Edge computing encryption communication method and device

Abstract

The invention discloses an edge computing encryption communication method and device, relates to the technical field of data transmission, and mainly aims to improve the security and efficiency of edge computing encryption communication. According to the main technical scheme, the method comprises the steps of collecting target data of edge equipment; encrypting the target data according to a preset encryption rule to obtain corresponding encrypted data, the preset encryption rule being used for representing an encryption rule for codebook transposition of the target data; and sending the encrypted data to a server, so that the server decrypts and stores the encrypted data based on a decryption mode corresponding to the preset encryption rule. The method and the device are used for edge computing encryption communication.

Description

Technical Field

[0001] The present application relates to the field of data transmission technology, and in particular to an edge computing encryption communication method and device. Background Art

[0002] With the rapid development and popularization of the Internet of Things, edge computing technology has made great breakthroughs. Many controls will be implemented through local devices without being handed over to the cloud. The processing process will be completed at the local edge computing layer, that is, the local device will be used as an edge device. This will undoubtedly greatly improve processing efficiency and reduce the load on cloud servers. In order to ensure the security of data communication between edge devices and cloud servers, data is generally encrypted to reduce data security risks.

[0003] At present, the secure data communication of edge computing in the existing technology is usually achieved by symmetric encryption algorithms or asymmetric encryption algorithms. However, symmetric encryption is relatively simple and has a low security level, while asymmetric encryption requires both parties to randomly generate a secret key each time they communicate, which consumes a lot of computing resources, resulting in poor security and low efficiency of encrypted communication in edge computing. Summary of the invention

[0004] In view of the above problems, the present application provides an edge computing encrypted communication method and device, the main purpose of which is to improve the security and efficiency of edge computing encrypted communication.

[0005] In order to solve the above technical problems, this application proposes the following solutions:

[0006] In a first aspect, the present application provides an edge computing encryption communication method, which is applied to a collector, and the method includes:

[0007] Collect target data from edge devices;

[0008] Encrypting the target data according to a preset encryption rule to obtain corresponding encrypted data, wherein the preset encryption rule is used to represent an encryption rule for performing codebook transposition on the target data;

[0009] The encrypted data is sent to the server so that the server decrypts and stores the encrypted data based on a decryption method corresponding to the preset encryption rule.

[0010] In a second aspect, the present application provides an edge computing encryption communication device, which is applied to a collector, and the device includes:

[0011] A collection unit, used to collect target data of edge devices;

[0012] A processing unit, configured to perform encryption processing on the target data according to a preset encryption rule to obtain corresponding encrypted data, wherein the preset encryption rule is used to represent an encryption rule for performing codebook transposition on the target data;

[0013] The sending unit is used to send the encrypted data to the server, so that the server decrypts and stores the encrypted data based on the decryption method corresponding to the preset encryption rule.

[0014] In order to achieve the above-mentioned purpose, according to the third aspect of the present application, a storage medium is provided, which includes a stored program, wherein when the program is running, the device where the storage medium is located is controlled to execute the edge computing encryption communication method of the above-mentioned first aspect.

[0015] In order to achieve the above-mentioned purpose, according to the fourth aspect of the present application, an electronic device is provided, which includes at least one processor, and at least one memory and a bus connected to the processor; wherein the processor and the memory communicate with each other through the bus; the processor is used to call the program instructions in the memory to execute the edge computing encryption communication method of the first aspect mentioned above.

[0016] By means of the above technical scheme, the present application provides an edge computing encryption communication method and device, which is to first collect the target data of the edge device when it is necessary to perform encrypted communication on the edge computing, and then encrypt the target data according to the preset encryption rules to obtain the corresponding encrypted data, wherein the preset encryption rules are used to characterize the encryption rules for transposing the target data in the codebook, and finally send the encrypted data to the server, so that the server can decrypt and store the encrypted data based on the decryption method corresponding to the preset encryption rules. Through the technical scheme provided by the present application, it is possible to convert the target data into a codebook and perform transposition based on the codebook, which not only realizes data compression and reduces the amount of data transmitted during the communication process, but also increases the complexity of encryption, so that the security level of the overall encryption communication process is higher, thereby effectively improving the security and efficiency of edge computing encryption communication.

