A data encryption and decryption processing method, device and medium based on confusion module component

Abstract

The present invention discloses a data encryption and decryption processing method, device and medium based on obfuscated module components, the method comprises: S1 initialization step: calculating system parameters according to security parameters, the system parameters include coding module base, coding random number, encryption module base, number of encryption module bases and number of obfuscated module components; S2 message encoding: encoding message bits into plain text based on coding module base and coding random number; S3 key generation: generating key through number of encryption module base and number of obfuscated module components; S4 encryption: encrypting plain text into cipher text through key and encryption module base; S5 homomorphic calculation: server performs homomorphic calculation on cipher text through encryption module base; S6 decryption: decrypting cipher text through key based on homomorphic calculation result. The present invention greatly improves the security of data without significantly increasing the computational complexity.

Description

Technical Field

[0001] The present invention relates to the field of data processing security technology, and more specifically to a data encryption and decryption processing method, device and medium based on obfuscated module components. Background Art

[0002] In modern information security, data confidentiality, integrity and availability are crucial. With the widespread use of the Internet and digital communications, encryption technology has become a key means of protecting data from unauthorized access and tampering. Traditional encryption algorithms such as AES and RSA perform well in many scenarios, but in the face of increasingly complex attack methods and higher requirements for computing performance, it is particularly necessary to explore new encryption and decryption methods. The encryption and decryption processing method based on obfuscated modular components is an emerging encryption technology that aims to improve the strength of data protection through more complex mathematical structures and operations.

[0003] Obfuscated modular components is a new encryption technology based on mathematical obfuscation and modular operations. The core idea is to make it difficult for attackers to extract useful information from data by performing multiple obfuscation processes. Specifically, this method uses the properties of modular operations to map the original data into a more complex numerical space, while introducing multiple random components to enhance the obfuscation effect. The advantage of the obfuscated modular component method is that it can greatly improve the confidentiality of data without significantly increasing the computational complexity.

[0004] In practical applications, the obfuscated modular component encryption and decryption technology can be used to protect sensitive information transmission, data storage security, data privacy protection in cloud computing environments, etc. Especially in high-security fields such as finance, medical care, and government, this technology is expected to provide a more solid data protection barrier. Summary of the invention

[0005] In view of this, the present invention provides a data encryption and decryption processing method, device and medium based on confusion module components, which greatly improves the security of data without significantly increasing the computational complexity.

[0006] In order to achieve the above object, the present invention adopts the following technical solution:

[0007] A data encryption and decryption processing method based on obfuscated module components comprises the following steps:

[0008] S1 initialization step: calculate system parameters according to security parameters, the system parameters include coding module base, coding random number, encryption module base, number of encryption module bases and number of obfuscated module components;

[0009] S2 message encoding: Encode the message bits into plaintext based on the coding modulus and coding random number;

[0010] S3 key generation: Generate a key by encrypting the number of moduli and confusing the number of moduli;

[0011] S4 encryption: encrypts plain text into cipher text using a key and encryption module;

[0012] S5 Homomorphic Computation: The server performs homomorphic computation on the ciphertext through the encryption module basis;

[0013] S6 decryption: Decrypt the ciphertext using the key based on the homomorphic computation result.

[0014] Preferably, S1 comprises:

[0015] a) Generate two encoding modules that meet the required length of the security parameters and encoding random numbers ,k is a positive integer, indicating the number of coded messages;

[0016] b) Generate an encrypted module , i=1,2,...,n, n represents the number of encryption modules;

[0017] c) Set the number of aliased modulus components t, where t is a positive integer greater than or equal to 2.

[0018] Preferably, S2 comprises:

[0019] Send the message As a coding model The remainder under the coding module is calculated at the same time The remainder is , based on the encoding module Encoded as plaintext ,k is a positive integer, indicating the number of encoded messages.

[0020] Preferably, S3 includes:

[0021] The user's master key Userkey is used as the message Generate the user-side key W={W[1],W[2],W[i],...,W[n]}, 1≤W[i]≤t, n represents the number of elements included in the key W, that is, the number of encryption moduli, and t represents the number of obfuscated moduli.

[0022] Preferably, S4 includes:

[0023] Based on encryption module and plain text Calculate the true modulus component , and generate a random list of size n*t ,in The elements in each row of ;

[0024] Based on the key W, the real modulus component Replace the random list The element in row i and column W[i] in The replaced list is called ciphertext ;

[0025] Ciphertext and encryption module Send to the cloud server.

