Data encryption and decryption method and device, data encryption and decryption transmission method and device, equipment and vehicle

Abstract

The invention discloses a data encryption and decryption method and device, a data encryption and decryption transmission method and device, equipment and a vehicle, and the method comprises the steps: carrying out the multi-stage splitting and confusion processing of an original key through a key injection module, and obtaining a first number of target sub-keys; transmitting the target sub-key to a key restoration module; performing restoration processing on the target sub-key through a key restoration module to obtain a target key; and performing encryption processing on the target data according to the original key through the encryption and decryption module to obtain encrypted data, or performing decryption processing on the encrypted data according to the target key. According to the method, the security of the key is improved by using a confusion technology, and data leakage caused by direct use of the key after being tampered by an attacker is prevented; and data encryption and decryption are realized through data logic conversion, so that the use of a high-cost hardware security chip can be avoided, the data security cost is reduced, and the method can be widely applied to the technical field of data processing.

Description

Technical Field

[0001] The present invention relates to the field of data processing technology, and in particular to data encryption and decryption, data encryption and decryption transmission method, device, equipment and vehicle. Background Art

[0002] With the rapid development of automobile intelligence and networking, vehicle-side controllers, as core components of vehicles, are responsible for more and more data processing and communication tasks. These tasks involve a large amount of sensitive data, such as encryption keys, digital certificates, and user personal information. The secure storage of these data is directly related to the information security of the vehicle and the protection of user privacy.

[0003] Traditionally, in order to ensure the security of these sensitive data, hardware security chips (such as HSM, TPM, etc.) are usually used for storage. Hardware security chips provide a high level of protection for sensitive data through physical isolation and built-in security mechanisms. However, the cost of hardware security chips is high, which increases the overall manufacturing cost of the vehicle. For some mid- and low-end models, this cost burden is particularly heavy. In addition, symmetric key algorithms are often used to encrypt and decrypt important information, and then store and transmit it. However, as long as the attacker obtains the key, the security of the data during transmission and storage cannot be ensured. Summary of the invention

[0004] The present invention aims to solve the problem of related technical limitations at least to a certain extent. To this end, the present invention proposes a data encryption and decryption, a data encryption and decryption transmission method, a device, a equipment and a vehicle, which can effectively improve the security of data encryption and decryption.

[0005] On the one hand, an embodiment of the present invention provides a data encryption and decryption method, comprising the following steps:

[0006] Perform multi-level splitting and obfuscation processing on the original key through the key injection module to obtain a first number of target sub-keys; transmit the target sub-keys to the key restoration module;

[0007] The multi-stage split obfuscation process includes a multi-stage first processing process, and the first processing process of each stage includes split processing and obfuscation processing for each split result of the split processing. The data basis of the split processing of each stage is the obfuscation result of each obfuscation processing of the previous stage; the target subkey is marked with the split path of the split processing it has experienced;

[0008] The target subkey is restored by the key restoration module to obtain the target key;

[0009] The restoration process includes a multi-stage second processing process, and the second processing process of each stage includes a deobfuscation process and a merging process of the deobfuscation results of multiple deobfuscation processes belonging to the same split path in the current stage, and the data basis of the deobfuscation process in each stage is the merging result of each merging process in the previous stage;

[0010] The target data is encrypted by the encryption / decryption module according to the original key to obtain the encrypted data, or the encrypted data is decrypted according to the target key.

[0011] In some embodiments, performing multi-level splitting and obfuscation processing on the original key to obtain a first number of target subkeys includes the following steps:

[0012] Performing a first-level splitting process on the original key to obtain a second number of first-level subkeys;

[0013] Performing a first obfuscation process on each first-level subkey in turn by using a first key obfuscation algorithm to obtain a first-level obfuscated key corresponding to each first-level subkey;

[0014] Performing a second-level splitting process on each first-level obfuscated key in turn to obtain a first number of second-level subkeys;

[0015] The second obfuscation process is performed on each secondary subkey in turn through the second key obfuscation algorithm to obtain the secondary obfuscated key corresponding to each secondary subkey; the split path of each secondary obfuscated key is marked based on the first splitting process and the second splitting process to obtain the target subkey.

[0016] In some embodiments, performing a first-level splitting process on the original key to obtain a second number of first-level subkeys includes the following steps:

[0017] The original key is divided equally into a second number of first-level sub-keys of equal byte length.

[0018] In some embodiments, marking the split path of each secondary obfuscation key based on the primary splitting process and the secondary splitting process includes the following steps:

[0019] Obtain the first split number of the split result of the primary splitting process of the secondary obfuscation key and the second split number of the split result of the secondary splitting process;

[0020] A split path of the secondary obfuscated key is composed based on the first split number and the second split number.

[0021] In some embodiments, the splitting process includes a primary splitting process and a secondary splitting process; the splitting path includes a first splitting number of the primary splitting process; and performing a restoration process on the target subkey to obtain the target key includes the following steps:

[0022] Performing a first deobfuscation process on each target subkey using a first deobfuscation algorithm to obtain a secondary deobfuscation key corresponding to each target subkey;

[0023] Determine the first split number of each target subkey in the first-level splitting process based on the splitting path, and use the corresponding multiple second-level anti-obfuscation keys as the key set to be merged according to the same first split number;

[0024] Performing a first merging process on all secondary anti-obfuscation keys in each key set to be merged, to obtain a primary merged key corresponding to each key set to be merged;

[0025] Performing a second deobfuscation process on each first-level merge key by using a second deobfuscation algorithm to obtain a first-level deobfuscation key corresponding to each first-level merge key;

[0026] Perform a second merging process on all primary anti-obfuscation keys to obtain a target key.

