Surveying and mapping data encryption method and system

Abstract

The invention provides a surveying and mapping data encryption method and system, and belongs to the technical field of data encryption, and the method comprises the steps: obtaining initial surveying and mapping data, extracting key surveying and mapping data in the initial surveying and mapping data, carrying out the standardization processing of the key surveying and mapping data, and obtaining standard surveying and mapping data; segmenting the time sequence of the standard surveying and mapping data by using a sliding window method to obtain a surveying and mapping metadata packet of the sensitive data; obtaining information sensitive data of the surveying and mapping metadata packet according to a matching measure, and decomposing the information sensitive data to obtain prime number information data; performing security encryption on the prime number information data by using an optimized SM9 cryptographic algorithm, and outputting an encrypted target data ciphertext to complete surveying and mapping data encryption; according to the method, comprehensive protection of the surveying and mapping data in the full life cycle is realized, the confidentiality in the surveying and mapping data transmission and storage process is ensured, the encryption efficiency is improved, and meanwhile, the security of the surveying and mapping data in a multi-stage transmission link is ensured.

Description

Technical Field

[0001] The present invention belongs to the technical field of data encryption, and in particular to a surveying and mapping data encryption method and system. Background Art

[0002] With the rapid development of geographic information systems and their widespread penetration into key areas such as urban planning, environmental monitoring, disaster warning, and intelligent transportation, surveying and mapping data, as the core cornerstone of system operation, has become the focus of attention from all walks of life for its security and confidentiality. Although traditional data encryption methods can provide data protection to a certain extent, they are often limited to a single encryption process for static data and lack comprehensive protection for the entire life cycle of data (including generation, transmission, storage, and processing). In addition, traditional methods are unable to cope with the complex and changing network environment, large-scale data processing requirements, and multi-user collaboration scenarios. Therefore, how to improve the security of surveying and mapping data during data generation, transmission, storage, and processing is a technical problem that needs to be solved urgently at this stage. Summary of the invention

[0003] In view of the above-mentioned deficiencies in the prior art, the present invention provides a surveying and mapping data encryption method and system, which solves the problems of lack of comprehensive protection for the entire life cycle of surveying and mapping data and low security of surveying and mapping data during data generation, transmission, storage and processing.

[0004] In order to achieve the above objectives, the technical solution adopted by the present invention is as follows: On the one hand, the present invention provides a surveying and mapping data encryption method, comprising the following steps: S1. Obtaining initial surveying and mapping data, extracting key surveying and mapping data from the initial surveying and mapping data, and performing standardization processing on the key surveying and mapping data to obtain standard surveying and mapping data; S2, using the sliding window method to segment the time series of standard surveying and mapping data to obtain surveying and mapping metadata packages of sensitive data; S3, obtaining information sensitive data of the surveying and mapping metadata package according to the matching measure, decomposing the information sensitive data to obtain prime number information data; S4. Use the optimized national encryption SM9 algorithm to securely encrypt prime number information data, output the encrypted target data ciphertext, and complete the surveying and mapping data encryption.

[0005] The beneficial effects of the present invention are as follows: the present invention utilizes standardized processing and data segmentation, sliding window method, sensitive data processing and encryption, and optimized national secret SM9 algorithm to process the acquired initial surveying and mapping data, thereby enriching the comprehensive protection of surveying and mapping data throughout its life cycle, and improving the security of surveying and mapping data during data generation, transmission, storage, and processing.

[0006] Furthermore, the S1 comprises the following steps: S101, obtaining initial surveying and mapping data, and using data mining to extract geographic location coordinate data, altitude data, and feature data of land objects in the initial surveying and mapping data to obtain key surveying and mapping data; S102, performing unit unification, coordinate system conversion and precision adjustment processing on the key surveying and mapping data in sequence to obtain standard surveying and mapping data.

[0007] The beneficial effects of the above further scheme are as follows: the present invention obtains original surveying and mapping data from the source, extracts key surveying and mapping data through data mining, ensures the efficiency and pertinence of processing surveying and mapping data, and uses standardized processing and data segmentation to unify the surveying and mapping data format and measurement units, eliminates the inconsistency of diverse surveying and mapping data sources, and improves the interoperability of surveying and mapping data and the accuracy of analyzing surveying and mapping data.

