A method and system for secure encryption of insurance data

The process of insurance data through multi-level encryption methods has solved the problem of insufficient security of sensitive information in the existing technology, and achieved the effect of improving the security of sensitive information in the database and increasing the difficulty of cracking. It is suitable for data protection needs of the insurance industry.

CN118586019BActive Publication Date: 2024-12-10ZHESHANG PROPERTY INSURANCE CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202411069485.X
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2024-08-06
Publication Date
2024-12-10
Estimated Expiration
2044-08-06

AI Technical Summary

Technical Problem

The existing insurance data encryption technology is insufficient in improving the security of sensitive information in databases and increasing the difficulty of cracking, and cannot effectively deal with the risk of leakage of a large number of individual sensitive information in the insurance industry.

Method used

Multi-level encryption method is adopted to form complex encryption rules by splitting contract encoding and other insurance data, hashing operations, chaotic sequence generation and multiple secret key encryption by splitting contract encoding and other insurance data, and to improve data security and cracking difficulty.

Benefits of technology

It significantly improves the security of sensitive information stored in the database, increases the difficulty of cracking and modifying insurance data, and improves the practical application effect of information protection.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN118586019B_ABST
    Figure CN118586019B_ABST
Patent Text Reader

Abstract

The present invention relates to the field of information security technology, and in particular to a method and system for secure encryption of insurance data. The method comprises the following steps: obtaining insurance data to be securely encrypted, encrypting the contract code, and obtaining a first secret key; splitting other insurance data into multiple data segments of the same size, performing a first hash operation on the data segments, obtaining new data segments and encrypting them, and obtaining multiple encrypted data segments; obtaining a first sequence, and obtaining intermediate parameters through the numbering of the data segments and the first sequence; performing a second hash operation in combination with the byte length of the first secret key and the byte length of the encrypted data segment to obtain a hash operation result; generating a second secret key according to the hash operation result, encrypting the intermediate parameters and the encrypted data segment through the second secret key, and obtaining a first ciphertext; obtaining a third secret key, and using the third secret key to encrypt the first ciphertext to obtain a final ciphertext. The present invention improves encryption security by encrypting insurance data at multiple levels.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to an insurance data security encryption method and system. Background Art

[0002] The background technology of insurance data security encryption mainly involves the development history of data encryption technology and its application needs in the insurance industry. With the rapid development and popularization of information technology, network security and information protection are increasingly valued. In the insurance industry, since a large amount of personal sensitive information, such as identity information, financial status, health status, etc., is involved, once this information is leaked or illegally obtained, it will bring serious privacy leakage and economic loss risks to customers. Therefore, the application of insurance data security encryption technology is particularly important.

[0003] The development of data encryption technology has gone through several stages. Early data encryption technology was relatively simple and less secure, mainly based on methods such as substitution and replacement. How to improve the security of sensitive information stored in the database and increase the difficulty of cracking insurance data is a problem that needs to be solved urgently. Summary of the invention

[0004] In view of the shortcomings of the existing methods and the needs of practical applications, in order to improve the security of sensitive information stored in the database, the problem of increasing the difficulty of decrypting insurance data is solved. On the one hand, the present invention provides a method for secure encryption of insurance data, which comprises the following steps: obtaining insurance data to be securely encrypted, the insurance data including a contract code and other insurance data; encrypting the contract code by a first encryption algorithm to obtain a first key; splitting the other insurance data into multiple data segments of the same size, performing a first hash operation on the data segment, obtaining a characteristic value of the corresponding data segment, and placing the characteristic value at the beginning of the corresponding data segment to obtain a new data segment; encrypting the new data segment to obtain multiple encrypted data segments; obtaining a first sequence, obtaining an intermediate parameter by the number of the data segment and the first sequence; performing a second hash operation in combination with the byte length of the first key and the byte length of the encrypted data segment to obtain a hash operation result; generating a second key according to the hash operation result by a second encryption algorithm, encrypting the intermediate parameter and the encrypted data segment by the second key to obtain a first ciphertext; obtaining a third key, encrypting the first ciphertext by the third key to obtain a final ciphertext. The present invention collects insurance data by contract code, encrypts the contract code to obtain a first secret key, and encrypts the data segment with increased characteristic values ​​again in combination with the introduced chaotic first sequence. Finally, two secret keys are set to repeatedly encrypt the ciphertext to form a multi-level regular encryption method, which effectively improves the security of sensitive information stored in the database and increases the difficulty of cracking and modifying insurance data.