[0027] On the other hand, an embodiment of the present invention provides a data encryption and decryption device, including:

[0028] The first module is used to perform multi-level splitting and obfuscation processing on the original key through the key injection module to obtain a first number of target subkeys; and transmit the target subkeys to the key restoration module;

[0029] The multi-stage split obfuscation process includes a multi-stage first processing process, and the first processing process of each stage includes split processing and obfuscation processing for each split result of the split processing. The data basis of the split processing of each stage is the obfuscation result of each obfuscation processing of the previous stage; the target subkey is marked with the split path of the split processing it has experienced;

[0030] The second module is used to restore the target subkey through the key restoration module to obtain the target key;

[0031] The restoration process includes a multi-stage second processing process, and the second processing process of each stage includes a deobfuscation process and a merging process of the deobfuscation results of multiple deobfuscation processes belonging to the same split path in the current stage, and the data basis of the deobfuscation process in each stage is the merging result of each merging process in the previous stage;

[0032] The third module is used to encrypt the target data according to the original key through the encryption and decryption module to obtain encrypted data, or to decrypt the encrypted data according to the target key.

[0033] On the other hand, an embodiment of the present invention provides a data encryption and decryption transmission method, including:

[0034] The data transmitting end uses the first encryption and decryption module to encrypt the target data according to the original key to obtain encrypted data; uses the key injection module to perform multi-level splitting and obfuscation processing on the original key to obtain a first number of target sub-keys; and transmits the encrypted data and the target sub-keys to the data receiving end;

[0035] The multi-stage split obfuscation process includes a multi-stage first processing process, and the first processing process of each stage includes split processing and obfuscation processing for each split result of the split processing. The data basis of the split processing of each stage is the obfuscation result of each obfuscation processing of the previous stage; the target subkey is marked with the split path of the split processing it has experienced;

[0036] The data receiving end uses the key restoration module to restore the target subkey to obtain the target key; and uses the second encryption and decryption module to decrypt the encrypted data according to the target key;

[0037] Among them, the restoration processing includes a multi-stage second processing process, and the second processing process of each stage includes deobfuscation processing and merging processing of deobfuscation results of multiple deobfuscation processing belonging to the same split path in the current stage. The data basis of the deobfuscation processing in each stage is the merged result of each merged processing in the previous stage.

[0038] On the other hand, an embodiment of the present invention provides a data encryption and decryption transmission device, including:

[0039] The fourth module is used to encrypt the target data according to the original key by using the first encryption and decryption module through the data sending end to obtain encrypted data; use the key injection module to perform multi-level splitting and obfuscation processing on the original key to obtain a first number of target sub-keys; and transmit the encrypted data and the target sub-keys to the data receiving end;

[0040] The multi-stage split obfuscation process includes a multi-stage first processing process, and the first processing process of each stage includes split processing and obfuscation processing for each split result of the split processing. The data basis of the split processing of each stage is the obfuscation result of each obfuscation processing of the previous stage; the target subkey is marked with the split path of the split processing it has experienced;

[0041] The fifth module is used to restore the target subkey by using the key restoration module through the data receiving end to obtain the target key; and decrypt the encrypted data according to the target key by using the second encryption and decryption module;

[0042] Among them, the restoration processing includes a multi-stage second processing process, and the second processing process of each stage includes deobfuscation processing and merging processing of deobfuscation results of multiple deobfuscation processing belonging to the same split path in the current stage. The data basis of the deobfuscation processing in each stage is the merged result of each merged processing in the previous stage.

[0043] On the other hand, an embodiment of the present invention provides an electronic device, including: a processor and a memory; the memory is used to store programs; the processor executes the program to implement the above-mentioned data encryption and decryption method.

[0044] On the other hand, an embodiment of the present invention provides a computer storage medium, in which a program executable by a processor is stored. The program executable by the processor is used to implement the above-mentioned data encryption and decryption method when executed by the processor.

[0045] On the other hand, an embodiment of the present invention provides a vehicle, which includes the above-mentioned data encryption and decryption device or the above-mentioned electronic device.

[0046] The embodiment of the present invention performs multi-stage split obfuscation processing on the original key through the key injection module to obtain a first number of target subkeys; the target subkeys are transmitted to the key restoration module; wherein the multi-stage split obfuscation processing includes a multi-stage first processing process, the first processing process of each stage includes split processing and obfuscation processing for each split result of the split processing, and the data basis of the split processing of each stage is the obfuscation result of each obfuscation processing of the previous stage; the target subkey is marked with the split path of the split processing it has experienced; the target subkey is restored by the key restoration module to obtain the target key; wherein the restoration processing includes a multi-stage second processing process, the second processing process of each stage includes anti-obfuscation processing and merging processing of anti-obfuscation results of multiple anti-obfuscation processing belonging to the same split path in the current stage, and the data basis of the anti-obfuscation processing of each stage is the merging result of each merging processing of the previous stage; the target data is encrypted by the encryption and decryption module according to the original key to obtain encrypted data, or the encrypted data is decrypted according to the target key. The embodiment of the present invention can effectively improve the security of data encryption and decryption. The embodiment of the present invention uses obfuscation technology for the key to improve its security and prevent the key from being tampered with by an attacker and then directly used to cause data leakage; when the key is used for encryption and decryption after the key is obfuscated, the key needs to be decrypted and reorganized, which is equivalent to verifying the identity of the other party, thereby ensuring the security of the data; and the embodiment of the present invention realizes data encryption and decryption through data logic conversion, which can avoid the use of high-cost hardware security chips and reduce data security costs. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] The accompanying drawings are used to provide a further understanding of the technical solution of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the technical solution of the present invention and do not constitute a limitation on the technical solution of the present invention.

