A cryptography-based end-to-end financial data encryption method and system

Abstract

The present invention discloses an end-to-end financial data encryption method and system based on cryptography, and the method includes: obtaining data attributes of financial data, determining relevant business attributes of financial data according to the data attributes, and determining the encryption level for financial data according to the relevant business attributes; constructing cryptographic tasks based on the encryption level, and scheduling multiple encryption modules to generate multiple groups of encryption keys according to the cryptographic tasks; performing matrix processing on each group of encryption keys, obtaining a password matrix and setting the time sequence change state of each group of encryption keys in the password matrix; detecting the end-to-end device access time point, determining the current encryption key according to the device access time point and the time sequence change state of each group of encryption keys in the password matrix, and encrypting and transmitting financial data through the current encryption key. Different encryption keys can be used for encryption according to the device access time point, which improves the encryption stability and encryption reliability, and greatly reduces the possibility of the key being cracked.

Description

Technical Field

[0001] The present invention relates to the field of data encryption technology, and in particular to an end-to-end financial data encryption method and system based on cryptography. Background Art

[0002] In addition to the general characteristics of data, financial data also has some characteristics of its own: extensiveness, comprehensiveness, reliability, and continuity; the particularity of financial data makes the processing of financial data also have its own special features and special requirements. Its input audit is stricter, the storage capacity is larger, the network transmission is wider, and the data maintenance is more frequent. At present, most of the financial data generated by the financial industry are important data, and the privacy involved is strong and the scope is wide. Once leaked or damaged, the loss is often huge, which will bring great risks to the security of individuals, enterprises and even the country. Therefore, it is necessary to encrypt financial data to prevent data leakage. The existing financial data encryption methods all encrypt data through fixed encryption methods, and the encryption keys are pre-set and unchanged. Once cracked, it will lead to the risk of leakage of all financial data, reducing data security and encryption reliability. Summary of the invention

[0003] In response to the above-mentioned problems, the present invention provides an end-to-end financial data encryption method and system based on cryptography to solve the problem that the encryption keys mentioned in the background technology are pre-set and unchanging, and once cracked, it will lead to the risk of leakage of all financial data, reducing data security and encryption reliability.

[0004] A cryptography-based end-to-end financial data encryption method comprises the following steps:

[0005] Obtaining data attributes of financial data, determining relevant business attributes of the financial data based on the data attributes, and determining an encryption level for the financial data based on the relevant business attributes;

[0006] Construct cryptographic tasks based on encryption levels, and schedule multiple encryption modules to generate multiple sets of encryption keys according to cryptographic tasks;

[0007] Matrix processing is performed on each group of encryption keys, a password matrix is ​​obtained, and a time sequence change state of each group of encryption keys in the password matrix is ​​set;

[0008] Detect the end-to-end device access time point, determine the current encryption key according to the device access time point and the timing change status of each group of encryption keys in the password matrix, and encrypt and transmit the financial data through the current encryption key.

[0009] Preferably, the acquiring of data attributes of the financial data, determining relevant business attributes of the financial data according to the data attributes, and determining the encryption level for the financial data according to the relevant business attributes includes:

[0010] Receive financial data uploaded by the data sending device, parse the data format and data type of the financial data, and determine the data attributes according to the data format and data type;

[0011] Determine the content information according to the data attributes, determine the financial transaction business based on the content information, and obtain the business field of the financial transaction business;

[0012] Determine the relevant business attributes of financial data according to the business field, and determine the data sensitivity and data confidentiality factors of financial data based on the relevant business attributes;

[0013] The encryption level of financial data is assessed based on data sensitivity and data confidentiality factors based on preset confidentiality level assessment rules.

[0014] Preferably, constructing cryptographic tasks based on encryption levels and scheduling multiple encryption modules to generate multiple sets of encryption keys according to the cryptographic tasks includes:

[0015] Determine encryption form requirement parameters and encryption complexity requirement parameters according to the encryption level, and construct cryptographic tasks based on the encryption form requirement parameters and encryption complexity requirement parameters;

[0016] Determine an encryption scheme according to the cryptographic task, generate a key space according to the encryption scheme, and randomly select a set of initial keys in the key space;

[0017] Dispatching a plurality of encryption modules from an encryption program, inputting an initial key into each encryption module to obtain a plurality of sets of first encryption keys;

[0018] The key strength, length and uniformity of each group of first encryption keys of each encryption module are checked, and the second encryption key is selected as the final encryption key of each encryption module based on the check results.

