Encryption method, decryption method, leakage identification method and device

Abstract

This application provides an encryption method, decryption method, leakage identification method, text transmission method, and apparatus, including: obtaining a string to be encrypted; determining a protection character in the string to be encrypted based on a preset association between the original code position of the protection character in the Unicode Conformity Table (Unicode Conformity Table) and the multiplexed code position in the Unicode Conformity Table; and replacing the original code position of the protection character with a target multiplexed code position corresponding to the original code position according to the association, thereby obtaining an encrypted string. The encryption technology described in this application is based on the text itself. The encrypted text will be displayed in normal plaintext form in a trusted environment, while it will be presented as garbled text in an untrusted environment. Even if the encrypted text is leaked, it can still protect the text content. The decrypted protection character can be displayed and edited in normal plaintext form in a trusted environment, achieving the purpose of normal use of the text content.

Description

Technical Field

[0001] This application relates to the field of computer technology, and in particular to an encryption method and apparatus, a decryption method and apparatus, a leakage identification method and apparatus, a text sending method and apparatus, electronic equipment, and a machine-readable medium. Background Technology

[0002] With the increasing popularity of digital office work, massive amounts of text content are stored in computers in the form of digital information. Digital information brings great convenience to office work due to its high information density, ease of editing, and ease of distribution.

[0003] Currently, protecting text content is of great significance. The common practice is to encrypt text files with keys, preventing users without the keys from accessing the text content and thus solving the problem of information interception during transmission.

[0004] However, in the current scheme, since information protection is based on keys, the key decryption scheme itself has a significant risk of text content leakage, making the text content still easily intercepted and deciphered by others. Summary of the Invention

[0005] This application provides an encryption method, a decryption method, a leakage identification method, and a text sending method to solve the problem that key decryption schemes in related technologies inherently carry a significant risk of text content leakage, making the text content still easily intercepted and deciphered by others.

[0006] Accordingly, embodiments of this application also provide an encryption device, a decryption device, a leakage identification device, a text sending device, an electronic device, and a storage medium to ensure the implementation and application of the above methods.

[0007] To address the aforementioned problems, this application discloses an encryption method, the method comprising:

[0008] Get the string to be encrypted;

[0009] Based on the association between the original code position of the protection character in the Unicode Consortium and the reused code position in the Unicode Consortium, the protection character in the string to be encrypted is determined; the reused code position includes at least one of the following: the spare code position in the Unicode Consortium and the code position corresponding to the reusable character in the Unicode Consortium;

[0010] Based on the aforementioned association, the original code points of the protection character are replaced with the target multiplexed code points corresponding to the original code points to obtain an encrypted string.

[0011] This application discloses a decryption method, the method comprising:

[0012] Obtain an encrypted string; the original code points of the protected characters in the encrypted string are replaced with multiplexed code points that are associated with the original code points; the multiplexed code points include at least one of the following: spare code points in the Unicode Consortium and code points corresponding to reusable characters in the Unicode Consortium;

[0013] Based on the preset association between the original code position of the protection character in the Unicode Conversion Table and the multiplexed code position in the Unicode Conversion Table, the multiplexed code position of the protection character in the encrypted string is replaced with the corresponding original code position to obtain the decrypted string;

[0014] Based on the preset correspondence between code positions and character rendering information, the character rendering information corresponding to the original code positions of the protected characters in the decrypted string, as well as the character rendering information corresponding to the code positions of other characters in the decrypted string, are obtained to obtain the decrypted text and display it.

[0015] Alternatively, in another embodiment of this application, the frequency of the high-frequency character and the number of multiplexed code points associated with the high-frequency character are directly proportional.

[0016] Optionally, in another embodiment of this application, the reusable characters include characters with a frequency less than or equal to a second threshold.

[0017] Optionally, in another embodiment of this application, after obtaining the multiplexed code points in the Unicode Conversion Table, the method further includes: obtaining a first number of the multiplexed code points and a second number of the protection characters; if the first number is greater than the second number, performing the step of establishing an association between the original code point corresponding to the protection character in the Unicode Conversion Table and the multiplexed code point; if the first number is less than the second number, reducing the number of the protection characters or increasing the number of the multiplexable characters.

[0018] Optionally, in another embodiment of this application, it further includes: when the product of the second quantity and 2 is less than the first quantity, establishing an association relationship between the original code bits and the multiplexed code bits.

[0019] This application discloses a decryption method, the method comprising:

[0020] The process involves obtaining an encrypted string and a target parser; replacing the original code points of the protected characters in the encrypted string with multiplexed code points corresponding to the original code points; and constructing the target parser by replacing the original character rendering information corresponding to the multiplexed code points in the preset correspondence between code points and character rendering information with the character rendering information corresponding to the original code points that are associated with the multiplexed code points; the multiplexed code points include at least one of the following: spare code points in the unified code table and code points corresponding to reusable characters in the unified code table.

[0021] Based on the code points of the characters in the encrypted string, the corresponding character rendering information is obtained from the target parser to obtain the decrypted text and display it.

[0022] This application discloses a method for identifying information leakage, the method comprising:

[0023] Obtain the string to be analyzed and the multiplexed code points, wherein the multiplexed code points include at least one of the following: spare code points in the Unicode Consortium and code points corresponding to reusable characters in the Unicode Consortium;

[0024] If it is determined that the characters in the string to be analyzed use the multiplexed code points, then it is determined that the string to be analyzed poses a risk of leakage.

[0025] Optionally, in another embodiment of this application, determining that the string to be analyzed has a risk of leakage when it is determined that the characters of the string to be analyzed use the multiplexed code points includes: obtaining the target code points corresponding to the characters of the string to be analyzed; and determining that the characters of the string to be analyzed use the multiplexed code points and that the string to be analyzed has a risk of leakage when the number of multiplexed code points contained in the target code points is greater than or equal to a third threshold, or the frequency of occurrence of multiplexed code points contained in the target code points is greater than or equal to a fourth threshold.

[0026] Optionally, in another embodiment of this application, it further includes: if it is determined that the protection characters in the string to be analyzed use the original code points and multiplexed code points, then it is determined that an editing operation has been performed on the string to be analyzed.

[0027] This application discloses a text sending method, the method comprising:

[0028] Obtain an encrypted string and a device identifier for a target device to receive the encrypted string; the original code points of the protection characters in the encrypted string are replaced with multiplexed code points that are associated with the original code points; the multiplexed code points include at least one of: spare code points in the Unicode Consortium and code points corresponding to reusable characters in the Unicode Consortium;

[0029] If the target device is determined to be an internally trusted device based on the device identifier, the encrypted string is sent to the target device. The internally trusted device is a device with a built-in target parser. The target parser is constructed by replacing the original character rendering information corresponding to the multiplexed code position in the correspondence between the preset code position and character rendering information with the character rendering information corresponding to the original code position that is associated with the multiplexed code position.

[0030] If the target device is determined to be an externally authorized device based on the device identifier, the multiplexed code position of the protection character in the encrypted string is replaced with the corresponding original code position according to the association relationship between the original code position of the protection character in the Unicode Conversion Table and the multiplexed code position in the Unicode Conversion Table, thereby obtaining the decrypted string and sending it to the target device.

[0031] This application discloses an encryption device, the device comprising:

[0032] The first acquisition module is used to acquire the string to be encrypted;

[0033] The first determining module is used to determine the protection character in the string to be encrypted based on the association relationship between the original code position of the protection character in the Unicode Consortium and the multiplexed code position in the Unicode Consortium; the multiplexed code position includes at least one of the following: spare code position in the Unicode Consortium and code position corresponding to the reusable character in the Unicode Consortium.

[0034] An encryption module is used to replace the original code points of the protection character with target multiplexed code points corresponding to the original code points according to the association relationship, so as to obtain an encrypted string.

[0035] This application discloses a decryption device, including:

[0036] The second acquisition module is used to acquire the encrypted string; the original code position of the protected character in the encrypted string is replaced with a multiplexed code position that is associated with the original code position; the multiplexed code position includes at least one of the following: spare code position in the Unicode Consortium and code position corresponding to the reusable character in the Unicode Consortium.

[0037] The second determining module is used to replace the multiplexed code position of the protection character in the encrypted string with the corresponding original code position according to the preset association relationship between the original code position of the protection character in the Unicode table and the multiplexed code position in the Unicode table, so as to obtain the decrypted string;

[0038] The first decryption module is used to obtain the character rendering information corresponding to the original code position of the protected character in the decryption string, and the character rendering information corresponding to the code position of other characters in the decryption string, based on the preset correspondence between code positions and character rendering information, to obtain the decrypted text and display it.

[0039] This application discloses a decryption device, including:

[0040] The third acquisition module is used to acquire the encrypted string and the target parser; the original code points of the protected characters in the encrypted string are replaced with multiplexed code points corresponding to the original code points; the target parser is constructed by replacing the original character rendering information corresponding to the multiplexed code points in the preset correspondence between code points and character rendering information with the character rendering information corresponding to the original code points that are associated with the multiplexed code points; the multiplexed code points include at least one of the following: spare code points in the unified code table and code points corresponding to reusable characters in the unified code table;

[0041] The second decryption module is used to obtain the corresponding character rendering information from the target parser based on the code position of the characters in the encrypted string, obtain the decrypted text, and display it.

[0042] This application discloses a data leakage detection device, including:

[0043] The fourth acquisition module is used to acquire the string to be analyzed and the multiplexed code points, wherein the multiplexed code points include at least one of the following: spare code points in the Unicode Consortium and code points corresponding to reusable characters in the Unicode Consortium;

[0044] The identification module is used to determine that the string to be analyzed has a risk of leakage if it is determined that the characters of the string to be analyzed use the multiplexed code points.

