Data encryption method and device

Abstract

The present application provides a data encryption method and device, including: obtaining data to be processed, the data to be processed includes at least one customer information data, the customer information data corresponds to the customer's biometric features; obtaining a random number sequence, the random number sequence includes at least one random number; using each random number in the random number sequence, moving part of the data in the data to be processed so that the customer information data and the customer's biometric features no longer correspond; encrypting and storing the random number sequence. The random number sequence is used to form a data movement method, and the data to be processed is moved, so that when an outsider obtains the customer's biometric features, it is impossible to find the corresponding customer information data, and in order to break the data movement rules, the encrypted random number sequence needs to be decrypted, which further reduces the risk of data leakage, prevents the financial system from being attacked, and improves the system security.

Description

Technical Field

[0001] The present application relates to the technical field of data processing, and in particular to a data encryption method and device. Background Art

[0002] In recent years, biometric identification technology has flourished. As a result, many situations have emerged where biometric identification is used to confirm permissions. In the banking system, this means that as long as the customer's biometrics are obtained, other information corresponding to the customer can be obtained.

[0003] It can be seen that the existing information storage technology has huge risks. Since the customer's biometrics correspond to his or her customer information, the storage location of the biometrics corresponds to a variety of customer information including customer number, ID number, deposit and loan account, and phone number. When the system is hacked, other customer information can easily be leaked, posing a huge data security risk. When an outsider forges a customer's biometrics, the storage system can also be easily attacked, causing customer information to be leaked.

[0004] Therefore, how to encrypt data during storage is a technical problem that those skilled in the art need to solve urgently. Summary of the invention

[0005] In view of this, an embodiment of the present application provides a data encryption method and device, aiming to reduce the risk of data leakage.

[0006] In a first aspect, an embodiment of the present application provides a data encryption method, comprising:

[0007] Acquire data to be processed, wherein the data to be processed includes at least one customer information data, and the customer information data corresponds to a biometric feature of the customer;

[0008] Obtaining a random number sequence, wherein the random number sequence includes at least one random number;

[0009] Using each random number in the random number sequence, move part of the data to be processed so that the customer information data and the customer's biometric features no longer correspond, the number of moves being equal to the number of the random numbers, and the random numbers being used to determine part of the data to be processed and the way it is moved;

[0010] The random number sequence is encrypted and stored.

[0011] Optionally, the random number sequence includes: a first random number and a second random number, and the first random number and the second random number are used to determine the data content of each movement.

[0012] Optionally, using each random number in the random number sequence to move part of the data to be processed includes:

[0013] Determine first mobile data, where the first mobile data is customer information data following the first data in the data to be processed, and a position of the first data in the data to be processed is determined according to the first random number;

[0014] Moving the first mobile data to before the first customer information data in the data to be processed to obtain first processed data;

[0015] Determine second mobile data, where the second mobile data is customer information data following the second data in the first processed data, and a position of the second data in the first processed data is determined according to the second random number;

[0016] The second moved data is moved before the first customer information data in the first processed data to obtain second processed data.

[0017] Optionally, the encrypted storage of the random number sequence includes:

[0018] The random number sequence is encrypted and stored using a triple data encryption algorithm.

[0019] Optionally, the method further includes:

[0020] A timer trigger is determined, where the timer is used to periodically trigger the data encryption method.

[0021] In a second aspect, an embodiment of the present application provides a data encryption device, including:

[0022] A data acquisition module, used to acquire data to be processed, wherein the data to be processed includes at least one customer information data, and the customer information data corresponds to the customer's biometric characteristics;

[0023] A number sequence acquisition module, used to acquire a random number sequence, wherein the random number sequence includes at least one random number;

[0024] A moving module, used to use each random number in the random number sequence to move part of the data to be processed so that the customer information data and the customer's biometric features no longer correspond, the number of moves being equal to the number of random numbers, and the random numbers being used to determine part of the data to be processed and a moving method thereof;

[0025] The encryption module is used for encrypting and storing the random number sequence.