[0017] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Various other advantages and benefits will become apparent to those of ordinary skill in the art by reading the detailed description of the preferred embodiments below. The accompanying drawings are only for the purpose of illustrating the preferred embodiments and are not to be considered as limiting the present application. Also, the same reference symbols are used throughout the accompanying drawings to represent the same components. In the accompanying drawings:

[0019] Figure 1 A flow chart of an edge computing encryption communication method provided by an embodiment of the present application is shown;

[0020] Figure 2 Another edge computing encryption communication method flow chart provided in an embodiment of the present application is shown;

[0021] Figure 3 A block diagram of an edge computing encryption communication device provided in an embodiment of the present application is shown;

[0022] Figure 4 A block diagram showing the composition of another edge computing encryption communication device provided in an embodiment of the present application is shown;

[0023] Figure 5 A schematic diagram of an electronic device provided in an embodiment of the present application is shown. DETAILED DESCRIPTION

[0024] The exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided to enable a more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

[0025] At present, the secure data communication of edge computing in the prior art is usually achieved by symmetric encryption algorithms or asymmetric encryption algorithms. However, symmetric encryption is relatively simple and has a low security level, while asymmetric encryption requires both parties to randomly generate a secret key each time they communicate, which consumes a lot of computing resources, resulting in poor security and low efficiency of encrypted communication in edge computing. This application converts the target data into a codebook by presetting encryption rules, and performs transposition based on the codebook, which not only achieves data compression and reduces the amount of data transmitted during the communication process, but also increases the complexity of encryption, making the overall encryption communication process more secure, thereby effectively improving the security and efficiency of edge computing encrypted communication.

[0026] The embodiment of the present application provides an edge computing encryption communication method, by which the security and efficiency of edge computing encryption communication can be improved. The specific execution steps are as follows: Figure 1 As shown, it is applied to the collector, including:

[0027] 101. Collect target data from edge devices.

[0028] It should be noted that the executor of this embodiment is a collector, which is an automated device with on-site real-time data collection and processing functions. It has functions such as real-time collection, automatic storage, instant display, instant feedback, automatic processing, and automatic transmission. It has a built-in wireless communication module (WIFI, GPRS or Bluetooth), which can transmit data with the server (cloud server) through wireless networks and other communication methods. The edge device can be all relevant edge devices in the designated jurisdiction area, or it can be a designated edge device. Correspondingly, the target data can be all or part of the data of the edge device, or it can be the update data of the edge device. This embodiment does not limit this.

[0029] 102. Encrypt the target data according to preset encryption rules to obtain corresponding encrypted data.

[0030] Among them, the preset encryption rule is used to characterize the encryption rule for codebook transposition of the target data. It should be noted that, since the target data has been obtained in the aforementioned step 101, in order to ensure the transmission security of the target data, it is necessary to encrypt it, that is, encrypt the target data by the preset encryption rule. Specifically, the target data can be extracted in advance, and a compilation table can be created, and then the index of the character in the compilation table is used to replace the corresponding character in the target data, and the sequence composed of the character index is the codebook sequence, and then the codebook sequence is transposed on the basis of the codebook sequence, so as to realize the compression encryption of the target data. Specifically, a transposition encryption sequence table can be generated based on the codebook sequence, that is, an empty table is randomly generated according to the number of bits of the codebook sequence, and the codebook is inserted into the table in sequence according to the default reading order, wherein, if there is a vacancy, a placeholder is inserted to occupy the place, and when the codebook is inserted, the intermediate codebook is extracted from the table based on another reading order, and the number of rows and columns of the table are added to the intermediate codebook, so as to form an encryption codebook sequence, that is, encrypted data.

[0031] 103. Send the encrypted data to the server so that the server decrypts and stores the encrypted data based on a decryption method corresponding to a preset encryption rule.

[0032] It should be noted that, in the present embodiment, since the encrypted data will be sent to the server, but the encrypted data essentially corresponds to an encrypted code sequence, the encrypted data needs to be decrypted. In actual applications, the preset encryption rules and the corresponding decryption methods will be pre-deployed in the collector and the server having a transmission relationship with the collector, so that encryption and decryption operations can be implemented between the collector and the server, so that the server can decrypt and store the encrypted data based on the decryption method corresponding to the preset encryption rules, that is, reverse decryption corresponding to the encryption step in step 102, so as to obtain the target data and store it.

