Data encryption storage method, system and solid state hard disk
By preprocessing, segmenting, compression and elliptic curve encryption of the data of the solid-state drive, the problem of low efficiency of solid-state drives when encrypting storage is solved, efficient data encryption and storage is achieved, and data security is enhanced.
Patent Information
- Application Number
- CN202411418848.6
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2024-10-12
- Publication Date
- 2024-12-31
- Estimated Expiration
- 2044-10-12
Smart Images

Figure CN118940329B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of data encryption storage, and in particular to a data encryption storage method, system and solid-state hard disk. Background Art
[0002] With the rapid development of information technology, data security and privacy protection have become increasingly important issues. Especially in the field of storage devices, solid-state drives (SSDs) are widely used in various computing systems due to their high performance and reliability. However, with the increasing demand for data security, traditional storage methods can no longer fully meet the needs of protecting data from unauthorized access.
[0003] Data encryption storage is to convert data into an unreadable form through an encryption algorithm. The original data can only be restored by decryption. Encrypted storage can protect data from unauthorized access. Common methods include using hardware encryption or software encryption technology. Hardware encryption is processed by a dedicated chip inside the device, with high encryption performance and little impact on the system; software encryption is implemented through the operating system or third-party software, and can usually encrypt specific files or the entire disk. By properly configuring the encryption mechanism, the security of data can be ensured when it is stored.
[0004] The purpose of data storage encryption technology is to prevent data from being leaked during storage. Data storage encryption technology can be divided into two types: ciphertext storage and access control. The former is generally achieved through encryption algorithm conversion, additional passwords, encryption modules, etc.; the latter is to review and restrict user qualifications and permissions to prevent illegal users from accessing data or legal users from accessing data beyond their authority.
[0005] SSD, also known as solid-state drive, is a hard disk made of solid-state electronic storage chip array; there are two types of storage media for SSD, one is using flash memory (FLASH chip) as storage medium, and the other is using DRAM as storage medium. The latest is Intel's XPoint particle technology.
[0006] Solid-state drives have the characteristics of fast reading and writing, light weight, low energy consumption and small size that traditional mechanical hard drives do not have, but their disadvantages are also obvious. Although IDC believes that SSDs have entered the mainstream of the storage market, their prices are still relatively expensive, their capacity is low, and once the hardware is damaged, it is difficult to recover the data. Some people also believe that the durability (lifespan) of solid-state drives is relatively short. On the other hand, ordinary mechanical disks rely on the airflow generated by the high-speed rotation of the disk to lift the magnetic head, so that the magnetic head is infinitely close to the disk without contacting it, and the stepper motor drives the magnetic head to change the track and read the data. Therefore, its internal structure is relatively complex and precise, and it is generally not allowed to be disassembled. Once disassembled manually, it is very likely to cause damage and the disk will not work properly.
[0007] Existing SSD encryption technologies mainly include software encryption and hardware encryption. Software encryption encrypts data through the operating system or third-party software, but may be limited due to system resource usage and performance impact. Hardware encryption uses a dedicated encryption chip inside the hard drive to process data encryption, which has better performance but higher equipment costs.
[0008] However, when existing solid-state drives encrypt and store data information, the encryption process of the data information is slow due to the large amount of data information, and the storage efficiency is low during storage, which seriously affects the performance of the solid-state drive when in use.
[0009] Currently, no effective solution has been proposed for the problems in the related technologies. Summary of the invention
[0010] In view of the problems in the related art, the present invention proposes a data encryption storage method, system and solid state drive to overcome the above technical problems existing in the existing related art.
[0011] To this end, the specific technical solution adopted by the present invention is as follows:
[0012] A data encryption storage method comprises the following steps:
[0013] S1. Receive data information to be stored: first store the data information to be stored in a buffer memory, and pre-process the data information;
[0014] S2. Establishing index information of data information: The index information of data information is established through a hash function, and the calculation formula of the hash function is as follows:
[0015] h = key%C, where C is the size of the hash table, key is the key value, and the storage space of key is smaller than the size of the reserved index information space A, and h is the index value;
[0016] S3, segmentation processing of data information: segmenting the data information in the cache memory, and when segmenting, segmenting is performed according to the storage channel N of the solid state drive and the size M of the data information, and the number of segments of the data information is the same as the storage channel N of the solid state drive;
[0017] S4, compressing the data information: compressing the segmented data information to reduce the size of the data information;
[0018] S5. Storing the compressed data information: encrypting and storing the compressed data information, and encrypting the data information using an elliptic curve encryption algorithm.