[0045] This application discloses a text sending device, including:

[0046] The fifth acquisition module is used to acquire an encrypted string and a device identifier of a target device for receiving the encrypted string; the original code position of the protection character in the encrypted string is replaced with a multiplexed code position that is associated with the original code position; the multiplexed code position includes at least one of: a spare code position in the Unicode Consortium and a code position corresponding to a reusable character in the Unicode Consortium;

[0047] The first sending module is used to send the encrypted string to the target device when the target device is determined to be an internally trusted device according to the device identifier. The internally trusted device is a device with a built-in target parser. The target parser is obtained by replacing the original character rendering information corresponding to the multiplexed code position in the preset correspondence between code position and character rendering information with the character rendering information corresponding to the original code position that is associated with the multiplexed code position.

[0048] The second sending module is used to, when the target device is determined to be an externally authorized device based on the device identifier, replace the multiplexed code position of the protection character in the encrypted string with the corresponding original code position according to the preset association relationship between the original code position of the protection character in the unified code table and the multiplexed code position in the unified code table, to obtain the decrypted string and send it to the target device.

[0049] This application also discloses an electronic device, including: a processor; and a memory storing executable code thereon, which, when executed, causes the processor to perform one or more methods as described in this application.

[0050] This application also discloses one or more machine-readable media storing executable code thereon, which, when executed, causes a processor to perform one or more methods as described in this application.

[0051] Compared with related technologies, the embodiments of this application have the following advantages:

[0052] In this embodiment, by establishing a pre-defined association between the original code position of the protection character in the Unicode Consortium and the multiplexed code position in the Unicode Consortium, the original code position of the protection character in the string to be encrypted is replaced with the multiplexed code position corresponding to the original code position, thereby achieving text encryption. This ensures that the encryption technology is based on the text itself, and the encryption does not change the original document encoding and text structure, and can be edited normally. The encrypted text will be displayed in a normal plaintext form in a trusted environment, while it will be presented in a garbled form in an untrusted environment. That is, even if the encrypted text is leaked, it can still protect the text content. Attached Figure Description

[0053] Figure 1 This is a schematic diagram of a text processing procedure according to an embodiment of this application;

[0054] Figure 2 This is an architecture diagram of an encrypted text processing procedure according to an embodiment of this application;

[0055] Figure 3 This is an architecture diagram of a text leakage identification method according to an embodiment of this application;

[0056] Figure 4 This is an interface diagram of a text document usage scenario according to an embodiment of this application;

[0057] Figure 5 This is an interface diagram of a text encryption scenario for instant messaging according to an embodiment of this application;

[0058] Figure 6 This is an interface diagram of a text encryption scenario for email according to an embodiment of this application;

[0059] Figure 7 This is an interface diagram of a text encryption scenario for a webpage according to an embodiment of this application;

[0060] Figure 8 This is a flowchart illustrating the steps of an encryption method according to an embodiment of this application;

[0061] Figure 9 This is a flowchart illustrating the steps of a decryption method according to an embodiment of this application;

[0062] Figure 10 This is a flowchart illustrating the steps of another decryption method according to an embodiment of this application;

[0063] Figure 11 This is a flowchart illustrating the steps of a data leakage identification method according to an embodiment of this application;

[0064] Figure 12 This is a flowchart illustrating the steps of a text sending method according to an embodiment of this application;

[0065] Figure 13 This is a structural block diagram of an encryption device according to an embodiment of this application;

[0066] Figure 14 This is a structural block diagram of a decryption device according to an embodiment of this application;

[0067] Figure 15 This is a structural block diagram of another decryption device according to an embodiment of this application;

[0068] Figure 16 This is a structural block diagram of a data leakage identification device according to an embodiment of this application;

[0069] Figure 17 This is a structural block diagram of a text sending device according to an embodiment of this application;

[0070] Figure 18 This is a schematic diagram of the structure of a device provided in an embodiment of this application. Detailed Implementation

[0071] To make the above objects, features, and advantages of the present application more apparent and understandable, the present application will be further described in detail below in conjunction with the accompanying drawings and specific embodiments.

[0072] To enable those skilled in the art to better understand the present application, the following concepts related to the present application are described:

[0073] Unicode: Also known as Universal Character Set, Single Character Set. Unicode aims to cover common artificial characters. Its basic working method is to assign a unique code point to each included character, so that computers can uniformly present and process text (characters). The latest version of the Unicode table has already included more than 140,000 characters. In addition to recording the visual glyphs, encoding methods, and standard character encoding information, Unicode also records character characteristics (such as uppercase and lowercase letters), writing directions, splitting standards, and other characteristic information.

[0074] Unicode table: Records the one-to-one correspondence between characters and their code points. Specifically, in the form of divided areas, it systematically covers the correspondence between computer control characters, various phonetic letters, ideographic characters such as Chinese characters, mathematical symbols, punctuation marks, box elements, geometric shapes, Braille patterns, character structure relationships, special characters, and other included characters and code points.

[0075] Character plane: Used to indicate the encoding space of Unicode. Currently, it contains 17 planes, numbered from 0 to 16. Each plane contains 65,536 code points. The 0th plane is its Basic Multilingual Plane, abbreviated as the Basic Plane, and the code range is U+0000~U+FFFF. The code ranges of the remaining planes are U+X0000~U+XFFFF, where X is the hexadecimal representation corresponding to the plane number. For example, the code range of the 10th plane is U+A0000~U+AFFFF. Most computer characters only cover the Basic Plane.

[0076] Reserved code point: The code points reserved in the Unicode table, which are intended to reserve encoding positions for newly discovered characters in the future. Usually, there is no corresponding character rendering information for reserved code points, and after forced input, they are displayed as a hollow square in the document.

[0077] Character rendering information: Used to express the appearance of each character.

[0078] Character frequency: The frequency of occurrence of a target character within a certain usage range. For example, in general Chinese character texts, the character frequency of the character "的" is about 4.89%, which is the highest among Chinese characters. This means that on average, in every 100 Chinese characters, the character "的" will appear approximately 5 times.

[0079] Cumulative character frequency: The sum of the character frequencies of multiple target character sets within a certain usage range. This value is usually between 0 and 1.

[0080] Embodiments of this application can be applied to the scenario of secure text processing. In this scenario, functions such as text encryption, text decryption, encrypted text transmission, character rendering information modulation, and text leakage identification are implemented to address the information leakage risks in scenarios where computer text is used at the local device level, instant messaging software level, web page level, email level, etc. Embodiments of this application can circle the original code positions corresponding to the protected characters in the unified code table within the usage range, as well as the reused code positions in the unified code table, and establish the association relationship between the original code positions and the reused code positions. Subsequent text encryption, decryption, etc. can be implemented based on this association relationship. For example, in the encryption link, based on the association relationship, the original code positions of the protected characters in the string to be encrypted can be replaced with the reused code positions corresponding to the original code positions; in the decryption link, based on the association relationship, the reused code positions of the protected characters in the encrypted string can be restored to the original code positions, so that the encryption is realized based on the text itself, without the need for an additional key, and the encryption will not change the original document encoding and the word order structure, and can be normally edited. The encrypted text will be displayed in the form of normal plain text in a trusted environment, while in an untrusted environment, it will be presented in the form of garbled characters, achieving the protection of the text content.

[0081] In addition, the biggest drawback of the key encryption method is that users with the permission to view the text content must first decrypt the content through the key, so that they can completely obtain the plain text, and the subsequent plain text can be copied and spread at will. For the encryption method of the embodiments of this application, users with the permission to view the text content in a trusted environment only have the visual perception permission, while the text content is still in a protected associated state, reducing the probability of text content leakage.

[0082] Specifically, referring to Figure 1 , it shows a schematic diagram of a text processing process provided by embodiments of this application, Figure 1 [ It is a schematic diagram of each link in the process of transmitting and displaying text content in the related art. Artificial characters are stored and transmitted by the computer in one or more sets of unified coding methods. Each text character is equivalent to a fixed coding number for the computer. Converting the text content into a coding number is called the digitization of the text content, and vice versa is called the decoding of the text content. For example, taking the text content "的" as an example, based on the unified code table, the code position of "的" can be obtained as U+7684. If the text content "的" needs to be transmitted and stored, its code position can be converted into binary and then carried out. When the text content "的" is physically presented later, its binary result can be restored to the code position U+7684, and then according to the unified code table, the corresponding character is determined to be "的", and then the character rendering information of the character "的" is found in the character rendering information, and after rendering, it can be displayed or printed out, achieving the physical presentation of the text content "的".

[0083] Reference Figure 2 This document illustrates an architecture diagram of an encrypted text processing procedure provided in this application, including an internal environment and an external environment. In the internal environment, the association between the original code points and multiplexed code points required for encryption and decryption operations can be established first. Specifically, this involves determining the characters required for the scope of use and identifying the protection characters to be encrypted. This example uses the four characters in the string "my puppy" as examples of protection characters. Then, multiplexed code points can be determined from the Unicode Conversion Table. Multiplexed code points can include at least one of the following: spare code points and code points corresponding to reusable characters in the Unicode Conversion Table. Spare code points are reserved code points in the Unicode Conversion Table, and their corresponding characters are empty spaces "represented by □". Reusable characters can include low-frequency characters, which are characters with extremely low usage frequency, generally rare characters, such as the characters in this example. It can be used as a low-frequency character. In addition, reusable characters can also include other specified characters, such as characters outside the scope of use, characters in planes other than the basic plane of the Unicode Conversion Table, etc.

[0084] After determining the original code points and multiplexed code points of the protection character in the unified code table, the association between the original code points and the multiplexed code points can be established. That is, when encrypting through the encryption module, the original code points of the protection character can be replaced with multiplexed code points based on this association to complete the encryption of the protection character. Since the encryption is achieved by modulating the character itself, no other encryption carrier (such as a key) is needed. Moreover, this encryption is implemented at the code point level, achieving the purpose of imperceptible encryption.

[0085] When the encrypted protective character is leaked in an untrusted environment, the ciphertext content can be obtained through its corresponding multiplexed code points, thus displaying the protective character as garbled ciphertext, effectively encrypting and protecting the text content. In one implementation, the encrypted protective character can be decrypted by the decryption module to restore its code points to the original code points. In a trusted environment, the decrypted protective character can find the character rendering information of each character through the preset correspondence between code points and character rendering information, thereby displaying and editing it in normal plaintext form, achieving the goal of normal text content use. Since the multiplexed code points are code points that are not used or have a very low probability of being used within the scope of use, the construction of the association between the original code points and the multiplexed code points in the unified code table in this application embodiment will not interfere with the normal use of unencrypted text content, and the entire encryption and decryption scheme is compatible with conventional text operating environments, making the entire scheme widely applicable.