[0008] Furthermore, the S2 comprises the following steps: S201, according to data characteristics and analysis requirements, set the size of the sliding window according to the time interval and the number of data points; S202, defining a step length of window sliding as one third, extracting key metadata including timestamp, location information and environmental parameters in each window; S203. Integrate the key metadata in the window into a structured data package to obtain a surveying and mapping metadata package of sensitive data.

[0009] The beneficial effect of the above further scheme is that the present invention adopts a sliding window method to intelligently segment the time series, flexibly captures sensitive change points in the data, and improves the flexibility and response speed of data processing.

[0010] Furthermore, the S3 comprises the following steps: S301, selecting a matching measure according to correlation analysis, using the matching measure to identify sensitive information in a mapping metadata package of sensitive data, and obtaining a matching measure identification result; S302: extract sensitive data from the matching measurement recognition result, and decompose the sensitive information using mathematical transformation to obtain prime number information data.

[0011] The beneficial effect of the above further scheme is: the present invention uses a specific matching measure to screen out information sensitive data that is to be protected, and decomposes it through mathematical transformation, thereby increasing the difficulty of data cracking, achieving primary information obfuscation, and improving the security of sensitive data.

[0012] Furthermore, the S4 comprises the following steps: S401, using the optimized national secret SM9 algorithm to obtain the public key and private key pair of the prime number information data, saving the private key at the data recipient, and using the optimized national secret SM9 algorithm to encrypt the plaintext to obtain the ciphertext of the surveying and mapping data; S402, grouping the prime number information data according to the principle of the same number of digits, and using each group of the prime number information data as an encryption unit; S403, using the public key corresponding to each encryption unit to perform encryption operations on each encryption unit, and generate a single set of keys; S404, input the surveying and mapping data ciphertext and the single group key into the optimized national encryption SM9 algorithm, output the target data ciphertext of the single group key corresponding to the prime number information group, and complete the surveying and mapping data encryption.

[0013] Furthermore, the optimization steps of the national secret SM9 algorithm include: Use Karatsuba algorithm and square algorithm to optimize the tower expansion operation in the national encryption SM9 algorithm; Miller cycle is used to calculate the point addition, doubling and straight line functions in Jacobi coordinate system, and the twist point method is used to map the elements of quadratic expansion domain in the national secret SM9 algorithm to the twelve-fold expansion domain and interpret them; The large power terms in the national secret SM9 algorithm are optimized by using the fast square algorithm based on circular subgroups, the NAF algorithm and the Comb fixed basis algorithm.

[0014] The beneficial effects of the above further scheme are as follows: the present invention utilizes the optimized national secret SM9 algorithm to encrypt data, which has the characteristics of high security and excellent computing efficiency, improves the confidentiality of data during transmission and storage, and adopts a grouping strategy in the encryption process to enhance the complexity and security of encryption, which not only improves the encryption efficiency, but also ensures the security of data in multi-level transmission links.

[0015] On the other hand, the present invention provides a surveying and mapping data encryption system, characterized in that it includes: Surveying and mapping data acquisition module: used to obtain initial surveying and mapping data, extract key surveying and mapping data from the initial surveying and mapping data, perform standardization on the key surveying and mapping data, and obtain standard surveying and mapping data; Data sequence segmentation module: used to segment the time series of standard surveying and mapping data using the sliding window method to obtain surveying and mapping metadata packages of sensitive data; Sensitive data decomposition module: used for obtaining the information sensitive data of the surveying and mapping metadata package according to the matching measure, decomposing the information sensitive data to obtain prime number information data; Surveying and mapping data encryption module: used to securely encrypt prime number information data using the optimized national encryption SM9 algorithm, output the encrypted target data ciphertext, and complete surveying and mapping data encryption.

[0016] Furthermore, the surveying and mapping data acquisition module includes: Acquisition submodule: used to obtain initial surveying and mapping data; Extraction submodule: used to extract geographic location coordinate data, altitude data and ground feature data from the initial surveying and mapping data to obtain key surveying and mapping data; Standardization submodule: used to perform unit unification, coordinate system conversion and precision adjustment on the key surveying and mapping data in sequence to obtain standard surveying and mapping data.