[0026] Optionally, the random number sequence includes: a first random number and a second random number, and the first random number and the second random number are used to determine the data content of each movement.

[0027] Optional, mobile modules include:

[0028] A first determining unit is used to determine first mobile data, where the first mobile data is customer information data following the first data in the data to be processed, and a position of the first data in the data to be processed is determined according to the first random number;

[0029] A first moving unit, used for moving the first moving data to the front of the first customer information data in the data to be processed, to obtain first processed data;

[0030] a second determining unit, configured to determine second mobile data, where the second mobile data is customer information data following the second data in the first processed data, and a position of the second data in the first processed data is determined according to the second random number;

[0031] The second moving unit is used to move the second moving data to before the first customer information data in the first processed data to obtain second processed data.

[0032] In a third aspect, an embodiment of the present application provides a device, comprising a memory and a processor, wherein the memory is used to store instructions or codes, and the processor is used to execute the instructions or codes so that the device executes the data encryption method described in any one of the first aspects above.

[0033] In a fourth aspect, an embodiment of the present application provides a computer storage medium, in which a code is stored. When the code is executed, a device executing the code implements the data encryption method described in any one of the first aspects above.

[0034] The embodiment of the present application provides a data encryption method. When executing the method, first obtain the data to be processed, the data to be processed includes at least one customer information data, the customer information data corresponds to the customer's biometrics, then obtain a random number sequence, the random number sequence includes at least one random number, and then use each random number in the random number sequence to move part of the data to be processed, so that the customer information data and the customer's biometrics no longer correspond, the number of times the movement is equal to the number of the random numbers, the random numbers are used to determine part of the data to be processed and its movement method, and finally encrypt and store the random number sequence to reduce the risk of data leakage. In this way, by using a random number sequence to form a data movement method, the data to be processed is moved, resulting in an outsider being unable to find the corresponding customer information data when obtaining the customer's biometrics, and in order to break the data movement rules, it is also necessary to decrypt the encrypted random number sequence, which further reduces the risk of data leakage, prevents the financial system from being attacked, and improves system security. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] In order to more clearly illustrate the technical solutions in this embodiment or the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0036] Figure 1 A method flow chart of a data encryption method provided in an embodiment of the present application;

[0037] Figure 2 Another method flow chart of the data encryption method provided in the embodiment of the present application;

[0038] Figure 3 A schematic diagram of the structure of a data encryption device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0039] In the existing banking system, personal identity authentication is mostly performed through biometric technology. The customer biometrics stored by the bank are usually encrypted feature data extracted through machine learning. In order to quickly locate the matching relationship between each biometric and the customer, the biometric information is often bound and stored with the customer number, customer ID card, deposit and loan account number, telephone number and other personal information. In this way, after the customer's biometrics are identified, one-to-many customer information can be obtained, and then the customer's service system can be jumped to, such as the customer's personal business queue, VIP service channel, financial service exclusive system, etc.

[0040] However, this system processing method has great risks. Once the biometric recognition system is breached, or internal security management loopholes lead to data loss, the customer's biometric information and personal information will be lost. The data contains personal information such as the customer's name and ID card, as well as extracted biometric features such as face, iris, and voiceprint, which can be easily forged. If the forged information is used in the financial system, various other information corresponding to the customer can be obtained, which poses a great risk to data security.

[0041] The method provided in the embodiment of the present application is executed by a computer device and is used to encrypt data.

[0042] Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without creative work are within the scope of protection of the present application.

[0043] See also Figure 1 , Figure 1A method flow chart of a data encryption method provided in an embodiment of the present application includes:

[0044] Step S101: Obtain data to be processed.

[0045] The data to be processed is the customer information data corresponding to the customer's biometric features stored in the bank system. Because there are a large number of customers, the data to be processed in the memory includes at least one customer information data. As a possible implementation, the customer information data is arranged in a row or a column in a certain order.

