Encryption method and system for data transmission between information systems

Abstract

The invention discloses an encryption method and system for data transmission between information systems, and relates to the technical field, and the method comprises the following steps: obtaining to-be-transmitted data and a key of a client; based on the key, encrypting the to-be-transmitted data to obtain initial encrypted data; splitting the initial encrypted data into a plurality of unequal first data packets; splitting each first data packet into a plurality of equal second data packets; encrypting the first data packet by adopting a first method to obtain a first processing result; performing encryption processing on the second data packet by adopting a second method to obtain a second processing result; generating target encrypted data based on the first processing result and the second processing result; transmitting the target encrypted data to a preset server; and the preset server decrypts the target encrypted data. According to the invention, the security and complexity of data transmission encryption can be greatly improved.

Description

Technical Field

[0001] The present invention relates to the technical field of data encryption transmission, and in particular to an encryption method and system for data transmission between information systems. Background Art

[0002] In today's digital age, data transmission has become an integral part of the daily lives of businesses and individuals. With the popularity of the Internet and the increasing demand for information, the amount and speed of data transmission are also increasing. However, this also provides more attack methods for hackers and malware to steal sensitive information and compromise system security. Therefore, it is becoming increasingly important to protect the security of data during transmission. Data transmission encryption technology is a method used to protect the security of data during transmission. It encrypts data into an unreadable form to prevent unauthorized access and tampering.

[0003] In the invention patent with application number CN201810871462.9 and name of an encrypted data transmission method, an encrypted data transmission method is disclosed, including the following steps: S1, setting a message body with a byte number of Ni2 to be freely selected for transmission in Ni4 channels, using a timing counter to generate a random number Ni1, and randomly splitting the message body with a byte number of Ni2 to be transmitted into Ni3 segments of message body segmented data packets according to the random number Ni1; S2, using an encoder to randomly arrange the Ni3 segments of message body segmented data packets split in the previous step, and then dynamically encrypt and randomly transmit them through multiple channels; S3, message body restoration, the receiving end receives each segment of the message body segmented data packet and stores it and decrypts and restores the true value of the data through a decoder, that is, the segments of the message body segmented data are reorganized according to the packet sequence number and the out-of-order arrangement rules and spliced ​​into complete message body data in sequence.

[0004] Although the above patents randomly split the data to be transmitted into multiple data packets, and then sort the multiple data packets in a disordered order and dynamically encrypt (rolling code), and although the rules for each disordered order are not limited, in the process of cracking the encrypted data, only one disordered order rule needs to be cracked, and only one dynamic encryption (rolling code) is performed on the multiple data packets. If the disordered order rule is cracked by brute force, then the probability of the entire data packet being cracked is extremely high. Therefore, in terms of the overall solution, the security and complexity of data encryption still need to be optimized. Summary of the invention

[0005] In order to solve the shortcomings of the prior art, the present invention provides an encryption method for data transmission between information systems, the method comprising the following steps:

[0006] Get the client's data to be transmitted and key;

[0007] Based on the key, encrypting the data to be transmitted to obtain initial encrypted data;

[0008] Splitting the initial encrypted data into a plurality of unequal first data packets;

[0009] Splitting each first data packet into a plurality of equal second data packets;

[0010] Using a first method to encrypt the first data packet to obtain a first processing result;

[0011] Using a second method to encrypt the second data packet to obtain a second processing result;

[0012] generating target encrypted data based on the first processing result and the second processing result;

[0013] Transmitting the target encrypted data to a preset server;

[0014] The preset server decrypts the target encrypted data.

[0015] The present invention is implemented through the following technical scheme: the scheme first encrypts the data to be transmitted by a key to obtain initial encrypted data, then splits the initial encrypted data once to obtain a number of unequal first data packets, and then splits each of the split first data packets twice into a number of equal second data packets, and then uses a first method to encrypt the first data packet to obtain a first processing result, and uses a second method to encrypt the second data packet to obtain a second processing result. Through the first processing result and the second processing result, the target encrypted data is obtained, and finally the target encrypted data is transmitted to a preset server for decryption.

[0016] This solution uses a key to perform initial encryption on the data to be transmitted, and transmits the data in the form of data packets. The initial encrypted data is split twice, and the first split is to split the initial encrypted data into several unequal first data packets, and the second split is to split each first data packet into several equal second data packets, and then the first data packet and the second data packet are encrypted respectively. When the data is intercepted, the key needs to be cracked first, and then the encryption rules of all the second data packets need to be cracked. The second data packets are combined according to the amount of data, so all the second data packets need to be permuted and combined to obtain the final first data packet, and finally the encryption rules of all the first data packets are cracked. The entire cracking process is not only cumbersome but also labor-intensive, thus greatly ensuring the security and complexity of data transmission.

