A secure encryption processing system for geographic information data

Abstract

The present invention discloses a security encryption processing system for geographic information data, including a processing module and a user module. The processing module includes a processing sub-module, an encryption sub-module, and a restoration sub-module. The user module includes an authentication sub-module, a destruction sub-module, and a display sub-module. The encryption sub-module includes sequence encryption, plain text segment encryption, and an encryption algorithm. The destruction sub-module includes abnormal login cleaning, timed cleaning, and normal login cleaning. The system of the present invention segments the plain text of the geographic information data and adds a sequence at the beginning and end, and uses different encryption algorithms for the sequence text and the data body, so that cracking the sequence key and the data body key separately cannot view the data body normally, making the data more secure after encryption. By setting up multiple-level accounts and a destruction sub-module, the geographic data is automatically destroyed during abnormal login and when logging in to a secondary account, reducing the situation of geographic data being stolen, and enabling users to select a suitable destruction method according to the environment.

Description

Technical Field

[0001] The present invention relates to the technical field of geographic information data, and particularly to a secure encryption processing system for geographic information data. Background Technique

[0002] Geographic data is data directly or indirectly related to a certain location relative to the Earth, and is a file of various elements representing natural and social phenomena of geographical locations and distribution characteristics, including natural geographic data and socio-economic data, such as land cover type data, geomorphic data, soil data, hydrological data, vegetation data, residential area data, river data, administrative boundaries, and socio-economic data, etc. This data is all characteristics within the region. After the data record is stored, in order to prevent it from being stolen by non-users, it is usually encrypted, encrypting the plaintext data into ciphertext;

[0003] However, the existing secure encryption processing system for geographic information data only encrypts through encryption algorithms, and its encryption depends entirely on the algorithm itself. It is still prone to leakage of geographic information data after the secret key is known. Summary of the Invention

[0004] The present invention provides a secure encryption processing system for geographic information data, which can effectively solve the problem that the existing secure encryption processing system for geographic information data only encrypts through encryption algorithms, and its encryption depends entirely on the algorithm itself, and it is still prone to leakage of geographic information data after the secret key is known as mentioned in the above background technique.

[0005] To achieve the above object, the present invention provides the following technical solution: A secure encryption processing system for geographic information data, including a processing module and a user module. The processing module includes a processing sub-module, an encryption sub-module, and a restoration sub-module. The user module includes an authentication sub-module, a destruction sub-module, and a display sub-module. The user module is connected to the processing module;

[0006] The processing sub-module includes plaintext preprocessing, plaintext segmentation, and first-order addition. The encryption sub-module includes sequence encryption, plaintext segment encryption, and encryption algorithms. The restoration sub-module includes ciphertext restoration, permutation and combination, and data layering. The authentication sub-module includes password login and fingerprint login. The destruction sub-module includes abnormal login cleaning, timed cleaning, and normal login cleaning. The display sub-module includes layered display.

[0007] According to the above technical features, the processing sub-module includes plaintext preprocessing, plaintext segmentation, and adding sequence to the first and last positions. The plaintext preprocessing is to denoise the geographic information data through a median filter to remove noise data. The median filter replaces the value of a point in a digital image or digital sequence with the median of the values of the points in a neighborhood of that point. Its main function is to make pixels with a large difference in gray values of surrounding pixels take values closer to those of the surrounding pixels, thereby eliminating isolated noise points.

[0008] According to the above technical features, the plaintext segmentation is to divide the preprocessed geographic data into several segments as plaintext segments waiting for encryption. The adding sequence to the first and last positions is that an operator inputs a section of data as the original data, evenly divides this section of data into the same number as the plaintext segments, and inserts the evenly divided data into the heads and tails of several plaintext segments in sequence to complete the adding sequence to the first and last positions of the plaintext segments. This section of data is stored in the memory as a secondary secret key and is obtained by the user after secure login.

[0009] According to the above technical features, the encryption sub-module includes sequence encryption, plaintext segment encryption, and an encryption algorithm. The encryption algorithm specifically uses the SM2 elliptic curve algorithm and the SM3 cryptographic hash algorithm;

[0010] According to the above technical features, the sequence encryption is to encrypt the head sequence of each plaintext segment through the SM3 cryptographic hash algorithm, translate and store the sequence ciphertext. The SM3 cryptographic hash algorithm is to add a fixed length to the data, and after padding and grouping, iterate and compress to obtain the hash value;

[0011] The plaintext segment encryption is to encrypt each plaintext segment through the SM2 elliptic curve algorithm, translate and store the plaintext segment ciphertext. The SM2 elliptic curve algorithm is a national cryptographic standard asymmetric algorithm standard, which is an extension based on ecc. Its security and key generation rate are both superior to the RSA algorithm. Asymmetric encryption means that the encryption key and the decryption key are not the same. Usually, there are two keys, called "public key" and "private key", and they must be paired to use, otherwise the encrypted file cannot be opened.

