Encryption method and system compatible with multiple encryption algorithms

Abstract

The invention relates to the field of data encryption, and particularly discloses an encryption method and system compatible with multiple encryption algorithms, and the method comprises the steps: a, receiving to-be-encrypted data inputted by an enterprise user and encryption parameters specified by the user through a user interface; b, dynamically selecting a proper encryption algorithm by using an encryption management module according to the sensitivity, access requirements and data characteristics of enterprise data; c, converting the to-be-encrypted data into an applicable format of the selected encryption algorithm by using an algorithm adapter; by dynamically selecting and combining a plurality of encryption algorithms, the system can provide higher-level protection according to the sensitivity of data and the security requirement of an enterprise; the algorithm adapter and the encryption management module allow the system to flexibly adapt to different data characteristics and security parameters, so that the compatibility with various encryption algorithms is ensured; meanwhile, the system adopts the Hash function and message authentication code technology, the system can verify the integrity of the data in the transmission and storage process, and unauthorized tampering is prevented.

Description

Technical Field

[0001] The present invention belongs to the field of data encryption, and in particular to an encryption method and system compatible with multiple encryption algorithms. Background Art

[0002] An encryption algorithm is a series of computational processes used to convert plaintext (original data) into ciphertext (data that cannot be directly read) to ensure data security and privacy.

[0003] With the rapid development of science and technology, enterprise data encryption has become a key measure to protect enterprise data assets, maintain business continuity and comply with laws and regulations. Data encryption uses encryption algorithms to convert sensitive information into a format that can only be decrypted by authorized users, thereby ensuring the security of data during storage, transmission and processing.

[0004] In traditional encryption systems, the process of key generation, distribution, storage and destruction is often complex and error-prone. At the same time, data is susceptible to tampering during transmission or storage. Summary of the invention

[0005] In order to solve the above technical problems, the present invention provides an encryption method compatible with multiple encryption algorithms to solve the problems in the prior art that the key generation, distribution, storage and destruction processes are often complicated and prone to errors, and at the same time, data is easily tampered with during transmission or storage.

[0006] An encryption method compatible with multiple encryption algorithms, comprising:

[0007] a. Receive the encrypted data and encryption parameters specified by the enterprise user through the user interface;

[0008] b. Use the encryption management module to dynamically select the appropriate encryption algorithm based on the sensitivity, access requirements and data characteristics of the enterprise data;

[0009] c. using an algorithm adapter to convert the data to be encrypted into a suitable format for the selected encryption algorithm;

[0010] d. Generate keys that match the selected algorithm through the key management system and store and manage the keys securely;

[0011] e. Execute the selected encryption algorithm to encrypt the data, generate ciphertext, and ensure the security of the encryption process;

[0012] f. Use the data integrity verification module to perform integrity verification on the encryption result using the hash function H and the message authentication code function MAC to ensure the integrity of the enterprise data, where H(data) represents the hash calculation of the data data, and MAC(key, data) represents the message authentication code calculation of the data data using the key key;

[0013] g. Use performance evaluation tools to monitor the encryption process in real time and evaluate the efficiency and resource consumption of different algorithms to meet the performance requirements of enterprises;

[0014] h. Record detailed encryption operation logs through the security audit module, including operator identity, operation time and operation content, to facilitate enterprise security review and problem tracking;

[0015] i. In scenarios where high security is required, a symmetric encryption algorithm S and an asymmetric encryption algorithm A are combined through a hybrid encryption process, and the asymmetric encryption algorithm A is used to securely distribute the symmetric key K sym Then use the symmetric key K sym Efficiently encrypt enterprise data;

[0016] j. Dynamically update and expand encryption algorithms based on the system's performance evaluation and security audit results to adapt to the company's ever-changing security threats and performance requirements.

[0017] Preferably, the encryption management module further includes:

[0018] Algorithm adapters are used to convert enterprise data to be encrypted into corresponding formats according to the characteristics of different encryption algorithms to ensure compatibility between data and algorithms and encryption efficiency.

