Information security transmission method based on Internet

Abstract

The present invention discloses a method for secure information transmission based on the Internet, comprising: using a symmetric encryption algorithm to encrypt sensitive information input by a user, and storing the encrypted information in a temporary cache; reading the encrypted user sensitive information, and sending it to a server through a secure transmission protocol for information integrity verification; after verification, the server retrieves the corresponding decryption key to decrypt the encrypted sensitive information; the decrypted sensitive information is transmitted to a data processing center through a secure transmission protocol. The present invention encrypts user sensitive information through a symmetric encryption algorithm, and uses a secure transmission protocol to perform information integrity verification and transmission, which effectively improves the security and reliability of information transmission.

Description

Technical Field

[0001] The present invention relates to the technical field of information security, and in particular to an information security transmission method based on the Internet. Background Art

[0002] With the rapid development of Internet technology, information security issues have become increasingly prominent. In many fields such as e-commerce, online payment, and personal information management, sensitive information entered by users during the shopping process (such as credit card numbers, personal identity information, etc.) needs to be fully protected. In order to meet this challenge, information encryption technology continues to develop and improve.

[0003] At present, information encryption methods are mainly divided into two categories: symmetric encryption and asymmetric encryption. Symmetric encryption algorithms are widely used in real-time data transmission scenarios due to their high computational efficiency and fast encryption speed. Secure transmission protocols (such as HTTPS, SSL / TLS) ensure the integrity and confidentiality of data during transmission. However, with the continuous escalation of network attack methods, existing information security transmission technologies still face many challenges.

[0004] Although the existing symmetric encryption algorithms and secure transmission protocols have improved the security of information transmission to a certain extent, there are still some shortcomings; first, in symmetric encryption algorithms, the distribution and management of keys is an important issue. Once the key is leaked, all information encrypted with the key may be cracked; second, the existing secure transmission protocols have limited defense capabilities when facing complex attack methods such as man-in-the-middle attacks and replay attacks; in addition, in a high-concurrency, high-traffic network environment, the computing efficiency and transmission speed of existing technologies may be difficult to meet actual needs; therefore, how to improve the efficiency and reliability of data transmission while ensuring information security has become the focus of current research. Summary of the invention

[0005] The purpose of this section is to summarize some aspects of embodiments of the present invention and briefly introduce some preferred embodiments. Some simplifications or omissions may be made in this section and the specification abstract and the invention title of this application to avoid blurring the purpose of this section, the specification abstract and the invention title, and such simplifications or omissions cannot be used to limit the scope of the present invention.

[0006] In view of the above existing problems, the present invention is proposed.

[0007] In order to solve the above technical problems, the present invention provides the following technical solutions: using a symmetric encryption algorithm to encrypt sensitive information input by a user during the shopping process, and storing the encrypted user sensitive information in a temporary cache;

[0008] Read the encrypted user sensitive information and send it to the server through a secure transmission protocol for information integrity verification;

[0009] After the verification is passed, the server retrieves the decryption key corresponding to the symmetric encryption algorithm to decrypt the encrypted user sensitive information;

[0010] The decrypted user sensitive information is transmitted to the data processing center via a secure transmission protocol.

[0011] As a preferred solution of the Internet-based information security transmission method described in the present invention, the user sensitive information at least includes payment information, personal identity information, contact information, account information and location information.

[0012] As a preferred solution of the Internet-based information security transmission method described in the present invention, the user sensitive information is initialized by loading a symmetric encryption algorithm library to obtain an initial vector, and the generated key is used to perform an encryption operation of the symmetric encryption algorithm on the initial vector to generate encrypted information, that is, the encrypted user sensitive information.

[0013] As a preferred solution of the Internet-based information security transmission method of the present invention, the encrypted information is stored in a temporary cache in the form of an encrypted package;

[0014] The encrypted package includes at least encrypted data, an initial vector and encryption metadata. The encrypted data is the real data after encryption. The initial vector is the initial vector used in the encryption process to ensure that the encryption results of the same data are different each time. The encryption metadata is the algorithm type and version information, which is used to identify the encryption algorithm and parameters used during decryption.

