Intelligent monitoring data encryption and security sharing system

Abstract

The invention provides an intelligent monitoring data encryption and secure sharing system. The intelligent monitoring data encryption and security sharing system comprises a data acquisition module for acquiring data from monitoring equipment in real time, a distributed encryption module comprising a plurality of sub-encryption units and performing distributed encryption processing on the acquired data through a distributed key generation and management system, and a dynamic key management system comprising a plurality of sub-encryption units, the system generates, distributes and manages keys required by encryption based on a quantum key distribution technology and a dynamic key rotation mechanism. According to the intelligent monitoring data encryption and security sharing system, the security of monitoring data and the anti-attack ability of the system are greatly improved by introducing a distributed encryption and dynamic key management system, and the security of the monitoring data and the anti-attack ability of the system are greatly improved by combining a key fragment generated by adopting a quantum key distribution technology with a hash function and a dynamic rotation mechanism. The unpredictability and the quantum attack resistance of the key are ensured, and the security risk caused by key leakage is effectively prevented.

Description

Technical Field

[0001] The present invention relates to the technical field of encryption and security sharing, and in particular to an intelligent monitoring data encryption and security sharing system. Background Art

[0002] The intelligent monitoring data encryption and secure sharing system aims to protect the confidentiality of monitoring data through encryption technology and ensure secure sharing among multiple parties. Its basic structure usually includes the following core parts: Data acquisition module: Monitoring devices such as cameras and sensors capture and transmit real-time data to the system's central server or cloud storage. Encryption module: During the data transmission process, the data is first processed by the encryption module. Symmetric or asymmetric encryption algorithms such as AES (Advanced Encryption Standard) or RSA (Rivest-Shamir-Adleman) are usually used to encrypt the data to ensure that unauthorized third parties cannot read or tamper with the data. Data storage module: The encrypted data is stored in a secure database or cloud storage. The storage process is usually combined with a key management system (KMS) to ensure that the encryption key of the data is securely managed. Identity authentication and access control module: Through multi-factor authentication, role permission management and other means, the system ensures that only authorized users or devices can decrypt and access the data. Data sharing module: The system allows multiple parties (such as different departments or institutions) to share data while ensuring data privacy and security. Data sharing is usually achieved through encrypted API interfaces or data exchange protocols (such as JSON, XML) to ensure security during transmission and decryption.

[0003] There are some potential flaws in the intelligent monitoring data encryption and security sharing system: the security of the encryption system depends on the effectiveness of key management. If the key management system is attacked, the key leakage will lead to the destruction of the security of the entire system. The encryption and decryption process consumes a lot of computing resources, especially when processing a large amount of real-time data, which may cause system performance to decline, affecting the real-time nature and processing efficiency of the data. Summary of the invention

[0004] 1. Technical issues to be resolved

[0005] In view of the shortcomings of the prior art, the present invention provides an intelligent monitoring data encryption and security sharing system, which solves the problem that the security of the encryption system depends on the effectiveness of key management; the encryption and decryption process consumes a large amount of computing resources, especially when processing a large amount of real-time data, which may cause system performance to decline, affecting the real-time nature and processing efficiency of the data.

[0006] (II) Technical solution

[0007] To achieve the above objectives, the present invention is implemented through the following technical solutions: an intelligent monitoring data encryption and security sharing system, comprising:

[0008] Data acquisition module, used to collect data from monitoring equipment in real time;

[0009] The distributed encryption module includes multiple sub-encryption units, which perform distributed encryption processing on the collected data through a distributed key generation and management system;

[0010] Dynamic key management system, which generates, distributes and manages the keys required for encryption based on quantum key distribution technology and dynamic key rotation mechanism, and updates the keys in real time during the encryption process to enhance security;

[0011] Intelligent decryption module, which uses asynchronous decryption technology to improve the efficiency of the decryption process through pre-decryption and caching mechanisms;

[0012] Data storage module, used to store encrypted data, combined with blockchain technology to ensure data integrity and tamper-proof;

[0013] The identity authentication and access control module ensures data access security through multi-factor authentication and dynamic permission allocation based on zero-trust architecture;

[0014] The data sharing module is used to securely share encrypted data among multiple parties. This module uses homomorphic encryption algorithm and differential privacy technology to achieve privacy protection and computational processing during data sharing.

