A system, chip, method and apparatus for information processing
By employing a timestamp-generated dynamic key selection scheme in the information processing system, the data security problem caused by the corruption of a single key is solved, achieving higher data security and resistance to sabotage.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- SHANDONG YUNHAI GUOCHUANG CLOUD COMPUTING EQUIP IND INNOVATION CENT CO LTD
- Filing Date
- 2023-04-27
- Publication Date
- 2026-05-05
AI Technical Summary
When data is encrypted or decrypted using a single, unselectable key in existing technologies, the security of data between systems can be severely compromised if the key is compromised externally.
A timestamp-based dynamic key selection scheme is adopted. Through the encryption and decryption modules, the timestamp generation unit generates timestamps, and combined with the key generation and storage units, a set of keys is dynamically selected to encrypt and decrypt data, ensuring that the keys are updated after a certain time interval.
It improves data security during information processing by dynamically selecting keys, enhancing the system's resistance to sabotage and preventing data security from being compromised by a single key breach.
Smart Images

Figure CN116707864B_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of computers, and more particularly to an information processing system, chip, method, and apparatus. Background Technology
[0002] In the process of information processing, it is necessary to encrypt and decrypt data between systems to ensure the security of signal data during communication. In related fields of information processing, a single, unchangeable key is typically used for encryption and decryption. However, if this key is compromised externally and becomes unusable, it will severely impact the data security of the entire system. Summary of the Invention
[0003] In view of this, the present invention proposes an information processing system, chip, method and device, which solves the problem that in the field of information processing, the use of a single, unselectable key for data encryption and decryption can cause serious impacts on the data security of the entire system when the key is damaged and becomes unusable, thus affecting the data security between systems.
[0004] Based on the above objectives, one aspect of the present invention provides an information processing system, comprising: an encryption module, configured to determine a key for encrypting input data from a set of keys based on the result of a modulo operation between a timestamp corresponding to the current time and the number of keys in a set of keys, and to encrypt the input data using the key and then output it; and a decryption module, configured to obtain data to be decrypted containing a key identifier from received data, and to decrypt the data to be decrypted by matching the key corresponding to the key identifier from the set of keys synchronized by the encryption module, and then output it.
[0005] In some embodiments, the encryption module includes: a timestamp generation unit, configured to generate a timestamp of a preset number of bits based on the time, so as to provide a timestamp corresponding to the current time.
[0006] In some embodiments, the encryption module further includes: a key generation unit, used to initialize when the time interval between the generation time of the previous set of keys and the current time exceeds a preset time, so as to generate the set of keys; and a first key storage unit, used to sort the set of keys according to the timestamps provided by the timestamp generation unit, obtain the set of keys marked with key serial numbers, and store them.
[0007] In some embodiments, the timestamp generation unit is further configured to: in response to the encryption module receiving an encryption request, generate a corresponding encryption timestamp based on the time interval between the encryption control signal transitioning from an invalid state to an valid state and provide it to the first key storage unit.
[0008] In some embodiments, the first key storage unit is further configured to: perform a modulo operation based on the encryption timestamp and the number of keys in the set of keys to obtain a first key sequence number corresponding to the key used to encrypt the input data; and match the key used to encrypt the input data from the set of keys marked with the key sequence number based on the first key sequence number.
[0009] In some embodiments, the encryption module further includes: an encryption calculation unit, configured to cache the input data and output the encrypted data after encryption based on the key provided by the first key storage unit.
[0010] In some embodiments, the decryption module includes: an encrypted data preprocessing unit, configured to obtain data to be decrypted containing a key identifier from received data, wherein the key identifier contains a second key sequence number;
[0011] The second key storage unit is used to store the set of keys synchronized by the encryption module, and to determine the key to decrypt the data to be decrypted from the set of keys based on the second key sequence number provided by the encryption data preprocessing unit.
[0012] In some embodiments, the decryption module further includes: a decryption calculation unit, configured to decrypt and output the data to be decrypted based on the data to be decrypted provided by the encrypted data preprocessing unit and the key for decrypting the data to be decrypted provided by the second key storage unit.
