Data encryption and decryption, data encryption and decryption transmission methods, devices, equipment and vehicles

Abstract

This invention discloses a data encryption / decryption method, apparatus, device, and vehicle. The method includes: performing multi-level splitting and obfuscation processing on an original key through a key injection module to obtain a first number of target subkeys; transmitting the target subkeys to a key restoration module; restoring the target subkeys through the key restoration module to obtain a target key; and encrypting target data using the original key through an encryption / decryption module to obtain encrypted data, or decrypting the encrypted data using the target key. This invention uses obfuscation technology to improve key security, preventing attackers from directly using the tampered key and causing data leakage. Furthermore, this invention achieves data encryption / decryption through data logic transformation, avoiding the use of high-cost hardware security chips, reducing data security costs, and can be widely applied in the field of data processing technology.

Description

Technical Field

[0001] This invention relates to the field of data processing technology, and in particular to a data encryption / decryption method, apparatus, equipment, and vehicle. Background Technology

[0002] With the rapid development of automotive intelligence and connectivity, vehicle controllers, as core components of vehicles, are undertaking an increasing number of data processing and communication tasks. These tasks involve a large amount of sensitive data, such as encryption keys, digital certificates, and user personal information. The secure storage of this data is directly related to vehicle information security and user privacy protection.

[0003] Traditionally, to ensure the security of this sensitive data, hardware security chips (such as HSM and TPM) are typically used for storage. Hardware security chips provide a high level of protection for sensitive data through physical isolation and built-in security mechanisms. However, hardware security chips are expensive, increasing the overall manufacturing cost of vehicles, a particularly heavy burden for some mid-to-low-end models. Furthermore, symmetric key algorithms are commonly used to encrypt and decrypt important information before storage and transmission. However, if an attacker obtains the key, the security of the data during transmission and storage cannot be guaranteed. Summary of the Invention

[0004] This invention aims to at least partially address the limitations of related technologies. To this end, this invention proposes a data encryption / decryption method, apparatus, device, and vehicle, which can effectively improve the security of data encryption / decryption.

[0005] On one hand, embodiments of the present invention provide a data encryption / decryption method, including the following steps:

[0006] The original key is split and obfuscated through a multi-level key injection module to obtain a first number of target sub-keys; the target sub-keys are then transmitted to the key restoration module.

[0007] The multi-level splitting and obfuscation process includes a multi-stage first processing procedure. Each stage's first processing procedure includes splitting and obfuscation for each splitting result. The data basis for each stage's splitting is the obfuscation result of each obfuscation in the previous stage. The target subkey is marked with the splitting path it has experienced.

[0008] The target key is obtained by restoring the target subkey through the key restoration module;

[0009] The restoration process includes a multi-stage second process. Each stage of the second process includes deobfuscation and merging of the deobfuscation results of multiple deobfuscation processes belonging to the same splitting path in the current stage. The data basis for the deobfuscation process in each stage is the merging result of each merging process in the previous stage.

[0010] The encryption / decryption module encrypts the target data using the original key to obtain encrypted data, or decrypts the encrypted data using the target key.

[0011] In some embodiments, the original key is subjected to multi-level splitting and obfuscation to obtain a first number of target subkeys, including the following steps:

[0012] The original key is split into two first-level subkeys to obtain a second number of first-level subkeys.

[0013] The first key obfuscation algorithm is used to perform the first obfuscation process on each first-level subkey in sequence to obtain the first-level obfuscation key corresponding to each first-level subkey.

[0014] Each primary obfuscation key is sequentially subjected to secondary splitting to obtain the first number of secondary subkeys;

[0015] The second key obfuscation algorithm is used to perform second obfuscation processing on each second-level subkey in sequence to obtain the second-level obfuscated key corresponding to each second-level subkey; the splitting path of each second-level obfuscated key is marked based on the first-level splitting processing and the second-level splitting processing to obtain the target subkey.

[0016] In some embodiments, the original key is split into a second number of first-level subkeys, including the following steps:

[0017] The original key is divided into a second number of first-level subkeys of equal byte length.

[0018] In some embodiments, the splitting path of each secondary obfuscation key is marked based on the first-level splitting process and the second-level splitting process, including the following steps:

[0019] Obtain the first split number where the splitting result of the first-level splitting process of the secondary obfuscation key is located, and the second split number where the splitting result of the secondary obfuscation key is located in the secondary splitting process;

[0020] The splitting path is composed of the first splitting number and the second splitting number to form the splitting path of the secondary obfuscation key.

[0021] In some embodiments, the splitting process includes a first-level splitting process and a second-level splitting process; the splitting path includes the first splitting number of the first-level splitting process; the target subkey is restored to obtain the target key, including the following steps:

[0022] Each target subkey is de-obfuscated using the first de-obfuscation algorithm to obtain the second-level de-obfuscation key corresponding to each target subkey.

[0023] Based on the splitting path, determine the first splitting number of each target subkey in the first-level splitting process, and use the corresponding multiple second-level deobfuscation keys as a set of keys to be merged according to the same first splitting number;

[0024] Perform a first merging process on all secondary deobfuscated keys in each set of keys to be merged to obtain the primary merged key corresponding to each set of keys to be merged.

[0025] Each first-level merge key is deobfuscated using a second deobfuscation algorithm to obtain the first-level deobfuscation key corresponding to each first-level merge key.

[0026] A second merging process is performed on all the first-level deobfuscated keys to obtain the target key.

[0027] On the other hand, embodiments of the present invention provide a data encryption / decryption apparatus, comprising:

[0028] The first module is used to perform multi-level splitting and obfuscation processing on the original key through the key injection module to obtain a first number of target sub-keys; and to transmit the target sub-keys to the key restoration module.

[0029] The multi-level splitting and obfuscation process includes a multi-stage first processing procedure. Each stage's first processing procedure includes splitting and obfuscation for each splitting result. The data basis for each stage's splitting is the obfuscation result of each obfuscation in the previous stage. The target subkey is marked with the splitting path it has experienced.

[0030] The second module is used to restore the target subkey through the key restoration module to obtain the target key;

[0031] The restoration process includes a multi-stage second process. Each stage of the second process includes deobfuscation and merging of the deobfuscation results of multiple deobfuscation processes belonging to the same splitting path in the current stage. The data basis for the deobfuscation process in each stage is the merging result of each merging process in the previous stage.