[0086] In another implementation, the embodiments of the present application can also modulate the character rendering information to make it conform to the encryption processing scenario. Specifically, according to the association relationship between the original code positions and the reused code positions in the unified code table, in the correspondence between the preset code positions and the character rendering information, the original character rendering information of the character corresponding to the reused code position is replaced with the character rendering information of the protected character corresponding to the original code position associated with the reused code position, to obtain a target parser. The obtained target parser can be deployed in an internal trusted device. In this case, after the internal trusted device receives the encrypted string encrypted by the encryption module, it can correctly find the character rendering information of the protected character from the target parser according to the reused code position corresponding to the protected character in the encrypted string, and obtain the decrypted text for display. This implementation can quickly deploy the target parser in the internal trusted device, enabling the internal trusted device to directly obtain the encrypted string for decryption and display, eliminating the participation of the decryption module and improving the convenience of ciphertext processing in the internal environment. It should be noted that the target parser can also be deployed in an application program, a file, or a page in the internal environment. The embodiments of the present application do not limit this.

[0087] Referring to Figure 2 the example of , the internal environment can determine the protected characters within the usage range, such as "your little dog", and determine the reused code positions, such as the code positions 3400 of rare and seldom-used characters with low frequency, and the alternate code position 9FEB. By associating the original code positions of the protected characters with the reused code positions ( Figure 2 only showing the association of the original code position 7554 of "I" to the corresponding reused code position 3400; the original code position 7684 of "of" is associated with the alternate code position 9FEB); then, in the internal environment, the character rendering information of rare and seldom-used characters with low frequency in the correspondence between the preset code positions and the character rendering information can also be replaced with the character rendering information of "of", the character rendering information of the alternate code position 9FEB is replaced with the character rendering information of "I", etc., to replace the character rendering information of the reused code positions and obtain a target parser.

[0088] Further, after extracting the plaintext string "my little dog" to be encrypted from the text content to be encrypted, it can be encrypted by the encryption module. For example, the code position of the character "of" is changed to The corresponding multiplexed code position 3400 changes the code position of the character "我" to the multiplexed code position 9FEB, etc., so as to obtain an encrypted string. In one case, when an externally trusted device in the external environment needs to obtain the encrypted string for display, the internal environment can decrypt the encrypted string through a decryption module. For example, the code positions of the characters "我" and "的" are restored to the original code positions, and the decrypted string is obtained and sent to the externally trusted device. According to the corresponding relationship between the built-in code positions and the character rendering information, the externally trusted device can obtain the correct character rendering information for each character and render and display it. In another case, the internal environment can also deploy the modulated target parser in the internal trusted environment. The internal trusted environment can directly obtain the encrypted string and correctly find the character rendering information of the character from the target parser according to the multiplexed code position corresponding to the protected character in the encrypted string, and obtain the decrypted text for display. In the case where the encrypted string is leaked to an external untrusted device, since the encryption module realizes the confusion of the code positions of the protected characters, the external untrusted device can only decrypt and obtain a garbled ciphertext and cannot know the correct text content, which plays a role in protecting the text content.

[0089] Further, referring to Figure 3 , which shows an architecture diagram of text leakage recognition provided by an embodiment of the present application. Since the sending device needs to be relayed through a gateway when transmitting data to the receiving device, the embodiment of the present application can deploy an identification module in the gateway to identify whether the transmission code stream belongs to encrypted text content or normal plaintext content based on the association relationship between the original code position of the preset protected character in the unified code table and the multiplexed code position in the unified code table. The specific logic is as follows: Since the code positions of the characters in the encrypted text content are confused as multiplexed code positions, and the multiplexed code positions are code positions that hardly appear within the usage range, the gateway can intercept the string to be analyzed in the transmission code stream and identify the occurrence frequency of the multiplexed code positions therein. If the occurrence frequency is too large (such as greater than a certain threshold), it is considered that the string to be analyzed is encrypted text content. If the sending device does not have the permission to send encrypted content, the identification module can determine that there is a risk of encrypted content leakage, and then block the sending and take preventive measures; in addition, if the occurrence frequency of the multiplexed code positions in the string to be analyzed is too small (such as 0 or less than a certain threshold), it is considered that the analyzed string is normal plaintext content, and then it is sent normally.

[0090] For Figure 2 the architecture, several specific scenarios that can be realized by the embodiment of the present application are as follows:

[0091] In a usage scenario of a text document, referring to Figure 4This document illustrates an interface diagram of a text document usage scenario provided by an embodiment of this application. It includes an electronic device, a server, an external trusted device, and an internal trusted device. The strings involved in encryption processing can include characters extracted from the text document. The text document, serving as the text carrier, can be document software such as Notepad or presentation software that carries text content. The electronic device can send the plaintext text document to be encrypted to the server. The server encrypts the text document using an encryption module to obtain an encrypted document. The server can then determine whether the receiving device is an internal or external trusted device. If it is an external trusted device, the server decrypts the encrypted document using a decryption module to obtain a decrypted text document, which is then sent to the external trusted device for normal plaintext content display. If it is an internal trusted device, the internal trusted device has a built-in modulated target parser. The server can directly send the encrypted document to the internal trusted device, which can then display the normal plaintext content based on the target parser. When the encrypted document is leaked to an untrusted device, the encrypted document will be displayed as garbled text, thus protecting the document content. It should be noted that the encryption module can be deployed on the server or on the electronic device. When the encryption module is deployed on the electronic device, the electronic device can send the plaintext content to be encrypted to the server through the encryption module. The server encrypts the text document through the encryption module to obtain the encrypted document and sends the encrypted document to the server. In addition, external trusted devices can also actively request the server to obtain the decrypted text document decrypted by the decryption module. This application embodiment does not limit this.

[0092] In another instant messaging text encryption scenario, refer to Figure 5This document illustrates an interface diagram of a text encryption scenario for instant messaging provided in an embodiment of this application. The interface includes an electronic device, a server, an external trusted device, and an internal trusted device. The string involved in the encryption process can include characters extracted from instant messaging software, which may include chat software, office communication software, etc. The electronic device can acquire the text content entered by user A in the instant messaging software and, in response to the triggering of the encrypted send button, send the plaintext communication content to be encrypted to the server. The server is then notified to encrypt the communication content using an encryption module to obtain encrypted communication content. The server can then determine whether the device receiving the communication content is an internal trusted device or an external trusted device. If it is an external trusted device, the encrypted communication content is decrypted using a decryption module to obtain decrypted communication content, which is then sent to the external trusted device for normal plaintext communication content display. If it is an internal trusted device, the internal trusted device has a built-in modulated target parser, and the server can directly send the encrypted communication content to the internal trusted device. The internal trusted device can then display the normal plaintext communication content based on the target parser. When encrypted communication content is leaked to an untrusted device, the encrypted communication content will be displayed as garbled text, thus protecting the communication content. It should be noted that the encryption module can be deployed on the server or on the electronic device. When the encryption module is deployed on the electronic device, the electronic device can send the plaintext communication content to be encrypted to the server through the encryption module. The server then encrypts the communication content using the encryption module to obtain the encrypted communication content and sends it back to the server. Alternatively, external trusted devices can also proactively request the decrypted communication content from the server, which is not limited in this embodiment.

[0093] In another scenario involving text encryption in emails, refer to Figure 6This document illustrates an interface diagram of an email text encryption scenario provided by an embodiment of this application. The interface includes an electronic device, a server, an external trusted device, and an internal trusted device. The encrypted string can include characters extracted from the email software. The electronic device can obtain the email body content entered by the user in the email software and, in response to triggering the encrypted send button, sends the plaintext email body content to be encrypted to the server. The server is then notified to encrypt the email body content using an encryption module to obtain the encrypted email. The server can then determine whether the receiving device is an internal or external trusted device. If it is an external trusted device, the encrypted email is decrypted using a decryption module to obtain the decrypted plaintext email, which is then sent to the external trusted device for normal plaintext email content display. If it is an internal trusted device, the internal trusted device has a built-in modulated target parser, and the server can directly send the encrypted email to the internal trusted device, which can then display the normal plaintext email content based on the target parser. When the encrypted email is leaked to an untrusted device, the email content will be displayed as garbled text, thus protecting the email content. It should be noted that the encryption module can be deployed on either the server or the electronic device. When deployed on an electronic device, the device can send the email content to be encrypted to the server via the encryption module. The server then encrypts the communication content using the encryption module to obtain the encrypted email and sends it back to the server. Alternatively, external trusted devices can also proactively request the decrypted email from the server; this embodiment does not limit this.

[0094] In another scenario involving text encryption on a webpage, refer to Figure 7This document illustrates an interface diagram of a webpage text encryption scenario provided by an embodiment of this application. The interface includes an electronic device, a server, an external trusted device, and an internal trusted device. The encrypted string can include characters extracted from the webpage. The server can obtain the plaintext text content to be encrypted from the webpage and encrypt it using an encryption module to obtain an encrypted webpage. The server can then determine whether the device displaying the webpage is an internal or external trusted device. If it is an external trusted device, the encrypted webpage is decrypted using a decryption module to obtain the decrypted plaintext webpage, which is then sent to the external trusted device for normal plaintext webpage content display. If it is an internal trusted device, the internal trusted device has a built-in modulated target parser, and the server can directly send the encrypted webpage to the internal trusted device, which can then display the normal plaintext webpage content based on the target parser. When the encrypted webpage is leaked to an untrusted device, the webpage content will be displayed as garbled text, thus protecting the webpage content. It should be noted that external trusted devices can also actively request the decrypted webpage from the server, which is not limited in this embodiment.

[0095] It should be noted that the process of obtaining text content, Unicode table, character rendering information, and other information, signals, or data used in the embodiments of this application is carried out in compliance with the relevant data protection laws and policies of the country where the location is located, and with the authorization granted by the owner of the corresponding device.

