Encryption method and related equipment

Abstract

The present invention relates to the field of computer storage technology, and specifically to an encryption method and related equipment. The encryption method comprises the following steps: generating a unique device identifier through a polymorphic ring structure, which is used for the unique identification and key generation of a solid-state storage device; generating a multidimensional dynamic key based on the generated device identifier in combination with a multidimensional hybrid function, which is used for data encryption; using the multidimensional dynamic key, encrypting segmented data, and embedding a progressive vector check code into each data segment, which is used to enhance the security of the data segmentation level. The present invention solves the deficiencies of existing solid-state storage device encryption technology in key management, encryption mechanism, and real-time monitoring, and provides all-round protection for data storage security.

Description

Technical Field

[0001] The present invention relates to the technical field of computer storage, in particular to an encryption method and related equipment. Background Art

[0002] Solid-state storage devices (SSDs) are widely used in personal computers, data centers, and mobile devices due to their high performance, high reliability, and low power consumption. With the rapid growth of data storage demand and the increasing importance of data, how to protect the data information stored in these devices has become an urgent problem to be solved. Although the prior art has developed some encryption methods to protect data in solid-state storage devices, these methods have several limitations.

[0003] At present, common encryption methods mostly rely on symmetric key algorithms or asymmetric key algorithms. However, symmetric key algorithms have risks in key management and protection during transmission and storage, while asymmetric key algorithms increase system overhead due to their high computational complexity. In addition, problems such as key leakage, single encryption mechanism, and insufficient anti-interference ability introduced by storage devices during the encryption process make it difficult for existing encryption methods to fully respond to complex security threats. For example, once the encryption key of a storage device is obtained or cracked by an attacker, the data stored in it will be exposed.

[0004] Therefore, the technical problem faced by existing encryption methods is: how to ensure the security of data in solid-state storage devices when facing advanced persistent threat (APT) attacks and other sophisticated network attacks. Summary of the invention

[0005] The present invention provides an encryption method and related equipment to solve the technical problem that the existing encryption method is not reliable enough.

[0006] The technical solution of the present invention to solve the above technical problems is as follows:

[0007] In one aspect, an encryption method is provided, which is applied to a solid-state storage device, and the method comprises the following steps:

[0008] Generate a unique device identifier through a polymorphic ring structure for key generation of solid-state storage devices;

[0009] Based on the generated device identifier, a multi-dimensional dynamic key is generated in combination with a multi-dimensional mixing function for data encryption;

[0010] Use multi-dimensional dynamic keys to encrypt segmented data and embed progressive vector checksums into each data segment to enhance the security of the data segment level.

[0011] Recursively hashing the multi-dimensional dynamic key through multiple variable hash functions for generating a key map, and using the key map to form a key graph, which is stored in a secure area within a solid-state storage device;

[0012] Use frequency perturbation monitoring algorithms to monitor the integrity and encryption status of multi-dimensional dynamic keys in real time, and verify the encryption status through high-order vector queries;

[0013] The decryption key is extracted from the key graph through the inverse mixing function, and the decryption operation of the encrypted segmented data is completed according to the progressive vector check code verification and inverse operation to restore the original data.

[0014] On the other hand, an encryption system is provided, which is applied to a solid-state storage device and is used to implement the above encryption method. The system includes:

[0015] The controller module is used to manage the initialization, key generation, and data encryption and decryption operations of the solid-state storage device. The controller module includes:

[0016] An initialization unit, used for generating a unique device identifier and performing device initialization;

[0017] a data processing unit for managing encryption and decryption operations of data segments;

[0018] A key generation unit, used for generating a multi-dimensional dynamic key through a multi-dimensional mixing function;

[0019] The key management module is used to generate and protect multi-dimensional dynamic keys. The key management module includes:

[0020] A key generation unit, used for generating a multi-dimensional dynamic key based on a device identifier and a dynamic system vector;

[0021] A key protection unit, used for performing multiple hash operations on the generated multi-dimensional dynamic key through multiple variable hash functions;

[0022] A key storage unit, used to store the key mapping after the multi-hashing operation in a secure area within the solid-state storage device;

[0023] The data verification module is used to monitor the encryption status in real time and perform data integrity verification. The data verification module includes:

[0024] A real-time monitoring unit, used to monitor the encryption status in real time through a frequency disturbance monitoring algorithm;

[0025] A query generation unit, used to generate high-order vector queries and perform status verification;

[0026] A check unit, used for checking the integrity of the data segment according to the progressive vector check code;

[0027] A secure storage module is used to store and protect the key graph. The secure storage module includes:

[0028] A storage control unit for managing the storage of the key graph within the secure area;

[0029] A hash calculation unit, used for recursive hash operation of multi-dimensional dynamic keys to generate a key mapping;

[0030] The protection unit is used to protect the key through multiple transformation technologies to prevent physical layer attacks;

[0031] The data transmission module is used to transmit encrypted data or decrypted data between the solid-state storage device and the processor.

[0032] In another aspect, a key generation device is provided, which is applied to a solid-state storage device, and the device includes the encryption system as described above, and the device also includes:

[0033] a polymorphic ring generation unit for generating a unique device identifier through a physically unclonable function;

[0034] A dynamic function calculation unit, used for calculating a multi-dimensional dynamic key through a multi-dimensional hybrid function;

[0035] A recursive hash unit, used for performing recursive hash operations on multi-dimensional dynamic keys through multiple variable hash functions to generate a key mapping;

[0036] A storage unit, used to store the generated key mapping.

[0037] In another aspect, an electronic product is provided, comprising the key generating device as described above, wherein the key generating device is integrated in a solid-state storage device, and the electronic product further comprises:

[0038] Processor module, used to perform computing tasks of electronic products;

[0039] A power management module for providing power and managing power consumption;

[0040] The display module is used to present visual information of data in the solid-state storage device.

[0041] The beneficial effects of the present invention are:

[0042] The encryption method of the present invention uses a polymorphic ring structure to generate a unique device identifier, so that each solid-state storage device has a unique and tamper-proof identification, and generates a multidimensional dynamic key by combining a multidimensional mixing function to ensure the high dynamics and randomness of the key generation process. This method not only enhances data security, but also avoids the security risks caused by a single key.

[0043] Furthermore, the encryption method of the present invention adopts progressive vector checksum embedding technology in the data segment encryption process, which not only improves the security of the data segment level, but also effectively prevents data tampering and forgery, thereby ensuring the integrity and authenticity of the data. In addition, the multi-dimensional dynamic key is recursively hashed by multiple variable hash functions to generate a key mapping, which is stored in a secure area in a solid-state storage device, further improving the key's protection strength and resistance to physical attacks.

