression and transposition PC-2, and then C1 and D1 are cyclically shifted to the left and compressed and transposed by PC-2 to obtain sub-key K2..., and so on, to obtain 16 sub-keys.

[0022] Furthermore, the data storage module includes: a terminal device and a cloud database, wherein the terminal device is selected from one of a computer, a mobile hard disk or a mobile phone.

[0023] The beneficial effects of the present invention are as follows:

[0024] 1. The identity comparison unit of the present invention is used to compare the information entered by the user using the identity entry unit with the identity information of the controllable personnel built into the identity storage unit. When the entered identity information is consistent with the preset identity information, it is recorded. If it is inconsistent, it is recorded as illegal login; the identity storage unit is used to store the information compared by the identity comparison unit, and the identity information of the control personnel and the information of the illegal operator can be recorded and stored in the identity storage unit.

[0025] 2. The authority control unit of the present invention is used to implement authority control of staff members of different identities. Under the action of the authority control unit, the authority of operators of different identities can be managed, which can effectively improve the encryption effect; the data encryption unit is used to encrypt data received via the data receiving unit. The received data can be encrypted through the data encryption unit to ensure the safe use of the data.

[0026] 3. The DES algorithm is adopted in the present invention. The encryption and decryption speed of the DES algorithm is very fast, and the encryption and decryption operations of a large amount of data can be completed in a short time. The implementation of the DES algorithm is very simple and can be easily implemented in various programming languages, thereby improving the security of data. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] Figure 1 It is a working block diagram of the present invention;

[0028] Figure 2 It is a workflow diagram of the information management module in the present invention;

[0029] Figure 3 It is a workflow diagram of the data encryption module in the present invention;

[0030] Figure 4 It is a work flow chart of the present invention. DETAILED DESCRIPTION

[0031] To make the purpose, technical solution and advantages of the embodiments of the present invention more clear, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present invention.

[0032] See also Figure 1 - Figure 4 The present invention provides a computer software data encryption method based on the Internet of Things, comprising:

[0033] The data collection module is used to input and upload data; the data collection module is connected to the information management module and the data encryption module through a network connection via a communication interface; the data storage module is connected to the data encryption module and the information management module through a network connection via a communication interface; by plugging a network cable into the communication interface, connectivity between modules can be achieved; the data collection module has a built-in data entry unit and a data transmission unit, wherein the data entry unit collects data, and the data transmission unit is used to transmit data collected by the data entry unit; the data entry unit receives and integrates data, and the data transmission unit can transmit the integrated data.

[0034] The information management module is used to compare, store and upload the user's identity information; the information management module is built-in with a user identity entry unit, an identity storage unit, an identity comparison unit, an identity storage unit and a data upload unit, wherein the user identity entry unit is used to record the identity of the login person, and can record the user's identity information for subsequent retrieval and use; the identity storage unit is built-in with the identity information storage of the controllable personnel, and under the action of the identity storage unit, the use information of the controllable personnel can be backed up; the identity comparison unit is used to compare the information entered by the user identity entry unit with the identity information of the controllable personnel built-in the identity storage unit, when the entered identity information is consistent with the preset identity information, it is recorded, if not consistent, it is recorded as an illegal login; the identity storage unit is used to store the information compared by the identity comparison unit, and the identity information of the control person and the information of the illegal operator can be recorded and stored in the identity storage unit; the data upload unit is used to upload the identity information stored in the identity storage unit, and the user's identity information can be transmitted through the data upload unit.