[0017] Furthermore, the data sequence segmentation module includes: Setting submodule: used to set the size of the sliding window according to the time interval and the number of data points based on data characteristics and analysis requirements; Step size submodule: used to define the step size of window sliding as one-third, and extract key metadata including timestamp, location information and environmental parameters in each window; Integration submodule: used to integrate the key metadata in the window into a structured data package to obtain the mapping metadata package of sensitive data.

[0018] Furthermore, the sensitive data decomposition module includes: Matching submodule: used to select matching measures according to correlation analysis, use matching measures to identify sensitive information in the mapping metadata package of sensitive data, and obtain matching measure identification results; Prime number submodule: used to extract sensitive data from the matching measurement recognition results, and use mathematical transformation to decompose the sensitive information to obtain prime number information data.

[0019] Furthermore, the surveying and mapping data encryption module includes: Optimization submodule: used to optimize the national secret SM9 algorithm; Key acquisition submodule: used to obtain the public key and private key pair of prime number information data using the optimized national secret SM9 algorithm, save the private key in the data receiver, and encrypt the plaintext using the optimized national secret SM9 algorithm to obtain the ciphertext of surveying and mapping data; Grouping submodule: used for grouping the prime number information data according to the principle of the same number of bits, and taking each group of the prime number information data as an encryption unit; Key submodule: used to perform encryption operations on each encryption unit using the public key corresponding to each encryption unit and generate a single set of keys; Encryption submodule: used to input the surveying and mapping data ciphertext and a single group of keys into the optimized national encryption SM9 algorithm, output the target data ciphertext of the prime number information group corresponding to the single group of keys, and complete the encryption of surveying and mapping data.

[0020] Furthermore, the optimization submodule includes: Algorithm optimization unit: used to optimize the tower expansion operation in the national secret SM9 algorithm using the Karatsuba algorithm and the square algorithm; Torsion optimization unit: used to calculate the point addition, doubling and straight line functions in the Jacobian coordinate system using the Miller cycle, and use the torsion point method to map the elements of the quadratic expansion domain in the national secret SM9 algorithm to the twelve-fold expansion domain and interpret them; Computational optimization unit: used to optimize the calculation of large power terms in the national secret SM9 algorithm using the fast square algorithm based on circular subgroups, the NAF algorithm, and the Comb fixed basis algorithm.

[0021] The beneficial effects of the above further scheme are: a surveying and mapping data encryption system provided by the present invention is applied to the above surveying and mapping data encryption method, which enriches the comprehensive protection of surveying and mapping data throughout its life cycle, improves the security of surveying and mapping data during data generation, transmission, storage and processing, realizes primary information obfuscation, and enhances the complexity and security of encryption. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] Figure 1 The figure is a flow chart of the method of the present invention.

[0023] Figure 2 It is the flow chart of the encryption part of the present invention.

[0024] Figure 3 2 is a system structure diagram in this embodiment. DETAILED DESCRIPTION

[0025] The specific implementation modes of the present invention are described below so that those skilled in the art can understand the present invention. However, it should be clear that the present invention is not limited to the scope of the specific implementation modes. For those of ordinary skill in the art, as long as various changes are within the spirit and scope of the present invention as defined and determined by the attached claims, these changes are obvious, and all inventions and creations utilizing the concept of the present invention are protected.

[0026] Before describing this embodiment, the following terms are explained: Miller cycle: Miller cycle; NAF algorithm: non-adjacent form algorithm; ECC: Elliptic Curve Cryptography; ECDSA: Elliptic Curve Digital Signature Algorithm; SPA: Simple Power Analysis Attack; ISO / IEC: International Organization for Standardization / International Electrotechnical Commission.

[0027] Example 1 like Figure 1 As shown, the present invention provides a surveying and mapping data encryption method, and its implementation method is as follows: S1. Obtaining initial surveying and mapping data, extracting key surveying and mapping data from the initial surveying and mapping data, and performing standardization on the key surveying and mapping data to obtain standard surveying and mapping data. The implementation method is as follows: S101, obtaining initial surveying and mapping data, and using data mining to extract geographic location coordinate data, altitude data, and feature data of land objects in the initial surveying and mapping data to obtain key surveying and mapping data; S102, performing unit unification, coordinate system conversion and precision adjustment processing on the key surveying and mapping data in sequence to obtain standard surveying and mapping data.