[0005] Optionally, the other insurance data is split into multiple data segments of the same size, satisfying ,in, Indicates the number of divided data segments. Indicates the byte length of other insurance data, represents a rounding function; performing a first hash operation on the data segment to obtain a characteristic value of the corresponding data segment satisfies the following formula: ,in, Indicates data segment The characteristic value of Indicates the data segment, represents the modulo operation, and The present invention further ensures the reliability of the present invention by splitting the insurance data, obtaining the characteristic value of each data segment, and setting the first hash operation parameter.

[0006] Optionally, encrypting the new data segment to obtain multiple encrypted data segments includes the following steps: setting an encryption function and an encryption function selection rule; completing encryption of the new data segment according to the encryption function selection rule to obtain multiple encrypted data segments. The encryption function and encryption function selection rule set in the present invention increase the difficulty of decrypting encrypted data and further improve the encryption security of insurance data.

[0007] Optionally, the acquisition of the first sequence includes the following steps: setting the initial value and parameters of the Logistic map to obtain the first layer of chaotic sequence; using each data of the first layer of chaotic sequence as the initial value of the Cubic map to obtain the first chaotic composite sequence; dynamically adjusting the parameters of the Logistic map and the Cubic map to obtain the chaotic mapping model; adjusting the initial value, combining the chaotic mapping model and the adjusted initial value to obtain the second chaotic composite sequence; setting a judgment threshold, combining the judgment threshold, the first chaotic composite sequence and the second chaotic composite sequence to obtain the first chaotic composite sequence binary sequence and the second chaotic composite sequence binary sequence; bitwise XORing the first chaotic composite sequence binary sequence and the second chaotic composite sequence binary sequence to obtain the first sequence. The present invention constructs a chaotic mapping model and obtains multiple composite sequence binary sequences through the judgment threshold. The first sequence finally obtained avoids the limitations of ordinary random sequences and further improves the encryption capability of the present invention.

[0008] Optionally, obtaining the intermediate parameter through the number of the data segment and the first sequence includes the following steps: fusing the number of the data segment and the first sequence according to a preset rule to obtain a new sequence; intercepting a sequence of a preset length in the new sequence, and encrypting the sequence of the preset length using a preset encryption algorithm to obtain the intermediate parameter. The present invention improves the ability of the present invention to encrypt insurance data through customized rules.

[0009] Optionally, the second hash operation is performed in combination with the byte length of the first secret key and the byte length of the encrypted data segment to obtain a hash operation result that satisfies the following formula: ,in, Represents the hash operation result, Represents the hash address of the encrypted data segment, represents a pseudo-random number sequence, , Indicates the number of divided data segments. represents the modulo operation, Indicates the byte length of the first secret key, The present invention uses the byte length of the first secret key and the byte length of the encrypted data segment to obtain a hash operation result, which is simple to calculate and is conducive to improving the encryption efficiency of the present invention.

[0010] Optionally, generating a second secret key according to the hash operation result by using a second encryption algorithm includes the following steps: generating a random number, combining the random number and the hash operation result to obtain a random feature value; encrypting the random feature value by using the second encryption algorithm to obtain a second secret key; combining the random number and the hash operation result to obtain a random feature value satisfies the following formula: ,in, represents a random eigenvalue, Indicates the encrypted data segment, Represents the hash operation result, The present invention uses the random number and the random characteristic value obtained by the hash operation result to further increase the complexity of the second secret key, which is beneficial to improving the encryption effect of the present invention.

[0011] Optionally, the obtaining of the third secret key comprises the following steps: setting a password sequence; obtaining the front part of the third secret key by a third encryption algorithm according to the byte length of the first ciphertext; obtaining the rear part of the third secret key by a fourth encryption algorithm according to the byte length of the second secret key; and obtaining the third secret key by combining the front part of the third secret key, the rear part of the third secret key and the password sequence. The present invention uses a custom password sequence and sets encryption rules to obtain the third secret key, which further increases the difficulty of cracking the encryption algorithm of the present invention.

[0012] Optionally, the first encryption algorithm, the second encryption algorithm, the third encryption algorithm and the second encryption algorithm are a combination of one or more of arithmetic operations, scientific calculations, programming operations and statistical operations. The present invention further improves the diversity of the encryption algorithm of the present invention by setting various mathematical calculations to define encryption algorithms, and increases the difficulty of cracking encrypted insurance data.