[0044] Furthermore, the encryption method of the present invention monitors and verifies the integrity and encryption status of the multi-dimensional dynamic key in real time by introducing a frequency disturbance monitoring algorithm and a high-order vector query technology, thereby making the encryption system more sensitive and responsive to external attacks, thereby ensuring the continued security of the encryption system.

[0045] Furthermore, the decryption key is extracted from the key graph through the reverse mixing function, and the decryption operation of the encrypted segmented data is gradually completed by combining the progressive vector check code and the reverse operation to restore the original data. This process ensures the efficiency and reliability of the encrypted data when decrypting. It solves the shortcomings of the existing encryption technology of solid-state storage devices in key management, encryption mechanism and real-time monitoring, and provides all-round protection for data storage security. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] Figure 1 A flowchart of an encryption method according to an embodiment of the present invention;

[0047] Figure 2 A schematic diagram of generating a unique device identifier for a polymorphic ring structure in one embodiment of the present invention;

[0048] Figure 3 This is a schematic diagram of a multi-dimensional dynamic key generation principle in one embodiment of the present invention;

[0049] Figure 4 This is a schematic diagram of a data encryption process in an embodiment of the present invention;

[0050] Figure 5 A schematic diagram of key mapping generation in one embodiment of the present invention;

[0051] Figure 6 A schematic diagram of frequency disturbance monitoring in one embodiment of the present invention;

[0052] Figure 7 The figure is a flowchart of a decryption operation on encrypted segmented data in one embodiment of the present invention. DETAILED DESCRIPTION

[0053] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0054] The term "comprise" and any variation thereof in the specification and claims of the present application are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units need not be limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices. In addition, the use of "and / or" in the specification and claims to indicate at least one of the connected objects, such as A and / or B, means including A alone, B alone, and A and B.

[0055] In the embodiments of the present invention, words such as "exemplary" or "for example" are used to indicate examples, illustrations or explanations. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present invention should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a specific way.

[0056] The present invention provides the following preferred embodiments:

[0057] Embodiment 1

[0058] In order to solve the technical problem of unreliable key management and encryption mechanism faced by solid-state storage devices, this embodiment proposes an encryption method for solid-state storage devices, which effectively improves the dynamics and security of data encryption by introducing various technical features such as polymorphic ring structure, multi-dimensional mixing function, multiple variable hash function and frequency perturbation monitoring algorithm.

[0059] like Figure 1 As shown, the encryption method includes the following steps:

[0060] S101. Generate a unique device identifier through a polymorphic ring structure for key generation of a solid-state storage device.

[0061] S102: Based on the generated device identifier, a multi-dimensional dynamic key is generated in combination with a multi-dimensional mixing function for data encryption.

[0062] S103. Use a multi-dimensional dynamic key to encrypt the segmented data, and embed a progressive vector check code into each data segment to enhance the security of the data segment level.

[0063] S104, recursively hash the multi-dimensional dynamic key through multiple changing hash functions to generate a key mapping, and use the key mapping to form a key graph, which is stored in a secure area in the solid-state storage device.

[0064] S105. Use a frequency perturbation monitoring algorithm to monitor the integrity and encryption status of the multi-dimensional dynamic key in real time, and verify the encryption status through high-order vector query.

[0065] S106, extracting the decryption key from the key graph through the inverse mixing function, completing the decryption operation of the encrypted segmented data according to the progressive vector check code check and inverse operation, and restoring the original data.

[0066] Specifically, Figure 2 As shown, this embodiment generates a unique device identifier through a polymorphic ring structure for unique identification and key generation of solid-state storage devices. Specifically, the polymorphic ring structure calculates the device identifier through the device hardware feature vector and the system initialization vector. The identifier is the unique identifier of the device to ensure that the device cannot be forged. Through the bitwise XOR and polymorphic authentication code generation function, the generated device identifier is permanently stored in the firmware layer of the device, ensuring its uniqueness and tamper-proofness.

[0067] Furthermore, if Figure 3 As shown in the figure, based on the generated device identifier, a multidimensional hybrid function is used to generate a multidimensional dynamic key. The multidimensional hybrid function combines the device identifier and the current system state vector for calculation, and can generate keys of multiple dimensions, each of which corresponds to different encryption requirements. This generation process not only introduces the unique information of the device, but also combines the current dynamic state of the system to form a dynamic key with high randomness and complexity. It is worth noting that the calculation of the multidimensional hybrid function effectively utilizes the current timestamp of the system and the state vector of the previous time period, and generates keys of multiple dimensions through cumulative multiplication operations, thereby improving the unpredictability and security of the encryption key.

[0068] Furthermore, if Figure 4 As shown, in the data encryption stage, this embodiment uses the generated multi-dimensional dynamic key to perform segmented encryption processing on the data. The data to be stored is divided into multiple data segments, each of which adjusts its size according to the real-time algorithm and performs independent encryption operations respectively. This not only ensures the flexibility of the encryption process, but also enhances the segment-level security of the data. During the encryption process of each data segment, a progressive vector check code generated based on the content of the current data segment is embedded. It can be understood that the check code is generated by the initialization vector and the data segment content, which ensures the integrity and tamper-proofness of the data segment level, and provides a reliable basis for subsequent decryption and verification.

[0069] Furthermore, if Figure 5 As shown, the generated multi-dimensional dynamic key is recursively hashed by a multi-variable hash function to generate a key mapping. These key mappings form a key graph and are stored in a secure area of ​​a solid-state storage device. It should be understood that the multi-variable hash function performs multiple transformation hash calculations on the multi-dimensional dynamic key, and the generated key mapping cannot be directly derived back to the original key, thereby ensuring the key's resistance to physical attacks. The composition and storage of the key graph further ensure the security of key management and the tamper-proofness of the storage process.

[0070] Furthermore, if Figure 6 As shown, in order to monitor the integrity and encryption status of the multi-dimensional dynamic key in real time, this embodiment adopts a frequency perturbation monitoring algorithm. Specifically, within the set frequency range, the frequency perturbation monitoring algorithm generates multiple query frequencies through random perturbations, and performs high-order vector queries on the multi-dimensional dynamic key. The high-order vector query verifies the encryption status in real time through the calculation of the frequency query vector, ensuring the dynamics and security of the encryption system. It can be understood that the frequency perturbation monitoring algorithm increases the system's sensitivity to external attacks and can promptly detect and respond to potential security threats.