[0028] In this embodiment, initial surveying and mapping data is obtained, and the initial surveying and mapping data at least includes terrain data, geographic coordinate data, land feature data, image data, attribute data, three-dimensional data, time series data, and control point data; geographic location coordinate data, altitude data, and land feature data in the initial surveying and mapping data are obtained to obtain key surveying and mapping data; the key surveying and mapping data are sequentially subjected to unit unification, coordinate system conversion, and precision adjustment processing to obtain standard surveying and mapping data.

[0029] S2. Use the sliding window method to segment the time series of standard surveying and mapping data to obtain the surveying and mapping metadata package of sensitive data. The implementation method is as follows: S201, according to data characteristics and analysis requirements, set the size of the sliding window according to the time interval and the number of data points; S202, defining a step length of window sliding as one third, extracting key metadata including timestamp, location information and environmental parameters in each window; S203. Integrate the key metadata in the window into a structured data package to obtain a surveying and mapping metadata package of sensitive data.

[0030] In this embodiment, according to the data characteristics and analysis requirements, the size of the sliding window is set according to the time interval and the number of data points; the step size of the window sliding is defined as one-third, and in each window, key metadata including timestamp, location information, and environmental parameters are extracted; the metadata in continuous windows are integrated into a structured data packet to obtain a surveying and mapping metadata packet of sensitive data.

[0031] S3, obtaining the information sensitive data of the surveying and mapping metadata package according to the matching measure, decomposing the information sensitive data to obtain prime number information data, and the implementation method thereof is as follows: S301, selecting a matching measure according to correlation analysis, using the matching measure to identify sensitive information in a mapping metadata package of sensitive data, and obtaining a matching measure identification result; S302: extract sensitive data from the matching measurement recognition result, and decompose the sensitive information using mathematical transformation to obtain prime number information data.

[0032] In this embodiment, a matching measure is selected based on correlation analysis, and the matching measure is used to identify sensitive information in the data packet to obtain a matching measure identification result; the matching measure identification result is used to extract sensitive data, and the sensitive data includes at least personal location trajectory and important facility coordinates; the sensitive information is mathematically transformed and decomposed into multiple prime numbers with small logarithms to obtain prime number information data.

[0033] S4. Use the optimized national secret SM9 algorithm to securely encrypt the prime number information data, output the encrypted target data ciphertext, and complete the surveying and mapping data encryption, such as Figure 2 As shown, the implementation method is as follows: S401, using the optimized national secret SM9 algorithm to obtain the public key and private key pair of the prime number information data, saving the private key at the data recipient, and using the optimized national secret SM9 algorithm to encrypt the plaintext to obtain the ciphertext of the surveying and mapping data; S402, grouping the prime number information data according to the principle of the same number of digits, and using each group of the prime number information data as an encryption unit; S403, using the public key corresponding to each encryption unit to perform encryption operations on each encryption unit, and generate a single set of keys; S404, input the surveying and mapping data ciphertext and the single group key into the optimized national encryption SM9 algorithm, output the target data ciphertext of the single group key corresponding to the prime number information group, and complete the surveying and mapping data encryption.

[0034] The optimization steps of the national secret SM9 algorithm include: Use Karatsuba algorithm and square algorithm to optimize the tower expansion operation in the national encryption SM9 algorithm; Miller cycle is used to calculate the point addition, doubling and straight line functions in Jacobi coordinate system, and the twist point method is used to map the elements of quadratic expansion domain in the national secret SM9 algorithm to the twelve-fold expansion domain and interpret them; The large power terms in the national secret SM9 algorithm are optimized by using the fast square algorithm based on circular subgroups, the NAF algorithm and the Comb fixed basis algorithm.

[0035] In this embodiment, a national secret SM9 algorithm is established, and the Karatsuba algorithm and the square algorithm are used to reduce the number of underlying multiplications of the tower expansion operation of the national secret SM9 algorithm; the Miller loop is used to calculate the point addition, doubling point and straight line functions in the Jacobi coordinate system, and the mapping of the elements of the quadratic expansion field to the twelve-fold expansion field by twisting the points is explained; based on the use of the fast square algorithm based on the circular subgroup, the NAF algorithm and the Comb fixed basis algorithm for large power terms, the optimized national secret SM9 algorithm is obtained.