[0032] The third module is used to encrypt the target data using the original key through the encryption / decryption module to obtain encrypted data, or to decrypt the encrypted data using the target key.

[0033] On the other hand, embodiments of the present invention provide a data encryption / decryption transmission method, including:

[0034] The data sending end uses the first encryption / decryption module to encrypt the target data according to the original key to obtain encrypted data; the key injection module uses the key injection module to perform multi-level splitting and obfuscation processing on the original key to obtain a first number of target subkeys; the encrypted data and target subkeys are then transmitted to the data receiving end.

[0035] The multi-level splitting and obfuscation process includes a multi-stage first processing procedure. Each stage's first processing procedure includes splitting and obfuscation for each splitting result. The data basis for each stage's splitting is the obfuscation result of each obfuscation in the previous stage. The target subkey is marked with the splitting path it has experienced.

[0036] The target subkey is restored using the key restoration module at the data receiving end to obtain the target key; the encrypted data is then decrypted using the second encryption / decryption module based on the target key.

[0037] The restoration process includes a multi-stage second process. Each stage of the second process includes deobfuscation and merging of the deobfuscation results of multiple deobfuscation processes belonging to the same splitting path in the current stage. The data basis for the deobfuscation process in each stage is the merged result of each merged process in the previous stage.

[0038] On the other hand, embodiments of the present invention provide a data encryption / decryption transmission apparatus, comprising:

[0039] The fourth module is used to encrypt the target data using the first encryption / decryption module based on the original key at the data sending end to obtain encrypted data; to perform multi-level splitting and obfuscation processing on the original key using the key injection module to obtain a first number of target subkeys; and to transmit the encrypted data and target subkeys to the data receiving end.

[0040] The multi-level splitting and obfuscation process includes a multi-stage first processing procedure. Each stage's first processing procedure includes splitting and obfuscation for each splitting result. The data basis for each stage's splitting is the obfuscation result of each obfuscation in the previous stage. The target subkey is marked with the splitting path it has experienced.

[0041] The fifth module is used to restore the target subkey using the key restoration module at the data receiving end to obtain the target key; and to decrypt the encrypted data using the second encryption / decryption module based on the target key.

[0042] The restoration process includes a multi-stage second process. Each stage of the second process includes deobfuscation and merging of the deobfuscation results of multiple deobfuscation processes belonging to the same splitting path in the current stage. The data basis for the deobfuscation process in each stage is the merged result of each merged process in the previous stage.

[0043] On the other hand, embodiments of the present invention provide an electronic device, including: a processor and a memory; the memory is used to store a program; the processor executes the program to implement the above-described data encryption and decryption method.

[0044] On the other hand, embodiments of the present invention provide a computer storage medium storing a processor-executable program, which, when executed by a processor, is used to implement the above-described data encryption and decryption method.

[0045] On the other hand, embodiments of the present invention provide a vehicle that includes the aforementioned data encryption / decryption device or the aforementioned electronic device.

[0046] This invention employs a key injection module to perform multi-level splitting and obfuscation processing on the original key to obtain a first number of target subkeys. These target subkeys are then transmitted to a key restoration module. The multi-level splitting and obfuscation processing includes a multi-stage first processing procedure, each stage comprising splitting and obfuscation of each splitting result. The data basis for each splitting process is the obfuscation result of the previous stage's obfuscation. The target subkeys are marked with the splitting paths they have undergone. The key restoration module restores the target subkeys to obtain the target key. This restoration process includes a multi-stage second processing procedure, each stage comprising deobfuscation and merging of deobfuscation results belonging to the same splitting path in the current stage. The data basis for each deobfuscation is the merging result of the previous stage's merging. Finally, an encryption / decryption module encrypts the target data using the original key to obtain encrypted data, or decrypts the encrypted data using the target key. This invention effectively improves the security of data encryption and decryption. This invention employs obfuscation techniques to enhance the security of the key, preventing attackers from tampering with it and using it directly, thus preventing data leakage. After key obfuscation, encryption and decryption require key decryption and reconstruction, which is equivalent to verifying the identity of the other party, ensuring data security. Furthermore, this invention achieves data encryption and decryption through data logic transformation, avoiding the use of high-cost hardware security chips and reducing data security costs. Attached Figure Description

[0047] The accompanying drawings are provided to further understand the technical solutions of the present invention and constitute a part of the specification. They are used together with the embodiments of the present invention to explain the technical solutions of the present invention, and do not constitute a limitation on the technical solutions of the present invention.

[0048] Figure 1 This is a schematic diagram of an implementation environment for data encryption and decryption provided in an embodiment of the present invention;

[0049] Figure 2 This is a flowchart illustrating a data encryption / decryption method provided in an embodiment of the present invention;

[0050] Figure 3 This is a schematic diagram of an expansion process for multi-level splitting and obfuscation processing provided in an embodiment of the present invention;

[0051] Figure 4 A schematic diagram illustrating the principle and process of key obfuscation provided in an embodiment of the present invention;

[0052] Figure 5 A schematic diagram illustrating the principle of key decryption provided in an embodiment of the present invention;

[0053] Figure 6 A schematic flowchart illustrating a data encryption / decryption transmission method provided in an embodiment of the present invention;

[0054] Figure 7 A flowchart illustrating the development method of a vehicle encryption / decryption component provided in an embodiment of the present invention;

[0055] Figure 8 This is a schematic diagram of the structure of a data encryption / decryption device provided in an embodiment of the present invention;

[0056] Figure 9 This is a schematic diagram of the structure of a data encryption / decryption transmission device provided in an embodiment of the present invention;

[0057] Figure 10 This is a schematic diagram of the structure of an electronic device provided in an embodiment of the present invention. Detailed Implementation

[0058] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the invention.

[0059] It should be noted that although functional modules are divided in the system diagram and the logical order is shown in the flowchart, in some cases, the steps shown or described may be performed in a different order than the module division in the system or the order in the flowchart. The terms "first / S100," "second / S200," etc., in the specification, claims, and the aforementioned figures are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence.