[0019] As a preferred embodiment, the buffer memory in S1 adopts an adaptive buffer algorithm, which dynamically adjusts the size and management strategy of the buffer to adapt to changing data flows and processing requirements;
[0020] For the adaptive buffer algorithm, the adjustment amount is calculated through the control strategy; the calculation formula is as follows:
[0021]
[0022] Where u(t) is the control signal, e(t) is the error, K p , K i and K d are proportional gain, integral gain, and differential gain. dτ represents a small change in the variable τ during the integration process. dt represents a small time increment. In differential equations, d is used to describe the rate at which the system state changes with time or other variables.
[0023] And, e(t) = E r -E s , where E r is the size of the input data information, E s The size of the cache space to be set.
[0024] As a preferred embodiment, the data information preprocessing steps in S1 are as follows:
[0025] Data cleaning: delete duplicate records in the data, correct erroneous information in the data, and supplement missing values in the data;
[0026] Data conversion: convert data information into normalized or standardized data stored in solid-state drives, convert data formats to meet storage requirements, and improve storage efficiency;
[0027] Data integration: combining data information from different sources into a unified data set;
[0028] Data screening: Select data information related to the analysis target and eliminate unnecessary data information.
[0029] As a preferred embodiment, the data cleaning further performs anomaly detection on the data information by using the following calculation formula:
[0030]
[0031] Among them, Y y is the data information output after calculation, x i is the input data, N is the total number of data, is the mean of the data information, is the median of the data information, σ is the standard deviation, k is the threshold, and is set to 1.5. If Y y >kσ, the data is judged as abnormal data and removed. y ≤kσ, the data information is judged to be normal data information;
[0032] The missing values and the error information are filled with the average value, and the calculation process is as follows:
[0033] Among them, Y c is the value of the filled data information, x i-1 、x i+1 They are the values corresponding to the data information on both sides of the numerical position that needs to be filled.
[0034] As a preferred embodiment, the steps of compressing the data information in S4 are as follows:
[0035] Statistical character frequency: calculate the frequency of occurrence of each character in the data information and perform statistical counting;
[0036] Build a priority queue: Create a priority queue, and the priority queue is selected as the character with the lowest frequency in the statistical calculation, where each node contains a character and its corresponding frequency;
[0037] Construct a Huffman tree: Take the two nodes with the lowest frequency from the priority queue; create a new node whose frequency is the sum of the frequencies of these two nodes, and the two child nodes of the new node are the two low-frequency nodes;
[0038] Insert the new node into the priority queue: Repeat the above steps until there is only one node left in the queue, which is the root node of the Huffman tree;
[0039] Generate a coding table: Starting from the root node of the Huffman tree, assign '0' to the left subtree and '1' to the right subtree, and recursively generate the code for each character;
[0040] Encoding data: Use the generated encoding table to convert the segmented data information into a compressed binary code stream.
[0041] As a preferred embodiment, the encryption algorithm of the elliptic curve in S5 is as follows:
[0042] Select a random number as the private key d, and the private key d is selected as the mean of the data information of each segment, which is
[0043] The public key is calculated by the private key: the public key Q = d·κG is calculated, where G is the generating point on the curve, · represents point multiplication, and κ is the optimization factor. The optimization factor is used to make the public key adaptively change, and the calculation of the optimization factor is as follows:
[0044] Where t is a constant and j is the number of decryption times. During the decryption process, j is a continuously increasing value, i.e., t j+1 =t+j;
[0045] And the segmented data information is encrypted by elliptic curve respectively. After the elliptic curve encryption, the solid state drive allocates storage space to the segmented data information, stores all the segmented data information inside a logical block, and assigns a unique address to the logical block.