[0048] Figure 1 It is a schematic diagram of an implementation environment for data encryption and decryption provided by an embodiment of the present invention;

[0049] Figure 2 It is a flowchart of a data encryption and decryption method provided by an embodiment of the present invention;

[0050] Figure 3 A schematic diagram of an expanded flow chart of a multi-stage split obfuscation process provided by an embodiment of the present invention;

[0051] Figure 4 A schematic diagram of the principle flow of key obfuscation provided by an embodiment of the present invention;

[0052] Figure 5 A schematic diagram of the principle flow of key decryption provided by an embodiment of the present invention;

[0053] Figure 6 A schematic diagram of a data encryption and decryption transmission method provided by an embodiment of the present invention;

[0054] Figure 7 A schematic diagram of a process flow of a method for developing a vehicle encryption and decryption component provided by an embodiment of the present invention;

[0055] Figure 8 A schematic diagram of the structure of a data encryption and decryption device provided by an embodiment of the present invention;

[0056] Fig. 9 A schematic diagram of the structure of a data encryption and decryption transmission device provided by an embodiment of the present invention;

[0057] Fig.10 A schematic diagram of the structure of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0058] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0059] It should be noted that, although the functional modules are divided in the system schematic diagram and the logical order is shown in the flowchart, in some cases, the steps shown or described may be performed in a different order than the module division in the system or the order in the flowchart. The terms "first / S100", "second / S200", etc. in the specification, claims and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence.

[0060] Reference to "embodiments" herein means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present invention. The appearance of the phrase in various places in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0061] To facilitate the understanding of the technical solution of the present invention, the proprietary technical terms that may be applied in the technical solution of the present invention are first explained:

[0062] Obfuscation algorithm: Obfuscation algorithm is a source code protection method that transforms the original easy-to-understand source code into complex and difficult-to-understand code through transformation, so as to achieve the purpose of resisting the static reverse analysis of the source code of the software product by reverse analysts. The ultimate goal of this technology is to protect the core logic of the software product from being mastered by attackers and avoid irreparable losses. The core principle of the obfuscation algorithm is to make the source code difficult to understand directly through various transformation methods, thereby increasing the difficulty for attackers to understand and analyze the source code.

[0063] Application scenarios of obfuscation algorithms: Application in cryptography: Obfuscation algorithm is an important technology in cryptography, which enhances the security of data encryption through principles such as diffusion and obfuscation. For example, by compiling the secure calculation function involving two parties into the form of a Boolean circuit, and encrypting and scrambling the truth table of the circuit, the normal output of the circuit is achieved without leaking the private information of the two parties involved in the calculation. Software protection: The obfuscation algorithm changes the structure and logic of the code, making the originally easy-to-understand source code difficult to understand. This helps protect the core logic and algorithms of software products from reverse engineering analysis. Data desensitization technology: Obfuscation algorithms are also used in data desensitization technology. By scrambling and redistributing sensitive data, the association with other field data is destroyed, so that the desensitized data no longer has the semantics of the original content.

[0064] Implementation of the obfuscation algorithm:

[0065] Code obfuscation: By changing variable names, function names, control flow, etc., the code is made difficult to read and understand directly.

[0066] Data obfuscation: Rearranging, encrypting, or adding noise to data makes it difficult to directly analyze its original meaning.

[0067] Structural obfuscation: Making the program's behavior harder to predict by changing its structure, such as adding extra calculation steps, branches, or loops.

[0068] Importance of obfuscation algorithms: In the field of information security, obfuscation algorithms are an effective defense method used to protect intellectual property and prevent code from being illegally copied, modified, or reverse engineered. It increases the difficulty for attackers to understand and exploit source code, thereby improving the security of software products. In addition, in terms of data privacy protection, obfuscation algorithms also have their application value, reducing the risk of data leakage by disrupting and redistributing sensitive information.

[0069] It is understandable that the data encryption and decryption method and data encryption and decryption transmission method provided in the embodiment of the present invention can be applied to any computer device with data processing and computing capabilities, and this computer device can be various types of terminals or servers. When the computer device in the embodiment is a server, the server is an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN (Content Delivery Network), and big data and artificial intelligence platforms. In some embodiments, the terminal is a smart phone, a tablet computer, a laptop computer, and a desktop computer, but is not limited to this.

[0070] like Figure 1 FIG. 1 is a schematic diagram of an implementation environment provided by an embodiment of the present invention. Figure 1 The implementation environment includes at least one terminal 102 and a server 101. The terminal 102 and the server 101 can be connected to a network wirelessly or wired to complete data transmission and exchange.

[0071] Server 101 can be an independent physical server, or a server cluster or distributed system composed of multiple physical servers. It can also be a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN (Content Delivery Network), as well as big data and artificial intelligence platforms.

[0072] In addition, the server 101 can also be a node server in the blockchain network. Blockchain is a new application model of computer technologies such as distributed data storage, peer-to-peer transmission, consensus mechanism, and encryption algorithm.

[0073] The terminal 102 may be a smart phone, a tablet computer, a laptop computer, a desktop computer, a smart speaker, a smart watch, etc. The terminal 102 may also be a vehicle-mounted terminal of various device types described above, but is not limited thereto. The terminal 102 and the server 101 may be directly or indirectly connected via wired or wireless communication, which is not limited in this embodiment of the present invention.

[0074] Based on the example Figure 1 In the implementation environment shown, an embodiment of the present invention provides a data encryption and decryption method and a data encryption and decryption transmission method; the following is an example of applying the data encryption and decryption method and the data encryption and decryption transmission method to the server 101 respectively. It can be understood that the data encryption and decryption method can also be applied to the terminal 102.