[0019] Preferably, the matrix processing of each group of encryption keys, obtaining a password matrix and setting the time sequence change state of each group of encryption keys in the password matrix includes:

[0020] Create an initial matrix according to the number of encryption modules and set the row and column representative parameters of the initial matrix, and fill each group of encryption keys into the initial matrix in turn to generate a password matrix;

[0021] Obtaining encryption process parameters and encryption result parameters of each group of encryption keys, and determining the encryption degree of each group of encryption keys according to the encryption process parameters and encryption result parameters;

[0022] Determine the use priority of each group of encryption keys according to the encryption degree, and adjust the arrangement position of each group of confidential keys in the password matrix by linear interpolation method according to the average difference of each encryption key in the order of high priority-medium priority-high priority based on the use priority;

[0023] The time sequence change state of each group of encryption keys is set according to the adjusted password matrix and the preset time interval.

[0024] Preferably, the detecting of the end-to-end device access time point, determining the current encryption key according to the device access time point and the time sequence change state of each group of encryption keys in the password matrix, and encrypting and transmitting the financial data by the current encryption key includes:

[0025] Detect the communication access time point between the device and the server, and determine the current encryption key at the communication access time point according to the time sequence period of the password matrix and the time sequence change state of each group of encryption keys in the password matrix;

[0026] Obtain the encryption method of the current encryption key, determine the data encryption standard based on the encryption method, and call the encryption algorithm based on the data encryption standard;

[0027] Encrypt financial data using encryption algorithms, and package and compress the encrypted financial data;

[0028] Start a private data transmission channel between the device and the server, and transmit the packaged and compressed encrypted financial data through the private data transmission channel.

[0029] A cryptography-based end-to-end financial data encryption system, the system comprising:

[0030] A determination module, used to obtain data attributes of financial data, determine relevant business attributes of the financial data according to the data attributes, and determine the encryption level for the financial data according to the relevant business attributes;

[0031] A generation module is used to construct cryptographic tasks based on encryption levels and schedule multiple encryption modules to generate multiple sets of encryption keys according to the cryptographic tasks;

[0032] A setting module is used to perform matrix processing on each group of encryption keys, obtain a password matrix and set the time sequence change state of each group of encryption keys in the password matrix;

[0033] The encryption transmission module is used to detect the end-to-end device access time point, determine the current encryption key according to the device access time point and the time sequence change status of each group of encryption keys in the password matrix, and encrypt and transmit the financial data through the current encryption key.

[0034] Preferably, the determining module includes:

[0035] A first determination submodule is used to receive financial data uploaded by the data sending device, parse the data format and data type of the financial data, and determine the data attributes according to the data format and data type;

[0036] The second determination submodule is used to determine the content inclusion information according to the data attribute, determine the financial transaction business based on the content inclusion information, and obtain the business field of the financial transaction business;

[0037] A third determination submodule is used to determine relevant business attributes of financial data according to the business field, and determine data sensitivity and data confidentiality factors of the financial data based on the relevant business attributes;

[0038] The evaluation submodule is used to evaluate the encryption level of financial data based on the preset confidentiality level evaluation rules according to the data sensitivity and data confidentiality factors.

[0039] Preferably, the generating module comprises:

[0040] A construction submodule is used to determine encryption form requirement parameters and encryption complexity requirement parameters according to the encryption level, and to construct a cryptographic task based on the encryption form requirement parameters and encryption complexity requirement parameters;

[0041] The first selection submodule is used to determine an encryption scheme according to the cryptographic task, generate a key space according to the encryption scheme, and randomly select a set of initial keys in the key space;

[0042] An acquisition submodule, used for scheduling multiple encryption modules from the encryption program, inputting the initial key into each encryption module to obtain multiple groups of first encryption keys;

[0043] The second selection submodule is used to check the key strength, length and uniformity of each group of first encryption keys of each encryption module, and select the second encryption key as the final encryption key of each encryption module according to the check result.

[0044] Preferably, the setting module includes:

[0045] The filling submodule is used to create an initial matrix according to the number of encryption modules and set the row and column representative parameters of the initial matrix, and fill each group of encryption keys into the initial matrix in turn to generate a password matrix;

[0046] A fourth determination submodule, used to obtain encryption process parameters and encryption result parameters of each group of encryption keys, and determine the encryption degree of each group of encryption keys according to the encryption process parameters and encryption result parameters;

[0047] an adjustment submodule, for determining the use priority of each group of encryption keys according to the encryption degree, and adjusting the arrangement position of each group of confidential keys in the password matrix by linear interpolation method according to the average difference of each encryption key in the order of high priority-medium priority-high priority based on the use priority;

[0048] The setting submodule is used to set the time sequence change state of each group of encryption keys according to the adjusted password matrix and the preset time interval.