[0019] Preferably, the user interface provides a user-friendly operation interface, allowing enterprise users to easily input data to be encrypted, select encryption algorithms, and set encryption parameters, while displaying encryption progress and results.

[0020] Preferably, the key management system adopts a secure key generation algorithm and storage mechanism, and supports key lifecycle management, including key generation, storage, updating, destruction and archiving, to meet the enterprise's high standards for key management.

[0021] Preferably, the data integrity verification module uses advanced hash algorithms and message authentication code technology to ensure the integrity and authenticity of encrypted enterprise data and prevent data from being tampered with during transmission or storage.

[0022] Preferably, the performance evaluation tool provides real-time performance monitoring and evaluation functions.

[0023] The formula for evaluating the computational efficiency of different encryption algorithms is as follows:

[0024]

[0025] Among them, Throughput represents the processing rate, that is, the amount of data processed per unit time, DataSize represents the size of the processed data, and EncryptionTime represents the time required to complete encryption;

[0026] Help enterprises understand the computational efficiency and resource consumption of different encryption algorithms so as to select the most appropriate encryption algorithm.

[0027] Preferably, the security audit module adopts a strict logging mechanism to record in detail all aspects of the encryption operation, including the operator's identity, operation time and operation content, to facilitate the enterprise's subsequent security review and problem tracking.

[0028] Preferably, the hybrid encryption process combines the advantages of symmetric encryption and asymmetric encryption, utilizes the high security of asymmetric encryption algorithms to distribute symmetric keys, and then uses the high efficiency of symmetric keys to encrypt large amounts of enterprise data.

[0029] Preferably, the system supports encryption requirements in a variety of application scenarios, including enterprise file encryption, communication encryption, and database encryption, and can flexibly select and apply different encryption algorithms according to the characteristics and requirements of different scenarios.

[0030] An encryption system compatible with multiple encryption algorithms, including the encryption method compatible with multiple encryption algorithms as described above, and further comprising:

[0031] User interface module, used to receive enterprise user input and display operation results;

[0032] Encryption management module, used to select and call appropriate encryption algorithms based on enterprise user needs and data characteristics;

[0033] Algorithm adapter module, used to convert enterprise data into the format required by a specific encryption algorithm;

[0034] A key management module, used to generate, store and manage keys used in the encryption process;

[0035] Data integrity verification module, used to ensure the integrity and authenticity of encrypted enterprise data;

[0036] Performance evaluation module, used to evaluate the performance and resource consumption of different encryption algorithms;

[0037] Security audit module, which is used to record detailed information of encryption operations to facilitate enterprise security review and problem tracking;

[0038] Multiple encryption algorithm modules, including symmetric encryption algorithm, asymmetric encryption algorithm, hash algorithm and message authentication code algorithm, to support a variety of different encryption needs of enterprises.

[0039] Compared with the prior art, the present invention has the following beneficial effects: by dynamically selecting and combining a variety of encryption algorithms, the system can provide a higher level of protection according to the sensitivity of the data and the security needs of the enterprise; the algorithm adapter and encryption management module allow the system to flexibly adapt to different data characteristics and security parameters, thereby ensuring compatibility with various encryption algorithms; at the same time, the system adopts hash functions and message authentication code technology, and the system can verify the integrity of data during transmission and storage to prevent unauthorized tampering. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] Figure 1 It is a system schematic diagram of the present invention. DETAILED DESCRIPTION

[0041] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0042] like Figure 1 As shown:

[0043] Embodiment 1: The present invention provides an encryption method compatible with multiple encryption algorithms, comprising:

[0044] a. Receive the data to be encrypted and the encryption parameters specified by the enterprise user through the user interface; the user interface supports the input of multiple data formats, including but not limited to text, images, videos, etc., and provides clear options for the user to specify detailed encryption parameters, such as encryption algorithm preference, encryption strength, etc.;