[0033] Based on the above Figure 1 It can be seen from the implementation method that the edge computing encryption communication method provided by the present application is to first collect the target data of the edge device when encrypted communication is required for edge computing, and then encrypt the target data according to the preset encryption rules to obtain the corresponding encrypted data, wherein the preset encryption rules are used to characterize the encryption rules for codebook transposition of the target data, and finally send the encrypted data to the server, so that the server can decrypt and store the encrypted data based on the decryption method corresponding to the preset encryption rules. Through the technical solution provided by the present application, it is possible to convert the target data into a codebook and perform transposition based on the codebook, which not only realizes data compression and reduces the amount of transmitted data during the communication process, but also increases the complexity of encryption, so that the security level of the overall encryption communication process is higher, thereby effectively improving the security and efficiency of edge computing encryption communication.

[0034] Further, the preferred embodiment of the present application is in the above Figure 1 Based on this, a detailed description of the process of edge computing encrypted communication is given. The specific steps are as follows Figure 2 As shown, it is applied to the collector, including:

[0035] 201. Configure a preset encryption rule and a corresponding decryption method according to an operation event.

[0036] It should be noted that, in this step, a custom interface may be pre-set, and operation parameters may be selected or input in the custom interface to configure preset encryption rules and corresponding decryption methods, so as to specify the subsequent step 202 .

[0037] 202. Deploy the preset encryption rules and decryption methods in the collector corresponding to the edge device and in the server having a transmission relationship with the collector.

[0038] It should be noted that in this step, since a transmission relationship will be established in advance between the collector and the server, and there may be multiple servers, after the preset encryption rules and decryption methods are configured, the two can be deployed respectively in the collector corresponding to the edge device and in the server with a transmission relationship with the collector, thereby facilitating subsequent accurate data transmission and making the data transmission process safer and more convenient.

[0039] 203. Collect target data of edge devices.

[0040] This step is combined with the description of step 101 in the above method, and the same contents are not repeated here.

[0041] 204. Perform encoding processing on the target data to obtain a corresponding codebook sequence.

[0042] It should be noted that, in this step, the encoding process is to create a compilation table using different characters extracted from the target data, and then use the character index to replace the corresponding characters in the target data, so as to compress the target data and reduce the amount of data transmitted subsequently. Specifically, the LZW compression algorithm can be used to implement the above operation.

[0043] 205. Perform transposition processing on the codebook sequence to obtain a corresponding transposition encryption sequence table.

[0044] It should be noted that in this step, a table capable of inserting all codebook sequences can be randomly generated based on the number of bits of the codebook sequence, and the codebook sequence can be inserted into the table based on the default reading order to generate a transposition encryption sequence table so as to perform the subsequent step 206.

[0045] 206. Generate an encryption codebook sequence corresponding to the codebook sequence according to the permutation encryption sequence table, and use the encryption codebook sequence as encrypted data.

[0046] It should be noted that in this step, since the permutation encryption sequence table has been generated, an encryption codebook sequence corresponding to the codebook sequence can be generated according to the permutation encryption sequence table. Specifically, a specified permutation sub-strategy included in the pre-permutation strategy is randomly selected as the target permutation sub-strategy; the target permutation sub-strategy is extracted from the permutation encryption sequence table to generate an intermediate codebook sequence corresponding to the codebook sequence; the number of rows and columns corresponding to the permutation encryption sequence table is obtained; and the number of rows and columns are respectively added to the first and last positions of the intermediate codebook sequence to form an encryption codebook sequence. Among them, the pre-permutation strategy is a strategy set including multiple specified transposition sub-strategies. The specified transposition sub-strategy is essentially a reading order, that is, the transposition encryption sequence table is read in other reading orders except when the codebook sequence is inserted into the table, such as "U"-shaped reading, "N"-shaped reading, etc. This embodiment does not limit this. It is only necessary to randomly select a specified transposition sub-strategy as the target transposition sub-strategy to perform subsequent operations. After the intermediate codebook sequence is obtained through the target transposition sub-strategy, since the encryption and decryption processes in this embodiment need to be consistent, it is also necessary to add the attributes of the table to the intermediate codebook sequence, that is, the number of rows and columns of the table are the first and last positions of the intermediate codebook sequence, respectively, so that when the encrypted codebook sequence is sent to the server as encrypted data, the server can restore the table according to the first and last positions of the encrypted codebook sequence, and reinsert the intermediate codebook sequence into the table based on the specified transposition sub-strategy, and then restore the codebook sequence and the target data in the default order. In addition, the complexity of encryption can be increased by increasing the number of rows and columns, so that the overall security level is higher.