[0015] As a preferred solution of the Internet-based information security transmission method of the present invention, the information integrity check is performed, including:

[0016] Reading the encrypted user sensitive information from the temporary cache of the client;

[0017] Sending the encrypted user sensitive information to the server using a secure transmission protocol;

[0018] Generate information digests for the encrypted user sensitive information on the client and the server using a hash algorithm;

[0019] The information integrity is verified by comparing the information digests generated by the client and the server.

[0020] As a preferred solution of the Internet-based information security transmission method of the present invention, the information digest is a fixed-length value obtained by irreversibly transforming the encrypted user sensitive information, wherein:

[0021] When the fixed length values ​​of the information digests generated by the client and the server are consistent, the two have great similarity, which means that the data has not been tampered with during the transmission process and the verification has passed;

[0022] When the fixed length values ​​of the information digests generated by the client and the server are inconsistent, and the difference between the two is large, it means that the data has been tampered with during the transmission process and the verification fails.

[0023] As a preferred solution of the Internet-based information security transmission method described in the present invention, the decryption is the reverse process of the encryption process.

[0024] Beneficial effects of the present invention:

[0025] 1. The present invention realizes the protection of encrypted data during transmission through a secure transmission protocol (such as HTTPS or TLS), prevents middleman attacks and data packet tampering, and at the same time, information integrity verification ensures that the data is not modified or damaged during transmission. The combination of secure transmission protocol and integrity verification effectively improves the security and reliability of data transmission;

[0026] 2. The present invention improves the security and credibility of the data processing process by ensuring that the decryption operation is performed only after the data integrity is verified;

[0027] 3. The present invention uses a secure transmission protocol again to securely transmit the decrypted user sensitive information to the data processing center, ensuring that even after the data is decrypted, the information is still protected during the transmission process, preventing data leakage and unauthorized access, ensuring the security of the entire data processing link, and ensuring the full protection of user sensitive information from input to final processing. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following briefly introduces the drawings required for describing the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative labor. Among them:

[0029] Figure 1 It is a schematic diagram of the flow of the Internet-based information security transmission method shown in the present invention. DETAILED DESCRIPTION

[0030] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are described in detail below in conjunction with the drawings. It is obvious that the described embodiments are only part of the embodiments of the present invention, but not all of the embodiments.

[0031] Based on the embodiments of the present invention, all other embodiments obtained by ordinary persons in the art without making any creative work should fall within the scope of protection of the present invention.

[0032] In the following description, many specific details are set forth to facilitate a full understanding of the present invention, but the present invention may also be implemented in other ways different from those described herein, and those skilled in the art may make similar generalizations without violating the connotation of the present invention. Therefore, the present invention is not limited to the specific embodiments disclosed below.

[0033] Example 1

[0034] According to an embodiment of the present invention, Figure 1 The flowchart shown is a method for secure information transmission based on the Internet, which specifically includes the following steps:

[0035] S1: Use a symmetric encryption algorithm to encrypt the sensitive information entered by the user during the shopping process, and store the encrypted user sensitive information in a temporary cache;

[0036] S2: Read the encrypted user sensitive information and send it to the server through a secure transmission protocol for information integrity verification;

[0037] S3: After verification, the server retrieves the decryption key corresponding to the symmetric encryption algorithm to decrypt the encrypted user sensitive information;

[0038] S4: The decrypted user sensitive information is transmitted to the data processing center via a secure transmission protocol.

[0039] It should be noted that the above steps ensure the security of user sensitive information during the entire transmission and processing process by adopting symmetric encryption algorithms and secure transmission protocols.

[0040] Preferably, the embodiments of the present invention effectively prevent information leakage and tampering, improve the security of user data and transmission reliability, and while improving information security, also ensure the efficiency of the system and the good user experience.

[0041] The following describes in more detail the implementation process and / or effects of certain embodiments of the present invention in conjunction with some preferred or optional examples of the present invention.