[0045] b. Use the encryption management module to dynamically select the appropriate encryption algorithm based on the sensitivity, access requirements and data characteristics of the enterprise data; the encryption management module must have intelligent analysis capabilities and be able to dynamically select the appropriate encryption algorithm based on the sensitivity of the data (such as customer personal information, trade secrets, etc.), access requirements (such as internal use, external sharing) and data characteristics (such as size, type). This may involve predefined rule sets or machine learning algorithms to optimize the selection;

[0046] c. Use the algorithm adapter to convert the data to be encrypted into a suitable format for the selected encryption algorithm; the algorithm adapter module acts as a bridge for data format conversion, ensuring the compatibility between different encryption algorithms and processing multiple factors such as data format, encoding, length, etc. to ensure that the data meets the requirements of the specific algorithm before encryption;

[0047] d. Generate keys that match the selected algorithm through the key management system, and store and manage the keys securely; the generation of keys follows the principle of strong randomness, and can support multiple key formats through external import. The secure storage of keys uses encrypted storage technology, such as hardware security module (HSM) or key management services that comply with FIPS standards;

[0048] e. Execute the selected encryption algorithm to encrypt the data, generate ciphertext, and ensure the security of the encryption process; in the encryption process, ensure that all encryption operations are performed in a secure environment to avoid man-in-the-middle attacks or data leakage, use encrypted channels (such as TLS / SSL) to protect data transmission security, and use secure isolation areas to process sensitive data;

[0049] f. Use the data integrity verification module to perform integrity verification on the encryption result using the hash function H and the message authentication code function MAC to ensure the integrity of the enterprise data, where H(data) represents the hash calculation of the data data, and MAC(key, data) represents the message authentication code calculation of the data data using the key key;

[0050] g. Use performance evaluation tools to monitor the encryption process in real time and evaluate the efficiency and resource consumption of different algorithms to meet the performance requirements of enterprises;

[0051] h. Record detailed encryption operation logs through the security audit module, including operator identity, operation time and operation content, to facilitate enterprise security review and problem tracking;

[0052] i. In scenarios where high security is required, a symmetric encryption algorithm S and an asymmetric encryption algorithm A are combined through a hybrid encryption process, and the asymmetric encryption algorithm A is used to securely distribute the symmetric key K sym Then use the symmetric key K sym Efficiently encrypt enterprise data;

[0053] j. Dynamically update and expand encryption algorithms based on the system's performance evaluation and security audit results to adapt to the company's ever-changing security threats and performance requirements.

[0054] Specifically, the encryption management module further includes:

[0055] Algorithm adapters are used to convert enterprise data to be encrypted into corresponding formats according to the characteristics of different encryption algorithms to ensure compatibility between data and algorithms and encryption efficiency.

[0056] Specifically, the user interface provides a friendly operation interface, allowing enterprise users to easily input data to be encrypted, select encryption algorithms, and set encryption parameters, while displaying encryption progress and results.

[0057] Specifically, the key management system adopts a secure key generation algorithm and storage mechanism, and supports key lifecycle management, including key generation, storage, update, destruction and archiving, to meet the high standards of enterprises for key management.

[0058] Specifically, the data integrity verification module uses advanced hash algorithms and message authentication code technology to ensure the integrity and authenticity of encrypted enterprise data and prevent data from being tampered with during transmission or storage.

[0059] As can be seen from the above, through the user interface of this system, enterprise users can input the data to be encrypted and specify encryption parameters. The encryption management module dynamically selects the appropriate encryption algorithm according to the data characteristics and security requirements. The algorithm adapter ensures that the data format is compatible with the selected algorithm. The key management system is responsible for generating, storing and maintaining the security and life cycle of the key. Data integrity is guaranteed by hash functions and message authentication code technology to prevent data tampering. The performance evaluation tool monitors encryption efficiency and resource consumption to help enterprises optimize algorithm selection. The security audit module records detailed operation logs to facilitate security review and problem tracking. In high-security demand scenarios, the system adopts a hybrid encryption process, combining symmetric and asymmetric encryption technologies to securely distribute symmetric keys and efficiently encrypt data. In addition, the system can dynamically update and expand encryption algorithms based on feedback from performance evaluation and security audits to adapt to the ever-changing security threats and performance requirements faced by enterprises.