[0075] Reference Figure 2 , Figure 2 The flowchart of the data encryption and decryption method applied to the server provided by the embodiment of the present invention, the execution subject of the data encryption and decryption method can be any of the aforementioned computer devices (including servers or terminals). Figure 2 , the method comprises the following steps:

[0076] S100, performing multi-level splitting and obfuscation processing on the original key through the key injection module to obtain a first number of target sub-keys; transmitting the target sub-keys to the key restoration module;

[0077] The multi-stage split obfuscation process includes a multi-stage first processing process, and the first processing process of each stage includes split processing and obfuscation processing for each split result of the split processing. The data basis of the split processing of each stage is the obfuscation result of each obfuscation processing of the previous stage; the target subkey is marked with the split path of the split processing it has experienced;

[0078] It should be noted that in some embodiments, Figure 3As shown, performing multi-level splitting and obfuscation processing on the original key to obtain a first number of target sub-keys can include the following steps: S101, performing a first-level splitting process on the original key to obtain a second number of first-level sub-keys; S102, performing a first obfuscation process on each first-level sub-key in turn through a first key obfuscation algorithm to obtain a first-level obfuscated key corresponding to each first-level sub-key; S103, performing a second-level splitting process on each first-level obfuscated key in turn to obtain a first number of second-level sub-keys; S104, performing a second obfuscation process on each second-level sub-key in turn through a second key obfuscation algorithm to obtain a second-level obfuscated key corresponding to each second-level sub-key; marking the splitting path of each second-level obfuscated key based on the first-level splitting process and the second-level splitting process to obtain the target sub-key.

[0079] For example, in some specific embodiments, Figure 4 As shown, the key injection module is divided into key obfuscation and key injection:

[0080] ① In the key obfuscation process, the key is split into two equal-length first-level subkeys, and the first key obfuscation algorithm is used to obfuscate the two first-level subkeys after the splitting. The two obfuscated first-level subkeys are again split into equal-length second-level subkeys, and the second-level subkeys are obfuscated using the second key obfuscation algorithm, and finally four obfuscated subkeys are obtained. For example, to obfuscate a 16-byte key, first split the 16-byte key into two 8-byte first-level subkeys, use a specific obfuscation algorithm to obfuscate the two 8-byte first-level subkeys, and obtain two obfuscated 8-byte first-level subkeys, then split the two 8-byte first-level subkeys into four 4-byte second-level subkeys, and use a key obfuscation algorithm (different from the previous key obfuscation algorithm) to obfuscate the four 4-byte second-level subkeys, and finally obtain four obfuscated 4-byte subkeys.

[0081] In some embodiments, performing a first-level splitting process on the original key to obtain a second number of first-level subkeys may include the following steps:

[0082] The original key is divided equally into a second number of first-level sub-keys of equal byte length.

[0083] In some embodiments, marking the splitting path of each secondary obfuscation key based on the primary splitting process and the secondary splitting process may include the following steps:

[0084] Obtain the first split number of the split result of the primary splitting process of the secondary obfuscation key and the second split number of the split result of the secondary splitting process;

[0085] A split path of the secondary obfuscated key is composed based on the first split number and the second split number.

[0086] For example, in some specific embodiments, Figure 4 As shown, from left to right, the two-layer splitting is defined as a primary splitting process and a secondary splitting process. Correspondingly, the first splitting numbers (from top to bottom) of the two 8-byte keys can be defined as 1 and 2 respectively (the same applies to the 8-byte obfuscation keys), and the second splitting numbers (from top to bottom) of the four 4-byte obfuscation keys can be defined as 1 to 4 respectively (the same applies to the 4-byte secondary obfuscation keys). Finally, the splitting paths (from top to bottom) of the four 4-byte secondary obfuscation keys (i.e., the target subkeys) can be defined as 1-1, 1-2, 2-1, and 2-2. Correspondingly, in the process of merging, 1-1 and 1-2, as well as 2-1 and 2-2 can be subjected to the first merging process respectively.

[0087] S200, restore the target subkey through the key restoration module to obtain the target key;

[0088] The restoration process includes a multi-stage second processing process, and the second processing process of each stage includes a deobfuscation process and a merging process of the deobfuscation results of multiple deobfuscation processes belonging to the same split path in the current stage, and the data basis of the deobfuscation process in each stage is the merging result of each merging process in the previous stage;

[0089] It should be noted that, in some embodiments, the splitting process includes a first-level splitting process and a second-level splitting process; the splitting path includes the first splitting number of the first-level splitting process; the target sub-key is restored to obtain the target key, which may include the following steps: a first anti-obfuscation process is performed on each target sub-key through a first anti-obfuscation algorithm to obtain a second-level anti-obfuscation key corresponding to each target sub-key; based on the splitting path, the first splitting number of each target sub-key in the first-level splitting process is determined, and the corresponding multiple second-level anti-obfuscation keys are used as a key set to be merged according to the same first splitting number; a first merging process is performed on all the second-level anti-obfuscation keys in each key set to be merged to obtain a first-level merged key corresponding to each key set to be merged; a second anti-obfuscation process is performed on each first-level merged key through a second anti-obfuscation algorithm to obtain a first-level anti-obfuscation key corresponding to each first-level merged key; a second merging process is performed on all first-level anti-obfuscation keys to obtain the target key.

[0090] The first anti-obfuscation algorithm corresponds to the second obfuscation algorithm, and the second anti-obfuscation algorithm corresponds to the first obfuscation algorithm.

[0091] For example, in some specific embodiments, Figure 5 As shown, the key recovery module is divided into key acquisition, key decryption and key reorganization:

[0092] First, four 4-byte obfuscated secondary sub-keys are obtained, and the key is decrypted (de-obfuscated) by the corresponding second decryption algorithm (i.e., the first de-obfuscation algorithm). The decrypted four 4-byte secondary sub-keys are combined (merged) into two 8-byte primary sub-keys again, and the key is decrypted by the corresponding first decryption algorithm (i.e., the second de-obfuscation algorithm) to be reorganized into a 16-byte original key.

[0093] S300, encrypting the target data according to the original key through the encryption and decryption module to obtain encrypted data, or decrypting the encrypted data according to the target key.

[0094] Exemplarily, in some specific implementations, the encryption and decryption module is divided into key acquisition and encryption and decryption algorithm call: first, the original key is obtained from the key recovery module, and then the encryption and decryption algorithm is called to encrypt and decrypt the data.