[0013] In another aspect of this invention, an information processing chip is provided, comprising: an encryption circuit, configured to determine a key for encrypting input data from a set of keys based on the result of a modulo operation between a timestamp corresponding to the current time and the number of keys in the set of keys, and output the encrypted input data after encrypting it with the key; and a decryption circuit, configured to obtain data to be decrypted containing a key identifier from received data, and decrypt the data to be decrypted by matching the key corresponding to the key identifier from the set of keys synchronized by the encryption module.
[0014] Another aspect of this invention provides an information processing method, comprising: determining, by an encryption module, a key for encrypting input data from a set of keys based on the result of a modulo operation between a timestamp corresponding to the current time and the number of keys in the set of keys; encrypting the input data using the key and then outputting it; and obtaining, by a decryption module, data to be decrypted containing a key identifier from the received data, decrypting the data to be decrypted by matching the key corresponding to the key identifier from the set of keys synchronized by the encryption module, and then outputting it.
[0015] In another aspect of the present invention, a computer device is also provided, including at least one processor; and a memory storing computer instructions executable on the processor, which, when executed by the processor, implement the steps of the above-described method.
[0016] In another aspect of the present invention, a computer-readable storage medium is provided, which stores a computer program that, when executed by a processor, implements the method steps described above.
[0017] The present invention has at least the following beneficial effects: The information processing system proposed in this invention provides a scheme for encrypting and decrypting data by dynamically selecting different keys from a set of keys based on timestamps. The process of dynamically selecting keys from a set of keys for encryption and decryption can improve the security of data during information processing. Attached Figure Description
[0018] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other embodiments can be obtained based on these drawings without creative effort.
[0019] Figure 1 The diagram shown is a structural schematic of an information processing system provided in an embodiment of this application.
[0020] Figure 2 The diagram shown is a structural schematic of an encryption module provided in an embodiment of the present invention;
[0021] Figure 3 The diagram shown is a structural schematic of the decryption module provided in an embodiment of the present invention;
[0022] Figure 4 A flowchart of an information processing method provided in an embodiment of this application is shown;
[0023] Figure 5 This diagram illustrates the structure of a computer device according to an embodiment of the present invention.
[0024] Figure 6 A schematic diagram of the structure of a computer-readable storage medium provided in an embodiment of the present invention is shown. Detailed Implementation
[0025] The following describes embodiments of the present invention. However, it should be understood that the disclosed embodiments are merely examples, and other embodiments may take various alternative forms.
[0026] Furthermore, it should be noted that the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article, or apparatus that comprises a list of elements may include not only those elements but also elements not expressly listed or inherent to such process, method, article, or apparatus.
[0027] One or more embodiments of this application will now be described with reference to the accompanying drawings.
[0028] Based on the above objectives, the first aspect of the present invention provides an embodiment of an information processing system. Figure 1 The diagram shown is a structural schematic of an information processing system provided in an embodiment of this application. Figure 1 As shown, an information processing system includes: an encryption module, configured to determine a key for encrypting input data from a set of keys based on the result of a modulo operation between a timestamp corresponding to the current time and the number of keys in a set of keys, and output the encrypted input data after encrypting it with the key; and a decryption module, configured to obtain data to be decrypted containing a key identifier from the received data, and decrypt the data to be decrypted by matching the key corresponding to the key identifier from the set of keys synchronized by the encryption module.
[0029] According to several embodiments of the present invention, the encryption module includes: a timestamp generation unit, configured to generate a timestamp of a preset number of bits based on the time, so as to provide a timestamp corresponding to the current time.
[0030] According to several embodiments of the present invention, the encryption module further includes: a key generation unit, used to initialize when the time interval between the generation time of the previous set of keys and the current time exceeds a preset time, so as to generate the set of keys; and a first key storage unit, used to sort the set of keys according to the timestamp provided by the timestamp generation unit, obtain the set of keys marked with key serial numbers, and store them.
