Big data network security data transmission encryption and decryption method

Abstract

The invention discloses a big data network security data transmission encryption and decryption method. The method is characterized by comprising the following steps: S1, receiving an encryption and decryption demand; s2, data preprocessing; s3, data integration; s4, encrypting by the sending end; and S5, decrypting by the receiving end. Compared with the prior art, the structure has the advantages that the structure is suitable for a multi-purpose preprocessing method and an encryption and decryption method, sensitive data areas are distinguished, sensitive data processing is more flexible, data can be preprocessed before data encryption and decryption, and therefore the data size needing to be processed for encryption and decryption is reduced.

Description

Technical Field

[0001] The present invention relates to the technical field of secure data transmission, and in particular to a method for encryption and decryption of large data network data transmission. Background Art

[0002] Data security is an important issue involved in the process of information storage, processing and transmission. If information such as passwords, important intelligence, and private letters are stored and transmitted in unencrypted plain text, their contents can be easily read by others after being stolen, resulting in information leakage. With the development of information technology, information security protection has received more and more attention, and encryption and decryption functions have become an important part of electronic information systems.

[0003] In order to achieve data security and reliability, many encryption methods have been proposed. Common encryption algorithms can be divided into three categories, namely symmetric encryption algorithms, asymmetric encryption algorithms and hash algorithms. Symmetric encryption algorithms refer to encryption algorithms that use the same key for encryption and decryption. Their characteristics are high encryption and decryption speed and difficulty in cracking when using long keys. Asymmetric encryption refers to encryption algorithms that use different keys for encryption and decryption, also known as public-private key encryption. Suppose two users want to encrypt and exchange data, and the two parties exchange public keys. When using, one party encrypts with the other party's public key, and the other party can decrypt with its own private key. The special thing about the hash algorithm is that it is a one-way algorithm. Users can use the hash algorithm to generate a unique hash value of a specific length for the target information, but cannot regain the target information through this hash value. Therefore, the hash algorithm is often used in irreversible password storage, information integrity verification, etc.

[0004] Most existing encryption systems directly encrypt the original data, ignoring the redundant information in the original data. Taking the symmetric encryption algorithm as an example, this type of algorithm encrypts the data to be encrypted in units of a certain data length. In addition, in high-speed data transmission, when the amount of data to be transmitted is large, if the original data is directly transmitted, it will occupy a large bandwidth. If the original data is compressed before transmission, the amount of data to be transmitted will be reduced, thereby reducing the time of data transmission. Summary of the invention

[0005] The technical problem to be solved by the present invention is to overcome the above technical defects and provide a method for encrypting and decrypting data transmission over a large data network.

[0006] In order to solve the above problems, the technical solution of the present invention is: a method for encrypting and decrypting data transmission on a large data network, comprising the following steps:

[0007] S1 receives the encryption and decryption request and selects the data to be transmitted based on the intervening data source;

[0008] S2 data preprocessing, obtaining data from the target system, including data centers and backup modules, determining basic information in the data, and classifying and encrypting the data for storage;

[0009] S3 data integration, integrating document information and image information in basic information;

[0010] S4 sender encryption, the sender encryption unit is used to encrypt data to ensure data security;

[0011] S5 receiving end decryption, the receiving end decryption unit is used to decrypt the data after receiving the encrypted data at the receiving end, so as to convert the data from ciphertext to plaintext.

[0012] Furthermore, in S1, according to the data to be transmitted, the target system data is requested from the server and the data is written.

[0013] Furthermore, the S2 pre-processing queue generates a data block chain for the content in the encryption and decryption request, and generates a corresponding data processing directed acyclic graph according to the data block chain.

[0014] Furthermore, in S2, it is determined whether the data block needs to be encrypted and what encryption method is used according to the set rules or user needs.

[0015] Furthermore, in S3, it is determined whether there are sensitive words or sensitive images in the document information and the image information for analysis, and it is determined whether to process the sensitive words or sensitive images separately according to user needs.

[0016] Furthermore, in S4, the data sending end encrypts the data to be transmitted using the encryption key, and sends the generated encrypted data to the data receiving end.

[0017] Furthermore, in S5, when the received encrypted data authentication is passed, the data ciphertext is decrypted by the AES algorithm, the data ciphertext decrypted by the AES algorithm is reversed serialized to obtain the data plaintext corresponding to the data ciphertext, and the data plaintext is output.

[0018] Furthermore, in S5, the post-processing unit is configured to restore the data output by the decryption unit and decompress the compressed data after decryption.

[0019] The advantages of the present invention compared with the existing technology are: the structure is suitable for multiple preprocessing methods and encryption and decryption methods, distinguishes sensitive data areas, makes sensitive data processing more flexible, and can preprocess data before encryption and decryption, thereby reducing the amount of data that needs to be processed for encryption and decryption. DETAILED DESCRIPTION

[0020] The specific implementation of the present invention is further described below in conjunction with the embodiments, wherein the same components are represented by the same embodiment numbers.