[0060] In this document, the term "embodiment" means that a particular feature, structure, or characteristic described in connection with an embodiment may be included in at least one embodiment of the invention. The appearance of this phrase in various places throughout the specification does not necessarily refer to the same embodiment, nor is it a separate or alternative embodiment mutually exclusive with other embodiments. It will be explicitly and implicitly understood by those skilled in the art that the embodiments described herein can be combined with other embodiments.

[0061] To facilitate understanding of the technical solution of this invention, the proprietary technical terms that may be used in the technical solution of this invention will first be explained:

[0062] Obfuscation algorithms are a source code protection method that transforms simple, easily understood source code into complex, difficult-to-understand code to resist static reverse engineering of software product source code. The ultimate goal of this technique is to protect the core logic of software products from attackers, preventing irreparable damage. The core principle of obfuscation algorithms is to use various transformation methods to make the source code difficult to understand directly, thereby increasing the difficulty for attackers to comprehend and analyze the source code.

[0063] Applications of Obfuscation Algorithms: In cryptography: Obfuscation algorithms are an important technique in cryptography, enhancing data encryption security through principles such as diffusion and confusion. For example, by compiling a secure computation function involving two parties into a Boolean circuit and encrypting and scrambling the circuit's truth table, the circuit can output normally without revealing the private information of the parties involved in the computation. In software protection: Obfuscation algorithms alter the structure and logic of code, making originally easy-to-understand source code difficult to comprehend. This helps protect the core logic and algorithms of software products from reverse engineering analysis. In data anonymization: Obfuscation algorithms are also used in data anonymization techniques. By scrambling and redistributing sensitive data, they disrupt the association with other fields, causing the anonymized data to lose the semantics of the original content.

[0064] How to implement the obfuscation algorithm:

[0065] Code obfuscation: By changing variable names, function names, control flow, etc., code becomes difficult to read and understand directly.

[0066] Data obfuscation: This involves rearranging, encrypting, or adding noise to data to make it difficult to directly analyze its original meaning.

[0067] Structural obfuscation: By altering the structure of a program, such as by adding extra computational steps, branches, or loops, the behavior of the program becomes unpredictable.

[0068] The Importance of Obfuscation Algorithms: In the field of information security, obfuscation algorithms are an effective defense mechanism used to protect intellectual property and prevent code from being illegally copied, modified, or reverse-engineered. They increase the difficulty for attackers to understand and exploit the source code, thereby improving the security of software products. Furthermore, obfuscation algorithms also have value in data privacy protection, reducing the risk of data leakage by scrambling and redistributing sensitive information.

[0069] It is understood that the data encryption / decryption method and data encryption / decryption transmission method provided in the embodiments of the present invention can be applied to any computer device with data processing and computing capabilities, and this computer device can be various types of terminals or servers. When the computer device in the embodiments is a server, the server is an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, CDN (Content Delivery Network), and big data and artificial intelligence platforms. In some embodiments, the terminal is a smartphone, tablet computer, laptop computer, or desktop computer, but it is not limited to these.

[0070] like Figure 1 The diagram shown is a schematic representation of an implementation environment provided by an embodiment of the present invention. (Refer to...) Figure 1 The implementation environment includes at least one terminal 102 and a server 101. The terminal 102 and the server 101 can be connected via a network, either wirelessly or via a wired connection, to complete data transmission and exchange.

[0071] Server 101 can be a standalone physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, CDN (Content Delivery Network), and big data and artificial intelligence platforms.

[0072] Additionally, server 101 can also be a node server in a blockchain network. Blockchain is a novel application model of computer technologies such as distributed data storage, peer-to-peer transmission, consensus mechanisms, and encryption algorithms.

[0073] Terminal 102 can be a smartphone, tablet, laptop, desktop computer, smart speaker, smartwatch, etc. It can also be a vehicle-mounted terminal of the various device types described above, but is not limited to these. Terminal 102 and server 101 can be directly or indirectly connected via wired or wireless communication, and this embodiment of the invention does not impose any limitations.

[0074] Exemplary based on Figure 1 The implementation environment shown in this embodiment of the invention provides a data encryption / decryption method and a data encryption / decryption transmission method. The following description uses the application of the data encryption / decryption method and the data encryption / decryption transmission method to server 101 as examples. It can be understood that the data encryption / decryption method can also be applied to terminal 102.

[0075] Reference Figure 2 , Figure 2 This is a flowchart illustrating a data encryption / decryption method applied to a server, provided in an embodiment of the present invention. The execution entity of this data encryption / decryption method can be any of the aforementioned computer devices (including a server or a terminal). (Refer to...) Figure 2 The method includes the following steps:

[0076] S100: The original key is split and obfuscated through the key injection module to obtain a first number of target subkeys; the target subkeys are then transmitted to the key restoration module.

[0077] The multi-level splitting and obfuscation process includes a multi-stage first processing procedure. Each stage's first processing procedure includes splitting and obfuscation for each splitting result. The data basis for each stage's splitting is the obfuscation result of each obfuscation in the previous stage. The target subkey is marked with the splitting path it has experienced.

[0078] It should be noted that in some embodiments, such as Figure 3As shown, performing multi-level splitting and obfuscation on the original key to obtain a first number of target subkeys may include the following steps: S101, performing a first-level splitting process on the original key to obtain a second number of first-level subkeys; S102, performing a first obfuscation process on each first-level subkey sequentially using a first key obfuscation algorithm to obtain a first-level obfuscated key corresponding to each first-level subkey; S103, performing a second-level splitting process on each first-level obfuscated key sequentially to obtain a first number of second-level subkeys; S104, performing a second obfuscation process on each second-level subkey sequentially using a second key obfuscation algorithm to obtain a second-level obfuscated key corresponding to each second-level subkey; and marking the splitting path of each second-level obfuscated key based on the first-level and second-level splitting processes to obtain the target subkey.

[0079] Exemplary examples, such as in some specific implementations, Figure 4 As shown, the key injection module is divided into key obfuscation and key injection:

[0080] ① In the key obfuscation process, the key is split into two equal-length primary subkeys. The two primary subkeys are then obfuscated using a first-type key obfuscation algorithm. These obfuscated primary subkeys are then further split into equal-length secondary subkeys, which are obfuscated using a second-type key obfuscation algorithm, resulting in four obfuscated subkeys. For example, to obfuscate a 16-byte key, it is first split into two 8-byte primary subkeys, which are then obfuscated using a specific obfuscation algorithm, resulting in two obfuscated 8-byte primary subkeys. These two 8-byte primary subkeys are then split into four 4-byte secondary subkeys, which are obfuscated using a different key obfuscation algorithm, resulting in four obfuscated 4-byte subkeys.