[0042]

Encrypted information

[0043] Users enter sensitive information in the shopping client, such as account information, personal identity information, address IP, and credit card number;

[0044] The client performs data preprocessing on the input sensitive information, including removing blank characters and incorrect formats, to ensure that the data information meets the encryption requirements;

[0045] Generate a unique symmetric encryption key through a symmetric encryption algorithm (such as AES encryption);

[0046] Load the symmetric encryption algorithm library, initialize the encryption parameters, and obtain the initial vector;

[0047] Using the generated key and initial vector, a symmetric encryption algorithm is executed to encrypt the pre-processed user sensitive information;

[0048] The encrypted user sensitive information is stored in a temporary cache.

[0049] As an example, the temporary cache uses a secure storage mechanism to prevent unauthorized access.

[0050] As an example, encryption keys are securely stored and managed, such as by a key management system, to ensure that the keys are not compromised.

[0051] As an example, select an applicable symmetric encryption algorithm for encryption, such as AES-256, and its implementation process can be expressed by the following formula:

[0052]

[0053] Among them, E is the user's sensitive information after symmetrical encryption, M i is the i-th sensitive information after preprocessing, μ is all sensitive information, the exponential function exp(x) is used to map sensitive information to a high-dimensional space to increase its complexity and security, and the second-order derivative function Used to describe the rate of change of information filtering, ensuring that sensitive information remains consistent and stable during the encryption process, third-order derivative function Used to further increase the complexity of information and prevent sensitive information from being restored or cracked during the encryption process.

[0054] It should be noted that the value range of the above formula is (-∞, +∞), which means that the user's sensitive information is encrypted in a highly complex and secure manner. When the value of E approaches 0, it means that the information after encryption tends to be in a non-information state to prevent information leakage; when the value of E approaches +∞, it means that the information is highly encrypted and has high security; when the value of E approaches -∞, it means that the information fails to be highly encrypted and has low security.

[0055] In an optional implementation, the user sensitive information includes at least payment information, personal identity information, contact information, account information, and location information.

[0056] As an example, the payment information includes at least a credit card number, an expiration date, a CVV code, and bank account information.

[0057] As an example, personally identifiable information includes at least name, ID number, passport number, and social security number.

[0058] As an example, contact information includes at least a phone number, an email address, and a shipping address.

[0059] As an example, account information includes at least a username, a password, and a security question and answer.

[0060] As an example, the location information includes at least the positioning IP.

[0061] In an optional implementation, the encrypted information is stored in a temporary cache in the form of an encrypted package, wherein the encrypted package includes at least encrypted data, an initial vector, and encryption metadata, the encrypted data is the real data after encryption, the initial vector is the initial vector used in the encryption process, which is used to ensure that the encryption results of the same data are different each time, and the encryption metadata is the algorithm type and version information, which is used to identify the encryption algorithm and parameters used during decryption.

[0062] Preferably, this step achieves preliminary protection of user sensitive information, preventing unauthorized third parties from obtaining or tampering with information before data transmission. The high efficiency of the symmetric encryption algorithm ensures that the encryption process will not significantly affect the user's shopping experience.

[0063] Preferably, the use of temporary cache enables the system to respond quickly to user operations, improves the system's response speed and user experience, and ensures the confidentiality and integrity of user sensitive information throughout the entire transmission link by encrypting data before transmission.

[0064]

Information integrity check

[0065] Read the encrypted user sensitive information from the client's temporary cache;

[0066] Use secure transmission protocols to send encrypted user sensitive information to the server;

[0067] Use a hash algorithm (such as SHA-256) to generate information summaries for the encrypted user sensitive information on the client and server respectively;

[0068] The message integrity is verified by comparing the message digests generated by the client and the server, where:

[0069] When the fixed length values ​​of the information digests generated by the client and the server are the same, the two are highly similar, indicating that the data has not been tampered with during the transmission process and the verification has passed;

[0070] When the fixed length values ​​of the information digests generated by the client and the server are inconsistent, and the difference between the two is large, it means that the data has been tampered with during the transmission process and the verification fails.

[0071] It should be noted that the information digest is a fixed-length value obtained by irreversibly transforming the encrypted user sensitive information, which is used to verify the integrity of the information.

[0072] As an example, the secure transmission protocol may adopt HTTPS or TLS to ensure that the data during the transmission process is not eavesdropped or tampered with.