[0021] It should be noted that the words "front", "rear", "left", "right", "up" and "down" used in the following description refer to directions in the embodiment, and the words "inside" and "outside" refer to directions toward or away from the geometric center of a specific component, respectively.

[0022] In order to make the contents of the present invention more clearly understood, the technical solutions in the embodiments of the present invention will be clearly and completely described below in combination with the embodiments in the embodiments of the present invention.

[0023] A method for encrypting and decrypting data transmission on a large data network, characterized in that it comprises the following steps:

[0024] S1 receives the encryption and decryption request and selects the data to be transmitted based on the intervening data source;

[0025] According to the data to be transmitted, request the target system data from the server and write the data

[0026] S2 data preprocessing, obtaining data from the target system, including data centers and backup modules, determining basic information in the data, and classifying and encrypting the data for storage;

[0027] In the preprocessing queue, a data block chain is generated for the content in the encryption and decryption request, and a corresponding data processing directed acyclic graph is generated according to the data block chain;

[0028] In the encryption process, it is determined whether the data block needs to be encrypted and what encryption method should be used according to the set rules or user needs;

[0029] S3 data integration, integrating document information and image information in basic information;

[0030] Determine whether there are sensitive words or sensitive images in the document information and image information, and analyze them, and decide whether to process the sensitive words or sensitive images separately according to user needs;

[0031] S4 sender encryption, the sender encryption unit is used to encrypt data to ensure data security;

[0032] The data sending end encrypts the data to be transmitted using the encryption key, and sends the generated encrypted data to the data receiving end;

[0033] S5 receiving end decryption, a decryption unit at the receiving end, which is used to decrypt the data after receiving the encrypted data at the receiving end, so that the data is converted from ciphertext to plaintext;

[0034] When the received encrypted data passes the authentication, the data ciphertext is decrypted by the AES algorithm, the data ciphertext decrypted by the AES algorithm is reversed serialized to obtain the data plaintext corresponding to the data ciphertext, and the data plaintext is output;

[0035] The post-processing unit is set to restore the data output by the decryption unit and decompress the compressed data after decryption.

[0036] The present invention and its embodiments are described above, and such description is not restrictive. What is shown in the embodiment is only one of the embodiments of the present invention, and the actual structure is not limited thereto. In short, if ordinary technicians in the field are inspired by it, without departing from the purpose of the invention, they can design a structure and embodiment similar to the technical solution without creativity, which should belong to the protection scope of the present invention.

Claims

1. A method for encrypting and decrypting data transmission on a large data network, characterized in that: The following steps are involved: S1 receives the encryption and decryption request and selects the data to be transmitted based on the intervening data source; S2 data preprocessing, obtaining data from the target system, including data centers and backup modules, determining basic information in the data, and classifying and encrypting the data for storage; S3 data integration, integrating document information and image information in basic information; S4 sender encryption, the sender encryption unit is used to encrypt data to ensure data security; S5 receiving end decryption, the receiving end decryption unit is used to decrypt the data after receiving the encrypted data at the receiving end, so as to convert the data from ciphertext to plaintext.

2. According to claim 1, a method for encrypting and decrypting data transmission over a large data network, characterized in that: In S1, according to the data to be transmitted, the target system data is requested from the server and the data is written.

3. According to claim 1, a method for encrypting and decrypting data transmission over a large data network, characterized in that: The S2 pre-processing queue generates a data block chain for the content in the encryption and decryption request, and generates a corresponding data processing directed acyclic graph according to the data block chain.

4. The method for encrypting and decrypting data transmission over a large data network according to claim 1, characterized in that: In S2, it is determined whether the data block needs to be encrypted and what encryption method is used according to the set rules or user needs.

5. The method for encrypting and decrypting data transmission over a large data network according to claim 1, characterized in that: In S3, it is determined whether there are sensitive words or sensitive images in the document information and the image information for analysis, and it is determined whether to process the sensitive words or sensitive images separately according to user needs.

6. The method for encrypting and decrypting data transmission over a large data network according to claim 1, characterized in that: In S4, the data sending end encrypts the data to be transmitted using the encryption key, and sends the generated encrypted data to the data receiving end.

7. The method for encrypting and decrypting data transmission over a large data network according to claim 1, characterized in that: In S5, when the received encrypted data authentication is passed, the data ciphertext is decrypted by the AES algorithm, the data ciphertext decrypted by the AES algorithm is reversed serialized to obtain the data plaintext corresponding to the data ciphertext, and the data plaintext is output.

8. A method for encrypting and decrypting data transmission over a large data network according to claim 7, characterized in that: In S5, the post-processing unit is set to restore the data output by the decryption unit and decompress the compressed data after decryption.