[0096] In this embodiment, by establishing a pre-defined association between the original code position of the protection character in the Unicode Consortium and the multiplexed code position in the Unicode Consortium, the original code position of the protection character in the string to be encrypted is replaced with the multiplexed code position corresponding to the original code position, thereby achieving text encryption. This ensures that the encryption technology is based on the text itself, and the encryption does not change the original document encoding and text structure, and can be edited normally. The encrypted text will be displayed in a normal plaintext form in a trusted environment, while it will be presented in a garbled form in an untrusted environment. That is, even if the encrypted text is leaked, it can still protect the text content.

[0097] Reference Figure 8 It illustrates a flowchart of the steps of an encryption method provided in an embodiment of this application, including:

[0098] Step 101: Obtain the string to be encrypted.

[0099] In the embodiments of the present application, the original code positions corresponding to the protected characters within the usage range in the unified code table, as well as the reused code positions in the unified code table, can be determined first, and the association relationship between the original code positions and the reused code positions can be established. Subsequent text encryption, decryption, etc. can be implemented based on the association relationship between the original code positions of the protected characters in the unified code table and the reused code positions in the unified code table. Herein, the usage range specifically includes the character range determined according to prior research, and the characters within this character range can meet subsequent usage requirements. The protected characters are the characters within the usage range that have encryption protection requirements.

[0100] In this step, the string to be encrypted can be characters extracted from the text carriers of the computer. The text carriers include but are not limited to text documents, web pages, application programs, emails, etc.

[0101] Step 102: Determine the protected characters in the string to be encrypted according to the association relationship between the original code positions of the preset protected characters in the unified code table and the reused code positions in the unified code table.

[0102] In the embodiments of the present application, since the association relationship between the original code positions and the reused code positions of the protected characters is provided, the protected characters in the string to be encrypted can be screened out through the protected characters provided by the association relationship.

[0103] Step 103: According to the association relationship, replace the original code positions of the protected characters with the target reused code positions corresponding to the original code positions to obtain the encrypted string.

[0104] Specifically, the encryption process can be realized by replacing the original code positions of the protected characters in the string to be encrypted with the reused code positions corresponding to the original code positions based on the association relationship between the original code positions and the reused code positions. For example, after extracting the clear text string "my little dog" to be encrypted from the text content to be encrypted, it can be encrypted through the encryption module. For example, the code position of the character "de" can be changed to The corresponding reused code position 3400, and the code position of the character "wo" can be changed to the reused code position 9FEB, etc., so as to obtain the encrypted string. In the case where the encrypted string is leaked to an external untrusted device, since the encryption module realizes the confusion of the code positions of the protected characters, the external untrusted device can only decrypt and obtain the garbled ciphertext and cannot know the correct text content, which plays a role in protecting the text content.

[0105] In the embodiments of the present application, the encryption is realized based on the text itself, without the need for an additional key, and the encryption does not change the original document encoding and the word order structure, and can be normally edited. The encrypted text will be displayed in the form of normal plain text in a trusted environment, while it will be presented in the form of garbled characters in an untrusted environment, achieving the protection of the text content.

[0106] It should be noted that if a low-frequency character appears in the document containing the string to be encrypted, and the code point of the low-frequency character is used as a reused code point in the association relationship, then for this low-probability event, a reserved marker can be added to the low-frequency character. During subsequent decryption, based on the reserved marker, the character's code point and the character rendering information of the low-frequency character in the character rendering information can be set to: character rendering information that is not in an association relationship and has a similar glyph to the low-frequency character. For example, for... Figure 2 For example, suppose the document actually contains... For the low-frequency character (SimSun), you can choose KaiTi. Character rendering information as low-frequency characters The character rendering information.

[0107] Optionally, the method also includes:

[0108] Step 104: Obtain the protection character, reusable character, and Unicode table, wherein the Unicode table includes the code point corresponding to the character and the spare code point.

[0109] Optional, reusable characters include: characters whose frequency is less than or equal to the second threshold.

[0110] In this embodiment, the protected characters can be determined from a predetermined scope of text usage. Preferably, the protected characters are determined as follows: a set of protected characters can be determined from the scope of text usage, and the cumulative word frequency Tu of the protected character set is calculated. The cumulative word frequency Tu is obtained by summing the word frequencies of each character in the text set, and the value range of the cumulative word frequency Tu is (0, 1). Preferably, the range of the cumulative word frequency Tu is (0.999, 1). Furthermore, if the encryption method is only used in a small scope, the set of protected characters can be determined according to actual needs; this embodiment does not limit this.

[0111] Step 105: Obtain the multiplexed code points in the Unicode table.

[0112] Furthermore, in addition to the spare code positions in the unified code table, the reused code positions can also include the code positions corresponding to reusable characters in the unified code table. The reusable characters are preferably low-frequency characters, i.e., characters whose frequency is less than or equal to a second threshold (the second threshold is a value less than one in ten thousand). This ensures that the reused code positions are those that will not be used or will be used with extremely low probability within the scope of use. Therefore, the adjustment of code positions in the unified code table in this application embodiment will not interfere with the normal use of unencrypted text content, and the entire encryption and decryption scheme is compatible with conventional text operating environments, giving the entire scheme a wide range of applicability. Additionally, if the encryption method is only used in a small scope, the reusable characters can also be a character set composed of characters selected according to actual needs, such as a set of characters that will not be used in a small scope.

[0113] It should be noted that in the basic plane of the Unicode table, there are currently a total of 60,000 code positions, including 6,000 spare code positions. And there are approximately 10,000 low-frequency characters in the basic plane, so 16,000 reusable code positions can be obtained, which already meet the daily basic encryption requirements. If more reusable code positions are required, more spare code positions and low-frequency character code positions can be obtained from other planes of the Unicode table for use. Before determining the reusable code positions from other planes of the Unicode table, it is necessary to first investigate and determine whether the current operating environment supports other planes of the Unicode table. If it supports, the reusable code positions can be determined from other planes of the Unicode table. If it does not support, only the reusable code positions are determined from the basic plane of the Unicode table.

[0114] Furthermore, after determining the reusable code positions and protected characters, a code position compatibility test can be carried out. Specifically, the original code position of the protected character is replaced with the reusable code position, and the character rendering information corresponding to the reusable code position in the preset correspondence between the code position and the character rendering information is replaced with the character rendering information of the corresponding original code position. Then, the protected character is rendered and displayed in the text carrier. If the protected character can be displayed in the form of normal plain text, the test is successful and subsequent encryption and decryption operations can be carried out; if the protected character is displayed in the form of garbled ciphertext, the test fails, and it is determined that the current text carrier does not support the reusable code position, and the reusable code position with specific garbled display can be replaced.

[0115] Step 106: Establish an association relationship between the original code position corresponding to the protected character in the Unicode table and the reusable code position.

[0116] Through Figure 2 the provided example to specifically describe this step. Assume that the internal environment can determine the protected characters within the usage range, such as "your little dog", and determine the reusable code positions, such as the code positions of low-frequency rare characters 3400 and the spare code position 9FEB. By associating the original code position of the protected character with the reusable code position ( Figure 2 only showing the original code position 7554 of "I" associated with the corresponding reusable code position 3400; the original code position 7684 of "的" associated with the spare code position 9FEB).

[0117] Optionally, step 106 may specifically include:

[0118] Sub-step 1061: Obtain the high-frequency characters in the protected character, and the character frequency of the high-frequency characters is greater than or equal to the first threshold.

[0119] Sub-step 1062: Establish an association relationship between the original code position and the reusable code position; the original code position and the reusable code position correspond one by one.

[0120] Sub-step 1063: Establish an association relationship between the target original code positions corresponding to the high-frequency characters and other reusable code positions that have not established an association relationship.

[0121] Regarding the above sub-steps 1061-1063, in practical applications, during the use of text, the character frequency of characters will exhibit a regular characteristic. For example, for Chinese characters, the character frequency of the character "的" is the highest, approximately 4.89%, and for other commonly used Chinese characters, their respective character frequencies will also show a regular distribution. Therefore, when the eavesdropper has a sufficient number of encrypted text samples, the plaintext corresponding to the encrypted character can be inferred through the character frequency. For example, in the Chinese character environment, it is highly probable to determine that the plaintext corresponding to the character with the highest frequency in a piece of encrypted text is "的". This enables the eavesdropper to crack the plaintext through character frequency statistics.

[0122] In order to solve the above problems, through the analysis of the logic of character encryption based on the association relationship between the original code positions of protected characters in the unified code table and the reusable code positions in the unified code table, it can be concluded that for a single protected character, the more the number of reusable code positions associated with its original code position, the lower the probability of the protected character being cracked.

[0123] Specifically, based on the above analysis conclusion, the embodiments of the present application can first establish an association relationship between the original code positions of protected characters and reusable code positions; the original code positions and the reusable code positions correspond one by one, and the association relationship can be a random association relationship. The purpose of this operation is to ensure that each original code position of the protected character is uniquely associated with the corresponding reusable code position, thereby achieving the most basic encryption protection for the protected character. Further, after establishing the association relationship, for the high-frequency characters with a higher character frequency among the protected characters, an association relationship can be established between the target original code positions corresponding to the high-frequency characters and other reusable code positions that have not established an association relationship, that is, establish an association relationship between the original code positions of the high-frequency characters and a larger number of reusable code positions, so that the original code positions of the high-frequency characters can be associated with multiple different reusable code positions, increasing the probability of the eavesdropper cracking the plaintext content corresponding to the high-frequency characters through a large number of samples, thereby further improving the encryption effect.

[0124] Optionally, the character frequency of the high-frequency characters is in a direct proportional relationship with the number of reusable code positions associated with the high-frequency characters.