[0081] In some embodiments, performing a first-level split on the original key to obtain a second number of first-level subkeys may include the following steps:

[0082] The original key is divided into a second number of first-level subkeys of equal byte length.

[0083] In some embodiments, marking the splitting path of each secondary obfuscation key based on the first-level splitting process and the second-level splitting process may include the following steps:

[0084] Obtain the first split number where the splitting result of the first-level splitting process of the secondary obfuscation key is located, and the second split number where the splitting result of the secondary obfuscation key is located in the secondary splitting process;

[0085] The splitting path is composed of the first splitting number and the second splitting number to form the splitting path of the secondary obfuscation key.

[0086] Exemplary examples, such as in some specific implementations, Figure 4 As shown, from left to right, the two-level splitting is defined as first-level splitting processing and second-level splitting processing. Correspondingly, the first splitting numbers of the two 8-byte keys (from top to bottom) can be defined as 1 and 2 respectively (the same applies to the 8-byte obfuscation keys), and the second splitting numbers of the four 4-byte obfuscation keys (from top to bottom) can be defined as 1 to 4 respectively (the same applies to the 4-byte secondary obfuscation keys). Then, the splitting path (from top to bottom) of the four 4-byte secondary obfuscation keys (i.e., target subkeys) can be defined as 1-1, 1-2, 2-1, 2-2. Correspondingly, in the merging process, 1-1 and 1-2, as well as 2-1 and 2-2, can be subjected to the first merging process respectively.

[0087] S200. The target subkey is restored using the key restoration module to obtain the target key;

[0088] The restoration process includes a multi-stage second process. Each stage of the second process includes deobfuscation and merging of the deobfuscation results of multiple deobfuscation processes belonging to the same splitting path in the current stage. The data basis for the deobfuscation process in each stage is the merging result of each merging process in the previous stage.

[0089] It should be noted that in some embodiments, the splitting process includes a first-level splitting process and a second-level splitting process; the splitting path includes the first splitting number of the first-level splitting process; the target subkey is restored to obtain the target key, which may include the following steps: performing a first deobfuscation process on each target subkey using a first deobfuscation algorithm to obtain a second-level deobfuscation key corresponding to each target subkey; determining the first splitting number of each target subkey in the first-level splitting process based on the splitting path, and using the same first splitting number to select multiple second-level deobfuscation keys as a set of keys to be merged; performing a first merging process on all second-level deobfuscation keys in each set of keys to be merged to obtain a first-level merging key corresponding to each set of keys to be merged; performing a second deobfuscation process on each first-level merging key using a second deobfuscation algorithm to obtain a first-level deobfuscation key corresponding to each first-level merging key; and performing a second merging process on all first-level deobfuscation keys to obtain the target key.

[0090] The first deobfuscation algorithm corresponds to the second obfuscation algorithm, and the second deobfuscation algorithm corresponds to the first obfuscation algorithm.

[0091] Exemplary examples, such as in some specific implementations, Figure 5 As shown, the key recovery module is divided into key acquisition, key decryption, and key reconstruction:

[0092] First, obtain four 4-byte obfuscated secondary subkeys. Then, decrypt the keys using the corresponding second decryption algorithm (i.e., the first deobfuscation algorithm). The four decrypted 4-byte secondary subkeys are then combined (merged) into two 8-byte primary subkeys. Finally, decrypt the keys using the corresponding first decryption algorithm (i.e., the second deobfuscation algorithm) and reassemble them into a 16-byte original key.

[0093] S300: The encryption / decryption module encrypts the target data using the original key to obtain encrypted data, or decrypts the encrypted data using the target key.

[0094] For example, in some specific implementations, the encryption / decryption module is divided into key acquisition and encryption / decryption algorithm invocation: first, the original key is obtained from the key recovery module, and then the encryption / decryption algorithm is invoked to encrypt and decrypt the data.

[0095] For example, refer to Figure 6 , Figure 6 This is a flowchart illustrating a data encryption / decryption transmission method applied to a server, provided in an embodiment of the present invention. The execution entity of this data encryption / decryption method can be any of the aforementioned computer devices (including a server or a terminal). (Refer to...) Figure 6 The method includes the following steps:

[0096] T100: The first encryption / decryption module at the data sending end encrypts the target data according to the original key to obtain encrypted data; the key injection module performs multi-level splitting and obfuscation processing on the original key to obtain a first number of target subkeys; and the encrypted data and target subkeys are transmitted to the data receiving end.

[0097] The multi-level splitting and obfuscation process includes a multi-stage first processing procedure. Each stage's first processing procedure includes splitting and obfuscation for each splitting result. The data basis for each stage's splitting is the obfuscation result of each obfuscation in the previous stage. The target subkey is marked with the splitting path it has experienced.

[0098] T200: The target subkey is restored using the key restoration module at the data receiving end to obtain the target key; the encrypted data is then decrypted using the second encryption / decryption module based on the target key.

[0099] The restoration process includes a multi-stage second process. Each stage of the second process includes deobfuscation and merging of the deobfuscation results of multiple deobfuscation processes belonging to the same splitting path in the current stage. The data basis for the deobfuscation process in each stage is the merged result of each merged process in the previous stage.

[0100] It should be noted that in some embodiments, the principles of multi-level splitting and obfuscation processing and restoration processing used in the data encryption and decryption transmission method are consistent with the principles in the data encryption and decryption method, and will not be repeated here.

[0101] For example, in some specific implementations, the key injection module and the key recovery module can be set at both ends of the data transmission (data sending end and data receiving end), while the encryption and decryption module can be set at both ends. During the data transmission process, only the encrypted data and the split subkey are transmitted to meet the data encryption and decryption requirements and ensure the data confidentiality and security during data transmission.