[0026] Preferably, S5 includes:

[0027] The server performs homomorphic operations on the ciphertext under the encryption module

[0028] in, represents homomorphic addition or homomorphic multiplication, and Represents the ciphertext list generated after encrypting different plaintexts, that is, represents the ciphertext calculated under the first message, represents the ciphertext calculated under the second message, The result of homomorphic computation.

[0029] Preferably, S6 includes:

[0030] Extract the ciphertext using the key W The true modulus component in ;

[0031] Through the real module component and the encrypted module basis Calculate plaintext ;

[0032] Plain text With coding module Perform a modulo operation to get the message .

[0033] A computer device comprises: a memory and a processor, wherein the memory stores a computer program that can be run on the processor, and when the processor executes the computer program, the steps of a data encryption and decryption processing method based on obfuscated module components are implemented.

[0034] A computer-readable storage medium stores a computer program, which, when executed by a processor, implements the steps of a data encryption and decryption processing method based on an obfuscated modulus component.

[0035] It can be seen from the above technical solution that, compared with the prior art, the present invention discloses a data encryption and decryption processing method, device and medium based on the obfuscated module component, which has the following advantages:

[0036] 1. Enhanced security: Through multiple obfuscation processes (obfuscation techniques are used in message encoding and encryption) and complex modular operations, the encrypted data becomes more difficult to crack. Even if the attacker obtains the encrypted data, it is difficult to restore the original data through traditional analysis methods.

[0037] 2. Computational efficiency and resource consumption: Compared with other high-intensity encryption methods, the obfuscated modulus component can maintain high computational efficiency and low resource consumption while ensuring high security, and is suitable for environments with limited resources.

[0038] 3. Flexibility and compatibility: This method can be seamlessly integrated with existing encryption protocols and systems to adapt to various application requirements. Whether used alone or as an enhancement to existing encryption systems, the obfuscated modular component method can be flexibly applied to various data protection needs. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.

[0040] Figure 1 A flow chart of a data encryption and decryption processing method based on obfuscated module components provided by the present invention. DETAILED DESCRIPTION

[0041] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0042] The embodiment of the present invention discloses a data encryption and decryption processing method based on the obfuscated module component, such as Figure 1 As shown, including:

[0043] S1 initialization step: calculate system parameters according to security parameters, the system parameters include coding module base, coding random number, encryption module base, number of encryption module bases and number of obfuscated module components;

[0044] S2 message encoding: Encode the message bits into plaintext based on the coding modulus and coding random number;

[0045] S3 key generation: Generate a key by encrypting the number of moduli and confusing the number of moduli;

[0046] S4 encryption: encrypts plain text into cipher text using a key and encryption module;

[0047] S5 Homomorphic Computation: The server performs homomorphic computation on the ciphertext through the encryption module basis;

[0048] S6 decryption: Decrypt the ciphertext using the key based on the homomorphic computation result.

[0049] The following is a detailed description of each step:

[0050] S1: User U generates two prime numbers as the encoding modulus For the convenience of description, we assume , , encoding random numbers is a one-time random number; in order to prevent overflow, it is assumed that three encryption moduli are required, which are set as , , ; Finally, set the number of confusion modulus components t=2.

[0051] S2: In order to implement homomorphic operations normally, assume that user U has two messages, namely , , and then use the Chinese remainder theorem to convert the messages and Calculate as plaintext

[0052] in and are one-time encoding random numbers, taking 4 and 15 respectively;

[0053] S3: The user uses his own master key Userkey to generate a user-side key for the message. According to the parameter setting in S1, the length of the key is 3, and the value is 1 or 2. Let's assume that the key W={1,2,1};

[0054] S4: Since user U has two messages to be encrypted, the real modulus component generated by the first message to be encrypted is called , , ; is plain text Generate a random list of size 3*2 , using the key W to replace the real modulus component The element in the i-th row and the W[i]-th column in the ciphertext ; The real modulus component generated by the second message to be encrypted is , , ; is plain text Generate a random list of size 3*2 , using the key W to replace the real modulus component The element in the i-th row and the W[i]-th column in the ciphertext ; Finally, the two ciphertexts and And encryption module , , Send to cloud server;

[0055] S5: The server performs homomorphic operations on the ciphertext under the encryption module. Assume that the homomorphic operation is Then the calculation process is:

[0056] ,

[0057] here represents the homomorphic addition operation, Represents homomorphic multiplication operation;

[0058] S6: The user uses the key W to extract the real modulus components in the ciphertext as 8, 75, and 26, and compares the real modulus components and the encryption modulus basis Compute plaintext using the Chinese remainder theorem ; Then the plain text With coding module Perform a modulo operation to get the message .