[0036] In this embodiment, the public key and private key pair of prime number information data are obtained by using the optimized national secret SM9 algorithm, and the private key is kept by the data recipient; the plain text is encrypted by using the optimized national secret SM9 algorithm to obtain the surveying and mapping data ciphertext, and the prime number information data is grouped according to the principle of the same number of bits, and each group of data is used as an encryption unit; each data group is encrypted by using the optimized national secret SM9 algorithm, and the encryption operation is performed using the corresponding public key of the group; a single group key is generated for each group of data encryption operation, and the single group key is transmitted to the encryption background of the optimized national secret SM9 algorithm; the background of the optimized national secret SM9 algorithm receives the data ciphertext and the single group key, outputs the encrypted target data ciphertext after processing, and transmits and stores the encrypted surveying and mapping data ciphertext.

[0037] In this embodiment, the national secret SM9 algorithm is an identity-based cryptographic algorithm (abbreviated as "IBC"), which consists of three parts: a digital signature algorithm, an identity encryption algorithm, and a key agreement protocol. It is my country's first asymmetric cryptographic algorithm whose entire system is included in the ISO / IEC standard.

[0038] The National Secret SM9 algorithm does not require a certificate: Unlike traditional public key cryptography systems (such as RSA and ECC), the SM9 algorithm does not require a digital certificate, but directly uses the user's identity (such as email address, phone number, etc.) as the public key. This feature gives the SM9 algorithm a significant advantage in key management and distribution, reducing the complexity and cost of the system. Efficiency: The SM9 algorithm is very efficient when running on resource-constrained IoT devices and is suitable for mobile devices and embedded systems. Compared with traditional public key cryptography systems, the SM9 algorithm has higher computational efficiency in key generation and encryption. Security: The SM9 algorithm is based on the theory of elliptic curve cryptography, and its security relies on the difficulty of the elliptic curve discrete logarithm problem. At present, there is no effective cracking method for elliptic curve cryptography in the world, so the SM9 algorithm has high security performance. Privacy protection: The SM9 algorithm allows users to perform authentication and signing operations without revealing their true identity, thereby protecting the privacy of users.

[0039] The SM9 algorithm uses the principles of elliptic curve cryptography and uses points on elliptic curves to perform digital signatures, authentication, and key exchange. In the SM9 algorithm, the key generation and derivation process as well as encryption and decryption operations are based on mathematical operations on elliptic curves.

[0040] In this embodiment, the Karatsuba algorithm is effectively used for large number multiplication. The algorithm decomposes the multiplication problem of two large numbers into smaller sub-problems through a divide-and-conquer strategy, thereby significantly reducing the computational complexity of the multiplication.

[0041] In traditional large number multiplication, two n Multiplication of digits requires approximately The Karatsuba algorithm is a basic operation. Two steps are completed n Multiplication of digits.

[0042] The basic principle of Karatsuba algorithm is to convert two large numbers into x and y Split them into smaller parts, and then calculate the product of the original large number by multiplying these small parts and a small amount of addition and shift operations. The specific steps are as follows: Split: x and y Split into two parts, the splitting formula is as follows: ; ; in B Indicates a base (such as 10 in decimal), m Representing large numbers x or y Half the number of digits (round down), x 1 and x 0 represents a large number x The high and low parts of y 1 and y 0 represents a large number y The high and low parts of .

[0043] Compute the subproducts: calculate (high times high); calculate (low times low); calculate (one extra multiplication and two subtractions to get the intermediate product); Combination result: Combining the above three sub-products, the expression of the final result is as follows: .

[0044] In this embodiment, the NAF algorithm and the Comb fixed-base algorithm are two important algorithms in cryptography and computer science, and they each play an important role in different fields and scenarios.

[0045] In this embodiment, the NAF algorithm is a non-adjacent form algorithm. The core idea of ​​the NAF algorithm is to split the scalar into a special polynomial expression in which there are no non-zero consecutive numbers between adjacent terms, so as to reduce the number of multiplications and improve the calculation efficiency. Specifically, the NAF algorithm introduces the "-1" value to further reduce unnecessary multiplication operations on the basis of binary representation. The NAF algorithm is particularly important in scalar multiplication in elliptic curve cryptography (ECC), especially in the verification process of ECDSA, for accelerating nP operations. In addition, the NAF algorithm is also used in the field of continuous control in reinforcement learning, such as the Q learning algorithm for continuous action version, namely normalized advantage functions (NAF).