[0102] For example, a data transmission encryption and decryption process is implemented as follows: the data sending end encrypts the transmitted data using the original key through the encryption and decryption module to obtain encrypted data; and the data sending end obfuscates the original key through the key injection module to obtain the corresponding subkey; then the encrypted data and the subkey are transmitted to the data receiving end, and the data receiving end restores the subkey to obtain the original key through the key restoration module; finally, the data receiving end decrypts the encrypted data according to the restored original key through the encryption and decryption module to obtain the transmitted data.

[0103] To explain in detail the principle of the technical solution of the present invention, the overall process of the present invention will be described below with reference to some specific embodiments. It is easy to understand that the following is an explanation of the technical principle of the present invention and should not be regarded as a limitation of the present invention.

[0104] First, it's important to note that using hardware security chips is costly. Therefore, encryption / decryption components are developed to replace them for encrypting important information. These in-vehicle encryption / decryption components can de-identify sensitive data, converting it into ciphertext for storage and transmission, thereby reducing the risk of data leakage and significantly improving data security.

[0105] However, during the development of encryption / decryption components, symmetric key algorithms are used to encrypt and decrypt important information before storage and transmission. If an attacker obtains the key, the security of the data during transmission and storage cannot be guaranteed. Transmitting and storing data without using effective encryption / decryption components is not permitted, as it compromises the confidentiality, integrity, and authenticity of the vehicle's data and increases the difficulty for attackers to obtain sensitive data.

[0106] Therefore, embodiments of the present invention provide a method for developing encryption and decryption components for vehicles. This method can be applied to data encryption and decryption and data encryption and decryption transmission scenarios, specifically, as follows: Figure 7 As shown, a method for developing encryption / decryption components for vehicles is as follows:

[0107] The development method for the vehicle's encryption / decryption components includes three modules: a key injection module, a key restoration module, and an encryption / decryption module. First, the key injection module injects the obfuscated key into the key restoration module. Then, the original key used for encryption is successfully invoked through the key restoration module's interface. Finally, the encryption / decryption module applies the original key and encryption / decryption algorithms to encrypt and decrypt sensitive data.

[0108] The specific process is as follows:

[0109] 1. The key injection module is divided into key obfuscation and key injection:

[0110] ① In the key obfuscation process, the key is split into two equal-length primary subkeys. The two primary subkeys are then obfuscated using a first-type key obfuscation algorithm. These obfuscated primary subkeys are then further split into equal-length secondary subkeys, which are obfuscated using a second-type key obfuscation algorithm, resulting in four obfuscated subkeys. For example, to obfuscate a 16-byte key, it is first split into two 8-byte primary subkeys, which are then obfuscated using a specific obfuscation algorithm, resulting in two obfuscated 8-byte primary subkeys. These two 8-byte primary subkeys are then split into four 4-byte secondary subkeys, which are obfuscated using a different key obfuscation algorithm, resulting in four obfuscated 4-byte subkeys.

[0111] ② During the key injection process, the obfuscated key is injected into the specified location in the key restoration module through the program of the key injection module.

[0112] 2. The key recovery module is divided into key acquisition, key decryption, and key reconstruction:

[0113] First, obtain four 4-byte obfuscated secondary subkeys. Then, decrypt the keys using the corresponding second decryption algorithm (deobfuscation algorithm). The four 4-byte secondary subkeys are then combined into two 8-byte primary subkeys. Finally, decrypt the primary key using the corresponding first decryption algorithm (deobfuscation algorithm) and reassemble it into a 16-byte original key.

[0114] 3. The encryption / decryption module is divided into key acquisition and encryption / decryption algorithm invocation:

[0115] First, the original key is obtained from the key recovery module, and then the encryption / decryption algorithm is called to encrypt and decrypt the data.

[0116] Specifically, the key injection module and key recovery module can be set at both ends of the data transmission (data sending end and data receiving end), while the encryption and decryption module can be set at both ends. During the data transmission process, only encrypted data (ciphertext data) and the split subkeys are transmitted to meet the data encryption and decryption requirements and ensure data confidentiality and security during data transmission.

[0117] For example, a data transmission encryption and decryption process is implemented as follows: The data sending end encrypts the transmitted data (plaintext data) using the original key through the encryption and decryption module to obtain encrypted data (ciphertext data). Furthermore, the data sending end obfuscates the original key through the key injection module to obtain a corresponding subkey. Then, the encrypted data and the subkey are transmitted to the data receiving end. The data receiving end then restores the subkey to obtain the original key through the key restoration module. Finally, the data receiving end decrypts the encrypted data using the restored original key through the encryption and decryption module to obtain the transmitted data.

[0118] In summary, the technical solution of this invention uses a symmetric key algorithm to encrypt and decrypt sensitive data, which is fast. Furthermore, the embodiments of this invention use obfuscation technology to improve the security of the key and prevent it from being directly used by attackers after being tampered with, thus preventing data leakage. Specifically, after the key is obfuscated, when using the key for encryption and decryption, the key needs to be decrypted and reassembled, which is equivalent to verifying the identity of the other party and ensuring the security of the data.

[0119] On the other hand, such as Figure 8 As shown, this embodiment of the invention provides a data encryption / decryption device 800, which may include:

[0120] The first module 801 is used to perform multi-level splitting and obfuscation processing on the original key through the key injection module to obtain a first number of target sub-keys; and to transmit the target sub-keys to the key restoration module.

[0121] The multi-level splitting and obfuscation process includes a multi-stage first processing procedure. Each stage's first processing procedure includes splitting and obfuscation for each splitting result. The data basis for each stage's splitting is the obfuscation result of each obfuscation in the previous stage. The target subkey is marked with the splitting path it has experienced.

[0122] The second module 802 is used to restore the target subkey through the key restoration module to obtain the target key;

[0123] The restoration process includes a multi-stage second process. Each stage of the second process includes deobfuscation and merging of the deobfuscation results of multiple deobfuscation processes belonging to the same splitting path in the current stage. The data basis for the deobfuscation process in each stage is the merging result of each merging process in the previous stage.

[0124] The third module 803 is used to encrypt the target data according to the original key through the encryption / decryption module to obtain encrypted data, or to decrypt the encrypted data according to the target key.