[0060] Embodiment 2: This embodiment is basically the same as the previous embodiment, except that it also includes: the performance evaluation tool provides real-time performance monitoring and evaluation functions.

[0061] The formula for evaluating the computational efficiency of different encryption algorithms is as follows:

[0062]

[0063] Among them, Throughput represents the processing rate, that is, the amount of data processed per unit time, DataSize represents the size of the processed data, and EncryptionTime represents the time required to complete encryption;

[0064] Help enterprises understand the computational efficiency and resource consumption of different encryption algorithms so as to select the most appropriate encryption algorithm.

[0065] Specifically, the security audit module adopts a strict log recording mechanism to record in detail all aspects of the encryption operation, including the operator's identity, operation time and operation content, to facilitate the company's subsequent security review and problem tracking.

[0066] Specifically, the hybrid encryption process combines the advantages of symmetric encryption and asymmetric encryption, uses the high security of asymmetric encryption algorithms to distribute symmetric keys, and then uses the high efficiency of symmetric keys to encrypt large amounts of enterprise data.

[0067] Specifically, the system supports encryption requirements in a variety of application scenarios, including enterprise file encryption, communication encryption, and database encryption, and can flexibly select and apply different encryption algorithms according to the characteristics and needs of different scenarios.

[0068] From the above, we can see that this system uses real-time performance monitoring and evaluation tools to calculate the processing rate and efficiency of different encryption algorithms using formulas, that is, the amount of data processed per unit time divided by the time required for encryption, so as to accurately measure resource consumption and computing efficiency, thereby helping enterprises to scientifically select the optimal encryption algorithm and balance security and performance requirements; at the same time, the security audit module adopts a detailed logging mechanism to ensure that the entire process of encryption operations is traceable, including operators, time and content, providing a solid basis for security review and problem tracking; through the hybrid encryption process, it cleverly combines the advantages of symmetric and asymmetric encryption, using asymmetric encryption to ensure the security of key transmission, and then using symmetric encryption to efficiently process large-scale enterprise data, achieving a double improvement in security and efficiency; the system is also highly flexible, supporting encryption needs in multiple scenarios such as enterprise files, communications, and databases, and selecting appropriate encryption algorithms as needed to fully protect enterprise data security.

[0069] Embodiment 3: This embodiment is basically the same as the previous embodiment, except that it further includes an encryption system compatible with multiple encryption algorithms, including the encryption method compatible with multiple encryption algorithms as described above, and also includes:

[0070] User interface module, used to receive enterprise user input and display operation results;

[0071] Encryption management module, used to select and call appropriate encryption algorithms based on enterprise user needs and data characteristics;

[0072] Algorithm adapter module, used to convert enterprise data into the format required by a specific encryption algorithm;

[0073] A key management module, used to generate, store and manage keys used in the encryption process;

[0074] Data integrity verification module, used to ensure the integrity and authenticity of encrypted enterprise data;

[0075] Performance evaluation module, used to evaluate the performance and resource consumption of different encryption algorithms;

[0076] Security audit module, which is used to record detailed information of encryption operations to facilitate enterprise security review and problem tracking;

[0077] Multiple encryption algorithm modules, including symmetric encryption algorithm, asymmetric encryption algorithm, hash algorithm and message authentication code algorithm, to support a variety of different encryption needs of enterprises.