[0012] According to the above technical features, the reduction sub-module includes ciphertext reduction, permutation and combination, and data stratification. The ciphertext reduction is that after the user securely logs in to obtain the secret key, the sequence ciphertext and the plaintext segment ciphertext are successively decrypted by the secret key to restore the sequence ciphertext and the plaintext segment ciphertext into plaintext; the permutation and combination is to sort each plaintext segment through the insertion sorting algorithm according to the arrangement order of the sequence plaintext in the secondary secret key, and after the sorting is completed, the sequence is removed and several plaintext segments are restored into a whole plaintext data; the insertion sorting algorithm is to construct an ordered sequence, for the unsorted data, scan backward from the end in the sorted sequence, find the corresponding position and insert it. The data stratification is to stratify the restored geographical information data into geographical region main body, secondary sub-region, and sub-region features.

[0013] According to the above technical features, the authentication sub-module includes two-level accounts, password login, and fingerprint login. The two-level accounts are the choice of the login state. When the user logs in to the first-level account, the user obtains the correct private key. When the user logs in to the second-level account, the user obtains the wrong secret key, and the account numbers of the first-level account and the second-level account are the same. Enter the corresponding account according to the login method.

[0014] The password login is to enter the corresponding password after entering the account number. After the password is confirmed, enter the corresponding account. Different passwords correspond to different accounts. The fingerprint login is to enter the corresponding fingerprint after entering the account number. After the fingerprint is confirmed, enter the corresponding account. Different fingerprints correspond to different accounts. The passwords and fingerprints for password login and fingerprint login are both pre-entered into the system.

[0015] According to the above technical features, the destruction sub-module includes abnormal login cleaning, timed cleaning, and normal login cleaning. The abnormal login cleaning is that when the stored ciphertext data is extracted from the memory without an account login, the stored ciphertext data is automatically destroyed before extraction, and random data of the corresponding length is filled, and the random data is output outward. The timed cleaning is to record the stored ciphertext date through a timing algorithm. By setting the storage time by the user, when the storage time of the ciphertext data exceeds the set time, the ciphertext data exceeding the time is automatically cleared. The normal login cleaning is that when the user logs in to the second-level account, the stored ciphertext data is automatically cleared, and random data of the corresponding length is filled. When the user logs in to the first-level account, the geographical data can be selectively deleted.

[0016] According to the above technical features, the display sub-module includes hierarchical display. The hierarchical display is to display the geographical area main body, secondary sub-areas, and sub-area features. Specifically, the hyperlinks of the secondary sub-areas within the geographical area main body are placed at the corresponding positions of the geographical area main body, and the hyperlinks of the sub-area features are placed at the corresponding positions of the secondary sub-areas. When the user clicks on the hyperlink of the secondary sub-area on the geographical area main body, they enter the corresponding secondary sub-area, and then select and click on the corresponding sub-area feature within the secondary sub-area. Finally, the relevant data of this sub-area feature within the secondary sub-area is displayed to the user.

[0017] Compared with the prior art, the beneficial effects of the present invention are as follows: The present invention is scientific and reasonable, and is safe and convenient to use. By segmenting the plaintext of the geographical information data and adding a sequence number at the beginning and end, and using different encryption algorithms for the preamble and the data body, it is impossible to view the data body normally by cracking the preamble key and the data body key separately, making the data more secure after encryption. At the same time, the preamble is encrypted by the SM3 cryptographic hash algorithm and sorted by the insertion sorting algorithm, making the decryption and sorting of the preamble more convenient, thereby improving the decryption time of the plaintext segment and restoring the plaintext segment more quickly. By setting up multi-level accounts and a destruction sub-module, the geographical data is automatically destroyed when logging in abnormally or logging in to a secondary account, reducing the situation of geographical data being stolen, allowing users to choose a suitable destruction method according to the environment. Finally, the geographical data is processed in layers, making it more convenient for display, and users can understand the sub-area feature data within the secondary sub-area more quickly. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The drawings are used to provide a further understanding of the present invention and constitute a part of the specification. They are used together with the embodiments of the present invention to explain the present invention and do not constitute a limitation to the present invention.