[0125] On the other hand, such as Figure 9 As shown, this embodiment of the invention provides a data encryption / decryption transmission device 900, which may include:

[0126] The fourth module 901 is used to encrypt the target data using the first encryption / decryption module based on the original key at the data sending end to obtain encrypted data; to perform multi-level splitting and obfuscation processing on the original key using the key injection module to obtain a first number of target subkeys; and to transmit the encrypted data and target subkeys to the data receiving end.

[0127] The multi-level splitting and obfuscation process includes a multi-stage first processing procedure. Each stage's first processing procedure includes splitting and obfuscation for each splitting result. The data basis for each stage's splitting is the obfuscation result of each obfuscation in the previous stage. The target subkey is marked with the splitting path it has experienced.

[0128] The fifth module 902 is used to restore the target subkey using the key restoration module at the data receiving end to obtain the target key; and to decrypt the encrypted data using the second encryption / decryption module based on the target key.

[0129] The restoration process includes a multi-stage second process. Each stage of the second process includes deobfuscation and merging of the deobfuscation results of multiple deobfuscation processes belonging to the same splitting path in the current stage. The data basis for the deobfuscation process in each stage is the merged result of each merged process in the previous stage.

[0130] The content of the method embodiments of the present invention is applicable to the device embodiments. The specific functions implemented by the device embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above methods.

[0131] On the other hand, embodiments of the present invention also provide an electronic device, which includes a memory and a processor. The memory stores a computer program, and the processor executes the computer program to implement the above-described data encryption and decryption method. This electronic device can be any smart terminal, including tablet computers, in-vehicle computers, etc.

[0132] It is understood that the content of the above method embodiments is applicable to this device embodiment. The specific functions implemented by this device embodiment are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0133] like Figure 10 As shown, Figure 10 The hardware structure of an electronic device 1000 according to another embodiment is illustrated. The electronic device 1000 includes:

[0134] The processor 1001 can be implemented using a general-purpose CPU (Central Processing Unit), microprocessor, application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of the present invention.

[0135] The memory 1002 can be implemented as a read-only memory (ROM), static storage device, dynamic storage device, or random access memory (RAM). The memory 1002 can store the operating system and other application programs. When the technical solutions provided in the embodiments of this specification are implemented through software or firmware, the relevant program code is stored in the memory 1002 and is called and executed by the processor 1001 to execute the network node population optimization method of the embodiments of this invention.

[0136] Input / output interface 1003 is used to implement information input and output;

[0137] The communication interface 1004 is used to enable communication and interaction between this device and other devices. Communication can be achieved through wired means (such as USB, network cable, etc.) or wireless means (such as mobile network, WIFI, Bluetooth, etc.).

[0138] Bus 1005 transmits information between various components of the device (e.g., processor 1001, memory 1002, input / output interface 1003, and communication interface 1004);

[0139] The processor 1001, memory 1002, input / output interface 1003 and communication interface 1004 are connected to each other within the device via bus 1005.

[0140] The electronic device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs.

[0141] The content of the method embodiments of the present invention is applicable to the embodiments of the present electronic device. The specific functions implemented by the embodiments of the present electronic device are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above methods.

[0142] Another aspect of this invention provides a computer-readable storage medium storing a program that is executed by a processor to implement the aforementioned method.

[0143] It should be noted that the computer-readable medium shown in the embodiments of the present invention can be a computer-readable signal medium or a computer-readable storage medium, or any combination thereof. A computer-readable storage medium can be, for example,—but not limited to—an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples of a computer-readable storage medium may include, but are not limited to: an electrical connection having one or more wires, a portable computer disk, a hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM), flash memory, optical fiber, portable compact disc read-only memory (CD to ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof. In the present invention, a computer-readable storage medium can be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, apparatus, or device. In the present invention, a computer-readable signal medium can include a data signal propagated in baseband or as part of a carrier wave, wherein computer-readable program code is carried. Such transmitted data signals can take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. The computer-readable signal medium can also be any computer-readable medium other than a computer-readable storage medium, which can send, propagate, or transmit a program for use by or in connection with an instruction execution system, apparatus, or device. The program code contained on the computer-readable medium can be transmitted using any suitable medium, including but not limited to wireless, wired, etc., or any suitable combination thereof.

[0144] The content of the method embodiments of the present invention is applicable to the computer-readable storage medium embodiments. The specific functions implemented by the computer-readable storage medium embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above methods.

[0145] This invention also discloses a computer program product or computer program, which includes computer instructions stored in a computer-readable storage medium. A processor of a computer device can read the computer instructions from the computer-readable storage medium and execute the computer instructions, causing the computer device to perform the aforementioned method.

[0146] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of the present invention. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions indicated in the blocks may occur in a different order than those indicated in the drawings. For example, two consecutively indicated blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in a block diagram or flowchart, and combinations of blocks in a block diagram or flowchart, may be implemented using a dedicated hardware-based system that performs the specified function or operation, or using a combination of dedicated hardware and computer instructions.

[0147] It should be noted that although several modules for the device used to perform actions have been mentioned in the detailed description above, this division is not mandatory. In fact, according to embodiments of the present invention, the features and functions of two or more modules or units described above can be embodied in one module or unit. Conversely, the features and functions of one module or unit described above can be further divided and embodied by multiple modules or units.

[0148] Through the above description of the embodiments, those skilled in the art will readily understand that the exemplary embodiments described herein can be implemented by software or by combining software with necessary hardware. Therefore, the technical solutions according to the embodiments of the present invention can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (such as a CD-ROM, USB flash drive, portable hard drive, etc.) or on a network, including several instructions to cause a computing device (such as a personal computer, server, touch terminal, or network device, etc.) to execute the method according to the embodiments of the present invention.

[0149] In some alternative embodiments, the functions / operations mentioned in the block diagrams may not occur in the order shown in the operation diagrams. For example, depending on the functions / operations involved, two consecutively shown blocks may actually be executed substantially simultaneously, or the blocks may sometimes be executed in reverse order. Furthermore, the embodiments presented and described in the flowcharts of this invention are provided by way of example to provide a more comprehensive understanding of the technology. The disclosed methods are not limited to the operations and logic flows presented herein. Alternative embodiments are contemplated in which the order of various operations is changed and sub-operations described as part of a larger operation are executed independently.