[0035] The data encryption module is used to encrypt the data collected by the data collection module; the data encryption module is built with a data receiving unit, an authority control unit, a data encryption unit, a data storage unit and a data output unit, wherein the data receiving unit is used to receive the data collected by the data collection module, and the data receiving unit can realize the data reception; the authority control unit is used to realize the authority control of the staff with different identities, and the authority of the operators with different identities can be managed under the action of the authority control unit, which can effectively improve the encryption effect; the data encryption unit is used to encrypt the data received by the data receiving unit, and the received data can be encrypted by the data encryption unit to ensure the safety of data use; the data storage unit is used to store the data encrypted by the data encryption unit, and can realize the effective storage of data; the data output unit is used to upload the data stored by the data storage unit; and can realize the transmission of stored data. The data encryption unit adopts the DES encryption method for encryption, and the DES encryption process consists of encryption processing, encryption transformation and sub-key generation. The encryption process is as follows: the 64-bit output of the initial transposition is used as the next input, and the 64 bits are divided into two 32-bit left and right bits, which are recorded as L0 and R0 respectively. From L0, R0 to L16, R16, a total of 16 rounds of encryption transformation are performed. Among them, the left and right 32 bits after n rounds of processing are Ln and Rn respectively, which can be defined as follows:

[0036] Ln=Rn-1

[0037] Rn=Ln-1

[0038] Among them, kn is the 48-bit subkey input to the nth round, Ln-1 and Rn-1 are the outputs of the n-1th round respectively, and f is the Mangl er function.

[0039] The working process of the encryption transformation is as follows: the right half of the 32-bit extended transposition table is expanded to 48 bits by repeating certain bits, and the 56-bit key is shifted and then reduced to 48 bits by selecting certain bits among them. The right half of the 48 bits is combined with the 48-bit key through an XOR operation and divided into 8 groups of 6 bits. These 48 bits are replaced by new 32-bit data through 8 S boxes, and then permuted once more.

[0040] Subkey generation includes: the key is usually expressed as a 64-bit natural number. First, the 8th bit of each byte is removed by compression and transposition PC-1 for parity check. Therefore, the key is reduced to 56 bits by removing the 8th, 16th, 24th and 64th bits. Therefore, the actual key length is 56 bits, and a 48-bit subkey is generated in each round. The input 64-bit key is first compressed and transposed to obtain a 56-bit key. Each layer is divided into two parts, the upper 28 bits are C0, and the lower part is D0. C0 and D0 are cyclically left shifted in turn to generate C1 and D1. C1 and D1 are combined into 56 bits, and then a 48-bit subkey K1 is output through compression and transposition PC-2. C1 and D1 are then cyclically left shifted and PC-2 compressed and transposed to obtain subkey K2... and so on, to obtain 16 subkeys.

[0041] The data storage module is used to store the data encrypted by the data encryption module. The data storage module includes: a terminal device and a cloud database, wherein the terminal device is selected from a computer, a mobile hard disk or a mobile phone; under the action of the terminal device and the cloud database, the data can be effectively stored and the access and use of the procedures can be facilitated.

[0042] The working principle and use process of the present invention:

[0043] S1. Start.

[0044] S2. Collect data through the data entry unit. After completing the data collection, upload the data to the information management module and the data encryption module respectively through the data transmission unit.

[0045] S3. The user uses the identity entry unit to record the information uploaded via the data transmission unit. The identity storage unit has the identity information of the operator built in. The collected data is compared with the information built in the identity storage unit through the identity comparison unit. After the identity information comparison is completed, the identity information is stored by using the identity storage unit, and the data is uploaded through the data upload unit.

[0046] S4. The information uploaded via the data transmission unit is collected through the data receiving unit. After the information collection is completed, the authority control unit controls the personnel with different authorities, and then the data encryption unit encrypts the data. The encrypted data is stored through the data storage unit and uploaded to the data storage module through the data output unit.

[0047] S5. Upload the data uploaded via the data output unit and the user's identity information via the data upload unit to the terminal device and the cloud database for storage through the data storage module.

[0048] S6. Stop.

[0049] The above description of the disclosed embodiments enables those skilled in the art to implement or use the present invention. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to the embodiments shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A computer software data encryption method based on the Internet of Things, characterized in that: include: Data collection module, used for data entry and upload; Information management module, used to compare, store and upload the user's identity information; A data encryption module, used for encrypting the data collected by the data collection module; The data storage module is used to store the data encrypted by the data encryption module.

