Data security encryption method for intelligent blood sampling management platform

Abstract

The application discloses a data security encryption method for an intelligent blood sampling management platform, relates to the technical field of data security encryption, and comprises the following steps: generating an information security key for the intelligent blood sampling management platform, and the information security key can be periodically changed; extracting a flow sequence code through the security key; and performing safe encryption on platform data through the information security key, wherein the safe encryption comprises different encryption processes, and the encryption processes are arranged and combined differently through the flow sequence code; the application is used to solve the problem that the existing data security encryption technology has a fixed and single encryption algorithm, which leads to a large security loophole in data security protection and cannot guarantee the security of data.

Description

Technical Field

[0001] The present invention relates to the technical field of data security encryption, and in particular to a data security encryption method for an intelligent blood collection management platform. Background Art

[0002] Data security encryption technology refers to a process that converts original data into unreadable garbled code through mathematical algorithms and relies on keys for reverse restoration. Its core goal is to ensure the confidentiality, integrity and authentication of data, prevent unauthorized access or tampering, and even if it is intercepted during transmission or storage, it cannot be deciphered.

[0003] In the intelligent blood collection management platform, the personal information of the blood collector and the test results of the blood sample are usually recorded. This information involves personal privacy. In order to protect the patient's personal privacy, the data in the intelligent blood collection management platform needs to be securely encrypted, which involves data security encryption technology. The existing data security encryption technology usually uses a fixed encryption algorithm to securely encrypt the data. After having enough ciphertexts, the ciphertexts will be at risk of being cracked. When a fixed encryption algorithm is used, others can crack all ciphertexts in turn after cracking one ciphertext, which is not conducive to data security. For example, in the patent application with publication number CN107451483A, "a secure encryption method for a data platform" is disclosed. This solution uses a fixed and single encryption algorithm to encrypt data, which has low security and is not conducive to data security. The existing data security encryption technology also has the problem that the encryption algorithm is fixed and single, resulting in large loopholes in data security protection and the inability to guarantee data security. Summary of the Invention

[0004] The present invention aims to solve one of the technical problems in the prior art to at least a certain extent, by constructing a key unit pool, which includes different key units, and generating periodic information security keys for the intelligent blood collection management platform based on the key unit pool, and then extracting the process sequence code through the security key to construct the first encryption process, the second encryption process and the third encryption process, and finally, the first encryption process, the second encryption process and the third encryption process are arranged and combined based on the process sequence code, and the platform data is encrypted and calculated, so as to solve the problem that the existing data security encryption technology still has a fixed and single encryption algorithm, resulting in large loopholes in data security protection and an inability to guarantee data security.

[0005] To achieve the above objectives, in a first aspect, the present application provides a data security encryption method for an intelligent blood collection management platform, comprising the following steps:

[0006] Generate information security keys for the intelligent blood collection management platform, and the information security keys can be changed periodically;

[0007] Extract the process sequence code through the security key;

[0008] The platform data is securely encrypted using information security keys. The secure encryption includes different encryption processes, which are arranged and combined differently using process sequence codes.

[0009] Furthermore, generating an information security key for the intelligent blood collection management platform, and enabling the information security key to be periodically changed, includes the following sub-steps:

[0010] Constructing a key unit pool, wherein the key unit pool includes different key units;

[0011] Generate periodic information security keys for the intelligent blood collection management platform based on the key unit pool.

[0012] Furthermore, constructing the key unit pool includes the following sub-steps:

[0013] The key unit is used to form an information security key;

[0014] The key unit pool includes 26 lowercase letters, 26 uppercase letters, numbers 0 to 9 and punctuation marks;

[0015] An independent lowercase letter, uppercase letter, number or punctuation mark is a key unit.