[0047] Furthermore, before this step, since there are multiple designated transposition sub-strategies and they are randomly selected, it is very likely that the usage frequencies of the multiple designated transposition sub-strategies will be uneven, for example, a certain designated transposition sub-strategy is frequently called, etc., which will easily increase the record of being cracked. If you want to always maintain the security level of the overall encryption process, you need to use each designated transposition sub-strategy on average. Specifically, before randomly selecting a designated transposition sub-strategy included in a pre-permutation strategy as a target transposition sub-strategy, the method also includes: obtaining the usage frequency corresponding to each designated sub-transposition strategy; dividing each designated transposition sub-strategy according to the usage frequency to obtain a priority designated transposition sub-strategy and a non-priority designated transposition sub-strategy; randomly selecting a designated transposition sub-strategy included in a pre-permutation strategy as a target transposition sub-strategy, including: randomly selecting a priority designated transposition sub-strategy included in a pre-permutation strategy as a target transposition sub-strategy. Among them, the priority designated transposition sub-strategy is the designated transposition sub-strategy with less frequency of use, and the non-priority designated transposition sub-strategy is the designated transposition sub-strategy with more frequency of use. It should be noted that this division is relative, that is, the same designated transposition sub-strategy may be switched from the priority designated transposition sub-strategy to the non-priority designated transposition sub-strategy as the number of uses and the interval of use change, and vice versa. In this step, the priority designated transposition sub-strategy is preferentially selected as the target transposition sub-strategy, so as to ensure the security level of the overall encryption process and improve the security of encrypted communications.

[0048] Furthermore, since the usage frequency of each designated transposition sub-strategy will change over time, the criteria for determining whether the designated transposition sub-strategy is divided into a priority designated transposition sub-strategy or a non-priority designated transposition sub-strategy will also change accordingly, so as to ensure the accuracy of the division. Specifically, each designated transposition sub-strategy is divided according to the usage frequency to obtain a priority designated transposition sub-strategy and a non-priority designated transposition sub-strategy, including: determining the corresponding division threshold based on the minimum and maximum values ​​of the usage frequency; and using the division threshold to divide each designated transposition sub-strategy into a priority designated transposition sub-strategy and a non-priority designated transposition sub-strategy. Among them, the division threshold can be determined based on the minimum and maximum values ​​of the usage frequency. For example, if the minimum value is 12 and the maximum value is 22, then the division threshold can be an intermediate value of 16 / 17 / 18, etc. This embodiment does not limit this, but it should be emphasized that the division threshold will change with the increase of the overall usage frequency.

[0049] An example is given based on steps 204-206:

[0050] For example, as shown in Table 1:

[0051] Code 1 2 3 4 5 6 7 8 9 10 11 12 13 Seq A B C D E F G H I J K L M Code 14 15 16 17 18 19 20 21 22 23 24 25 26 Seq N O P Q R S T U V W X Y Z

[0052] Table 1

[0053] The target data consists of letters of AZ, and the corresponding indexes are 1-26. Assuming that the codebook sequence obtained from Table 1 is 2 / 3 / 8 / 6 / 1 / 8 / 2 / 9 / 8 / 1 / 6 / 2 / 6 / 5 / 2 / 3, it is transposed and encrypted in a 4-row 4-column manner. The transposition encryption sequence table is shown in Table 2:

[0054]

[0055]

[0056] Table 2

[0057] Assuming that the designated transposition strategy at this time is "U"-shaped reading, the intermediate sequence codebook obtained from Table 2 is 2 / 1 / 8 / 6 / 5 / 1 / 8 / 3 / 8 / 2 / 6 / 2 / 3 / 2 / 9 / 6, and the number of rows and columns of the table is 4. Therefore, the final encryption codebook sequence is 4 / 2 / 1 / 8 / 6 / 5 / 1 / 8 / 3 / 8 / 2 / 6 / 2 / 3 / 2 / 9 / 6 / 4.