[0046] The NAF algorithm significantly improves computational efficiency by reducing the number of multiplications, especially when dealing with large number operations and complex cryptographic operations.

[0047] In this embodiment, the Comb fixed base algorithm is a scalar multiplication algorithm based on a fixed base point, which is widely used in elliptic curve cryptography. The algorithm pre-calculates a series of multiple points of the fixed base point and reuses these pre-calculated values ​​in the scalar multiplication process to reduce the number of multiplications and computational complexity.

[0048] The Comb fixed-base algorithm is used to improve the computational efficiency of scalar multiplication in elliptic curve cryptography, especially in resource-constrained IoT devices and embedded systems. In addition, the algorithm is also used to resist side-channel attacks such as SPA.

[0049] Example 2 The embodiment of the present invention provides a surveying and mapping data encryption system, such as Figure 3 As shown, the surveying and mapping data encryption system is characterized by comprising: Surveying and mapping data acquisition module: used to obtain initial surveying and mapping data, extract key surveying and mapping data from the initial surveying and mapping data, perform standardization on the key surveying and mapping data, and obtain standard surveying and mapping data; Data sequence segmentation module: used to segment the time series of standard surveying and mapping data using the sliding window method to obtain surveying and mapping metadata packages of sensitive data; Sensitive data decomposition module: used for obtaining the information sensitive data of the surveying and mapping metadata package according to the matching measure, decomposing the information sensitive data to obtain prime number information data; Surveying and mapping data encryption module: used to securely encrypt prime number information data using the optimized national encryption SM9 algorithm, output the encrypted target data ciphertext, and complete surveying and mapping data encryption.

[0050] The surveying and mapping data acquisition module comprises: Acquisition submodule: used to obtain initial surveying and mapping data; Extraction submodule: used to extract geographic location coordinate data, altitude data and ground feature data from the initial surveying and mapping data to obtain key surveying and mapping data; Standardization submodule: used to perform unit unification, coordinate system conversion and precision adjustment on the key surveying and mapping data in sequence to obtain standard surveying and mapping data.

[0051] The data sequence segmentation module comprises: Setting submodule: used to set the size of the sliding window according to the time interval and the number of data points based on data characteristics and analysis requirements; Step size submodule: used to define the step size of window sliding as one-third, and extract key metadata including timestamp, location information and environmental parameters in each window; Integration submodule: used to integrate the key metadata in the window into a structured data package to obtain the mapping metadata package of sensitive data.

[0052] The sensitive data decomposition module includes: Matching submodule: used to select matching measures according to correlation analysis, use matching measures to identify sensitive information in the mapping metadata package of sensitive data, and obtain matching measure identification results; Prime number submodule: used to extract sensitive data from the matching measurement recognition results, and use mathematical transformation to decompose the sensitive information to obtain prime number information data.

[0053] The surveying and mapping data encryption module includes: Optimization submodule: used to optimize the national secret SM9 algorithm; Key acquisition submodule: used to obtain the public key and private key pair of prime number information data using the optimized national secret SM9 algorithm, save the private key in the data receiver, and encrypt the plaintext using the optimized national secret SM9 algorithm to obtain the ciphertext of surveying and mapping data; Grouping submodule: used for grouping the prime number information data according to the principle of the same number of bits, and taking each group of the prime number information data as an encryption unit; Key submodule: used to perform encryption operations on each encryption unit using the public key corresponding to each encryption unit and generate a single set of keys; Encryption submodule: used to input the surveying and mapping data ciphertext and a single group of keys into the optimized national encryption SM9 algorithm, output the target data ciphertext of the prime number information group corresponding to the single group of keys, and complete the encryption of surveying and mapping data.