[0016] Furthermore, generating a periodic information security key for the intelligent blood collection management platform based on the key unit pool includes the following sub-steps:

[0017] Setting a first change period, after each information security key has been used for the first change period, regenerating the information security key;

[0018] When generating an information security key, two numbers are randomly selected from 0 to 9 to form a digit code;

[0019] The key units are randomly extracted from the key unit pool, the number of extracted units is digits, and the information security key is obtained by combining them in the order of extraction.

[0020] Furthermore, extracting the sequence code through the security key includes the following sub-steps:

[0021] Count the number of lowercase letters in the security key, marked as a, count the number of uppercase letters in the security key, marked as b, and count the number of numbers and punctuation marks in the security key, marked as c;

[0022] Reset the minimum value of a, b, and c to 1, the middle value to 2, and the maximum value to 3;

[0023] Combine a, b and c into abc, where abc is the process sequence code;

[0024] Furthermore, securely encrypting platform data using information security keys includes the following sub-steps:

[0025] Construct the first encryption process;

[0026] Construct the second encryption process;

[0027] Construct the third encryption process;

[0028] The first encryption process, the second encryption process and the third encryption process are arranged and combined based on the process sequence code, and encryption calculation is performed on the platform data.

[0029] Furthermore, constructing the first encryption process includes the following sub-steps:

[0030] The data input into the first encryption process is marked as D1. If D1 is not in hexadecimal format, D1 is converted to hexadecimal format to obtain the information security key. The lowercase letters in the information security key are extracted from left to right to form the first encryption key. The first encryption key is converted to hexadecimal format and marked as PW1.

[0031] Each four-digit number is called a coding group, and the coding groups in D1 are numbered from left to right. i Indicates that the coding groups in PW1 are numbered from left to right, and the symbol PW1 j Indicates, where i and j are both positive integers and i is the serial number of D1, j is the serial number of PW1;

[0032] For any value of i, calculate i%max(j), mark the result as J, max() is the maximum value operator, calculate D1 i With PW1 J The greatest common divisor of i , calculate D1 i / S1 i , mark the calculation result as S2 i ;

[0033] S2 i Placed in S1 i Afterwards, form S i , sort S in ascending order of i i The first process data is obtained by combining the first process data and outputting the first process data.

[0034] Furthermore, constructing the second encryption process includes the following sub-steps:

[0035] Mark the data inputted into the second encryption procedure as D2, if D2 is not in decimal format, convert D2 into decimal format, obtain the information security key, extract the capital letters in the information security key in the order from left to right to form a second encryption key, convert the second encryption key into decimal format and mark it as PW2;

[0036] Mark the numbers in D2 in the order from left to right as D2 p , mark the numbers in PW2 in the order from left to right as PW2 q , wherein p and q are positive integers and p is the serial number of D2 and q is the serial number of PW2;

[0037] For any value of p, calculate p%max(q), mark the calculation result as Q, judge whether D2 p / PW2 Q or PW2 Q / D2 p can be divided by, if D2 p / PW2 Q or PW2 Q / D2 p can be divided by, output a division signal, if D2 p / PW2 Q or PW2 Q / D2 p cannot be divided by, output a non-division signal;

[0038] If the division signal is outputted, add one to D2 p and judge again, if the division signal is still outputted, add one to D2 p again until the non-division signal is outputted, mark the changed D2 p as R p ;

[0039] If the non-division signal is outputted, add one to D2 p and judge again, if the non-division signal is still outputted, add one to D2 p again until the division signal is outputted, mark the changed D2 p as R p ;

[0040] Combine R p in the order from small to large to obtain the second procedure data and output the second procedure data.

[0041] Further, the third encryption procedure comprises the following sub-steps:

[0042] The data input to the third encryption process is labeled D3. If D3 is not in binary format, D3 is converted to binary format to obtain the information security key. The numbers and punctuation marks in the information security key are extracted from left to right to form the third encryption key. The third encryption key is converted to binary format and labeled PW3.