[0049] Preferably, the encryption transmission module includes:

[0050] The fifth determination submodule is used to detect the communication access time point between the device end and the server end, and determine the current encryption key at the communication access time point according to the timing cycle of the password matrix and the timing change state of each group of encryption keys in the password matrix;

[0051] The retrieval submodule is used to obtain the encryption method of the current encryption key, determine the data encryption standard according to the encryption method, and retrieve the encryption algorithm according to the data encryption standard;

[0052] The encryption and compression submodule is used to encrypt the financial data using an encryption algorithm, and to package and compress the encrypted financial data;

[0053] The transmission submodule is used to start the private data transmission channel between the device and the server, and transmit the packaged and compressed encrypted financial data through the private data transmission channel.

[0054] Other features and advantages of the present invention will be described in the following description, and partly become apparent from the description, or understood by practicing the present invention. The purpose and other advantages of the present invention can be realized and obtained by the structures particularly pointed out in the written description and the accompanying drawings.

[0055] The technical solution of the present invention is further described in detail below through the accompanying drawings and embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0056] The accompanying drawings are used to provide further understanding of the present invention and constitute a part of the specification. They are used to explain the present invention together with the embodiments of the present invention and do not constitute a limitation of the present invention.

[0057] Figure 1 A workflow diagram of an end-to-end financial data encryption method based on cryptography provided by the present invention;

[0058] Figure 2 Another working flow chart of an end-to-end financial data encryption method based on cryptography provided by the present invention;

[0059] Figure 3 A schematic diagram of the structure of an end-to-end financial data encryption system based on cryptography provided by the present invention;

[0060] Figure 4 This is a schematic diagram of the structure of a generation module in a cryptography-based end-to-end financial data encryption system provided by the present invention. DETAILED DESCRIPTION

[0061] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present disclosure. Instead, they are merely examples of devices and methods consistent with some aspects of the present disclosure as detailed in the appended claims.

[0062] In addition to the general characteristics of data, financial data also has some characteristics of its own: extensiveness, comprehensiveness, reliability, and continuity; the particularity of financial data makes the processing of financial data also have its own special features and special requirements. Its input audit is stricter, the storage capacity is larger, the network transmission is wider, and the data maintenance is more frequent. At present, most of the financial data generated by the financial industry are important data, and the privacy involved is strong and the scope is wide. Once leaked or damaged, the loss is often huge, which will bring great risks to the security of individuals, enterprises and even the country. Therefore, it is necessary to perform necessary encryption work on financial data to prevent data leakage. The existing financial data encryption methods all encrypt data through fixed encryption methods, and the encryption keys are pre-set and unchanged. Once cracked, it will lead to the risk of leakage of all financial data, reducing data security and encryption reliability. In order to solve the above problems, this embodiment discloses an end-to-end financial data encryption method based on dynamic keys.

[0063] A cryptography-based end-to-end financial data encryption method, such as Figure 1 As shown, the following steps are included:

[0064] Step S101, obtaining data attributes of financial data, determining relevant business attributes of the financial data according to the data attributes, and determining the encryption level for the financial data according to the relevant business attributes;

[0065] Step S102: construct a cryptographic task based on the encryption level, and schedule multiple encryption modules to generate multiple sets of encryption keys according to the cryptographic task;

[0066] Step S103, performing matrix processing on each group of encryption keys, obtaining a password matrix and setting the time sequence change state of each group of encryption keys in the password matrix;

[0067] Step S104: Detect the end-to-end device access time point, determine the current encryption key according to the device access time point and the time sequence change state of each group of encryption keys in the password matrix, and encrypt and transmit the financial data using the current encryption key.

[0068] The working principle of the above technical solution is: obtain the data attributes of financial data, determine the relevant business attributes of the financial data based on the data attributes, and determine the encryption level for the financial data based on the relevant business attributes; construct cryptographic tasks based on the encryption level, and schedule multiple encryption modules to generate multiple groups of encryption keys according to the cryptographic tasks; perform matrix processing on each group of encryption keys, obtain the password matrix and set the time-series change status of each group of encryption keys in the password matrix; detect the end-to-end device access time point, determine the current encryption key according to the device access time point and the time-series change status of each group of encryption keys in the password matrix, and encrypt and transmit the financial data through the current encryption key.

[0069] The beneficial effects of the above technical solution are: by determining the data encryption level and then scheduling the corresponding encryption module to generate multiple groups of encryption keys to generate dynamic keys, the encryption key corresponding to the time point is selected according to the time point when the device end accesses the server end for encrypted transmission. Different encryption keys can be used for encryption according to the different time points of device access, which improves the encryption stability and encryption reliability, greatly reduces the possibility of key cracking, avoids the problem of economic losses caused by data leakage, improves data security and practicality, and solves the problem that the encryption keys mentioned in the prior art are pre-set and unchanged. Once cracked, it will cause the risk of leakage of all financial data, reducing data security and encryption reliability.