[0071] Furthermore, through the reverse mixing function, the present embodiment can extract the decryption key from the key graph, and complete the decryption operation of the encrypted segmented data by combining the progressive vector check code verification and the reverse operation. The reverse mixing function ensures the correctness of the decryption process by recovering the multi-dimensional dynamic key. The encrypted data segment is verified according to the progressive vector check code, and the decryption operation is performed after confirming that the data has not been tampered with. The decrypted data segment is reassembled into the complete original data and transmitted to the requesting application.

[0072] The benefit of this embodiment is that a unique device identifier is generated through a polymorphic ring structure, a multidimensional hybrid function generates a multidimensional dynamic key, segmented data is encrypted and embedded with a progressive vector check code, multiple variable hash functions are used for recursive hash operations to generate key mappings, a frequency perturbation monitoring algorithm is used to monitor key integrity and encryption status in real time, and a series of operations such as extracting decryption keys from key maps and performing data verification and decryption through a reverse hybrid function are formed, forming a complete, dynamic and secure encryption solution. This solution effectively solves the deficiencies of the prior art in key management, encryption mechanism and real-time monitoring, and improves the data security of solid-state storage devices.

[0073] Embodiment 2

[0074] In order to solve the problem of high complexity and limited application scenarios of the device identifier generation method in the prior art, this embodiment further refines the specific steps and principles of generating a unique device identifier through a polymorphic ring structure. The method is based on the polymorphic ring structure calculation principle and uses the following calculation formula:

[0075]

[0076] Among them, MSRI represents the device identifier, D hardware Represents the device hardware feature vector, S init is the system initialization vector, R is the polymorphic ring structure function, MAC is the polymorphic authentication code generation function, H represents the hash function, and ⊕ represents the bitwise XOR operation.

[0077] Furthermore, D hardware It can be characterized by multiple hardware features of solid-state storage devices, including but not limited to physical characteristics of the device, manufacturing process parameters and built-in unique identifiers, such as serial numbers or physical invariants unique to storage chips. These hardware feature parameters are collected by a preset collection module and transmitted to the device identifier generation module through a data interface.

[0078] It is important to understand that S init As a system initialization vector, it involves some specific state values ​​or startup parameters when the system is initialized. These values ​​may include the device activation time, the electrical characteristic parameters of the solid-state storage device during initialization, etc. By strictly controlling and recording these initialization vectors, it is ensured that each generated system initialization vector is unique and unpredictable, thereby improving the generation effect of the device identifier.

[0079] Furthermore, when generating the device identifier, D is converted into hardware and S init The result after XOR operation is processed. The polymorphic ring structure function R performs complex mapping on the input data through nonlinear transformation and multiple rounds of iterative calculation. Through the characteristics of the polymorphic ring structure, the output result is as unaffected as possible by the slightest change in the input, thereby ensuring the uniqueness and anti-tampering characteristics of the generated device identifier.

[0080] It is understood that when the polymorphic authentication code generation function is operated, the polymorphic authentication code generation function generates an authentication code from the XOR result of the input. By combining hardware characteristics and system initialization vectors, the polymorphic authentication code generation function can generate a short and unique authentication code, providing an additional layer of security protection for the device identifier.

[0081] Furthermore, the generated authentication code will be processed by the hash function H, and the authentication code generated by the polymorphic authentication code generation function and the result processed by the polymorphic ring structure function R will be hashed again. The role of the hash function H in this process is to transform the input data and generate a string of fixed length, further enhancing the uniqueness and unpredictability of the device identifier.

[0082] It should be understood that the device identifier MSRI generated by the above process will be permanently stored in the firmware layer of the solid-state storage device, and the firmware layer provides a secure and tamper-proof storage environment for the device. In order to ensure the uniqueness of the device identifier MSRI, the firmware layer uses redundant verification and encrypted storage technology, and performs regular verification to promptly detect and prevent possible tampering.

[0083] Through this embodiment, the method of generating a unique device identifier through a polymorphic ring structure not only improves the generation efficiency of the device identifier, but also enhances its security, thereby effectively solving the difficult problems in the prior art.

[0084] The benefit of this embodiment is that it provides an efficient, secure and reliable method for generating a device identifier, so that a solid-state storage device can have a unique and tamper-proof identifier, providing a solid foundation for system security authentication and data protection. Through this embodiment, the generation of a device identifier becomes simpler, suitable for a wide range of usage scenarios, and ensures the stable and secure operation of the device in various environments.

[0085] Embodiment 3

[0086] In order to solve the problem of high complexity and difficulty in ensuring key security and randomness in the process of generating multi-dimensional dynamic keys in the prior art, this embodiment further refines the method and specific steps of generating multi-dimensional dynamic keys based on the generated device identifier and combined with a multi-dimensional mixing function. Specifically, the method includes the following steps:

[0087] like Figure 3 As shown, the device identifier and the current system state vector are used to generate a multi-dimensional dynamic key through a multi-dimensional hybrid function algorithm. The generation method is as follows:

[0088]

[0089] Among them, MDK h represents the h-th dimension key, T current Indicates the current timestamp, P previous is the state vector of the previous period, and MHF represents the multidimensional mixing function.

[0090] The calculation formula of the multidimensional mixing function is as follows:

[0091]

[0092] Where N is the length of the vector, x j ,y j ,z j are the j-th elements of x, y, and z respectively, and ∏ represents the cumulative multiplication operation.

[0093] It should be understood that the multi-dimensional mixing function can fully mix the information of the input vector by using the XOR operation and cumulative multiplication operation of multiple vectors, thereby achieving a highly complex and unpredictable effect. Specifically, the current timestamp T current The timeliness and dynamism of each key generation are guaranteed, making the generated key highly unique in the time dimension. The state vector P of the previous period previous It combines the device's status information in the previous period and introduces the relevance of historical status for key generation.

[0094] Furthermore, the device identifier MSRI is composed of the previously generated unique identifier part, which has completed complex calculations based on hardware features and system initialization vectors through a polymorphic ring structure, ensuring its uniqueness and security. The current system state vector can include multi-dimensional parameters of the current device operating status, such as current temperature, voltage, current and other key information. These state information are dynamically collected through a preset acquisition module to ensure the real-time and accuracy of the state vector.