[0046] Step S102: Obtain a random number sequence, where the random number sequence includes at least one random number.

[0047] A random number sequence is a sequence of numbers consisting of at least one random number. Because random numbers include a certain degree of randomness, it means that the rules derived from random numbers are also random rules. Since the preset fixed numbers are easy to be obtained by outsiders, and random numbers are random, if the random numbers are changed regularly, it is difficult for outsiders to crack them, and it is not easy to cause human leakage, which improves the security of information.

[0048] Step S103: using each random number in the random number sequence to move part of the data to be processed.

[0049] The purpose of moving some of the data to be processed is to make the customer information data no longer correspond to the customer's biometrics, that is, to prevent outsiders from finding the customer's corresponding customer information after obtaining the customer's biometrics. The specific movement rules are determined by random numbers, which can be used to determine the start and end points of the movement and the way of movement. In this way, each random number corresponds to one movement, and after multiple moves, the data is encrypted multiple times.

[0050] As a possible implementation, the number of random numbers included in the random number sequence can be manually set. The more random numbers are set, the higher the information security is; correspondingly, the higher the number of random numbers is set, the slower the system runs. In practical applications, a compromise point can be selected between system security and system running speed, and the number of random numbers can be set based on this compromise point.

[0051] As a possible implementation, the movement rules generated by the random number can be set as needed. The data content of the movement, the number of steps of the movement, the way of moving up and down or left and right, etc. can be selectively determined according to the random number.

[0052] Step S104: encrypt and store the random number sequence.

[0053] Because the data movement method is determined according to the random number sequence, the random number sequence can also be considered as the key to unlock the mobile encryption. Therefore, the random number sequence can be stored in an encrypted storage manner, and even if an outsider knows that the data encryption is through a random number sequence, they cannot obtain the specific content of the random number sequence, and thus cannot crack this encryption method.

[0054] In summary, this embodiment uses a random number series to form a data movement method to move the data to be processed, which makes it impossible for outsiders to find the corresponding customer information data when obtaining the customer's biometric features. In addition, in order to break the data movement rules, the encrypted random number series needs to be decrypted, which further reduces the risk of data leakage, prevents the financial system from being attacked, and improves system security.

[0055] In the embodiment of the present application, the above Figure 1 There are many possible implementations of the steps, which are introduced below. It should be noted that the implementations given in the following introduction are only for illustrative purposes and do not represent all implementations of the embodiments of the present application.

[0056] See also Figure 2 , which is a flow chart of a data encryption method provided in an embodiment of the present application, including:

[0057] Step S201: Determine whether a timer is triggered.

[0058] The timer is used to periodically trigger the data encryption method. By periodically triggering the timer, the random number sequence can be dynamically updated, which is beneficial to increase the encryption strength and make the data more secure. As a possible implementation method, the timer can be set to be triggered once a day.

[0059] Step S202: Obtain data to be processed.

[0060] The data to be processed includes at least one customer information data, and the customer information data corresponds to the customer's biometric characteristics. This step is the same as step S101 in the first embodiment, and will not be described in detail here.

[0061] Step S203: Obtain a random number sequence, where the random number sequence includes a first random number and a second random number.

[0062] Because the random number includes a certain degree of randomness, it means that the rules derived from the random number are also random rules. As a possible implementation, the random number sequence may include a first random number and a second random number. The first move is performed according to the first random number, and the second move is performed according to the second random number.

[0063] Step S204: Determine the first movement data.

[0064] The first mobile data is the customer information data after the first data in the data to be processed, and the position of the first data in the data to be processed is determined according to the first random number. That is to say, the first mobile data can be determined according to the first random number. For example, if the first random number is 5, then the first mobile data is the customer information data after the 5th customer information data.

[0065] Step S205: moving the first mobile data to before the first customer information data in the data to be processed to obtain first processed data.

[0066] According to the first mobile data determined in S204, the first mobile data is moved before the first customer information data. This movement method is similar to the method of shuffling playing cards and can fully disrupt the data.