[0031] According to several embodiments of the present invention, the timestamp generation unit is further configured to: in response to the encryption module receiving an encryption request, generate a corresponding encryption timestamp based on the time interval between the encryption control signal changing from an invalid state to an valid state and provide it to the first key storage unit.
[0032] According to several embodiments of the present invention, the first key storage unit is further configured to: perform a modulo operation based on the encryption timestamp and the number of keys in the set of keys to obtain a first key sequence number corresponding to the key used to encrypt the input data; and match the key used to encrypt the input data from the set of keys marked with the key sequence number based on the first key sequence number.
[0033] According to several embodiments of the present invention, the encryption module further includes: an encryption calculation unit, configured to cache the input data and encrypt and output the data according to the key provided by the first key storage unit for encrypting the input data.
[0034] According to several embodiments of the present invention, the decryption module includes: an encrypted data preprocessing unit, configured to obtain data to be decrypted containing a key identifier from received data, wherein the key identifier contains a second key sequence number;
[0035] The second key storage unit is used to store the set of keys synchronized by the encryption module, and to determine the key to decrypt the data to be decrypted from the set of keys based on the second key sequence number provided by the encryption data preprocessing unit.
[0036] According to several embodiments of the present invention, the decryption module further includes: a decryption calculation unit, configured to decrypt and output the data to be decrypted based on the data to be decrypted provided by the encrypted data preprocessing unit and the key for decrypting the data to be decrypted provided by the second key storage unit.
[0037] The following is another embodiment of an information processing system provided by the present invention.
[0038] An information processing system includes an encryption module and a decryption module. The encryption module performs encryption before information transmission, and the decryption module decrypts the received encrypted information to obtain the original data. Based on a timestamp, different encryption keys are selected from a set of keys to encrypt the data, and a certain security time interval is set. When the application time of the previous key set (the time interval between the generation time of the previous key set and the current time) exceeds this security time interval, the key generation unit automatically generates a new key set. This dynamic key selection and generation mechanism greatly improves the security of the information system.
[0039] Figure 2 The diagram shown is a structural schematic of the encryption module provided in an embodiment of the present invention. Figure 2As shown, the encryption module includes a timestamp generation unit, a key generation unit, a key storage unit, and an encryption calculation unit. The timestamp generation unit generates a fixed-length timestamp (e.g., 10-bit, 13-bit timestamp) based on the current time. The key generation unit generates a new set of random or different-length keys based on the timestamps generated by the timestamp generation unit. The key storage unit stores the keys generated by the key generation unit, assigning a sequence number to each key for key selection. The encryption calculation unit encrypts the input data to be encrypted using the key selected from the key storage unit. After encryption, it outputs an encryption output signal and the encrypted data (including the encryption key required for encryption). The encryption output signal indicates whether the transmission of the encrypted data is valid.
[0040] Figure 3 The diagram shown is a structural schematic of the decryption module provided in an embodiment of the present invention. Figure 3 As shown, the decryption module includes an encrypted data preprocessing unit, a key storage unit, and a decryption calculation unit. The encrypted data preprocessing unit preprocesses the received encrypted data, primarily through three types of preprocessing: first, determining the data category (e.g., key or regular data) based on the data type identifier; second, extracting the key sequence number of the decryption key based on the key sequence number identifier; and third, extracting the data to be decrypted. The key storage unit stores the keys used for decryption. Each key is assigned a sequence number for key selection. The key storage unit selects the corresponding decryption key based on the key sequence number extracted by the encrypted data preprocessing unit and transmits it to the decryption calculation unit. The decryption calculation unit decrypts the encrypted data using the corresponding key. The decrypted data is of two main types (new key group data and regular data), which can be identified based on the data type identifier.
[0041] The information processing system provided in this application can dynamically select different keys from a set of keys to encrypt and decrypt data based on timestamps, thereby improving data security during information processing.