[0046] A data encryption storage system, comprising a data information preprocessing module, a data information indexing module, a data information segmentation module, a data information compression module and a data information encryption module;
[0047] The data information preprocessing module is used to preprocess the data information, clean, convert, integrate and filter the data information, process the data information, improve the accuracy of the data information, and merge different sources of the data information into a data set, so that the data information is easy to remove unnecessary data, and perform format conversion processing on the data information, so that the data information is easy to process later;
[0048] The data information index establishment module is used to complete the generation of index information for data information through a hash function, so as to facilitate rapid query of data information when reading data information;
[0049] The data information segmentation module is used to segment the data information so that the large data information can be divided into several small data information, which is convenient for calculating and storing the data information and improving the storage efficiency of the data information;
[0050] The data information compression module is used to perform single compression on each segment of the segmented data information to improve the compression efficiency;
[0051] The data information encryption module is used to encrypt each segment of the segmented data information separately, which can reduce the encryption key length and improve the calculation efficiency.
[0052] As a preferred embodiment, the segmentation calculation of the data information segmentation module is as follows:
[0053] Get the storage channel N of the solid state drive, and detect the size M of the data information. If the number of segments of the data information is the same as the storage channel N of the solid state drive, the segmentation calculation of the data information is as follows:
[0054] Wherein, s is the size of the segmented data information, and A is the index information space reserved when the segmented data information is stored.
[0055] A data encryption storage solid state drive, comprising a data encryption storage solid state drive, wherein a solid state drive data encryption storage method program is stored in the data encryption storage solid state drive, and the data encryption storage solid state drive can also implement hardware encryption, and when the solid state drive data encryption storage method program is executed by a processor, a step of a data encryption storage method is implemented;
[0056] And there is a data encryption storage system in the data encryption storage solid state hard disk, and when the data encryption storage system is executed by the processor, a module of the data encryption storage system is implemented.
[0057] As a preferred embodiment, the data encryption storage solid state drive includes an encryption engine, encryption is enabled through the SSD management tool or firmware settings, and a password or key is set to protect the encryption.
[0058] The beneficial effects of the present invention are:
[0059] 1. The present invention improves the receiving rate of data information by buffering the data information to be stored, and adopts an adaptive buffering algorithm to dynamically adjust the size and management strategy of the buffer for the space setting of the buffer memory to adapt to the changing data flow and processing requirements;
[0060] 2. When the present invention is used, data information is cleaned for anomaly detection, and the anomaly of the data information is detected through the mean and median. If Y y >kσ, the data is judged as abnormal data and removed. y ≤kσ, the data information is judged to be normal data information, and the abnormal data in the data information can be detected, and the missing values are supplemented and the error information is corrected by the average value. The average value is used for filling, and the abnormal data information is eliminated, and the eliminated information, missing values and error information are supplemented to maintain the integrity of the data information;
[0061] 3. When the present invention is used, the data information is segmented and divided into several parts of data information, so as to facilitate rapid synchronization of the data information, that is, the data information is segmented through the channel of the solid-state hard disk, so as to facilitate synchronous storage of the segmented data information, reduce the pressure of data information when processing, and make the segmented data information smaller, so as to facilitate subsequent encryption processing and improve encryption efficiency. When the data information is segmented, index information space is reserved in advance before the data information, so as to facilitate filling in the generated index information, so as to facilitate searching all the segmented data information when searching the data information by index.
[0062] 4. When the present invention is used, the elliptic curve encryption algorithm is used to encrypt data information, providing a shorter key length, improving storage efficiency, and when the private key generates the public key, the optimization factor is used to make the public key change adaptively, that is, the optimization factor increases adaptively with the increase of the number of decryption times, so that the password of the data information is always in a changing state, preventing it from being opened after being stolen, resulting in the loss of data information;
[0063] 5. When the present invention is used, the data information is processed by the data information preprocessing module to improve the accuracy of the data information, and different sources of the data information are merged into a data set, so that the data information is convenient for removing unnecessary data, and the data information is formatted for processing, so that the data information is convenient for subsequent processing, and the data information compression module performs a single compression on each segment of the segmented data information, thereby improving the compression efficiency and facilitating the encryption storage process of the data information;
[0064] The present invention improves the efficiency of receiving data information by buffering and storing data information, and pre-processes the received data information to facilitate the fusion of different sources in the data information into a data set, so that the data information is easy to remove unnecessary data, and performs format conversion processing on the data information to facilitate subsequent processing of the data information, and segment the data information and divide the data information into several small segments to facilitate subsequent encryption and compression of the data information, thereby improving the encryption storage efficiency of the data information. BRIEF DESCRIPTION OF THE DRAWINGS
[0065] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.