[0058] 207. Send the encrypted data to the server, so that the server decrypts and stores the encrypted data based on a decryption method corresponding to the preset encryption rule.

[0059] This step is combined with the description of step 103 in the above method, and the same contents are not repeated here.

[0060] Furthermore, in order to ensure the validity of the preset encryption rules and the corresponding decryption methods and reduce the probability of being cracked, the preset encryption rules and the corresponding decryption methods are updated periodically, wherein the period may be one week, one month, etc., which is not limited in this embodiment.

[0061] Furthermore, as a response to the above Figure 1-2 The implementation of the method embodiment shown in the figure, the embodiment of the present application provides an edge computing encryption communication device, which is used to improve the security and efficiency of edge computing encryption communication. The embodiment of the device corresponds to the aforementioned method embodiment. For ease of reading, this embodiment will no longer repeat the details of the aforementioned method embodiment one by one, but it should be clear that the device in this embodiment can correspond to the implementation of all the contents of the aforementioned method embodiment. Specifically, Figure 3 As shown, applied to a collector, the device includes:

[0062] A collection unit 31, used to collect target data of edge devices;

[0063] The processing unit 32 is used to encrypt the target data obtained by the acquisition unit 31 according to a preset encryption rule to obtain corresponding encrypted data, wherein the preset encryption rule is used to represent the encryption rule for codebook transposition of the target data;

[0064] The sending unit 33 is used to send the encrypted data obtained by the processing unit 32 to the server, so that the server decrypts and stores the encrypted data based on the decryption method corresponding to the preset encryption rule.

[0065] Further, such as Figure 4 As shown, the device also includes:

[0066] A configuration unit 34, configured to configure the preset encryption rule and the corresponding decryption method according to the operation event before the collection unit 31;

[0067] The deployment unit 35 is used to deploy the preset encryption rule and the decryption method obtained by the configuration unit 34 in the collector corresponding to the edge device and in the server having a transmission relationship with the collector.

[0068] Further, such as Figure 4 As shown, the processing unit 32 includes:

[0069] A first processing module 321 is used to encode the target data to obtain a corresponding codebook sequence;

[0070] A second processing module 322 is used to perform transposition processing on the codebook sequence obtained by the first processing module 321 to obtain a corresponding transposition encryption sequence table;

[0071] The generating module 323 is used to generate an encryption code book sequence corresponding to the code book sequence according to the transposed encryption sequence table obtained by the second processing module 322, and use the encryption code book sequence as the encrypted data.

[0072] Further, such as Figure 4 As shown, the generating module 323 includes:

[0073] A determination submodule 3231 is used to randomly select a specified transposition sub-strategy included in the pre-permutation strategy as a target transposition sub-strategy;

[0074] A generating submodule 3232 is used to extract the target transposition sub-strategy obtained by the determining submodule 3231 from the transposition encryption sequence table to generate an intermediate codebook sequence corresponding to the codebook sequence;

[0075] The first acquisition submodule 3233 is used to obtain the number of rows and columns corresponding to the transposition encryption sequence table;

[0076] The processing submodule 3234 is used to add the number of rows and the number of columns obtained by the first acquisition submodule 3233 to the first and last bits of the intermediate codebook sequence obtained by the generation submodule 3232 to form the encryption codebook sequence.

[0077] Further, such as Figure 4 As shown, the device also includes:

[0078] The second acquisition submodule 3235 is used to acquire the usage frequency corresponding to each of the specified sub-transposition strategies before the determination submodule 3131;

[0079] A division submodule 3236 is used to divide each of the designated transposition sub-strategies according to the usage frequency obtained by the second acquisition submodule 3235 to obtain a priority designated transposition sub-strategy and a non-priority designated transposition sub-strategy;

[0080] The determination submodule 3231 is specifically used to:

[0081] A priority-specified transposition sub-strategy included in the pre-permutation strategy is randomly selected as the target transposition sub-strategy.

[0082] Further, such as Figure 4 As shown, the division submodule 3236 is specifically used for:

[0083] Determine a corresponding division threshold based on the lowest value and the highest value of the usage frequency;

[0084] Each of the designated transposition sub-strategies is divided into the priority designated transposition sub-strategy and the non-priority designated transposition sub-strategy by using the division threshold.