[0017] As an optional technical solution, the first method includes:

[0018] Determine a first implicit data in each first data packet, sort all the first data packets in a disordered order and obtain a corresponding first sorting rule;

[0019] The first implicit data in each first data packet is extracted, all the first implicit data are sorted to form a first implicit data chain based on the first sorting rule, the first implicit data chain is packaged into a first implicit data packet and randomly inserted into the sequence of the first data packet.

[0020] As an optional technical solution, the method further includes:

[0021] A first database is set on both the client and the preset server, and the first database is used to collect first sorting rules of all first data packets;

[0022] When all first data packets are subsequently sorted out of order, a first sorting rule is randomly obtained from the first database and recorded as a third sorting rule;

[0023] All first data packets are sorted based on the third sorting rule.

[0024] As an optional technical solution, the second method includes:

[0025] Determine a second implicit data in each second data packet, sort all the second data packets in a single first data packet out of order and obtain a corresponding second sorting rule;

[0026] Extract the second implicit data of each second data packet in the single first data packet, sort all the second implicit data based on the second sorting rule to form a second implicit data chain, pack the second implicit data chain into a second implicit data packet and randomly insert it into the sequence of the second data packets in the single first data packet.

[0027] As an optional technical solution, the method further includes:

[0028] A second database is set on both the client and the preset server, and the second database is used to collect second sorting rules of all second data packets;

[0029] When all second data packets in a single first data packet are subsequently sorted out of order, a second sorting rule is randomly obtained from the second database and recorded as a fourth sorting rule;

[0030] All second data packets in a single first data packet are sorted based on the fourth sorting rule.

[0031] As an optional technical solution, the preset server decrypts the target encrypted data including:

[0032] Obtaining the key, and performing initial decryption on the target encrypted data to obtain primary target decrypted data;

[0033] Based on the data capacity, the primary target decrypted data is screened, and second data packets with the same data capacity are placed in the same set;

[0034] Based on the second implicit data link, reorganize all second data packets in the corresponding set to obtain corresponding first data packets;

[0035] Based on the first implicit data chain, all first data packets are reassembled to obtain final target decrypted data.

[0036] As an optional technical solution, the method further includes:

[0037] The target encrypted data is transmitted using random multi-channels, with the number of channels being greater than or equal to 2.

[0038] As an optional technical solution, the key adopts an RSA key.

[0039] In order to solve the deficiencies of the prior art, the present invention also provides an encryption system for data transmission between information systems, the system comprising:

[0040] An acquisition unit, used to acquire the data to be transmitted and the key from the client;

[0041] An initial encryption unit, used to encrypt the data to be transmitted based on the key to obtain initial encrypted data;

[0042] A primary splitting unit, used for splitting the initial encrypted data into a plurality of first data packets of different sizes;

[0043] A secondary splitting unit, used for splitting each first data packet into a plurality of equal second data packets;

[0044] A first encryption unit, which uses a first method to encrypt the first data packet to obtain a first processing result;

[0045] A second encryption unit, using a second method to encrypt the second data packet to obtain a second processing result;

[0046] A generating unit, configured to generate target encrypted data based on the first processing result and the second processing result;

[0047] A transmission unit, used to transmit the target encrypted data to a preset server;

[0048] A decryption unit is used for the preset server to decrypt the target encrypted data.

[0049] One or more technical solutions provided by the present invention have at least the following technical effects or advantages:

[0050] This solution uses a key to perform initial encryption on the data to be transmitted, and transmits the data in the form of data packets. The initial encrypted data is split twice, and the first split is to split the initial encrypted data into several unequal first data packets, and the second split is to split each first data packet into several equal second data packets, and then the first data packet and the second data packet are encrypted respectively. When the data is intercepted, the key needs to be cracked first, and then the encryption rules of all the second data packets need to be cracked. The second data packets are combined according to the amount of data, so all the second data packets need to be permuted and combined to obtain the final first data packet, and finally the encryption rules of all the first data packets are cracked. The entire cracking process is not only cumbersome but also labor-intensive, thus greatly ensuring the security and complexity of data transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0051] The drawings described herein are used to provide a further understanding of the embodiments of the present invention, constitute a part of the present invention, and do not constitute a limitation on the embodiments of the present invention;

[0052] Figure 1 It is a schematic flow chart of an encryption method for data transmission between information systems in the present invention;

[0053] Figure 2 It is a schematic diagram of the composition of an encryption system for data transmission between information systems in the present invention. DETAILED DESCRIPTION

[0054] In order to more clearly understand the above-mentioned purpose, features and advantages of the present invention, the present invention is further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be noted that the embodiments of the present invention and the features in the embodiments can be combined with each other without conflict.