[0066] Figure 1 is a schematic diagram of a step flow of a data encryption storage method according to an embodiment of the present invention;
[0067] Figure 2 It is a structural schematic diagram of a data encryption storage system according to an embodiment of the present invention. DETAILED DESCRIPTION
[0068] To further illustrate each embodiment, the present invention provides drawings, which are part of the disclosure of the present invention and are mainly used to illustrate the embodiments and can be used in conjunction with the relevant descriptions in the specification to explain the operating principles of the embodiments. With reference to these contents, ordinary technicians in the field should be able to understand other possible implementations and advantages of the present invention. The components in the figures are not drawn to scale, and similar component symbols are generally used to represent similar components.
[0069] According to an embodiment of the present invention, a data encryption storage method, system and solid state drive are provided.
[0070] The present invention is further described with reference to the accompanying drawings and specific embodiments. Figure 1 As shown, a data encryption storage method according to an embodiment of the present invention includes the following steps:
[0071] S1. Receive data information to be stored: first store the data information to be stored in a buffer memory, and pre-process the data information;
[0072] S2. Establishing index information of data information: The index information of data information is established through a hash function, and the calculation formula of the hash function is as follows:
[0073] h=key%C, where C is the size of the hash table, key is the key value, and the storage space of key is smaller than the size of the reserved index information space A, and h is the index value;
[0074] S3, segmentation processing of data information: segmenting the data information in the cache memory, and when segmenting, segmenting is performed according to the storage channel N of the solid state drive and the size M of the data information, and the number of segments of the data information is the same as the storage channel N of the solid state drive;
[0075] S4, compressing the data information: compressing the segmented data information to reduce the size of the data information;
[0076] S5. Storing the compressed data information: encrypting and storing the compressed data information, and using an elliptic curve encryption algorithm to encrypt the data information, providing a shorter key length, and improving storage efficiency.
[0077] As a preferred embodiment, the buffer memory in S1 adopts an adaptive buffer algorithm, which dynamically adjusts the size and management strategy of the buffer to adapt to changing data flows and processing requirements;
[0078] For the adaptive buffer algorithm, the adjustment amount is calculated through the control strategy; the calculation formula is as follows:
[0079]
[0080] Where u(t) is the control signal, e(t) is the error, K p , K i and K d are proportional gain, integral gain and differential gain, dτ represents a small change in the variable τ during the integration process, τ is a time variable, representing a continuous time period from 0 to the current time t, dt represents a small time increment, usually used to describe changes in time, in integral and differential operations, dt is used to represent a small change in the time variable t, in differential equations, d is used to describe the rate at which the system state changes with time or other variables;
[0081] And, e(t) = E r -E s , where E r is the size of the input data information, E s The size of the cache space to be set;
[0082] It should be noted that by dynamically adjusting the size and management strategy of the buffer through the adaptive buffer algorithm, it is effectively prevented that the buffer space is too large and wastes resource space, and the space is fully utilized.
[0083] As a preferred embodiment, the data information preprocessing steps in S1 are as follows:
[0084] Data cleaning: delete duplicate records in the data, correct erroneous information in the data, and supplement missing values in the data;
[0085] Data conversion: convert data information into normalized or standardized data stored in solid-state drives, convert data formats to meet storage requirements, and improve storage efficiency;
[0086] Data integration: combining data information from different sources into a unified data set;
[0087] Data screening: select data information related to the analysis target and eliminate unnecessary data information;
[0088] It should be noted that preprocessing of data information can effectively improve the accuracy of data information, facilitate conversion into a unified format, establish a unified data set, delete useless information in the data information, and reduce the space occupied by the data information.