[0013] In the second aspect, in order to efficiently execute the insurance data security encryption method provided by the present invention, the present invention also provides an insurance data security encryption system, including a processor, an input device, an output device and a memory, wherein the processor, the input device, the output device and the memory are interconnected, wherein the memory is used to store a computer program, the computer program includes program instructions, and the processor is configured to call the program instructions to execute the insurance data security encryption method as described in the first aspect of the present invention. The insurance data security encryption system of the present invention has a compact structure and stable performance, and can stably execute the insurance data security encryption method provided by the present invention, further improving the overall applicability and practical application capabilities of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] Figure 1 A flow chart of a method for securely encrypting insurance data provided by an embodiment of the present invention;

[0015] Figure 2 A framework diagram of an insurance data security encryption system provided by an embodiment of the present invention;

[0016] Figure 3 A schematic diagram of the structure of an insurance data security encryption device provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0017] The specific embodiments of the present invention will be described in detail below. It should be noted that the embodiments described herein are only for illustration and are not intended to limit the present invention. In the following description, a large number of specific details are set forth in order to provide a thorough understanding of the present invention. However, it is obvious to those of ordinary skill in the art that these specific details do not need to be adopted to implement the present invention. In other examples, in order to avoid confusing the present invention, known circuits, software or methods are not specifically described.

[0018] Throughout the specification, references to "one embodiment," "an embodiment," "an example," or "an example" mean that a particular feature, structure, or characteristic described in conjunction with the embodiment or example is included in at least one embodiment of the present invention. Therefore, the phrases "in one embodiment," "in an embodiment," "an example," or "an example" appearing in various places throughout the specification do not necessarily all refer to the same embodiment or example. In addition, particular features, structures, or characteristics may be combined in one or more embodiments or examples in any suitable combination and / or subcombination. In addition, it should be understood by those of ordinary skill in the art that the figures provided herein are for illustrative purposes and that the figures are not necessarily drawn to scale.

[0019] See also Figure 1 In order to effectively improve the security of sensitive information stored in the database and increase the difficulty of decrypting and modifying insurance data, the present invention provides an insurance data security encryption method, such as Figure 1 As shown, the method comprises the following steps:

[0020] S1. Obtain insurance data to be securely encrypted, wherein the insurance data includes a contract code and other insurance data.

[0021] In an optional embodiment, the insurance data includes policy data, claims data, customer data and behavior data, wherein the policy data includes specific information of the insurance contract, such as contract code, policy type, insured amount, premium, and policy holder. These data are the basis for insurance companies to understand customer needs, conduct risk assessment and pricing; claims data is the lowest probability but highest value part of insurance data, which records information such as claim application, processing process and results, such as the time of occurrence, liability, reason, amount, settlement date, etc. of the claim, which are crucial for insurance companies to analyze risks, optimize product design and improve customer service quality; customer data includes customer personal information, contact information, policy purchase records, etc. By analyzing these data, insurance companies can better understand customer behavior and needs, and provide a basis for formulating personalized products and providing high-quality services; behavior data covers various behaviors of customers, such as effectiveness, cancellation, addition of insurance, reduction of insurance, location, movement, traffic, etc. By analyzing these data, insurance companies can gain insight into customer consumption habits and changes in demand, and provide a basis for providing personalized services. In the embodiment, the insurance data to be securely encrypted is split into contract codes and other insurance data, and the other insurance data is grouped around the contract codes, which is beneficial to the encryption management of insurance data files.

[0022] Furthermore, the insurance data to be securely encrypted described in step S1 may be retrieved from a database or storage device of the insurance company that stores the insurance data to be securely encrypted.

[0023] S2. Encrypt the contract code using a first encryption algorithm to obtain a first secret key.

[0024] In another specific embodiment, the contract code is the last 8 digits of the insured's ID number + the contract signing date + the insurance product code. For example, the insured A with an ID number of 121212********5678 purchases an insurance product with an insurance product code of 20240001 on January 1, 2024, then the contract code is ****56782024010120240001; further, the first encryption algorithm is to convert the contract code into binary, accumulate it and place the accumulated result at the end of the contract code, and then convert the synthesized new contract code into hexadecimal data, and use this hexadecimal data as the first secret key; it can be understood that the first encryption algorithm provided in this embodiment is only one of the four arithmetic operations, scientific calculations, programming operations, and statistical operations. In other embodiments, the first encryption algorithm can also be set to a combination of one or more of the four arithmetic operations, scientific calculations, programming operations, and statistical operations.