[0095] It is important to understand that the state vector P of the previous period previous The running status information of the device in the previous time period is usually saved. In the backup system, this status information can be regularly stored on a secure storage medium and called and used through a secure data interface when needed. By combining the status information of the previous and next time periods, the randomness and unpredictability of the generation of dynamic keys can be significantly improved.

[0096] Furthermore, the implementation of the multidimensional mixing function MHF involves performing bit-wise XOR operations on the three vectors of the device identifier, the state vector of the previous period, and the current timestamp, and multiplying the results on each bit. It can be understood that this operation ensures sufficient mixing between the input parameters, and improves the complexity and anti-cracking ability of the mixing function.

[0097] It should be understood that the multidimensional dynamic key MDK generated by the multidimensional mixing function h It will be highly unique and dynamic in each key generation cycle, thus effectively preventing key replay attacks and prediction attacks. In the specific implementation, the vector bit width and key generation cycle can be selected according to the specific application scenario. For example, in high-security applications, a wider vector bit width, such as 256 bits, can be selected, and the key generation cycle can be shortened, such as generating a new key per second, to further improve security.

[0098] The benefit of this embodiment is that by combining the device identifier and the current system state vector, the multidimensional hybrid function achieves a high degree of dynamics and randomness in the key generation process, ensuring the security and uniqueness of the generated key. Through this embodiment, the key generation method is more efficient and has a high degree of security protection capability, and is suitable for dynamic encryption and authentication in a variety of complex application environments.

[0099] Embodiment 4

[0100] In order to solve the problem that security and data integrity are difficult to ensure during the encryption process of stored data, this embodiment further optimizes the method and specific steps of encrypting segmented data using a multi-dimensional dynamic key and embedding a progressive vector check code into each data segment.

[0101] Specifically, this embodiment first divides the data to be stored into multiple data segments so that each data segment can be encrypted independently. It should be understood that the size of each data segment can be dynamically adjusted based on a real-time algorithm. This adjustment mechanism can flexibly adjust the size of the data segment according to actual storage requirements and system operation status, thereby optimizing storage efficiency and encryption processing performance.

[0102] Furthermore, a multi-dimensional dynamic key is applied to each data segment for encryption. The multi-dimensional dynamic key is a dynamic key generated by a multi-dimensional hybrid function based on the device identifier and system status, which has high randomness and security. This ensures that the encryption of each data segment has extremely high security strength. Even if a data segment is cracked by an attacker, it is difficult to obtain information from other data segments.

[0103] Furthermore, during the encryption process, each data segment will be embedded with a progressive vector check code generated based on the content of the current data segment. The progressive vector check code is generated as follows:

[0104]

[0105] Among them, PVC m Denotes the progressive vector check code of the mth data segment, D m Indicates the mth data segment, S segment Indicates the initialization vector of the data segment. The progressive vector check code is used for subsequent data verification.

[0106] It should be understood that the initialization vector S of each data segment segment It can be generated by a preset initialization vector generation module, which can flexibly generate the required initialization vector according to the real-time status of the system and specific initialization parameters. The reasonable design and application of initialization vectors can effectively prevent known plaintext attacks and differential analysis attacks, and further improve the security of data encryption.

[0107] Furthermore, the generated progressive vector check code PVC m It not only verifies data integrity during the encryption process, but can also be used to quickly and accurately determine whether the data has been tampered with during the subsequent data verification process. m The generation depends on the content of the data segment and the initialization vector. The input data is transformed through the hash function H to generate a hash value of a fixed length, which can effectively characterize the uniqueness and integrity of the data segment.

[0108] It is understandable that for each encrypted data segment, the generated progressive vector check code is appended to the end of the data segment and stored together in the storage medium. When reading and verifying data, by recalculating the check code of the data segment and comparing it with the stored check code, it is possible to quickly determine whether the data is complete and has not been tampered with. If it is found that the data segment check code does not match the recalculated value, the data segment may have been tampered with, and the system will trigger the corresponding security warning mechanism and refuse to read the data further to ensure the security and integrity of the data.

[0109] Furthermore, in a specific implementation, a suitable hash function can be selected according to the processing power and security requirements of the storage device. For example, in order to increase the speed of generating and verifying the checksum, an efficient and secure hash algorithm such as SHA-256 can be used to ensure good performance when processing large data segments. At the same time, the dynamic adjustment mechanism based on the size of the data segment can flexibly adjust the size of each data segment according to different data types and storage requirements, thereby taking into account both storage efficiency and encryption strength.

[0110] Through this embodiment, the method of encrypting segmented data using a multi-dimensional dynamic key and embedding a progressive vector check code achieves high security and high integrity of data segment encryption, ensuring the security and reliability of stored data in various complex application scenarios. The method of this embodiment not only improves the flexibility and effectiveness of data encryption, but also provides an accurate and fast verification method for subsequent data verification.

[0111] Embodiment 5

[0112] In order to solve the management and storage security problems of multi-dimensional dynamic keys in the prior art, this embodiment further optimizes the method and specific steps of performing recursive hash operations on multi-dimensional dynamic keys through multiple changing hash functions to generate key mappings, and using key mappings to construct a key graph and store it in a secure area within a solid-state storage device.

[0113] Specifically, if Figure 5 As shown, the steps of performing recursive hash operations on multi-dimensional dynamic keys through multiple variable hash functions to generate key mappings, and using the key mappings to form a key graph, which is stored in a secure area in a solid-state storage device, include:

[0114] Perform multiple change hash operations on the multi-dimensional dynamic key, and generate the key mapping through the multiple change hash function. The generation method is as follows:

[0115]

[0116] Among them, Kmap n Representing the nth key mapping, the multi-variable hashing operation is as follows:

[0117]

[0118] Where M represents the key length, p t is the tth bit of the key, and H is the hash function;

[0119] Specifically, the generated key mapping constitutes a key graph and is stored in an encryption module in a secure area of ​​a solid-state storage device to ensure the key's resistance to physical attacks. It should be understood that during each hash operation, the XOR operation of the input key bit and the previous calculation result can effectively increase the randomness of the input and the unpredictability of the hash result. In a specific implementation, the hash function H can use a high-intensity hash algorithm such as SHA-256, SHA-3, etc. to ensure the security and resistance to attacks of the calculation result.

[0120] Furthermore, the generated key mapping will constitute a key graph based on a multi-dimensional dynamic key. The so-called "key graph" refers to combining multiple key mappings into an ordered structure through certain logical relationships, so as to facilitate storage and management. In this embodiment, the key graph is constructed by drawing on the representation method of the adjacency list or adjacency matrix in the graph structure, so that each key mapping and each stage in its transformation process constitute each node, and the edges between the nodes represent the relationship of the recursive hash operation.