[0095] For example, refer to Figure 6 , Figure 6 The flowchart of the data encryption and decryption transmission method applied to the server provided by the embodiment of the present invention, the execution subject of the data encryption and decryption method can be any of the aforementioned computer devices (including servers or terminals). Figure 6 , the method comprises the following steps:

[0096] T100, using the first encryption and decryption module at the data sending end to encrypt the target data according to the original key to obtain encrypted data; using the key injection module to perform multi-level splitting and obfuscation processing on the original key to obtain a first number of target sub-keys; transmitting the encrypted data and the target sub-keys to the data receiving end;

[0097] The multi-stage split obfuscation process includes a multi-stage first processing process, and the first processing process of each stage includes split processing and obfuscation processing for each split result of the split processing. The data basis of the split processing of each stage is the obfuscation result of each obfuscation processing of the previous stage; the target subkey is marked with the split path of the split processing it has experienced;

[0098] T200, restore the target subkey by using the key restoration module at the data receiving end to obtain the target key; decrypt the encrypted data according to the target key by using the second encryption and decryption module;

[0099] Among them, the restoration processing includes a multi-stage second processing process, and the second processing process of each stage includes deobfuscation processing and merging processing of deobfuscation results of multiple deobfuscation processing belonging to the same split path in the current stage. The data basis of the deobfuscation processing in each stage is the merged result of each merged processing in the previous stage.

[0100] It should be noted that in some embodiments, the principles of processing logic such as multi-level splitting obfuscation processing and restoration processing used in the data encryption and decryption transmission method are consistent with the principles in the data encryption and decryption method, and will not be repeated here.

[0101] For example, in some specific implementations, the key injection module and the key recovery module can be respectively set at both ends of the data transmission (the data sending end and the data receiving end), and the encryption and decryption modules can be set at both ends. During the data transmission process, only the encrypted data and the split sub-keys are transmitted to achieve the data encryption and decryption requirements and ensure the data confidentiality and security during data transmission;

[0102] Exemplarily, a data transmission encryption and decryption process is implemented as follows: the data sending end encrypts the transmission data using the original key through the encryption and decryption module to obtain encrypted data, and the data sending end confuses the original key through the key injection module to obtain the corresponding sub-key; then the encrypted data and the sub-key are transmitted to the data receiving end, and then the data receiving end restores the sub-key through the key restoration module to obtain the original key, and finally the data receiving end decrypts the encrypted data through the encryption and decryption module according to the restored original key to obtain the transmission data.

[0103] In order to explain the principle of the technical solution of the present invention in detail, the overall process of the present invention is described below in combination with some specific embodiments. It is easy to understand that the following is an explanation of the technical principle of the present invention and cannot be regarded as a limitation of the present invention.

[0104] First of all, it should be noted that due to the high cost of using hardware security chips, encryption and decryption components are developed to replace hardware security chips to encrypt important information. Through the vehicle-side encryption and decryption components, sensitive data can be desensitized and converted into ciphertext for storage and transmission, thereby reducing the risk of data leakage and greatly improving data security.

[0105] However, in the process of developing encryption and decryption components, symmetric key algorithms are used to encrypt and decrypt important information, and then store and transmit it. As long as the attacker obtains the key, the security of the data during transmission and storage cannot be ensured. It is not allowed to transmit and store data without using effective encryption and decryption components, thereby destroying the confidentiality, integrity and authenticity of the vehicle data, making it more difficult for attackers to obtain sensitive data.

[0106] In view of this, an embodiment of the present invention provides a method for developing a vehicle encryption and decryption component, which can be applied to data encryption and decryption and data encryption and decryption transmission scenarios. Specifically, Figure 7 As shown, a method for developing a vehicle encryption and decryption component is as follows:

[0107] The vehicle encryption and decryption component development method includes three modules: key injection module, key recovery module and encryption and decryption module. First, the key injection module is used to inject the obfuscated key into the key recovery module, then the original key used for encryption is successfully called through the interface of the key recovery module, and finally the original key and encryption and decryption algorithm are applied in the encryption and decryption module to encrypt and decrypt sensitive data.

[0108] The specific process is as follows:

[0109] 1. The key injection module is divided into key obfuscation and key injection:

[0110] ① In the key obfuscation process, the key is split into two equal-length first-level subkeys, and the first key obfuscation algorithm is used to obfuscate the two first-level subkeys after the splitting. The two obfuscated first-level subkeys are again split into equal-length second-level subkeys, and the second-level subkeys are obfuscated using the second key obfuscation algorithm, and finally four obfuscated subkeys are obtained. For example, to obfuscate a 16-byte key, first split the 16-byte key into two 8-byte first-level subkeys, use a specific obfuscation algorithm to obfuscate the two 8-byte first-level subkeys, and obtain two obfuscated 8-byte first-level subkeys, then split the two 8-byte first-level subkeys into four 4-byte second-level subkeys, and use a key obfuscation algorithm (different from the previous key obfuscation algorithm) to obfuscate the four 4-byte second-level subkeys, and finally obtain four obfuscated 4-byte subkeys.

[0111] ② During the key injection process, the obfuscated key is injected into the specified location in the key recovery module through the program of the key injection module.

[0112] 2. The key recovery module is divided into key acquisition, key decryption and key reorganization:

[0113] First, obtain four 4-byte obfuscated secondary sub-keys, decrypt the keys using the corresponding second decryption algorithm (anti-obfuscation algorithm), and combine the decrypted four 4-byte secondary sub-keys into two 8-byte primary sub-keys again. Decrypt the keys using the corresponding first decryption algorithm (anti-obfuscation algorithm) and reorganize them into the original 16-byte key.

[0114] 3. The encryption and decryption module is divided into key acquisition and encryption and decryption algorithm call:

[0115] First, obtain the original key from the key recovery module, and then call the encryption and decryption algorithm to encrypt and decrypt the data.