[0067] Step S206: Determine the second movement data.

[0068] The second mobile data is the customer information data after the second data in the first processed data, and the position of the second data in the first processed data is determined according to the second random number. This means that the second mobile data can be determined according to the second random number, and the basis of the movement here is the data after the first movement. For example, if the second random number is 8, then the second mobile data is the customer information data after the 8th customer information data in the first processed data.

[0069] Step S207: Move the second mobile data to before the first customer information data in the first processed data to obtain second processed data.

[0070] According to the second mobile data determined in S206, the second mobile data is moved before the first customer information data. This movement method is similar to the method of shuffling playing cards and can fully disrupt the data.

[0071] Step S208: encrypt and store the random number sequence using a triple data encryption algorithm.

[0072] 3DES (Triple DES) is the generic name for the Triple Data Encryption Algorithm (TDEA) block cipher. It is equivalent to applying the DES encryption algorithm three times to each data block. Using this encryption method, the random number sequence can be fully encrypted, providing an additional layer of security for information.

[0073] In summary, this embodiment uses the first random number and the second random number to perform two random moves on the data to be processed, resulting in that when an outsider obtains the customer's biometric features, it is impossible to find the corresponding customer information data; and in order to break the data movement rules, it is also necessary to decrypt the triple data encrypted random number sequence, which further reduces the risk of data leakage, prevents the financial system from being attacked, and improves system security.

[0074] The above are some specific implementations of the data encryption method provided in the embodiments of the present application. Based on this, the present application also provides a corresponding device. The device provided in the embodiments of the present application will be introduced from the perspective of functional modularization.

[0075] See also Figure 3 The structure diagram of the data encryption device 300 shown in the figure includes a data acquisition module 301, a sequence acquisition module 302, a moving module 303 and an encryption module 304.

[0076] The data acquisition module 301 is used to acquire data to be processed, wherein the data to be processed includes at least one customer information data, and the customer information data corresponds to the customer's biometric characteristics;

[0077] A number sequence acquisition module 302 is used to acquire a random number sequence, wherein the random number sequence includes at least one random number;

[0078] A moving module 303 is used to use each random number in the random number sequence to move part of the data to be processed so that the customer information data and the customer's biometric features no longer correspond, and the number of moves is equal to the number of random numbers, and the random numbers are used to determine the part of the data to be processed and the movement method thereof;

[0079] The encryption module 304 is used to encrypt and store the random number sequence.

[0080] As a possible implementation, the random number sequence includes: a first random number and a second random number, and the first random number and the second random number are used to determine the data content of each movement.

[0081] As a possible implementation, the mobile module includes:

[0082] A first determining unit is used to determine first mobile data, where the first mobile data is customer information data following the first data in the data to be processed, and a position of the first data in the data to be processed is determined according to the first random number;

[0083] A first moving unit, used for moving the first moving data to the front of the first customer information data in the data to be processed, to obtain first processed data;

[0084] a second determining unit, configured to determine second mobile data, where the second mobile data is customer information data following the second data in the first processed data, and a position of the second data in the first processed data is determined according to the second random number;

[0085] The second moving unit is used to move the second moving data to before the first customer information data in the first processed data to obtain second processed data.

[0086] As a possible implementation, the encryption module includes:

[0087] The encryption unit is used to encrypt and store the random number sequence using a triple data encryption algorithm.

[0088] As a possible implementation manner, the device further includes:

[0089] A timing module is used to determine a timer trigger, and the timer is used to periodically trigger the data encryption method.

[0090] The embodiments of the present application also provide corresponding devices and computer storage media for implementing the solutions provided by the embodiments of the present application.

[0091] The device includes a memory and a processor, the memory is used to store instructions or codes, and the processor is used to execute the instructions or codes so that the device executes the data encryption method described in any embodiment of the present application.

[0092] The computer storage medium stores codes, and when the codes are executed, the device executing the codes implements the data encryption method described in any embodiment of the present application.