[0055] In the following description, many specific details are set forth to facilitate a full understanding of the present invention. However, the present invention may also be implemented in other ways different from those within the scope of this description. Therefore, the protection scope of the present invention is not limited to the specific embodiments disclosed below.

[0056] Embodiment 1

[0057] Please refer to Figure 1 , Figure 1 The present invention is a flowchart of an encryption method for data transmission between information systems, the method comprising the following steps:

[0058] Get the client's data to be transmitted and key;

[0059] Based on the key, encrypting the data to be transmitted to obtain initial encrypted data;

[0060] Splitting the initial encrypted data into a plurality of unequal first data packets;

[0061] Splitting each first data packet into a plurality of equal second data packets;

[0062] Using a first method to encrypt the first data packet to obtain a first processing result;

[0063] Using a second method to encrypt the second data packet to obtain a second processing result;

[0064] generating target encrypted data based on the first processing result and the second processing result;

[0065] Transmitting the target encrypted data to a preset server;

[0066] The preset server decrypts the target encrypted data.

[0067] The specific embodiments of the present invention are as follows:

[0068] The data to be transmitted obtained from the client is denoted as A. The key adopts the RSA key. The RSA key system is a cryptographic system that uses different encryption keys and decryption keys. It is computationally infeasible to derive the decryption key from the known encryption key. The initial encrypted data is initially encrypted by using the encryption key in the RSA key to initially encrypt the data to be transmitted.

[0069] The initial encrypted data is split into a plurality of first data packets of different sizes, and all the first data packets are encrypted using a first method to obtain a first processing result. The first method specifically includes:

[0070] Determine a first implicit data in each first data packet, sort all the first data packets in a disordered order and obtain a corresponding first sorting rule;

[0071] The first implicit data in each first data packet is extracted, all the first implicit data are sorted to form a first implicit data chain based on the first sorting rule, the first implicit data chain is packaged into a first implicit data packet and randomly inserted into the sequence of the first data packet.

[0072] Among them, if the data A to be transmitted is split into M unequal first data packets, the data volume of each first data packet is not equal, and then a first implicit data is determined in each first data packet. The implicit data can be determined by randomly marking a data in each first data packet as the first implicit data according to the data marking method, and the marking rules are only stored on the server. Then all the first data packets are sorted in a disordered order and the corresponding first sorting rules are obtained, the first implicit data in each first data packet is extracted, and based on the first sorting rules, all the first implicit data are sorted to form a first implicit data chain, and the first implicit data chain is packaged into a first implicit data packet and inserted into the sequence of the first data packet to play the role of confusing data.

[0073] In this example, a rule for determining the first implicit data is given, including:

[0074] All first data packets are sorted in ascending order according to the amount of data. The sorted first data packets are {B 1 , B 2 ,……,B M};

[0075] Get the first data packet B 1 The amount of data is B 1n , judge B 1n Is it an even number? If so, then (B 1n / 2+1) is the first data packet B 1 The first implicit data of 1n -1) / 2 as the first data packet B 1 The first implicit data;

[0076] Get the second data packet B 2 The amount of data is B 2n , if B 2n is an even number, then (B 1n / 2-1) is the first data packet B 2 The first implicit data of 2n is an odd number, then (B 1n +1) / 2 as the second data packet B 2 The first implicit data;

[0077] Get the third data packet B 3 The amount of data is B 3n , if B 3n is an even number, then (B 3n / 2+1) is the first data packet B 3 The first implicit data of 3n is an odd number, then (B 3n-1) / 2 as the second data packet B 3 The first implicit data;

[0078] …

[0079] Get the Mth data packet B M The amount of data is B Mn , if M is even, if B Mn is an even number, then (B Mn / 2-1) is the first data packet B M The first implicit data of Mn is an odd number, then (B Mn +1) / 2 as the second data packet B M The first implicit data of; if M is an odd number, if B Mn is an even number, then (B Mn / 2+1) is the first data packet B M The first implicit data of Mn is an odd number, then (B Mn -1) / 2 as the second data packet B M The first implicit data.

[0080] Among them, the first implicit data packet with an odd sorting number has the same first implicit data determination rule, and the first implicit data packet with an even sorting number has the same first implicit data determination rule. It should also be noted that the second implicit data determination rule in the second data packet is also the same as the first implicit data determination rule, which will not be elaborated on later.