[0043] Number the numbers in D3 from left to right, using the symbol D3 n Indicates that the numbers in PW3 are numbered from left to right, using the symbol PW3 m Indicates, where n and m are both positive integers and n is the serial number of D3, and m is the serial number of PW3;

[0044] For any value of n, calculate n%max(m), mark the result as M, and for D3 n With PW3 M Perform XOR calculation and mark the result as T3 n , increase n by one and calculate T3 again n , until T3 is calculated max(n) until;

[0045] According to the order of n from small to large, T3 n The third process data is obtained by combining and outputting the third process data.

[0046] Furthermore, the first encryption process, the second encryption process, and the third encryption process are arranged and combined based on the process sequence code, and encryption calculation of the platform data includes the following sub-steps:

[0047] The process sequence code is a three-digit code. The numbers in the process sequence code are numbered from left to right. h Indicates, where h is a positive integer and h is the sequence number of G;

[0048] G h 1 represents the first encryption process, G h 2 represents the second encryption process, G h 3 represents the third encryption process;

[0049] Follow step h to execute G h The platform data is encrypted in the order of the last step, and the data outputted in the last step is the final encrypted ciphertext.

[0050] Beneficial effects of the present invention: The present invention constructs a key unit pool including different key units, and generates periodic information security keys for the intelligent blood collection management platform based on the key unit pool. The advantage is that by periodically changing the information security key, the ciphertext can be more varied and others can be prevented from extracting patterns from the ciphertext encrypted with the same information security key for a long time, thereby improving the effectiveness and security of data security encryption.

[0051] The present invention extracts the process sequence code through the security key, constructs the first encryption process, the second encryption process and the third encryption process, and finally arranges and combines the first encryption process, the second encryption process and the third encryption process based on the process sequence code, and performs encryption calculation on the platform data. The advantage is that the internal encryption process of the conventional encryption algorithm is fixed, but the present invention arranges and combines the encryption process through the process sequence code, so that the encryption algorithm has different encryption orders. Combined with the periodically changing information security key, it prevents others from cracking the encryption algorithm, and the difficulty of decrypting the ciphertext is greatly improved, further improving the security and effectiveness of data security encryption. BRIEF DESCRIPTION OF THE DRAWINGS

[0052] Figure 1 is a flow chart of the steps of the method of the present invention;

[0053] Figure 2 A flow chart of the steps for generating an information security key according to the present invention;

[0054] Figure 3 A flowchart of the steps of security encryption of the present invention;

[0055] Figure 4 Schematic diagram of the structure of the electronic device of the present invention. DETAILED DESCRIPTION

[0056] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of the present invention.

[0057] Example 1, please refer to Figure 1 As shown, this application provides a data security encryption method for an intelligent blood collection management platform, comprising the following steps:

[0058] See also Figure 2 As shown, step S1 generates an information security key for the intelligent blood collection management platform, and the information security key can be changed periodically; step S1 includes the following sub-steps:

[0059] Step S101, a key unit pool is constructed, and the key unit pool includes different key units;

[0060] Step S101 includes the following sub-steps:

[0061] Step S101.1, the key units are used to constitute information security keys;

[0062] Step S101.2, the key unit pool includes twenty-six lowercase letters, twenty-six uppercase letters, digits 0 to 9, and punctuation marks;

[0063] Step S101.3, an independent lowercase letter, uppercase letter, digit, or punctuation mark is a key unit;

[0064] In a specific implementation, the punctuation mark is usually a symbol that can be directly input on a keyboard;

[0065] Step S102, periodically generating information security keys for the intelligent blood sampling management platform based on the key unit pool;

[0066] Step S102 includes the following sub-steps:

[0067] Step S102.1, a first change period is set, and after each information security key is used for a first change period, the information security key is regenerated;

[0068] Step S102.2, when generating an information security key, two digits are randomly extracted from digits 0 to 9 to form a digit code;

[0069] Step S102.3, a number of key units equal to the digit code are randomly extracted from the key unit pool, and the information security key is obtained by combining the extracted key units in the order of extraction;

[0070] In a specific implementation, the first change period is set by an administrator of the intelligent blood sampling management platform, and in this embodiment, the first change period is set to 7 days, that is, the information security key is replaced once a week. For example, this time, the digit code is 09, that is, 9 key units are randomly extracted from the key unit pool, and the information security key is obtained by combining the extracted key units in the order of extraction. The information security key is "%4s1+F=sT", excluding the quotation marks, and the quotation marks are only used to define the beginning and end of the information security key.