[0093] The "first" and "second" in the names such as "first" and "second" (if any) mentioned in the embodiments of the present application are only used as name identifiers and do not represent the first or second in order.

[0094] Through the description of the above implementation methods, it can be known that those skilled in the art can clearly understand that all or part of the steps in the above-mentioned embodiment method can be implemented by means of software plus a general hardware platform. Based on such an understanding, the technical solution of the present application can be embodied in the form of a software product, which can be stored in a storage medium, such as a read-only memory (ROM) / RAM, a magnetic disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network communication device such as a router) to execute the methods described in each embodiment of the present application or some parts of the embodiments.

[0095] Each embodiment in this specification is described in a progressive manner, and the same and similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment. Some or all of the modules can be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative work.

[0096] The above description is merely an exemplary embodiment of the present application and is not intended to limit the protection scope of the present application.

Claims

1. A data encryption method, characterized in that: The method comprises: Acquire data to be processed, wherein the data to be processed includes at least one customer information data, and the customer information data corresponds to a biometric feature of the customer; Obtaining a random number sequence, wherein the random number sequence includes at least one random number; Using each random number in the random number sequence, move part of the data to be processed so that the customer information data and the customer's biometric features no longer correspond, the number of moves being equal to the number of the random numbers, and the random numbers being used to determine part of the data to be processed and the way it is moved; Encrypting and storing the random number sequence; The random number sequence includes: a first random number and a second random number, wherein the first random number and the second random number are used to determine the data content of each movement; The using each random number in the random number sequence to move part of the data to be processed comprises: Determine first mobile data, where the first mobile data is customer information data following the first data in the data to be processed, and a position of the first data in the data to be processed is determined according to the first random number; Moving the first mobile data to before the first customer information data in the data to be processed to obtain first processed data; Determine second mobile data, where the second mobile data is customer information data following the second data in the first processed data, and a position of the second data in the first processed data is determined according to the second random number; The second moved data is moved before the first customer information data in the first processed data to obtain second processed data.

2. The method according to claim 1, characterized in that The step of encrypting and storing the random number sequence comprises: The random number sequence is encrypted and stored using a triple data encryption algorithm.

3. The method according to claim 1, characterized in that The method further comprises: A timer trigger is determined, where the timer is used to periodically trigger the data encryption method.

4. A data encryption device, characterized in that: The device comprises: A data acquisition module, used to acquire data to be processed, wherein the data to be processed includes at least one customer information data, and the customer information data corresponds to the customer's biometric characteristics; A number sequence acquisition module, used to acquire a random number sequence, wherein the random number sequence includes at least one random number; A moving module, used to use each random number in the random number sequence to move part of the data to be processed so that the customer information data and the customer's biometric features no longer correspond, the number of moves being equal to the number of random numbers, and the random numbers being used to determine part of the data to be processed and a moving method thereof; An encryption module, used for encrypting and storing the random number sequence; The random number sequence includes: a first random number and a second random number, wherein the first random number and the second random number are used to determine the data content of each movement; The mobile module comprises: A first determining unit is used to determine first mobile data, where the first mobile data is customer information data following the first data in the data to be processed, and a position of the first data in the data to be processed is determined according to the first random number; A first moving unit, used for moving the first moving data to the front of the first customer information data in the data to be processed, to obtain first processed data; a second determining unit, configured to determine second mobile data, where the second mobile data is customer information data following the second data in the first processed data, and a position of the second data in the first processed data is determined according to the second random number; The second moving unit is used to move the second moving data to before the first customer information data in the first processed data to obtain second processed data.

5. A computer device, characterized in that: The device comprises a memory and a processor, the memory is used to store instructions or codes, and the processor is used to execute the instructions or codes, so that the device executes the data encryption method according to any one of claims 1 to 3.

6. A computer storage medium, characterized in that: The computer storage medium stores codes, and when the codes are executed, the computer storage device executing the codes implements the data encryption method according to any one of claims 1 to 3.

Images