[0070] In this embodiment, in the process of determining the current encryption key according to the device access time point and the time sequence change state of each group of encryption keys in the password matrix and encrypting and transmitting the financial data by the current encryption key, it also includes:

[0071] Detect the facial expression data of the user on the device, and extract the user's potential emotion activation features based on the facial expression data according to a preset feature extraction algorithm;

[0072] Acquire brain interaction features among potential emotion activation features that have an interactive relationship, and determine a patience consumption matrix for each potential emotion activation feature according to the brain interaction features;

[0073] Determine the hierarchical classification behavior rules of users under each potential emotion activation feature according to the patience consumption matrix of each potential emotion activation feature;

[0074] Determine the encryption waiting time limit parameter of the user according to the hierarchical, graded and classified behavior rules, and select multiple first encryption keys that meet the encryption time requirement according to the encryption waiting time limit parameter;

[0075] Acquire the signal timing logic of each first encryption key, and determine the identification quantitative factor of each first encryption key according to the signal timing logic;

[0076] A random walk path is set between the plurality of first encryption keys according to the identification quantitative factor, and a plurality of dynamic encryption key positioning nodes are determined according to the random walk path;

[0077] Determine the key selection time point based on the user's expression data collection and analysis cycle and the device access time point;

[0078] Obtain a target encryption key location node corresponding to the key selection time point, and obtain a second confidential key distributed on the target encryption key location node;

[0079] The second encryption key is used as the current encryption key and the financial data is encrypted for transmission.

[0080] The beneficial effect of the above technical solution is: by analyzing the user's facial expression data to determine the user's potential emotions, the urgency of the user's data demand can be intuitively assessed, and then an encryption method within the user's patience range can be selected to encrypt the data, which not only improves the user experience but also ensures the stable encryption of the data and improves practicality.

[0081] In one embodiment, Figure 2 As shown, the step of acquiring data attributes of financial data, determining relevant business attributes of the financial data according to the data attributes, and determining the encryption level for the financial data according to the relevant business attributes includes:

[0082] Step S201, receiving financial data uploaded by the data sending device, parsing the data format and data type of the financial data, and determining data attributes according to the data format and data type;

[0083] Step S202: determine the content inclusion information according to the data attribute, determine the financial transaction business based on the content inclusion information, and obtain the business field of the financial transaction business;

[0084] Step S203: determining relevant business attributes of the financial data according to the business field, and determining data sensitivity and data confidentiality factors of the financial data based on the relevant business attributes;

[0085] Step S204: Evaluate the encryption level of the financial data based on the preset confidentiality level evaluation rules according to the data sensitivity and data confidentiality factors.

[0086] In this embodiment, the data formats include: linear data and nonlinear data, and the data types may be data report data and transaction record data, etc.;

[0087] In this embodiment, the data attributes are represented as statistical attributes of the data, including: transaction statistics, financial report statistics, etc.;

[0088] In this embodiment, the content includes information represented by content data information that may be included in financial data, for example, financial statement data may include information such as date, summary, value, etc., while transaction records may include information such as transaction date, amount, account balance, and account card number;

[0089] In this embodiment, the financial transaction business includes but is not limited to: banking business, securities business, insurance business, trust business and fund business, etc.

[0090] The beneficial effects of the above technical solution are: according to the data attributes of financial data, the business scope of financial transaction business is determined, so as to obtain data sensitivity and data confidentiality factors, determine the encryption level of financial data, and encrypt data in a targeted manner to protect data privacy and data value.

[0091] In one embodiment, the cryptographic task is constructed based on the encryption level, and multiple encryption modules are scheduled to generate multiple sets of encryption keys according to the cryptographic task, including:

[0092] Determine encryption form requirement parameters and encryption complexity requirement parameters according to the encryption level, and construct cryptographic tasks based on the encryption form requirement parameters and encryption complexity requirement parameters;

[0093] Determine an encryption scheme according to the cryptographic task, generate a key space according to the encryption scheme, and randomly select a set of initial keys in the key space;

[0094] Dispatching a plurality of encryption modules from an encryption program, inputting an initial key into each encryption module to obtain a plurality of sets of first encryption keys;

[0095] The key strength, length and uniformity of each group of first encryption keys of each encryption module are checked, and the second encryption key is selected as the final encryption key of each encryption module based on the check results.

[0096] The beneficial effects of the above technical solution are: by constructing cryptographic tasks, it can be ensured that the generated encryption keys meet the encryption requirements of financial data, further improving the encryption stability and reliability. Furthermore, by generating a key space to select the initial key, the number of initial keys generated can be maximized to ensure the privacy of the initial key. Furthermore, by performing key checks, the best key can be screened out, further ensuring encryption stability.