[0125] In the embodiments of the present application, since the higher the character frequency of a high-frequency character, the lower the difficulty of cracking it, more association relationships can be created for high-frequency characters with higher character frequencies, thereby increasing the cracking difficulty of high-frequency characters with higher character frequencies. For example, assume there are three protected characters: "的" (character frequency is 5%), "你" (character frequency is 4.5%), and "密" (character frequency is 0.2%). If the first threshold is 4%, then the protected characters "的" and "你" are high-frequency characters. Therefore, an association relationship between the protected character "密" and 1 multiplexed code bit can be created, an association relationship between the protected character "的" and 3 different multiplexed code bits can be created, and an association relationship between the protected character "你" and 2 multiplexed code bits can be created. Additionally, the number of association relationships created for high-frequency characters can be flexibly determined according to the total number of multiplexed code bits and the character frequency distribution of high-frequency characters. The embodiments of the present application do not limit this.

[0126] It should be noted that during the process of creating association relationships, the ideal result is to make the characters in the ciphertext evenly distributed. However, in reality, it is often difficult to achieve the ideal state due to issues such as computational complexity and the number of multiplexed code bits. In actual operation, it is only necessary to create association relationships for approximately the top 10% of high-frequency characters.

[0127] Optionally, after step 105, it may further include:

[0128] Step 107: Obtain the first number of the multiplexed code bits and the second number of the protected characters.

[0129] Step 108: If the first number is greater than the second number, execute step 106.

[0130] Step 109: If the first number is less than the second number, reduce the number of protected characters or increase the number of reusable characters.

[0131] In the embodiments of the present application, for steps 107 - 109, the first number of multiplexed code bits and the second number of protected characters can be obtained. Preferably, the encryption logic needs to be implemented when the first number is greater than the second number, that is, the number of multiplexed code bits is greater than the number of protected characters. When the first number is less than the second number, the cumulative character frequency Tu of the protected character set can be controlled to decrease to reduce the number of protected characters, or the second threshold for determining low-frequency characters can be controlled to increase to increase the number of reusable characters, so that the first number tends to be greater than the second number.

[0132] Optionally, the method may further include:

[0133] Step 110: If the product of the second quantity and 2 is less than the first quantity, establish an association relationship between the original code bit and the multiple multiplexed code bits.

[0134] In this embodiment of the application, if the product of the second quantity and 2 is less than the first quantity, it can be considered that the number of multiplexed code points is sufficient. At this time, an association relationship can be established between the original code point of each protected character and multiple multiplexed code points, thereby increasing the difficulty of cracking each protected character and thus improving the overall encryption effect.

[0135] In summary, in this embodiment, by establishing a pre-defined association between the original code position of the protection character in the Unicode Consortium and the multiplexed code position in the Unicode Consortium, the original code position of the protection character in the string to be encrypted is replaced with the multiplexed code position corresponding to the original code position, thereby achieving text encryption. This ensures that the encryption technology is based on the text itself, and the encryption does not change the original document encoding and text structure, and can be edited normally. The encrypted text will be displayed in a normal plaintext form in a trusted environment, while it will be presented in a garbled form in an untrusted environment. That is, even if the encrypted text is leaked, it can still protect the text content.

[0136] Reference Figure 9 It illustrates a flowchart of the steps of a decryption method provided in an embodiment of this application, including:

[0137] Step 201: Obtain the encrypted string.

[0138] Wherein, the original code position of the protected character in the encrypted string is replaced with a multiplexed code position that is associated with the original code position; the multiplexed code position includes at least one of the following: a spare code position in the Unicode Consortium and a code position corresponding to the reusable character in the Unicode Consortium.

[0139] In this step, the description of the encrypted string can be found in step 101 above, and will not be repeated here. Additionally, there may be a correspondence between character code points and character rendering information, which is used to render the characters to be displayed.

[0140] Step 202: Based on the preset association between the original code position of the protection character in the Unicode Conversion Table and the multiplexed code position in the Unicode Conversion Table, replace the multiplexed code position of the protection character in the encrypted string with the corresponding original code position to obtain the decrypted string.

[0141] Step 203: Based on the preset correspondence between code positions and character rendering information, obtain the character rendering information corresponding to the original code positions of the protected characters in the decrypted string, as well as the character rendering information corresponding to the code positions of other characters in the decrypted string, to obtain the decrypted text and display it.

[0142] In the embodiments of the present application, the encrypted protected characters can restore their code positions to the original code positions through the decryption of the association relationship between the original code positions and the multiplexed code positions. In a trusted environment, the decrypted protected characters can obtain the character rendering information corresponding to the original code positions of the protected characters in the decryption string, as well as the character rendering information corresponding to the code positions of other characters in the decryption string, according to the correspondence between the preset code positions and the character rendering information, and obtain the decrypted text for display, so that the protected characters are displayed and edited in the normal plain text form, achieving the purpose of normal use of the text content.

[0143] For example, referring to Figure 2 the example in, after extracting the plain text string "my little dog" to be encrypted from the text content to be encrypted, it can be encrypted by an encryption module. For example, the code position of the character "de" is changed to the corresponding multiplexed code position 3400, and the code position of the character "wo" is changed to the multiplexed code position 9FEB, etc., so as to obtain an encrypted string. The decryption module can restore the code positions of the protected characters to the original code positions. For example, the code position of the character "de" is changed from the multiplexed code position 3400 to 7684, and the code position of the character "wo" is changed from the multiplexed code position 9FEB, etc., to 7554. In the correspondence between the preset code positions and the character rendering information, the code position 7684 corresponds to the character rendering information of the character "de", and the code position 7554 corresponds to the character rendering information of the character "wo". Therefore, the plain text "my little dog" can be determined for display from the correspondence between the preset code positions and the character rendering information.

[0144] To sum up, in the embodiments of the present application, through the association relationship between the original code positions and the multiplexed code positions of the protected characters, the original code positions of the protected characters in the string to be encrypted are replaced with the corresponding multiplexed code positions to achieve text encryption, so that the encryption is realized based on the text itself, without the need for an additional key, reducing the complexity of the encryption process, and the encryption does not change the original document encoding and the word order structure, and can be normally edited. The encrypted text will be displayed in the normal plain text form in a trusted environment, and will be presented in a garbled form in an untrusted environment. Even if the encrypted text is leaked, it can play a role in protecting the text content. The decrypted protected characters can be displayed and edited in the normal plain text form in a trusted environment, achieving the purpose of normal use of the text content.

[0145] Referring to Figure 10 , which shows a flowchart of the steps of a decryption method provided by the embodiments of the present application, including:

[0146] Step 301, obtain an encrypted string and a target parser.

[0147] In this process, the original code points of the protected characters in the encrypted string are replaced with multiplexed code points corresponding to the original code points; the target parser is obtained by replacing the original character rendering information corresponding to the multiplexed code points in the preset correspondence between code points and character rendering information with the character rendering information corresponding to the original code points that are associated with the multiplexed code points; the multiplexed code points include at least one of the following: spare code points in the unified code table and code points corresponding to reusable characters in the unified code table;

[0148] In this step, the decryption method can be applied to Figure 2 The description of the encrypted string for the internal trusted device shown can be found in step 101 above, and will not be repeated here. It should be noted that for the target parser deployed in the internal trusted device, permission management operations can be performed on the target parser, i.e., prohibiting users from granting permissions to copy or edit the target parser, thereby protecting the target parser and preventing it from leaking from the internal trusted device to an untrusted environment.

[0149] Step 302: Based on the code position of the characters in the encrypted string, obtain the corresponding character rendering information from the target parser, obtain the decrypted text, and display it.

[0150] In another decryption implementation of this application embodiment, the character rendering information can be modulated to conform to the encryption processing scenario. Specifically, based on the association between the original code point and the multiplexed code point, the original character rendering information corresponding to the multiplexed code point in the preset correspondence between code points and character rendering information can be replaced with the character rendering information corresponding to the original code point that is associated with the multiplexed code point to obtain the target parser.

[0151] The obtained target parser can be deployed in an internal trusted device. In this case, after receiving the encrypted string encrypted by the encryption module, the internal trusted device can correctly find the character rendering information of the protected character based on the multiplexing code points corresponding to the protected character in the encrypted string, and obtain the decrypted text for display.

[0152] By rapidly deploying the target parser on internal trusted devices, these devices can directly obtain encrypted strings for decryption and display, improving the convenience of ciphertext processing within the internal environment. It should be noted that the target parser can also be deployed in applications, files, or pages within the internal environment; this embodiment does not limit this deployment.

[0153] In summary, this embodiment of the application achieves text encryption by replacing the original code points of the protected characters in the string to be encrypted with the corresponding multiplexed code points through the association between the original code points and the multiplexed code points. This ensures that the encryption is based on the text itself, eliminating the need for an additional key, reducing the complexity of the encryption process. Furthermore, encryption does not alter the original document encoding or text structure, and the text can still be edited normally. The encrypted text will be displayed in plaintext in a trusted environment, but will appear as gibberish in an untrusted environment. Even if the encrypted text is leaked, it still protects the text content. The decrypted protected characters can be displayed and edited in plaintext in a trusted environment, achieving the goal of normal use of the text content.

[0154] Reference Figure 11 The diagram illustrates a flowchart of an embodiment of a leakage identification method according to this application. It includes:

[0155] Step 401: Obtain the string to be analyzed and the multiplexed code points.

[0156] The multiplexing code points include at least one of the following: spare code points in the Unicode Consortium and code points corresponding to reusable characters in the Unicode Consortium.

[0157] Step 402: If it is determined that the characters of the string to be analyzed use the multiplexed code points, it is determined that the string to be analyzed has a risk of leakage.

[0158] In this embodiment of the application, for steps 401-402, refer to Figure 3 Since the sending device needs to relay data through a gateway during the transmission process to the receiving device, this embodiment of the application can deploy an identification module in the gateway to identify whether the transmitted code stream belongs to encrypted text content or normal plaintext content based on the association relationship between the original code points and the multiplexed code points. The specific logic is as follows: Since the code points of characters in the encrypted text content are confused with multiplexed code points, and the multiplexed code points are code points that are almost never seen within the scope of use, the gateway can intercept the string to be analyzed in the transmitted code stream. If it is determined that the characters in the string to be analyzed use the multiplexed code points provided in the association relationship between the original code points and the multiplexed code points, then the string to be analyzed is considered to be encrypted text content. If the device does not have the permission to send encrypted content, the identification module can determine that there is a risk of encrypted content leakage, and then block the transmission and take preventive measures.