[0121] It can be understood that the construction of the key graph not only helps to manage a large set of key mappings, but also provides an efficient path finding mechanism for subsequent key scheduling and calling. Especially in high-security applications, the topological structure design of the key graph can be used to further enhance the anti-attack and security redundancy of key storage.

[0122] Furthermore, in order to ensure the secure storage of the key graph, the constructed key graph will be stored in an encryption module in the secure area of ​​the solid-state storage device. The so-called "secure area" refers to an isolated storage area preset at the hardware level, which has the characteristics of resisting physical attacks and protects the security of stored data through hardware encryption.

[0123] It is important to understand that in order to ensure the security of the key graph during storage and access, the security features provided by the hardware security module (HSM) or the trusted execution environment (TEE) can be used. These hardware security features include but are not limited to anti-tamper protection, real-time encrypted storage, access control and other mechanisms, so that the key graph stored in the secure area can maintain its integrity and unreadable even when subjected to physical attacks.

[0124] Furthermore, in order to improve the security of the key graph, this embodiment recommends performing an overall hash operation on the key graph before storing it, generating a global hash value and storing it in an independent location in the secure area. When reading or using the key graph, its global hash value can be recalculated and compared with the stored hash value to quickly determine whether the key graph has been tampered with.

[0125] Through this embodiment, a method of using multiple variable hash functions to perform recursive hash operations on multi-dimensional dynamic keys to generate a key mapping, and storing the key graph in a secure area of ​​a solid-state storage device not only improves the security and efficiency of key management, but also enhances the protection capabilities of multi-dimensional dynamic keys in complex application scenarios.

[0126] Embodiment 6

[0127] In order to solve the problem that the multi-dimensional dynamic key is vulnerable to attack during the encryption process and its status is difficult to monitor in real time, this embodiment further optimizes the method of using the frequency disturbance monitoring algorithm to monitor the integrity and encryption status of the multi-dimensional dynamic key in real time. Specifically, the status verification is performed through high-order vector query to ensure the security and effectiveness of the key during the entire encryption process.

[0128] Specifically, the method includes the following steps: First, the state of the multi-dimensional dynamic key is detected in real time through a preset frequency disturbance monitoring algorithm. It should be understood that the frequency disturbance monitoring algorithm randomly generates multiple query frequencies within a set frequency range, thereby performing multi-faceted disturbance detection on the key state, which can effectively capture any potential anomalies and attack traces.

[0129] Furthermore, the state is verified using the calculation formula of high-order vector query:

[0130]

[0131] Among them, Q status is the query result matrix, f query is the frequency query vector.

[0132] Furthermore, the frequency query vector f is generated by frequency perturbation query , and use high-order vector query to verify the status. The core calculation formula of high-order vector query is as follows:

[0133] The calculation formula for high-order vector query is as follows:

[0134]

[0135] Where N is the length of the vector, f i Re represents the frequency component, Re represents the real part operation, and the high-order vector query is used to monitor the encryption status in real time. It should be understood that the high-order vector query uses high-order mathematical tools such as Fourier transform to calculate the frequency component f. k Processing, the generated Q status The matrix is ​​an effective representation of the current multi-dimensional dynamic key encryption state. High-order vector query can not only capture the impact of frequency perturbations on the key, but also verify the consistency of the key state at different time points through complex real part operations.

[0136] Furthermore, the calculation of high-order vector queries involves real-time monitoring of the response of the multi-dimensional dynamic key to different frequency disturbances. In this way, any abnormal changes in the key during the encryption process can be effectively detected. For example, if at a certain query frequency, Q status If abnormal values ​​appear in the matrix, it means that there may be key leakage or tampering. At this time, the system can immediately trigger the security warning mechanism and take corresponding defensive measures.

[0137] It is important to understand that the frequency disturbance monitoring algorithm is random and real-time, which means that within the set frequency range, each query frequency is randomly generated, which greatly increases the difficulty for attackers to predict and crack the algorithm. At the same time, state verification through high-order vector query can ensure high-precision and high-reliability monitoring of multi-dimensional dynamic keys.

[0138] In order to achieve the above functions, the frequency disturbance monitoring algorithm and high-order vector query require powerful computing and storage capabilities. In the specific implementation, it is possible to consider using a high-performance graphics processing unit (GPU) or a dedicated encryption processing unit (APU) to perform complex calculations and data processing to ensure that the system can still complete key status monitoring in real time and efficiently under high load.

[0139] Furthermore, in order to improve the robustness and anti-attack capability of the system, a multi-level security protection mechanism can be introduced into the frequency disturbance monitoring algorithm. For example, before making a query, the legitimacy of the query request can be confirmed through a two-factor authentication mechanism, and the key response can be encrypted during the query process, thereby preventing potential man-in-the-middle attacks and data theft.

[0140] Through this embodiment, a frequency disturbance monitoring algorithm is used to monitor the integrity and encryption status of multi-dimensional dynamic keys in real time, and status verification is performed through high-order vector queries, which not only improves the accuracy and real-time performance of key management and monitoring, but also enhances the overall security of the encryption system.

[0141] Embodiment 7

[0142] In order to solve the problems of key management complexity and data integrity verification difficulty in the decryption process of existing encryption methods, this embodiment further optimizes the extraction of decryption keys from the key graph through an inverse mixing function, and combines progressive vector check code verification and inverse operations to complete the decryption operation of encrypted segmented data.

[0143] like Figure 7 As shown, the steps of decrypting the encrypted segmented data include:

[0144] S701. Extract decryption keys from the key graph as needed, and restore the multi-dimensional dynamic key through an inverse mixing function.

[0145] S702: Verify the encrypted data segment according to the progressive vector check code to confirm that the data segment has not been tampered with before performing the decryption operation.

[0146] S703: Decrypt the data segments, reassemble them into complete original data, and transmit them to the requesting application.

[0147] Specifically, this embodiment extracts the decryption key on demand from the key graph through the reverse mixing function. The key graph is a structured key set pre-stored in a secure area, which contains different mappings and changing levels of multi-dimensional dynamic keys. When the decryption operation needs to be performed, the original multi-dimensional dynamic key is restored by gradually back-stepping through the reverse mixing function. It should be understood that the design of the reverse mixing function is based on highly complex mathematical operations and logical deductions, thereby ensuring that it can only correctly restore the key when it is legally called, and can effectively defend against brute force cracking and prediction attacks.