[0085] Further, such as Figure 4 As shown, the device also includes:

[0086] The updating unit 36 ​​is used to periodically update the preset encryption rules and the corresponding decryption methods.

[0087] Furthermore, an embodiment of the present application also provides an electronic device, the electronic device includes a processor and a memory, the above-mentioned acquisition unit 31, processing unit 32 and sending unit 33 are all stored in the memory as program units, and the processor executes the above-mentioned program units stored in the memory to implement corresponding functions. The processor includes a kernel, and the kernel calls the corresponding program unit from the memory.

[0088] The kernel can be set to one or more, and the security and efficiency of edge computing encrypted communications can be improved by adjusting kernel parameters.

[0089] An embodiment of the present application provides a storage medium on which a program is stored, and when the program is executed by a processor, the edge computing encrypted communication method is implemented.

[0090] An embodiment of the present application provides a processor, which is used to run a program, wherein the edge computing encryption communication method is executed when the program is running.

[0091] The present application embodiment provides a device 40, such as Figure 5 As shown, the device 40 includes at least one processor 401, at least one memory 402 connected to the processor 401, and a bus 403; wherein the processor 401 and the memory 402 communicate with each other through the bus 403; the processor 401 is used to call the program instructions in the memory 402 to execute the above-mentioned edge computing encryption communication method. The device in this article can be a server, PC, PAD, mobile phone, etc.

[0092] The present application also provides a computer program product, which, when executed on a data processing device, is suitable for executing a program that initializes the following method steps: collecting target data of an edge device; encrypting the target data according to a preset encryption rule to obtain corresponding encrypted data, wherein the preset encryption rule is used to characterize the encryption rule for codebook transposition of the target data; and sending the encrypted data to a server so that the server decrypts and stores the encrypted data based on a decryption method corresponding to the preset encryption rule.

[0093] Before collecting the target data of the edge device, the method also includes: configuring the preset encryption rules and the corresponding decryption method according to the operation event; deploying the preset encryption rules and the decryption method in the collector corresponding to the edge device and in the server having a transmission relationship with the collector respectively.

[0094] The encrypting the target data according to the preset encryption rule to obtain the corresponding encrypted data includes: encoding the target data to obtain a corresponding codebook sequence; transposing the codebook sequence to obtain a corresponding transposed encryption sequence table; generating an encryption codebook sequence corresponding to the codebook sequence according to the transposed encryption sequence table; and using the encryption codebook sequence as the encrypted data.

[0095] The step of generating an encrypted codebook sequence corresponding to the codebook sequence according to the permutation encryption sequence table includes: randomly selecting a designated permutation sub-strategy included in the pre-permutation strategy as a target permutation sub-strategy; extracting the permutation encryption sequence table according to the target permutation sub-strategy to generate an intermediate codebook sequence corresponding to the codebook sequence; obtaining the number of rows and columns corresponding to the permutation encryption sequence table; and adding the number of rows and the number of columns to the first and last positions of the intermediate codebook sequence, respectively, to form the encrypted codebook sequence.

[0096] Before randomly selecting a designated transposition sub-strategy included in the pre-permutation strategy as the target transposition sub-strategy, the method also includes: obtaining the usage frequency corresponding to each of the designated sub-permutation strategies; dividing each of the designated transposition sub-strategies according to the usage frequency to obtain priority designated transposition sub-strategies and non-priority designated transposition sub-strategies; randomly selecting a designated transposition sub-strategy included in the pre-permutation strategy as the target transposition sub-strategy includes: randomly selecting the priority designated transposition sub-strategy included in the pre-permutation strategy as the target transposition sub-strategy.

[0097] The dividing of each of the designated transposition sub-strategies according to the usage frequency to obtain priority designated transposition sub-strategies and non-priority designated transposition sub-strategies includes: determining a corresponding division threshold based on the lowest value and the highest value of the usage frequency; and using the division threshold to divide each of the designated transposition sub-strategies into the priority designated transposition sub-strategies and the non-priority designated transposition sub-strategies.

[0098] The preset encryption rules and the corresponding decryption methods are updated periodically.