[0073] As an example, the message integrity check can be implemented as follows:

[0074]

[0075] Among them, E(x c ,k) is the sensitive information x of the client using key k c Symmetric encryption, E(x s ,k) is the sensitive information x of the server using key k s Symmetric encryption, H(E(x c ,k)) is the information summary generated by the client using a hash algorithm (such as SHA-256), H(E(x s ,k)) is the information summary generated by the server using a hash algorithm (such as SHA-256).

[0076] The above formula verifies the integrity of the information by comparing the similarity of the information summaries generated by the server and the client.

[0077] It should be noted that the value range of the above formula is [0,2]. When the value is close to 2, it means that the information digests generated by the client and the server are more similar, and the data has not been tampered with; when the value is close to 0, it means that the information digests generated by the client and the server are less similar, that is, the difference is large, and the data may have been tampered with during transmission.

[0078] In an optional implementation, in order to further improve security, replay attacks can be prevented by adding timestamps and serial numbers to the information. The server will verify the validity of the timestamps and serial numbers to ensure that the received data is the latest and has not been sent repeatedly.

[0079] The aforementioned method of adding timestamps and serial numbers can be performed using methods and means in the prior art, and will not be described in detail in this example.

[0080]

Decryption

[0081] The server retrieves the key and the corresponding symmetric decryption algorithm (corresponding to the encryption algorithm, such as AES) to decrypt the encrypted user sensitive information;

[0082] After decryption, the server will perform a data integrity check again to ensure that the decrypted data has not been tampered with within the server.

[0083] Optionally, the server can verify the legitimacy of the decrypted data, such as checking whether the data format and content are as expected.

[0084] As an example, decryption is the reverse process of encryption. If AES encryption is used, decryption will also use the AES decryption mode and the same key. The decryption process can be expressed as follows:

[0085]

[0086] Where D(E, k) is the function for decrypting the encrypted information E using the key k, and S(E) is the function for evaluating the security level of the encrypted information E. The higher the value, the more likely the data security is to be threatened. -S(E) is an exponential decay factor, which is used to dynamically adjust the weight of decrypted data according to the security level of the data. F(·) is a filter function, which is used to extract and verify the validity of the decrypted data.

[0087] It should be noted that x in the above formula is the user sensitive information that is finally decrypted and processed by the filtering function, which represents the processed safe and usable information.

[0088] In an optional embodiment, a filtering function is introduced to further process the output data x after decryption to ensure the validity of the output data and filter out possible errors or non-compliant content. For example, it is possible to check whether the decrypted data complies with a specific format or verification standard, thereby enhancing the security and accuracy of data processing.

[0089] It is also necessary to explain in the embodiments of the present invention that when processing user sensitive information, if no network interruption occurs during the shopping process, a symmetric encryption algorithm is used to encrypt the sensitive information input by the user, and the encrypted user sensitive information is stored in a temporary cache. By caching data locally, the immediate security and availability of the user input information are ensured, and the foundation is laid for subsequent secure transmission and processing. This step ensures the speed of the encryption process through the high efficiency of symmetric encryption, and at the same time improves the system response speed by utilizing the accessibility of the temporary cache, thereby ensuring that the user's shopping experience is not affected.

[0090] Furthermore, if a network interruption occurs during the shopping process, the connection is re-established through a secure transmission protocol, and the encrypted data in the cache is sent to the server for information integrity verification. By adopting the HTTPS or TLS protocol, the security and integrity of the data during transmission are ensured, and a retransmission mechanism is used to ensure that the data integrity is not affected. After the network returns to normal, the server receives and verifies the integrity of the transmitted data, and after confirming that it is correct, it retrieves the decryption key corresponding to the symmetric encryption algorithm for decryption. In this way, while ensuring data integrity, the reliability and security of data transmission are ensured.

[0091] Preferably, when the server verification is passed, the encrypted user sensitive information is decrypted and processed using the decryption key of the symmetric encryption algorithm. The decryption process not only ensures that only legitimate servers can access user sensitive information, but also decrypts after integrity verification, further improving the security and reliability of the system. The decrypted user sensitive information is transmitted to the data processing center via a secure transmission protocol to ensure the security of the data during transmission.

[0092] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical solutions of the present invention, which should all be included in the scope of the claims of the present invention.