[0071] Step S2, extracting a flow sequence code through the security key; Step S2 includes the following sub-steps:

[0072] Step S201, the number of lowercase letters in the security key is counted and marked as a, the number of uppercase letters in the security key is counted and marked as b, and the number of digits and punctuation marks in the security key is counted and marked as c;

[0073] Step S202: reset the minimum value of a, b, and c to 1, the middle value to 2, and the maximum value to 3;

[0074] Step S203, combining a, b and c into abc, where abc is the process sequence code;

[0075] In the specific implementation, a, b and c are counted as 2, 2 and 5 respectively. At this time, a and b are equal, so one of them can be randomly reduced by 1. After random reduction, a, b and c are 2, 1 and 5 respectively, among which b<a<c. Therefore, b is reset to 1, a is reset to 2, and c is reset to 3, and abc is 213, that is, the process sequence code is 213.

[0076] See also Figure 3 As shown, in step S3, the platform data is securely encrypted using the information security key. The secure encryption includes different encryption processes, and the encryption processes are arranged and combined in different ways by the process sequence code. Step S3 includes the following sub-steps:

[0077] Step S301, constructing a first encryption process;

[0078] Step S301 includes the following sub-steps:

[0079] Step S301.1: Label the data input to the first encryption process as D1. If D1 is not in hexadecimal format, convert D1 to hexadecimal format, obtain the information security key, extract the lowercase letters in the information security key from left to right to form the first encryption key, convert the first encryption key to hexadecimal format, and label it as PW1.

[0080] In a specific implementation, it is assumed that the platform data in this embodiment is "name" and does not include quotation marks. If the data input into the first encryption process is platform data, the platform data is converted into hexadecimal format according to Unicode encoding to obtain D1. In the ASCII encoding table, hexadecimal characters are up to two digits, decimal characters are up to three digits, and binary characters are fixed to eight digits. Therefore, when the first process data is converted to D2 or D3, the conversion is performed according to every two hexadecimal digits. If the number is less than the number, zero is added to the first digit. When the second process data is converted to D1 or D3, since three decimal digits are prone to overflow when converted to binary numbers, the conversion is performed according to every two decimal digits. If the number is less than the number, zero is added to the first digit. When the third process data is converted to D1 or D2, the conversion is performed according to every eight binary digits, and the number of digits of the third process data must be divisible by 8. The information security key is "%4s1+F=sT", and the first encryption key extracted is ss. The hexadecimal data corresponding to s in the ASCII encoding table is 73, so PW1 is 7373. Assume that D1 is 59D3540D.

[0081] Step S301.2: Each four-digit number is called a code group. The code groups in D1 are numbered from left to right. i Indicates that the coding groups in PW1 are numbered from left to right, and the symbol PW1 j Indicates, where i and j are both positive integers and i is the serial number of D1, j is the serial number of PW1;

[0082] Step S301.3, for any value of i, calculate i%max(j)+1, mark the result as J, max() is the maximum value operator, calculate D1 i With PW1 J The greatest common divisor of the calculated value is marked as S1 i , calculate D1 i / S1 i , mark the calculation result as S2 i ;

[0083] Step S301.4, S2 i Placed in S1 i Afterwards, form S i , sort S in ascending order of i i performing combination to obtain first process data, and outputting the first process data;