[0015] Preferably, the encryption process in the distributed encryption module is described by the following formula:

[0016]

[0017] Among them, M i represents the collected original data, K i Indicates the allocation to data block M i The encryption key, Indicates the use of key K i The encryption operation, C i The encrypted data block.

[0018] Preferably, the dynamic key management system performs key rotation based on the following formula:

[0019]

[0020] Among them, K i (t) represents the data block M at time t i The key, R(t) is the random number generated at time t, H represents the hash function, Ki (t+1) is the new key at time t+1, and the homomorphic encryption calculation process is described by the following formula:

[0021] E(f(M1,M2))=f(E(M1),E(M2))

[0022] Where E represents the encryption operation, f represents any calculation function, M1 and M2 are two original data blocks, and this formula ensures that the data can still be calculated in the encrypted state.

[0023] Preferably, the decryption process of the intelligent decryption module is described by the following formula:

[0024]

[0025] in, Indicates the use of key K i The decryption operation, M i The original data after decryption.

[0026] Preferably, the key generation function is calculated by the following formula:

[0027] K i =f(H(M i ),Q i )

[0028] Among them, H(M i ) represents data M i The hash value, Q i represents the key fragment obtained by quantum key distribution, and f is the key generation function.

[0029] Preferably, the security of the homomorphic encryption calculation is defined by the following formula:

[0030]

[0031] in, Indicates attacker The success probability, n is the key length, E K It is a homomorphic encryption operation.

[0032] Preferably, the key update process of the dynamic key management system is described by the following formula:

[0033]

[0034] Among them, H(R(t),M i ) represents the combination of random number R(t) and data M i The hash value, K i (t) represents the data block M at time t iThe key, K i (t+1) is the new key at time t+1.

[0035] Preferably, the distributed key generation is described by the following formula:

[0036]

[0037] Among them, Q i is the key fragment obtained through quantum key distribution, S i is the key seed generated by the key management system, H is the hash function, For XOR operation, K i The generated encryption key.

[0038] (III) Beneficial effects

[0039] The present invention provides an intelligent monitoring data encryption and security sharing system. It has the following beneficial effects:

[0040] By introducing distributed encryption and dynamic key management systems, the security of monitoring data and the system's ability to resist attacks have been greatly improved. The key fragments generated by quantum key distribution technology are combined with hash functions and dynamic rotation mechanisms to ensure the unpredictability and resistance to quantum attacks of keys, and effectively prevent security risks caused by key leakage. Through the combination of asynchronous decryption technology and homomorphic encryption algorithms, the system can maintain high computing efficiency and real-time performance when processing large amounts of real-time data, while ensuring the privacy protection and computability of data in an encrypted state.

[0041] The decryption process is optimized through pre-decryption and caching mechanisms, and the integrity and immutability of the data are guaranteed by combining blockchain technology. In terms of data sharing, the use of multi-factor authentication and homomorphic encryption algorithms based on a zero-trust architecture ensures data security and privacy protection in a multi-party collaborative environment. The overall solution not only enhances data security and privacy, but also solves the bottleneck problems of traditional encryption systems in key management and computing resource consumption while ensuring efficient system operation. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] Figure 1 It is a schematic diagram of the structure of the present invention. DETAILED DESCRIPTION

[0043] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0044] like Figure 1 As shown, an embodiment of the present invention provides an intelligent monitoring data encryption and security sharing system, including a data acquisition module for collecting data from a monitoring device in real time;

[0045] The distributed encryption module includes multiple sub-encryption units, which perform distributed encryption processing on the collected data through a distributed key generation and management system. The encryption process in the distributed encryption module is described by the following formula:

[0046]

[0047] Among them, M i represents the collected original data, K i Indicates the allocation to data block M i The encryption key, Indicates the use of key K i The encryption operation, C i is the encrypted data block;

[0048] Dynamic key management system, which is based on quantum key distribution technology and dynamic key rotation mechanism, generates, distributes and manages the keys required for encryption, and updates the keys in real time during the encryption process to enhance security. The dynamic key management system performs key rotation based on the following formula:

[0049]

[0050] Among them, K i (t) represents the data block M at time t i The key, R(t) is the random number generated at time t, H represents the hash function, K i (t+1) is the new key at time t+1. The homomorphic encryption calculation process is described by the following formula:

[0051] E(f(M1,M2))=f(E(M1),E(M2))

[0052] Where E represents the encryption operation, f represents any calculation function, M1 and M2 are two original data blocks respectively. This formula ensures that the data can still be calculated in the encrypted state;

[0053] Intelligent decryption module, which uses asynchronous decryption technology to improve the efficiency of the decryption process through pre-decryption and caching mechanisms. The decryption process of the intelligent decryption module is described by the following formula:

[0054]

[0055] in, Indicates the use of key K iThe decryption operation, M i To decrypt the original data, the key generation function is calculated by the following formula:

[0056] K i =f(H(M i ),Q i )

[0057] Among them, H(M i ) represents data M i The hash value, Q i represents the key fragment obtained by quantum key distribution, and f is the key generation function;

[0058] Data storage module, used to store encrypted data, combined with blockchain technology to ensure data integrity and tamper-proof;

[0059] The identity authentication and access control module ensures data access security through multi-factor authentication and dynamic permission allocation based on zero-trust architecture;

[0060] The data sharing module is used to securely share encrypted data between multiple parties. This module uses homomorphic encryption algorithms and differential privacy technology to achieve privacy protection and computational processing during data sharing. The security of homomorphic encryption calculations is defined by the following formula:

[0061]

[0062] in, Indicates attacker The success probability, n is the key length, E K For homomorphic encryption operations, the key update process of the dynamic key management system is described by the following formula:

[0063]

[0064] Among them, H(R(t),M i ) represents the combination of random number R(t) and data M i The hash value, K i (t) represents the data block M at time t i The key, K i (t+1) is the new key at time t+1. The distributed key generation is described by the following formula:

[0065]

[0066] Among them, Q i is the key fragment obtained through quantum key distribution, S i is the key seed generated by the key management system, H is the hash function, For XOR operation, K i The generated encryption key.

[0067] The data acquisition module is the front-end component of the system, responsible for collecting environmental data in real time from various monitoring devices. These devices may be located in different physical locations and can collect data in various forms, including video, audio, temperature, humidity, etc. The data acquisition module digitizes these raw data and transmits them to the system's central processing unit for further encryption and processing.

[0068] The distributed encryption module consists of multiple sub-encryption units, each of which is responsible for encrypting different data blocks. Unlike traditional centralized encryption, the distributed encryption module allows the system to process data in parallel, greatly improving the efficiency and security of encryption. Through the distributed key generation and management system, each data block is encrypted with an independently generated key to prevent the risk of data leakage caused by key leakage or single point failure.

[0069] The dynamic key management system is one of the core innovations of the present invention. The system uses quantum key distribution technology to generate highly secure keys, and combines it with a dynamic key rotation mechanism to ensure that the keys always remain fresh and secure during use. By regularly updating the keys, it can effectively prevent security issues caused by key exposure or cracking. When the system performs dynamic encryption calculations, it can directly perform calculations in a data encryption state, ensuring data privacy while maintaining the accuracy and effectiveness of the calculations.

[0070] The intelligent decryption module is responsible for restoring the encrypted data to readable original data. In order to improve the decryption efficiency, the system adopts asynchronous decryption technology and combines it with pre-decryption and caching mechanisms. In this way, when faced with a large amount of data, the system can decrypt frequently accessed data in advance and reduce the computational burden of real-time decryption, thereby ensuring that data can be quickly obtained when needed. The intelligent decryption module also has adaptive capabilities and dynamically adjusts the decryption strategy according to the system load to further improve system performance.

[0071] The data storage module is responsible for securely storing encrypted data in a distributed database. In order to ensure the integrity and tamper-proofness of the data, this system combines blockchain technology. Each stored data block will generate a unique hash value and record it in the blockchain to ensure the data is tamper-proof and traceable. This design not only improves the security of data storage, but also provides a reliable basis for future data review and forensics.

[0072] The identity authentication and access control module ensures the legitimacy of users through multi-factor authentication and dynamically manages user access based on a zero-trust architecture. The system continuously monitors user behavior and dynamically adjusts user access rights based on real-time analysis results to prevent unauthorized access. Through this mechanism, even if the system encounters potential internal or external threats, it can effectively ensure data security.