Claims

1. A method for secure information transmission based on the Internet, characterized in that: include: Using a symmetric encryption algorithm to encrypt sensitive user information input by the user during the shopping process, and storing the encrypted sensitive user information in a temporary cache; The user sensitive information includes at least payment information, personal identity information, contact information, account information and location information; Performing data preprocessing on the input user sensitive information, including removing blank characters and incorrect formats; Generate a unique symmetric encryption key through a symmetric encryption algorithm; Load the symmetric encryption algorithm library, initialize the encryption parameters, and obtain the initial vector; The generated key and the initial vector are used to execute a symmetric encryption algorithm to encrypt the preprocessed user sensitive information; the implementation process is represented by the following formula: Among them, E is the user's sensitive information after symmetrical encryption, M i is the i-th user sensitive information after preprocessing, μ is all user sensitive information, the exponential function exp(x) is used to map user sensitive information to a high-dimensional space to increase its complexity and security, and the second-order derivative function , used to describe the rate of change of information filtering, ensuring that user sensitive information remains consistent and stable during the encryption process, the third-order derivative function , used to further increase the complexity of information and prevent user sensitive information from being restored or cracked during the encryption process; The value range of the above formula is ( , ), indicating that the user's sensitive information has been encrypted with high complexity and security. When the value of E approaches 0, it means that the encrypted information tends to be in a non-information state to prevent information leakage; when the value of E approaches When , it means that the information is highly encrypted and has high security; when the value of E approaches When , it means that the information is highly encrypted and the security is low; The encrypted user sensitive information is stored in a temporary cache, and the temporary cache adopts a secure storage mechanism to prevent unauthorized access; the encrypted user sensitive information is read and sent to the server through a secure transmission protocol for information integrity verification; including: Reading the encrypted user sensitive information from the temporary cache; Sending the encrypted user sensitive information to the server using a secure transmission protocol; Generate an information digest for the encrypted user sensitive information on the client and server using a hash algorithm; The information integrity is verified by comparing the similarity of the information digests generated by the client and the server. The information integrity verification is implemented by the following formula: ； Among them, E (x c ,k) is the user sensitive information x of the client using key k c Symmetric encryption, E(x s ,k) is the user sensitive information x on the server side using key k s Symmetric encryption, H(E(x c ,k)) is the information summary generated by the client using the hash algorithm, H(E(x s ,k)) is the information summary generated by the server using the hash algorithm; The value range of the above formula is [0,2]. When the value is close to 2, it means that the information digests generated by the client and the server are more similar, and the data has not been tampered with; when the value is close to 0, it means that the information digests generated by the client and the server are less similar, that is, the difference is large, and the data has been tampered with during transmission; The information digest is a fixed-length value obtained by irreversibly transforming the encrypted user sensitive information, where: When the fixed length values ​​of the information digests generated by the client and the server are consistent, the two have great similarity, which means that the data has not been tampered with during the transmission process and the verification has passed; When the fixed length values ​​of the information digests generated by the client and the server are inconsistent, and the difference between the two is large, it means that the data has been tampered with during the transmission process and the verification fails; After the verification is passed, the server retrieves the decryption key corresponding to the symmetric encryption algorithm to decrypt the encrypted user sensitive information; The decryption is the reverse process of the encryption process, and the decryption process is expressed by the following formula: ； Where D(E, k) is a function for decrypting encrypted information E using key k, and S(E) is a function for evaluating the security level of encrypted information E. The higher the value, the more likely the data security is to be threatened. is an exponential decay factor, which is used to dynamically adjust the weight of decrypted data according to the security level of the data. F(·) is a filter function, which is used to extract and verify the validity of the decrypted data. The decrypted user sensitive information is transmitted to the data processing center via a secure transmission protocol.

2. The Internet-based information security transmission method according to claim 1, characterized in that: The encrypted information is stored in a temporary cache in the form of an encrypted package; The encrypted package includes at least encrypted data, an initial vector and encryption metadata. The encrypted data is the real data after encryption. The initial vector is the initial vector used in the encryption process to ensure that the encryption results of the same data are different each time. The encryption metadata is the algorithm type and version information, which is used to identify the encryption algorithm and parameters used during decryption.

Images