[0084] In the specific implementation, D11 and D12 are numbered as 59D3 and 540D respectively, and PW11 is numbered as 7373. Since only PW11 exists in PW1, J is fixed to 1 and no calculation is required. iThe calculations were performed with PW11, and the final results of S11 and S12 were 5 and 1 respectively. The further calculations of S21 and S22 were 11F7 and 540D respectively. In most cases, S2 i Both are four-digit numbers, so S2 i It is fixed to four digits. If it is less than four digits, zero is added to the first digit to make it four digits, so that S1 can be accurately found during decryption. i and S2 i , the combination of S1 and S2 is 511F7 and 1540D respectively, and the final first process data is 511F71540D;

[0085] Step S302, constructing a second encryption process;

[0086] Step S302 includes the following sub-steps:

[0087] Step S302.1: Label the data input to the second encryption process as D2. If D2 is not in decimal format, convert D2 to decimal format, obtain the information security key, extract the uppercase letters in the information security key from left to right to form the second encryption key, convert the second encryption key to decimal format, and label it as PW2.

[0088] Step S302.2: Number the numbers in D2 from left to right, using the symbol D2 p Indicates that the numbers in PW2 are numbered from left to right, using the symbol PW2 q Indicates, where p and q are both positive integers and p is the serial number of D2, q is the serial number of PW2;

[0089] In the specific implementation, it is assumed that the data input into the second encryption process is the first process data, that is, 511F71540D. According to the rule of converting every two hexadecimal digits, 51, 1F, 71, 54 and 0D are converted into decimal numbers, and they need to be converted into three-digit decimal numbers. The final conversion D2 is 081031113084013, the second encryption key extracted is FT, the converted PW2 is 7084, and the numbering is D21 to D2 15 , 1≤p≤15, and numbered to obtain PW21 to PW24, 1≤q≤4;

[0090] Step S302.3: For any value of p, calculate p%max(q)+1, mark the result as Q, and judge D2 p / PW2 Q or PW2 Q / D2 p Is it divisible? If D2 p / PW2 Q or PW2Q / D2 p If it can be divided, it will output the division signal. p / PW2 Q or PW2 Q / D2 p If they are not divisible, a non-divisible signal is output;

[0091] Step S302.4: If the output is a divisible signal, then D2 p Add one and judge again. If the output is still an integer signal, then D2 is set again. p Add one until the output is a non-divisible signal, and the changed D2 p Marked as R p ;

[0092] Step S302.5: If the output signal is not divisible, set D2 p Add one and judge again. If the output is still non-divisible, then D2 p Add one until the output is an integer division signal, and the changed D2 p Marked as R p ;

[0093] Step S302.6: R is sorted in ascending order of p. p performing combination to obtain second process data, and outputting the second process data;

[0094] In the specific implementation, taking p=1 as an example, the calculated Q is 2, D21 and PW22 are 0 and 0 respectively. Since 0 cannot be used as a denominator and 0 divided by any number is 0, when D2 p and PW2 Q When either side is 0, D2 p Directly marked as R p , that is, R1=D21=0, and take p=2 as an example, at this time Q is 3, and D22 and PW23 are 8 and 8 respectively, and the calculated D22 / PW23 is 1, which is divisible, and the divisible signal is output. Add 1 to D22 and judge again. At this time, D22 is 9, and D22 / PW23 and PW23 / D22 are not divisible. Therefore, the non-divisible signal is output, and finally R2 is 9. By analogy, for all D2 p For analysis, it should be noted that D2 p Fixed to one digit, so when D2 p When it increases to 10, it is reduced by 9, that is, reset to 1. After analysis, the second process data is finally obtained as 093003323897034.

[0095] Step S303, constructing a third encryption process;

[0096] Step S303 includes the following sub-steps:

[0097] Step S303.1: Label the data input to the third encryption process as D3. If D3 is not in binary format, convert D3 to binary format, obtain the information security key, extract the numbers and punctuation marks in the information security key from left to right to form the third encryption key, convert the third encryption key to binary format, and label it as PW3.