[0073] The data sharing module allows the system to securely share encrypted data between multiple parties. In order to protect data privacy, the system adopts a homomorphic encryption algorithm, which allows the necessary calculations and processing of data even in an encrypted state. The system also combines differential privacy technology to ensure that no sensitive information is leaked in the process of sharing data. This function is particularly important for cross-departmental and cross-institutional data collaboration, which not only ensures the security of data, but also meets the business needs of partners.

[0074] The system's key generation generates highly secure keys by combining quantum key distribution technology and hash functions, ensuring that the encryption keys of each data block are independent and highly secure. To enhance the security of the keys, the system introduces a timestamp-based dynamic factor in the key generation process, making each key time-sensitive, further improving the unpredictability of the keys.

[0075] In order to continuously ensure the security of the system, the dynamic key management system regularly updates the keys. In this way, the service life of the keys is effectively shortened. Even if a key is cracked or leaked in a short period of time, the system can quickly repair this security vulnerability through the key update mechanism to prevent data leakage. The dynamic key update mechanism also combines the changes in the data block content to ensure the correlation between the key and the data, further enhancing the overall security of the system.

[0076] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. An intelligent monitoring data encryption and security sharing system, characterized in that: Includes the following components: Data acquisition module, used to collect data from monitoring equipment in real time; The distributed encryption module includes multiple sub-encryption units, which perform distributed encryption processing on the collected data through a distributed key generation and management system; Dynamic key management system, which generates, distributes and manages the keys required for encryption based on quantum key distribution technology and dynamic key rotation mechanism, and updates the keys in real time during the encryption process to enhance security; Intelligent decryption module, which uses asynchronous decryption technology to improve the efficiency of the decryption process through pre-decryption and caching mechanisms; Data storage module, used to store encrypted data, combined with blockchain technology to ensure data integrity and tamper-proof; The identity authentication and access control module ensures data access security through multi-factor authentication and dynamic permission allocation based on zero-trust architecture; The data sharing module is used to securely share encrypted data among multiple parties. This module uses homomorphic encryption algorithm and differential privacy technology to achieve privacy protection and computational processing during data sharing.

2. The intelligent monitoring data encryption and security sharing system according to claim 1, characterized in that: The encryption process in the distributed encryption module is described by the following formula: Among them, M i represents the collected original data, K i Indicates the allocation to data block M i The encryption key, Indicates the use of key K i The encryption operation, C i The encrypted data block.

3. The intelligent monitoring data encryption and security sharing system according to claim 1, characterized in that: The dynamic key management system performs key rotation based on the following formula: Among them, K i (t) represents the data block M at time t i The key, R(t) is the random number generated at time t, H represents the hash function, K i (t+1) is the new key at time t+1, and the homomorphic encryption calculation process is described by the following formula: E(f(M1,M2))=f(E(M1),E(M2)) Where E represents the encryption operation, f represents any calculation function, M1 and M2 are two original data blocks, and this formula ensures that the data can still be calculated in the encrypted state.

4. The intelligent monitoring data encryption and security sharing system according to claim 1, characterized in that: The decryption process of the intelligent decryption module is described by the following formula: in, Indicates the use of key K i The decryption operation, M i The original data after decryption.

5. The intelligent monitoring data encryption and security sharing system according to claim 1, characterized in that: The key generation function is calculated by the following formula: K i =f(H(M i ),Q i ) Among them, H(M i ) represents data M i The hash value, Q i represents the key fragment obtained by quantum key distribution, and f is the key generation function.

6. The intelligent monitoring data encryption and security sharing system according to claim 1, characterized in that: The security of the homomorphic encryption calculation is defined by the following formula: in, Indicates attacker The success probability, n is the key length, E K It is a homomorphic encryption operation.

7. The intelligent monitoring data encryption and security sharing system according to claim 1, characterized in that: The key update process of the dynamic key management system is described by the following formula: Among them, H(R(t),M i ) represents the combination of random number R(t) and data M i The hash value, K i (t) represents the data block M at time t i The key, K i (t+1) is the new key at time t+1.

8. The intelligent monitoring data encryption and security sharing system according to claim 1, characterized in that: The distributed key generation is described by the following formula: Among them, Q i is the key fragment obtained through quantum key distribution, S i is the key seed generated by the key management system, H is the hash function, For XOR operation, K i The generated encryption key.

Images