[0081] Furthermore, this example also provides for reuse of all first sorting rules, including:

[0082] A first database is set on both the client and the preset server, and the first database is used to collect first sorting rules of all first data packets;

[0083] When all first data packets are subsequently sorted out of order, a first sorting rule is randomly obtained from the first database and recorded as a third sorting rule;

[0084] All first data packets are sorted based on the third sorting rule.

[0085] Each first data packet is split into a plurality of equal second data packets, and all the second data packets are encrypted using a second method to obtain a second processing result, the second method comprising:

[0086] Determine a second implicit data in each second data packet, sort all the second data packets in a single first data packet in a disordered order and obtain a corresponding second sorting rule;

[0087] Extract the second implicit data of each second data packet in the single first data packet, sort all the second implicit data based on the second sorting rule to form a second implicit data chain, pack the second implicit data chain into a second implicit data packet and randomly insert it into the sequence of the second data packets in the single first data packet.

[0088] Among them, if the M first data packets are all split equally, each first data packet is split into several equal second data packets; then for a single first data packet, a second implicit data is determined in each second data packet, all the second data packets are sorted in a disordered order and the corresponding second sorting rule is obtained, the second implicit data of each second data packet in the single first data packet is extracted, and based on the second sorting rule, all the second implicit data are sorted to form a second implicit data chain, and the second implicit data chain is packaged into a second implicit data packet and inserted into the first data packet as obfuscated data.

[0089] Furthermore, this example also provides for reuse of all second sorting rules, including:

[0090] A second database is set on both the client and the preset server, and the second database is used to collect second sorting rules of all second data packets;

[0091] When all second data packets in a single first data packet are subsequently sorted out of order, a second sorting rule is randomly obtained from the second database and recorded as a fourth sorting rule;

[0092] All second data packets in a single first data packet are sorted based on the fourth sorting rule.

[0093] The reason why the data encryption algorithm in this embodiment has security and complexity will be explained in conjunction with decrypting the target encrypted data. The preset server end decrypts the target encrypted data including:

[0094] Obtaining the key, and performing initial decryption on the target encrypted data to obtain primary target decrypted data;

[0095] Based on the data capacity, the primary target decrypted data is screened, and second data packets with the same data capacity are placed in the same set;

[0096] Based on the second implicit data link, reorganize all second data packets in the corresponding set to obtain corresponding first data packets;

[0097] Based on the first implicit data chain, all first data packets are reassembled to obtain final target decrypted data.

[0098] Furthermore, the method further comprises:

[0099] The target encrypted data is transmitted using random multi-channels, with the number of channels being greater than or equal to 2.

[0100] Among them, this embodiment first encrypts by the encryption key in the RSA key, and when decryption is required, it also needs to be decrypted by the decryption key in the RSA key first; then the initial encrypted data is split twice, the first time is to split it into several unequal first data packets, and the second time is to split each first data packet into equal second data packets, and the concept of implicit data is introduced for the first data packet and the second data packet. The determination rules of implicit data have also been explained in the embodiment, and then the generated first implicit data chain and the second implicit data chain also constitute obfuscated data, and a random multi-channel transmission method is adopted.

[0101] Therefore, when the target encrypted data is intercepted and cracked, first of all, since random multi-channel transmission is adopted, the possibility of the complete data being intercepted is greatly reduced. When all the data are intercepted, the cracker first needs to screen the obfuscated data, and the obfuscated data is the data packet packaged by the first implicit data chain and the second implicit data chain. The cracker needs to spend a lot of time to screen the obfuscated data. When the screening is completed, since all the target encrypted data are transmitted in several second data packets at this time, the cracker needs to screen all the second data packets, and screen the second data packets belonging to the same first data packet. After the screening is completed, all the second data packets need to be arranged and combined to obtain the corresponding first data packets, and then all the first data packets need to be arranged and combined to crack the target encrypted data. It can be seen that if the target encrypted data is to be cracked by brute force, under the premise of not knowing the secondary splitting rules, secondary sorting rules and implicit data determination rules, the required workload and time are exponentially increasing, thus greatly ensuring the security of the data to be transmitted.