[0116] Specifically, the key injection module and the key recovery module can be respectively set at both ends of the data transmission (data sending end and data receiving end), and the encryption and decryption modules can be set at both ends. During the data transmission process, only the encrypted data (ciphertext data) and the split sub-keys are transmitted to achieve data encryption and decryption requirements and ensure data confidentiality and security during data transmission.

[0117] Exemplarily, a data transmission encryption and decryption process is implemented as follows: the data sending end encrypts the transmission data (plaintext data) using the original key through the encryption and decryption module to obtain encrypted data (ciphertext data), and the data sending end confuses the original key through the key injection module to obtain the corresponding sub-key; then the encrypted data and the sub-key are transmitted to the data receiving end, and then the data receiving end restores the sub-key through the key restoration module to obtain the original key, and finally the data receiving end decrypts the encrypted data through the encryption and decryption module according to the restored original key to obtain the transmission data.

[0118] In summary, the technical solution of the present invention uses a symmetric key algorithm to encrypt and decrypt sensitive data, which is fast; moreover, the embodiment of the present invention uses obfuscation technology for the key to improve its security, and prevents the key from being tampered with by an attacker and then directly used to cause data leakage; specifically, when the key is used for encryption and decryption after the key is obfuscated, the key needs to be decrypted and reorganized, which is equivalent to verifying the identity of the other party, thereby ensuring the security of the data.

[0119] On the other hand, Figure 8 As shown, an embodiment of the present invention provides a data encryption and decryption device 800, which may include:

[0120] The first module 801 is used to perform multi-level splitting and obfuscation processing on the original key through the key injection module to obtain a first number of target subkeys; and transmit the target subkeys to the key restoration module;

[0121] The multi-stage split obfuscation process includes a multi-stage first processing process, and the first processing process of each stage includes split processing and obfuscation processing for each split result of the split processing. The data basis of the split processing of each stage is the obfuscation result of each obfuscation processing of the previous stage; the target subkey is marked with the split path of the split processing it has experienced;

[0122] The second module 802 is used to restore the target subkey through the key restoration module to obtain the target key;

[0123] The restoration process includes a multi-stage second processing process, and the second processing process of each stage includes a deobfuscation process and a merging process of the deobfuscation results of multiple deobfuscation processes belonging to the same split path in the current stage, and the data basis of the deobfuscation process in each stage is the merging result of each merging process in the previous stage;

[0124] The third module 803 is used to encrypt the target data according to the original key through the encryption and decryption module to obtain encrypted data, or to decrypt the encrypted data according to the target key.

[0125] On the other hand, Fig. 9 As shown, an embodiment of the present invention provides a data encryption and decryption transmission device 900, which may include:

[0126] The fourth module 901 is used to encrypt the target data according to the original key by using the first encryption and decryption module through the data sending end to obtain encrypted data; use the key injection module to perform multi-level splitting and obfuscation processing on the original key to obtain a first number of target sub-keys; and transmit the encrypted data and the target sub-keys to the data receiving end;

[0127] The multi-stage split obfuscation process includes a multi-stage first processing process, and the first processing process of each stage includes split processing and obfuscation processing for each split result of the split processing. The data basis of the split processing of each stage is the obfuscation result of each obfuscation processing of the previous stage; the target subkey is marked with the split path of the split processing it has experienced;

[0128] The fifth module 902 is used to restore the target subkey by using the key restoration module through the data receiving end to obtain the target key; and decrypt the encrypted data according to the target key by using the second encryption and decryption module;

[0129] Among them, the restoration processing includes a multi-stage second processing process, and the second processing process of each stage includes deobfuscation processing and merging processing of deobfuscation results of multiple deobfuscation processing belonging to the same split path in the current stage. The data basis of the deobfuscation processing in each stage is the merged result of each merged processing in the previous stage.

[0130] The contents of the method embodiments of the present invention are all applicable to the device embodiments. The functions specifically implemented by the device embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0131] On the other hand, an embodiment of the present invention further provides an electronic device, the electronic device comprising a memory and a processor, the memory storing a computer program, and the processor implementing the above data encryption and decryption method when executing the computer program. The electronic device can be any intelligent terminal including a tablet computer, a car computer, etc.

[0132] It can be understood that the contents of the above method embodiments are all applicable to the present device embodiments, the functions specifically implemented by the present device embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0133] like Fig.10 As shown, Fig.10 The hardware structure of an electronic device 1000 of another embodiment is illustrated. The electronic device 1000 includes:

[0134] The processor 1001 may be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of the present invention.

[0135] The memory 1002 can be implemented in the form of a read-only memory (ROM), a static storage device, a dynamic storage device, or a random access memory (RAM). The memory 1002 can store an operating system and other application programs. When the technical solution provided in the embodiment of this specification is implemented by software or firmware, the relevant program code is stored in the memory 1002, and the processor 1001 calls and executes the network node population optimization method of the embodiment of the present invention;

[0136] Input / output interface 1003, used to implement information input and output;

[0137] The communication interface 1004 is used to realize the communication interaction between the device and other devices. The communication can be realized through a wired manner (such as USB, network cable, etc.) or a wireless manner (such as mobile network, WIFI, Bluetooth, etc.);

[0138] A bus 1005 , which transmits information between various components of the device (e.g., the processor 1001 , the memory 1002 , the input / output interface 1003 , and the communication interface 1004 );

[0139] The processor 1001 , the memory 1002 , the input / output interface 1003 and the communication interface 1004 are connected to each other in communication within the device via the bus 1005 .

[0140] The electronic device embodiments described above are merely illustrative, and the units described as separate components may or may not be physically separated, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0141] The contents of the method embodiments of the present invention are all applicable to the electronic device embodiments. The functions specifically implemented by the electronic device embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0142] Another aspect of an embodiment of the present invention further provides a computer-readable storage medium, the storage medium stores a program, and the program is executed by a processor to implement the above method.

