Encrypted information management system based on big data
By combining symmetric and asymmetric algorithms in a big data environment, dynamically allocating encryption tasks and resources, the problems of high key management costs and slow algorithms of the encryption information management system in the existing technology are solved, and efficient encryption information management is achieved , adapt to the response time requirements of different scenarios.
Patent Information
- Application Number
- CN202210423849.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2022-04-21
- Publication Date
- 2025-01-17
- Estimated Expiration
- 2042-04-21
AI Technical Summary
In the prior art, although the encryption method of symmetric algorithm is fast, the key management cost is high, while the asymmetric algorithm is low, the algorithm is slow, and its practicality is poor, making it difficult to achieve efficient encryption information management in a big data environment. .
A large data-based encrypted information management system is designed, combining symmetric algorithms and asymmetric algorithms, estimating decryption time through the response time calculation module, dynamically allocating encryption tasks to symmetric algorithms and asymmetric algorithms, and flexible information is used to encrypt information based on the volume of information. Allocate processing ratio, use the server resource allocation module to allocate resources, and realize collaborative encryption.
While improving the speed of encryption algorithms, it reduces server resource consumption, adapts to the response time requirements of different usage scenarios, provides a suitable proportion of encrypted information processing, and improves the practicality of the system.
Smart Images
Figure CN114785591B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of big data, and in particular to an encrypted information management system based on big data. Background Art
[0002] Information management involves information encryption, which involves symmetric algorithms and asymmetric algorithms. A special case of symmetric algorithms is the "one-time garbled book". This method provides a long and unique key for each message sent for encryption and decryption. The algorithm is fast but the key management cost is high and server resources are required. Asymmetric algorithms use different keys for encrypting and decrypting information. The characteristic is that they use dual keys, and the key management cost is extremely low. They are suitable for large-scale network applications, but the algorithm is slow and has poor practicality. Therefore, it is necessary to design a practical encryption information management system based on big data. Summary of the invention
[0003] The purpose of the present invention is to provide an encrypted information management system based on big data to solve the problems raised in the above background technology.
[0004] In order to solve the above technical problems, the present invention provides the following technical solutions: an encrypted information management system based on big data, comprising a symmetric algorithm encryption module, an asymmetric algorithm encryption module, an information receiving module, a data storage module, and a response time calculation module, wherein the information receiving module and the data storage module are both electrically connected to the symmetric algorithm encryption module and the asymmetric algorithm encryption module, and the information receiving module is electrically connected to the response time calculation module;
[0005] The symmetric algorithm encryption module is used to encrypt using a unique key, the asymmetric algorithm encryption module is used to encrypt using a dual key, the information receiving module is used to receive information to be encrypted, the data storage module is used to store the encrypted information, and the response time calculation module is used to estimate the decryption time of the two encryption methods based on the number of information bytes.
[0006] According to the above technical solution, it also includes a server resource allocation module, and the server resource allocation module is electrically connected to the symmetric algorithm encryption module and the asymmetric algorithm encryption module;
[0007] The server resource allocation module is used to coordinate the server resources occupied by symmetric algorithm encryption and asymmetric algorithm encryption.
[0008] According to the above technical solution, the work of the system is specifically divided into the following steps:
[0009] S1. When the server starts working, the data to be encrypted is received by the information receiving module;
[0010] S2. Calculate the decryption time of the current information storage volume using the response time calculation module, and use the two encryption methods. If it does not exceed the set value, encrypt it using the asymmetric algorithm encryption module. If it exceeds the set value, encrypt it using the symmetric algorithm encryption module.
[0011] S3. The encrypted information is transferred to the data storage module for storage, so as to facilitate subsequent processing of the information.
[0012] According to the above technical solution, the working process of the server resource allocation module is:
[0013] S4. Allocate the encryption workload ratio between the symmetric algorithm encryption module and the asymmetric algorithm encryption module according to the corresponding time calculated by the response time calculation module, and transmit the information to be encrypted to the symmetric algorithm encryption module and the asymmetric algorithm encryption module for collaborative encryption.
[0014] According to the above technical solution, in the above step S4, the specific method for allocating the encryption workload ratio is:
[0015] S4-1, when the volume of information to be encrypted is small, that is, when the decryption time estimated by the response time calculation module is less than the first-order set value, the asymmetric algorithm encryption module is used for encryption;
[0016] S4-2, when the amount of information to be encrypted begins to increase, that is, when the decryption time estimated by the response time calculation module is greater than the first-order set value and less than the second-order set value, the proportion of encryption tasks processed by the asymmetric algorithm encryption module is reduced, and the proportion of encryption tasks processed by the symmetric algorithm encryption module is increased;
[0017] S4-3. When the amount of information to be encrypted is large, that is, when the decryption time estimated by the response time calculation module is greater than the second-order set value, the encryption task is completely processed by the symmetric algorithm encryption module.