[0102] Embodiment 2

[0103] Please refer to Figure 2 , Figure 2 This is a schematic diagram of the composition of an encryption system for data transmission between information systems in the present invention, the system comprising:

[0104] An acquisition unit, used to acquire the data to be transmitted and the key from the client;

[0105] An initial encryption unit, used to encrypt the data to be transmitted based on the key to obtain initial encrypted data;

[0106] A primary splitting unit, used for splitting the initial encrypted data into a plurality of first data packets of different sizes;

[0107] A secondary splitting unit, used for splitting each first data packet into a plurality of equal second data packets;

[0108] A first encryption unit, which uses a first method to encrypt the first data packet to obtain a first processing result;

[0109] A second encryption unit, using a second method to encrypt the second data packet to obtain a second processing result;

[0110] A generating unit, configured to generate target encrypted data based on the first processing result and the second processing result;

[0111] The transmission unit is used to transmit the target encrypted data to a preset server.

[0112] Although the preferred embodiments of the present invention have been described, those skilled in the art may make other changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the present invention.

[0113] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. A method for encrypting data transmission between information systems, characterized in that: The method comprises the following steps: Get the client's data to be transmitted and key; Based on the key, encrypting the data to be transmitted to obtain initial encrypted data; Splitting the initial encrypted data into a plurality of unequal first data packets; Splitting each first data packet into a plurality of equal second data packets; Using a first method to encrypt the first data packet to obtain a first processing result; Using a second method to encrypt the second data packet to obtain a second processing result; generating target encrypted data based on the first processing result and the second processing result; Transmitting the target encrypted data to a preset server; The preset server decrypts the target encrypted data.

2. The encryption method for data transmission between information systems according to claim 1, characterized in that: The first method comprises: Determine a first implicit data in each first data packet, sort all the first data packets in a disordered order and obtain a corresponding first sorting rule; The first implicit data in each first data packet is extracted, all the first implicit data are sorted to form a first implicit data chain based on the first sorting rule, the first implicit data chain is packaged into a first implicit data packet and randomly inserted into the sequence of the first data packet.

3. The encryption method for data transmission between information systems according to claim 2, characterized in that: The method further comprises: A first database is set on both the client and the preset server, and the first database is used to collect first sorting rules of all first data packets; When all first data packets are subsequently sorted out of order, a first sorting rule is randomly obtained from the first database and recorded as a third sorting rule; All first data packets are sorted based on the third sorting rule.

4. The encryption method for data transmission between information systems according to claim 2, characterized in that: The second method comprises: Determine a second implicit data in each second data packet, sort all the second data packets in a single first data packet out of order and obtain a corresponding second sorting rule; Extract the second implicit data of each second data packet in the single first data packet, sort all the second implicit data based on the second sorting rule to form a second implicit data chain, pack the second implicit data chain into a second implicit data packet and randomly insert it into the sequence of the second data packets in the single first data packet.

5. The encryption method for data transmission between information systems according to claim 4, characterized in that: The method further comprises: A second database is set on both the client and the preset server, and the second database is used to collect a second sorting rule of all second data packets; When all second data packets in a single first data packet are subsequently sorted out of order, a second sorting rule is randomly obtained from the second database and recorded as a fourth sorting rule; All second data packets in a single first data packet are sorted based on the fourth sorting rule.

6. The encryption method for data transmission between information systems according to claim 4, characterized in that: The preset server end decrypting the target encrypted data includes: Obtaining the key, and performing initial decryption on the target encrypted data to obtain primary target decrypted data; Based on the data capacity, the primary target decrypted data is screened, and second data packets with the same data capacity are placed in the same set; Based on the second implicit data link, reorganize all second data packets in the corresponding set to obtain corresponding first data packets; Based on the first implicit data chain, all first data packets are reassembled to obtain final target decrypted data.

7. The encryption method for data transmission between information systems according to claim 1, characterized in that: The method further comprises: The target encrypted data is transmitted using random multi-channels, with the number of channels being greater than or equal to 2.

8. The encryption method for data transmission between information systems according to claim 1, characterized in that: The key adopts an RSA key.

9. An encryption system for data transmission between information systems, characterized in that: The system comprises: An acquisition unit, used to acquire the data to be transmitted and the key from the client; An initial encryption unit, used to encrypt the data to be transmitted based on the key to obtain initial encrypted data; A primary splitting unit, used for splitting the initial encrypted data into a plurality of first data packets of different sizes; A secondary splitting unit, used for splitting each first data packet into a plurality of equal second data packets; A first encryption unit, which uses a first method to encrypt the first data packet to obtain a first processing result; A second encryption unit, using a second method to encrypt the second data packet to obtain a second processing result; A generating unit, configured to generate target encrypted data based on the first processing result and the second processing result; A transmission unit, used to transmit the target encrypted data to a preset server; A decryption unit is used for the preset server to decrypt the target encrypted data.

Images