[0143] It should be noted that the computer-readable medium shown in the embodiment of the present invention may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM), a flash memory, an optical fiber, a portable compact disk read-only memory (Compact Disc Read to Only Memory, CD to ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present invention, a computer-readable storage medium may be any tangible medium containing or storing a program, which may be used by or in combination with an instruction execution system, device or device. In the present invention, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries a computer-readable program code. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Computer readable signal media may also be any computer readable medium other than computer readable storage media, which may send, propagate, or transmit programs for use by or in conjunction with an instruction execution system, apparatus, or device. The program code contained on the computer readable medium may be transmitted using any suitable medium, including but not limited to: wireless, wired, etc., or any suitable combination of the above.

[0144] The contents of the method embodiments of the present invention are all applicable to the computer-readable storage medium embodiments. The functions specifically implemented by the computer-readable storage medium embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0145] The embodiment of the present invention also discloses a computer program product or a computer program, which includes a computer instruction stored in a computer-readable storage medium. A processor of a computer device can read the computer instruction from the computer-readable storage medium, and the processor executes the computer instruction, so that the computer device executes the above method.

[0146] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present invention. In this regard, each box in the flow chart or block diagram can represent a module, a program segment, or a part of a code, and the above-mentioned module, program segment, or a part of a code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flow chart, and the combination of the boxes in the block diagram or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0147] It should be noted that, although several modules of the device for action execution are mentioned in the above detailed description, this division is not mandatory. In fact, according to an embodiment of the present invention, the features and functions of two or more modules or units described above can be embodied in one module or unit. On the contrary, the features and functions of one module or unit described above can be further divided into being embodied by multiple modules or units.

[0148] Through the description of the above implementation, it is easy for those skilled in the art to understand that the example implementation described here can be implemented by software, or by software combined with necessary hardware. Therefore, the technical solution according to the implementation of the present invention can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD to ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, including several instructions to enable a computing device (which can be a personal computer, a server, a touch terminal, or a network device, etc.) to execute the method according to the implementation of the present invention.

[0149] In some selectable embodiments, the function / operation mentioned in the block diagram may not occur in the order mentioned in the operation diagram. For example, depending on the function / operation involved, the two boxes shown in succession can actually be executed substantially simultaneously or the boxes can sometimes be executed in reverse order. In addition, the embodiment presented and described in the flow chart of the present invention is provided by way of example, for the purpose of providing a more comprehensive understanding of technology. The disclosed method is not limited to the operation and logic flow presented herein. Selectable embodiments are expected, wherein the order of various operations is changed and the sub-operation of a part for which is described as a larger operation is performed independently.

[0150] In addition, although the present invention is described in the context of functional modules, it should be understood that, unless otherwise specified, one or more of the functions and / or features can be integrated into a single physical device and / or software module, or one or more functions and / or features can be implemented in a separate physical device or software module. It is also understood that a detailed discussion of the actual implementation of each module is unnecessary for understanding the present invention. More specifically, in view of the properties, functions and internal relationships of the various functional modules in the device disclosed herein, the actual implementation of the module will be understood within the conventional skills of the engineer. Therefore, those skilled in the art can implement the present invention set forth in the claims without excessive experimentation using ordinary techniques. It is also understood that the specific concepts disclosed are merely illustrative and are not intended to limit the scope of the present invention, which is determined by the full scope of the appended claims and their equivalents.

[0151] If the function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods of each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc. Various media that can store program codes.

[0152] The logic and / or steps represented in the flowchart or otherwise described herein, for example, may be considered as an ordered list of executable instructions for implementing logical functions, and may be embodied in any computer-readable medium for use by an instruction execution device, apparatus or device (such as a computer-based device, a device including a processor, or other device that can fetch instructions from an instruction execution device, apparatus or device and execute the instructions), or in conjunction with such instruction execution device, apparatus or device. For purposes of this specification, "computer-readable medium" may be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution device, apparatus or device, or in conjunction with such instruction execution device, apparatus or device.

[0153] More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or more wires (electronic device), a portable computer disk case (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), a fiber optic device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be a paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, deciphering or, if necessary, processing in another suitable manner, and then stored in a computer memory.

[0154] It should be understood that the various parts of the present invention can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, a plurality of steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution device. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0155] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "examples", "specific examples", or "some examples" means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner.

[0156] Although the embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the claims and their equivalents.

[0157] The above is a specific description of the preferred implementation of the present invention, but the present invention is not limited to the embodiments. Those skilled in the art can make various equivalent modifications or substitutions without violating the spirit of the present invention. These equivalent modifications or substitutions are all included in the scope defined by the claims of the present invention.

Claims

1. A data encryption and decryption method, It is characterized in that The following steps are involved: Perform multi-level splitting and obfuscation processing on the original key through the key injection module to obtain a first number of target sub-keys; and transmit the target sub-keys to the key restoration module; The multi-stage splitting obfuscation process includes a multi-stage first processing process, and the first processing process of each stage includes splitting processing and obfuscation processing for each splitting result of the splitting processing, and the data basis of the splitting processing of each stage is the obfuscation result of each obfuscation processing of the previous stage; the target subkey is marked with the splitting path of the splitting processing it has experienced; The target subkey is restored by the key restoration module to obtain a target key; The restoration process includes a multi-stage second processing process, and the second processing process of each stage includes a deobfuscation process and a merging process of deobfuscation results of multiple deobfuscation processes belonging to the same split path in the current stage, and the data basis of the deobfuscation process in each stage is the merging result of each merging process in the previous stage; The target data is encrypted by the encryption / decryption module according to the original key to obtain encrypted data, or the encrypted data is decrypted according to the target key.