[0042] A second aspect of the present invention provides an information processing chip, comprising: an encryption circuit, configured to determine a key for encrypting input data from a set of keys based on a modulo operation performed on a timestamp corresponding to the current time and the number of keys in the set of keys, and to output the encrypted input data after encrypting it with the key; and a decryption circuit, configured to obtain data to be decrypted containing a key identifier from received data, and to decrypt the data to be decrypted by matching the key corresponding to the key identifier from the set of keys synchronized by the encryption module.
[0043] A third aspect of the embodiments of the present invention provides an information processing method. Figure 4 The diagram shows a flowchart of an information processing method provided by the present invention. Figure 4 As shown, the information processing method provided by the present invention includes:
[0044] S1. The encryption module determines the key to encrypt the input data from the set of keys by performing a modulo operation based on the timestamp corresponding to the current time and the number of keys in the set of keys. The input data is then encrypted using the key and output.
[0045] S2. The decryption module obtains the data to be decrypted containing the key identifier from the received data, matches the key corresponding to the key identifier from the set of keys synchronized by the encryption module, decrypts the data to be decrypted, and outputs it.
[0046] The following is a detailed process for encrypting and decrypting information during information processing.
[0047] (1) If the system runs for the first time or the security interval of the previous key expires (a key security interval can be set in the system. If the interval between the current time obtained by the timestamp generation unit and the key effective time exceeds the set key security interval, the key security interval is considered to have expired), jump to step (2); otherwise, jump to step (9).
[0048] (2) If the system is running for the first time, execute this step; otherwise, jump to step (5). In this step, initialization is required to generate a set of keys. The timestamp generation unit will output a key generation indication signal. After receiving the indication signal, the key generation unit generates N sets of keys. Each key can be of the same or different lengths, such as 128, 256, 512, 1024, etc.
[0049] (3) The key storage unit sorts and stores the keys generated by the key generation unit according to the serial number from smallest to largest. The key storage unit stores the key serial number and the key at the same time. The key serial number is an integer from 0 to N-1. The key serial number and the key are in a one-to-one correspondence. After storage, the key effective time is refreshed.
[0050] (4) After the system runs for the first time, the encryption computing unit encrypts the key sequence number and key stored in step (3) with a fixed key L. The data type identifier position is 0 and the key sequence number identifier position is N. Together with the encrypted data, they form the data to be output. The encryption output signal is set to valid, and the data to be output is output. Then, the process jumps to step (13).
[0051] (5) When the security interval of the previous key expires, the timestamp generation unit generates a 10-bit timestamp M based on the time of the security interval of the previous key, and performs a modulo operation on the timestamp M and the number of key groups N to obtain the result P (P≥0 and P≤N-1). The key storage unit selects the Pth key to output to the encryption calculation unit.
[0052] (6) The timestamp generation unit outputs a new key generation indication signal. When the key generation unit receives the indication signal, it generates N sets of keys. Each key can be of the same or different lengths, such as 128, 256, 512, 1024, etc.
[0053] (7) The key storage unit stores the keys generated by the key generation unit according to the serial number from smallest to largest. The key storage unit stores the key serial number and the key at the same time. The key serial number is an integer from 0 to N-1. The key serial number and the key are in a one-to-one correspondence. After storage, the key validity time is refreshed.
[0054] (8) The encryption calculation unit encrypts the key sequence number and key in step (7) according to the Pth key obtained in step (5), with the data type identifier position set to 0 and the key sequence number identifier position set to P. Together with the encrypted data, they form the data to be output. The encryption output signal is set to valid, and the data to be output is output. Then, the unit jumps to step (13).
[0055] (9) When the system receives an encryption request, the encryption control signal is set to the valid state, and the data to be encrypted is input at the same time. The encryption calculation unit caches the data to be encrypted.
[0056] (10) The timestamp generation unit generates a 10-bit timestamp M based on the time when the encryption control signal changes from an invalid state to an effective state, and performs a modulo operation on the timestamp M and the number of key groups N to obtain the result P (P≥0 and P≤N-1). The timestamp generation unit sends the value of P to the key storage unit.