[0098] Step S303.2: Number the numbers in D3 from left to right, using the symbol D3 n Indicates that the numbers in PW3 are numbered from left to right, using the symbol PW3 m Indicates, where n and m are both positive integers and n is the serial number of D3, and m is the serial number of PW3;

[0099] In the specific implementation, it is assumed that the data input into the third encryption process is the second process data, that is, 093003323897034, which has a total of 15 bits and needs to be padded to 16 bits. The zero-padded result is 0093003323897034. Convert it into binary format according to each two-bit group, that is, convert 00, 93, 00, 33, 23, 89, 70 and 34 into binary format, and get D3 as 0000000010010011000000000011001100100011100010010111000000110100, and the numbers are D31 to D3 64 , 1≤n≤64, the third encryption key is extracted as "%41+=", excluding quotation marks, and converted according to the ASCII encoding table to obtain PW3 is 0010010100110100001100010010101100111101, and the numbers are PW31 to PW3 40 , 1≤m≤40;

[0100] Step S303.3, for any value of n, calculate n%max(m)+1, mark the result as M, and calculate D3 n With PW3 M Perform XOR calculation and mark the result as T3 n , increase n by one and calculate T3 again n , until T3 is calculated max(n) until;

[0101] Step S303.4: sort T3 in ascending order of n. n performing combination to obtain third process data, and outputting the third process data;

[0102] In a specific implementation, taking n = 1 as an example, M = 2 is calculated, and D31 and PW32 are calculated by XOR, wherein D31 and PW32 are both 0, so XOR T31 is 0, and finally the third flow data is 0100101011111011011000100110010101011001110000110001100001010110.

[0103] In step S304, the first encrypted flow, the second encrypted flow and the third encrypted flow are arranged and combined based on the flow sequence code, and the platform data is encrypted and calculated.

[0104] Step S304 includes the following sub-steps:

[0105] In step S304.1, the flow sequence code is three digits, the numbers in the flow sequence code are numbered in order from left to right, and the symbol G h is represented, wherein h is a positive integer and h is the sequence number of G.

[0106] In step S304.2, G h is 1, representing the first encrypted flow, G h is 2, representing the second encrypted flow, and G h is 3, representing the third encrypted flow.

[0107] In step S304.3, the platform data is encrypted in the order of G h of the hth step, and the data output in the last step is the final encrypted ciphertext.

[0108] In a specific implementation, the flow sequence code is 213, that is, the platform data is first input into the second encrypted flow, the second flow data is output, then the second flow data is input into the first encrypted flow, the first flow data is output, then the first flow data is input into the third encrypted flow, and the third flow data is output, and the final output of the third flow data is the final encrypted ciphertext.

[0109] In example 2, please refer to Figure 4 , Figure 4A schematic diagram of the structure of an electronic device is provided. The electronic device may include: a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other via the communication bus. The memory stores computer-readable instructions, and the processor can call instructions from the memory. When the computer-readable instructions are executed by the processor, the steps of a data security encryption method for an intelligent blood collection management platform are executed to achieve the following functions: generating an information security key for the intelligent blood collection management platform, and the information security key can be periodically changed; extracting a process sequence code using the security key; and securely encrypting platform data using the information security key, wherein the secure encryption includes different encryption processes, and the encryption processes are differently arranged and combined using the process sequence code.

[0110] In addition, the logical instructions in the above-mentioned memory can be implemented in the form of a software functional unit and can be stored in a computer-readable storage medium when sold or used as an independent product. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, and other media that can store program code.

[0111] Example 3. The present application also provides a computer program product, which includes a computer program stored on a computer-readable storage medium, and the computer program includes program instructions. When the program instructions are executed by a computer, the computer can execute the data security encryption method for the intelligent blood collection management platform provided by the above methods, and the method includes: generating an information security key for the intelligent blood collection management platform, and the information security key can be changed periodically; extracting a process sequence code through the security key; securely encrypting the platform data through the information security key, and the secure encryption includes different encryption processes, and the encryption processes are arranged and combined differently by the process sequence code.