[0097] In one embodiment, the matrix processing of each group of encryption keys, obtaining a password matrix and setting the time sequence change state of each group of encryption keys in the password matrix includes:

[0098] Create an initial matrix according to the number of encryption modules and set the row and column representative parameters of the initial matrix, and fill each group of encryption keys into the initial matrix in turn to generate a password matrix;

[0099] Obtaining encryption process parameters and encryption result parameters of each group of encryption keys, and determining the encryption degree of each group of encryption keys according to the encryption process parameters and encryption result parameters;

[0100] Determine the use priority of each group of encryption keys according to the encryption degree, and adjust the arrangement position of each group of confidential keys in the password matrix by linear interpolation method according to the average difference of each encryption key in the order of high priority-medium priority-high priority based on the use priority;

[0101] The time sequence change state of each group of encryption keys is set according to the adjusted password matrix and the preset time interval.

[0102] In this embodiment, the row and column representative parameters are represented by the parameters represented by the matrix rows and matrix columns of the initial matrix, specifically: each row represents an encryption key, and each column represents an encryption module;

[0103] In this embodiment, the encryption process parameters are represented by encryption process description parameters of each group of encryption keys when encrypting data, and the encryption result parameters represent the data display status of each group of encryption keys after encrypting the financial data;

[0104] In this embodiment, the encryption level is represented by the privacy level of the data after each set of encryption keys encrypts the financial data;

[0105] In this embodiment, the default encryption key usage priority is medium and high. The order of setting high, medium and high is to ensure that the access time point between the terminals avoids the situation where the encryption key with medium priority happens to be used.

[0106] The beneficial effects of the above technical solution are: determining the encryption degree of each group of encryption keys according to the encryption process parameters and the encryption result parameters, determining the usage priority of each group of encryption keys, and adjusting the arrangement position of each group of confidential keys in the password matrix through linear interpolation method, so that the password is more random, and the difficulty of cracking the password is increased, thereby enhancing the protection effect and dynamic effect of the password. Furthermore, setting the time-series change state of each group of encryption keys can effectively resist password cracking tools and improve the security and reliability of the entire encryption process and encryption results.

[0107] In one embodiment, the detecting of the end-to-end device access time point, determining the current encryption key according to the device access time point and the time sequence change state of each group of encryption keys in the password matrix, and encrypting and transmitting the financial data by the current encryption key includes:

[0108] Detect the communication access time point between the device and the server, and determine the current encryption key at the communication access time point according to the time sequence period of the password matrix and the time sequence change state of each group of encryption keys in the password matrix;

[0109] Obtain the encryption method of the current encryption key, determine the data encryption standard based on the encryption method, and call the encryption algorithm based on the data encryption standard;

[0110] Encrypt financial data using encryption algorithms, and package and compress the encrypted financial data;

[0111] Start a private data transmission channel between the device and the server, and transmit the packaged and compressed encrypted financial data through the private data transmission channel.

[0112] In this embodiment, the data encryption method includes: symmetric encryption and asymmetric encryption;

[0113] In this embodiment, the data encryption standard includes: a double data encryption standard and a triple data encryption standard.

[0114] The beneficial effects of the above technical solution are: by determining the encryption method and encryption standard according to the current encryption key at the access time point, the most accurate and targeted encryption algorithm can be obtained, ensuring the security of the encryption process. Furthermore, the encrypted financial data is transmitted through a private data transmission channel, ensuring the privacy and security of data transmission.

[0115] In one embodiment, this embodiment also discloses an end-to-end financial data encryption system based on cryptography, such as Figure 3 As shown, the system includes:

[0116] The determination module 301 is used to obtain data attributes of financial data, determine relevant business attributes of the financial data according to the data attributes, and determine the encryption level for the financial data according to the relevant business attributes;

[0117] A generation module 302 is used to construct a cryptographic task based on the encryption level, and schedule multiple encryption modules to generate multiple sets of encryption keys according to the cryptographic task;

[0118] A setting module 303 is used to perform matrix processing on each group of encryption keys, obtain a password matrix and set the time sequence change state of each group of encryption keys in the password matrix;

[0119] The encryption transmission module 304 is used to detect the end-to-end device access time point, determine the current encryption key according to the device access time point and the time sequence change state of each group of encryption keys in the password matrix, and encrypt and transmit the financial data through the current encryption key.

[0120] The working principle and beneficial effects of the above technical solution have been explained in the method embodiment and will not be repeated here.