[0018] According to the above technical solution, in the above step S4-2, the allocation formula of the encryption task is:
[0019]
[0020] Among them, A0 is the total amount of information that needs to be encrypted, A is the amount of information of the encryption task processed by the symmetric algorithm encryption module, A1 is the maximum amount of information of the encryption task processed by the asymmetric algorithm encryption module, p0 is the decryption time of the second-order setting value, and p1 is the decryption time estimated by the response time calculation module.
[0021] According to the above technical solution, the data storage module includes a data compression module and a data decompression module, and the data compression module and the data decompression module are both electrically connected to the asymmetric algorithm encryption module and the symmetric algorithm encryption module;
[0022] The data compression module is used to compress the encrypted data and store it in the server to save space, and the data decompression module is used to decompress the data before decryption to facilitate decryption.
[0023] According to the above technical solution, the compressed information ratio α of the data compression module is related to the task ratio processed by the symmetric algorithm encryption module and the asymmetric algorithm encryption module, that is, the more information encrypted by the symmetric algorithm, the higher the information ratio α compressed by the data compression module, specifically:
[0024] α=A / A1k, where k is the proportionality coefficient.
[0025] Compared with the prior art, the beneficial effects achieved by the present invention are as follows: the present invention adopts a technology that combines symmetric algorithms and asymmetric algorithms to give different instantaneous weights to the two encryption algorithms. The instantaneous weights are allocated according to the customer's response time requirements for the usage scenarios, and a suitable encryption information method allocation ratio is given to each scenario, which can reduce server resource consumption while improving the algorithm speed. BRIEF DESCRIPTION OF THE DRAWINGS
[0026] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the present invention and do not constitute a limitation of the present invention. In the accompanying drawings:
[0027] Figure 1 It is a schematic diagram of the overall principle of the present invention; DETAILED DESCRIPTION
[0028] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.
[0029] See also Figure 1 The present invention provides a technical solution: an encrypted information management system based on big data, including a symmetric algorithm encryption module, an asymmetric algorithm encryption module, an information receiving module, a data storage module, and a response time calculation module, wherein the information receiving module and the data storage module are both electrically connected to the symmetric algorithm encryption module and the asymmetric algorithm encryption module, and the information receiving module is electrically connected to the response time calculation module;
[0030] The symmetric algorithm encryption module is used to encrypt using a unique key, the asymmetric algorithm encryption module is used to encrypt using a double key, the information receiving module is used to receive information to be encrypted, the data storage module is used to store the encrypted information, and the response time calculation module is used to estimate the decryption time of the two encryption methods based on the number of information bytes;
[0031] It also includes a server resource allocation module, which is electrically connected to the symmetric algorithm encryption module and the asymmetric algorithm encryption module;
[0032] The server resource allocation module is used to coordinate the server resources occupied by symmetric algorithm encryption and asymmetric algorithm encryption;
[0033] The working of the system is specifically divided into the following steps:
[0034] S1. When the server starts working, the data to be encrypted is received by the information receiving module;
[0035] S2. Calculate the decryption time of the current information storage volume using the response time calculation module, and use the two encryption methods. If it does not exceed the set value, encrypt it using the asymmetric algorithm encryption module. If it exceeds the set value, encrypt it using the symmetric algorithm encryption module.
[0036] S3, transferring the encrypted information to the data storage module for storage, so as to facilitate subsequent processing of the information;
[0037] The working process of the server resource allocation module is as follows:
[0038] S4. Allocate the encryption workload ratio between the symmetric algorithm encryption module and the asymmetric algorithm encryption module according to the corresponding time calculated by the response time calculation module, and transmit the information to be encrypted to the symmetric algorithm encryption module and the asymmetric algorithm encryption module for collaborative encryption;
[0039] In the above step S4, the specific method for allocating the encryption workload ratio is:
[0040] S4-1, when the volume of information to be encrypted is small, that is, when the decryption time estimated by the response time calculation module is less than the first-order set value, the asymmetric algorithm encryption module is used for encryption;
[0041] S4-2, when the amount of information to be encrypted begins to increase, that is, when the decryption time estimated by the response time calculation module is greater than the first-order set value and less than the second-order set value, the proportion of encryption tasks processed by the asymmetric algorithm encryption module is reduced, and the proportion of encryption tasks processed by the symmetric algorithm encryption module is increased;
[0042] S4-3, when the amount of information to be encrypted is large, that is, when the decryption time estimated by the response time calculation module is greater than the second-order set value, the encryption task is completely processed by the symmetric algorithm encryption module;
[0043] In the above step S4-2, the encryption task allocation formula is:
[0044]
[0045] Where A0 is the total amount of information that needs to be encrypted, A is the amount of information in the encryption task processed by the symmetric algorithm encryption module, A1 is the maximum amount of information in the encryption task processed by the asymmetric algorithm encryption module, p0 is the decryption time of the second-order setting value, and p1 is the decryption time estimated by the response time calculation module;
[0046] The data storage module includes a data compression module and a data decompression module, and the data compression module and the data decompression module are both electrically connected to the asymmetric algorithm encryption module and the symmetric algorithm encryption module;
[0047] The data compression module is used to compress the encrypted data and store it in the server to save space, and the data decompression module is used to decompress the data before decryption to facilitate decryption;
[0048] The compressed information ratio α of the data compression module is related to the task ratio processed by the symmetric algorithm encryption module and the asymmetric algorithm encryption module. That is, the more information encrypted by the symmetric algorithm, the higher the information ratio α compressed by the data compression module. Specifically:
[0049] α=A / A1k, where k is the proportional coefficient. The technology combining symmetric and asymmetric algorithms is used to give different instantaneous weights to the two encryption algorithms. The instantaneous weights are allocated according to the customer's response time requirements for the usage scenarios, and the appropriate encryption information method allocation ratio is given to each scenario. This can reduce server resource consumption while improving the algorithm speed.