[0078] As can be seen from the above, this system integrates a user-friendly interface module, which is convenient for enterprise users to input instructions and intuitively view operation results. The encryption management module intelligently analyzes user needs and data characteristics, accurately matches and calls the optimal encryption algorithm, and the algorithm adapter module flexibly converts data formats to ensure seamless connection with multiple encryption algorithms. The key management module can provide comprehensive key lifecycle management to ensure the security of the encryption process; the data integrity verification module strengthens the protection of the authenticity and integrity of encrypted data, and effectively prevents tampering risks. The performance evaluation module continuously monitors the efficiency and resource consumption of the encryption algorithm to help enterprises optimize encryption strategies. The security audit module provides strong support for security review and problem tracking by recording encryption operation details in detail; in addition, the system has built-in diversified encryption algorithm modules, covering symmetric, asymmetric encryption, hash algorithms and message authentication codes, etc., which fully meet the encryption needs of enterprises in different scenarios and safeguard enterprise data security.

[0079] The standard parts used in the present invention can all be purchased from the market, and the special-shaped parts can be customized according to the description and the drawings. The specific connection methods of each part adopt conventional means such as mature bolts, rivets, welding, etc. in the prior art. The machinery, parts and equipment all adopt conventional models in the prior art, and the circuit connection adopts the conventional connection method in the prior art, which will not be described in detail here. The contents not described in detail in this specification belong to the prior art known to professional and technical personnel in this field.

[0080] In the description of the present invention, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include one or more of the features. "Multiple" means two or more, unless otherwise clearly and specifically defined.

[0081] In the present invention, unless otherwise clearly specified and limited, the terms "installed", "connected", "connected", "fixed" and the like should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium, it can be the internal connection of two elements or the interaction relationship between two elements. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0082] In the present invention, unless otherwise clearly specified and limited, a first feature being "above" or "below" a second feature may mean that the first and second features are in direct contact, or the first and second features are in indirect contact through an intermediate medium. Moreover, a first feature being "above", "above" or "above" a second feature may mean that the first feature is directly above or obliquely above the second feature, or simply means that the first feature is higher in level than the second feature. A first feature being "below", "below" or "below" a second feature may mean that the first feature is directly below or obliquely below the second feature, or simply means that the first feature is lower in level than the second feature.

[0083] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example" or "some examples" etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art may combine and combine the different embodiments or examples described in this specification and the features of the different embodiments or examples, unless they are contradictory.

[0084] In the drawings of the embodiments disclosed in the present invention, only the structures related to the embodiments disclosed in the present invention are involved, and other structures can refer to the general design. In the absence of conflict, the same embodiment and different embodiments of the present invention can be combined with each other.

[0085] Although the present invention has been described in detail with reference to the aforementioned embodiments, it is still possible for those skilled in the art to modify the technical solutions described in the aforementioned embodiments, or to make equivalent substitutions for some of the technical features therein. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the protection scope of the present invention.

Claims

1. An encryption method compatible with multiple encryption algorithms, It is characterized in that include: a. Receive the encrypted data and encryption parameters specified by the enterprise user through the user interface; b. Use the encryption management module to dynamically select the appropriate encryption algorithm based on the sensitivity, access requirements and data characteristics of the enterprise data; c. using an algorithm adapter to convert the data to be encrypted into a suitable format for the selected encryption algorithm; d. Generate keys that match the selected algorithm through the key management system and store and manage the keys securely; e. Execute the selected encryption algorithm to encrypt the data, generate ciphertext, and ensure the security of the encryption process; f. Use the data integrity verification module to perform integrity verification on the encryption result using the hash function H and the message authentication code function MAC to ensure the integrity of the enterprise data, where H(data) represents the hash calculation of the data data, and MAC(key, data) represents the message authentication code calculation of the data data using the key key; g. Use performance evaluation tools to monitor the encryption process in real time and evaluate the efficiency and resource consumption of different algorithms to meet the performance requirements of enterprises; h. Record detailed encryption operation logs through the security audit module, including operator identity, operation time and operation content, to facilitate enterprise security review and problem tracking; i. In scenarios where high security is required, a symmetric encryption algorithm S and an asymmetric encryption algorithm A are combined through a hybrid encryption process, and the asymmetric encryption algorithm A is used to securely distribute the symmetric key K sym Then use the symmetric key K sym Efficiently encrypt enterprise data; j. Dynamically update and expand encryption algorithms based on the system's performance evaluation and security audit results to adapt to the company's ever-changing security threats and performance requirements.