[0121] In one embodiment, the determining module includes:

[0122] A first determination submodule is used to receive financial data uploaded by the data sending device, parse the data format and data type of the financial data, and determine the data attributes according to the data format and data type;

[0123] The second determination submodule is used to determine the content inclusion information according to the data attribute, determine the financial transaction business based on the content inclusion information, and obtain the business field of the financial transaction business;

[0124] A third determination submodule is used to determine relevant business attributes of financial data according to the business field, and determine data sensitivity and data confidentiality factors of the financial data based on the relevant business attributes;

[0125] The evaluation submodule is used to evaluate the encryption level of financial data based on the preset confidentiality level evaluation rules according to the data sensitivity and data confidentiality factors.

[0126] In one embodiment, Figure 4 As shown, the generating module 302 includes:

[0127] A construction submodule 3021 is used to determine encryption form requirement parameters and encryption complexity requirement parameters according to the encryption level, and to construct a cryptographic task based on the encryption form requirement parameters and encryption complexity requirement parameters;

[0128] The first selection submodule 3022 is used to determine an encryption scheme according to the cryptography task, generate a key space according to the encryption scheme, and randomly select a set of initial keys in the key space;

[0129] The acquisition submodule 3023 is used to schedule multiple encryption modules from the encryption program, input the initial key into each encryption module to obtain multiple groups of first encryption keys;

[0130] The second selection submodule 3024 is used to check the key strength, length and uniformity of each group of first encryption keys of each encryption module, and select the second encryption key as the final encryption key of each encryption module according to the check result.

[0131] In one embodiment, the setting module includes:

[0132] The filling submodule is used to create an initial matrix according to the number of encryption modules and set the row and column representative parameters of the initial matrix, and fill each group of encryption keys into the initial matrix in turn to generate a password matrix;

[0133] A fourth determination submodule, used to obtain encryption process parameters and encryption result parameters of each group of encryption keys, and determine the encryption degree of each group of encryption keys according to the encryption process parameters and encryption result parameters;

[0134] an adjustment submodule, for determining the use priority of each group of encryption keys according to the encryption degree, and adjusting the arrangement position of each group of confidential keys in the password matrix by linear interpolation method according to the average difference of each encryption key in the order of high priority-medium priority-high priority based on the use priority;

[0135] The setting submodule is used to set the time sequence change state of each group of encryption keys according to the adjusted password matrix and the preset time interval.

[0136] In one embodiment, the encryption transmission module includes:

[0137] The fifth determination submodule is used to detect the communication access time point between the device end and the server end, and determine the current encryption key at the communication access time point according to the timing cycle of the password matrix and the timing change state of each group of encryption keys in the password matrix;

[0138] The retrieval submodule is used to obtain the encryption method of the current encryption key, determine the data encryption standard according to the encryption method, and retrieve the encryption algorithm according to the data encryption standard;

[0139] The encryption and compression submodule is used to encrypt the financial data using an encryption algorithm, and to package and compress the encrypted financial data;

[0140] The transmission submodule is used to start the private data transmission channel between the device and the server, and transmit the packaged and compressed encrypted financial data through the private data transmission channel.

[0141] Those skilled in the art should understand that the first and second in the present invention merely refer to different application stages.

[0142] Other embodiments of the present disclosure will be readily apparent to those skilled in the art after considering the specification and practicing the disclosure disclosed herein. This application is intended to cover any variations, uses, or adaptations of the present disclosure that follow the general principles of the present disclosure and include common knowledge or customary techniques in the art that are not disclosed in the present disclosure. The specification and examples are to be considered exemplary only, and the true scope and spirit of the present disclosure are indicated by the following claims.

[0143] It should be understood that the present disclosure is not limited to the exact structures that have been described above and shown in the drawings, and that various modifications and changes may be made without departing from the scope thereof. The scope of the present disclosure is limited only by the appended claims.

Claims

1. A cryptography-based end-to-end financial data encryption method, characterized in that: The following steps are involved: Obtaining data attributes of financial data, determining relevant business attributes of the financial data based on the data attributes, and determining an encryption level for the financial data based on the relevant business attributes; Construct cryptographic tasks based on encryption levels, and schedule multiple encryption modules to generate multiple sets of encryption keys according to cryptographic tasks; Matrix processing is performed on each group of encryption keys, a password matrix is ​​obtained, and a time sequence change state of each group of encryption keys in the password matrix is ​​set; Detect the end-to-end device access time point, determine the current encryption key according to the device access time point and the time sequence change status of each group of encryption keys in the password matrix, and encrypt and transmit the financial data through the current encryption key; In the process of determining the current encryption key according to the device access time point and the time sequence change state of each group of encryption keys in the password matrix and encrypting and transmitting the financial data by the current encryption key, it also includes: Detect the facial expression data of the user on the device, and extract the user's potential emotion activation features based on the facial expression data according to a preset feature extraction algorithm; Acquire brain interaction features among potential emotion activation features that have an interactive relationship, and determine a patience consumption matrix for each potential emotion activation feature according to the brain interaction features; Determine the hierarchical classification behavior rules of users under each potential emotion activation feature according to the patience consumption matrix of each potential emotion activation feature; Determine the encryption waiting time limit parameter of the user according to the hierarchical, graded and classified behavior rules, and select multiple first encryption keys that meet the encryption time requirement according to the encryption waiting time limit parameter; Acquire the signal timing logic of each first encryption key, and determine the identification quantitative factor of each first encryption key according to the signal timing logic; A random walk path is set between the plurality of first encryption keys according to the identification quantitative factor, and a plurality of dynamic encryption key positioning nodes are determined according to the random walk path; Determine the key selection time point based on the user's expression data collection and analysis cycle and the device access time point; Obtain a target encryption key location node corresponding to the key selection time point, and obtain a second encryption key distributed on the target encryption key location node; The second encryption key is used as the current encryption key and the financial data is encrypted for transmission.