[0019] In the drawings:

[0020] Figure 1 is a system block diagram of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0021] The following is a description of the preferred embodiments of the present invention with reference to the drawings. It should be understood that the preferred embodiments described herein are only used to illustrate and explain the present invention and are not used to limit the present invention.

[0022] Embodiment: As Figure 1 shown, the present invention provides a technical solution, a secure encryption processing system for geographical information data, including a processing module and a user module. The processing module includes a processing sub-module, an encryption sub-module, and a restoration sub-module. The user module includes an authentication sub-module, a destruction sub-module, and a display sub-module. The user module is interconnected with the processing module;

[0023] The processing sub-module includes plaintext preprocessing, plaintext segmentation, and adding sequence to the first bit. The encryption sub-module includes sequence encryption, plaintext segment encryption, and encryption algorithms. The restoration sub-module includes ciphertext restoration, permutation and combination, and data layering. The authentication sub-module includes password login and fingerprint login. The destruction sub-module includes cleaning for abnormal login, scheduled cleaning, and cleaning for normal login. The display sub-module includes layered display.

[0024] According to the above technical features, the processing sub-module includes plaintext preprocessing, plaintext segmentation, and adding sequence to the first bit. Plaintext preprocessing is to denoise the geographic information data through a median filter to remove noise data. The median filter replaces the value of a point in a digital image or digital sequence with the median value of the points in a neighborhood of that point. Its main function is to make pixels with a large difference in gray values among surrounding pixels take values closer to those of the surrounding pixels, thereby eliminating isolated noise points.

[0025] According to the above technical features, plaintext segmentation is to divide the preprocessed geographic data into several segments as plaintext segments waiting for encryption. Adding sequence to the first bit is that an operator inputs a section of data as the original data, and evenly divides this section of data into the same number as the plaintext segments, and then inserts the evenly divided data into the heads and tails of several plaintext segments in sequence to complete adding sequence to the first bit of the plaintext segments. This section of data is stored in the memory as a secondary secret key and is obtained by the user after secure login.

[0026] According to the above technical features, the encryption sub-module includes sequence encryption, plaintext segment encryption, and encryption algorithms. The encryption algorithm specifically uses the SM2 elliptic curve algorithm and the SM3 cryptographic hash algorithm;

[0027] According to the above technical features, sequence encryption is to encrypt the first sequence of each plaintext segment through the SM3 cryptographic hash algorithm, translate and store the sequence ciphertext. The SM3 cryptographic hash algorithm is to add a fixed length to the data, and after padding and grouping, iteratively compress to obtain the hash value;

[0028] Plaintext segment encryption is to encrypt each plaintext segment through the SM2 elliptic curve algorithm, translate and store the plaintext segment ciphertext. The SM2 elliptic curve algorithm is a national cryptographic standard for asymmetric algorithms, which is an extension based on ecc. Its security and key generation rate are both superior to the RSA algorithm. Asymmetric encryption means that the encryption key and the decryption key are not the same. Usually, there are two keys, called "public key" and "private key", and they must be used in pairs, otherwise the encrypted file cannot be opened.

[0029] According to the above technical features, the reduction sub-module includes ciphertext reduction, permutation and combination, and data layering. Ciphertext reduction means that after the user logs in securely to obtain the secret key, the secret key is used to decrypt the sequence ciphertext and the plaintext segment ciphertext in sequence, and the sequence ciphertext and the plaintext segment ciphertext are restored to plaintext. Permutation and combination means that according to the arrangement order of the sequence plaintext in the secondary secret key, each plaintext segment is sorted through the insertion sort algorithm, and after the sorting is completed, the sequence is removed and several plaintext segments are restored to a whole plaintext data. The insertion sort algorithm is to construct an ordered sequence. For the unsorted data, it scans backward from the end in the sorted sequence, finds the corresponding position and inserts it. Data layering is to layer the restored geographical information data, which is divided into geographical area main body, secondary sub-division, and sub-division features.

[0030] According to the above technical features, the authentication sub-module includes two-level accounts, password login, and fingerprint login. Two-level accounts are the choice of the state after login. When the user logs in to the first-level account, the user obtains the correct private key. When the user logs in to the second-level account, the user obtains the wrong secret key, and the account numbers of the first-level account and the second-level account are the same. Enter the corresponding account according to the login method.