2. The data encryption and decryption method according to claim 1, It is characterized in that The method of performing multi-level splitting and obfuscation processing on the original key to obtain a first number of target subkeys includes the following steps: Performing a first-level splitting process on the original key to obtain a second number of first-level subkeys; Performing a first obfuscation process on each of the first-level subkeys in turn by using a first key obfuscation algorithm to obtain a first-level obfuscated key corresponding to each of the first-level subkeys; Performing a second-level splitting process on each of the first-level obfuscated keys in turn to obtain the first number of second-level subkeys; A second obfuscation process is performed on each of the secondary subkeys in turn through a second key obfuscation algorithm to obtain a secondary obfuscated key corresponding to each of the secondary subkeys; based on the primary splitting process and the secondary splitting process, the split path of each of the secondary obfuscated keys is marked to obtain the target subkey.

3. The data encryption and decryption method according to claim 2, It is characterized in that The step of performing a first-level splitting process on the original key to obtain a second number of first-level subkeys comprises the following steps: The original key is equally divided into the second number of the first-level sub-keys having equal byte lengths.

4. The data encryption and decryption method according to claim 2, It is characterized in that The step of marking the splitting path of each secondary obfuscated key based on the primary splitting process and the secondary splitting process comprises the following steps: Obtaining a first split number of the split result of the first-level splitting process of the secondary obfuscation key and a second split number of the split result of the second-level splitting process; A split path of the secondary obfuscated key is composed based on the first split number and the second split number.

5. The data encryption and decryption method according to claim 1, It is characterized in that The splitting process includes a primary splitting process and a secondary splitting process; the splitting path includes a first splitting number of the primary splitting process; the restoring process of the target subkey to obtain the target key includes the following steps: Performing a first deobfuscation process on each of the target subkeys using a first deobfuscation algorithm to obtain a secondary deobfuscation key corresponding to each of the target subkeys; Determine the first split number of each target subkey in the first-level splitting process based on the splitting path, and use the corresponding multiple second-level anti-obfuscation keys as a key set to be merged according to the same first splitting number; Performing a first merging process on all the secondary anti-obfuscation keys in each of the key sets to be merged, to obtain a primary merged key corresponding to each of the key sets to be merged; Performing a second deobfuscation process on each of the first-level combined keys using a second deobfuscation algorithm to obtain a first-level deobfuscation key corresponding to each of the first-level combined keys; A second merging process is performed on all the first-level anti-obfuscation keys to obtain the target key.

6. A data encryption and decryption device, It is characterized in that include: The first module is used to perform multi-level splitting and obfuscation processing on the original key through the key injection module to obtain a first number of target sub-keys; transmitting the target subkey to a key recovery module; The multi-stage splitting obfuscation process includes a multi-stage first processing process, and the first processing process of each stage includes splitting processing and obfuscation processing for each splitting result of the splitting processing, and the data basis of the splitting processing of each stage is the obfuscation result of each obfuscation processing of the previous stage; the target subkey is marked with the splitting path of the splitting processing it has experienced; The second module is used to restore the target subkey through the key restoration module to obtain the target key; The restoration process includes a multi-stage second processing process, and the second processing process of each stage includes a deobfuscation process and a merging process of deobfuscation results of multiple deobfuscation processes belonging to the same split path in the current stage, and the data basis of the deobfuscation process in each stage is the merging result of each merging process in the previous stage; The third module is used to encrypt the target data according to the original key through the encryption and decryption module to obtain encrypted data, or to decrypt the encrypted data according to the target key.

7. A data encryption and decryption transmission method, It is characterized in that The following steps are involved: The data transmitting end uses the first encryption and decryption module to encrypt the target data according to the original key to obtain encrypted data; uses the key injection module to perform multi-level splitting and obfuscation processing on the original key to obtain a first number of target subkeys; and transmits the encrypted data and the target subkeys to the data receiving end; The multi-stage splitting obfuscation process includes a multi-stage first processing process, and the first processing process of each stage includes splitting processing and obfuscation processing for each splitting result of the splitting processing, and the data basis of the splitting processing of each stage is the obfuscation result of each obfuscation processing of the previous stage; the target subkey is marked with the splitting path of the splitting processing it has experienced; The data receiving end uses a key restoration module to restore the target subkey to obtain a target key; and uses a second encryption and decryption module to decrypt the encrypted data according to the target key; Among them, the restoration processing includes a multi-stage second processing process, and the second processing process of each stage includes deobfuscation processing and merging processing of deobfuscation results of multiple deobfuscation processing belonging to the same split path in the current stage, and the data basis of the deobfuscation processing in each stage is the merged result of each merged processing in the previous stage.

8. A data encryption and decryption transmission device, It is characterized in that include: The fourth module is used to encrypt the target data using the first encryption and decryption module according to the original key through the data sending end to obtain encrypted data; Using a key injection module to perform multi-level splitting and obfuscation processing on the original key to obtain a first number of target subkeys; transmitting the encrypted data and the target subkeys to a data receiving end; The multi-stage splitting obfuscation process includes a multi-stage first processing process, and the first processing process of each stage includes splitting processing and obfuscation processing for each splitting result of the splitting processing, and the data basis of the splitting processing of each stage is the obfuscation result of each obfuscation processing of the previous stage; the target subkey is marked with the splitting path of the splitting processing it has experienced; A fifth module is used to restore the target subkey by using the key restoration module through the data receiving end to obtain a target key; and to decrypt the encrypted data according to the target key by using the second encryption and decryption module; Among them, the restoration processing includes a multi-stage second processing process, and the second processing process of each stage includes deobfuscation processing and merging processing of deobfuscation results of multiple deobfuscation processing belonging to the same split path in the current stage, and the data basis of the deobfuscation processing in each stage is the merged result of each merged processing in the previous stage.

9. An electronic device, It is characterized in that including a processor and a memory; The memory is used to store programs; The processor executes the program to implement the method according to any one of claims 1 to 5 or 7.

10. A vehicle, It is characterized in that The vehicle includes the data encryption and decryption device according to claim 6, the data encryption and decryption transmission device according to claim 8, or the electronic device according to claim 9.

Images