[0025] S3. Split the other insurance data into multiple data segments of the same size, perform a first hash operation on the data segments, obtain characteristic values ​​of corresponding data segments, and place the characteristic values ​​at the beginning of the corresponding data segments to obtain new data segments.

[0026] In an optional embodiment, the other insurance data is split into multiple data segments of the same size to meet ,in, Indicates the number of divided data segments. Indicates the byte length of other insurance data, represents a rounding function; performing a first hash operation on the data segment to obtain a characteristic value of the corresponding data segment, which satisfies the following formula: ,in, Indicates data segment The characteristic value of Indicates the data segment, represents the modulo operation, and Represents the first hash operation parameter, and Can be customized to encrypt different insurance data.

[0027] Furthermore, a characteristic value of the corresponding data segment is obtained, and the characteristic value is placed at the beginning of the corresponding data segment to obtain a new data segment. In other embodiments, the characteristic value can also be placed at other specified positions of the data segment to obtain a new data segment to improve the ability of insurance data to resist cracking.

[0028] S4. Encrypt the new data segment to obtain multiple encrypted data segments.

[0029] In another embodiment, the step S4 of encrypting the new data segment to obtain multiple encrypted data segments includes the following steps: setting an encryption function and encryption function selection rules; completing encryption of the new data segment according to the encryption function selection rules to obtain multiple encrypted data segments.

[0030] Specifically, encryption functions include one-way hash encryption, symmetric encryption, asymmetric encryption and hybrid encryption. One-way hash encryption converts information of any length into fixed-length output through hash calculation. This calculation process is one-way, that is, the input information cannot be restored from the fixed-length output information. Common one-way hash encryption algorithms include MD5, SHA1, SHA256, etc. In symmetric encryption, the same key is used for encryption and decryption. Common symmetric encryption algorithms include AES (Advanced Encryption Standard), DES (Data Encryption Standard) and 3DES, etc. Asymmetric encryption uses two keys: public key and private key. The public key is used to encrypt data, while the private key is used to decrypt data. Common asymmetric encryption algorithms include RSA, ECC (Elliptic Curve Cryptography), etc. Hybrid encryption combines the advantages of symmetric encryption and asymmetric encryption. It uses asymmetric encryption to securely exchange symmetric encryption keys, and then uses symmetric encryption to encrypt actual data. This method not only ensures the security of key exchange, but also improves the efficiency of data encryption.

[0031] Furthermore, the encryption function selection rule is a custom rule, for example, 5 encryption functions are set and numbered accordingly, and the encryption function with the corresponding number is matched according to the sequence number of the new data segment, and then encryption is performed accordingly. In other embodiments, other custom rules may also be used.

[0032] S5. Obtain a first sequence, and obtain an intermediate parameter through the number of the data segment and the first sequence.

[0033] In an optional embodiment, the obtaining of the first sequence described in step S5 includes the following steps: setting the initial value and parameters of the Logistic mapping to obtain a first-layer chaotic sequence; using each data of the first-layer chaotic sequence as the initial value of the Cubic mapping to obtain a first chaotic composite sequence; dynamically adjusting the parameters of the Logistic mapping and the parameters of the Cubic mapping to obtain a chaotic mapping model; adjusting the initial value, combining the chaotic mapping model and the adjusted initial value to obtain a second chaotic composite sequence; setting a judgment threshold, combining the judgment threshold, the first chaotic composite sequence and the second chaotic composite sequence to obtain a first chaotic composite sequence binary sequence and a second chaotic composite sequence binary sequence; bitwise XORing the first chaotic composite sequence binary sequence and the second chaotic composite sequence binary sequence to obtain the first sequence.

[0034] Furthermore, in the embodiment, the parameters of the Logistic mapping and the Cubic mapping are dynamically adjusted to obtain a chaotic mapping model that satisfies the following formula: ,in, Represents the parameters of the Logistic mapping, Indicates the parameters of the Cubic mapping. Indicates is the value iterated by the initial value through Cubic mapping, Indicates the initial value after the Logistic mapping value.