[0050] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.
[0051] Finally, it should be noted that the above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art can still modify the technical solutions described in the aforementioned embodiments or replace some of the technical features therein by equivalents. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.
Claims
1. Encrypted information management system based on big data, characterized by: The system comprises a symmetric algorithm encryption module, an asymmetric algorithm encryption module, an information receiving module, a data storage module, and a response time calculation module, wherein the information receiving module and the data storage module are both electrically connected to the symmetric algorithm encryption module and the asymmetric algorithm encryption module, and the information receiving module is electrically connected to the response time calculation module; the symmetric algorithm encryption module is used to encrypt using a unique key, the asymmetric algorithm encryption module is used to encrypt using a double key, the information receiving module is used to receive information to be encrypted, the data storage module is used to store the encrypted information, and the response time calculation module is used to estimate the decryption time of the two encryption methods according to the number of information bytes; the system also comprises a server resource allocation module, the server resource allocation module is electrically connected to the symmetric algorithm encryption module and the asymmetric algorithm encryption module; the server resource allocation module is used to coordinate the server resources occupied by the symmetric algorithm encryption and the asymmetric algorithm encryption; the operation of the system is specifically divided into the following steps: S1, when the server starts working, the data to be encrypted is received into the server through the information receiving module; S2, the response time calculation module is used to calculate the decryption time under the storage volume of the current information under the two encryption methods, and if it does not exceed the set value, the asymmetric algorithm encryption module is used to Encryption, if it exceeds the set value, then use the symmetric algorithm encryption module to encrypt; S3, the encrypted information is transferred to the data storage module for storage, so as to facilitate subsequent processing of the information; the working process of the server resource allocation module is: S4, according to the corresponding time calculated by the response time calculation module, the encryption workload ratio undertaken by the symmetric algorithm encryption module and the asymmetric algorithm encryption module is allocated, and the information to be encrypted is transmitted to the symmetric algorithm encryption module and the asymmetric algorithm encryption module for collaborative encryption; in the above step S4, the specific allocation method of the encryption workload ratio is: S4-1, when the volume of information to be encrypted is small, that is, when the response time is When the decryption time estimated by the response time calculation module is less than the first-order setting value, the asymmetric algorithm encryption module is used for encryption; S4-2, when the amount of information to be encrypted begins to increase, that is, the decryption time estimated by the response time calculation module is greater than the first-order setting value and less than the second-order setting value, the proportion of the asymmetric algorithm encryption module processing encryption tasks is reduced, and the proportion of the symmetric algorithm encryption module processing encryption tasks is increased; S4-3, when the amount of information to be encrypted is large, that is, the decryption time estimated by the response time calculation module is greater than the second-order setting value, the symmetric algorithm encryption module is fully used to process the encryption tasks; in the above step S4-2, the encryption task allocation formula is: Among them, A0 is the total amount of information that needs to be encrypted, A is the amount of information of the encryption task processed by the symmetric algorithm encryption module, A1 is the maximum amount of information of the encryption task processed by the asymmetric algorithm encryption module, p0 is the decryption time of the second-order setting value, and p1 is the decryption time estimated by the response time calculation module.
2. The encryption information management system based on big data according to claim 1, characterized in that: The data storage module includes a data compression module and a data decompression module, and the data compression module and the data decompression module are both electrically connected to the asymmetric algorithm encryption module and the symmetric algorithm encryption module; The data compression module is used to compress the encrypted data and store it in the server to save space, and the data decompression module is used to decompress the data before decryption to facilitate decryption.
3. The encryption information management system based on big data according to claim 1, characterized in that: The compressed information ratio α of the data compression module is related to the task ratio processed by the symmetric algorithm encryption module and the asymmetric algorithm encryption module, that is, the more information encrypted by the symmetric algorithm, the higher the information ratio α compressed by the data compression module, specifically: α=A / A1k, where k is the proportional coefficient.