[0159] Optionally, the method may also include:

[0160] Step 403: Obtain the target code points corresponding to the characters of the string to be analyzed.

[0161] Step 404: If the number of multiplexed code points contained in the target code point is greater than or equal to the third threshold, or the frequency of occurrence of multiplexed code points contained in the target code point is greater than or equal to the fourth threshold, it is determined that the characters of the string to be analyzed use the multiplexed code points, and that the string to be analyzed has a risk of leakage.

[0162] In this embodiment of the application, for steps 403-404, determining whether the characters of the string to be analyzed use the multiplexed code points provided in the association relationship between the original code points and the multiplexed code points can be achieved by determining whether the number of multiplexed code points contained in the target code points corresponding to the characters of the string to be analyzed is greater than or equal to a third threshold, or whether the frequency of occurrence of multiplexed code points contained in the target code points is greater than or equal to a fourth threshold. If the number of multiplexed code points contained in the target code points is greater than or equal to the third threshold, or the frequency of occurrence of multiplexed code points contained in the target code points is greater than or equal to the fourth threshold, it can be determined that the characters of the string to be analyzed use multiplexed code points, and that the string to be analyzed has a risk of leakage. Otherwise, it is considered that the frequency of occurrence of multiplexed code points in the string to be analyzed is too low, and the string to be analyzed is determined to be normal plaintext content.

[0163] Optionally, the method may also include:

[0164] Step 405: If it is determined that the protected characters in the string to be analyzed use the original code points and multiplexed code points, it is determined that an editing operation has been performed on the string to be analyzed.

[0165] In this embodiment of the application, since the text content encrypted by the encryption method of this application can be edited and used normally, there is a need to identify whether the encrypted text has been edited by an external environment for the purpose of protecting the encrypted text.

[0166] Specifically, since the external environment does not use the association between original code points and multiplexed code points to perform code point multiplexing encryption on the string, for the string to be analyzed, if it is determined that the protection characters in it use the original code points and multiplexed code points provided in the association between original code points and multiplexed code points, it can be determined that the protection characters with original code points are the edited and inserted content, and the protection characters with multiplexed code points are the original text content. Thus, it can be determined that the external environment has performed an editing operation on the string to be analyzed, that is, the secondary editing operation of the encrypted text by the external environment has been identified.

[0167] In summary, this embodiment of the application achieves text encryption by replacing the original code points of the protected characters in the string to be encrypted with the corresponding multiplexed code points through the association between the original code points and the multiplexed code points. This ensures that the encryption is based on the text itself, eliminating the need for an additional key, reducing the complexity of the encryption process. Furthermore, encryption does not alter the original document encoding or text structure, and the text can still be edited normally. The encrypted text will be displayed in plaintext in a trusted environment, but will appear as gibberish in an untrusted environment. Even if the encrypted text is leaked, it still protects the text content. The decrypted protected characters can be displayed and edited in plaintext in a trusted environment, achieving the goal of normal use of the text content.

[0168] Reference Figure 12 The diagram illustrates a flowchart of an embodiment of a text sending method according to this application. It includes:

[0169] Step 501: Obtain the encrypted string and the device identifier of the target device for receiving the encrypted string.

[0170] In this process, the original code points of the protected characters in the encrypted string are replaced with multiplexed code points that are associated with the original code points; the multiplexed code points include at least one of the following: spare code points in the Unicode Consortium and code points corresponding to the reusable characters in the Unicode Consortium.

[0171] Step 502: If the target device is determined to be an internally trusted device based on the device identifier, the encrypted string is sent to the target device.

[0172] The internal authorization device is a device with a built-in target parser. The target parser is obtained by replacing the original character rendering information corresponding to the multiplexed code position in the preset correspondence between code position and character rendering information with the character rendering information corresponding to the original code position that is associated with the multiplexed code position.

[0173] Step 503: If the target device is determined to be an external trusted device based on the device identifier, the multiplexed code position of the protection character in the encrypted string is replaced with the corresponding original code position according to the association relationship between the original code position of the protection character in the Unicode Consortium and the multiplexed code position in the Unicode Consortium, thereby obtaining the decrypted string and sending it to the target device.

[0174] For a detailed explanation of steps 501-503 in this embodiment, please refer to [link / reference needed]. Figure 4-7 The relevant descriptions of the embodiments will not be repeated here.

[0175] In summary, this embodiment of the application achieves text encryption by replacing the original code points of the protected characters in the string to be encrypted with the corresponding multiplexed code points through the association between the original code points and the multiplexed code points. This ensures that the encryption is based on the text itself, eliminating the need for an additional key, reducing the complexity of the encryption process. Furthermore, encryption does not alter the original document encoding or text structure, and the text can still be edited normally. The encrypted text will be displayed in plaintext in a trusted environment, but will appear as gibberish in an untrusted environment. Even if the encrypted text is leaked, it still protects the text content. The decrypted protected characters can be displayed and edited in plaintext in a trusted environment, achieving the goal of normal use of the text content.

[0176] Reference Figure 13 It shows a block diagram of an encryption device provided in an embodiment of this application, comprising:

[0177] The first acquisition module 601 is used to acquire the string to be encrypted;

[0178] The first determining module 602 is used to determine the protection character in the string to be encrypted based on the association relationship between the original code position of the protection character in the Unicode Consortium and the multiplexed code position in the Unicode Consortium; the multiplexed code position includes at least one of the spare code position in the Unicode Consortium and the code position corresponding to the reusable character in the Unicode Consortium.

[0179] The encryption module 603 is used to replace the original code position of the protection character with the target multiplexed code position corresponding to the original code position according to the association relationship, so as to obtain an encrypted string.

[0180] Optional, also includes:

[0181] The sixth acquisition module is used to acquire protected characters, reusable characters, and a unified code table, wherein the unified code table includes the code position corresponding to the character and the spare code position;

[0182] The seventh acquisition module is used to acquire the multiplexed code points in the unified code table;

[0183] A module is established to establish an association between the original code position corresponding to the protected character in the Unicode table and the multiplexed code position.

[0184] Optionally, the establishment module includes:

[0185] The acquisition submodule is used to acquire high-frequency characters in the protected characters, wherein the frequency of the high-frequency characters is greater than or equal to a first threshold.

[0186] The first establishment submodule is used to establish the association between the original code points and the multiplexed code points; the original code points and the multiplexed code points correspond one-to-one.

[0187] The second establishment submodule is used to establish the association between the target original code position corresponding to the high-frequency character and other multiplexed code positions that have not been associated.

[0188] Optionally, the frequency of the high-frequency character and the number of multiplexed code points associated with the high-frequency character are directly proportional.

[0189] Optionally, the reusable characters include characters whose frequency is less than or equal to a second threshold.

[0190] Optional, also includes:

[0191] The eighth acquisition module is used to acquire a first number of multiplexed code points and a second number of protection characters;

[0192] The first execution module is configured to execute the step of establishing an association between the original code position of the protection character in the unified code table and the multiplexed code position when the first quantity is greater than the second quantity;

[0193] The second execution module is used to reduce the number of the protection characters or increase the number of the reusable characters when the first number is less than the second number.

[0194] Optional, also includes:

[0195] An additional module is added to establish an association between the original code bits and multiple multiplexed code bits when the product of the second quantity and 2 is less than the first quantity.

[0196] In summary, this embodiment of the application achieves text encryption by replacing the original code points of the protected characters in the string to be encrypted with the corresponding multiplexed code points through the association between the original code points and the multiplexed code points. This ensures that the encryption is based on the text itself, eliminating the need for an additional key, reducing the complexity of the encryption process. Furthermore, encryption does not alter the original document encoding or text structure, and the text can still be edited normally. The encrypted text will be displayed in plaintext in a trusted environment, but will appear as gibberish in an untrusted environment. Even if the encrypted text is leaked, it still protects the text content. The decrypted protected characters can be displayed and edited in plaintext in a trusted environment, achieving the goal of normal use of the text content.

[0197] Reference Figure 14 It shows a block diagram of a decryption apparatus provided in an embodiment of this application, comprising:

[0198] The second acquisition module 701 is used to acquire an encrypted string; the original code position of the protected character in the encrypted string is replaced with a multiplexed code position that is associated with the original code position; the multiplexed code position includes at least one of the following: a spare code position in the Unicode Consortium and a code position corresponding to a reusable character in the Unicode Consortium;

[0199] The second determining module 702 is used to replace the multiplexed code position of the protection character in the encrypted string with the corresponding original code position according to the preset association relationship between the original code position of the protection character in the Unicode table and the multiplexed code position in the Unicode table, so as to obtain the decrypted string;

[0200] The first decryption module 703 is used to obtain the character rendering information corresponding to the original code position of the protected character in the decryption string, and the character rendering information corresponding to the code position of other characters in the decryption string, according to the preset correspondence between code position and character rendering information, to obtain the decrypted text and display it.

[0201] In summary, this embodiment of the application achieves text encryption by replacing the original code points of the protected characters in the string to be encrypted with the corresponding multiplexed code points through the association between the original code points and the multiplexed code points. This ensures that the encryption is based on the text itself, eliminating the need for an additional key, reducing the complexity of the encryption process. Furthermore, encryption does not alter the original document encoding or text structure, and the text can still be edited normally. The encrypted text will be displayed in plaintext in a trusted environment, but will appear as gibberish in an untrusted environment. Even if the encrypted text is leaked, it still protects the text content. The decrypted protected characters can be displayed and edited in plaintext in a trusted environment, achieving the goal of normal use of the text content.