[0054] The optimization submodule includes: Algorithm optimization unit: used to optimize the tower expansion operation in the national secret SM9 algorithm using the Karatsuba algorithm and the square algorithm; Torsion optimization unit: used to calculate the point addition, doubling and straight line functions in the Jacobian coordinate system using the Miller cycle, and use the torsion point method to map the elements of the quadratic expansion domain in the national secret SM9 algorithm to the twelve-fold expansion domain and interpret them; Computational optimization unit: used to optimize the calculation of large power terms in the national secret SM9 algorithm using the fast square algorithm based on circular subgroups, the NAF algorithm, and the Comb fixed basis algorithm.

[0055] In this embodiment, the present application can divide the modules according to the surveying and mapping data encryption method. For example, each function can be divided into each module, or two or more functions can be integrated into one module. The above modules can be implemented in the form of hardware or software. It should be noted that the division of modules in the present invention is schematic and is only a logical division. There may be other division methods in actual implementation.

[0056] In this embodiment, in order to realize the principles and beneficial effects of the surveying and mapping data encryption method, the surveying and mapping data encryption system includes hardware structures and / or software parts corresponding to the execution of each function. Those skilled in the art should easily realize that, in combination with the schematic modules and method steps described in the embodiments disclosed in the present invention, the present invention can be implemented in the form of hardware and / or a combination of hardware and computer software. Whether a function is executed in a hardware or computer software driven manner depends on the specific application and design constraints of the technical solution. Different methods can be used for each specific application to implement the described function, but such implementation should not be considered to exceed the scope of this application.

Claims

1. A surveying and mapping data encryption method, characterized in that: The following steps are involved: S1. Obtaining initial surveying and mapping data, extracting key surveying and mapping data from the initial surveying and mapping data, and performing standardization processing on the key surveying and mapping data to obtain standard surveying and mapping data; S2, using the sliding window method to segment the time series of standard surveying and mapping data to obtain surveying and mapping metadata packages of sensitive data; S3, obtaining information sensitive data of the surveying and mapping metadata package according to the matching measure, decomposing the information sensitive data to obtain prime number information data; S4. Use the optimized national encryption SM9 algorithm to securely encrypt prime number information data, output the encrypted target data ciphertext, and complete the surveying and mapping data encryption.

2. The surveying and mapping data encryption method according to claim 1, characterized in that: The S1 comprises the following steps: S101, obtaining initial surveying and mapping data, and using data mining to extract geographic location coordinate data, altitude data, and feature data of land objects in the initial surveying and mapping data to obtain key surveying and mapping data; S102, performing unit unification, coordinate system conversion and precision adjustment processing on the key surveying and mapping data in sequence to obtain standard surveying and mapping data.

3. The surveying and mapping data encryption method according to claim 1, characterized in that: The S2 comprises the following steps: S201, according to data characteristics and analysis requirements, set the size of the sliding window according to the time interval and the number of data points; S202, defining a step length of window sliding as one third, extracting key metadata including timestamp, location information and environmental parameters in each window; S203. Integrate the key metadata in the window into a structured data package to obtain a surveying and mapping metadata package of sensitive data.

4. The surveying and mapping data encryption method according to claim 1, characterized in that: The S3 comprises the following steps: S301, selecting a matching measure according to correlation analysis, using the matching measure to identify sensitive information in a mapping metadata package of sensitive data, and obtaining a matching measure identification result; S302: extract sensitive data from the matching measurement recognition result, and decompose the sensitive information using mathematical transformation to obtain prime number information data.

5. The surveying and mapping data encryption method according to claim 1, characterized in that: The S4 comprises the following steps: S401, using the optimized national secret SM9 algorithm to obtain the public key and private key pair of the prime number information data, saving the private key at the data recipient, and using the optimized national secret SM9 algorithm to encrypt the plaintext to obtain the ciphertext of the surveying and mapping data; S402, grouping the prime number information data according to the principle of the same number of digits, and using each group of the prime number information data as an encryption unit; S403, using the public key corresponding to each encryption unit to perform encryption operations on each encryption unit, and generate a single set of keys; S404, input the surveying and mapping data ciphertext and the single group key into the optimized national encryption SM9 algorithm, output the target data ciphertext of the single group key corresponding to the prime number information group, and complete the surveying and mapping data encryption.