[0057] (11) The key storage unit selects the corresponding P-th key according to the P value and sends it to the encryption calculation unit;
[0058] (12) After receiving the Pth key, the encryption computing unit uses the key to encrypt the cached data to be encrypted. After encryption, the data type identifier position is 1 and the key sequence number identifier position is P. Together with the encrypted data, they form the data to be output. The encryption output signal is set to valid, and the data to be output is output.
[0059] (13) When the system receives a decryption request, the decryption module receives the input data to be decrypted when the encryption control signal is valid;
[0060] (14) The encrypted data preprocessing unit preprocesses the data to be decrypted, extracting the data type identifier, the key sequence number identifier, and the actual data to be decrypted;
[0061] (15) When the key sequence number is N, it means the system is decrypting for the first time. When the key sequence number is an integer between 0 and N-1 and the data type is 0, it means the security time interval of the previous key has expired and the data transmitted this time is encrypted data with the new key. When the key sequence number is an integer between 0 and N-1 and the data type is 1, it means the data transmitted this time is regular encrypted data.
[0062] (16) When the system is decrypting for the first time, the key storage unit sends a fixed key L to the decryption calculation unit; otherwise, the key storage unit selects the corresponding key according to the key sequence number identifier in step (15) and sends it to the decryption calculation unit.
[0063] (17) The decryption calculation unit uses the key in step (16) to decrypt the actual data to be decrypted, and uses the data type identifier in step (15) to determine the type of the decrypted data. For example, if the type is a key, the key is stored in the key storage unit in ascending order of the serial number, thereby updating the key in the encryption module; if the type is regular data, the decryption output signal is set to valid, and the decrypted data is output at the same time, thereby completing the data decryption and output process.
[0064] (18) Jump to step (1), where the system continuously performs actions such as encryption, decryption, and key update.
[0065] Based on the above steps, which allow for dynamic selection of different keys from a set of keys to encrypt and decrypt data according to timestamps, dynamic key selection from a set of keys can be achieved, improving data security during information processing.
[0066] A fourth aspect of the present invention provides a computer device. Figure 5 The diagram shown is a structural schematic of a computer device provided in an embodiment of the present invention. Figure 5 As shown, an embodiment of the present invention provides a computer device including the following modules: at least one processor 021; and a memory 022, the memory 022 storing computer instructions 023 that can be executed on the processor 021, the computer instructions 023 implementing the steps of the method described above when executed by the processor 021.
[0067] The present invention also provides a computer-readable storage medium. Figure 6 The diagram shown is a structural schematic of a computer-readable storage medium provided in an embodiment of the present invention. Figure 6As shown, computer-readable storage medium 031 stores a computer program 032 that, when executed by a processor, performs the steps of the method described above.
[0068] Finally, it should be noted that those skilled in the art will understand that all or part of the processes in the above embodiments can be implemented by a computer program instructing related hardware. The program for setting system parameters can be stored in a computer-readable storage medium. When executed, the program can include the processes of the embodiments of the above methods. The storage medium for the program can be a magnetic disk, optical disk, read-only memory (ROM), or random access memory (RAM), etc. The above computer program embodiments can achieve the same or similar effects as any of the corresponding foregoing method embodiments.
[0069] Furthermore, the method disclosed in the embodiments of the present invention can also be implemented as a computer program executed by a processor, which may be stored in a computer-readable storage medium. When the computer program is executed by the processor, it performs the functions defined in the method disclosed in the embodiments of the present invention.
[0070] Furthermore, the above-described method steps and system units can also be implemented using a controller and a computer-readable storage medium for storing a computer program that enables the controller to perform the functions of the above-described steps or units.
[0071] Those skilled in the art will also understand that the various exemplary logic blocks, modules, circuits, and algorithm steps described in conjunction with the disclosure herein can be implemented as electronic hardware, computer software, or a combination of both. To clearly illustrate this interchangeability between hardware and software, the functionality of various illustrative components, blocks, modules, circuits, and steps has been generally described. Whether this functionality is implemented as software or as hardware depends on the specific application and the design constraints imposed on the system as a whole. Those skilled in the art can implement the functionality in various ways for each specific application, but such implementation decisions should not be construed as departing from the scope of the embodiments disclosed herein.