[0031] According to the above technical features, password login is to enter the corresponding password after entering the account number. After the password is confirmed, enter the corresponding account. Different passwords correspond to different accounts. Fingerprint login is to enter the corresponding fingerprint after entering the account number. After the fingerprint is confirmed, enter the corresponding account. Different fingerprints correspond to different accounts. The passwords and fingerprints for password login and fingerprint login are both pre-entered into the system.

[0032] According to the above technical features, the destruction sub-module includes abnormal login cleaning, timed cleaning, and normal login cleaning. Abnormal login cleaning means that when the stored ciphertext data is extracted from the memory without an account login, the stored ciphertext data is automatically destroyed before extraction, and random data of the corresponding length is filled, and the random data is output outward. Timed cleaning is to record the stored ciphertext date through a timed algorithm. By setting the storage time by the user, when the storage time of the ciphertext data exceeds the set time, the ciphertext data exceeding the time is automatically cleared. Normal login cleaning means that when the user logs in to the second-level account, the stored ciphertext data is automatically cleared, and random data of the corresponding length is filled. When the user logs in to the first-level account, the geographical data can be selectively deleted.

[0033] According to the above technical features, the display sub-module includes hierarchical display. The hierarchical display is to display the geographical area main body, secondary sub-areas, and sub-area features. Specifically, the hyperlinks of the secondary sub-areas within the geographical area main body are placed at the corresponding positions of the geographical area main body, and the hyperlinks of the sub-area features are placed at the corresponding positions of the secondary sub-areas. When the user clicks on the hyperlink of the secondary sub-area on the geographical area main body, they enter the corresponding secondary sub-area, and then select and click on the corresponding sub-area feature within the secondary sub-area. Finally, the relevant data of this sub-area feature within the secondary sub-area is displayed to the user.

[0034] By segmenting the plaintext of the geographical information data and adding a sequence number at the beginning and end, and using different encryption algorithms for the preamble and the data body, it is impossible to view the data body normally by cracking the preamble key and the data body key separately, making the data more secure after encryption. At the same time, the preamble is encrypted by the SM3 cryptographic hash algorithm and sorted by the insertion sorting algorithm, making the decryption and sorting of the preamble more convenient, thereby reducing the decryption time of the plaintext segment and restoring the plaintext segment more quickly. By setting up multi-level accounts and a destruction sub-module, the geographical data is automatically destroyed when logging in abnormally or logging in to a secondary account, reducing the situation of the geographical data being stolen, allowing the user to choose a suitable destruction method according to the environment. Finally, the geographical data is processed hierarchically, making it more convenient for display, and the user can understand the sub-area feature data within the secondary sub-area more quickly.

[0035] Finally, it should be noted that the above are only preferred examples of the present invention and are not used to limit the present invention. Although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art can still modify the technical solutions described in the foregoing embodiments, or perform equivalent replacements on some of the technical features. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principle of the present invention shall be included within the protection scope of the present invention.

Claims

1. A security encryption processing system for geographic information data, characterized in that: It includes a processing module and a user module. The processing module includes a processing sub-module, an encryption sub-module, and a restoration sub-module. The user module includes an authentication sub-module, a destruction sub-module, and a display sub-module. The user module is interconnected with the processing module. The processing sub-module is used to implement plaintext preprocessing, plaintext segmentation, and first-bit sequencing. The encryption sub-module is used to implement sequence encryption, plaintext segment encryption, and encryption algorithms. The restoration sub-module is used to implement ciphertext restoration, permutation and combination, and data layering. The authentication sub-module is used to implement password login and fingerprint login. The destruction sub-module is used to implement abnormal login cleaning, timed cleaning, and normal login cleaning. The display sub-module is used to implement layered display; The plaintext segmentation is to divide the preprocessed geographical data into several segments as plaintext segments waiting for encryption. The first-bit sequencing is that an operator inputs a section of data as the original data, evenly divides the original data into the same number as the plaintext segments, and sequentially inserts the evenly divided original data into the heads and tails of several plaintext segments to complete the first-bit sequencing of the plaintext segments. The original data is stored in the memory as a secondary secret key and is obtained by the user after secure login; The sequence encryption is to encrypt the first sequence of each plaintext segment through the SM3 cryptographic hash algorithm, translate the sequence ciphertext and store it; The plaintext segment encryption is to encrypt each plaintext segment after first-bit sequencing through the SM2 elliptic curve algorithm, translate the plaintext segment ciphertext and store it; The ciphertext restoration is that after the user securely logs in and obtains the secret key, decrypt the sequence ciphertext and the plaintext segment ciphertext in sequence through the secret key, and restore the sequence ciphertext and the plaintext segment ciphertext to plaintext; The permutation and combination is to sort the plaintext segments restored from each plaintext segment ciphertext according to the permutation order of the sequence plaintext in the secondary secret key through the insertion sorting algorithm, and after sorting, remove the sequence plaintext and restore several plaintext segments to a whole plaintext data; The insertion sorting algorithm is to construct an ordered sequence. For the unsorted data, scan from the back to the front in the sorted sequence, find the corresponding position and insert it.