6. The surveying and mapping data encryption method according to claim 5, characterized in that: The optimization steps of the national secret SM9 algorithm include: Use Karatsuba algorithm and square algorithm to optimize the tower expansion operation in the national encryption SM9 algorithm; Miller cycle is used to calculate the point addition, doubling and straight line functions in Jacobi coordinate system, and the twist point method is used to map the elements of quadratic expansion domain in the national secret SM9 algorithm to the twelve-fold expansion domain and interpret them; The large power terms in the national secret SM9 algorithm are optimized by using the fast square algorithm based on circular subgroups, the NAF algorithm and the Comb fixed basis algorithm.

7. A surveying and mapping data encryption system, characterized in that: The surveying and mapping data encryption system is applied to the surveying and mapping data encryption method, including: Surveying and mapping data acquisition module: used to obtain initial surveying and mapping data, extract key surveying and mapping data from the initial surveying and mapping data, perform standardization on the key surveying and mapping data, and obtain standard surveying and mapping data; Data sequence segmentation module: used to segment the time series of standard surveying and mapping data using the sliding window method to obtain surveying and mapping metadata packages of sensitive data; Sensitive data decomposition module: used for obtaining the information sensitive data of the surveying and mapping metadata package according to the matching measure, decomposing the information sensitive data to obtain prime number information data; Surveying and mapping data encryption module: used to securely encrypt prime number information data using the optimized national encryption SM9 algorithm, output the encrypted target data ciphertext, and complete surveying and mapping data encryption.

8. The surveying and mapping data encryption system according to claim 7, characterized in that: The surveying and mapping data acquisition module comprises: Acquisition submodule: used to obtain initial surveying and mapping data; Extraction submodule: used to extract geographic location coordinate data, altitude data and ground feature data from the initial surveying and mapping data to obtain key surveying and mapping data; Standardization submodule: used to perform unit unification, coordinate system conversion and precision adjustment on the key surveying and mapping data in sequence to obtain standard surveying and mapping data.

9. The surveying and mapping data encryption system according to claim 7, characterized in that: The data sequence segmentation module comprises: Setting submodule: used to set the size of the sliding window according to the time interval and the number of data points based on data characteristics and analysis requirements; Step size submodule: used to define the step size of window sliding as one-third, and extract key metadata including timestamp, location information and environmental parameters in each window; Integration submodule: used to integrate the key metadata in the window into a structured data package to obtain the mapping metadata package of sensitive data.

10. The surveying and mapping data encryption system according to claim 7, characterized in that: The sensitive data decomposition module includes: Matching submodule: used to select matching measures according to correlation analysis, use matching measures to identify sensitive information in the mapping metadata package of sensitive data, and obtain matching measure identification results; Prime number submodule: used to extract sensitive data from the matching measurement recognition results, and use mathematical transformation to decompose the sensitive information to obtain prime number information data.

11. The surveying and mapping data encryption system according to claim 7, characterized in that: The surveying and mapping data encryption module includes: Optimization submodule: used to optimize the national secret SM9 algorithm; Key acquisition submodule: used to obtain the public key and private key pair of prime number information data using the optimized national secret SM9 algorithm, save the private key in the data receiver, and encrypt the plaintext using the optimized national secret SM9 algorithm to obtain the ciphertext of surveying and mapping data; Grouping submodule: used for grouping the prime number information data according to the principle of the same number of bits, and taking each group of the prime number information data as an encryption unit; Key submodule: used to perform encryption operations on each encryption unit using the public key corresponding to each encryption unit and generate a single set of keys; Encryption submodule: used to input the surveying and mapping data ciphertext and a single group of keys into the optimized national encryption SM9 algorithm, output the target data ciphertext of the prime number information group corresponding to the single group of keys, and complete the encryption of surveying and mapping data.

12. The surveying and mapping data encryption system according to claim 11, characterized in that: The optimization submodule includes: Algorithm optimization unit: used to optimize the tower expansion operation in the national secret SM9 algorithm using the Karatsuba algorithm and the square algorithm; Torsion optimization unit: used to calculate the point addition, doubling and straight line functions in the Jacobian coordinate system using the Miller cycle, and use the torsion point method to map the elements of the quadratic expansion domain in the national secret SM9 algorithm to the twelve-fold expansion domain and interpret them; Computational optimization unit: used to optimize the calculation of large power terms in the national secret SM9 algorithm using the fast square algorithm based on circular subgroups, the NAF algorithm, and the Comb fixed basis algorithm.

Images