2. The cryptography-based end-to-end financial data encryption method according to claim 1, characterized in that: The step of obtaining data attributes of the financial data, determining relevant business attributes of the financial data according to the data attributes, and determining the encryption level of the financial data according to the relevant business attributes includes: Receive financial data uploaded by the data sending device, parse the data format and data type of the financial data, and determine the data attributes according to the data format and data type; Determine the content information according to the data attributes, determine the financial transaction business based on the content information, and obtain the business field of the financial transaction business; Determine the relevant business attributes of financial data according to the business field, and determine the data sensitivity and data confidentiality factors of financial data based on the relevant business attributes; The encryption level of financial data is assessed based on data sensitivity and data confidentiality factors based on preset confidentiality level assessment rules.

3. The cryptography-based end-to-end financial data encryption method according to claim 1 is characterized in that: The cryptographic tasks are constructed based on the encryption levels, and multiple encryption modules are scheduled to generate multiple sets of encryption keys according to the cryptographic tasks, including: Determine encryption form requirement parameters and encryption complexity requirement parameters according to the encryption level, and construct cryptographic tasks based on the encryption form requirement parameters and encryption complexity requirement parameters; Determine an encryption scheme according to the cryptographic task, generate a key space according to the encryption scheme, and randomly select a set of initial keys in the key space; Dispatching a plurality of encryption modules from an encryption program, inputting an initial key into each encryption module to obtain a plurality of sets of first encryption keys; The key strength, length and uniformity of each group of first encryption keys of each encryption module are checked, and the second encryption key is selected as the final encryption key of each encryption module based on the check results.

4. The cryptography-based end-to-end financial data encryption method according to claim 1, characterized in that: The matrix processing of each group of encryption keys, obtaining a password matrix and setting the time sequence change state of each group of encryption keys in the password matrix includes: Create an initial matrix according to the number of encryption modules and set the row and column representative parameters of the initial matrix, and fill each group of encryption keys into the initial matrix in turn to generate a password matrix; Obtaining encryption process parameters and encryption result parameters of each group of encryption keys, and determining the encryption degree of each group of encryption keys according to the encryption process parameters and encryption result parameters; Determine the use priority of each group of encryption keys according to the encryption degree, and adjust the arrangement position of each group of encryption keys in the password matrix by linear interpolation method according to the average difference of each encryption key in the order of high priority-medium priority-high priority based on the use priority; The timing change state of each group of encryption keys is set according to the adjusted password matrix and the preset time interval.

5. The cryptography-based end-to-end financial data encryption method according to claim 1 is characterized in that: The detecting of the end-to-end device access time point, determining the current encryption key according to the device access time point and the time sequence change state of each group of encryption keys in the password matrix, and encrypting and transmitting the financial data by the current encryption key, includes: Detect the communication access time point between the device and the server, and determine the current encryption key at the communication access time point according to the time sequence period of the password matrix and the time sequence change state of each group of encryption keys in the password matrix; Obtain the encryption method of the current encryption key, determine the data encryption standard based on the encryption method, and call the encryption algorithm based on the data encryption standard; Encrypt financial data using encryption algorithms, and package and compress the encrypted financial data; Start a private data transmission channel between the device and the server, and transmit the packaged and compressed encrypted financial data through the private data transmission channel.