[0072] In one or more exemplary designs, functionality may be implemented in hardware, software, firmware, or any combination thereof. If implemented in software, the functionality may be stored as one or more instructions or code on or transmitted via a computer-readable medium. Computer-readable media include computer storage media and communication media, including any medium that facilitates the transfer of a computer program from one location to another. Storage media may be any available medium accessible to a general-purpose or special-purpose computer. By way of example, and not limitation, computer-readable media may include RAM, ROM, EEPROM, CD-ROM or other optical disc storage devices, disk storage devices or other magnetic storage devices, or any other medium that may be used to carry or store the required program code in the form of instructions or data structures and is accessible to a general-purpose or special-purpose computer or a general-purpose or special-purpose processor. Furthermore, any connection may be appropriately referred to as computer-readable media. For example, if software is transmitted from a website, server, or other remote source using coaxial cable, fiber optic cable, twisted pair, digital subscriber line (DSL), or wireless technologies such as infrared, radio, and microwave, then the aforementioned coaxial cable, fiber optic cable, twisted pair, DSL, or wireless technologies such as infrared, radio, and microwave are all included in the definition of media. As used herein, disks and optical discs include compact discs (CDs), laser discs, optical discs, digital versatile discs (DVDs), floppy disks, and Blu-ray discs, where disks typically reproduce data magnetically, while optical discs reproduce data optically using lasers. Combinations of the above should also be included within the scope of computer-readable media.
[0073] The above are exemplary embodiments disclosed in this invention. However, it should be noted that various changes and modifications can be made without departing from the scope of the embodiments of this invention as defined by the claims. The functions, steps, and / or actions of the methods according to the disclosed embodiments described herein do not need to be performed in any particular order. Furthermore, although the elements disclosed in the embodiments of this invention may be described or claimed individually, they may be understood as multiple unless explicitly limited to a singular number.
[0074] It should be understood that, as used herein, the singular form “a” is intended to include the plural form as well, unless the context clearly supports an exception. It should also be understood that, as used herein, “and / or” refers to any and all possible combinations of one or more of the associated listed items.
[0075] The embodiment numbers disclosed in the above embodiments of the present invention are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.
[0076] Those skilled in the art will understand that all or part of the steps of the above embodiments can be implemented by hardware or by a program instructing related hardware. The program can be stored in a computer-readable storage medium, such as a read-only memory, a disk, or an optical disk.
[0077] Those skilled in the art should understand that the discussion of any of the above embodiments is merely exemplary and is not intended to imply that the scope of the invention (including the claims) is limited to these examples. Within the framework of the invention, technical features of the above embodiments or different embodiments can be combined, and many other variations of different aspects of the invention exist, which are not provided in the details for the sake of brevity. Therefore, any omissions, modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the invention should be included within the protection scope of the invention.
Claims
1. An information processing system, characterized in that, include: The encryption module is used to determine the key for encrypting the input data from the set of keys based on the result of modulo operation between the timestamp corresponding to the current time and the number of keys in the set of keys, and output the input data after encrypting it with the key; as well as The decryption module is used to obtain the data to be decrypted containing the key identifier from the received data, match the key corresponding to the key identifier from the set of keys synchronized by the encryption module, decrypt the data to be decrypted, and then output it. The encryption module includes: The timestamp generation unit is used to generate a timestamp of a preset number of bits according to the time, so as to provide the timestamp corresponding to the current time; the timestamp generation unit is further used to: in response to the encryption module receiving an encryption request, generate a corresponding encryption timestamp according to the time interval between the encryption control signal changing from an invalid state to an effective state and provide it to the first key storage unit; A key generation unit is initialized when the time interval between the generation time of the previous set of keys and the current time exceeds a preset time, so as to generate the set of keys; The first key storage unit is used to sort the set of keys according to the timestamps provided by the timestamp generation unit, obtain the set of keys marked with key serial numbers, and store them. The first key storage unit is further configured to: perform a modulo operation based on the encryption timestamp and the number of keys in the set of keys to obtain a first key sequence number corresponding to the key used to encrypt the input data; and match the key used to encrypt the input data from the set of keys marked with key sequence numbers based on the first key sequence number.