[0035] Furthermore, in the embodiment, the judgment threshold, the first chaotic composite sequence and the second chaotic composite sequence are combined to obtain the first chaotic composite sequence binary sequence and the second chaotic composite sequence binary sequence, which satisfy the following formula: ,in, Represents the first chaotic composite sequence binary sequence and the second chaotic composite sequence binary sequence code, represents the first chaotic composite sequence and the second chaotic composite sequence code, Indicates the judgment threshold.

[0036] It should be understood that before adjusting the initial value, the previous sequence of the chaos mapping model iteration should be discarded to ensure that the chaos mapping model enters a chaotic state.

[0037] In another embodiment, the step S5 of obtaining the intermediate parameters through the number of the data segment and the first sequence includes the following steps: fusing the number of the data segment and the first sequence according to a preset rule to obtain a new sequence; intercepting a preset length sequence in the new sequence, and encrypting the preset length sequence using a preset encryption algorithm to obtain the intermediate parameters.

[0038] In an embodiment, the data segment numbers and the first sequence are merged according to a preset rule to obtain a new sequence, including the following steps: the data segment numbers are matched with the first sequence one by one in a cyclic manner from large to small and then from small to large, and the results corresponding to each number are obtained by using a modulo algorithm to form a new sequence; a sequence of a preset length in the new sequence is intercepted, and the sequence of the preset length is encrypted using a preset encryption algorithm, and the intermediate parameter is obtained by the following steps: arrive The sequence segment is encrypted using the preset encryption function Encrypt(), and the encryption result is the intermediate parameter.

[0039] S6. Perform a second hash operation based on the byte length of the first secret key and the byte length of the encrypted data segment to obtain a hash operation result.

[0040] In yet another embodiment, the second hash operation is performed in combination with the byte length of the first secret key and the byte length of the encrypted data segment to obtain a hash operation result that satisfies the following formula: ,in, Represents the hash operation result, Represents the hash address of the encrypted data segment, represents a pseudo-random number sequence, , Indicates the number of divided data segments. represents the modulo operation, Indicates the byte length of the first secret key, Indicates the byte length of the encrypted data segment.

[0041] S7. Generate a second secret key according to the hash operation result using a second encryption algorithm, encrypt the intermediate parameter and the encrypted data segment using the second secret key, and obtain a first ciphertext.

[0042] The step S7 of generating a second secret key according to the hash operation result by using a second encryption algorithm includes the following steps: generating a random number, combining the random number and the hash operation result to obtain a random feature value; encrypting the random feature value by using a second encryption algorithm to obtain a second secret key; combining the random number and the hash operation result to obtain a random feature value satisfies the following formula: ,in, represents a random eigenvalue, Indicates the encrypted data segment, Represents the hash operation result, Represents a random number.

[0043] S8. Obtain a third secret key, and use the third secret key to encrypt the first ciphertext to obtain a final ciphertext.

[0044] In one embodiment, obtaining the third secret key includes the following steps: setting a password sequence; obtaining the front part of the third secret key through a third encryption algorithm according to the byte length of the first ciphertext; obtaining the rear part of the third secret key through a fourth encryption algorithm according to the byte length of the second secret key; and obtaining the third secret key by combining the front part of the third secret key, the rear part of the third secret key and the password sequence.

[0045] The first ciphertext is encrypted using the third secret key to obtain a final ciphertext, which satisfies the following formula: C=Rijndael(R, key), where C represents the final ciphertext, Rijndael() represents the encryption function, R represents the first ciphertext, and key represents the third secret key.

[0046] Furthermore, in the embodiment, the first encryption algorithm, the second encryption algorithm, the third encryption algorithm and the second encryption algorithm are a combination of one or more of arithmetic operations, scientific calculations, programming operations and statistical operations.

[0047] See also Figure 2 , Figure 2 This is a framework diagram of an insurance data security encryption system of the present invention. In an embodiment, in order to efficiently execute an insurance data security encryption method provided by the present invention, the present invention also provides an insurance data security encryption system, including: an input device, an output device, a processor, and a memory. The input device, the output device, the processor, and the memory are interconnected. The memory contains program instructions, and the program instructions are used for the steps of the insurance data security encryption method. The insurance data security encryption system of the present invention has a compact structure and stable performance, and can stably execute an insurance data security encryption method of the present invention, further improving the overall applicability and practical application capabilities of the present invention.