2. An encryption method compatible with multiple encryption algorithms as claimed in claim 1, It is characterized in that The encryption management module further includes: Algorithm adapters are used to convert enterprise data to be encrypted into corresponding formats according to the characteristics of different encryption algorithms to ensure compatibility between data and algorithms and encryption efficiency.

3. An encryption method compatible with multiple encryption algorithms as claimed in claim 2, It is characterized in that The user interface provides a friendly operation interface, allowing enterprise users to easily input data to be encrypted, select encryption algorithms, and set encryption parameters, while displaying encryption progress and results.

4. An encryption method compatible with multiple encryption algorithms as claimed in claim 3, It is characterized in that The key management system adopts a secure key generation algorithm and storage mechanism, and supports key lifecycle management, including key generation, storage, update, destruction and archiving, to meet the enterprise's high standards for key management.

5. An encryption method compatible with multiple encryption algorithms as claimed in claim 4, It is characterized in that The data integrity verification module adopts advanced hash algorithm and message authentication code technology to ensure the integrity and authenticity of encrypted enterprise data and prevent data from being tampered with during transmission and storage.

6. An encryption method compatible with multiple encryption algorithms as claimed in claim 5, It is characterized in that The performance evaluation tool provides real-time performance monitoring and evaluation functions. The formula for evaluating the computational efficiency of different encryption algorithms is as follows: Among them, Throughput represents the processing rate, that is, the amount of data processed per unit time, DataSize represents the size of the processed data, and EncryptionTime represents the time required to complete encryption; Help enterprises understand the computational efficiency and resource consumption of different encryption algorithms so as to select the most appropriate encryption algorithm.

7. An encryption method compatible with multiple encryption algorithms as claimed in claim 6, It is characterized in that The security audit module adopts a strict logging mechanism to record in detail all aspects of encryption operations, including operator identity, operation time and operation content, to facilitate the company's subsequent security review and problem tracking.

8. An encryption method compatible with multiple encryption algorithms as claimed in claim 7, It is characterized in that The hybrid encryption process combines the advantages of symmetric encryption and asymmetric encryption, uses the high security of asymmetric encryption algorithms to distribute symmetric keys, and then uses the high efficiency of symmetric keys to encrypt large amounts of enterprise data.

9. An encryption method compatible with multiple encryption algorithms as claimed in claim 6, It is characterized in that The system supports encryption requirements in a variety of application scenarios, including enterprise file encryption, communication encryption, and database encryption. It can flexibly select and apply different encryption algorithms according to the characteristics and requirements of different scenarios.

10. An encryption system compatible with multiple encryption algorithms, It is characterized in that The method comprises an encryption method compatible with multiple encryption algorithms as described in any one of claims 1 to 9, further comprising: User interface module, used to receive enterprise user input and display operation results; Encryption management module, used to select and call appropriate encryption algorithms based on enterprise user needs and data characteristics; Algorithm adapter module, used to convert enterprise data into the format required by a specific encryption algorithm; A key management module, used to generate, store and manage keys used in the encryption process; Data integrity verification module, used to ensure the integrity and authenticity of encrypted enterprise data; Performance evaluation module, used to evaluate the performance and resource consumption of different encryption algorithms; Security audit module, which is used to record detailed information of encryption operations to facilitate enterprise security review and problem tracking; Multiple encryption algorithm modules, including symmetric encryption algorithm, asymmetric encryption algorithm, hash algorithm and message authentication code algorithm, to support a variety of different encryption needs of enterprises.

Images