[0089] As a preferred embodiment, the data cleaning also uses the following calculation formula to detect anomalies in the data information:
[0090]
[0091] Among them, Y y is the data information output after calculation, x i is the input data, N is the total number of data, is the mean of the data information, is the median of the data information, σ is the standard deviation, k is the threshold, and is set to 1.5. If Y y >kσ, the data is judged as abnormal data and removed. y ≤kσ, the data information is judged to be normal data information;
[0092] The missing values and the error information are filled with the average value, and the calculation process is as follows:
[0093] Among them, Y c is the value of the filled data information, x i-1 、x i+1 They are the values corresponding to the data information on both sides of the numerical position that need to be filled;
[0094] When it is necessary to explain, in order to detect abnormal data in the data information, and eliminate the abnormal data information, improve the accuracy of the data information, and supplement the missing data values, improve the completeness of the data information.
[0095] As a preferred embodiment, the steps of compressing the data information in S4 are as follows:
[0096] Statistical character frequency: calculate the frequency of occurrence of each character in the data information and perform statistical counting;
[0097] Build a priority queue: Create a priority queue, and the priority queue is selected as the character with the lowest frequency in the statistical calculation, where each node contains a character and its corresponding frequency;
[0098] Construct a Huffman tree: take out the two nodes with the lowest frequency from the priority queue; create a new node whose frequency is the sum of the frequencies of these two nodes, and the two child nodes of the new node are the two low-frequency nodes;
[0099] Insert the new node into the priority queue: Repeat the above steps until there is only one node left in the queue, which is the root node of the Huffman tree;
[0100] Generate a coding table: Starting from the root node of the Huffman tree, assign '0' to the left subtree and '1' to the right subtree, and recursively generate the code for each character;
[0101] Encoding data: Use the generated encoding table to convert the segmented data information into a compressed binary code stream;
[0102] It should be noted that in order to realize compression processing of data information, the size of data information is effectively reduced, the data information is stored more conveniently, and the storage efficiency and query efficiency are improved.
[0103] As a preferred embodiment, the encryption algorithm of the elliptic curve in S5 is as follows:
[0104] Select a random number as the private key d, and the private key d is selected as the mean of the data information of each segment, which is
[0105] The public key is calculated by the private key: the public key Q = d·κG is calculated, where G is the generating point on the curve, · represents point multiplication, and κ is the optimization factor. The optimization factor is used to make the public key adaptively change, and the calculation of the optimization factor is as follows:
[0106] Where t is a constant and j is the number of decryption times. During the decryption process, j is a continuously increasing value, i.e., t j+1 =t+j;
[0107] The segmented data information is encrypted by elliptic curves respectively. After the elliptic curve encryption, the solid state drive allocates storage space to the segmented data information, stores all the segmented data information in a logic block, and assigns a unique address to the logic block;
[0108] It should be noted that in order to realize encrypted storage of data information, and to improve the encryption of data information and prevent data information from being stolen, the public key is adaptively changed by optimizing the factor.
[0109] refer to Figure 2 , a data encryption storage system, used to implement a data encryption storage method, including a data information preprocessing module, a data information indexing module, a data information segmentation module, a data information compression module and a data information encryption module;
[0110] The data information preprocessing module is used to preprocess the data information, clean, convert, integrate and filter the data information, process the data information, improve the accuracy of the data information, and merge the different sources of the data information into a data set, so that the data information is easy to remove unnecessary data, and perform format conversion processing on the data information, so that the data information is easy to process later;
[0111] The cleaning process in the data information preprocessing module is as follows:
[0112] Data checking and preprocessing: Check the integrity, accuracy and consistency of data information, identify problems in data information, such as missing values, duplicate data, and outliers; perform preliminary processing on data information, including converting data types, formatting dates and times, and standardizing units;
[0113] Handling missing values: Detect missing values or null values in the data, delete records with missing values; use the average algorithm to fill in missing values;
[0114] Processing duplicate data: Identify duplicate records in a data set; delete the identified duplicate data information to ensure that each record is unique in the data information set;
[0115] Handling outliers: Detecting outliers or outliers in data information, identifying them through statistical or visualization methods; correcting, deleting or transforming outliers;
[0116] Data conversion: converting data information into a unified scale or format, and then scaling the data information to a specified range through a normalization algorithm to improve the performance of the algorithm and the stability of the results;
[0117] Data merging: Merge multiple data sources into a unified data information set; and convert the data information into a format suitable for analysis;
[0118] The data information index establishment module is used to complete the generation of index information for data information through a hash function, so as to facilitate rapid query of data information when reading data information;
[0119] The data information segmentation module is used to segment the data information so that the large data information can be divided into several small data information, which is convenient for calculating and storing the data information and improving the storage efficiency of the data information;
[0120] The data information compression module is used to perform single compression on each segment of the segmented data information to improve the compression efficiency;
[0121] The data information encryption module is used to encrypt each segment of the segmented data information separately, which can reduce the encryption key length and improve the calculation efficiency.