6. An end-to-end financial data encryption system based on cryptography, characterized in that: The system includes: A determination module, used to obtain data attributes of financial data, determine relevant business attributes of the financial data according to the data attributes, and determine the encryption level for the financial data according to the relevant business attributes; A generation module is used to construct cryptographic tasks based on encryption levels and schedule multiple encryption modules to generate multiple sets of encryption keys according to the cryptographic tasks; A setting module is used to perform matrix processing on each group of encryption keys, obtain a password matrix and set the time sequence change state of each group of encryption keys in the password matrix; The encryption transmission module is used to detect the end-to-end device access time point, determine the current encryption key according to the device access time point and the time sequence change state of each group of encryption keys in the password matrix, and encrypt and transmit the financial data through the current encryption key; In the process of determining the current encryption key according to the device access time point and the time sequence change state of each group of encryption keys in the password matrix and encrypting and transmitting the financial data by the current encryption key, it also includes: Detect the facial expression data of the user on the device, and extract the user's potential emotion activation features based on the facial expression data according to a preset feature extraction algorithm; Acquire brain interaction features among potential emotion activation features that have an interactive relationship, and determine a patience consumption matrix for each potential emotion activation feature according to the brain interaction features; Determine the hierarchical classification behavior rules of users under each potential emotion activation feature according to the patience consumption matrix of each potential emotion activation feature; Determine the encryption waiting time limit parameter of the user according to the hierarchical, graded and classified behavior rules, and select multiple first encryption keys that meet the encryption time requirement according to the encryption waiting time limit parameter; Acquire the signal timing logic of each first encryption key, and determine the identification quantitative factor of each first encryption key according to the signal timing logic; A random walk path is set between the plurality of first encryption keys according to the identification quantitative factor, and a plurality of dynamic encryption key positioning nodes are determined according to the random walk path; Determine the key selection time point based on the user's expression data collection and analysis cycle and the device access time point; Obtain a target encryption key location node corresponding to the key selection time point, and obtain a second encryption key distributed on the target encryption key location node; The second encryption key is used as the current encryption key and the financial data is encrypted for transmission.

7. The cryptography-based end-to-end financial data encryption system according to claim 6, characterized in that: The determining module comprises: A first determination submodule is used to receive financial data uploaded by the data sending device, parse the data format and data type of the financial data, and determine the data attributes according to the data format and data type; The second determination submodule is used to determine the content inclusion information according to the data attribute, determine the financial transaction business based on the content inclusion information, and obtain the business field of the financial transaction business; A third determination submodule is used to determine relevant business attributes of financial data according to the business field, and determine data sensitivity and data confidentiality factors of the financial data based on the relevant business attributes; The evaluation submodule is used to evaluate the encryption level of financial data based on the preset confidentiality level evaluation rules according to the data sensitivity and data confidentiality factors.

8. The cryptography-based end-to-end financial data encryption system according to claim 6, characterized in that: The generating module comprises: A construction submodule is used to determine encryption form requirement parameters and encryption complexity requirement parameters according to the encryption level, and to construct a cryptographic task based on the encryption form requirement parameters and encryption complexity requirement parameters; The first selection submodule is used to determine an encryption scheme according to the cryptographic task, generate a key space according to the encryption scheme, and randomly select a set of initial keys in the key space; An acquisition submodule, used for scheduling multiple encryption modules from the encryption program, inputting the initial key into each encryption module to obtain multiple groups of first encryption keys; The second selection submodule is used to check the key strength, length and uniformity of each group of first encryption keys of each encryption module, and select the second encryption key as the final encryption key of each encryption module according to the check result.

9. The cryptography-based end-to-end financial data encryption system according to claim 6, characterized in that: The setting module includes: The filling submodule is used to create an initial matrix according to the number of encryption modules and set the row and column representative parameters of the initial matrix, and fill each group of encryption keys into the initial matrix in turn to generate a password matrix; A fourth determination submodule, used to obtain encryption process parameters and encryption result parameters of each group of encryption keys, and determine the encryption degree of each group of encryption keys according to the encryption process parameters and encryption result parameters; An adjustment submodule, for determining the use priority of each group of encryption keys according to the encryption degree, and adjusting the arrangement position of each group of encryption keys in the password matrix according to the average difference of each encryption key by linear interpolation method in the order of high priority-medium priority-high priority based on the use priority; The setting submodule is used to set the time sequence change state of each group of encryption keys according to the adjusted password matrix and the preset time interval.

10. The cryptography-based end-to-end financial data encryption system according to claim 6, characterized in that: The encryption transmission module comprises: The fifth determination submodule is used to detect the communication access time point between the device end and the server end, and determine the current encryption key at the communication access time point according to the timing cycle of the password matrix and the timing change state of each group of encryption keys in the password matrix; The retrieval submodule is used to obtain the encryption method of the current encryption key, determine the data encryption standard according to the encryption method, and retrieve the encryption algorithm according to the data encryption standard; The encryption and compression submodule is used to encrypt the financial data using an encryption algorithm, and to package and compress the encrypted financial data; The transmission submodule is used to start the private data transmission channel between the device and the server, and transmit the packaged and compressed encrypted financial data through the private data transmission channel.

Images