[0112] Example 4. The present application also provides a computer-readable storage medium. The present application provides a storage medium on which a computer program is stored. When the computer program is executed by the processor, the steps in the data security encryption method for the intelligent blood collection management platform are run to achieve the following functions: generate an information security key for the intelligent blood collection management platform, and the information security key can be changed periodically; extract the process sequence code through the security key; securely encrypt the platform data through the information security key, and the secure encryption includes different encryption processes, and the encryption processes are arranged and combined differently by the process sequence code.

[0113] Through the description of the above embodiments, the embodiments of the present invention can be provided as methods, systems, or computer program products. Based on this understanding, the essence of the above technical solutions or the portion that contributes to the prior art can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a magnetic disk, or an optical disk, and includes a number of instructions for enabling a computer device (such as a personal computer, server, or network device) to execute the methods described in various embodiments or certain portions of the embodiments.

[0114] In the embodiments provided in this application, it should be understood that the disclosed system or method can be implemented in other ways. The embodiments described above are merely illustrative. For example, the division of modules or units is only a logical function division. There may be other division methods in actual implementation. For example, multiple modules or units can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some communication interfaces, and the indirect coupling or communication connection of systems, modules and units can be electrical, mechanical or other forms.

[0115] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A data security encryption method for an intelligent blood collection management platform, characterized in that: The steps include: Generate information security keys for the intelligent blood collection management platform, and the information security keys can be changed periodically; Extracting the process sequence code using the security key includes the following sub-steps: Count the number of lowercase letters in the security key, marked as a, count the number of uppercase letters in the security key, marked as b, and count the number of numbers and punctuation marks in the security key, marked as c; Reset the minimum value of a, b, and c to 1, the middle value to 2, and the maximum value to 3; Combine a, b and c into abc, where abc is the process sequence code; The platform data is securely encrypted using information security keys. The secure encryption includes different encryption processes, which are arranged and combined differently using process sequence codes.

2. The data security encryption method for the intelligent blood collection management platform according to claim 1, characterized in that: Generating an information security key for the intelligent blood collection management platform, which can be periodically changed, includes the following sub-steps: Constructing a key unit pool, wherein the key unit pool includes different key units; Generate periodic information security keys for the intelligent blood collection management platform based on the key unit pool.

3. The data security encryption method for the intelligent blood collection management platform according to claim 2, characterized in that: Constructing a key unit pool includes the following sub-steps: The key unit is used to form an information security key; The key unit pool includes 26 lowercase letters, 26 uppercase letters, numbers 0 to 9 and punctuation marks; An independent lowercase letter, uppercase letter, number or punctuation mark is a key unit.

4. The data security encryption method for the intelligent blood collection management platform according to claim 3 is characterized in that: Generating periodic information security keys for the intelligent blood collection management platform based on the key unit pool includes the following sub-steps: Setting a first change period, after each information security key has been used for the first change period, regenerating the information security key; When generating an information security key, two numbers are randomly selected from 0 to 9 to form a digit code; The key units are randomly extracted from the key unit pool, the number of extracted units is digits, and the information security key is obtained by combining them in the order of extraction.

5. The data security encryption method for the intelligent blood collection management platform according to claim 4 is characterized in that: Securely encrypting platform data using information security keys includes the following sub-steps: Construct the first encryption process; Construct the second encryption process; Construct the third encryption process; The first encryption process, the second encryption process and the third encryption process are arranged and combined based on the process sequence code, and encryption calculation is performed on the platform data.