[0122] As a preferred embodiment, the segmentation calculation of the data information segmentation module is as follows:
[0123] Get the storage channel N of the solid state drive, and detect the size M of the data information. If the number of segments of the data information is the same as the storage channel N of the solid state drive, the segmentation calculation of the data information is as follows:
[0124] Wherein, s is the size of the segmented data information, and A is the index information space reserved when the segmented data information is stored;
[0125] It should be noted that segmenting the data information according to the number of storage channels of the solid state drive can enable the segmented data information to be stored in the storage channels of the solid state drive at one time, thereby improving storage efficiency.
[0126] A data encryption storage solid state drive, comprising a data encryption storage solid state drive, wherein a solid state drive data encryption storage method program is stored in the data encryption storage solid state drive, and the data encryption storage solid state drive can also implement hardware encryption, and when the solid state drive data encryption storage method program is executed by a processor, a step of a data encryption storage method is implemented;
[0127] And there is a data encryption storage system in the data encryption storage solid state hard disk, and when the data encryption storage system is executed by the processor, a module of the data encryption storage system is implemented.
[0128] As a preferred embodiment, the data encryption storage solid state drive includes an encryption engine, and encryption is enabled through the SSD management tool or firmware settings, and a password or key is set to protect encryption;
[0129] It should be noted that in order to improve the encryption of data information, multi-level encryption processing is adopted to improve the security protection of data information.
[0130] In summary, the present invention improves the efficiency of receiving data information by buffering and storing data information, and pre-processes the received data information to facilitate the fusion of different sources of data information into a data set, so that the data information can be conveniently removed from unnecessary data, and performs format conversion processing on the data information to facilitate subsequent processing of the data information, and segmenting the data information to divide the data information into several small segments to facilitate subsequent encryption and compression of the data information, thereby improving the encryption and storage efficiency of the data information.
[0131] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principle of the present invention should be included in the protection scope of the present invention.
Claims
1. A data encryption storage method, characterized in that: The following steps are included: S1. Receive data information to be stored: first store the data information to be stored in a buffer memory, and pre-process the data information; The buffer memory adopts an adaptive buffer algorithm, which dynamically adjusts the size and management strategy of the buffer to adapt to changing data flows and processing requirements; For the adaptive buffer algorithm, the adjustment amount is calculated through the control strategy; the calculation formula is as follows: Where u(t) is the control signal, e(t) is the error, K p , K i and K d are proportional gain, integral gain, and differential gain. dτ represents a small change in the variable τ during the integration process. dt represents a small time increment. In differential equations, d is used to describe the rate at which the system state changes with time or other variables. And, e(t) = E r -E s , where E r is the size of the input data information, E s The size of the cache space to be set; The data information preprocessing steps are as follows: Data cleaning: delete duplicate records in the data, correct erroneous information in the data, and supplement missing values in the data; Data conversion: convert data information into normalized or standardized data stored in solid-state drives, convert data formats to meet storage requirements, and improve storage efficiency; Data integration: combining data information from different sources into a unified data set; Data screening: select data information related to the analysis target and eliminate unnecessary data information; In the data cleaning, the following calculation formula is also used to detect anomalies in the data information: Among them, Y y is the data information output after calculation, x i is the input data, N is the total number of data, is the mean of the data information, is the median of the data information, σ is the standard deviation, k is the threshold, and is set to 1.