[0202] Reference Figure 15 It shows a block diagram of a decryption apparatus provided in an embodiment of this application, comprising:

[0203] The third acquisition module 801 is used to acquire an encrypted string and a target parser; the original code points of the protected characters in the encrypted string are replaced with multiplexed code points corresponding to the original code points; the target parser is obtained by replacing the original character rendering information corresponding to the multiplexed code points in the preset correspondence between code points and character rendering information with the character rendering information corresponding to the original code points that are associated with the multiplexed code points; the multiplexed code points include at least one of the following: spare code points in the unified code table and code points corresponding to reusable characters in the unified code table;

[0204] The second decryption module 802 is used to obtain the corresponding character rendering information from the target parser based on the code position of the characters in the encrypted string, obtain the decrypted text, and display it.

[0205] In summary, this embodiment of the application achieves text encryption by replacing the original code points of the protected characters in the string to be encrypted with the corresponding multiplexed code points through the association between the original code points and the multiplexed code points. This ensures that the encryption is based on the text itself, eliminating the need for an additional key, reducing the complexity of the encryption process. Furthermore, encryption does not alter the original document encoding or text structure, and the text can still be edited normally. The encrypted text will be displayed in plaintext in a trusted environment, but will appear as gibberish in an untrusted environment. Even if the encrypted text is leaked, it still protects the text content. The decrypted protected characters can be displayed and edited in plaintext in a trusted environment, achieving the goal of normal use of the text content.

[0206] Reference Figure 16 The diagram illustrates a block diagram of a data leakage identification device provided in an embodiment of this application, comprising:

[0207] The fourth acquisition module 901 is used to acquire the string to be analyzed and the multiplexing code points, wherein the multiplexing code points include at least one of the following: spare code points in the Unicode Consortium and code points corresponding to reusable characters in the Unicode Consortium;

[0208] The identification module 902 is used to determine that the string to be analyzed has a risk of leakage when it is determined that the characters of the string to be analyzed use the multiplexed code points.

[0209] Optionally, the identification module 902 includes:

[0210] The analysis submodule is used to obtain the target code positions corresponding to the characters of the string to be analyzed;

[0211] The multiplexing identification submodule is used to determine that the characters in the string to be analyzed use the multiplexing code and that the string to be analyzed has a risk of leakage when the number of multiplexing code positions contained in the target code position is greater than or equal to a third threshold, or the frequency of occurrence of multiplexing code positions contained in the target code position is greater than or equal to a fourth threshold.

[0212] Optional, also includes:

[0213] The editing recognition submodule is used to determine that an editing operation has been performed on the string to be analyzed if the protected characters in the string to be analyzed use the original code positions and multiplexed code positions.

[0214] In summary, this embodiment of the application achieves text encryption by replacing the original code points of the protected characters in the string to be encrypted with the corresponding multiplexed code points through the association between the original code points and the multiplexed code points. This ensures that the encryption is based on the text itself, eliminating the need for an additional key, reducing the complexity of the encryption process. Furthermore, encryption does not alter the original document encoding or text structure, and the text can still be edited normally. The encrypted text will be displayed in plaintext in a trusted environment, but will appear as gibberish in an untrusted environment. Even if the encrypted text is leaked, it still protects the text content. The decrypted protected characters can be displayed and edited in plaintext in a trusted environment, achieving the goal of normal use of the text content.

[0215] Reference Figure 17 The diagram illustrates a block diagram of a text sending device according to an embodiment of this application, comprising:

[0216] The fifth acquisition module 1101 is used to acquire an encrypted string and a device identifier of a target device for receiving the encrypted string; the original code position of the protection character in the encrypted string is replaced with a multiplexed code position that is associated with the original code position; the multiplexed code position includes at least one of: a spare code position in the unified code table and a code position corresponding to a reusable character in the unified code table;

[0217] The first sending module 1102 is used to send the encrypted string to the target device when the target device is determined to be an internally trusted device according to the device identifier. The internally trusted device is a device with a built-in target parser. The target parser is obtained by replacing the original character rendering information corresponding to the multiplexed code position in the correspondence between the preset code position and character rendering information with the character rendering information corresponding to the original code position that is associated with the multiplexed code position.

[0218] The second sending module 1103 is used to, when the target device is determined to be an externally authorized device based on the device identifier, replace the multiplexed code position of the protection character in the encrypted string with the corresponding original code position according to the preset association relationship between the original code position of the protection character in the unified code table and the multiplexed code position in the unified code table, to obtain the decrypted string and send it to the target device.

[0219] In summary, this embodiment of the application achieves text encryption by replacing the original code points of the protected characters in the string to be encrypted with the corresponding multiplexed code points through the association between the original code points and the multiplexed code points. This ensures that the encryption is based on the text itself, eliminating the need for an additional key, reducing the complexity of the encryption process. Furthermore, encryption does not alter the original document encoding or text structure, and the text can still be edited normally. The encrypted text will be displayed in plaintext in a trusted environment, but will appear as gibberish in an untrusted environment. Even if the encrypted text is leaked, it still protects the text content. The decrypted protected characters can be displayed and edited in plaintext in a trusted environment, achieving the goal of normal use of the text content.

[0220] This application also provides a non-volatile readable storage medium storing one or more modules (programs). When these modules are applied to a device, they enable the device to execute the instructions for the method steps in this application.

[0221] This application provides one or more machine-readable media storing instructions that, when executed by one or more processors, cause an electronic device to perform one or more of the methods described in the above embodiments. In this application, the electronic device includes various types of devices such as terminal devices and server (cluster) devices.

[0222] The embodiments of this disclosure can be implemented as an apparatus configured as desired using any suitable hardware, firmware, software, or any combination thereof, including terminal devices, server (cluster) and other electronic devices. Figure 18 An exemplary apparatus 1000 is schematically shown that can be used to implement the various embodiments described in the embodiments of this application.

[0223] In one embodiment, Figure 18 An exemplary device 1000 is shown, which includes one or more processors 1002, a control module (chipset) 1004 coupled to at least one of the processors 1002, a memory 1006 coupled to the control module 1004, a non-volatile memory (NVM) / storage device 1008 coupled to the control module 1004, one or more input / output devices 1010 coupled to the control module 1004, and a network interface 1012 coupled to the control module 1004.

[0224] Processor 1002 may include one or more single-core or multi-core processors, and processor 1002 may include any combination of general-purpose processors or special-purpose processors (e.g., graphics processors, application processors, baseband processors, etc.). In some embodiments, device 1000 can serve as a terminal device, server (cluster), or other device as described in the embodiments of this application.

[0225] In some embodiments, apparatus 1000 may include one or more computer-readable media (e.g., memory 1006 or NVM / storage device 1008) having instructions 1014 and one or more processors 1002 that are combined with the one or more computer-readable media and configured to execute instructions 1014 to implement modules and thereby perform the actions described in this disclosure.

[0226] In one embodiment, the control module 1004 may include any suitable interface controller to provide any suitable interface to at least one of the processors 1002 and / or any suitable device or component communicating with the control module 1004.

[0227] The control module 1004 may include a memory controller module to provide an interface to the memory 1006. The memory controller module may be a hardware module, a software module, and / or a firmware module.

[0228] Memory 1006 may be used, for example, to load and store data and / or instructions 1014 for device 1000. In one embodiment, memory 1006 may include any suitable volatile memory, such as suitable DRAM. In some embodiments, memory 1006 may include double data rate type quad synchronous dynamic random access memory (DDR4 SDRAM).

[0229] In one embodiment, the control module 1004 may include one or more input / output controllers to provide interfaces to the NVM / storage device 1008 and (one or more) input / output devices 1010.

[0230] For example, NVM / storage device 1008 may be used to store data and / or instructions 1014. NVM / storage device 1008 may include any suitable non-volatile memory (e.g., flash memory) and / or may include any suitable (one or more) non-volatile storage devices (e.g., one or more hard disk drives (HDDs), one or more optical disc drives (CDs), and / or one or more digital universal optical disc (DVD) drives).

[0231] NVM / storage device 1008 may include storage resources that are physically part of a device on which device 1000 is mounted, or that are accessible to the device but do not necessarily have to be part of the device. For example, NVM / storage device 1008 may be accessed via a network via one or more input / output devices 1010.

[0232] One or more input / output devices 1010 may provide an interface for device 1000 to communicate with any other suitable device. Input / output devices 1010 may include communication components, audio components, sensor components, etc. Network interface 1012 may provide an interface for device 1000 to communicate via one or more networks. Device 1000 may wirelessly communicate with one or more components of a wireless network according to any of one or more wireless network standards and / or protocols, such as accessing wireless networks based on communication standards, such as WiFi, 2G, 3G, 4G, 5G, etc., or combinations thereof.

[0233] In one embodiment, at least one of the processors 1002 may be logically packaged with one or more controllers (e.g., memory controller modules) of the control module 1004. In one embodiment, at least one of the processors 1002 may be logically packaged with one or more controllers of the control module 1004 to form a system-in-package (SiP). In one embodiment, at least one of the processors 1002 may be integrated with the logic of one or more controllers of the control module 1004 on the same die. In one embodiment, at least one of the processors 1002 may be integrated with the logic of one or more controllers of the control module 1004 on the same die to form a system-on-a-chip (SoC).

[0234] In various embodiments, device 1000 may be, but is not limited to, a server, a desktop computing device, or a mobile computing device (e.g., a laptop, a handheld computing device, a tablet, a netbook, etc.). In various embodiments, device 1000 may have more or fewer components and / or different architectures. For example, in some embodiments, device 1000 includes one or more cameras, a keyboard, a liquid crystal display (LCD) screen (including a touchscreen display), a non-volatile memory port, multiple antennas, a graphics chip, an application-specific integrated circuit (ASIC), and a speaker.

[0235] The detection device can use a main control chip as a processor or control module, and sensor data, position information, etc. can be stored in a memory or NVM / storage device. The sensor group can be used as an input / output device, and the communication interface can include a network interface.

[0236] As the device embodiment is basically similar to the method embodiment, the description is relatively simple, and relevant parts can be found in the description of the method embodiment.

[0237] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on the differences from other embodiments. The same or similar parts between the various embodiments can be referred to each other.