[0059] This embodiment provides a computer device, including: a memory and a processor, wherein the memory stores a computer program that can be run on the processor, and when the processor executes the computer program, the steps of a data encryption and decryption processing method based on an obfuscated module component are implemented.

[0060] This embodiment provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of a data encryption and decryption processing method based on an obfuscated module component are implemented.

[0061] Those skilled in the art can understand that: all or part of the steps of implementing the above method embodiments can be completed by hardware related to program instructions, and the aforementioned program can be stored in a computer-readable storage medium. When the program is executed, it executes the steps of the above method embodiments; and the aforementioned storage medium includes: mobile storage devices, read-only memory (ROM), random access memory (RAM), magnetic disks or optical disks, etc. Various media that can store program codes.

[0062] In this specification, each embodiment is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can be referred to each other. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part.

[0063] The above description of the disclosed embodiments enables one skilled in the art to implement or use the present invention. Various modifications to these embodiments will be apparent to one skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to the embodiments shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A data encryption and decryption processing method based on obfuscated module components, It is characterized in that The following steps are involved: S1 initialization step: calculate system parameters according to security parameters, the system parameters include coding module base, coding random number, encryption module base, number of encryption module bases and number of obfuscated module components; S2 message encoding: Encode the message bits into plaintext based on the coding modulus and coding random number; S3 key generation: Generate a key by encrypting the number of moduli and confusing the number of moduli; S4 encryption: encrypts plain text into cipher text using a key and encryption module; S5 Homomorphic Computation: The server performs homomorphic computation on the ciphertext through the encryption module basis; S6 decryption: decrypt the ciphertext using the key based on the homomorphic computation result; S3 includes: The user's master key Userkey is used as the message m k Generate a user-side key W = {W[1], W[2], W[i], ..., W[n]}, 1≤W[i]≤t, n represents the number of elements included in the key W, that is, the number of encryption moduli, and t represents the number of obfuscated moduli; S4 includes: Based on the encryption module p i and plaintext X k Calculate the true modulus component b k，i ≡X k mod p i , and generate a random list R of size n*t k , where R k The number of elements in each row of i ; Based on the key W, the real modulus component b k，i Replace the random list R k The element in the i-th row and the W[i]th column in R k The replaced list is called ciphertext C k ; The ciphertext C k and encryption module p i Send to the cloud server.

2. According to the data encryption and decryption processing method based on the obfuscated module component according to claim 1, It is characterized in that S1 includes: a) Generate two coding modules q with the required length of security parameters 1 ,q 2 and the encoded random number r k ,k is a positive integer, indicating the number of coded messages; b) Generate encryption module p i , i=1,2,...,n, n represents the number of encryption modules; c) Set the number of aliased modulus components t, where t is a positive integer greater than or equal to 2.

3. According to the data encryption and decryption processing method based on the obfuscated module component according to claim 2, It is characterized in that S2 include: Send the message k As the coding module q 1 The remainder under the coding modulus q is calculated at the same time 2 The remainder is r k , based on the encoding module, the message m k Encoded as plaintext k is a positive integer, indicating the number of encoded messages.

4. According to the data encryption and decryption processing method based on the obfuscated module component according to claim 3, It is characterized in that S5 include: The server performs homomorphic operations C on the ciphertext under the encryption module res =C k1 ⊙C k2 Among them, ⊙ represents homomorphic addition or homomorphic multiplication, C k1 and C k2 Represents the ciphertext list generated after encrypting different plaintexts, that is, C k1 represents the ciphertext calculated under the first message, C k2 represents the ciphertext calculated under the second message, C res The result of homomorphic computation.

5. According to the data encryption and decryption processing method based on the obfuscated module component according to claim 4, It is characterized in that S6 include: Extract the ciphertext C through the key W res The true modulus component in ; By using the real modulus component and the encrypted modulus basis p i Calculate the plaintext X′; Compare the plaintext X′ with the encoding modulus q 1 Perform a modular operation to obtain the message m′.

6. A computer device, It is characterized in that include: A memory and a processor, wherein the memory stores a computer program that can be run on the processor, and when the processor executes the computer program, the method according to any one of claims 1 to 5 is implemented.

7. A computer-readable storage medium, It is characterized in that The storage medium stores a computer program, which, when executed by a processor, implements the method described in any one of claims 1 to 5.

Images