[0099] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0100] In a typical configuration, the device includes one or more processors (CPU), memory and bus. The device may also include input / output interface, network interface and the like.

[0101] The memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM, and the memory includes at least one memory chip. The memory is an example of a computer-readable medium.

[0102] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0103] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0104] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

[0105] The above are only embodiments of the present application and are not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included within the scope of the claims of the present application.

Claims

1. An edge computing encryption communication method, characterized in that: Applied to a collector, the method comprises: Collect target data from edge devices; Encrypting the target data according to a preset encryption rule to obtain corresponding encrypted data, wherein the preset encryption rule is used to represent an encryption rule for performing codebook transposition on the target data; The encrypted data is sent to the server so that the server decrypts and stores the encrypted data based on a decryption method corresponding to the preset encryption rule.

2. The method according to claim 1, characterized in that Before collecting the target data of the edge device, the method further includes: Configure the preset encryption rules and corresponding decryption methods according to the operation events; The preset encryption rule and the decryption method are respectively deployed in the collector corresponding to the edge device and in a server having a transmission relationship with the collector.

3. The method according to claim 1, characterized in that The encrypting the target data according to the preset encryption rule to obtain corresponding encrypted data includes: Performing encoding processing on the target data to obtain a corresponding codebook sequence; Performing a transposition process on the codebook sequence to obtain a corresponding transposition encryption sequence table; An encryption code book sequence corresponding to the code book sequence is generated according to the permutation encryption sequence table, and the encryption code book sequence is used as the encrypted data.

4. The method according to claim 3, characterized in that The step of generating an encryption codebook sequence corresponding to the codebook sequence according to the transposition encryption sequence table includes: Randomly selecting a designated transposition sub-strategy included in the pre-permutation strategy as a target transposition sub-strategy; Extracting in the transposition encryption sequence table according to the target transposition sub-strategy to generate an intermediate codebook sequence corresponding to the codebook sequence; Obtain the number of rows and columns corresponding to the transposition encryption sequence table; The row number and the column number are added to the first and last bits of the intermediate codebook sequence respectively to form the encryption codebook sequence.

5. The method according to claim 4, characterized in that Before randomly selecting a designated transposition sub-strategy included in the pre-permutation strategy as a target transposition sub-strategy, the method further includes: Obtaining the usage frequency corresponding to each of the specified sub-transposition strategies; Dividing each of the designated transposition sub-strategies according to the usage frequency to obtain priority designated transposition sub-strategies and non-priority designated transposition sub-strategies; The randomly selecting a designated transposition sub-strategy included in the pre-permutation strategy as a target transposition sub-strategy includes: A priority-specified transposition sub-strategy included in the pre-permutation strategy is randomly selected as the target transposition sub-strategy.

6. The method according to claim 5, characterized in that The dividing each of the designated transposition sub-strategies according to the usage frequency to obtain a priority designated transposition sub-strategy and a non-priority designated transposition sub-strategy includes: Determine a corresponding division threshold based on the lowest value and the highest value of the usage frequency; Each of the designated transposition sub-strategies is divided into the priority designated transposition sub-strategy and the non-priority designated transposition sub-strategy by using the division threshold.

7. The method according to any one of claims 1 to 6, characterized in that The method further comprises: The preset encryption rules and the corresponding decryption methods are updated periodically.

8. An edge computing encryption communication device, characterized in that: Applied to a collector, the device comprises: A collection unit, used to collect target data of edge devices; A processing unit, configured to perform encryption processing on the target data according to a preset encryption rule to obtain corresponding encrypted data, wherein the preset encryption rule is used to represent an encryption rule for performing codebook transposition on the target data; The sending unit is used to send the encrypted data to the server, so that the server decrypts and stores the encrypted data based on the decryption method corresponding to the preset encryption rule.

9. A storage medium, characterized in that: The storage medium includes a stored program, wherein when the program is running, the device where the storage medium is located is controlled to execute the edge computing encryption communication method as described in any one of claims 1-7.

10. An electronic device, comprising at least one processor, and at least one memory and bus connected to the processor; wherein: The processor and the memory communicate with each other via the bus; The processor is used to call the program instructions in the memory to execute the edge computing encryption communication method as described in any one of claims 1 to 7.

Images