[0048] In an optional embodiment, the processor may be a central processing unit (CPU), which may also be other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or the processor may be any conventional processor, etc. An input device may be used to obtain data information. An output device may be used to output the results obtained by storing program instructions contained in a computer program in a memory provided by the present invention. The memory may include a read-only memory and a random access memory, and provide instructions and data to the processor. A portion of the memory may also include a non-volatile random access memory.

[0049] In yet another alternative embodiment, see Figure 3 , Figure 3 The present invention provides a schematic diagram of the structure of an insurance data security encryption device. In order to efficiently execute the insurance data security encryption method provided by the present invention, the present embodiment also provides an insurance data security encryption device, such as Figure 3 As shown, including:

[0050] The memory 10 is used to store computer programs; the processor 20 is used to execute the computer programs to implement the above-mentioned insurance data security encryption method.

[0051] Memory 10 , processor 20 , communication interface 31 and communication bus 32 . Memory 10 , processor 20 , communication interface 31 all communicate with each other via communication bus 32 .

[0052] In an embodiment, the memory 10 is used to store one or more programs, and the program may include program code, and the program code includes computer operation instructions. In an embodiment of the present application, the memory 10 may store a program for implementing the following functions: obtaining insurance data to be securely encrypted, the insurance data including a contract code and other insurance data; encrypting the contract code by a first encryption algorithm to obtain a first key; splitting the other insurance data into multiple data segments of the same size, performing a first hash operation on the data segments, obtaining characteristic values ​​of the corresponding data segments, and placing the characteristic values ​​at the beginning of the corresponding data segments to obtain new data segments; encrypting the new data segments to obtain multiple encrypted data segments; obtaining a first sequence, and obtaining intermediate parameters by the number of the data segments and the first sequence; performing a second hash operation in combination with the byte length of the first key and the byte length of the encrypted data segment to obtain a hash operation result; generating a second key according to the hash operation result by a second encryption algorithm, encrypting the intermediate parameters and the encrypted data segment by the second key to obtain a first ciphertext; obtaining a third key, and encrypting the first ciphertext by the third key to obtain a final ciphertext.

[0053] In a possible implementation, the memory 10 may include a program storage area and a data storage area, wherein the program storage area may store an operating system and an application required for at least one function, etc.; the data storage area may store data created during use.

[0054] In addition, the memory 10 may include a read-only memory and a random access memory, and provide instructions and data to the processor. A portion of the memory may also include an NVRAM. The memory stores an operating system and operating instructions, executable modules or data structures, or a subset thereof, or an extended set thereof, wherein the operating instructions may include various operating instructions for implementing various operations. The operating system may include various system programs for implementing various basic tasks and processing hardware-based tasks.

[0055] The processor 20 may be a central processing unit (CPU), an application specific integrated circuit, a digital signal processor, a field programmable gate array or other programmable logic device, a microprocessor or any conventional processor, etc. The processor 20 may call a program stored in the memory 10 .

[0056] The communication interface 31 may be an interface of a communication module, and is used to connect to other devices or systems.

[0057] Of course, it should be noted that Figure 3The structure shown does not constitute a limitation on the insurance data security encryption device in this embodiment. In actual applications, the insurance data security encryption device may include Figure 3 More or fewer components than shown, or combinations of certain components.

[0058] The embodiment also provides a storage medium having a computer program stored thereon, and when the computer program is executed by a processor, the steps of the above-mentioned insurance data security encryption method are implemented.

[0059] The storage medium may include: a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and other media that can store program codes.

[0060] In summary, the present invention effectively improves the security of sensitive information stored in the database and increases the difficulty of decrypting and modifying insurance data. Therefore, the present invention effectively overcomes various shortcomings in the prior art and has high industrial utilization value.

[0061] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein by equivalents. These modifications or replacements do not deviate the essence of the corresponding technical solutions from the scope of the technical solutions of the embodiments of the present invention, and they should all be included in the scope recorded in the present invention.