6. The data security encryption method for the intelligent blood collection management platform according to claim 5, characterized in that: Constructing the first encryption process includes the following sub-steps: The data input into the first encryption process is marked as D1. If D1 is not in hexadecimal format, D1 is converted to hexadecimal format to obtain the information security key. The lowercase letters in the information security key are extracted from left to right to form the first encryption key. The first encryption key is converted to hexadecimal format and marked as PW1. Each four-digit number is called a coding group, and the coding groups in D1 are numbered from left to right. i Indicates that the coding groups in PW1 are numbered from left to right, and the symbol PW1 j Indicates, where i and j are both positive integers and i is the serial number of D1, j is the serial number of PW1; For any value of i, calculate i%max(j), mark the result as J, max() is the maximum value operator, calculate D1 i With PW1 J The greatest common divisor of i , calculate D1 i / S1 i , mark the calculation result as S2 i ; S2 i Placed in S1 i Afterwards, form S i , sort S in ascending order of i i The first process data is obtained by combining the first process data and outputting the first process data.

7. The data security encryption method for the intelligent blood collection management platform according to claim 6, characterized in that: Constructing the second encryption process includes the following sub-steps: The data input to the second encryption process is labeled D2. If D2 is not in decimal format, D2 is converted to decimal format to obtain the information security key. The uppercase letters in the information security key are extracted from left to right to form the second encryption key. The second encryption key is converted to decimal format and labeled PW2. Number the numbers in D2 from left to right, using the symbol D2 p Indicates that the numbers in PW2 are numbered from left to right, using the symbol PW2 q Indicates, where p and q are both positive integers and p is the serial number of D2, q is the serial number of PW2; For any value of p, calculate p%max(q), mark the result as Q, and judge D2 p / PW2 Q or PW2 Q / D2 p Is it divisible? If D2 p / PW2 Q or PW2 Q / D2 p If it can be divided, it will output the division signal. p / PW2 Q or PW2 Q / D2 p If they are not divisible, a non-divisible signal is output; If the output is an integer division signal, D2 p Add one and judge again. If the output is still an integer signal, then D2 is set again. p Add one until the output is a non-divisible signal, and the changed D2 p Marked as R p ; If the output is a non-divisible signal, D2 p Add one and judge again. If the output is still non-divisible, then D2 p Add one until the output is an integer division signal, and the changed D2 p Marked as R p ; R is calculated in the order of p from small to large. p The second process data is obtained by combining the two data, and the second process data is output.

8. The data security encryption method for the intelligent blood collection management platform according to claim 7, characterized in that: Constructing the third encryption process includes the following sub-steps: The data input to the third encryption process is labeled D3. If D3 is not in binary format, D3 is converted to binary format to obtain the information security key. The numbers and punctuation marks in the information security key are extracted from left to right to form the third encryption key. The third encryption key is converted to binary format and labeled PW3. Number the numbers in D3 from left to right, using the symbol D3 n Indicates that the numbers in PW3 are numbered from left to right, using the symbol PW3 m Indicates, where n and m are both positive integers and n is the serial number of D3, and m is the serial number of PW3; For any value of n, calculate n%max(m), mark the result as M, and for D3 n With PW3 M Perform XOR calculation and mark the result as T3 n , increase n by one and calculate T3 again n , until T3 is calculated max(n) until; According to the order of n from small to large, T3 n The third process data is obtained by combining and outputting the third process data.

9. The data security encryption method for the intelligent blood collection management platform according to claim 8, characterized in that: Arranging and combining the first encryption process, the second encryption process, and the third encryption process based on the process sequence code, and performing encryption calculation on the platform data includes the following sub-steps: The process sequence code is a three-digit code. The numbers in the process sequence code are numbered from left to right. h Indicates, where h is a positive integer and h is the sequence number of G; G h 1 represents the first encryption process, G h 2 represents the second encryption process, G h 3 represents the third encryption process; execute G according to step h h The platform data is encrypted in the order of the last step, and the data outputted in the last step is the final encrypted ciphertext.

Images