2. The security encryption processing system for geographic information data according to claim 1, characterized in that: The processing sub-module is used to implement plaintext preprocessing, plaintext segmentation, and first-bit sequencing. The plaintext preprocessing is to reduce the noise of the geographical information data through a median filter to remove the noise data. The median filter is to replace the value of a point in a digital image or digital sequence with the median of the values of all points in a neighborhood of that point.

3. A security encryption processing system for geographic information data according to claim 1, characterized in that: The encryption sub-module is used to implement sequence encryption, plaintext segment encryption, and encryption algorithms. The encryption algorithms specifically adopt the SM2 elliptic curve algorithm and the SM3 cryptographic hash algorithm.

4. A security encryption processing system for geographic information data according to claim 3, characterized in that: The SM3 cryptographic hash algorithm is to add a fixed length to the data, and after padding and grouping, iteratively compress to obtain the hash value; The SM2 elliptic curve algorithm is a national cryptographic standard asymmetric algorithm standard, which is an extension based on ecc. Its security and key generation rate are both superior to the RSA algorithm. Asymmetric encryption means that the encryption key and the decryption key are not the same. Usually, there are two keys, called the "public key" and the "private key", and they must be paired for use, otherwise the encrypted file cannot be opened.

5. A security encryption processing system for geographic information data according to claim 1, characterized in that, The data layering is to layer the restored geographic information data, which is divided into the main body of the geographic region, secondary sub-regions, and sub-region features.

6. A security encryption processing system for geographic information data according to claim 1, characterized in that: The authentication sub-module is used to implement two-level account, password login, and fingerprint login. The two-level account is a choice of the status after login. When the user logs in to the first-level account, the user obtains the correct private key. When the user logs in to the second-level account, the user obtains the wrong secret key, and the account numbers of the first-level account and the second-level account are the same. Enter the corresponding account according to the login method.

7. A security encryption processing system for geographic information data according to claim 6, characterized in that: For password login, enter the corresponding password after entering the account number. After the password is confirmed, enter the corresponding account. Different passwords correspond to different accounts. For fingerprint login, enter the corresponding fingerprint after entering the account number. After the fingerprint is confirmed, enter the corresponding account. Different fingerprints correspond to different accounts. The passwords and fingerprints for password login and fingerprint login are both pre-entered into the system.

8. A security encryption processing system for geographic information data according to claim 1, characterized in that: The destruction sub-module is used to implement abnormal login cleaning, timed cleaning, and normal login cleaning. For abnormal login cleaning, when the stored ciphertext data is extracted from the memory without an account login, the stored ciphertext data is automatically destroyed before extraction, and random data of the corresponding length is filled, and the random data is output. For timed cleaning, the stored ciphertext date is recorded through a timing algorithm. By setting the storage time by the user, when the storage time of the ciphertext data exceeds the set time, the ciphertext data exceeding the time is automatically cleared. For normal login cleaning, when the user logs in to the second-level account, the stored ciphertext data is automatically cleared, and random data of the corresponding length is filled. When the user logs in to the first-level account, the geographic data can be selectively deleted.

9. The secure encryption processing system for geographic information data according to claim 1, wherein: The display sub-module is used to implement layered display. The layered display is to display the main body of the geographic region, secondary sub-regions, and sub-region features. Specifically, the hyperlink of the secondary sub-region within the main body of the geographic region is placed at the corresponding position of the main body of the geographic region, and the hyperlink of the sub-region feature is placed at the corresponding position of the secondary sub-region. The user clicks on the hyperlink of the secondary sub-region on the main body of the geographic region to enter the corresponding secondary sub-region, and clicks on the corresponding sub-region feature within the secondary sub-region. Finally, the relevant data of the sub-region feature within the secondary sub-region is displayed to the user.

Images