[0148] Furthermore, after successfully extracting and recovering the multi-dimensional dynamic key, the encrypted data segments consisting of the encrypted segmented data are verified according to the progressive vector check code. The progressive vector check code is embedded in each encrypted data segment. It is a unique identifier generated based on the content of the data segment and is used to verify that the data has not been tampered with during transmission and storage. Before the decryption operation begins, the check code of the data segment is recalculated and compared with the embedded check code to confirm the integrity and non-tampering of the data. If the check code matches, the data segment is considered safe and further decryption operations can be performed.

[0149] Specifically, the verification step consists in efficient and accurate hashing and comparison operations. In a specific implementation, a high-performance computing unit such as an ASIC chip or a dedicated encryption processor can be used to perform these operations to ensure that performance and real-time response capabilities can be maintained under large data volumes and high concurrency.

[0150] Furthermore, after the data segment passes the verification, the recovered multi-dimensional dynamic key is used to perform a decryption operation on each data segment. The decryption process is based on the reverse operation of the encryption process, that is, the transformation and mixing steps used in the encryption process are reversed. It should be understood that the correctness of the decryption operation is highly dependent on the accurate recovery of the multi-dimensional dynamic key and the integrity verification of the data segment. Only after all steps are successfully passed, the result of the data segment decryption can be considered credible.

[0151] Furthermore, all decrypted data segments are reassembled to restore the complete original data. During the reassembly process, the correct order and consistency of the data segments need to be maintained, which usually relies on the serialization and marking mechanism introduced during encryption. In the specific implementation, the data sequence identifier and the inter-segment relationship diagram of the original data can be used to ensure the correct position and order of each data segment after decryption.

[0152] It is important to understand that in order to improve the efficiency and security of decryption operations, a multi-level protection mechanism can be introduced during the decryption process. For example, before and after each decryption operation, multiple checks can be performed on the key and data status to ensure that any abnormal situation can be detected and triggered in a timely manner. At the same time, for the final confirmation operation before data output, the data integrity hash value can be recalculated and compared with the expected value to ensure the completeness and accuracy of the final output data.

[0153] The benefit of this embodiment is that by extracting the decryption key and the progressive vector check code through the reverse mixing function, efficient management of the multi-dimensional dynamic key and high security of the data decryption process are achieved. Through these optimization measures, not only the protection capability of the encryption system in high security demand scenarios is enhanced, but also the reliability of the data decryption operation is improved. Through this embodiment, the reverse extraction of the multi-dimensional dynamic key is combined with the verification and decryption of the segmented data, which effectively guarantees the secure decryption and transmission of data in a complex environment.

[0154] Embodiment 8

[0155] In order to solve the complexity problem of key management and data encryption and decryption operations on solid-state storage devices in current encryption systems, this embodiment further refines an encryption system for implementing an encryption method, which is applied in a solid-state storage device and includes multiple functional modules to achieve high-security key management and data processing.

[0156] Specifically, the encryption system in this embodiment includes the following modules:

[0157] It is understandable that the controller module is responsible for managing the initialization, key generation, and data encryption and decryption operations of the solid-state storage device. The controller module includes the following components: the initialization unit is responsible for generating a unique device identifier and performing device initialization to ensure that the system has uniqueness and security from the startup stage; the data processing unit manages the encryption and decryption operations of the data segment, ensuring the security and integrity of the data while ensuring efficient data processing; the key generation unit generates multi-dimensional dynamic keys through a multi-dimensional mixing function, which are used for subsequent encryption and decryption operations.

[0158] Furthermore, in order to generate and protect multi-dimensional dynamic keys, the system is provided with a key management module. The module includes a key generation unit and a key protection unit. The key generation unit generates a multi-dimensional dynamic key based on the device identifier and the dynamic system vector. It should be understood that such a generation mechanism ensures the dynamic and uniqueness of the key and improves the security level of the system; the key protection unit performs multiple hash operations on the generated multi-dimensional dynamic key through multiple variable hash functions to ensure the security of the key. The key storage unit stores the key mapping after multiple hash operations in a secure area within the solid-state storage device to ensure the security of the key in the storage state.

[0159] Furthermore, real-time code verification is an important part of ensuring the encryption status and data integrity. For this purpose, the system is equipped with a data verification module. This module includes a real-time monitoring unit, a query generation unit, and a verification unit. The real-time monitoring unit monitors the encryption status in real time through a frequency disturbance monitoring algorithm to ensure that the data is safe at any time during the decryption process; the query generation unit is responsible for generating high-order vector queries and performing status verification. It should be understood that the purpose of using high-order vector queries here is to further verify the data status through complex mathematical models to ensure that every step of the decryption process is accurate and safe; the verification unit performs integrity verification of data segments based on progressive vector check codes to ensure that the data has not been tampered with.

[0160] Furthermore, the secure storage module ensures the secure storage and protection of the key graph. The storage control unit manages the storage of the key graph in the secure area to maintain the integrity and reliability of the key graph; the hash calculation unit performs recursive hash operations on the multi-dimensional dynamic key to generate a key mapping, and makes the hash operation result more unpredictable through complex noise models and random perturbations; the protection unit protects the key through multiple transformation technologies to prevent physical-level attacks, such as using anti-reverse engineering technology and anti-side channel attack technology to ensure the security of key storage and use.

[0161] Furthermore, in order to achieve efficient data transmission, the encryption system also includes a data transmission module, which is responsible for transmitting encrypted data or decrypted data between the solid-state storage device and the processor. In practical applications, data transmission can be performed through a high-speed interface such as PCIe or NVMe to ensure the transmission speed and efficiency of system response.

[0162] It should be understood that in order to better integrate the above modules and realize their functions, this embodiment recommends introducing an integrated management platform within the system. The platform can realize the collaborative work of the entire encryption system by arranging the operation sequence and logical relationship of each functional unit. For example, after the data processing unit encrypts the data in segments, the management platform can immediately call the key generation unit and the key protection unit to perform key hash calculation and storage, and transmit the processed data to the requesting application through the data transmission module.

[0163] The benefit of this embodiment is that by systematically integrating the controller module, key management module, data verification module, secure storage module and data transmission module, efficient management and security of encrypted data in solid-state storage devices are achieved. Through this embodiment, the generation, protection, storage and data encryption and decryption operations of multi-dimensional dynamic keys are optimized and simplified, greatly improving the security and operability of the system and ensuring the reliable operation of the encryption system in a high-intensity application environment.