5. If Y y >kσ, the data is judged as abnormal data and removed. y ≤kσ, the data information is judged to be normal data information; The missing values and the error information are filled with the average value, and the calculation process is as follows: Among them, Y c is the value of the filled data information, x i-1 、x i+1 They are the values corresponding to the data information on both sides of the numerical position that need to be filled; S2. Establishing index information of data information: The index information of data information is established through a hash function, and the calculation formula of the hash function is as follows: h=key%C, where C is the size of the hash table, key is the key value, and the storage space of key is smaller than the size of the reserved index information space A, and h is the index value; S3, segmentation processing of data information: segmenting the data information in the cache memory, and when segmenting, segmenting is performed according to the storage channel N of the solid state drive and the size M of the data information, and the number of segments of the data information is the same as the storage channel N of the solid state drive; S4, compressing the data information: compressing the segmented data information to reduce the size of the data information; S5. Storing the compressed data information: encrypting and storing the compressed data information, and encrypting the data information using an elliptic curve encryption algorithm; The elliptic curve encryption algorithm is as follows: Select a random number as the private key d, and the private key d is selected as the mean of the data information of each segment, which is The public key is calculated by the private key: the public key Q = d·κG is calculated, where G is the generating point on the curve, · represents point multiplication, and κ is the optimization factor. The optimization factor is used to make the public key adaptively change, and the calculation of the optimization factor is as follows: Where t is a constant and j is the number of decryption times. During the decryption process, j is a continuously increasing value, i.e., t j+1 =t+j; And the segmented data information is encrypted by elliptic curve respectively. After the elliptic curve encryption, the solid state drive allocates storage space to the segmented data information, stores all the segmented data information inside a logical block, and assigns a unique address to the logical block.
2. The data encryption storage method according to claim 1, characterized in that: The steps of compressing the data information in S4 are as follows: Statistical character frequency: calculate the frequency of occurrence of each character in the data information and perform statistical counting; Build a priority queue: Create a priority queue where each node contains a character and its corresponding frequency; Construct a Huffman tree: take out the two nodes with the lowest frequency from the priority queue; create a new node whose frequency is the sum of the frequencies of these two nodes, and the two child nodes of the new node are the two low-frequency nodes; Insert the new node into the priority queue: Repeat the above steps to build the Huffman tree until there is only one node left in the queue. This node is the root node of the Huffman tree. Generate a coding table: Starting from the root node of the Huffman tree, assign '0' to the left subtree and '1' to the right subtree, and recursively generate the coding of each character; Encoding data: Use the generated encoding table to convert the segmented data information into a compressed binary code stream.
3. A data encryption storage system, used to implement the data encryption storage method according to any one of claims 1 to 2, characterized in that: It includes a data information preprocessing module, a data information indexing module, a data information segmentation module, a data information compression module and a data information encryption module; The data information preprocessing module is used to preprocess the data information, clean, convert, integrate and filter the data information, improve the accuracy of the data information, and merge different sources of the data information into a data set, so that the data information is easy to remove unnecessary data, and perform format conversion processing on the data information, so that the data information is easy to process later; The data information index establishment module is used to complete the generation of index information for data information through a hash function, so as to facilitate rapid query of data information when reading data information; The data information segmentation module is used to segment the data information so that the large data information can be divided into several small data information, which is convenient for calculating and storing the data information and improving the storage efficiency of the data information; The data information compression module is used to perform single compression on each segment of the segmented data information to improve the compression efficiency; The data information encryption module is used to encrypt each segment of the segmented data information separately, which can reduce the encryption key length and improve the calculation efficiency.
4. A data encryption storage system according to claim 3, characterized in that: The segmentation calculation of the data information segmentation module is as follows: Get the storage channel N of the solid state drive, and detect the size M of the data information. If the number of segments of the data information is the same as the storage channel N of the solid state drive, the segmentation calculation of the data information is as follows: Wherein, s is the size of the segmented data information, and A is the index information space reserved when the segmented data information is stored.
5. A data encryption storage solid state hard disk, characterized in that: A data encryption storage solid state drive is included, wherein a solid state drive data encryption storage method program is stored in the data encryption storage solid state drive, and the data encryption storage solid state drive can also implement hardware encryption, and when the solid state drive data encryption storage method program is executed by a processor, the steps of the data encryption storage method according to any one of claims 1 to 2 are implemented; And there is a data encryption storage system in the data encryption storage solid state hard disk, and when the data encryption storage system is executed by the processor, a module of the data encryption storage system as described in any one of claims 3 to 4 is implemented.
6. The data encryption storage solid state hard disk according to claim 5, characterized in that: The data encryption storage solid state drive includes an encryption engine, and encryption is enabled through the SSD management tool or firmware settings, and a password or key is set to protect the encryption.