2. The system according to claim 1, characterized in that, The encryption module also includes: An encryption calculation unit is used to cache the input data and encrypt it according to the key provided by the first key storage unit before outputting it.
3. The system according to claim 1, characterized in that, The decryption module includes: An encrypted data preprocessing unit is used to obtain data to be decrypted containing a key identifier from received data, wherein the key identifier contains a second key sequence number; The second key storage unit is used to store the set of keys synchronized by the encryption module, and to determine the key to decrypt the data to be decrypted from the set of keys based on the second key sequence number provided by the encryption data preprocessing unit.
4. The system according to claim 3, characterized in that, The decryption module also includes: The decryption calculation unit is used to decrypt the data to be decrypted based on the encrypted data preprocessing unit and the key for decrypting the data to be decrypted provided by the second key storage unit, and then output the result.
5. An information processing chip, characterized in that, include: An encryption circuit is used to determine a key for encrypting input data from a set of keys based on the result of a modulo operation between the timestamp corresponding to the current time and the number of keys in a set of keys, and then outputs the encrypted input data using the key. as well as The decryption circuit is used to obtain the data to be decrypted containing the key identifier from the received data, and to decrypt the data to be decrypted by matching the key corresponding to the key identifier from the set of keys synchronized by the encryption circuit and then outputting it. The encryption circuit includes: A timestamp generation unit is used to generate a timestamp of a preset number of bits according to the time, so as to provide a timestamp corresponding to the current time; the timestamp generation unit is further used to: in response to the encryption circuit receiving an encryption request, generate a corresponding encryption timestamp according to the time interval between the encryption control signal changing from an invalid state to an effective state and provide it to the first key storage unit; A key generation unit is initialized when the time interval between the generation time of the previous set of keys and the current time exceeds a preset time, so as to generate the set of keys; The first key storage unit is used to sort the set of keys according to the timestamps provided by the timestamp generation unit, obtain the set of keys marked with key serial numbers, and store them. The first key storage unit is further used for: The first key sequence number corresponding to the key used to encrypt the input data is obtained by performing a modulo operation based on the encryption timestamp and the number of keys in the set of keys; The key used to encrypt the input data is matched from the set of keys marked with the first key number.
6. An information processing method, characterized in that, include: The encryption module determines the key to encrypt the input data from the set of keys by performing a modulo operation based on the timestamp corresponding to the current time and the number of keys in the set of keys. The input data is then encrypted using the key and output. The decryption module obtains the data to be decrypted, which contains the key identifier, from the received data. The encryption module matches the key corresponding to the key identifier from the set of keys synchronized by the encryption module to decrypt the data to be decrypted and output it. The encryption module is also configured to: The timestamp generation unit generates a timestamp of a preset number of bits based on the time to provide the timestamp corresponding to the current time; the timestamp generation unit is further configured to: in response to the encryption module receiving an encryption request, generate a corresponding encryption timestamp based on the time interval between the encryption control signal changing from an invalid state to an valid state and provide it to the first key storage unit; The key generation unit of the encryption module is initialized when the time interval between the generation time of the previous set of keys and the current time exceeds a preset time, so as to generate the set of keys. The first key storage unit sorts the set of keys according to the timestamps provided by the timestamp generation unit to obtain the set of keys marked with key serial numbers and stores them. The first key storage unit is further configured to: perform a modulo operation based on the encryption timestamp and the number of keys in the set of keys to obtain a first key sequence number corresponding to the key used to encrypt the input data; and match the key used to encrypt the input data from the set of keys marked with key sequence numbers based on the first key sequence number.
7. An information processing device, characterized in that, include: At least one processor; as well as A memory storing computer instructions that can run on the processor, wherein the memory executes the instructions to perform the method of claim 6.
Citation Information
Patent Citations
Communication method, Internet of Things terminal, gateway device and Internet of Things system
CN114499828A