[0150] Furthermore, although the invention has been described in the context of functional modules, it should be understood that, unless otherwise stated, one or more of the functions and / or features may be integrated into a single physical device and / or software module, or one or more functions and / or features may be implemented in a separate physical device or software module. It is also understood that a detailed discussion of the actual implementation of each module is unnecessary for understanding the invention. Rather, given the properties, functions, and internal relationships of the various functional modules in the apparatus disclosed herein, the actual implementation of the module will be understood within the scope of conventional skill of an engineer. Therefore, those skilled in the art can implement the invention as set forth in the claims using ordinary techniques without excessive experimentation. It is also understood that the specific concepts disclosed are merely illustrative and not intended to limit the scope of the invention, which is determined by the full scope of the appended claims and their equivalents.

[0151] If a function is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this invention, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of the various embodiments of this invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0152] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as a sequenced list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by, or in conjunction with, an instruction execution means, apparatus, or device (such as a computer-based device, a processor-including device, or other means that can fetch and execute instructions from, or in conjunction with, an instruction execution means, apparatus, or device). For the purposes of this specification, "computer-readable medium" can be any means that can contain, store, communicate, propagate, or transmit programs for use by, or in conjunction with, an instruction execution means, apparatus, or device.

[0153] More specific examples of computer-readable media (a non-exhaustive list) include: electrical connections (electronic devices) having one or more wires, portable computer disk drives (magnetic devices), random access memory (RAM), read-only memory (ROM), erasable and editable read-only memory (EPROM or flash memory), fiber optic devices, and portable optical disc read-only memory (CDROM). Furthermore, computer-readable media can even be paper or other suitable media on which programs can be printed, because programs can be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, interpreting, or otherwise processing as necessary, and then stored in computer memory.

[0154] It should be understood that various parts of the present invention can be implemented in hardware, software, firmware, or a combination thereof. In the above embodiments, multiple steps or methods can be implemented in software or firmware stored in memory and executed by a suitable instruction execution device. For example, if implemented in hardware, as in another embodiment, it can be implemented using any one or a combination of the following techniques known in the art: discrete logic circuits having logic gates for implementing logical functions on data signals, application-specific integrated circuits (ASICs) having suitable combinational logic gates, programmable gate arrays (PGAs), field-programmable gate arrays (FPGAs), etc.

[0155] In the description of this specification, references to terms such as "one embodiment," "some embodiments," "example," "specific example," or "some examples," etc., indicate that a specific feature, structure, material, or characteristic described in connection with that embodiment or example is included in at least one embodiment or example of the invention. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples.

[0156] Although embodiments of the invention have been shown and described, those skilled in the art will understand that various changes, modifications, substitutions and alterations can be made to these embodiments without departing from the principles and spirit of the invention, the scope of which is defined by the claims and their equivalents.

[0157] The above is a detailed description of the preferred embodiments of the present invention. However, the present invention is not limited to the embodiments. Those skilled in the art can make various equivalent modifications or substitutions without departing from the spirit of the present invention. All such equivalent modifications or substitutions are included within the scope defined by the claims of the present invention.

Claims

1. A data encryption / decryption method, characterized in that, Includes the following steps: The original key is split and obfuscated through a key injection module to obtain a first number of target subkeys; the target subkeys are then transmitted to the key restoration module. The multi-level splitting and obfuscation process includes a multi-stage first processing procedure. Each stage of the first processing procedure includes splitting and obfuscation for each splitting result of the splitting process. The data basis of each stage of the splitting process is the obfuscation result of each obfuscation process in the previous stage. The target subkey is marked with the splitting path of the splitting processes it has experienced. The splitting process includes first-level splitting and second-level splitting. The splitting path includes the first splitting number of the first-level splitting process. The target key is obtained by restoring the target subkey through the key restoration module. The restoration process includes a multi-stage second processing procedure. Each stage of the second processing procedure includes deobfuscation and merging of the deobfuscation results of multiple deobfuscation processes belonging to the same splitting path in the current stage. The data basis of the deobfuscation process in each stage is the merging result of each merging process in the previous stage. The restoration process of the target subkey to obtain the target key includes the following steps: Each target subkey is de-obfuscated using a first de-obfuscation algorithm to obtain a second-level de-obfuscation key corresponding to each target subkey. Based on the splitting path, the first splitting number of each target subkey in the first-level splitting process is determined, and the corresponding multiple second-level deobfuscation keys are used as a set of keys to be merged according to the same first splitting number. A first merging process is performed on all the secondary deobfuscated keys in each set of keys to be merged to obtain the primary merged key corresponding to each set of keys to be merged. Each of the first-level merged keys is subjected to a second deobfuscation process using a second deobfuscation algorithm to obtain a first-level deobfuscation key corresponding to each of the first-level merged keys. A second merging process is performed on all the first-level deobfuscation keys to obtain the target key; The encryption / decryption module encrypts the target data using the original key to obtain encrypted data, or decrypts the encrypted data using the target key.

2. The data encryption / decryption method according to claim 1, characterized in that, The process of performing multi-level splitting and obfuscation on the original key to obtain a first number of target subkeys includes the following steps: The original key is split into two parts to obtain a second number of first-level subkeys. Each of the first-level subkeys is sequentially obfuscated using the first key obfuscation algorithm to obtain the first-level obfuscated key corresponding to each of the first-level subkeys. Each of the first-level obfuscation keys is sequentially subjected to second-level splitting to obtain the first number of second-level sub-keys; The second key obfuscation algorithm is used to sequentially perform second obfuscation processing on each of the second-level subkeys to obtain the second-level obfuscated key corresponding to each of the second-level subkeys; the splitting path of each of the second-level obfuscated keys is marked based on the first-level splitting processing and the second-level splitting processing to obtain the target subkey.

3. The data encryption / decryption method according to claim 2, characterized in that, The step of performing a first-level splitting process on the original key to obtain a second number of first-level subkeys includes the following steps: The original key is divided into a second number of first-level subkeys of equal byte length.

4. The data encryption / decryption method according to claim 2, characterized in that, The step of marking the splitting path of each secondary obfuscation key based on the first-level splitting process and the second-level splitting process includes the following steps: Obtain the first split number where the splitting result of the first-level splitting process is located and the second split number where the splitting result of the second-level splitting process is located; The splitting path of the secondary obfuscation key is formed based on the first splitting number and the second splitting number.