[0238] This application describes embodiments with reference to flowchart illustrations and / or block diagrams of methods, terminal devices (systems), and computer program products according to embodiments of this application. It should be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing terminal device to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing terminal device, generate instructions for implementing the flowchart illustrations. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0239] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing terminal device to operate in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0240] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal equipment, causing a series of operational steps to be performed on the computer or other programmable terminal equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable terminal equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0241] Although preferred embodiments of the present application have been described, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including both the preferred embodiments and the changes and modifications falling within the scope of the embodiments of the present application.

[0242] Finally, it should be noted that in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or terminal device that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or terminal device. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or terminal device that includes said element.

[0243] The above provides a detailed description of the encryption method and apparatus, text decryption method and apparatus, leakage identification method and apparatus, text sending method and apparatus, electronic device, and machine-readable medium provided in this application. Specific examples have been used to illustrate the principles and implementation methods of this application. The description of the above embodiments is only for the purpose of helping to understand the method and core ideas of this application. At the same time, for those skilled in the art, there will be changes in the specific implementation methods and application scope based on the ideas of this application. Therefore, the content of this specification should not be construed as a limitation of this application.

Claims

1. An encryption method, characterized in that, include: Get the string to be encrypted; Based on the pre-defined association between the original code position of the protection character in the Unicode Consortium and the multiplexed code position in the Unicode Consortium, the protection character in the string to be encrypted is determined; The multiplexing code points include at least one of the spare code points in the unified code table and the code points corresponding to the reusable characters in the unified code table; if low-frequency characters appear in the text carrier where the string to be encrypted is located, the code points of the low-frequency characters are used as the multiplexing code points in the association relationship; Based on the aforementioned association, the original code points of the protection character are replaced with the target multiplexed code points corresponding to the original code points to obtain an encrypted string.

2. The method according to claim 1, characterized in that, Also includes: Acquire protected characters, reusable characters, and a unified code table, wherein the unified code table includes the code points corresponding to the characters and spare code points; Obtain the multiplexed code points from the Unicode table; For the original code position corresponding to the protected character in the Unicode table, establish an association relationship between it and the multiplexed code position.

3. The method according to claim 2, characterized in that, The step of establishing an association between the original code point corresponding to the protected character in the Unicode Consortium table and the multiplexed code point includes: The high-frequency characters in the protected characters are obtained, and the frequency of the high-frequency characters is greater than or equal to a first threshold. Establish the association between the original code bits and the multiplexed code bits; the original code bits and the multiplexed code bits correspond one-to-one. Establish the association between the target original code point corresponding to the high-frequency character and other multiplexed code points that have not been associated.

4. A decryption method, characterized in that, include: Get the encrypted string; The original code points of the protected characters in the encrypted string are replaced with multiplexed code points that are related to the original code points; The multiplexing code points include at least one of the following: spare code points in the Unicode Consortium and code points corresponding to reusable characters in the Unicode Consortium; if low-frequency characters appear in the text carrier where the string to be encrypted is located, the code points of the low-frequency characters are used as the multiplexing code points; Based on the preset association between the original code position of the protection character in the Unicode Conversion Table and the multiplexed code position in the Unicode Conversion Table, the multiplexed code position of the protection character in the encrypted string is replaced with the corresponding original code position to obtain the decrypted string; Based on the preset correspondence between code positions and character rendering information, the character rendering information corresponding to the original code positions of the protected characters in the decrypted string, as well as the character rendering information corresponding to the code positions of other characters in the decrypted string, are obtained to obtain the decrypted text and display it.

5. A decryption method, characterized in that, include: Obtain an encrypted string and a target parser; the original code points of the protected characters in the encrypted string are replaced with multiplexed code points corresponding to the original code points; the target parser is obtained by replacing the original character rendering information corresponding to the multiplexed code points in the preset correspondence between code points and character rendering information with the character rendering information corresponding to the original code points that are associated with the multiplexed code points; The multiplexing code points include at least one of the following: spare code points in the unified code table and code points corresponding to reusable characters in the unified code table; if low-frequency characters appear in the text carrier where the string to be encrypted is located, the code points of the low-frequency characters are used as the multiplexing code points in the association relationship; Based on the code points of the characters in the encrypted string, the corresponding character rendering information is obtained from the target parser to obtain the decrypted text and display it.

6. A method for identifying information leaks, characterized in that, include: Obtain the string to be analyzed and the multiplexed code points. The multiplexed code points include at least one of the following: spare code points in the Unicode Consortium and code points corresponding to reusable characters in the Unicode Consortium. If low-frequency characters appear in the text carrier where the string to be encrypted is located, the code points of the low-frequency characters are used as the multiplexed code points. If it is determined that the characters in the string to be analyzed use the multiplexed code points, then it is determined that the string to be analyzed poses a risk of leakage.

7. A text sending method, characterized in that, include: Obtain the encrypted string and the device identifier of the target device for receiving the encrypted string; The original code points of the protected characters in the encrypted string are replaced with multiplexed code points that are related to the original code points; The multiplexing code points include at least one of the following: spare code points in the unified code table and code points corresponding to reusable characters in the unified code table; if low-frequency characters appear in the text carrier where the string to be encrypted is located, the code points of the low-frequency characters are used as the multiplexing code points in the association relationship; If the target device is determined to be an internally trusted device based on the device identifier, the encrypted string is sent to the target device. The internally trusted device is a device with a built-in target parser. The target parser is constructed by replacing the original character rendering information corresponding to the multiplexed code position in the correspondence between the preset code position and character rendering information with the character rendering information corresponding to the original code position that is associated with the multiplexed code position. If the target device is determined to be an externally authorized device based on the device identifier, the multiplexed code position of the protection character in the encrypted string is replaced with the corresponding original code position according to the association relationship between the original code position of the protection character in the Unicode Conversion Table and the multiplexed code position in the Unicode Conversion Table, thereby obtaining the decrypted string and sending it to the target device.

8. An encryption device, characterized in that, include: The first acquisition module is used to acquire the string to be encrypted; The first determining module is used to determine the protection character in the string to be encrypted based on the association relationship between the original code position of the protection character in the Unicode Consortium and the multiplexed code position in the Unicode Consortium. The multiplexing code points include at least one of the spare code points in the unified code table and the code points corresponding to the reusable characters in the unified code table; if low-frequency characters appear in the text carrier where the string to be encrypted is located, the code points of the low-frequency characters are used as the multiplexing code points in the association relationship; An encryption module is used to replace the original code points of the protection character with target multiplexed code points corresponding to the original code points according to the association relationship, so as to obtain an encrypted string.

9. A decryption device, characterized in that, include: The second acquisition module is used to acquire the encrypted string; The original code points of the protected characters in the encrypted string are replaced with multiplexed code points that are related to the original code points; The multiplexing code points include at least one of the following: spare code points in the Unicode Consortium and code points corresponding to reusable characters in the Unicode Consortium; if low-frequency characters appear in the text carrier where the string to be encrypted is located, the code points of the low-frequency characters are used as the multiplexing code points; The second determining module is used to replace the multiplexed code position of the protection character in the encrypted string with the corresponding original code position according to the preset association relationship between the original code position of the protection character in the Unicode table and the multiplexed code position in the Unicode table, so as to obtain the decrypted string; The first decryption module is used to obtain the character rendering information corresponding to the original code position of the protected character in the decryption string, and the character rendering information corresponding to the code position of other characters in the decryption string, according to the preset correspondence between code position and character rendering information, to obtain the decrypted text and display it.

10. A decryption device, characterized in that, include: The third acquisition module is used to acquire the encrypted string and the target parser. The original code points of the protected characters in the encrypted string are replaced with multiplexed code points corresponding to the original code points. The target parser is constructed by replacing the original character rendering information corresponding to the multiplexed code points in the preset correspondence between code points and character rendering information with the character rendering information corresponding to the original code points that are associated with the multiplexed code points. The multiplexed code points include at least one of the following: spare code points in the unified code table and code points corresponding to reusable characters in the unified code table. If low-frequency characters appear in the text carrier where the string to be encrypted is located, the code points of the low-frequency characters are used as the multiplexed code points in the association relationship. The second decryption module is used to obtain the corresponding character rendering information from the target parser based on the code position of the characters in the encrypted string, obtain the decrypted text, and display it.

11. A data leakage detection device, characterized in that, include: The fourth acquisition module is used to acquire the string to be analyzed and the multiplexing code points. The multiplexing code points include at least one of the following: spare code points in the Unicode Consortium and code points corresponding to reusable characters in the Unicode Consortium. If low-frequency characters appear in the text carrier where the string to be encrypted is located, the code points of the low-frequency characters are used as the multiplexing code points. The identification module is used to determine that the string to be analyzed has a risk of leakage if it is determined that the characters of the string to be analyzed use the multiplexed code points.

12. A text sending device, characterized in that, include: The fifth acquisition module is used to acquire the encrypted string and the device identifier of the target device for receiving the encrypted string; The original code points of the protected characters in the encrypted string are replaced with multiplexed code points that are related to the original code points; The multiplexing code points include at least one of the following: spare code points in the unified code table and code points corresponding to reusable characters in the unified code table; if low-frequency characters appear in the text carrier where the string to be encrypted is located, the code points of the low-frequency characters are used as the multiplexing code points in the association relationship; The first sending module is used to send the encrypted string to the target device when the target device is determined to be an internally trusted device based on the device identifier. The internally trusted device is a device with a built-in target parser. The target parser is constructed by replacing the original character rendering information corresponding to the multiplexed code position in the preset correspondence between code position and character rendering information with the character rendering information corresponding to the original code position that is associated with the multiplexed code position. The second sending module is used to, when the target device is determined to be an externally authorized device based on the device identifier, replace the multiplexed code position of the protection character in the encrypted string with the corresponding original code position according to the preset association relationship between the original code position of the protection character in the unified code table and the multiplexed code position in the unified code table, to obtain the decrypted string and send it to the target device.

13. An electronic device, characterized in that, include: processor; and A memory having executable code stored thereon, which, when executed, causes the processor to perform the method as described in any one of claims 1 to 7.

14. One or more machine-readable media having executable code stored thereon, which, when executed, causes a processor to perform the method as claimed in any one of claims 1 to 7.

Images