Claims

1. A method for secure encryption of insurance data, characterized in that: The insurance data security encryption method comprises the following steps: Acquire insurance data to be securely encrypted, the insurance data including a contract code and other insurance data; Encrypt the contract code using a first encryption algorithm to obtain a first secret key; Splitting the other insurance data into multiple data segments of the same size, performing a first hash operation on the data segments to obtain characteristic values ​​of corresponding data segments, and placing the characteristic values ​​at the beginning of the corresponding data segments to obtain new data segments; Encrypting the new data segment to obtain multiple encrypted data segments; Acquire a first sequence, and obtain an intermediate parameter through the number of the data segment and the first sequence; Perform a second hash operation based on the byte length of the first secret key and the byte length of the encrypted data segment to obtain a hash operation result; Generate a second secret key according to the hash operation result by using a second encryption algorithm, and encrypt the intermediate parameter and the encrypted data segment by using the second secret key to obtain a first ciphertext; Obtaining a third secret key, and using the third secret key to encrypt the first ciphertext to obtain a final ciphertext; The step of obtaining the first sequence comprises the following steps: Set the initial value and parameters of the Logistic map to obtain the first layer of chaotic sequence; Each data of the first layer chaotic sequence is used as the initial value of the Cubic mapping to obtain the first chaotic composite sequence; Dynamically adjust the parameters of the Logistic mapping and the Cubic mapping to obtain a chaotic mapping model; Adjusting the initial value, combining the chaotic mapping model and the adjusted initial value, to obtain a second chaotic composite sequence; Setting a judgment threshold, combining the judgment threshold, the first chaotic composite sequence and the second chaotic composite sequence to obtain a first chaotic composite sequence binary sequence and a second chaotic composite sequence binary sequence; Perform bitwise XOR on the first chaotic composite sequence binary sequence and the second chaotic composite sequence binary sequence to obtain the first sequence; The step of obtaining the intermediate parameter by using the number of the data segment and the first sequence comprises the following steps: Merging the serial number of the data segment and the first sequence according to a preset rule to obtain a new sequence; A sequence of preset length in the new sequence is intercepted, and the sequence of preset length is encrypted using a preset encryption algorithm to obtain the intermediate parameter.

2. The insurance data security encryption method according to claim 1, characterized in that: The other insurance data is split into multiple data segments of the same size, satisfying ,in, Indicates the number of divided data segments. Indicates the byte length of other insurance data, Represents the rounding function; The first hash operation is performed on the data segment to obtain a characteristic value of the corresponding data segment, which satisfies the following formula: , in, Indicates data segment The characteristic value of Indicates the data segment, represents the modulo operation, and Indicates the first hash operation parameter.

3. The insurance data security encryption method according to claim 1, characterized in that: The step of encrypting the new data segment to obtain a plurality of encrypted data segments comprises the following steps: Set encryption functions and encryption function selection rules; According to the encryption function selection rule, the new data segment is encrypted to obtain multiple encrypted data segments.

4. The insurance data security encryption method according to claim 1, characterized in that: The second hash operation is performed in combination with the byte length of the first secret key and the byte length of the encrypted data segment to obtain a hash operation result that satisfies the following formula: , in, Represents the hash operation result, Represents the hash address of the encrypted data segment, represents a pseudo-random number sequence, , Indicates the number of divided data segments. represents the modulo operation, Indicates the byte length of the first secret key, Indicates the byte length of the encrypted data segment.

5. The insurance data security encryption method according to claim 1, characterized in that: Generating a second secret key according to the hash operation result by using a second encryption algorithm includes the following steps: Generate a random number, and combine the random number with the hash operation result to obtain a random feature value; Encrypting the random characteristic value using a second encryption algorithm to obtain a second secret key; The random number and the hash operation result are combined to obtain a random feature value that satisfies the following formula: , in, represents a random eigenvalue, Indicates the encrypted data segment, Represents the hash operation result, Represents a random number.

6. The insurance data security encryption method according to claim 1, characterized in that: The step of obtaining the third secret key comprises the following steps: Set password sequence; Obtaining a front part of a third secret key by using a third encryption algorithm according to the byte length of the first ciphertext; Obtaining the rear part of the third secret key by using a fourth encryption algorithm according to the byte length of the second secret key; The third key is obtained by combining the front part of the third key, the rear part of the third key and the password sequence.

7. The insurance data security encryption method according to claim 6, characterized in that: The first encryption algorithm, the second encryption algorithm, the third encryption algorithm and the second encryption algorithm are a combination of one or more of arithmetic operations, scientific calculations, programming operations and statistical operations.

8. An insurance data security encryption system, characterized in that: The insurance data security encryption system includes: an input device, an output device, a processor, and a memory. The input device, output device, processor, and memory are interconnected. The memory includes program instructions, and the program instructions are used to execute the insurance data security encryption method described in any one of claims 1-7.