5. A data encryption / decryption device, characterized in that, include: The first module is used to perform multi-level splitting and obfuscation processing on the original key through the key injection module to obtain a first number of target subkeys; The target subkey is transmitted to the key recovery module; The multi-level splitting and obfuscation process includes a multi-stage first processing procedure. Each stage of the first processing procedure includes splitting and obfuscation for each splitting result of the splitting process. The data basis of each stage of the splitting process is the obfuscation result of each obfuscation process in the previous stage. The target subkey is marked with the splitting path of the splitting processes it has experienced. The splitting process includes first-level splitting and second-level splitting. The splitting path includes the first splitting number of the first-level splitting process. The second module is used to restore the target subkey through the key restoration module to obtain the target key; The restoration process includes a multi-stage second processing procedure. Each stage of the second processing procedure includes deobfuscation and merging of the deobfuscation results of multiple deobfuscation processes belonging to the same splitting path in the current stage. The data basis of the deobfuscation process in each stage is the merging result of each merging process in the previous stage. The restoration process of the target subkey to obtain the target key includes the following steps: Each target subkey is de-obfuscated using a first de-obfuscation algorithm to obtain a second-level de-obfuscation key corresponding to each target subkey. Based on the splitting path, the first splitting number of each target subkey in the first-level splitting process is determined, and the corresponding multiple second-level deobfuscation keys are used as a set of keys to be merged according to the same first splitting number. A first merging process is performed on all the secondary deobfuscated keys in each set of keys to be merged to obtain the primary merged key corresponding to each set of keys to be merged. Each of the first-level merged keys is subjected to a second deobfuscation process using a second deobfuscation algorithm to obtain a first-level deobfuscation key corresponding to each of the first-level merged keys. A second merging process is performed on all the first-level deobfuscation keys to obtain the target key; The third module is used to encrypt the target data according to the original key through the encryption / decryption module to obtain encrypted data, or to decrypt the encrypted data according to the target key.

6. A data encryption and decryption transmission method, characterized in that, Includes the following steps: The first encryption / decryption module at the data sending end encrypts the target data using the original key to obtain encrypted data. The original key is split and obfuscated at multiple levels using a key injection module to obtain a first number of target subkeys; the encrypted data and the target subkeys are then transmitted to the data receiving end. The multi-level splitting and obfuscation process includes a multi-stage first processing procedure. Each stage of the first processing procedure includes splitting and obfuscation for each splitting result of the splitting process. The data basis of each stage of the splitting process is the obfuscation result of each obfuscation process in the previous stage. The target subkey is marked with the splitting path of the splitting processes it has experienced. The splitting process includes first-level splitting and second-level splitting. The splitting path includes the first splitting number of the first-level splitting process. The target subkey is restored using the key restoration module at the data receiving end to obtain the target key; the encrypted data is then decrypted using the second encryption / decryption module based on the target key. The restoration process includes a multi-stage second processing procedure. Each stage of the second processing procedure includes deobfuscation and merging of the deobfuscation results of multiple deobfuscation processes belonging to the same splitting path in the current stage. The data basis of the deobfuscation process in each stage is the merging result of each merging process in the previous stage. The restoration process of the target subkey to obtain the target key includes the following steps: Each target subkey is de-obfuscated using a first de-obfuscation algorithm to obtain a second-level de-obfuscation key corresponding to each target subkey. Based on the splitting path, the first splitting number of each target subkey in the first-level splitting process is determined, and the corresponding multiple second-level deobfuscation keys are used as a set of keys to be merged according to the same first splitting number. A first merging process is performed on all the secondary deobfuscated keys in each set of keys to be merged to obtain the primary merged key corresponding to each set of keys to be merged. Each of the first-level merged keys is subjected to a second deobfuscation process using a second deobfuscation algorithm to obtain a first-level deobfuscation key corresponding to each of the first-level merged keys. A second merging process is performed on all the first-level deobfuscation keys to obtain the target key.

7. A data encryption / decryption transmission device, characterized in that, include: The fourth module is used to encrypt the target data using the first encryption / decryption module based on the original key at the data sending end, thereby obtaining encrypted data; The original key is split and obfuscated at multiple levels using a key injection module to obtain a first number of target subkeys; the encrypted data and the target subkeys are then transmitted to the data receiving end. The multi-level splitting and obfuscation process includes a multi-stage first processing procedure. Each stage of the first processing procedure includes splitting and obfuscation for each splitting result of the splitting process. The data basis of each stage of the splitting process is the obfuscation result of each obfuscation process in the previous stage. The target subkey is marked with the splitting path of the splitting processes it has experienced. The splitting process includes first-level splitting and second-level splitting. The splitting path includes the first splitting number of the first-level splitting process. The fifth module is used to restore the target subkey using the key restoration module at the data receiving end to obtain the target key; and to decrypt the encrypted data using the second encryption / decryption module based on the target key. The restoration process includes a multi-stage second processing procedure. Each stage of the second processing procedure includes deobfuscation and merging of the deobfuscation results of multiple deobfuscation processes belonging to the same splitting path in the current stage. The data basis of the deobfuscation process in each stage is the merging result of each merging process in the previous stage. The restoration process of the target subkey to obtain the target key includes the following steps: Each target subkey is de-obfuscated using a first de-obfuscation algorithm to obtain a second-level de-obfuscation key corresponding to each target subkey. Based on the splitting path, the first splitting number of each target subkey in the first-level splitting process is determined, and the corresponding multiple second-level deobfuscation keys are used as a set of keys to be merged according to the same first splitting number. A first merging process is performed on all the secondary deobfuscated keys in each set of keys to be merged to obtain the primary merged key corresponding to each set of keys to be merged. Each of the first-level merged keys is subjected to a second deobfuscation process using a second deobfuscation algorithm to obtain a first-level deobfuscation key corresponding to each of the first-level merged keys. A second merging process is performed on all the first-level deobfuscation keys to obtain the target key.

8. An electronic device, characterized in that, Including the processor and memory; The memory is used to store programs; The processor executes the program to implement the method as described in any one of claims 1 to 4 or 6.

9. A vehicle, characterized in that, The vehicle includes the data encryption / decryption device as described in claim 5, the data encryption / decryption transmission device as described in claim 7, or the electronic device as described in claim 8.

Images