[0164] Embodiment 9

[0165] In order to solve the security, uniqueness and complexity problems of the existing key generation device in the solid-state storage device, this embodiment proposes a key generation device applied in the solid-state storage device. This device not only includes all the functional modules of the aforementioned encryption system, but also adds a dedicated unit for enhancing security and uniqueness, mainly including a polymorphic ring generation unit, a dynamic function calculation unit, a recursive hash unit and a storage unit.

[0166] In this embodiment, the polymorphic ring generation unit generates a unique device identifier through a physical unclonable function PUF. PUF uses tiny manufacturing process differences in solid-state storage devices to generate a unique and non-copyable identifier, ensuring that each device has a unique "fingerprint". It should be understood that the use of PUF greatly improves the security and non-tamperability of device identification, thereby providing a solid foundation for subsequent key generation.

[0167] Furthermore, the dynamic function calculation unit uses a multidimensional hybrid function to calculate a multidimensional dynamic key. The multidimensional hybrid function is the core part of the encryption system, which generates dynamic and unpredictable keys through highly complex multidimensional mathematical operations. It should be understood that the generation of these keys not only depends on the device identifier, but also combines a variety of dynamic factors within the system, such as timestamps, environmental variables, etc., to ensure that each generated key has a high degree of randomness and security.

[0168] To ensure the tamper-proof nature of the generated key, the recursive hash unit recursively hashes the multi-dimensional dynamic key through multiple changing hash functions to generate a key mapping. Recursive hashing involves multiple levels of hashing, each of which increases the complexity and security of the key. It should be understood that through this multiple hashing, the generated key mapping is extremely difficult to crack through reverse engineering methods, thus providing strong protection.

[0169] Further, the storage unit is used to store the generated key mappings. These key mappings are stored in a secure area within the solid-state storage device, such as a protected storage partition, to ensure the security of the keys during storage. Further, the storage unit is equipped with advanced security storage technology, such as hardware-level encryption and access control, to prevent physical-level attacks and data theft.

[0170] Furthermore, the key generation device of this embodiment realizes a series of security processes from device identifier generation, dynamic calculation of keys to key mapping storage through the collaborative work of the above-mentioned functional units. In order to better manage and coordinate the entire process, a comprehensive management module can be introduced into the device. The management module can monitor the working status of each unit in real time, provide necessary data interfaces and log recording functions, thereby ensuring the transparency and traceability of the entire key generation and management process.

[0171] Furthermore, in order to improve the stability of the key generation device, some additional features can be introduced. For example, in the polymorphic ring generation unit, a stabilization mechanism that resists environmental interference is added to ensure the stable generation of the device identifier; in the dynamic function calculation unit, an adaptive adjustment strategy is introduced to dynamically adjust the key calculation parameters according to the system load and external environment changes, so as to ensure the efficiency and stability of the key generation process; in the recursive hash unit, it is possible to consider introducing a hash algorithm that resists quantum computing attacks, such as a post-quantum encryption algorithm, to improve the forward-looking security of the system.

[0172] Through this embodiment, the comprehensive use of polymorphic ring generation, dynamic key calculation, recursive hash operation and secure storage not only improves the overall security of the key generation system, but also ensures the uniqueness, non-replicability and difficulty of tampering of the key. The benefit of this embodiment is that by integrating a dedicated physical unclonable function and multiple security processing units, an efficient and reliable key generation device is provided, which provides a solid technical guarantee for the encryption protection of solid-state storage devices.

[0173] Embodiment 10

[0174] In order to solve the problems of traditional electronic products in data security, power consumption management and information presentation, this embodiment further refines a new electronic product design. The electronic product integrates the key generation device as described above, and is configured with a processor module, a power management module and a display module to achieve all-round data protection, computing processing and information display functions.

[0175] In this embodiment, the key generation device is integrated into the solid-state storage device to provide secure key generation and management functions. A unique device identifier is generated through a physically unclonable function (PUF), and a multi-dimensional mixing function and a multi-variable hash function are combined to generate and protect a multi-dimensional dynamic key. It should be understood that this key generation process ensures the uniqueness of the key, thereby providing a reliable foundation for data encryption and system security.

[0176] Furthermore, the electronic product is equipped with a processor module for performing various computing tasks. The processor module is combined with a key generation device to achieve high-speed processing of data encryption and decryption operations, thereby improving the response speed and security of the overall system.

[0177] Furthermore, the power management module is responsible for providing power and managing the power consumption of the entire electronic product. An intelligent power management unit (PMU), such as the TPS series power management IC from Texas Instruments, is used to achieve real-time monitoring and adjustment of voltage, current and power mode. It should be understood that through intelligent power management, the system can automatically adjust power consumption in different operating modes, thereby extending the service life of the device while ensuring high-performance working requirements.

[0178] Furthermore, the electronic product is also equipped with a display module for presenting visual information of the data in the solid-state storage device. The display module can use a high-resolution LCD or OLED display screen to ensure the clarity and color reproduction of the information display. The display module cooperates with the processor module to realize data transmission and image rendering through a high-speed interface such as HDMI or DisplayPort, ensuring that users can view data in a timely and accurate manner.

[0179] It should be understood that in this embodiment, the processor module exchanges data with the key generation device, the power management module and the display module through a bus, such as PCIe or I2C, to ensure that each unit can communicate in real time and cooperate effectively. For example, when a user requests to access a certain encrypted data, the processor sends the request to the key generation device, which performs key calculation and decryption operations, and then transmits the results back to the processor through the bus, and the processor then processes and displays the data.

[0180] Through this embodiment, the modules are highly integrated and work in coordination, achieving comprehensive data protection, efficient computing and processing, and high-quality information presentation. It is understood that the electronic product may be any electronic device including a solid-state storage device provided with a key generation device.

[0181] The above embodiments further illustrate the purpose, technical solutions and beneficial effects of the present invention. It should be understood that the above are only specific implementation methods of the present invention and are not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made on the basis of the technical solutions of the present invention should be included in the scope of protection of the present invention.