2. According to a computer software data encryption method based on the Internet of Things according to claim 1, it is characterized in that: The data collection module is connected to the information management module and the data encryption module through a communication interface, and the data storage module is connected to the data encryption module and the information management module through a communication interface.

3. The computer software data encryption method based on the Internet of Things according to claim 1 is characterized in that: The data collection module has a built-in data entry unit and a data transmission unit, wherein the data entry unit collects data, and the data transmission unit is used to transmit the data collected by the data entry unit.

4. The method for encrypting computer software data based on the Internet of Things according to claim 1, characterized in that: The information management module is built-in with a user identity entry unit, an identity storage unit, an identity comparison unit, an identity storage unit and a data upload unit, wherein the user identity entry unit is used to record the identity of the logged-in person, the identity storage unit is built-in with identity information storage of controllable persons, the identity comparison unit is used to compare the information entered by the user identity entry unit with the identity information of the controllable persons built-in in the identity storage unit, the identity storage unit is used to store the information compared by the identity comparison unit, and the data upload unit is used to upload the identity information stored in the identity storage unit.

5. The method for encrypting computer software data based on the Internet of Things according to claim 1, characterized in that: The data encryption module is built with a data receiving unit, an authority control unit, a data encryption unit, a data storage unit and a data output unit, wherein the data receiving unit is used to receive the data collected by the data collection module, the authority control unit is used to implement authority control of staff with different identities, the data encryption unit is used to encrypt the data received by the data receiving unit, the data storage unit is used to store the data encrypted by the data encryption unit, and the data output unit is used to upload the data stored by the data storage unit.

6. A computer software data encryption method based on the Internet of Things according to claim 5, characterized in that: The data encryption unit adopts the DES encryption method for encryption. The DES encryption process consists of encryption processing, encryption transformation and sub-key generation.

7. A computer software data encryption method based on the Internet of Things according to claim 6, characterized in that: The encryption process is as follows: the 64-bit output of the initial transposition is used as the next input, and the 64 bits are divided into left and right 32 bits, which are recorded as L0 and R0 respectively. From L0, R0 to L16, R16, a total of 16 rounds of encryption transformation are performed, wherein the left and right 32 bits of the point after n rounds of processing are Ln and Rn respectively, which can be defined as follows: Ln=Rn-1 Rn=Ln-1 Where kn is the 48-bit subkey input to the nth round, Ln-1 and Rn-1 are the outputs of the n-1th round, and f is the Mangler function.

8. The method for encrypting computer software data based on the Internet of Things according to claim 6, characterized in that: The working process of the encryption transformation is as follows: the right half of the 32-bit extended transposition table is expanded to 48 bits by repeating certain bits, and the 56-bit key is shifted and then reduced to 48 bits by selecting certain bits therein, the right half of the 48 bits is combined with the 48-bit key through an XOR operation and divided into 8 groups of 6 bits, and the 48 bits are replaced by new 32-bit data through 8 S boxes, which are then replaced once more.

9. The method for encrypting computer software data based on the Internet of Things according to claim 6, characterized in that: The subkey generation includes: the key is usually expressed as a 64-bit natural number, firstly, the 8th bit of each byte is removed by compression and transposition PC-1 for parity check, therefore, the key is reduced to 56 bits by removing the 8th, 16th, 24th and 64th bits, so the actual key length is 56 bits, and a 48-bit subkey is generated in each round, the input 64-bit key is firstly compressed and transposed to obtain a 56-bit key, each layer is divided into two parts, the upper 28 bits are C0, and the lower part is D0, C0 and D0 are sequentially cyclically shifted to the left to generate C1 and D1, C1 and D1 are synthesized into 56 bits, and then a 48-bit subkey K1 is output by compression and transposition PC-2, and then C1 and D1 are cyclically shifted to the left and compressed and transposed by PC-2 to obtain subkey K2..., and so on, 16 subkeys are obtained.

10. The method for encrypting computer software data based on the Internet of Things according to claim 1, characterized in that: The data storage module includes: a terminal device and a cloud database, wherein the terminal device is selected from a computer, a mobile hard disk or a mobile phone.

Images