Claims

1. An encryption method, applied to a solid-state storage device, characterized in that: The method comprises the following steps: Generate a unique device identifier through a polymorphic ring structure for key generation of the solid-state storage device; Based on the generated device identifier, a multi-dimensional dynamic key is generated in combination with a multi-dimensional mixing function for data encryption; Using the multi-dimensional dynamic key, encrypting the segmented data, and embedding each data segment with a progressive vector check code to enhance the security of the data segment level; Recursively hashing the multi-dimensional dynamic key through multiple changing hash functions to generate a key mapping, and using the key mapping to form a key graph, which is stored in a secure area in the solid-state storage device; Using a frequency perturbation monitoring algorithm to monitor the integrity and encryption status of the multi-dimensional dynamic key in real time, and verifying the encryption status through a high-order vector query; Extracting the decryption key from the key graph through an inverse mixing function, completing the decryption operation of the encrypted segmented data according to the progressive vector check code check and inverse operation, and restoring the original data; The step of generating a unique device identifier through a polymorphic ring structure comprises: When generating the device identifier, the following calculation formula is applied based on the polymorphic ring structure calculation principle: , where MSRI represents the device identifier, D hardware Represents the device hardware feature vector, S init is the system initialization vector, R is the polymorphic ring structure function, MAC is the polymorphic authentication code generation function, H represents the hash function, and ⊕ represents the bitwise XOR operation; Permanently storing the generated device identifier in the firmware layer of the solid-state storage device to ensure uniqueness and tamper-proof; The step of generating a multi-dimensional dynamic key based on the generated device identifier and combining a multi-dimensional mixing function comprises: The multi-dimensional dynamic key is generated by using the device identifier and the current system state vector through the algorithm of the multi-dimensional mixing function, and the generation method is as follows: , among which, MDK h represents the h-th dimension key, T current Indicates the current timestamp, P previous is the state vector of the previous period, MHF represents the multidimensional mixing function; The calculation formula of the multidimensional mixing function is as follows: , where N is the length of the vector, x j ,y j ,z j are the j-th elements of x, y, and z respectively, and ∏ represents the cumulative multiplication operation; The step of using the multi-dimensional dynamic key to encrypt the segmented data and embedding each data segment into a progressive vector check code comprises: Dividing the data to be stored into multiple data segments, the size of each data segment is variably adjusted based on a real-time algorithm, and is independently encrypted; Each data segment is encrypted by applying the multi-dimensional dynamic key, and the progressive vector check code generated based on the content of the current data segment is embedded, and the progressive vector check code is generated as follows: , where D m Indicates the mth data segment, S segment Represents the initialization vector of the data segment, and the progressive vector check code is used for subsequent data verification; The steps of performing recursive hash operations on the multi-dimensional dynamic key by using multiple variable hash functions to generate a key mapping, and using the key mapping to form a key graph, which is stored in a secure area in the solid-state storage device, include: A multi-dimensional dynamic key is subjected to a multi-variable hash operation, and a key mapping is generated by the multi-variable hash function, and the generation method is as follows: , where Kmap n Representing the nth key mapping, the multi-variable hash operation is as follows: , where M represents the key length, p t is the tth bit of the key, and H is the hash function; The generated key mapping constitutes the key graph and is stored in an encryption module in the secure area of ​​the solid-state storage device to ensure the key's resistance to physical attacks; The step of using a frequency disturbance monitoring algorithm to monitor the integrity and encryption status of the multi-dimensional dynamic key in real time and verifying the encryption status by querying a high-order vector includes: The state of the multi-dimensional dynamic key is detected in real time by the frequency disturbance monitoring algorithm, multiple query frequencies are generated by random disturbance within a set frequency range, and the state verification is performed using the calculation formula of the high-order vector query: , where Q status is the query result matrix, f query is the frequency query vector; The calculation formula of the high-order vector query is as follows: , where f k Re represents the frequency component, Re represents the real part operation, and the high-order vector query is used to monitor the encryption state in real time.

2. The encryption method according to claim 1, wherein: The step of extracting the decryption key from the key graph by the inverse mixing function and completing the decryption operation of the encrypted segmented data according to the progressive vector check code check and inverse operation comprises: Extracting the decryption key from the key graph as needed, and restoring the multi-dimensional dynamic key through the inverse mixing function; Verifying the encrypted data segment composed of the encrypted segmented data according to the progressive vector verification code, confirming that the data segment has not been tampered with before performing the decryption operation; The data segments are decrypted and reassembled into complete original data and delivered to the requesting application.

3. An encryption system, applied to a solid-state storage device, for implementing the encryption method according to any one of claims 1 to 2, characterized in that: The system comprises: A controller module, used to manage the initialization, key generation and data encryption and decryption operations of the solid-state storage device, the controller module comprising: An initialization unit, used for generating a unique device identifier and performing device initialization; a data processing unit for managing encryption and decryption operations of data segments; A key generation unit, used for generating a multi-dimensional dynamic key through a multi-dimensional mixing function; A key management module, used to generate and protect the multi-dimensional dynamic key, the key management module comprising: A key generation unit, configured to generate the multi-dimensional dynamic key based on the device identifier and the dynamic system vector; A key protection unit, used for performing multiple hash operations on the generated multi-dimensional dynamic key through multiple changing hash functions; A key storage unit, used to store the key mapping after the multiple hash operations in a secure area within the solid-state storage device; A data verification module is used to monitor the encryption status in real time and perform data integrity verification, and the data verification module includes: A real-time monitoring unit, used for monitoring the encryption state in real time through the frequency disturbance monitoring algorithm; A query generation unit, used to generate high-order vector queries and perform status verification; A check unit, used for performing integrity check of data segments according to the progressive vector check code; A secure storage module, used to store and protect the key graph, the secure storage module comprising: A storage control unit, used to manage the storage of the key graph in the security area; A hash calculation unit, used for performing a recursive hash operation on the multi-dimensional dynamic key to generate a key mapping; The protection unit is used to protect the key through multiple transformation technologies to prevent physical layer attacks; A data transmission module is used to transmit encrypted data or decrypted data between the solid-state storage device and the processor.

4. A key generation device, applied to a solid-state storage device, characterized in that: The device comprises the encryption system as claimed in claim 3, and the device further comprises: a polymorphic ring generation unit for generating a unique device identifier through a physically unclonable function; A dynamic function calculation unit, used for calculating a multi-dimensional dynamic key through a multi-dimensional hybrid function; A recursive hash unit, used for performing recursive hash operations on multi-dimensional dynamic keys through multiple variable hash functions to generate a key mapping; A storage unit, used to store the generated key mapping.

5. An electronic product, characterized in that: The electronic product comprises the key generating device as claimed in claim 4, wherein the key generating device is integrated into a solid-state storage device, and the electronic product further comprises: A processor module, used to perform computing tasks of the electronic product; A power management module for providing power and managing power consumption; A display module is used to present visual information of data in the solid-state storage device.

Images